last executing test programs: 15.217929141s ago: executing program 0 (id=2509): ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000200)={0x2, 0x100, 0x7, {0x0, 0x0, 0x7fe, 0x81}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x2b00, 0x12) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000140)='A', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000080), 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x0, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x3}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x4, 0x7, 0xd, 0xb9, 0x0, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xe7, 0x2, 0xff, 0x0, 0x4, 0x4, 0x7b, 0x209}, {0x1, 0x6, 0x18, 0x5, 0x80, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x0, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0x1, 0x202}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000480)={[{0x9570002, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x1009f83, 0x7, 0xe, 0x2e, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xc, 0x6, 0x46, 0xf8, 0x4f, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3}) 14.66304169s ago: executing program 4 (id=2511): r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_int(r0, 0x1, 0xb, 0x0, &(0x7f00000002c0)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b40), 0x103000, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r3, r4], 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000440)={&(0x7f0000000240)=[r3, r4], 0x2}) fcntl$setstatus(r1, 0x4, 0xc0c00) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="5bbeff01e7e8be6170d4a05ea66555d6b6ce95d60ec762261c5117ce276ced85d67d4ea74931152785cb58dfdf49be8b00c57e49be2a93786cbcd100dc3c9d3ae60c5556902086eed42f88b517c07bc536cb4103c81060b8813e644cf2dd5a2b619bcb4684aaa40284dadd8b6c8a1f90bf7a38900da63481fb731e166ec505ef78730ee12acf21512aa44388f70d360dbc33d27d1e02f286c61a1344c93ed714873df883d469dc1f44a53c4c82374739d70a2d9ca8f5a9a5c685b61ffe235adc0e22864620c30c55f643988f11082f8841d113ff3bf10031b541ab9f8e03cec70396159b", @ANYRESOCT, @ANYRES8=0x0, @ANYRES8], 0x7) 14.455843542s ago: executing program 4 (id=2514): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x101, 0x8, 0x0, 0xb}, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) socket$netlink(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000e40)={0x40, 0x9, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000400)={0x24, &(0x7f0000000100)={0x0, 0x5, 0x28, "b20736757fe51db0b29d485f2b1e25f32d25b5611c7b50c1c1cde3ce8ab0f9ecd39cc120ecda4ce8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="20319a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.304172302s ago: executing program 0 (id=2516): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r4, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e", 0xb61}], 0x2) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000140)) bind$netlink(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_team\x00', 0x7133}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f00000024c0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb72, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x655, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x749, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) readv(r7, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) ioctl$UI_DEV_DESTROY(r7, 0x5502) 10.587264428s ago: executing program 1 (id=2517): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x4, @local}}}, &(0x7f00000001c0)=0x84) r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b3300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900400000000000000010041d800c0000800500040000000000"], 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r4, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x9}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x4}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x10000040) r5 = socket$nl_route(0x10, 0x3, 0x0) listen(r1, 0x2) syz_open_dev$hiddev(&(0x7f0000000040), 0xffff0000, 0x1c1600) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}}, 0x20004004) socket$nl_netfilter(0x10, 0x3, 0xc) 10.262570683s ago: executing program 3 (id=2518): ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000200)={0x2, 0x100, 0x7, {0x0, 0x0, 0x7fe, 0x81}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000140)='A', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000080), 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x0, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x3}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x4, 0x7, 0xd, 0xb9, 0x0, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xe7, 0x2, 0xff, 0x0, 0x4, 0x4, 0x7b, 0x209}, {0x1, 0x6, 0x18, 0x5, 0x80, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x0, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0x1, 0x202}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000480)={[{0x9570002, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x1009f83, 0x7, 0xe, 0x2e, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xc, 0x6, 0x46, 0xf8, 0x4f, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3}) 10.191211063s ago: executing program 1 (id=2519): syz_io_uring_setup(0x24fb, &(0x7f00000004c0)={0x0, 0x0, 0x10100, 0x0, 0x201}, &(0x7f0000000200), &(0x7f0000000140)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xc0042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000540)={[0xfffffffffffffffd, 0x0, 0x8000, 0x4, 0x0, 0x0, 0x2004cb, 0x1, 0xfffffffffffffffe, 0x3, 0x0, 0x90, 0x0, 0x0, 0x2, 0x7ffffffe], 0x80a0000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0xb471, 0x7, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x200000000000000], 0x8080000, 0x42240}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000004480)=@newlink={0x48, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000c00)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c0311040000000c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYBLOB="0635d3fb90fe59"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x22048000}, 0x40840) 9.896094871s ago: executing program 0 (id=2521): add_key$user(0x0, 0x0, &(0x7f0000000100)="370c099069effa43de", 0x9, 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000280)='\x00') 9.467509276s ago: executing program 4 (id=2522): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x9, 0x14, 0xc2}, &(0x7f00000007c0)=0x0, &(0x7f0000000200)) r6 = socket$alg(0x26, 0x5, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003940)={&(0x7f0000000680)=@proc={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc, &(0x7f0000000740)=[{&(0x7f0000002140)={0x458, 0x40, 0x800, 0x70bd2d, 0x25dfdbfc, "", [@nested={0xc6, 0x58, 0x0, 0x1, [@generic="a4836b59dcdd90b07616e15ba3c7f7fcb6d6d33ffc43b2c67dc2cc14e6b2dd0b8c5d32dbb27a615cd1953f751b0639433d8c69608de6820c5718a3d7223f3d0b4f0cf35f19ae6d0f61f0ea5a07e6bd3bee1ad724c03e6694299dccb9e41f5e3bb556dad3cfce6face62c6275f5e4411cfaf0f8d54bf2471d33195c52826da9fcb66d934d0d7997a0cd9850668cdfe1f75c97d3ce7deae8f8c5f1004114542e9db1bfdda1efb488ed6b7859ed3fd143294dc535083a61e57e84b9ad071562", @nested={0x4, 0x35}]}, @generic="164cc9c77c8c11b2c03c985bb2a0b553645ef8dfed039d3dea84f8ddc6d6846d613fb29d2206304dd4eea2a96d4ef6e550c51a301b649a71aa572902cb8acf134e981b0105d70219afa58a39f764049b4b2057c7cba61735154a67dcb946a3953f19a026e1f681e61f15bc6