last executing test programs: 4.026812581s ago: executing program 0 (id=2353): write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1", 0xe2) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0, 0xb00}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @multicast}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010100}}) 3.886001476s ago: executing program 0 (id=2354): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x4c}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effff"], 0x6f4}}, 0x0) socket(0x40000000015, 0x5, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = getpid() syz_pidfd_open(r5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffdffffffffff, 0xfffffffffffffff9, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x85}, &(0x7f0000000000)={0x1d, 0x26d7, 0x7ff, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x9}, 0x0, 0x0, 0x0) 3.727772501s ago: executing program 0 (id=2357): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x40}}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, 0x0, 0x1, 0x70bd28, 0x25dffbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40050}, 0xc4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x8, 0x0, 0x0, {0x5, 0x0, 0x5, 0x80000001, 0x0, 0x1, 0x9e9, 0x0, 0xb877, 0xa000, 0x7893b06e, 0xffffffffffffffff, 0xee01, 0x3d, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.661847371s ago: executing program 0 (id=2359): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) syz_emit_ethernet(0x1c9, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x193, 0x3a, 0xff, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf8, 0xfffffffc, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0xb, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0de"}]}}}}}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400005}, 0x94) 2.954537855s ago: executing program 2 (id=2366): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff02) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r5}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)={r5}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@deltfilter={0x43c, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0x3, 0xffe0}, {0x9}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0xffffff01, 0x9, 0x8000, 0x10001, 0x3, 0x80000000, 0xb4cb, 0x5, 0x2, 0xfffffeff, 0x3ff, 0x5, 0x2, 0x1b92, 0x8, 0x5, 0x6d58, 0x81, 0x6, 0x0, 0x6f, 0x7f, 0x3, 0x80, 0x7, 0x7, 0x12fd96d2, 0xfffff000, 0x40, 0x7, 0xa, 0x2, 0x3, 0x5, 0x6, 0x401, 0x1000, 0x0, 0xd, 0x6, 0xa, 0x800, 0x8, 0x7, 0x8, 0xfffffffa, 0x20000, 0x8, 0x6, 0x80, 0x1, 0x8, 0x73, 0x800, 0x351, 0x70b0, 0x1, 0x3, 0xb, 0x51d22a98, 0x0, 0x3, 0x8000, 0xf, 0xfffff81f, 0x3, 0x7, 0x8, 0x3, 0x400, 0x8001, 0xfffffffa, 0x1000, 0x293, 0x7, 0x4, 0xb, 0x9, 0x3, 0x2, 0x1, 0x200, 0x7, 0x80000001, 0x4, 0x10, 0x7, 0x7, 0x3a, 0xfffffffd, 0x4, 0x3, 0xd, 0xebf, 0x100, 0x8, 0x2, 0xe, 0x401, 0x1, 0xfffff801, 0x4, 0x7fffffff, 0x8, 0x80000001, 0x10, 0xffffffff, 0x800, 0x9, 0x3, 0x80, 0x8, 0x3, 0x396e, 0x200, 0xffffffff, 0x10, 0x81, 0x0, 0x80000001, 0x4, 0xb, 0x31, 0x6, 0x5, 0x316, 0x4, 0xc880eca, 0x80000000, 0x9, 0x401, 0xf, 0x3, 0xc, 0x0, 0x924, 0x5, 0x8001, 0x400000, 0x1ff, 0x2, 0x3, 0x7fffffff, 0x6, 0x2, 0x3, 0x25a, 0x6a, 0x6, 0x9, 0x9, 0xb4, 0x217, 0x8f, 0x9, 0x2c, 0x2, 0x9, 0x7, 0x9, 0x100, 0x4, 0x6, 0x7, 0x7, 0x3, 0x6, 0x0, 0x7fffffff, 0x0, 0x9, 0x2, 0xb6c, 0x4, 0x8, 0x3, 0x401, 0x3, 0x0, 0xa1, 0x7f, 0x80000001, 0x7, 0x9, 0x800, 0x7, 0x1000, 0xe9, 0x3, 0x6, 0xffffffff, 0x3, 0xae9, 0xba3, 0x6, 0x3, 0xac, 0x8001, 0x2c562366, 0x9, 0xfffffff7, 0x1, 0x3, 0x657, 0x4196, 0x0, 0x8, 0x0, 0xb, 0x3ff, 0x7, 0x5, 0x2, 0x3, 0x41, 0xfffffffe, 0x8, 0x0, 0x8, 0x269, 0xfffffffc, 0xffff70e1, 0x40000000, 0x8, 0x7, 0x1000, 0x4, 0x1, 0x80, 0x8000000, 0x0, 0x7f, 0x67, 0x6, 0xf, 0xbfca, 0x2, 0x8, 0x1, 0x4, 0x66a7633e, 0x9e4, 0x10000, 0x9, 0x3, 0x4, 0x1, 0x3, 0xad2, 0x7, 0x80, 0x2, 0x9, 0x39, 0x10000]}]}]}}]}, 0x43c}}, 0x0) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2}}], 0x1, 0x60, 0x0) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000001c0)) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000080)=""/184, 0x2000, 0x0, 0x3, 0x2}, 0x20) 2.510970376s ago: executing program 2 (id=2370): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="096b6aaff82f0368a5187f36823c49ca8a4b57e0616a174f77faf551a61db1248205000000cc0cdd4adc660c75bdc8501c4eebc17b14c779d96971e6b4362cb845a469b5d80725854b66591d3edbc07677b12f8609", @ANYRES16=0x0, @ANYBLOB="040025bd7000fedbdf250800000008002c00090000000500330002000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x555cc0, 0x0) socket(0x2b, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000240)='mountinfo\x00') pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r5, r4, 0x0, 0x7ffffffd) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8084) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000080)) r8 = syz_open_dev$radio(&(0x7f00000003c0), 0x3, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0205648, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000000c0)={@local, 0x1}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff00092406050602010000", @ANYRES8=r9, @ANYBLOB="07b0cf7e2c89cc"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) r10 = socket$qrtr(0x2a, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="6c86d5d84931644763038a045ae7f7dc59382e65a70fd222d4f3cfaf5c010078914181511fa07272681d696e04d5a20fc1"], 0xfed5) sendmsg$sock(r10, &(0x7f0000001540)={&(0x7f0000000500)=@pppoe={0x2a, 0x0, {0x0, @local, 'nicvf0\x00'}}, 0x80, 0x0}, 0x0) 2.49608242s ago: executing program 3 (id=2371): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x30, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}]}, 0x30}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = syz_io_uring_setup(0x320, &(0x7f0000001280)={0x0, 0xb70f, 0x800, 0x0, 0x1}, &(0x7f0000000000), &(0x7f0000001180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f00000024c0)={0x1, 0x0, &(0x7f0000002400)=[{&(0x7f0000000040)=""/9, 0x9}, {0x0}], &(0x7f0000002440)=[0x9, 0x2], 0x2}, 0x20) write$tun(r2, &(0x7f0000001140)={@val={0x0, 0xc}, @void, @x25={0x2, 0x4, 0xb, "6ea4dfeaa7f1f67e722fbb95d372daf5719cff477e83a2bf9e6cd9725a85d8615248d4a0"}}, 0x2b) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x1c, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xf3d8, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) close(r2) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0xa}, 0x7, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="232b337c2b36687a0c210abf0b850f47aea7c6696d36acf565c3"], 0x24}, 0x1, 0x0, 0x0, 0x4004008}, 0x4040000) 2.288048826s ago: executing program 4 (id=2374): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x2a, 0x0, &(0x7f0000000000)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x6, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0011023, 0x0, 0x7000000}]}) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x1, @private2, 0xc}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000500)={r9, @in={{0x2, 0x0, @empty}}, 0x6}, 0x90) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESDEC=r3, @ANYRES32=r5, @ANYRES8=r3, @ANYRESHEX=r4], 0x28}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x80054) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731315806f1301"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.203374409s ago: executing program 3 (id=2375): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000540)={0x4, 0x7, 0x7, {0x1, @pix={0x4, 0x2000000, 0x30324c4a, 0x5, 0x2, 0x2, 0x9, 0x6, 0x0, 0x3}}, 0xfffffe00}) 2.059704484s ago: executing program 0 (id=2376): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x1}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 2.040213247s ago: executing program 3 (id=2377): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x0, 0x0}) semop(0x0, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) 1.850772965s ago: executing program 3 (id=2379): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x2, 0x10000, 0x7fff, 0x6012, 0xffffff1a, 0xc, 0xcbf, 0x9}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x7}, {}, {0x5, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044801}, 0x4000) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)={0x4, 0x8000, 0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.691880613s ago: executing program 3 (id=2380): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x48000) close(r4) 1.655411051s ago: executing program 3 (id=2382): syz_emit_ethernet(0x1034, &(0x7f0000001000)={@local, @empty, @val={@void, {0x8100, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @generic={0x0, 0x6, '@x\x00', 0xffa, 0x60, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, {[@srh={0x11, 0xe, 0x4, 0x7, 0x3, 0x50, 0x3, [@dev={0xfe, 0x80, '\x00', 0x36}, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty]}], "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"}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$unix(r1, 0x0, 0x0, 0x40050) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x4000) sendmsg$rds(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000000200)=""/24, 0x18}, {&(0x7f0000000280)=""/53, 0x35}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/255, 0xff}, {0x0}, {&(0x7f0000001980)=""/137, 0x89}], 0x7, &(0x7f0000002dc0), 0x0, 0x20010}, 0xc8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_setup(0x178b, &(0x7f0000000240)={0x0, 0x8133, 0x40, 0x2, 0x16d}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0x5) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r7 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0x40, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x20780, 0x20, '\x00', 0x0, @fallback=0x2f, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.44249704s ago: executing program 1 (id=2385): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x30, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}]}, 0x30}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = syz_io_uring_setup(0x320, &(0x7f0000001280)={0x0, 0xb70f, 0x800, 0x0, 0x1}, &(0x7f0000000000), &(0x7f0000001180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f00000024c0)={0x1, 0x0, &(0x7f0000002400)=[{&(0x7f0000000040)=""/9, 0x9}, {0x0}], &(0x7f0000002440)=[0x9, 0x2], 0x2}, 0x20) write$tun(r2, &(0x7f0000001140)={@val={0x0, 0xc}, @void, @x25={0x2, 0x4, 0xb, "6ea4dfeaa7f1f67e722fbb95d372daf5719cff477e83a2bf9e6cd9725a85d8615248d4a0"}}, 0x2b) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x1c, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xf3d8, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) close(r2) r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0xa}, 0x7, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000180)={0x80, 0x0, 'client0\x00', 0x1, "090f050540000bb5", "e5dbc741536b0e2fbb12e9338ec8dcb3e07c903fc30e8a11d477e3fb04eb2f74", 0x3, 0xfffffff6}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="232b337c2b36687a0c210abf0b850f47aea7c6696d36acf565c3"], 0x24}, 0x1, 0x0, 0x0, 0x4004008}, 0x4040000) 1.357731988s ago: executing program 1 (id=2386): r0 = socket$inet6(0xa, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0xdf, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00'], 0x28, 0x7ffffff7}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x627e, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000031c0)=[@rthdr={{0x18, 0x29, 0x39, {0x2f, 0x0, 0x1, 0x7}}}, @hopopts={{0x18, 0x29, 0x36, {0x3c}}}], 0x30}}], 0x2, 0x40440c0) 1.351275799s ago: executing program 4 (id=2387): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mreq(r0, 0x29, 0x8, &(0x7f0000001d80)={@ipv4={""/10, ""/2, @multicast1}, 0x0}, &(0x7f0000001dc0)=0x14) sendmmsg(r0, &(0x7f0000002300)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e22, @rand_addr=0x64010101}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1, 0x0, 0xffffffffffffff30}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES32=r0], 0x20}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000002440)="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"}, {&(0x7f00000002c0)="e975ed"}, {&(0x7f0000000340)="a2723f557a1c0aaff1108224bdfdb3a039f7fef1a55d48214432ad693f93b17fa008874d7392ff1ba0f6e3af05dd8789e41187abcc5bdc8c7e5922f3790ac29243c08d11ec33da09add8961804a35662d3a65f3141cd494b86"}, {&(0x7f00000003c0)="0ef01ed98e675a3cb25784189c97a7a15d300d363fbf47832727d5b0fb5d8d48f4f14be10709bcb9e8bf07251f25288dc10a628c6325ead9b676764c9891f91d3afc0940b760"}]}}, {{&(0x7f00000005c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000640)="08dd56dd6389534c6f909b7bb2c3b0e1cda6a1c2af8663ca84efdf480e2dd50704675cefeea85b795acf0f43738c4bacdce1bbfbb8e0556bc160def5a07f6bfc750724c435ada91d3d78a529f5fa9291c0e03dd1a37c328fd375a79e492e252d9d4371e915d9b0d2c017220f48f80f68afeeafd1db7177fcff0af6e092e75bb627bf35c0036c797bd60f2efddbd7f23978d964afbf1bbd888d38ca6c80f57a9577"}, {&(0x7f0000000700)="608172b64560aef6e2a677efa1662699111f7ff08389151521f5eeef70b9b70bbb9efe6277110fd996caf0ceb7e029259c9ab967e22a91208505e9613601c9e39b2e211de1e393f15e716b61de79e4bc7f7dfe3bea029fb57a9f3af740e5"}, {&(0x7f0000000780)="2f529c6fba4ce331207a200c3b9ad10fa51def06268e0cfe544438a1645a6232b23fe581f1942adb3e9fadd0bc7bd807f919a2c6409eea9b234dc7165f4ee8881a7d9305dce7e97c553807cf1449a9f39f3d4fa85d2abe"}, {&(0x7f0000000800)="22d9cfea845920f38cb82b777977ffaa3cb193ea03c8a61b1061dc331b517c8037b2c74a5a1056fe573724ce68c2b61104319bb219253877994f8c5ef11bb57e5318aadc4d24adb020e230aa09c1fb12854468f5de831d7f26567f58ade78804c010e699d30351b3307024919c629488ed0a11af9bbbc17b85ec5c2296846226cd5b36394c1915a47bfa25eb1e327138c46be4da5ffb9fd2777fb589f222a03eb4"}], 0x0, &(0x7f0000002580)=[{0x0, 0x88, 0x3, "be10dc7d7051b56060d2ae799466594850d107982819049669d00d304ac5e7134c5dc18a82eff3bda171e4167e0391b415f9684d74f642f623e27ea023f168706a0d8e0f25769685426f208b45540cf741e525f1ad3246ebade044d9dc82813a6ec87a929a0abceb787c987486a64d06aea40e83d8ab231f76df7020a6a89c285d196dc3033b65c1c0b7151a6ee82eb2860b5660e8c7ce55b512f4b554ebae463f34567c80ca573d839589cef438e728afc8b5510ab734f03f3e798fa0a5f7f0b3afc0b775447b4db23b66042484be4bafad40d1b308343c52941a59fd6e769c9ea6bfe5f967d69e32b3c5926b14ac06afa8c6433be1"}, {0x0, 0x104, 0x6, "e01bd2ff5697817ff2a62a8d8af0e01c6777c7e8380f4f18d871e1880f5e5727ff30fa2d35c2d26c7894612eb550af484a4e27a426b110109e8504d675f06ff2938fde24cdf2f57ee02582341ac22b5fb050d63e6655c932f5fdbb04bd65cf2c047d80f701525036f1d36e50d731c7b9dcd322ddc44c49a16c6910c24fc446fad66b1fe78bd2c5c6e6b67e5bbccaf563"}, {0x0, 0x29, 0xfffffffb, "ff97c42135829b55ff5387041efe133cb386ad8dd01f0f1edad5a0bde3f5af0c0246f3e223da43b2b91ab1d344511c7195e01c252fa27bf91ac8cb43d385d709cfc7da95c37c4b6059f6eb7fcd8cdef30c75b2eccab449820c0aa617f680625ece546626314a189da4c6586095ac9730db92f49e5aa0c6b5a503a74ab1ef1637c7f01e78ce26782762a3f98bd5043494780c72852483356a46464a674e679e"}, {0x0, 0x113, 0x1ff, "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"}, {0x0, 0x103, 0x723, "baf9755f3e5fbffb71492c5bba6a224d365ae6156ae23980c3966070095608bafd427b60bffa365d741688decb3855d1057023a9d5600dc0720a70c371537894b29c9e1381f29e8ebf50a6a87750847e8e0711dc08e1b2b1bb8397eabe5ca8461bfc4cf9abe4d5035d9cdf5a0b535c862edefb82738a32e32e1990afa1e793a58c9288cf889a7f56406840061577dc803a31052ebc17090b9f752d362b4e0b6d713e3572f6407a6b3f06db67b92ba3d33a8f17707bc361c859fa2137d338f7adb768c84b1257ebeb76ae593928a1120d310a72f6c9cc"}, {0x0, 0x1, 0x10001}, {0x0, 0x0, 0x400, "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"}, {0x0, 0x116, 0x88}]}}, {{&(0x7f0000001e00)=@xdp={0x2c, 0x1c69ff49eafde629, r1, 0x1b}, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001e80)="d85a4098d9061356e066d94b792557e1f7927bb029b579f91419278317ffb0014959df780fbe5a1afe6900e7c107e8329d915fb82d6f6ba12b08b4ce386bd7d4cb42"}, {&(0x7f0000001f00)="49b0634dad24d596cdc4998ecd83acae406b3727ac1af19ba6f4fc4830c60ea9f5d7a58f56bd1ea95b553a815272b5176141b96ad4d0ef573fea8a5c8bd729c2ee05ae8b8031bbe5f24c4c1a4a3b4553da30afefa899df0319b04f03f40835b02c819450cbe6b2e5f15df9281cd2c16034b412f917875c3302b3d6916f8e0331afd8866741766e0054c1b8a0dff7eaf3e5d29f75271c6947609e2d0ecca536c3895a8070b232128d6a5f9d035681653f3b11993f9608539a86197caa2917ee5e8c0c79cf5dabdeb89097aa0ca5b189a27faef3ac8d9c224a4ee24e101c3a"}, {&(0x7f0000002000)="3f74a0442d84f713c65c11286b988fe87c2abdc4585108b1389f4fc0b73ac2a34a96f81cc313a5d9d4ba3c76f5959669967ebaafc54fd51ccd139e47f362b5ff61d23bd90f6b1b612303b3c44e29126433dd3ce2ab23c12f066349352fa7f742196a5262524251cbcccdfff8f8d6adc98148b013e0a599691737974735e44f1af886c12646fd589fa2e6e0b429e78477f0a0fb9e6fd0e3779d4f5d1cc12892552d356a53bb2ba9aade4c0f2c722d6237c30834a49962a970662a41"}], 0x0, &(0x7f0000002100)=[{0x0, 0x3, 0x1, "d9fdced20a9b6a4673031ff13de0889b89a194408ef73d787ea18fed8c571a5e86deded614bd23ce9b43745f99ebf9222f0bc88705a7"}, {0x0, 0x112, 0x15, "72c703de9708cc259a597cae0ead88f153da3a63a776a239490acb52a795ec024b062fc9a44938591cac157d0fcf9ca9c076e493fb3e752dfec4a51af71d172ef876ec625c276acc636c5c923c5ee76c7e31473cc96d2aaa61a4f4a9ed5c1762e3457207318bad299f970f348ed6205d2dcff5d4e876725d03a6051bf4e325bb511f33db17e1a44d9bea16a6c3d3dc5c1d7ff6b8bc182b39b21ea2d0d2d989d30e970a3a42136b93"}, {0x0, 0x10b, 0x56, "5f7f55f6bd81757c79cc28b46705c82aed12527deebba26975cf625b911f9ef04d5037d1fc470d0fa2e9cf3db48d581654707b3178205c1b5a4b0e5f6546188a2b24225cfc143f91d6ec0802aa3eae2110ab1f2932733b1f1265451829e27936f024722bc29d"}, {0x0, 0x107, 0x7, "b641fcbcb6f334e3400522f87c1a64daa85cd9cf042952c706b24e4b9d6c0480b6458d587b0ee1e05987d957a299ba19e6543a31297594c82bcb4664973bf69f8ed11f"}]}}], 0x2, 0xcc0c4) 1.307585452s ago: executing program 0 (id=2388): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x200, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "41f8a9964536fd73455e1b6b80faff3ddba2aa725f38b99d741e1bb914f66e6750"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffc50}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "faf90291cdd049eab74c17ea8187ffb35d18dd5a78866982b5"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x401, @private2, 0x513c6316}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'netpci0\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fff}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @private0, 0x54}}}}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) splice(r2, 0x0, r3, 0x0, 0x6, 0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040084}, 0x4810) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[], 0x134}}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x8, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc4, 0x8, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000040)={0x2c, &(0x7f0000000180)={0x0, 0x5, 0x28, {0x28, 0xe, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BLKCRYPTOPREPAREKEY(r4, 0xc040128b, 0x0) close_range(r1, r1, 0x0) 1.276727992s ago: executing program 4 (id=2389): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x0, 0x0}) semop(0x0, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) 1.260590369s ago: executing program 1 (id=2390): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xc4841, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x80105013, 0x0) unshare(0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESHEX=r1, @ANYRES64=r3], 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB="f5000000", @ANYRES16=r4, @ANYRESDEC], 0x34}}, 0x4000000) socket$netlink(0x10, 0x3, 0x14) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="2b9fd6c5e30adb5274eb1bba5ca1dcdbcab0b0827ede398fd3389db189d2971525176dfbcd64"], 0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000180)=0x52b6, 0x4) connect$inet6(r5, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x40242, 0x0) fcntl$setpipe(r7, 0x407, 0xd993) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = getpgid(0x0) syz_pidfd_open(r9, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000153d207ea2a7a3bcfba9c56937a977bd9b000601", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) sendmmsg$inet6(r5, &(0x7f0000000000), 0x0, 0x4004c890) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x440d0}, 0x40c0) syz_fuse_handle_req(r7, 0x0, 0xffffffffffffff39, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x8, {0x5, 0x2, 0x100, 0x4000000000008, 0x0, 0x4, {0x4, 0xfffffffffffffffb, 0x100, 0xa5, 0xa, 0x7, 0x800008, 0xfff, 0x10000008, 0x1000, 0x28001, 0x0, 0x0, 0x5, 0x7f}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(r10, 0xc0606610, &(0x7f0000000300)=0x611100) sendto$inet6(r5, &(0x7f0000000100)="2b08986da4284848e5293b17e02db7352ee1", 0x12, 0x24044000, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000040)=0xffff) 1.171603549s ago: executing program 4 (id=2391): mount$fuse(0x0, 0x0, 0x0, 0x10000, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000009c0)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001200)={0x70, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffffffbe}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x70}}, 0x4000000) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 1.15211945s ago: executing program 1 (id=2392): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x48000) close(r4) 1.056736202s ago: executing program 1 (id=2393): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x1008, &(0x7f0000bcb000/0x1000)=nil) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=r2, @ANYRESOCT=r0, @ANYRES64], 0x48, 0xffffffffffffffff) request_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10rust/|\xa2\xae\xc6\x01\x00\x00\x00:D%', 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x22}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x2}]}}}]}, 0x48}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101901) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 1.026172757s ago: executing program 2 (id=2394): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x800) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, 0x0, 0x1, 0x70bd28, 0x25dffbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40050}, 0xc4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x8, 0x0, 0x0, {0x5, 0x0, 0x5, 0x80000001, 0x0, 0x1, 0x9e9, 0x0, 0xb877, 0xa000, 0x7893b06e, 0xffffffffffffffff, 0xee01, 0x3d, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 875.727182ms ago: executing program 2 (id=2395): syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x1}, 0x10) write(r1, &(0x7f00000002c0)="04", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000300)=@mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x2}, @device_b, @broadcast, @from_mac=@broadcast, {0xa, 0x80}}, 0x2, @default, 0xb0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x61, {0x8, 0x73, 0x9, "76d19901ad1e8fbb0d35b4a2ddbffcfb451ba531231684dc04c50a8e399db452cf1de24e447d175db11c5c0deeafe8df1719f3a8087be083871d56ce2573fd6a363ae2632fe3dd935e73b6983dce7b94f76b9cdc69562e27817c0ad17e5f"}}, @val={0x25, 0x3, {0x0, 0x88, 0x2}}, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x1000, 0x2, 0x0, 0x0, {0x7, 0x80, 0x0, 0x81, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x300, 0x3, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x6, 0x49}}, @void, [{0xdd, 0x7, "afdc7d9b7561fd"}, {0xdd, 0x5c, "cbcb07ce2a6560cbb168fc0d26d96f4019bc41c0893b692b2f8dd1cd8dee7c1ba0a14b29aa05f6a4ae1987d565c3e682df3c7ab522ad2c13859122f49e5429179b36d1070778dc471c817faf187694451d2114cff1b23d0452732e4e"}, {0xdd, 0x44, "28fbfbac12f14d01dfef608776fe14612a9b314d0fedcc1288c1ac25181a218fd3501a5f7001633be059bee8938a1fe0c01d90426bafc52a0a7ccbc9ec34988536ec312d"}]}, 0x171) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) 341.428968ms ago: executing program 4 (id=2396): socket$kcm(0x2d, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x18, 0x1401, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x10) 306.754578ms ago: executing program 4 (id=2397): socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x0, 0x8, 0x8003, 0x4, 0x7, 0x0, 0x4, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x20}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv2(r4, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000640)=""/106, 0x6a}], 0x2, 0x4, 0x3ff, 0x0) fsopen(&(0x7f0000000200)='cifs\x00', 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)={0x10000011}) socket(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x8000000401, 0x1af2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6}, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x42, 0x80) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030d0000000000000000000000030006000000000002000000000000000000000000000000030005000000000002000000ac14140000000000000000000200090008000000e90000000000000002000100001e0000000000000000000001001800"], 0x68}, 0x1, 0x7}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000000400)={r6, &(0x7f00000001c0)='syzkaller0\x00', 0x4000, &(0x7f0000000240)={@align=0xe, {0xf, 0x7, 0x800, 0x3}}, 0x3c2c, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)}) io_setup(0x23, &(0x7f0000000280)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 180.171398ms ago: executing program 2 (id=2398): syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x24) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlinkprop={0x44, 0x6c, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x49100}, [@IFLA_MAP={0x24, 0xe, {0x9, 0x4, 0x5, 0xb51c, 0x44, 0x2}}]}, 0x44}}, 0x20000840) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000002c00)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000e80)=[@rthdr={{0x18, 0x29, 0x39, {0x2e, 0x0, 0x1, 0x3}}}], 0x18}}], 0x1, 0x40000) writev(r0, 0x0, 0x0) 31.644639ms ago: executing program 2 (id=2399): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xb) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000000140)={0x0, 0x3, 0x5}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r5, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x10040000) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) syz_clone(0x300000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)={{0x12, 0x1, 0x250, 0x6b, 0x56, 0x10, 0x10, 0x5ac, 0x236, 0x3e2a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xc9, 0x10, 0x8, "", [{{0x9, 0x4, 0xcc, 0x8, 0x0, 0x3, 0x83, 0x2, 0x8b}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x3c0a}}]}) msgsnd(0x0, &(0x7f0000000000)={0x2, "c50dcdd27efdbcce05f0353c3980b75fd47caacaf89ad55f107ee6e896ce9590f19a6da3b3329cff49453d7c02a1e7e0c49b0bee08feb66e20f682d1e2930000e17d8a06c7341a88d4b53b5bd0e17707277172a2b57b244e05f5a32a73cb9616d97c14"}, 0x6b, 0x0) 0s ago: executing program 1 (id=2400): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="e2", 0x1}], 0x1}, 0x4040001) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x100) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) preadv(r4, &(0x7f0000001900)=[{&(0x7f0000000500)=""/3, 0x3}], 0x1, 0x1, 0xb1) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000001000010428bd7000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="40000000514200002400128009000100766c616e0000000014000280100004800c000100070000000500000008001300", @ANYRES32=r3, @ANYBLOB="ee45903f3720bb2d901212af7117a2a1b43638f1935093cc5d46e3149f1fa166da5af1528bbc6b4ebce9d27144bf6c42cd59630635c591812f026682c281fda16b718fa5a6bc381d77000363cdfee5bff8c4a3fea624f3b1a21f2279bd5c50dfa71b3da5d3a48a0934cd4a883a5625448d58aa29819091504ca785f04577852b1a9cddaa"], 0x4c}}, 0x8010) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f0000000540)) r5 = socket(0x10, 0x803, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r6, 0xffffffffffffffff) sendmsg$nl_netfilter(r6, &(0x7f0000003d00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003cc0)={&(0x7f0000001940)={0x2358, 0x14, 0x8, 0x201, 0x70bd26, 0x25dfdbfe, {0x2, 0x0, 0x7}, [@nested={0x1284, 0xe8, 0x0, 0x1, [@generic="41420bced6ddea8bb27f34afbe23a9b2bf5e2484ac9d5d0b104a4d44cfdf95004bfcde48554fa1b9171da9bb26b7907509efc9bd03bb0e4f6625427e58c0d1b89798da0fea2138bd3723df1bfa5c532aa6f243052b389d5031a03ae7b45b1408c0a8ff3692f9134464ba8b265494cb779b536224dbe949df1c6cce7873d9defdcc40e487c65c2cafb6201d37519ef0dd358e46766bb5422b62b54c9c36a5acf375189bba3b60fc6385a7adb5299f16bf09f7fc10", @typed={0x11, 0x102, 0x0, 0x0, @str='/dev/video36\x00'}, @generic="2a471011cfe36d22f9f47ba5cc8ab9637751723745a6236f7e5ba066d8b960897ed4bdac46cb56d340951306d94e3c7dfb0b3535ceeb62935fe44de17c7b4ace0d76757f857d9e8a4900bd76d62ac35217218ce5de0cdb1dde536e9163cf19c89472d962ca6918708358ac7a3c9af4a5ef234a4ffed48d06a15f8cbc207b4c632ce9a11e3ce893b53d74b8113cf314b70ffb9fb1aa6cceb40c7013de4b7c1777fabd2b076a73841144375a4b567e6c07866103bc74075bb7ae3d299c32df4ed8ec97f74871b4358b2e138f2b2156d3d46a6db45bb7c145209752637f838644477e27e3aea16ea36dbe245c6c38fa751536d3d365e2b452", @generic="34d8cb5311159563d182b2678fa31e34bb2dc10e5e3d6f1252a31c1d0a3cb159777f24b067940f3e2c0521989510577cdc0b2b60c0d083396d89e49fa219ef5a4989af440708bb016c09f64e1a201727666ffe3cd46d6721f739fcf98a09c2bb01627b21643c278fe50ea1c3d413b90bb82ab0645e964f1e780a9c3d6350149e9106b9a17d8055b6cb3a69daf082140ddba371c7b5a8a98344ebab3c9059692728fa5348c1ea95f9865130df1b8cd8b522d33d7001c31458c83b52b8b753f1da38a64834c7c157271b1bda1ec2816f3eb2338bfb9d5294fae75e6db4328d4b00cc26c3fb66bef5a22beb7e97dc407dea7d0971c78b707f1c77144edc5557c9d22d1c143830080f4a17371f6edaa7b1aed2cf2b2d78edffde43edee81e0037cfd31886ea596259a9bc209c33a545bdaa136ac0d6a26d249516a8fbb6d34cbb6046f5124c71afc317f9cf3309255cbb906195380ab5409c4eab5246ba534759ed16165f86e34feb47733c61c691c84fd3e61ceec3584db8e99c62bb5c532526e597190e411eedc6b0ccbbed5f310a4e627a46a54f61e798b8bec9925cb6d4f6762ee581fbc96c31f1e03c96849c7da59279eff24179ad80b21df645e0cfcfae0464785a256399536eeba93a56a283bac9e5574413cdab6e5a17719ef682564e1fbfad3aed85fc93c361923470069700104110819d7b375b99553d6574d4be8b190c9c885893e862eab24e288d2ee9a8f241e849b813fb66a12068b3e7b2588e4da4b04af7a066584f727b5a2240c0f170b2853de427a00934ef679ca095aecae3d20ba3252b2a5fa2dff0cfd5fdbf3f01270a84c99dc51cf05e47ea783af3925eddee5a691c1ea6d956c678cfb4953a95aff237457aba311061a4fe327a5cddd74bd857f54c9931abb9fe7c44ad58ace4a659cf0a5e17116d896b05d780c00fe2fb054ae5bfeda7af894e3e73fec8477cdd2ed94f329fde51658ffc2f35389965b8a1a208854c267f0308028321fb6059870f8ea00ed88b4aef857d008bb3cd93da40f15bebd306db0dce0f3dfea3a71bc9e6b9b6480084d8021c460d859d3972afe6451dac1486f40e784b573da239ed3640738874c53dff7e7769a3f26df75c7ca66b9624297de852de1aa00fd94c7970dd7ff4dcc9b606b56946ad5b2580fe332ec4f44006fa2be3a7511a64ad7d72b479281bec231c271424ee953b6a4c51e2e85e07ca2eb9be63d04ec822a60e8f8bc0a131f7fc0c9b1835be86cfec550dbe26dc80a7c453fd30fde893883806e1421cbf0a62713e5854a5b55f8158b8e3e9c89640ba113f1b2ccc643b343c606188230ff0365c2c42f1c00881cb58b56d933ca5bc8f1dd7418dd7568df7751c7f729774fa564e25b2e1be5455b848e0f77295509d8dd58947f6cce4ae1ada1637ea8f805343749bb594a01ac612f519c6014be2831279f2751498a0e27b2b3fb3629237becb3cd694ea44591b26ebb69e559065e711c8342998a8ce1c37bd27eca3c0ca394192839559e1d49cf65de8fc16abcaf5f1608d1798f9d95d445b35c20ec4bc402baba05f69492c35c8ffb68a1f4cd1bbf45f1dde654ca21d8ee46c8e3a2ca0620320cfda2727b7f120b0f3b33fc6c84198403b8f067257ff57c16d1792fc1af420a0f93364ddae7e32431be8fce531da24b2141e59248ba30ec069dffe6e823405c7018d530744af2ec69b3e5fe29c1c0edd3583097a9fbd1705ee655fca721066b02e48f67c19c0eac55c6857da9cb19397e9dfb16df2f1be553d875141afaeb49f3312a30ca4657e2acd014d25654040eb241503c324199e6a71f6e4da9b1512e0cb67f500c7e61b0490f85504aabd0ae1bbd9acecd78b1687453dade43074bfad1313af15a959c00541022d952ca60c486d9153692fd3309d79a2e2d06202f676489f33def76efa8ddde5b853d26864a29faed7a49069d802ecfcca82d54681324e8c45cef0a47b8630e934a5c2c49b710912b831c7c7ca7d2a7480afcb950b5e46f0e84d2fa314d8bf903657e05b0b2adcecdab5e8132bbfb5d05214f12e0d40d9384337b9b71d5b124cc85c665c52cf85755da1df77553d46170ef11484181b685db8b8016fa97c13ac8c3c4b29e4caad6f46df1f91f8e1b6ae7506e4ff22d1e04e8566bd845a7739275fe78259bfe3aa5fdf1737d8a1ee8c55344d15abac7d2e25e50c54ff6243d805338a971a32ea32593f5b8ebf5b2784138fc9ff010b20949d97f1428fd3f78eb7d30e71be5a38f509e093c3c423d63d2b81bdf8601a980e02416e2f42c85a537afed553748cf8fb5d27e4b1629a2a313077e0129da53b4779f320cfb7458ea1429d3069f71eb55be72513db2851a362e4a9fedf04672f0663048cdece15a37941104b95bd059865efeac1aa640e5aaace54f2a80c06ab7a363606fbb112e239c52d23d0f57d1b1f4e74e55538ab79e95c7978ce698d2299bc9d1593002848e075ddc732bcd4439a7ed010b759210683a698a7206bcaee0e023ce55d41e514daa383b6d109b136e049630109cc44c4573795e22b9820c1710d6723c6669f3d1cdc37c0692488e1f0379074c97bf550b927cfa5ab0dda613328c5491c7974b78febee2c8b8298f50055fb9af2f0e5018ed00972bd265d8d5ba806950941eef0e77a50f70e395b3ebd11d56587bdbd4a51485589ea76655850f06defcadc772b129645229d1d8f5114e466cabbd64e8acc5f26cda5199421d90afcde6dab2da2a59079c6a4eb5cc4c069cc34500f6b8f566c21725e9c335e27a9bee22094e1dc305312376b0cbe965a51eac660d3c3ffdf0457f26a5227cb97651d7599c0bedc532e023c3d59ea964551fe64ed5d7d42bd7115a95c4e0b2b4472cbffb3dc21e0a6ca0e78f23b86a7cad8c824f87901aaf52cc884d4ee5a9a7f23811cc8271767112f840c3e8e57b636debf469b1b93e5442bcd5c54713ff13fb8ff91d472e8090d45541adf9fc887c079f7d4eb155b2b55f4e2d31bae64893385bcb91f4d782e38dec78bdc6d1a07ed3acf4e6dab206b461bc77692aaa68964922e2a54ea01854f84c2fca42d5097a1904bfc9f25f40b3ea2503423984e23eeace5a95a8fcdcd32af5d988bff52993bb99eb09291716ade274e6236cf736ad701d7fb772869cf0a453184f6db853eab5f8e7054cabf230cb83334d50037f6104d82aa8da65265427c34b1e9891773a2cc78e8adfb6421b10d2cd1409488f0f959decd330300e693ddccbb6661e6710b3f346653c226ccaf0bcca684f8e700ddf0efc3e60b6b4b701250998a520979d8f418d655639100c38a984275bba0e162d3f44256b364845b21e3000928c4da600fd9a6faf5897bbf95ec8476aa7dc69a0d6f5526c02a35dee9bbc3dccce544c29686c6756401cf55ceb0e3140d3e9b15545e85a50cd84d477dec209b2b9ca6c0f516f7a65a4ababd1f3a7dfa7e8e93c076d9686613dd83e72ccedbc6cc8d4e79ea37d8aa3f914c9d4c120aced98cbe31424ea7f2718268e52f1e5cab920e207cac775fa92462cb076fdf1bfb5c33e62f193f494ccbe5d1b951eac04254514cea77183e70cc212ec46949e9db8daae08e9f9ad693db9e09b23ad3c1bc9d69496ac58e3edc9e925752b5501b4799b01e1aca1164fb459e671fc13327a3339f3152b8c74097aa0b4a4fc804cafba21d90dee669b297144ff42ec5c6c5ac5051f6436148e1afc40621f570db4f5e0454094d2bff8d732cd62045be1edec00d4248af623257de387b1f62976e80a23757647843b35eed9ccb12eee9caff716bb36579c4aaf99148e22c6914ca3091db1cdc5fb096eb6a9e6347f0012a0a1dc2f65f0dc85bc47dc13f3388c9ffea8a2b45c0c426934716125dca2b64c7fe77d8e169e8f080bc4322dcc874bc95a107521b62c2aad6dc49bab9b25fda5c73394bf3d5767b05de7f40d7247419861e6880784fe9c01062be4e9963ce2201c5d93e16e6aa1d502d7815466c2100ad1a813008305b32b10557365dacac843a46f6dcd86b6da94a662fba68ab2f52f61827eb39af8ed55354e6fa1f4db68489fe440325b06d47df07ae0b35f0f14b97176a25514b40122e7be4b0ba99ffc22c31a134755f388182535fa9f9852c025493d7a71e10498f2618633973eb21b330f8e2aba13058912a18b27e9d8ead772c30bb125d26496e06f1bd05cd4d5e5c24d36956a58cdc296791e0f40a12dddc95a0b49b89906c6d1d7294a7f71e1d349ddcb77f7018575afd08bb27e1b388ec47ebfba673f6ce477635c92b60244660dd30cc93f8dc57d9928d26846566c18a4856f1c7efc44c4fd36be24cc4ce4142f55ceaf5def22a21a8caa24f9b36afe02cd0af65ec4828f8b5529efa7e3b8b4f5d48ac8f6084ecc2925a39ca01550c8ba025a32ab30774acf28732158c21fd1a13487c89281416a713d4211818d3b6f06e557bfef3b45ff82e62e33c14f83bd50d53b4d37ebc00ce40fb0a77080d5f5fdd73db5142802959f68da8ee0119566f3a07d776e870c910dfbdb26e73c3a3368e3c9b004c8016b243c12d0272bc44744cd8910d189087824fb6b5b327c2be299b72d7bd6ff2a8dbb6dabec7145fc0fcbb55adf6e438f29ec4fbab0fb759b58bc530041ed3e86c1ab9da95764ad09d53dbc957bf1bedbb6931177eab47c93910916f1be960588cfec50d1b89cc5577eb946619f816ed8c9814512d21804d98413d7f8820c6a318bd78beecf009c69b77eea4b980dfc548b9a508757bb2f2e820f0549ab7e2332fc39edc04e37c512f68fee971a70029727a7b61d8193a003b83288bd8f4c911e43709c222ba8be6f5b8b6478392d59dc1a015967829a845f8d8ef9e93bd13d9eeb1d3a8316823b49189a6c440a3bcb03963c016381189306c5c8761e3011677562c75c6a7d1bc2a582d24d23fc0b0a9c7e5c9e1cc630373f7eb8bb70de24858b2a60e3467705d2784da5b4ca74d1ca8843b3f0684a85c40622590930ccc172db818a738252eeae91cf674a7ebb54f2c8986237c593304f847c98486ebb4d5654bc25aee2d4be8a6155de40ac5c1664c71e480a5f1159caa320d8c58f19388735aaa1aa8f9143f9d72262de4fef8491e0e05c623e6cea392a2e353ea5b2d879e0cceef6e23e5900953b561cce883944a0cb240c5607a4a3ddb77bff0a1516b5c7955d65dbe9cd78b5320d00381a7e6f3438cf1ac11bde12bc7228965ad7fdb0e8686f2b490f655238546218c2e0431f09c711c0d6232cd203031bf49ff03ab215d2bfb022bc433864a8f94f3eb1b253d1e69f096dec0b5632ab682a0c1337510a1f658ad2dd15b3f49054f308a7c9e592703a118bb7f8dac77625e269df9dd35f27ac8d7f485b1a2bf9c2d6809e53cd04e87d669a6a8e29e2f9b231fa8383555eecd47507ecbef597c94921583f4456ce79b7910a1451e96cfb0d0bbb825c41f2838cf4f7d15756da6ed633a4fd5cc7b122f95c5a8b06de519376621f3d2e0a538b7e06baa319f40e67eacbb99770b33073dd65e197baed919f5247da658dc2148c1cf5c5f2cdfb2197fedd9e8c84ef7e48da7037f3eea6fdc80a06834484b0fb0bc4beeac2b747ca3b5d742f67d3523b83b9f782043e93d5475aabc44103751c43b5d20e0de83ec993f1b20f0ff2d2dabd89dc31b65c46f09730b7de8b43d0974282c23416aa7ab1be10e1633a6c146b0b79cc0d6c617540828a3e2ed9e468d1afaabd270df241f361e369eda5aaa16a9c290f0f97dc61e0f36fe1079205c830cb45e8e3b52c33acb446", @typed={0x5, 0xb7, 0x0, 0x0, @str='\x00'}, @generic="007dc4d0812e5cfd090fe6ca3712afd7808d4ce485a574f43e7c955d78337807ff657038493b957caf493a97adb9def41e732ff6a3b6c24399ebf29e70a7b0588607edc56f5622c03a9f211c436fdfffa4f1c955e15d977b071fbd701cfa5c8df6d614ba9a20f26a017bedc6c85fa65af508d66491576d032ad5fbe2760079022607e1b41e29799b35dc04d4cf2c632834fd86a34141500bd9b3b0c6f64493fbc826c4ba67382264c5ff2f1179fe9769d15cfa7709675d43dd"]}, @generic="6bb861ea557ddb36c2dc73bf99c9a39b4c1e72f9ee2fe36f81e053e0f6440e5682592758c073294d4ccb52cf4109da42ae92b9e6d6aed0d4b2d4ee0b5fdf15de53e96657984039465cce51ea188fc9438d61c963", @typed={0x4, 0xe1}, @typed={0x8, 0x26, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x105d, 0xbf, 0x0, 0x1, [@typed={0xc, 0x4a, 0x0, 0x0, @u64=0x3}, @generic="58e08a68b9c90997cb5dbc3e26e82cd48c898e18507a9b820032bbd96d518e4c5e7597dff32d018b539ec5dc947d4df5", @nested={0x4, 0xaf}, @typed={0x4, 0x151}, @generic="28fc8f5b33f0c9967322743e8ec2bf9a30", @nested={0x4, 0x77}, @generic, @generic="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"]}]}, 0x2358}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) socket(0x40000000015, 0x5, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r13, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x5, 0x10}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x7, 0xc21fbc7f08924ba, 0x8, 0x101}, 0x4, r12}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) kernel console output (not intermixed with test programs): 2 [ 463.147001][ T5688] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 463.160345][T11529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.170596][ T5688] usb 4-1: config 0 has no interface number 0 [ 463.180346][ T5688] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 463.193358][T11529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.207709][ T5688] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 463.221715][ T5688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.240152][ T5688] usb 4-1: Product: syz [ 463.250318][ T5688] usb 4-1: Manufacturer: syz [ 463.258790][ T5688] usb 4-1: SerialNumber: syz [ 463.272399][ T5688] usb 4-1: config 0 descriptor?? [ 463.288940][ T5688] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 463.306051][ T5688] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 463.488449][ T5688] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 463.499141][ T1239] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 463.508646][ T5688] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 463.703244][T11532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1824'. [ 463.704282][ T5730] usb 2-1: USB disconnect, device number 91 [ 463.921125][T11538] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 463.934657][T11538] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 463.982008][T11531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1824'. [ 464.606187][ T24] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 464.768371][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.789387][ T24] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 464.808456][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 464.823521][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.843848][ T24] usb 2-1: Product: syz [ 464.857369][ T24] usb 2-1: Manufacturer: syz [ 464.866702][ T24] usb 2-1: SerialNumber: syz [ 464.885835][ T24] cdc_mbim 2-1:1.0: skipping garbage [ 465.086375][T11545] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 465.821114][ T5717] usb 4-1: USB disconnect, device number 9 [ 465.848850][ T24] cdc_mbim 2-1:1.0: bind() failure [ 465.879129][T11568] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1834'. [ 465.924071][ T24] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 465.951797][ T24] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 465.979320][ T24] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 466.012631][ T24] usb 2-1: USB disconnect, device number 92 [ 466.547658][T11572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.592751][T11572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.866056][ T5688] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 467.036087][ T5688] usb 2-1: Using ep0 maxpacket: 16 [ 467.050177][ T5688] usb 2-1: unable to get BOS descriptor or descriptor too short [ 467.066000][ T5688] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 467.085520][ T5688] usb 2-1: config 1 has an invalid interface number: 151 but max is 0 [ 467.104359][ T5688] usb 2-1: config 1 has no interface number 0 [ 467.114549][ T5688] usb 2-1: config 1 interface 151 has no altsetting 0 [ 467.123110][ T5688] usb 2-1: config 1 has an invalid interface number: 151 but max is 0 [ 467.148051][ T5688] usb 2-1: config 1 has no interface number 0 [ 467.164526][ T5688] usb 2-1: config 1 interface 151 has no altsetting 0 [ 467.189511][ T5688] usb 2-1: config 1 has an invalid interface number: 151 but max is 0 [ 467.212888][ T5688] usb 2-1: config 1 has no interface number 0 [ 467.232803][ T5688] usb 2-1: config 1 interface 151 has no altsetting 0 [ 467.254820][T11579] geneve2: entered promiscuous mode [ 467.264158][ T5688] usb 2-1: config 1 has an invalid interface number: 151 but max is 0 [ 467.275150][T11579] geneve2: entered allmulticast mode [ 467.280881][ T5688] usb 2-1: config 1 has no interface number 0 [ 467.292638][ T5688] usb 2-1: config 1 interface 151 has no altsetting 0 [ 467.305519][ T5688] usb 2-1: config 1 has an invalid interface number: 151 but max is 0 [ 467.325148][ T5688] usb 2-1: config 1 has no interface number 0 [ 467.332988][ T5688] usb 2-1: config 1 interface 151 has no altsetting 0 [ 467.349457][ T5688] usb 2-1: config 1 has an invalid interface number: 151 but max is 0 [ 467.366306][ T5688] usb 2-1: config 1 has no interface number 0 [ 467.374855][ T5688] usb 2-1: config 1 interface 151 has no altsetting 0 [ 467.392761][ T5688] usb 2-1: config 1 has an invalid interface number: 151 but max is 0 [ 467.405194][ T5688] usb 2-1: config 1 has no interface number 0 [ 467.412253][ T5688] usb 2-1: config 1 interface 151 has no altsetting 0 [ 467.422435][ T5688] usb 2-1: config 1 has an invalid interface number: 151 but max is 0 [ 467.431382][ T5688] usb 2-1: config 1 has no interface number 0 [ 467.437761][ T5688] usb 2-1: config 1 interface 151 has no altsetting 0 [ 467.463475][ T5688] usb 2-1: string descriptor 0 read error: -22 [ 467.476076][ T5688] usb 2-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 467.495577][ T5688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.533516][ T5688] gspca_main: 093a:260e too many config [ 467.905991][ T5688] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 468.076139][ T5688] usb 4-1: Using ep0 maxpacket: 8 [ 468.087045][ T5688] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.097358][ T5688] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 468.110658][ T5688] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 468.121620][ T5688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.132940][ T5688] usb 4-1: config 0 descriptor?? [ 468.145402][ T5688] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 468.196811][T11598] loop2: detected capacity change from 0 to 1 [ 468.209216][T11598] Dev loop2: unable to read RDB block 1 [ 468.214851][T11598] loop2: unable to read partition table [ 468.221223][T11598] loop2: partition table beyond EOD, truncated [ 468.227748][T11598] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 468.443425][T11602] tipc: Enabling of bearer rejected, already enabled [ 468.576574][T11613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.587996][T11613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.608424][T11614] FAULT_INJECTION: forcing a failure. [ 468.608424][T11614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.644075][T11614] CPU: 0 UID: 0 PID: 11614 Comm: syz.2.1848 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.644112][T11614] Tainted: [L]=SOFTLOCKUP [ 468.644118][T11614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 468.644128][T11614] Call Trace: [ 468.644135][T11614] [ 468.644143][T11614] dump_stack_lvl+0xe8/0x150 [ 468.644168][T11614] should_fail_ex+0x412/0x560 [ 468.644193][T11614] _copy_from_user+0x2d/0xb0 [ 468.644214][T11614] ___sys_sendmsg+0x1c6/0x360 [ 468.644231][T11614] ? __lock_acquire+0x6b5/0x2cf0 [ 468.644253][T11614] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.644299][T11614] ? __fget_files+0x2a/0x420 [ 468.644318][T11614] ? __fget_files+0x3a0/0x420 [ 468.644346][T11614] __x64_sys_sendmsg+0x1bd/0x2a0 [ 468.644365][T11614] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 468.644388][T11614] ? __pfx_ksys_write+0x10/0x10 [ 468.644416][T11614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.644433][T11614] do_syscall_64+0x174/0x580 [ 468.644448][T11614] ? trace_irq_disable+0x3b/0x140 [ 468.644466][T11614] ? clear_bhb_loop+0x40/0x90 [ 468.644481][T11614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.644493][T11614] RIP: 0033:0x7f92b499ce59 [ 468.644507][T11614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.644517][T11614] RSP: 002b:00007f92b57a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.644531][T11614] RAX: ffffffffffffffda RBX: 00007f92b4c16090 RCX: 00007f92b499ce59 [ 468.644541][T11614] RDX: 0000000000008040 RSI: 00002000000001c0 RDI: 0000000000000006 [ 468.644549][T11614] RBP: 00007f92b57a8090 R08: 0000000000000000 R09: 0000000000000000 [ 468.644557][T11614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.644564][T11614] R13: 00007f92b4c16128 R14: 00007f92b4c16090 R15: 00007f92b4d3fa48 [ 468.644584][T11614] [ 468.781564][T11616] input: syz1 as /devices/virtual/input/input101 [ 469.718794][ T5688] usb 2-1: USB disconnect, device number 93 [ 470.420924][T11645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.448335][T11645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.635809][ T24] usb 4-1: USB disconnect, device number 10 [ 470.682221][ T2361] pvrusb2: request_firmware fatal error with code=-110 [ 470.701057][ T2361] pvrusb2: Failure uploading firmware1 [ 470.708624][ T2361] pvrusb2: Device initialization was not successful. [ 470.718743][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 470.750546][T11648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1860'. [ 470.752889][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 470.803374][ T2361] pvrusb2: Failed to submit write-control URB status=-19 [ 470.807901][ T5687] pvrusb2: Device being rendered inoperable [ 470.866518][ T2361] usb 3-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 470.883314][ T2361] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 471.228842][T11665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.254740][T11665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.070256][T11676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1868'. [ 472.091653][T11676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1868'. [ 472.380290][T11684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1871'. [ 472.466846][ T24] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 472.636449][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 472.651210][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.682202][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 472.738741][ T24] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 472.772839][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.796054][ T1239] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 472.808087][ T24] usb 2-1: config 0 descriptor?? [ 472.844091][ T24] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 472.874393][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1875'. [ 472.885132][T11697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1875'. [ 472.908332][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1875'. [ 472.923274][T11697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1875'. [ 472.988991][ T1239] usb 4-1: unable to get BOS descriptor or descriptor too short [ 473.000884][ T1239] usb 4-1: language id specifier not provided by device, defaulting to English [ 473.013460][ T1239] usb 4-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 473.026443][ T1239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.054532][ T1239] usb 4-1: Product: 梱ꡦ旤㲚뿈쨈祄ﻓ葲枺匾섊鞇æšâŠšä¼ï𔿣»í‚·ï©§ë…ºã…篩믄懯铺込⽪å™îƒ²çš²íƒŸæ…褈å—ᬫ⬦ç’뉋㥡➬⩽ൔä‡ì´æ·¡î™¨á°¤ïˆ¶â¨§ï·œê£³ï³ [ 473.083079][ T1239] usb 4-1: Manufacturer: Ñ‹ [ 473.091557][ T1239] usb 4-1: SerialNumber: syz [ 473.164692][T11702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.185802][T11702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.318337][ T1239] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 473.329436][ T1239] usb 4-1: MIDIStreaming interface descriptor not found [ 473.400425][ T1239] usb 4-1: USB disconnect, device number 11 [ 473.693651][T11706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.703331][T11706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.776734][T11706] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1878'. [ 474.156435][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 474.316276][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 474.330175][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.354997][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 474.381977][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 474.407139][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 474.429082][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.459625][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 474.490567][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 474.515585][ T24] usb 4-1: Manufacturer: syz [ 474.531868][ T24] usb 4-1: config 0 descriptor?? [ 474.808771][ T24] rc_core: IR keymap rc-hauppauge not found [ 474.821685][ T24] Registered IR keymap rc-empty [ 474.827381][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 474.848050][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 474.888269][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 474.905478][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input103 [ 474.934401][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 474.970576][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 474.998607][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 475.026588][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 475.056316][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 475.087132][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 475.116627][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 475.146374][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 475.176286][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 475.207749][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 475.210344][ T1239] usb 2-1: USB disconnect, device number 94 [ 475.287907][ T24] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 475.327154][ T24] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 475.374403][ T24] usb 4-1: USB disconnect, device number 12 [ 475.581655][T11735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.594798][T11734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.605170][T11735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.614819][T11734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.984986][T11743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.996967][T11743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.286239][ T1239] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 476.455952][ T1239] usb 4-1: Using ep0 maxpacket: 16 [ 476.469549][ T1239] usb 4-1: unable to get BOS descriptor or descriptor too short [ 476.487659][ T1239] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.498869][ T1239] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 476.520807][ T1239] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 476.530563][ T1239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.560544][ T1239] usb 4-1: Product: syz [ 476.577359][ T1239] usb 4-1: Manufacturer: syz [ 476.604888][ T1239] usb 4-1: SerialNumber: syz [ 476.792503][T11758] tipc: Enabling of bearer rejected, already enabled [ 476.854991][ T1239] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 476.889054][ T1239] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 476.906878][T11759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.959996][T11759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.976251][T11759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.987599][T11759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.254856][T11764] input: syz1 as /devices/virtual/input/input104 [ 477.748779][T11771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.776041][T11771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.469382][T11782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.491923][T11782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.098355][ T1239] usb 4-1: USB disconnect, device number 13 [ 479.352874][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1903'. [ 479.435424][T11789] ipt_REJECT: TCP_RESET invalid for non-tcp [ 479.474082][T11789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.503338][T11789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.852300][T11816] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 481.410401][ T1239] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 481.486988][ T5730] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 481.596490][ T1239] usb 2-1: Using ep0 maxpacket: 32 [ 481.614990][ T1239] usb 2-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config [ 481.629658][ T1239] usb 2-1: config 239 has 1 interface, different from the descriptor's value: 3 [ 481.663104][ T5730] usb 4-1: Using ep0 maxpacket: 16 [ 481.665559][ T1239] usb 2-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 481.687881][ T1239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.701690][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.722313][ T1239] usb 2-1: Product: syz [ 481.730431][ T1239] usb 2-1: Manufacturer: syz [ 481.740777][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.756435][ T1239] usb 2-1: SerialNumber: syz [ 481.821196][ T5730] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 481.850031][ T5730] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 481.866501][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.908492][ T5730] usb 4-1: config 0 descriptor?? [ 482.394045][ T5730] microsoft 0003:045E:07DA.0033: ignoring exceeding usage max [ 482.414824][ T5730] microsoft 0003:045E:07DA.0033: ignoring exceeding usage max [ 482.613251][ T5730] microsoft 0003:045E:07DA.0033: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 482.635826][ T5730] microsoft 0003:045E:07DA.0033: no inputs found [ 482.653274][ T5730] microsoft 0003:045E:07DA.0033: could not initialize ff, continuing anyway [ 482.677737][T11840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.702908][T11840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.709050][ T5730] usb 4-1: USB disconnect, device number 14 [ 482.770997][T11838] fido_id[11838]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 483.348154][T11845] bridge_slave_1: entered promiscuous mode [ 484.114731][ T1239] usb 2-1: unit 2 not found! [ 484.151449][T11856] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1924'. [ 484.236525][ T1239] usb 2-1: USB disconnect, device number 95 [ 484.726062][ T1239] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 484.889969][ T1239] usb 2-1: unable to get BOS descriptor or descriptor too short [ 484.906938][ T1239] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 484.932326][ T1239] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 484.941880][ T1239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.950036][ T1239] usb 2-1: Product: syz [ 484.954621][ T1239] usb 2-1: Manufacturer: syz [ 484.959437][ T1239] usb 2-1: SerialNumber: syz [ 485.210762][ T1239] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 485.801249][ T1239] usb 2-1: invalid uac2 rates [ 485.810622][ T1239] usb 2-1: invalid uac2 rates [ 486.010279][ T1239] usb 2-1: failed to enable PITCH for EP 0x82 [ 486.035350][ T1239] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 486.052425][ T1239] usb 2-1: clock source 0 is not valid, cannot use [ 486.074670][ T1239] usb 2-1: 2:1: cannot get freq (v2/v3): err -71 [ 486.083308][ T1239] usb 2-1: 2:1: cannot set freq 16846775 (v2/v3): err -71 [ 486.174944][ T1239] usb 2-1: USB disconnect, device number 96 [ 486.277301][ T5645] udevd[5645]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 486.383672][T11903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.396793][T11903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.411139][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1937'. [ 486.439093][T11905] netlink: 'syz.3.1937': attribute type 2 has an invalid length. [ 486.714586][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1939'. [ 486.846561][ T5717] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 486.998761][T11918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.016460][ T5717] usb 4-1: Using ep0 maxpacket: 8 [ 487.029168][ T5717] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 487.039651][T11918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.056523][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.074880][ T5717] usb 4-1: Product: syz [ 487.080052][ T5717] usb 4-1: Manufacturer: syz [ 487.089875][ T5717] usb 4-1: SerialNumber: syz [ 487.109291][ T5717] usb 4-1: config 0 descriptor?? [ 487.327537][ T5717] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 487.959870][ T5717] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 487.990250][ T5717] usb 4-1: USB disconnect, device number 15 [ 488.510752][ T5635] Bluetooth: Unexpected start frame (len 12) [ 489.180195][T11958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.195995][ T809] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 489.199719][T11958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.366106][ T809] usb 4-1: Using ep0 maxpacket: 8 [ 489.377086][ T809] usb 4-1: unable to get BOS descriptor or descriptor too short [ 489.391383][ T809] usb 4-1: config 4 interface 0 has no altsetting 0 [ 489.405211][ T809] usb 4-1: string descriptor 0 read error: -22 [ 489.414927][T11967] IPVS: set_ctl: invalid protocol: 65535 94.92.52.70:43534 [ 489.422705][ T809] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 489.432377][ T809] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 489.455266][ T809] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 489.467050][ T809] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 489.485289][ T809] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 489.494534][ T809] usb 4-1: media controller created [ 489.513007][ T809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 489.655681][ T809] zl10353_read_register: readreg error (reg=127, ret==0) [ 489.732198][ T809] usb 4-1: USB disconnect, device number 16 [ 490.874272][T11988] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 491.471008][T12002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.507554][T12002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.165718][T12017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.180360][T12017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.254739][T12022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.264327][T12022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.728386][T12024] FAULT_INJECTION: forcing a failure. [ 492.728386][T12024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.742247][T12024] CPU: 0 UID: 0 PID: 12024 Comm: syz.0.1976 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.742265][T12024] Tainted: [L]=SOFTLOCKUP [ 492.742269][T12024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 492.742275][T12024] Call Trace: [ 492.742280][T12024] [ 492.742284][T12024] dump_stack_lvl+0xe8/0x150 [ 492.742304][T12024] should_fail_ex+0x412/0x560 [ 492.742325][T12024] _copy_from_iter+0x1d3/0x1670 [ 492.742337][T12024] ? rcu_is_watching+0x15/0xb0 [ 492.742353][T12024] ? __pfx__copy_from_iter+0x10/0x10 [ 492.742367][T12024] ? netlink_sendmsg+0x650/0xb40 [ 492.742384][T12024] ? skb_put+0x11b/0x210 [ 492.742400][T12024] netlink_sendmsg+0x6c0/0xb40 [ 492.742418][T12024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.742434][T12024] ? aa_sock_msg_perm+0xf1/0x1b0 [ 492.742451][T12024] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 492.742467][T12024] ____sys_sendmsg+0x972/0x9f0 [ 492.742476][T12024] ? __might_fault+0xaf/0x130 [ 492.742493][T12024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.742507][T12024] ? import_iovec+0x73/0xa0 [ 492.742524][T12024] ___sys_sendmsg+0x2a5/0x360 [ 492.742537][T12024] ? __lock_acquire+0x6b5/0x2cf0 [ 492.742557][T12024] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.742600][T12024] ? __fget_files+0x2a/0x420 [ 492.742620][T12024] ? __fget_files+0x3a0/0x420 [ 492.742645][T12024] __x64_sys_sendmsg+0x1bd/0x2a0 [ 492.742660][T12024] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 492.742674][T12024] ? __pfx_ksys_write+0x10/0x10 [ 492.742692][T12024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.742703][T12024] do_syscall_64+0x174/0x580 [ 492.742716][T12024] ? trace_irq_disable+0x3b/0x140 [ 492.742737][T12024] ? clear_bhb_loop+0x40/0x90 [ 492.742749][T12024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.742758][T12024] RIP: 0033:0x7faa44f9ce59 [ 492.742769][T12024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.742777][T12024] RSP: 002b:00007faa45e6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.742789][T12024] RAX: ffffffffffffffda RBX: 00007faa45215fa0 RCX: 00007faa44f9ce59 [ 492.742796][T12024] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 492.742801][T12024] RBP: 00007faa45e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 492.742807][T12024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.742813][T12024] R13: 00007faa45216038 R14: 00007faa45215fa0 R15: 00007faa4533fa48 [ 492.742827][T12024] [ 493.094055][T12029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.125134][T12029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.355225][T12029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.368184][T12029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.948777][ T29] audit: type=1326 audit(1780319373.343:5933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.0.1981" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa44f9ce59 code=0x7ffc0000 [ 493.952630][T12040] FAULT_INJECTION: forcing a failure. [ 493.952630][T12040] name failslab, interval 1, probability 0, space 0, times 0 [ 494.005565][T12040] CPU: 1 UID: 0 PID: 12040 Comm: syz.0.1981 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.005598][T12040] Tainted: [L]=SOFTLOCKUP [ 494.005605][T12040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 494.005615][T12040] Call Trace: [ 494.005625][T12040] [ 494.005634][T12040] dump_stack_lvl+0xe8/0x150 [ 494.005659][T12040] should_fail_ex+0x412/0x560 [ 494.005683][T12040] should_failslab+0xa8/0x100 [ 494.005700][T12040] ? audit_log_start+0x36e/0xa20 [ 494.005754][T12040] kmem_cache_alloc_noprof+0x87/0x650 [ 494.005774][T12040] ? auditd_test_task+0x22/0x280 [ 494.005789][T12040] ? auditd_test_task+0x22/0x280 [ 494.005812][T12040] audit_log_start+0x36e/0xa20 [ 494.005834][T12040] ? __pfx_audit_log_start+0x10/0x10 [ 494.005855][T12040] ? get_pid_task+0x20/0x1f0 [ 494.005873][T12040] ? get_pid_task+0x20/0x1f0 [ 494.005889][T12040] ? get_pid_task+0x20/0x1f0 [ 494.005910][T12040] audit_seccomp+0x63/0x190 [ 494.005925][T12040] ? clear_bhb_loop+0x40/0x90 [ 494.005940][T12040] ? clear_bhb_loop+0xe/0x90 [ 494.005957][T12040] __seccomp_filter+0xd48/0x1ef0 [ 494.005981][T12040] ? __pfx___seccomp_filter+0x10/0x10 [ 494.006000][T12040] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 494.006022][T12040] ? __fget_files+0x3a0/0x420 [ 494.006047][T12040] ? fput+0xa0/0xd0 [ 494.006069][T12040] ? __pfx_ksys_write+0x10/0x10 [ 494.006092][T12040] ? __secure_computing+0xe1/0x2a0 [ 494.006107][T12040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.006122][T12040] do_syscall_64+0x10e/0x580 [ 494.006137][T12040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.006152][T12040] ? clear_bhb_loop+0x40/0x90 [ 494.006169][T12040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.006184][T12040] RIP: 0033:0x7faa44f9ce59 [ 494.006200][T12040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.006212][T12040] RSP: 002b:00007faa45e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 494.006228][T12040] RAX: ffffffffffffffda RBX: 00007faa45215fa0 RCX: 00007faa44f9ce59 [ 494.006238][T12040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 494.006247][T12040] RBP: 00007faa45e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 494.006257][T12040] R10: 000000007984e2f5 R11: 0000000000000246 R12: 0000000000000001 [ 494.006266][T12040] R13: 00007faa45216038 R14: 00007faa45215fa0 R15: 00007faa4533fa48 [ 494.006292][T12040] [ 494.256557][T12040] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 494.269768][ T29] audit: type=1326 audit(1780319373.343:5934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.0.1981" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa44f9ce59 code=0x7ffc0000 [ 494.287687][T12040] audit: out of memory in audit_log_start [ 494.294726][ T29] audit: type=1326 audit(1780319373.343:5935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.0.1981" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa44f9ce59 code=0x7ffc0000 [ 494.325146][ T29] audit: type=1326 audit(1780319373.343:5936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.0.1981" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa44f9ce59 code=0x7ffc0000 [ 494.350199][ T29] audit: type=1326 audit(1780319373.343:5937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.0.1981" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa44f9ce59 code=0x7ffc0000 [ 494.374894][ T29] audit: type=1326 audit(1780319373.343:5938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.0.1981" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa44f9ce59 code=0x7ffc0000 [ 494.399825][ T29] audit: type=1326 audit(1780319373.343:5939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.0.1981" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa44f9ce59 code=0x7ffc0000 [ 494.424449][ T29] audit: type=1326 audit(1780319373.343:5940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.0.1981" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa44f5d68e code=0x7ffc0000 [ 495.256446][ T5717] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 495.428888][ T5717] usb 2-1: Using ep0 maxpacket: 16 [ 495.452275][ T5717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.479102][ T5717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.516271][ T5717] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 495.546531][ T5717] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 495.587971][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.618277][ T5717] usb 2-1: config 0 descriptor?? [ 496.041003][T12059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1987'. [ 496.116696][ T5717] microsoft 0003:045E:07DA.0034: ignoring exceeding usage max [ 496.139112][ T5717] microsoft 0003:045E:07DA.0034: ignoring exceeding usage max [ 496.165238][T12066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1989'. [ 496.222277][T12066] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1989'. [ 496.317546][ T5717] microsoft 0003:045E:07DA.0034: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 496.354523][T12066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1989'. [ 496.357218][ T5717] microsoft 0003:045E:07DA.0034: no inputs found [ 496.407205][ T5717] microsoft 0003:045E:07DA.0034: could not initialize ff, continuing anyway [ 496.447518][ T5717] usb 2-1: USB disconnect, device number 97 [ 497.206230][ T809] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 497.299496][T12083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1995'. [ 497.325255][T12083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1995'. [ 497.346785][ T809] usb 4-1: device descriptor read/64, error -71 [ 497.389752][T12090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1996'. [ 497.441818][T12090] netlink: 'syz.0.1996': attribute type 2 has an invalid length. [ 497.606591][ T809] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 497.778553][ T809] usb 4-1: device descriptor read/64, error -71 [ 497.907974][ T809] usb usb4-port1: attempt power cycle [ 498.276403][ T809] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 498.317283][ T809] usb 4-1: device descriptor read/8, error -71 [ 498.586015][ T809] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 498.606844][ T809] usb 4-1: device descriptor read/8, error -71 [ 498.626690][ T1239] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 498.714945][T12122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.724604][T12122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.728844][ T809] usb usb4-port1: unable to enumerate USB device [ 498.786008][ T1239] usb 2-1: Using ep0 maxpacket: 8 [ 498.792421][ T1239] usb 2-1: config 0 has an invalid interface number: 101 but max is 0 [ 498.801069][ T1239] usb 2-1: config 0 has no interface number 0 [ 498.807656][ T1239] usb 2-1: too many endpoints for config 0 interface 101 altsetting 61: 48, using maximum allowed: 30 [ 498.818849][ T1239] usb 2-1: config 0 interface 101 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 498.832262][ T1239] usb 2-1: config 0 interface 101 has no altsetting 0 [ 498.841409][ T1239] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 498.850975][ T1239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.863750][ T1239] usb 2-1: Product: syz [ 498.868766][ T1239] usb 2-1: Manufacturer: syz [ 498.873466][ T1239] usb 2-1: SerialNumber: syz [ 498.884050][ T1239] usb 2-1: config 0 descriptor?? [ 498.980820][T12125] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2007'. [ 498.990434][T12125] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2007'. [ 499.099051][ T1239] gspca_main: se401-2.14.0 probing 047d:5003 [ 499.123725][T12128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.132760][T12128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.343409][T12135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.736039][ T1239] usb 2-1: reset high-speed USB device number 98 using dummy_hcd [ 500.155229][T12142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2013'. [ 500.300528][T12144] trusted_key: encrypted_key: master key parameter is missing [ 500.312658][T12112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.340704][T12112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.362942][ T1239] gspca_se401: read req failed req 0x06 error -71 [ 500.384143][ T1239] se401 2-1:0.101: probe with driver se401 failed with error -71 [ 500.407947][ T1239] usb 2-1: USB disconnect, device number 98 [ 500.672896][T12154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.677296][ T5717] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 500.699643][T12154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.840197][ T5717] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 500.851638][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.863798][T12161] tipc: Enabling of bearer rejected, already enabled [ 500.871654][ T5717] usb 4-1: Product: syz [ 500.876621][ T5717] usb 4-1: Manufacturer: syz [ 500.881378][ T5717] usb 4-1: SerialNumber: syz [ 500.910737][ T5717] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 500.928618][ T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 501.367622][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.374013][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.395105][ T5730] usb 4-1: USB disconnect, device number 21 [ 501.526267][ T1239] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 501.706038][ T1239] usb 2-1: Using ep0 maxpacket: 16 [ 501.727411][ T1239] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.750489][ T1239] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.774497][ T1239] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 501.806098][ T1239] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 501.827455][ T1239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.852692][ T1239] usb 2-1: config 0 descriptor?? [ 502.006528][ T24] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 502.018894][ T24] ath9k_htc: Failed to initialize the device [ 502.025590][ T5730] usb 4-1: ath9k_htc: USB layer deinitialized [ 502.290722][ T1239] microsoft 0003:045E:07DA.0035: ignoring exceeding usage max [ 502.308533][ T1239] microsoft 0003:045E:07DA.0035: ignoring exceeding usage max [ 502.326960][ T5730] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 502.493976][ T5730] usb 4-1: not running at top speed; connect to a high speed hub [ 502.503780][ T1239] microsoft 0003:045E:07DA.0035: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 502.519404][ T5730] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 93, changing to 4 [ 502.530920][ T1239] microsoft 0003:045E:07DA.0035: no inputs found [ 502.530940][ T1239] microsoft 0003:045E:07DA.0035: could not initialize ff, continuing anyway [ 502.540209][ T1239] usb 2-1: USB disconnect, device number 99 [ 502.592361][ T5730] usb 4-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 502.611565][T12183] fido_id[12183]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 502.625072][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.649737][ T5730] usb 4-1: Product: 〠[ 502.660894][ T5730] usb 4-1: Manufacturer: ⹘纀䢷â™îƒ°å¸¹àº¢ä‡¼ì𡿹¥î±–ï¹ï¨©æ¾¨æ«œî©¾ãš°ï¾‰î”¦é€ë€¤ä“­ë¶–禽⯮眺閚㟞旎쬥é ï™”Ɬ订৩ï‰ï¦½èœ†ã®²O䨰鸳䔫⭴㺀ᚫíŒí’œè¢Šä¯”æ¶ëŠ‚á‹½âº¥åš¹å¾¦æº¢ç®´à¯ºâ¼³é¯¦ç—„ëž—è„¤ß¡ã è§€æ¹î¤²â³žï¤²äš£â®ëº´é£¡ïŽ³ïŸ­è¦’æ¼§Äªá“˜êž˜ç‡…è©¾å‡·Ï¶ [ 502.707032][ T5730] usb 4-1: SerialNumber: Ї [ 502.727985][T12185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.740144][T12185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.759093][T12185] netlink: del zone limit has 8 unknown bytes [ 502.920378][ T5730] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 503.093571][T12189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2029'. [ 503.111670][T12189] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2029'. [ 503.143853][T12189] geneve2: entered promiscuous mode [ 503.149312][T12189] geneve2: entered allmulticast mode [ 503.228085][ T5730] usb 4-1: invalid MIDI EP [ 503.240627][ T5730] usb 4-1: snd-bcd2000: error during probing [ 503.253076][ T5730] snd-bcd2000 4-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 503.271362][ T5730] usb 4-1: USB disconnect, device number 22 [ 503.295142][T12191] FAULT_INJECTION: forcing a failure. [ 503.295142][T12191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.349492][T12191] CPU: 0 UID: 0 PID: 12191 Comm: syz.1.2030 Tainted: G L syzkaller #0 PREEMPT(full) [ 503.349518][T12191] Tainted: [L]=SOFTLOCKUP [ 503.349524][T12191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 503.349533][T12191] Call Trace: [ 503.349540][T12191] [ 503.349548][T12191] dump_stack_lvl+0xe8/0x150 [ 503.349572][T12191] should_fail_ex+0x412/0x560 [ 503.349595][T12191] _copy_from_user+0x2d/0xb0 [ 503.349619][T12191] do_sys_poll+0x2a3/0x10e0 [ 503.349643][T12191] ? __lock_acquire+0x6b5/0x2cf0 [ 503.349666][T12191] ? __pfx_do_sys_poll+0x10/0x10 [ 503.349683][T12191] ? aa_file_perm+0x192/0x15e0 [ 503.349761][T12191] ? ktime_get_ts64+0xa9/0x410 [ 503.349806][T12191] ? __pfx_timespec64_add_safe+0x10/0x10 [ 503.349834][T12191] __x64_sys_poll+0x190/0x350 [ 503.349854][T12191] ? __pfx___x64_sys_poll+0x10/0x10 [ 503.349876][T12191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.349893][T12191] do_syscall_64+0x174/0x580 [ 503.349909][T12191] ? trace_irq_disable+0x3b/0x140 [ 503.349930][T12191] ? clear_bhb_loop+0x40/0x90 [ 503.349947][T12191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.349962][T12191] RIP: 0033:0x7f361ed9ce59 [ 503.349979][T12191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.349991][T12191] RSP: 002b:00007f361fb8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 503.350008][T12191] RAX: ffffffffffffffda RBX: 00007f361f015fa0 RCX: 00007f361ed9ce59 [ 503.350020][T12191] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 503.350029][T12191] RBP: 00007f361fb8f090 R08: 0000000000000000 R09: 0000000000000000 [ 503.350039][T12191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.350049][T12191] R13: 00007f361f016038 R14: 00007f361f015fa0 R15: 00007f361f13fa48 [ 503.350074][T12191] [ 503.742505][T12197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.756905][T12197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.956337][ T5710] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 504.106471][ T5710] usb 2-1: Using ep0 maxpacket: 8 [ 504.113210][ T5710] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 504.123365][ T5710] usb 2-1: config 0 has no interface number 0 [ 504.133709][ T5710] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 504.144157][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.153336][ T5710] usb 2-1: Product: syz [ 504.158503][T12209] dns_resolver: Unsupported server list version (6) [ 504.158531][ T5710] usb 2-1: Manufacturer: syz [ 504.171282][ T5710] usb 2-1: SerialNumber: syz [ 504.180525][ T5710] usb 2-1: config 0 descriptor?? [ 504.354172][T12213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.376415][T12213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.580321][ T5710] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 504.589823][ T5710] uvcvideo 2-1:0.31: Entity type for entity Output 32774 was not initialized! [ 504.620299][ T5710] usb 2-1: USB disconnect, device number 100 [ 504.996736][T12231] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2044'. [ 505.019922][T12231] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2044'. [ 505.053309][T12233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.082908][T12233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.112238][T12233] loop6: detected capacity change from 0 to 524287999 [ 505.249497][T12241] Invalid logical block size (255) [ 505.576037][ T809] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 505.671902][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2050'. [ 505.738405][ T809] usb 2-1: Using ep0 maxpacket: 16 [ 505.756264][ T809] usb 2-1: unable to get BOS descriptor or descriptor too short [ 505.782908][ T809] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.816280][ T809] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 505.848379][ T809] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 505.870435][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.893745][ T809] usb 2-1: Product: syz [ 505.902346][ T809] usb 2-1: Manufacturer: syz [ 505.908378][ T809] usb 2-1: SerialNumber: syz [ 506.071460][T12263] syzkaller0: entered promiscuous mode [ 506.078280][T12263] syzkaller0: entered allmulticast mode [ 506.089179][T12263] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 506.129241][ T809] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 506.142707][ T809] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 506.472838][T12275] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2057'. [ 506.947877][T12290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.990315][T12290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.035121][T12292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.060692][T12292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.137372][T12296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.147870][T12296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.571233][T12301] syzkaller0: entered promiscuous mode [ 507.577156][T12301] syzkaller0: entered allmulticast mode [ 507.585708][T12301] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 508.372535][ T5688] usb 2-1: USB disconnect, device number 101 [ 508.995995][ T5688] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 509.016885][T12333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.039672][T12333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.156818][ T5688] usb 4-1: Using ep0 maxpacket: 8 [ 509.163781][ T5688] usb 4-1: config 0 has an invalid interface number: 33 but max is 1 [ 509.172651][ T5688] usb 4-1: config 0 has no interface number 1 [ 509.181425][ T5688] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 509.194742][ T5688] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 509.211293][ T5688] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 509.221873][ T5688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.231929][ T5688] usb 4-1: Product: syz [ 509.240055][ T5688] usb 4-1: Manufacturer: syz [ 509.245104][ T5688] usb 4-1: SerialNumber: syz [ 509.257984][ T5688] usb 4-1: config 0 descriptor?? [ 509.268897][ T5688] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 509.498523][ T5688] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 509.526083][ T5688] usb 4-1: USB disconnect, device number 23 [ 509.542451][ T5688] pvrusb2: Device being rendered inoperable [ 509.557382][ T5688] pvrusb2: Device being rendered inoperable [ 510.229145][T12367] binder: 12366:12367 ioctl 40046210 0 returned -14 [ 510.421841][T12369] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 511.002223][T12390] syzkaller0: entered promiscuous mode [ 511.018520][T12390] syzkaller0: entered allmulticast mode [ 511.469668][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2098'. [ 511.773611][T12405] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2100'. [ 511.890344][T12406] netlink: 'syz.4.2100': attribute type 16 has an invalid length. [ 511.933719][T12406] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2100'. [ 512.036344][T12409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.080572][T12409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.306456][ T5710] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 513.457748][ T5710] usb 4-1: Using ep0 maxpacket: 16 [ 513.465752][ T5710] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.477629][ T5710] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 513.491436][ T5710] usb 4-1: config 0 interface 0 has no altsetting 0 [ 513.498846][ T5710] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 513.508521][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.524608][ T5710] usb 4-1: config 0 descriptor?? [ 513.541840][ T5710] usbhid 4-1:0.0: can't add hid device: -22 [ 513.551690][ T5710] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 514.610422][T12432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2108'. [ 514.940372][T12447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.974949][T12447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.007935][ T809] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 515.180141][ T809] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.192890][ T809] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 515.213822][ T809] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 515.227298][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.235556][ T809] usb 2-1: Product: syz [ 515.240015][ T809] usb 2-1: Manufacturer: syz [ 515.244635][ T809] usb 2-1: SerialNumber: syz [ 515.264726][ T809] cdc_mbim 2-1:1.0: skipping garbage [ 515.463745][T12441] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 515.792908][T12456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2116'. [ 515.899068][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2118'. [ 515.970442][T12459] geneve2: entered promiscuous mode [ 516.003245][T12459] geneve2: entered allmulticast mode [ 516.022975][ T6635] netdevsim netdevsim4 : set [1, 0] type 2 family 0 port 6081 - 0 [ 516.052511][ T6635] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.069037][ T6635] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.079848][T12464] netlink: 'syz.2.2120': attribute type 3 has an invalid length. [ 516.084807][ T6635] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.107925][ T809] cdc_mbim 2-1:1.0: bind() failure [ 516.133680][ T809] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 516.148505][ T809] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 516.174827][ T809] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 516.190158][ T5730] usb 4-1: USB disconnect, device number 24 [ 516.204223][ T809] usb 2-1: USB disconnect, device number 102 [ 516.323375][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2123'. [ 516.344416][T12469] netlink: 'syz.2.2123': attribute type 2 has an invalid length. [ 516.646078][ T5730] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 516.806533][ T5730] usb 4-1: Using ep0 maxpacket: 8 [ 516.820366][ T5730] usb 4-1: config 5 has an invalid interface number: 103 but max is 1 [ 516.829500][ T5730] usb 4-1: config 5 has an invalid interface number: 168 but max is 1 [ 516.847031][ T5730] usb 4-1: config 5 has no interface number 0 [ 516.853375][ T5730] usb 4-1: config 5 has no interface number 1 [ 516.860837][ T5730] usb 4-1: config 5 interface 103 altsetting 16 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 516.872583][ T5730] usb 4-1: config 5 interface 103 altsetting 16 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 516.907848][ T5730] usb 4-1: config 5 interface 103 altsetting 16 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 516.941290][ T5730] usb 4-1: config 5 interface 103 altsetting 16 has a duplicate endpoint with address 0xA, skipping [ 516.976789][ T5730] usb 4-1: config 5 interface 103 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 516.992581][ T5730] usb 4-1: config 5 interface 103 altsetting 16 has a duplicate endpoint with address 0x2, skipping [ 517.012933][ T5730] usb 4-1: config 5 interface 103 altsetting 16 has a duplicate endpoint with address 0x7, skipping [ 517.013885][T12500] FAULT_INJECTION: forcing a failure. [ 517.013885][T12500] name failslab, interval 1, probability 0, space 0, times 0 [ 517.025234][ T5730] usb 4-1: config 5 interface 103 altsetting 16 has a duplicate endpoint with address 0xD, skipping [ 517.051202][T12500] CPU: 0 UID: 0 PID: 12500 Comm: syz.1.2136 Tainted: G L syzkaller #0 PREEMPT(full) [ 517.051235][T12500] Tainted: [L]=SOFTLOCKUP [ 517.051249][T12500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 517.051259][T12500] Call Trace: [ 517.051267][T12500] [ 517.051275][T12500] dump_stack_lvl+0xe8/0x150 [ 517.051300][T12500] should_fail_ex+0x412/0x560 [ 517.051323][T12500] should_failslab+0xa8/0x100 [ 517.051343][T12500] __kmalloc_noprof+0xe8/0x760 [ 517.051365][T12500] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 517.051389][T12500] tomoyo_realpath_from_path+0xe3/0x5d0 [ 517.051407][T12500] ? tomoyo_domain+0xd7/0x130 [ 517.051427][T12500] ? tomoyo_path_number_perm+0x219/0x630 [ 517.051447][T12500] tomoyo_path_number_perm+0x246/0x630 [ 517.051469][T12500] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 517.051488][T12500] ? __lock_acquire+0x6b5/0x2cf0 [ 517.051519][T12500] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 517.051557][T12500] ? __fget_files+0x2a/0x420 [ 517.051578][T12500] ? __fget_files+0x2a/0x420 [ 517.051594][T12500] ? __fget_files+0x3a0/0x420 [ 517.051609][T12500] ? __fget_files+0x2a/0x420 [ 517.051630][T12500] security_file_ioctl+0xc3/0x2a0 [ 517.051773][T12500] __se_sys_ioctl+0x47/0x170 [ 517.051791][T12500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.051805][T12500] do_syscall_64+0x174/0x580 [ 517.051818][T12500] ? trace_irq_disable+0x3b/0x140 [ 517.051836][T12500] ? clear_bhb_loop+0x40/0x90 [ 517.051851][T12500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.051863][T12500] RIP: 0033:0x7f361ed9ce59 [ 517.051878][T12500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.051888][T12500] RSP: 002b:00007f361fb8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 517.051903][T12500] RAX: ffffffffffffffda RBX: 00007f361f015fa0 RCX: 00007f361ed9ce59 [ 517.051912][T12500] RDX: 0000200000000100 RSI: 00000000c034564b RDI: 0000000000000003 [ 517.051920][T12500] RBP: 00007f361fb8f090 R08: 0000000000000000 R09: 0000000000000000 [ 517.051928][T12500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.051935][T12500] R13: 00007f361f016038 R14: 00007f361f015fa0 R15: 00007f361f13fa48 [ 517.051956][T12500] [ 517.057239][ T5730] usb 4-1: config 5 interface 103 altsetting 16 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 517.089448][T12500] ERROR: Out of memory at tomoyo_realpath_from_path. [ 517.098267][ T5730] usb 4-1: config 5 interface 103 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 517.303434][T12504] FAULT_INJECTION: forcing a failure. [ 517.303434][T12504] name failslab, interval 1, probability 0, space 0, times 0 [ 517.332216][ T5730] usb 4-1: config 5 interface 103 altsetting 16 has a duplicate endpoint with address 0x7, skipping [ 517.373258][T12504] CPU: 1 UID: 0 PID: 12504 Comm: syz.0.2138 Tainted: G L syzkaller #0 PREEMPT(full) [ 517.373285][T12504] Tainted: [L]=SOFTLOCKUP [ 517.373291][T12504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 517.373301][T12504] Call Trace: [ 517.373309][T12504] [ 517.373317][T12504] dump_stack_lvl+0xe8/0x150 [ 517.373340][T12504] should_fail_ex+0x412/0x560 [ 517.373364][T12504] should_failslab+0xa8/0x100 [ 517.373382][T12504] __kmalloc_noprof+0xe8/0x760 [ 517.373404][T12504] ? tomoyo_encode+0x28b/0x550 [ 517.373431][T12504] tomoyo_encode+0x28b/0x550 [ 517.373458][T12504] tomoyo_realpath_from_path+0x58d/0x5d0 [ 517.373483][T12504] ? tomoyo_path_number_perm+0x219/0x630 [ 517.373504][T12504] tomoyo_path_number_perm+0x246/0x630 [ 517.373526][T12504] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 517.373545][T12504] ? __lock_acquire+0x6b5/0x2cf0 [ 517.373578][T12504] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 517.373615][T12504] ? __fget_files+0x2a/0x420 [ 517.373636][T12504] ? __fget_files+0x2a/0x420 [ 517.373654][T12504] ? __fget_files+0x3a0/0x420 [ 517.373670][T12504] ? __fget_files+0x2a/0x420 [ 517.373692][T12504] security_file_ioctl+0xc3/0x2a0 [ 517.373722][T12504] __se_sys_ioctl+0x47/0x170 [ 517.373743][T12504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.373760][T12504] do_syscall_64+0x174/0x580 [ 517.373776][T12504] ? trace_irq_disable+0x3b/0x140 [ 517.373797][T12504] ? clear_bhb_loop+0x40/0x90 [ 517.373817][T12504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.373833][T12504] RIP: 0033:0x7faa44f9ce59 [ 517.373850][T12504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.373863][T12504] RSP: 002b:00007faa45e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 517.373881][T12504] RAX: ffffffffffffffda RBX: 00007faa45215fa0 RCX: 00007faa44f9ce59 [ 517.373892][T12504] RDX: 0000200000000100 RSI: 00000000c034564b RDI: 0000000000000003 [ 517.373903][T12504] RBP: 00007faa45e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 517.373914][T12504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.373923][T12504] R13: 00007faa45216038 R14: 00007faa45215fa0 R15: 00007faa4533fa48 [ 517.373951][T12504] [ 517.373969][T12504] ERROR: Out of memory at tomoyo_realpath_from_path. [ 517.432956][ T5730] usb 4-1: config 5 interface 168 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 517.432987][ T5730] usb 4-1: config 5 interface 168 altsetting 128 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 517.433010][ T5730] usb 4-1: config 5 interface 168 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 517.433029][ T5730] usb 4-1: config 5 interface 168 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 517.433050][ T5730] usb 4-1: config 5 interface 168 altsetting 128 has a duplicate endpoint with address 0x9, skipping [ 517.433069][ T5730] usb 4-1: config 5 interface 168 altsetting 128 has a duplicate endpoint with address 0xA, skipping [ 517.433089][ T5730] usb 4-1: config 5 interface 168 altsetting 128 has a duplicate endpoint with address 0x9, skipping [ 517.433109][ T5730] usb 4-1: config 5 interface 168 altsetting 128 endpoint 0x4 has invalid maxpacket 528, setting to 64 [ 517.433132][ T5730] usb 4-1: config 5 interface 168 altsetting 128 endpoint 0x8 has invalid maxpacket 951, setting to 64 [ 517.433153][ T5730] usb 4-1: config 5 interface 168 altsetting 128 has a duplicate endpoint with address 0x2, skipping [ 517.433173][ T5730] usb 4-1: config 5 interface 168 altsetting 128 has a duplicate endpoint with address 0x7, skipping [ 517.433192][ T5730] usb 4-1: config 5 interface 103 has no altsetting 0 [ 517.433207][ T5730] usb 4-1: config 5 interface 168 has no altsetting 0 [ 517.452393][ T5730] usb 4-1: New USB device found, idVendor=0421, idProduct=01f5, bcdDevice=a4.b4 [ 517.452423][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.452441][ T5730] usb 4-1: Product: à°Œ [ 517.452455][ T5730] usb 4-1: Manufacturer: Ð [ 517.452468][ T5730] usb 4-1: SerialNumber: á° [ 517.457529][T12473] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 517.463332][T12511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.463802][T12511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.704460][T12511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.704969][T12511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.918881][T12511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.920517][T12511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.071886][ T5730] rndis_host 4-1:5.103: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 518.072753][ T5730] cdc_acm 4-1:5.103: Zero length descriptor references [ 518.072802][ T5730] cdc_acm 4-1:5.103: probe with driver cdc_acm failed with error -22 [ 518.097721][ T5730] usb 4-1: USB disconnect, device number 25 [ 518.330419][T12530] FAULT_INJECTION: forcing a failure. [ 518.330419][T12530] name failslab, interval 1, probability 0, space 0, times 0 [ 518.350525][T12530] CPU: 0 UID: 0 PID: 12530 Comm: syz.2.2145 Tainted: G L syzkaller #0 PREEMPT(full) [ 518.350551][T12530] Tainted: [L]=SOFTLOCKUP [ 518.350558][T12530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 518.350567][T12530] Call Trace: [ 518.350574][T12530] [ 518.350581][T12530] dump_stack_lvl+0xe8/0x150 [ 518.350605][T12530] should_fail_ex+0x412/0x560 [ 518.350627][T12530] should_failslab+0xa8/0x100 [ 518.350646][T12530] __kmalloc_cache_noprof+0x88/0x660 [ 518.350665][T12530] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 518.350683][T12530] ? sctp_add_bind_addr+0x8c/0x370 [ 518.350704][T12530] sctp_add_bind_addr+0x8c/0x370 [ 518.350723][T12530] sctp_copy_local_addr_list+0x314/0x4f0 [ 518.350742][T12530] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 518.350758][T12530] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 518.350778][T12530] ? sctp_v4_is_any+0x35/0x60 [ 518.350794][T12530] ? sctp_copy_one_addr+0x93/0x360 [ 518.350814][T12530] sctp_bind_addr_copy+0xb3/0x3c0 [ 518.350831][T12530] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 518.350856][T12530] sctp_connect_new_asoc+0x2ff/0x6b0 [ 518.350878][T12530] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 518.350896][T12530] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 518.350913][T12530] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 518.350931][T12530] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 518.350950][T12530] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 518.350972][T12530] ? security_sctp_bind_connect+0x7e/0x2c0 [ 518.350994][T12530] sctp_sendmsg+0x1576/0x2c50 [ 518.351027][T12530] ? __pfx_sctp_sendmsg+0x10/0x10 [ 518.351048][T12530] ? aa_sk_perm+0x6d5/0x900 [ 518.351077][T12530] ? __pfx_aa_sk_perm+0x10/0x10 [ 518.351101][T12530] ? sock_rps_record_flow+0x19/0x350 [ 518.351215][T12530] ? inet_sendmsg+0x2f4/0x370 [ 518.351240][T12530] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 518.351263][T12530] ____sys_sendmsg+0x80a/0x9f0 [ 518.351288][T12530] ? __pfx_____sys_sendmsg+0x10/0x10 [ 518.351313][T12530] ? import_iovec+0x73/0xa0 [ 518.351336][T12530] ___sys_sendmsg+0x2a5/0x360 [ 518.351352][T12530] ? __lock_acquire+0x6b5/0x2cf0 [ 518.351374][T12530] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.351395][T12530] ? kstrtouint+0x6e/0xe0 [ 518.351442][T12530] ? __fget_files+0x2a/0x420 [ 518.351461][T12530] ? __fget_files+0x3a0/0x420 [ 518.351493][T12530] __sys_sendmmsg+0x27c/0x4e0 [ 518.351515][T12530] ? __pfx___sys_sendmmsg+0x10/0x10 [ 518.351530][T12530] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 518.351573][T12530] ? ksys_write+0x242/0x270 [ 518.351597][T12530] ? __pfx_ksys_write+0x10/0x10 [ 518.351625][T12530] __x64_sys_sendmmsg+0xa0/0xc0 [ 518.351642][T12530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.351659][T12530] do_syscall_64+0x174/0x580 [ 518.351676][T12530] ? trace_irq_disable+0x3b/0x140 [ 518.351697][T12530] ? clear_bhb_loop+0x40/0x90 [ 518.351717][T12530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.351732][T12530] RIP: 0033:0x7f92b499ce59 [ 518.351750][T12530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.351763][T12530] RSP: 002b:00007f92b57a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 518.351781][T12530] RAX: ffffffffffffffda RBX: 00007f92b4c16090 RCX: 00007f92b499ce59 [ 518.351793][T12530] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 518.351804][T12530] RBP: 00007f92b57a8090 R08: 0000000000000000 R09: 0000000000000000 [ 518.351814][T12530] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000002 [ 518.351824][T12530] R13: 00007f92b4c16128 R14: 00007f92b4c16090 R15: 00007f92b4d3fa48 [ 518.351852][T12530] [ 518.773026][T12535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.791324][T12535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.346526][ T5710] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 519.515996][ T5710] usb 2-1: Using ep0 maxpacket: 32 [ 519.539298][ T5710] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 519.559548][ T5710] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.603799][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2158'. [ 519.643000][ T5710] usb 2-1: config 0 has no interface number 0 [ 519.667772][ T5710] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 519.730056][ T5710] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 519.747168][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.784322][ T5710] usb 2-1: Product: syz [ 519.810916][ T5710] usb 2-1: Manufacturer: syz [ 519.833094][ T5710] usb 2-1: SerialNumber: syz [ 519.886782][ T5710] usb 2-1: config 0 descriptor?? [ 520.613105][T12577] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 520.633956][T12577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.645560][T12577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.810658][T12583] kvm: user requested TSC rate below hardware speed [ 521.145598][T12592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.154962][T12592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.186053][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 521.336022][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 521.342927][ T9] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 521.351435][ T9] usb 4-1: config 0 has no interface number 0 [ 521.357698][ T9] usb 4-1: too many endpoints for config 0 interface 101 altsetting 61: 48, using maximum allowed: 30 [ 521.370450][ T9] usb 4-1: config 0 interface 101 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 521.387531][ T9] usb 4-1: config 0 interface 101 has no altsetting 0 [ 521.396726][ T9] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 521.405876][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.413996][ T9] usb 4-1: Product: syz [ 521.418879][ T9] usb 4-1: Manufacturer: syz [ 521.423494][ T9] usb 4-1: SerialNumber: syz [ 521.430341][ T9] usb 4-1: config 0 descriptor?? [ 521.640530][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 522.108976][ T809] usb 2-1: USB disconnect, device number 103 [ 522.266381][ T9] usb 4-1: reset high-speed USB device number 26 using dummy_hcd [ 522.496294][ T809] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 522.582634][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2174'. [ 522.666009][ T809] usb 2-1: Using ep0 maxpacket: 16 [ 522.673246][ T809] usb 2-1: unable to get BOS descriptor or descriptor too short [ 522.681265][ T809] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 522.690588][ T809] usb 2-1: config 1 has an invalid interface number: 151 but max is 0 [ 522.700607][ T809] usb 2-1: config 1 has no interface number 0 [ 522.716572][ T809] usb 2-1: config 1 interface 151 has no altsetting 0 [ 522.724826][ T809] usb 2-1: config 1 has an invalid interface number: 151 but max is 0 [ 522.733623][ T809] usb 2-1: config 1 has no interface number 0 [ 522.740112][ T809] usb 2-1: config 1 interface 151 has no altsetting 0 [ 522.750676][ T809] usb 2-1: config 1 has an invalid interface number: 151 but max is 0 [ 522.758079][T12618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.760170][ T809] usb 2-1: config 1 has no interface number 0 [ 522.769780][T12618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.775542][ T809] usb 2-1: config 1 interface 151 has no altsetting 0 [ 522.789558][ T809] usb 2-1: config 1 has an invalid interface number: 151 but max is 0 [ 522.798311][ T809] usb 2-1: config 1 has no interface number 0 [ 522.804554][ T809] usb 2-1: config 1 interface 151 has no altsetting 0 [ 522.814238][ T809] usb 2-1: config 1 has an invalid interface number: 151 but max is 0 [ 522.822976][ T809] usb 2-1: config 1 has no interface number 0 [ 522.829826][ T809] usb 2-1: config 1 interface 151 has no altsetting 0 [ 522.839382][ T809] usb 2-1: config 1 has an invalid interface number: 151 but max is 0 [ 522.843641][T12586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.850794][ T809] usb 2-1: config 1 has no interface number 0 [ 522.863295][ T809] usb 2-1: config 1 interface 151 has no altsetting 0 [ 522.871760][ T809] usb 2-1: config 1 has an invalid interface number: 151 but max is 0 [ 522.880794][ T809] usb 2-1: config 1 has no interface number 0 [ 522.883622][T12586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.887838][ T809] usb 2-1: config 1 interface 151 has no altsetting 0 [ 522.904504][ T809] usb 2-1: config 1 has an invalid interface number: 151 but max is 0 [ 522.913278][ T809] usb 2-1: config 1 has no interface number 0 [ 522.919764][ T809] usb 2-1: config 1 interface 151 has no altsetting 0 [ 522.927035][ T9] gspca_se401: read req failed req 0x06 error -71 [ 522.933667][ T9] se401 4-1:0.101: probe with driver se401 failed with error -71 [ 522.945171][ T809] usb 2-1: string descriptor 0 read error: -22 [ 522.954452][ T9] usb 4-1: USB disconnect, device number 26 [ 522.960843][ T809] usb 2-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 522.974597][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.999811][ T809] gspca_main: 093a:260e too many config [ 523.970039][T12633] syzkaller1: entered promiscuous mode [ 523.975659][T12633] syzkaller1: entered allmulticast mode [ 524.125526][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2185'. [ 524.185731][T12647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.198406][T12647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.889990][T12655] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 524.911909][T12655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.930896][T12655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.320382][ T5710] usb 2-1: USB disconnect, device number 104 [ 525.532596][T12663] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2190'. [ 525.562584][T12663] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2190'. [ 525.591897][T12663] SET target dimension over the limit! [ 526.142092][T12682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.178479][T12682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.463674][T12692] input: syz1 as /devices/virtual/input/input110 [ 526.750577][T12696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.759678][T12696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.772638][T12696] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 526.780912][T12696] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 526.856715][T12698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.870368][T12698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.385279][T12705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 527.578684][T12718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.598582][T12718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.612649][T12718] binder: 12716:12718 ioctl c0306201 0 returned -14 [ 527.647587][T12718] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!' [ 527.667893][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 527.688144][T12718] CPU: 1 UID: 0 PID: 12718 Comm: syz.4.2208 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.688162][T12718] Tainted: [L]=SOFTLOCKUP [ 527.688165][T12718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 527.688172][T12718] Call Trace: [ 527.688176][T12718] [ 527.688181][T12718] dump_stack_lvl+0xe8/0x150 [ 527.688199][T12718] sysfs_warn_dup+0x8e/0xa0 [ 527.688214][T12718] sysfs_do_create_link_sd+0xc0/0x110 [ 527.688228][T12718] device_add_class_symlinks+0x1cf/0x240 [ 527.688243][T12718] device_add+0x475/0xbb0 [ 527.688255][T12718] wiphy_register+0x1dc5/0x2dc0 [ 527.688374][T12718] ? __pfx_wiphy_register+0x10/0x10 [ 527.688385][T12718] ? __pfx_netdev_run_todo+0x10/0x10 [ 527.688397][T12718] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 527.688447][T12718] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 527.688488][T12718] ieee80211_register_hw+0x3d82/0x4a70 [ 527.688528][T12718] ? ieee80211_register_hw+0x18e1/0x4a70 [ 527.688551][T12718] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 527.688564][T12718] ? __asan_memset+0x22/0x50 [ 527.688578][T12718] ? __hrtimer_setup+0x1b7/0x260 [ 527.688590][T12718] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 527.688653][T12718] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 527.688707][T12718] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 527.688720][T12718] ? kstrndup+0xbf/0x160 [ 527.688746][T12718] hwsim_new_radio_nl+0xf6a/0x1c00 [ 527.688775][T12718] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 527.688793][T12718] ? rcu_is_watching+0x15/0xb0 [ 527.688804][T12718] ? trace_kmalloc+0x2a/0xf0 [ 527.688821][T12718] ? __nla_parse+0x40/0x60 [ 527.688835][T12718] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 527.688847][T12718] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 527.688862][T12718] genl_family_rcv_msg_doit+0x22a/0x330 [ 527.688877][T12718] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 527.688895][T12718] ? bpf_lsm_capable+0x9/0x20 [ 527.688904][T12718] ? security_capable+0x7e/0x2c0 [ 527.688921][T12718] genl_rcv_msg+0x61c/0x7a0 [ 527.688942][T12718] ? __pfx_genl_rcv_msg+0x10/0x10 [ 527.688960][T12718] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 527.688985][T12718] netlink_rcv_skb+0x232/0x4b0 [ 527.688999][T12718] ? __pfx_genl_rcv_msg+0x10/0x10 [ 527.689011][T12718] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 527.689032][T12718] ? down_read+0x270/0x2e0 [ 527.689042][T12718] ? genl_rcv+0xd/0x40 [ 527.689053][T12718] genl_rcv+0x28/0x40 [ 527.689063][T12718] netlink_unicast+0x75c/0x8e0 [ 527.689081][T12718] netlink_sendmsg+0x813/0xb40 [ 527.689100][T12718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.689115][T12718] ? aa_sock_msg_perm+0xf1/0x1b0 [ 527.689130][T12718] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 527.689144][T12718] ____sys_sendmsg+0x972/0x9f0 [ 527.689154][T12718] ? __might_fault+0xaf/0x130 [ 527.689169][T12718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 527.689183][T12718] ? import_iovec+0x73/0xa0 [ 527.689197][T12718] ___sys_sendmsg+0x2a5/0x360 [ 527.689206][T12718] ? __lock_acquire+0x6b5/0x2cf0 [ 527.689218][T12718] ? __pfx____sys_sendmsg+0x10/0x10 [ 527.689232][T12718] ? futex_wake+0x4ac/0x580 [ 527.689276][T12718] ? __fget_files+0x2a/0x420 [ 527.689288][T12718] ? __fget_files+0x3a0/0x420 [ 527.689305][T12718] __x64_sys_sendmsg+0x1bd/0x2a0 [ 527.689316][T12718] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 527.689331][T12718] ? rcu_is_watching+0x15/0xb0 [ 527.689347][T12718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.689358][T12718] do_syscall_64+0x174/0x580 [ 527.689368][T12718] ? trace_irq_disable+0x3b/0x140 [ 527.689382][T12718] ? clear_bhb_loop+0x40/0x90 [ 527.689395][T12718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.689405][T12718] RIP: 0033:0x7f93c959ce59 [ 527.689415][T12718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.689424][T12718] RSP: 002b:00007f93ca491028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.689436][T12718] RAX: ffffffffffffffda RBX: 00007f93c9815fa0 RCX: 00007f93c959ce59 [ 527.689444][T12718] RDX: 0000000004004004 RSI: 0000200000000100 RDI: 0000000000000007 [ 527.689450][T12718] RBP: 00007f93c9632d6f R08: 0000000000000000 R09: 0000000000000000 [ 527.689456][T12718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.689462][T12718] R13: 00007f93c9816038 R14: 00007f93c9815fa0 R15: 00007f93c993fa48 [ 527.689479][T12718] [ 528.198803][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 528.215979][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 528.236908][T12722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.259155][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.294282][T12722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.310376][ T9] usb 4-1: config 0 descriptor?? [ 528.586768][ T9] smsusb:smsusb_probe: board id=8, interface number 0 [ 528.622877][ T9] smsusb:smsusb_probe: Device initialized with return code -19 [ 528.692209][T12727] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 528.881788][T12737] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2210'. [ 528.895759][T12737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2210'. [ 529.008327][T12740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2211'. [ 529.026267][T12740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2211'. [ 529.280117][T12745] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2212'. [ 529.296949][T12745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.716029][ T9] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 529.876003][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 529.882477][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.892949][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 529.904081][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 529.913984][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 529.924910][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.938854][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 529.948202][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 529.956245][ T9] usb 2-1: Manufacturer: syz [ 529.962773][ T9] usb 2-1: config 0 descriptor?? [ 530.215977][ T9] rc_core: IR keymap rc-hauppauge not found [ 530.222121][ T9] Registered IR keymap rc-empty [ 530.227523][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 530.246245][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 530.267319][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 530.282440][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input113 [ 530.300903][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 530.336301][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 530.357219][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 530.357499][ T5710] usb 4-1: USB disconnect, device number 27 [ 530.376380][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 530.406454][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 530.436657][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 530.457901][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 530.486327][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 530.506058][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 530.537487][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 530.584064][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 530.593491][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 530.709984][ T9] usb 2-1: USB disconnect, device number 105 [ 531.186086][ T809] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 531.352228][ T809] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 531.363347][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.373500][ T809] usb 4-1: Product: syz [ 531.384192][ T809] usb 4-1: Manufacturer: syz [ 531.390616][ T809] usb 4-1: SerialNumber: syz [ 531.807552][ T809] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 531.819639][ T809] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 531.922207][T12781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2224'. [ 531.931414][T12781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2224'. [ 532.034778][ T809] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 532.059965][ T809] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 532.075312][ T809] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 532.087912][ T809] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 532.098200][ T2361] pvrusb2: request_firmware fatal error with code=-110 [ 532.104499][ T809] usb 4-1: USB disconnect, device number 28 [ 532.123547][ T2361] pvrusb2: Failure uploading firmware1 [ 532.134864][ T2361] pvrusb2: Device initialization was not successful. [ 532.142468][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 532.154103][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 532.171473][T12784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2225'. [ 532.195541][ T5687] pvrusb2: Device being rendered inoperable [ 532.199387][T12784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2225'. [ 532.418545][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2227'. [ 532.526016][ T5687] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 532.527298][ T5710] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 532.729860][ T5710] usb 2-1: Using ep0 maxpacket: 16 [ 532.742740][ T5710] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.786267][T12814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.794677][ T5710] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 532.828934][T12814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.845357][ T5710] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 532.868554][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.878199][ T5710] usb 2-1: Product: syz [ 532.882669][ T5710] usb 2-1: Manufacturer: syz [ 532.887960][ T5710] usb 2-1: SerialNumber: syz [ 532.911035][ T5710] usb 2-1: 0:2 : does not exist [ 532.927936][T12818] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 533.115430][ T5710] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 533.203463][ T5710] usb 2-1: USB disconnect, device number 106 [ 533.281843][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 533.591349][T12823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.620699][T12823] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.965279][T12823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 533.977392][T12823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 533.991455][T12823] tipc: Resetting bearer [ 533.998192][T12823] tipc: Resetting bearer [ 534.004015][T12823] tipc: Resetting bearer [ 534.020448][T12823] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 534.386528][ T5730] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 534.546398][ T5730] usb 4-1: Using ep0 maxpacket: 16 [ 534.554856][ T5730] usb 4-1: unable to get BOS descriptor or descriptor too short [ 534.564163][ T5730] usb 4-1: too many configurations: 255, using maximum allowed: 8 [ 534.574575][ T5730] usb 4-1: config 1 has an invalid interface number: 151 but max is 0 [ 534.583898][ T5730] usb 4-1: config 1 has no interface number 0 [ 534.590850][ T5730] usb 4-1: config 1 interface 151 has no altsetting 0 [ 534.602066][ T5730] usb 4-1: config 1 has an invalid interface number: 151 but max is 0 [ 534.612259][ T5730] usb 4-1: config 1 has no interface number 0 [ 534.619295][ T5730] usb 4-1: config 1 interface 151 has no altsetting 0 [ 534.628322][ T5730] usb 4-1: config 1 has an invalid interface number: 151 but max is 0 [ 534.637265][ T5730] usb 4-1: config 1 has no interface number 0 [ 534.643506][ T5730] usb 4-1: config 1 interface 151 has no altsetting 0 [ 534.653225][ T5730] usb 4-1: config 1 has an invalid interface number: 151 but max is 0 [ 534.664216][ T5730] usb 4-1: config 1 has no interface number 0 [ 534.670646][ T5730] usb 4-1: config 1 interface 151 has no altsetting 0 [ 534.679782][ T5730] usb 4-1: config 1 has an invalid interface number: 151 but max is 0 [ 534.691595][ T5730] usb 4-1: config 1 has no interface number 0 [ 534.696443][ T5687] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 534.705724][ T5730] usb 4-1: config 1 interface 151 has no altsetting 0 [ 534.715768][ T5730] usb 4-1: config 1 has an invalid interface number: 151 but max is 0 [ 534.725152][ T5730] usb 4-1: config 1 has no interface number 0 [ 534.734832][ T5730] usb 4-1: config 1 interface 151 has no altsetting 0 [ 534.744479][ T5730] usb 4-1: config 1 has an invalid interface number: 151 but max is 0 [ 534.754702][ T5730] usb 4-1: config 1 has no interface number 0 [ 534.761444][ T5730] usb 4-1: config 1 interface 151 has no altsetting 0 [ 534.769958][T12845] input: syz1 as /devices/virtual/input/input114 [ 534.780656][ T5730] usb 4-1: config 1 has an invalid interface number: 151 but max is 0 [ 534.792825][ T5730] usb 4-1: config 1 has no interface number 0 [ 534.801011][ T5730] usb 4-1: config 1 interface 151 has no altsetting 0 [ 534.820916][ T5730] usb 4-1: string descriptor 0 read error: -22 [ 534.830716][ T5730] usb 4-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 534.848304][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.873982][ T5730] gspca_main: 093a:260e too many config [ 534.889539][ T5687] usb 3-1: Using ep0 maxpacket: 16 [ 534.899446][ T5687] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.921546][ T5687] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 534.931650][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.944275][ T5687] usb 3-1: Product: syz [ 534.958961][ T5687] usb 3-1: Manufacturer: syz [ 534.968331][ T5687] usb 3-1: SerialNumber: syz [ 534.981326][ T5687] usb 3-1: config 0 descriptor?? [ 534.993443][ T5687] hub 3-1:0.0: bad descriptor, ignoring hub [ 535.002537][ T5687] hub 3-1:0.0: probe with driver hub failed with error -5 [ 535.017975][ T5687] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 535.087455][ T5687] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 535.143992][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.203174][T12843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.223139][T12843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.235567][T12843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.245687][T12843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.695396][T12850] FAULT_INJECTION: forcing a failure. [ 535.695396][T12850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.711370][T12850] CPU: 0 UID: 0 PID: 12850 Comm: syz.0.2245 Tainted: G L syzkaller #0 PREEMPT(full) [ 535.711396][T12850] Tainted: [L]=SOFTLOCKUP [ 535.711405][T12850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 535.711415][T12850] Call Trace: [ 535.711423][T12850] [ 535.711430][T12850] dump_stack_lvl+0xe8/0x150 [ 535.711454][T12850] should_fail_ex+0x412/0x560 [ 535.711475][T12850] _copy_from_user+0x2d/0xb0 [ 535.711495][T12850] vmemdup_user+0x5e/0xd0 [ 535.711511][T12850] kvm_vm_ioctl+0xcb2/0xd50 [ 535.711564][T12850] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 535.711599][T12850] ? kasan_quarantine_put+0xbb/0x1f0 [ 535.711621][T12850] ? tomoyo_path_number_perm+0x219/0x630 [ 535.711635][T12850] ? tomoyo_path_number_perm+0x219/0x630 [ 535.711648][T12850] ? do_vfs_ioctl+0x1166/0x1530 [ 535.711664][T12850] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 535.711684][T12850] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 535.711704][T12850] ? __fget_files+0x2a/0x420 [ 535.711717][T12850] ? __fget_files+0x2a/0x420 [ 535.711728][T12850] ? __fget_files+0x3a0/0x420 [ 535.711738][T12850] ? __fget_files+0x2a/0x420 [ 535.711751][T12850] ? bpf_lsm_file_ioctl+0x9/0x20 [ 535.711766][T12850] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 535.711776][T12850] __se_sys_ioctl+0xfc/0x170 [ 535.711790][T12850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.711801][T12850] do_syscall_64+0x174/0x580 [ 535.711810][T12850] ? trace_irq_disable+0x3b/0x140 [ 535.711825][T12850] ? clear_bhb_loop+0x40/0x90 [ 535.711838][T12850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.711853][T12850] RIP: 0033:0x7faa44f9ce59 [ 535.711869][T12850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.711881][T12850] RSP: 002b:00007faa45e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 535.711898][T12850] RAX: ffffffffffffffda RBX: 00007faa45215fa0 RCX: 00007faa44f9ce59 [ 535.711908][T12850] RDX: 0000200000000000 RSI: 000000004008ae6a RDI: 0000000000000004 [ 535.711918][T12850] RBP: 00007faa45e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 535.711935][T12850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.711945][T12850] R13: 00007faa45216038 R14: 00007faa45215fa0 R15: 00007faa4533fa48 [ 535.711971][T12850] [ 536.007381][ T5730] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 536.169197][ T5730] usb 2-1: Using ep0 maxpacket: 16 [ 536.177016][ T5730] usb 2-1: unable to get BOS descriptor or descriptor too short [ 536.186962][ T5730] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.198787][ T5730] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 536.224111][ T5730] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 536.234873][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.249566][ T809] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 536.255357][ T5730] usb 2-1: Product: syz [ 536.267745][ T809] usb 3-1: device reset changed ep0 maxpacket size! [ 536.278466][ T5730] usb 2-1: Manufacturer: syz [ 536.285804][ T5730] usb 2-1: SerialNumber: syz [ 536.326568][ T809] usb 3-1: USB disconnect, device number 2 [ 536.428366][ T5635] Bluetooth: Unexpected start frame (len 12) [ 536.501811][T12864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.513006][T12864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.537611][T12864] syz.4.2249(12864): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 536.557061][ T5730] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 536.578899][ T5730] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 536.656005][ T809] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 536.826217][ T809] usb 3-1: Using ep0 maxpacket: 8 [ 536.840497][ T809] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 536.855348][ T809] usb 3-1: config 0 has no interface number 0 [ 536.862546][ T809] usb 3-1: too many endpoints for config 0 interface 101 altsetting 61: 48, using maximum allowed: 30 [ 536.876578][ T809] usb 3-1: config 0 interface 101 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 536.894677][ T809] usb 3-1: config 0 interface 101 has no altsetting 0 [ 536.907060][ T809] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 536.917737][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.929139][ T809] usb 3-1: Product: syz [ 536.933445][ T809] usb 3-1: Manufacturer: syz [ 536.941012][ T809] usb 3-1: SerialNumber: syz [ 536.948955][ T809] usb 3-1: config 0 descriptor?? [ 537.162052][ T809] gspca_main: se401-2.14.0 probing 047d:5003 [ 537.348082][ T5687] usb 4-1: USB disconnect, device number 29 [ 537.816052][ T809] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 538.015375][T12877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.165457][T12882] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2254'. [ 538.383172][T12853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.392715][T12853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.403489][ T809] gspca_se401: read req failed req 0x06 error -71 [ 538.415370][ T809] se401 3-1:0.101: probe with driver se401 failed with error -71 [ 538.427305][ T809] usb 3-1: USB disconnect, device number 3 [ 538.725793][ T5710] usb 2-1: USB disconnect, device number 107 [ 539.083500][T12899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.094170][T12899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.386300][ T5710] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 539.556604][ T5710] usb 3-1: Using ep0 maxpacket: 16 [ 539.573459][ T5710] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.591225][ T5710] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 539.657825][ T5710] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 539.674673][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.683938][ T5710] usb 3-1: Product: syz [ 539.689532][ T5710] usb 3-1: Manufacturer: syz [ 539.706813][ T5710] usb 3-1: SerialNumber: syz [ 539.750304][T12910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.786375][T12910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.788001][ T5710] usb 3-1: 0:2 : does not exist [ 539.819273][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2265'. [ 539.979635][ T5710] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 540.091828][ T5710] usb 3-1: USB disconnect, device number 4 [ 540.980541][T12950] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2278'. [ 541.066263][T12953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.092226][T12953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.275983][ T809] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 541.439037][ T809] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.457139][ T809] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 541.470937][ T809] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 541.480672][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.489880][ T809] usb 3-1: Product: syz [ 541.494765][ T809] usb 3-1: Manufacturer: syz [ 541.499549][ T809] usb 3-1: SerialNumber: syz [ 541.512465][ T809] cdc_mbim 3-1:1.0: skipping garbage [ 541.667219][T12964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.679062][T12964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.711525][T12951] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 542.050072][ T809] cdc_mbim 3-1:1.0: bind() failure [ 542.060320][ T809] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 542.069060][ T809] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 542.076632][ T5710] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 542.078335][ T809] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 542.100500][ T809] usb 3-1: USB disconnect, device number 5 [ 542.236421][ T5710] usb 4-1: Using ep0 maxpacket: 16 [ 542.243794][ T5710] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.263450][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 542.275445][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 542.287660][ T5710] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 542.310262][ T5710] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.340206][ T5710] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 542.350248][ T5710] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 542.358823][ T5710] usb 4-1: Manufacturer: syz [ 542.366610][ T5710] usb 4-1: config 0 descriptor?? [ 542.706255][ T5710] rc_core: IR keymap rc-hauppauge not found [ 542.738238][ T5710] Registered IR keymap rc-empty [ 542.762370][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 542.818414][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 542.860969][ T5710] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 542.904560][ T5710] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input115 [ 542.935383][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 542.976411][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 543.006722][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 543.037243][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 543.078323][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 543.096137][ T24] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 543.107389][ T5687] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 543.107469][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 543.146651][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 543.166432][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 543.186518][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 543.217012][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 543.247760][ T5710] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 543.261984][ T5710] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 543.278465][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.300552][ T5687] usb 3-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 543.318548][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 543.327867][ T5710] usb 4-1: USB disconnect, device number 30 [ 543.350586][ T24] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 543.369714][ T5687] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 543.388711][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.417327][ T5687] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 543.446720][ T5687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 543.457498][ T24] usb 2-1: config 0 descriptor?? [ 543.475066][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 543.490453][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 543.501961][ T5687] usb 3-1: SerialNumber: syz [ 543.530258][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 543.550461][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 543.567223][ T24] usb 2-1: media controller created [ 543.579006][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 543.617058][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 543.647085][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 543.670797][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input116 [ 543.737090][T12992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2293'. [ 543.772611][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 543.804856][ T5687] usb 3-1: 0:2 : does not exist [ 543.825033][ T5687] usb 3-1: unit 5: unexpected type 0x09 [ 543.826534][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 543.917950][T12997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2295'. [ 543.937266][ T24] usb 2-1: USB disconnect, device number 108 [ 544.015272][ T5687] usb 3-1: USB disconnect, device number 6 [ 544.018464][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 544.415105][T13001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2296'. [ 544.676523][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 544.826429][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 544.834017][ T24] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 544.853291][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.887367][ T24] usb 4-1: config 0 has no interface number 0 [ 544.914660][ T24] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 544.961433][ T24] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 544.992030][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.016419][ T24] usb 4-1: Product: syz [ 545.028104][ T24] usb 4-1: Manufacturer: syz [ 545.038734][ T24] usb 4-1: SerialNumber: syz [ 545.061189][ T24] usb 4-1: config 0 descriptor?? [ 545.091807][ T24] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 545.112606][ T24] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 545.220329][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2304'. [ 545.297398][ T24] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 545.320764][ T24] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 545.334415][T13024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.335333][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2306'. [ 545.354532][ T24] usb 4-1: USB disconnect, device number 31 [ 545.373820][T13024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.380718][T13026] loop4: detected capacity change from 0 to 2640 [ 545.439255][T13026] support for cryptoloop has been removed. Use dm-crypt instead. [ 545.487926][ T5797] buffer_io_error: 150 callbacks suppressed [ 545.487938][ T5797] Buffer I/O error on dev loop4, logical block 0, async page read [ 545.513441][ T5797] Buffer I/O error on dev loop4, logical block 0, async page read [ 545.522448][ T5797] Buffer I/O error on dev loop4, logical block 0, async page read [ 545.548850][ T5797] Buffer I/O error on dev loop4, logical block 0, async page read [ 545.559927][ T5797] Buffer I/O error on dev loop4, logical block 0, async page read [ 545.623582][T13031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.639228][T13031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.659263][T13033] C: renamed from veth1_to_team (while UP) [ 545.679994][T13033] netlink: 'syz.2.2309': attribute type 4 has an invalid length. [ 545.695195][T13033] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2309'. [ 545.708809][T13033] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 545.728841][T13031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.746378][T13031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.838441][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2310'. [ 545.865616][T13037] netlink: 'syz.2.2310': attribute type 2 has an invalid length. [ 546.050359][T13046] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2315'. [ 546.157501][T13055] netlink: 'syz.2.2318': attribute type 1 has an invalid length. [ 546.199421][T13055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 546.217158][ T24] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 546.237290][T13058] FAULT_INJECTION: forcing a failure. [ 546.237290][T13058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.280746][T13058] CPU: 0 UID: 0 PID: 13058 Comm: syz.1.2319 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.280774][T13058] Tainted: [L]=SOFTLOCKUP [ 546.280781][T13058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 546.280790][T13058] Call Trace: [ 546.280798][T13058] [ 546.280805][T13058] dump_stack_lvl+0xe8/0x150 [ 546.280830][T13058] should_fail_ex+0x412/0x560 [ 546.280853][T13058] _copy_from_iter+0x1d3/0x1670 [ 546.280874][T13058] ? rep_movs_alternative+0x4a/0x90 [ 546.280984][T13058] ? __pfx__copy_from_iter+0x10/0x10 [ 546.280999][T13058] ? sock_alloc_send_pskb+0x896/0x990 [ 546.281022][T13058] ? __pfx__copy_from_iter+0x10/0x10 [ 546.281045][T13058] copy_page_from_iter+0x220/0x2d0 [ 546.281064][T13058] skb_copy_datagram_from_iter+0x306/0x710 [ 546.281126][T13058] tun_get_user+0xc5e/0x43e0 [ 546.281207][T13058] ? aa_file_perm+0x192/0x15e0 [ 546.281225][T13058] ? aa_file_perm+0x50e/0x15e0 [ 546.281238][T13058] ? __pfx_tun_get_user+0x10/0x10 [ 546.281254][T13058] ? __lock_acquire+0x6b5/0x2cf0 [ 546.281273][T13058] ? kstrtoull+0x12f/0x1d0 [ 546.281301][T13058] ? ref_tracker_alloc+0x35c/0x4c0 [ 546.281362][T13058] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 546.281379][T13058] ? tun_get+0x1c/0x2f0 [ 546.281394][T13058] ? tun_get+0x1c/0x2f0 [ 546.281414][T13058] ? tun_get+0x1c/0x2f0 [ 546.281427][T13058] ? tun_get+0x1c/0x2f0 [ 546.281445][T13058] tun_chr_write_iter+0x113/0x200 [ 546.281492][T13058] vfs_write+0x61d/0xb90 [ 546.281518][T13058] ? __pfx_vfs_write+0x10/0x10 [ 546.281546][T13058] ? __fget_files+0x2a/0x420 [ 546.281570][T13058] ksys_write+0x150/0x270 [ 546.281591][T13058] ? __pfx_ksys_write+0x10/0x10 [ 546.281618][T13058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.281636][T13058] do_syscall_64+0x174/0x580 [ 546.281652][T13058] ? trace_irq_disable+0x3b/0x140 [ 546.281674][T13058] ? clear_bhb_loop+0x40/0x90 [ 546.281692][T13058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.281708][T13058] RIP: 0033:0x7f361ed9ce59 [ 546.281725][T13058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.281738][T13058] RSP: 002b:00007f361fb8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 546.281756][T13058] RAX: ffffffffffffffda RBX: 00007f361f015fa0 RCX: 00007f361ed9ce59 [ 546.281767][T13058] RDX: 000000000000fdef RSI: 0000200000000380 RDI: 0000000000000003 [ 546.281777][T13058] RBP: 00007f361fb8f090 R08: 0000000000000000 R09: 0000000000000000 [ 546.281786][T13058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 546.281794][T13058] R13: 00007f361f016038 R14: 00007f361f015fa0 R15: 00007f361f13fa48 [ 546.281817][T13058] [ 546.570100][ T24] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 546.579677][ T24] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 546.588546][ T24] usb 4-1: Product: syz [ 546.600429][ T24] usb 4-1: Manufacturer: syz [ 546.612002][ T24] usb 4-1: SerialNumber: syz [ 546.624473][ T24] usb 4-1: config 0 descriptor?? [ 546.635801][T13062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.695999][T13063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.753581][T13063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.798930][T13062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.891248][T13043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.903496][T13043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.947716][ T24] usb 4-1: USB disconnect, device number 32 [ 546.957445][ T5710] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 546.975989][ T809] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 547.121902][ T5710] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 547.133770][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.135976][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 547.146461][ T5710] usb 2-1: Product: syz [ 547.151774][ T5710] usb 2-1: Manufacturer: syz [ 547.152231][ T809] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 547.156928][ T5710] usb 2-1: SerialNumber: syz [ 547.165196][ T809] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.180035][ T809] usb 3-1: config 0 has no interface number 0 [ 547.187649][ T809] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 547.208490][ T809] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 547.218453][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.226686][ T809] usb 3-1: Product: syz [ 547.233671][ T809] usb 3-1: Manufacturer: syz [ 547.238655][ T809] usb 3-1: SerialNumber: syz [ 547.245727][ T809] usb 3-1: config 0 descriptor?? [ 547.258433][ T809] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 547.266532][ T809] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 547.464391][ T809] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 547.478014][ T809] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 547.612374][ T5710] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 547.625307][ T5710] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 547.650963][T13083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2331'. [ 547.700790][ T809] usb 3-1: USB disconnect, device number 7 [ 548.016312][ T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 548.186535][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 548.196923][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 548.208699][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 548.233596][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 548.261568][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.280789][ T24] usb 4-1: Product: syz [ 548.294390][ T24] usb 4-1: Manufacturer: syz [ 548.310180][ T24] usb 4-1: SerialNumber: syz [ 548.370932][ T24] usb 4-1: 0:2 : does not exist [ 548.423913][T13100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.446590][T13100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.571469][ T24] usb 4-1: USB disconnect, device number 33 [ 548.619889][ T5797] udevd[5797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 549.064477][ T5710] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 549.119443][T13065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.148273][T13065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.221742][ T5710] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 549.269033][ T5710] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 549.310457][ T5710] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 549.337931][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2340'. [ 549.382334][T13120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2342'. [ 549.382428][ T5710] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 549.423203][ T5710] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 549.425434][T13116] ipt_REJECT: TCP_RESET invalid for non-tcp [ 549.490654][ T5710] usb 2-1: USB disconnect, device number 109 [ 549.697295][ T809] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 549.857811][ T809] usb 4-1: unable to get BOS descriptor or descriptor too short [ 549.866372][ T809] usb 4-1: not running at top speed; connect to a high speed hub [ 549.875136][ T809] usb 4-1: config 12 has an invalid interface number: 231 but max is 0 [ 549.883901][ T809] usb 4-1: config 12 has no interface number 0 [ 549.890226][ T809] usb 4-1: config 12 interface 231 altsetting 2 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 549.901363][ T809] usb 4-1: config 12 interface 231 has no altsetting 0 [ 549.909880][ T809] usb 4-1: New USB device found, idVendor=2040, idProduct=9941, bcdDevice=93.b7 [ 549.941918][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.968063][ T809] usb 4-1: Product: syz [ 549.975475][ T809] usb 4-1: Manufacturer: syz [ 549.986140][ T809] usb 4-1: SerialNumber: syz [ 550.192941][T13144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.208799][ T809] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 550.221531][T13144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.246426][ T809] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 550.268661][ T809] dib0700: firmware download failed at 7 with -22 [ 550.305466][ T809] usb 4-1: USB disconnect, device number 34 [ 550.312350][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2352'. [ 550.352438][T13147] netlink: 'syz.0.2352': attribute type 2 has an invalid length. [ 550.756944][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2355'. [ 551.040630][T13179] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2363'. [ 551.086460][T13179] sg_write: data in/out 926365459/116 bytes for SCSI command 0x30-- guessing data in; [ 551.086460][T13179] program syz.2.2363 not setting count and/or reply_len properly [ 551.605180][T13188] syzkaller1: entered promiscuous mode [ 551.634372][T13188] syzkaller1: entered allmulticast mode [ 552.049913][T13200] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 552.157360][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2371'. [ 552.300695][T13207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.318213][T13207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.346160][ T5687] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 552.421903][T13207] netlink: 'syz.4.2374': attribute type 1 has an invalid length. [ 552.449768][T13207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.481420][T13212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.532194][T13212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.555985][ T5687] usb 3-1: Using ep0 maxpacket: 16 [ 552.574260][ T5687] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.588298][ T5687] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 552.607673][ T5687] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 552.617956][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.626517][ T5687] usb 3-1: Product: syz [ 552.630835][ T5687] usb 3-1: Manufacturer: syz [ 552.635690][ T5687] usb 3-1: SerialNumber: syz [ 552.665213][ T5687] usb 3-1: 0:2 : does not exist [ 552.869438][ T809] usb 3-1: USB disconnect, device number 8 [ 553.041286][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2385'. [ 553.096218][ T5687] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 553.249927][T13245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.270525][T13246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.270877][T13245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.286358][T13246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.309919][ T5687] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.327891][ T5687] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 553.340688][ T5687] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 553.351210][ T5687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.361554][ T5687] usb 4-1: Product: syz [ 553.365817][ T5687] usb 4-1: Manufacturer: syz [ 553.370925][ T5687] usb 4-1: SerialNumber: syz [ 553.394938][ T5687] cdc_mbim 4-1:1.0: skipping garbage [ 553.507987][T13245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.520906][T13245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.544125][T13245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.568859][T13245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.583361][T13257] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 553.590062][T13257] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 553.599307][T13226] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 553.608058][T13257] vhci_hcd vhci_hcd.0: Device attached [ 553.620954][T13257] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 553.627473][T13257] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 553.636722][T13257] vhci_hcd vhci_hcd.0: Device attached [ 553.647991][T13257] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 553.654521][T13257] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 553.662946][T13257] vhci_hcd vhci_hcd.0: Device attached [ 553.671854][T13257] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 553.678374][T13257] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 553.686468][T13257] vhci_hcd vhci_hcd.0: Device attached [ 553.709750][T13257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.724811][T13265] vhci_hcd: connection closed [ 553.725147][T13263] vhci_hcd: connection closed [ 553.725522][ T6633] vhci_hcd vhci_hcd.2: stop threads [ 553.740744][T13261] vhci_hcd: connection closed [ 553.740919][T13258] vhci_hcd: connection closed [ 553.746874][ T6633] vhci_hcd vhci_hcd.2: release socket [ 553.759443][ T6633] vhci_hcd vhci_hcd.2: disconnect device [ 553.765230][ T6633] vhci_hcd vhci_hcd.2: stop threads [ 553.771593][ T6633] vhci_hcd vhci_hcd.2: release socket [ 553.777759][ T6633] vhci_hcd vhci_hcd.2: disconnect device [ 553.785157][ T6633] vhci_hcd vhci_hcd.2: stop threads [ 553.791185][ T6633] vhci_hcd vhci_hcd.2: release socket [ 553.797417][ T6633] vhci_hcd vhci_hcd.2: disconnect device [ 553.803410][ T6633] vhci_hcd vhci_hcd.2: stop threads [ 553.822758][ T6633] vhci_hcd vhci_hcd.2: release socket [ 553.837182][ T6633] vhci_hcd vhci_hcd.2: disconnect device [ 553.856351][ T9] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 553.865842][ T9] usb 37-1: enqueue for inactive port 0 [ 553.936203][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 553.987670][ T5687] cdc_mbim 4-1:1.0: bind() failure [ 554.000394][ T5687] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 554.009232][ T5687] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 554.020349][ T5687] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 554.033272][ T5687] usb 4-1: USB disconnect, device number 35 [ 554.486869][ T30] INFO: task kworker/1:2:808 blocked for more than 143 seconds. [ 554.505752][ T30] Tainted: G L syzkaller #0 [ 554.525640][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 554.570781][ T30] task:kworker/1:2 state:D stack:20128 pid:808 tgid:808 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 554.612600][ T30] Workqueue: usb_hub_wq hub_event [ 554.632191][ T30] Call Trace: [ 554.641232][ T30] [ 554.659802][ T30] __schedule+0x1821/0x5740 [ 554.673206][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 554.682222][ T30] ? look_up_lock_class+0x57/0x110 [ 554.691331][ T30] ? __pfx___schedule+0x10/0x10 [ 554.701752][ T30] ? schedule+0x90/0x360 [ 554.709855][ T30] schedule+0x164/0x360 [ 554.717772][ T30] schedule_timeout+0xc3/0x2c0 [ 554.726679][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 554.735322][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 554.745502][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 554.754933][ T30] ? wait_for_completion+0x274/0x5e0 [ 554.765404][ T30] wait_for_completion+0x2cc/0x5e0 [ 554.775060][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 554.785743][ T30] i2c_del_adapter+0x5c0/0x790 [ 554.798107][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 554.814399][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 554.823964][ T30] ? dvb_usbv2_exit+0x94c/0xb80 [ 554.833197][ T30] dvb_usbv2_probe+0x4c3/0x3d40 [ 554.843169][ T30] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 554.852498][ T30] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 554.862175][ T30] usb_probe_interface+0x659/0xc70 [ 554.871187][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 554.881813][ T30] really_probe+0x267/0xaf0 [ 554.891826][ T30] __driver_probe_device+0x1ef/0x380 [ 554.903862][ T30] driver_probe_device+0x4f/0x240 [ 554.910525][ T5687] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 554.920582][ T30] __device_attach_driver+0x279/0x430 [ 554.926615][ T30] bus_for_each_drv+0x258/0x2f0 [ 554.931752][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 554.938447][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 554.944129][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 554.951199][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 554.957934][ T30] __device_attach+0x2c5/0x450 [ 554.962939][ T30] ? __pfx___device_attach+0x10/0x10 [ 554.981480][ T30] ? _raw_spin_unlock+0x28/0x50 [ 554.990331][ T30] device_initial_probe+0xa1/0xd0 [ 554.998815][ T30] bus_probe_device+0x12a/0x220 [ 555.010572][ T30] device_add+0x7e9/0xbb0 [ 555.017301][ T30] usb_set_configuration+0x1a87/0x2110 [ 555.025647][ T30] usb_generic_driver_probe+0x8d/0x150 [ 555.035869][ T30] usb_probe_device+0x1c4/0x3b0 [ 555.044774][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 555.053802][ T30] really_probe+0x267/0xaf0 [ 555.063002][ T30] __driver_probe_device+0x1ef/0x380 [ 555.072792][ T30] driver_probe_device+0x4f/0x240 [ 555.083166][ T30] __device_attach_driver+0x279/0x430 [ 555.088008][ T5687] usb 3-1: Using ep0 maxpacket: 16 [ 555.089108][ T30] bus_for_each_drv+0x258/0x2f0 [ 555.099350][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 555.108747][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 555.109469][ T5687] usb 3-1: unable to get BOS descriptor or descriptor too short [ 555.127215][ T5687] usb 3-1: config 6 has an invalid interface number: 204 but max is 0 [ 555.135707][ T5687] usb 3-1: config 6 has no interface number 0 [ 555.135729][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 555.135763][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 555.145812][ T5687] usb 3-1: config 6 interface 204 has no altsetting 0 [ 555.168923][ T5687] usb 3-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice=3e.2a [ 555.178443][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.186579][ T30] __device_attach+0x2c5/0x450 [ 555.186920][ T5687] usb 3-1: Product: syz [ 555.192630][ T30] ? __pfx___device_attach+0x10/0x10 [ 555.195741][ T5687] usb 3-1: Manufacturer: syz [ 555.207013][ T5687] usb 3-1: SerialNumber: syz [ 555.214226][ T30] ? _raw_spin_unlock+0x28/0x50 [ 555.221873][ T30] device_initial_probe+0xa1/0xd0 [ 555.227447][ T30] bus_probe_device+0x12a/0x220 [ 555.232618][ T30] device_add+0x7e9/0xbb0 [ 555.242421][ T30] usb_new_device+0xa08/0x16f0 [ 555.251335][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 555.261403][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 555.268946][ T30] hub_event+0x2a1c/0x4f30 [ 555.273614][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 555.281808][ T30] ? __pfx_hub_event+0x10/0x10 [ 555.288635][ T30] ? process_scheduled_works+0xa70/0x1860 [ 555.294840][ T30] ? process_scheduled_works+0xa70/0x1860 [ 555.301359][ T30] ? process_scheduled_works+0xa70/0x1860 [ 555.316374][ T30] process_scheduled_works+0xb5d/0x1860 [ 555.322440][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 555.329885][ T30] ? assign_work+0x3d5/0x5e0 [ 555.334952][ T30] worker_thread+0xa53/0xfc0 [ 555.340411][ T30] kthread+0x389/0x470 [ 555.344607][ T30] ? __pfx_worker_thread+0x10/0x10 [ 555.350817][ T30] ? __pfx_kthread+0x10/0x10 [ 555.355574][ T30] ret_from_fork+0x514/0xb70 [ 555.360983][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 555.367394][ T30] ? __switch_to+0xc79/0x1410 [ 555.372335][ T30] ? __pfx_kthread+0x10/0x10 [ 555.377087][ T30] ret_from_fork_asm+0x1a/0x30 [ 555.381958][ T30] [ 555.385589][ T30] [ 555.385589][ T30] Showing all locks held in the system: [ 555.394244][ T30] 1 lock held by khungtaskd/30: [ 555.400462][ T30] #0: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 555.413196][ T30] 5 locks held by kworker/1:2/808: [ 555.419093][ T30] #0: ffff88801f2e9940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 555.440018][ T30] #1: ffffc90004a6fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 555.444304][ T5687] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:6.204/input/input117 [ 555.452815][ T30] #2: ffff88802ab161d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 555.484659][ T30] #3: ffff88802b71c1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 555.495070][ T30] #4: ffff88807cd2a1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 555.505128][ T4986] bcm5974 3-1:6.204: could not read from device [ 555.512959][ T4986] bcm5974: mode switch failed [ 555.519105][ T30] 3 locks held by acpid/4986: [ 555.523965][ T30] #0: ffff888073f3c158 (&mousedev->mutex#2){+.+.}-{4:4}, at: mousedev_open_device+0x27/0x150 [ 555.535264][ T30] #1: ffff88804c8c02b8 (&dev->mutex#2){+.+.}-{4:4}, at: input_open_device+0x50/0x3b0 [ 555.546816][ T30] #2: ffffffff8e962f28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 555.558611][ T30] 2 locks held by getty/5392: [ 555.563343][ T30] #0: ffff8880374510a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 555.574617][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 555.587064][ T30] 7 locks held by kworker/0:4/5687: [ 555.592483][ T30] #0: ffff88801f2e9940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 555.605229][ T30] #1: ffffc900044ffc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 555.619545][ T30] #2: ffff88802acde1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 555.628709][ T30] #3: ffff88807cd2d1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 555.638338][ T30] #4: ffff8880292b51a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 555.648871][ T30] #5: ffffffff8f842c20 (input_mutex){+.+.}-{4:4}, at: input_register_device+0xa56/0x1140 [ 555.659941][ T30] #6: ffff88804c8c02b8 (&dev->mutex#2){+.+.}-{4:4}, at: input_register_handle+0x18d/0x540 [ 555.670733][ T30] 4 locks held by udevd/5796: [ 555.675603][ T30] #0: ffff888025b00098 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 555.685294][ T30] #1: ffff88806b643880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 555.695838][ T30] #2: ffff888022301e18 (kn->active#33){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 555.707164][ T30] #3: ffff88807cd2d1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 555.717060][ T30] 5 locks held by kworker/u8:12/6631: [ 555.722978][ T30] 3 locks held by kworker/u8:13/6633: [ 555.730986][ T30] #0: ffff88803288e140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 555.743907][ T30] #1: ffffc9000597fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 555.758890][ T30] #2: ffffffff8fdc8480 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 555.792463][ T30] 3 locks held by kworker/u8:14/6635: [ 555.802947][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 555.818405][ T30] #1: ffffc90005547c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 555.829932][ T30] #2: ffffffff8fdc8480 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 555.839537][ T30] 1 lock held by syz.0.2388/13241: [ 555.844718][ T30] #0: ffff88806b824860 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x40/0x6b0 [ 555.855159][ T30] 1 lock held by syz.4.2397/13271: [ 555.860761][ T30] #0: ffffffff8e962df8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 555.871154][ T30] 1 lock held by syz.2.2399/13279: [ 555.876363][ T30] #0: ffffffff8e962df8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 555.886416][ T30] 2 locks held by syz.1.2400/13281: [ 555.891648][ T30] #0: ffffffff8fdc8480 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 555.901117][ T30] #1: ffffffff8e962f28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 555.912654][ T30] [ 555.915960][ T30] ============================================= [ 555.915960][ T30] [ 555.926993][ T4986] bcm5974 3-1:6.204: could not read from device [ 555.933512][ T4986] bcm5974: mode switch failed [ 555.944069][ T4986] bcm5974 3-1:6.204: could not read from device [ 555.946618][ T30] NMI backtrace for cpu 0 [ 555.946639][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 555.946660][ T30] Tainted: [L]=SOFTLOCKUP [ 555.946666][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 555.946675][ T30] Call Trace: [ 555.946682][ T30] [ 555.946690][ T30] dump_stack_lvl+0xe8/0x150 [ 555.946713][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 555.946806][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 555.946834][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 555.946856][ T30] sys_info+0x135/0x170 [ 555.946872][ T30] watchdog+0xfd3/0x1030 [ 555.946899][ T30] ? watchdog+0x1c9/0x1030 [ 555.946924][ T30] kthread+0x389/0x470 [ 555.946944][ T30] ? __pfx_watchdog+0x10/0x10 [ 555.946962][ T30] ? __pfx_kthread+0x10/0x10 [ 555.946981][ T30] ret_from_fork+0x514/0xb70 [ 555.947001][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 555.947017][ T30] ? __switch_to+0xc79/0x1410 [ 555.947046][ T30] ? __pfx_kthread+0x10/0x10 [ 555.947067][ T30] ret_from_fork_asm+0x1a/0x30 [ 555.947097][ T30] [ 555.947104][ T30] Sending NMI from CPU 0 to CPUs 1: [ 555.959006][ T4986] bcm5974: mode switch failed [ 555.966189][ C1] NMI backtrace for cpu 1 [ 555.966208][ C1] CPU: 1 UID: 0 PID: 4986 Comm: acpid Tainted: G L syzkaller #0 PREEMPT(full) [ 555.966231][ C1] Tainted: [L]=SOFTLOCKUP [ 555.966237][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 555.966247][ C1] RIP: 0010:fq_pie_timer+0x27b/0x5b0 [ 555.966341][ C1] Code: 2c 84 c0 75 4f 41 8b 06 4c 6b f0 70 4b 8d 3c 37 48 83 c7 44 48 89 f8 48 c1 e8 03 0f b6 04 28 84 c0 75 48 4d 01 f7 41 8b 57 44 <48> 8b 7c 24 38 4c 89 fe e8 e8 67 ff ff 41 0f b6 04 2c 84 c0 75 3e [ 555.966356][ C1] RSP: 0018:ffffc90000a08c08 EFLAGS: 00000286 [ 555.966371][ C1] RAX: 0000000000000000 RBX: ffff88806998da90 RCX: ffff88801f338000 [ 555.966383][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffc9001b1a6034 [ 555.966394][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 555.966405][ C1] R10: dffffc0000000000 R11: fffff52000141170 R12: 1ffff1100d331b5d [ 555.966416][ C1] R13: 00000000000003b6 R14: 00000000001a5ff0 R15: ffffc9001b1a5ff0 [ 555.966428][ C1] FS: 00007eff895c1780(0000) GS:ffff88812539c000(0000) knlGS:0000000000000000 [ 555.966442][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 555.966453][ C1] CR2: 0000200000404030 CR3: 000000003445a000 CR4: 00000000003526f0 [ 555.966467][ C1] Call Trace: [ 555.966475][ C1] [ 555.966483][ C1] ? fq_pie_timer+0x4d/0x5b0 [ 555.966507][ C1] call_timer_fn+0x192/0x5e0 [ 555.966526][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 555.966552][ C1] ? call_timer_fn+0xd4/0x5e0 [ 555.966568][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 555.966594][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 555.966617][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 555.966639][ C1] __run_timer_base+0x652/0x8b0 [ 555.966654][ C1] ? ktime_get+0x45/0x220 [ 555.966682][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 555.966706][ C1] run_timer_softirq+0xb7/0x170 [ 555.966722][ C1] handle_softirqs+0x22a/0x840 [ 555.966740][ C1] ? __irq_exit_rcu+0xca/0x220 [ 555.966759][ C1] __irq_exit_rcu+0xca/0x220 [ 555.966775][ C1] irq_exit_rcu+0x9/0x30 [ 555.966789][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 555.966813][ C1] [ 555.966819][ C1] [ 555.966826][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 555.966842][ C1] RIP: 0010:vprintk_emit+0x45d/0x560 [ 555.966863][ C1] Code: 0f 84 44 ff ff ff e8 a2 2b 21 00 fb eb 44 e8 9a 2b 21 00 e8 25 ca 02 0a 4d 85 f6 74 94 e8 8b 2b 21 00 fb 48 c7 c7 40 f0 94 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 cb 18 [ 555.966876][ C1] RSP: 0018:ffffc90002fcf4c0 EFLAGS: 00000293 [ 555.966890][ C1] RAX: ffffffff81a48b15 RBX: ffffffff81a4898f RCX: ffff88801f338000 [ 555.966902][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e94f040 [ 555.966912][ C1] RBP: ffffc90002fcf570 R08: ffffffff903029f7 R09: 1ffffffff206053e [ 555.966924][ C1] R10: dffffc0000000000 R11: fffffbfff206053f R12: 0000000000000000 [ 555.966935][ C1] R13: 000000000000001b R14: 0000000000000200 R15: 1ffff920005f9e9c [ 555.966948][ C1] ? vprintk_emit+0x2cf/0x560 [ 555.966968][ C1] ? vprintk_emit+0x455/0x560 [ 555.967009][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 555.967033][ C1] _printk+0xdd/0x130 [ 555.967057][ C1] ? __pfx__printk+0x10/0x10 [ 555.967077][ C1] ? bcm5974_wellspring_mode+0x2f6/0x5e0 [ 555.967139][ C1] bcm5974_start_traffic+0x12e/0x140 [ 555.967163][ C1] bcm5974_open+0x95/0x150 [ 555.967186][ C1] input_open_device+0x1f8/0x3b0 [ 555.967210][ C1] evdev_open+0x4b1/0x5b0 [ 555.967230][ C1] chrdev_open+0x4cd/0x5e0 [ 555.967247][ C1] ? __pfx_chrdev_open+0x10/0x10 [ 555.967264][ C1] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 555.967289][ C1] ? __pfx_chrdev_open+0x10/0x10 [ 555.967305][ C1] do_dentry_open+0x822/0x13a0 [ 555.967328][ C1] vfs_open+0x3b/0x340 [ 555.967344][ C1] ? path_openat+0x2df0/0x3860 [ 555.967367][ C1] path_openat+0x2e08/0x3860 [ 555.967396][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 555.967420][ C1] ? stack_depot_save_flags+0x33/0x810 [ 555.967443][ C1] ? __pfx_path_openat+0x10/0x10 [ 555.967464][ C1] ? __x64_sys_openat+0x138/0x170 [ 555.967485][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 555.967506][ C1] do_file_open+0x23e/0x4a0 [ 555.967535][ C1] ? __pfx_do_file_open+0x10/0x10 [ 555.967567][ C1] ? _raw_spin_unlock+0x28/0x50 [ 555.967588][ C1] ? alloc_fd+0x64b/0x6c0 [ 555.967611][ C1] do_sys_openat2+0x113/0x200 [ 555.967631][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 555.967650][ C1] ? ksys_read+0x1fc/0x270 [ 555.967672][ C1] ? __pfx_ksys_read+0x10/0x10 [ 555.967695][ C1] __x64_sys_openat+0x138/0x170 [ 555.967715][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.967731][ C1] do_syscall_64+0x174/0x580 [ 555.967747][ C1] ? clear_bhb_loop+0x40/0x90 [ 555.967766][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.967781][ C1] RIP: 0033:0x7eff8964b407 [ 555.967796][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 555.967810][ C1] RSP: 002b:00007ffdc04aea70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 555.967826][ C1] RAX: ffffffffffffffda RBX: 00007eff895c1780 RCX: 00007eff8964b407 [ 555.967838][ C1] RDX: 0000000000080800 RSI: 00007ffdc04aec80 RDI: ffffffffffffff9c [ 555.967849][ C1] RBP: 00007ffdc04aec80 R08: 0000000000000000 R09: 0000000000000000 [ 555.967859][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000020 [ 555.967869][ C1] R13: 00007ffdc04aed80 R14: 000055aca0cd47fe R15: 00007ffdc04aed80 [ 555.967889][ C1] [ 555.969111][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 555.969134][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 555.969156][ T30] Tainted: [L]=SOFTLOCKUP [ 555.969163][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 555.969173][ T30] Call Trace: [ 555.969180][ T30] [ 555.969188][ T30] vpanic+0x56c/0xa60 [ 555.969210][ T30] ? __pfx___schedule+0x10/0x10 [ 555.969233][ T30] ? __pfx_vpanic+0x10/0x10 [ 555.969259][ T30] panic+0xc5/0xd0 [ 555.969276][ T30] ? __pfx_panic+0x10/0x10 [ 555.969294][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 555.969320][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 555.969344][ T30] watchdog+0x102c/0x1030 [ 555.969373][ T30] ? watchdog+0x1c9/0x1030 [ 555.969400][ T30] kthread+0x389/0x470 [ 555.969421][ T30] ? __pfx_watchdog+0x10/0x10 [ 555.969440][ T30] ? __pfx_kthread+0x10/0x10 [ 555.969460][ T30] ret_from_fork+0x514/0xb70 [ 555.969481][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 555.969496][ T30] ? __switch_to+0xc79/0x1410 [ 555.969519][ T30] ? __pfx_kthread+0x10/0x10 [ 555.969539][ T30] ret_from_fork_asm+0x1a/0x30 [ 555.969570][ T30] [ 555.972754][ T30] Kernel Offset: disabled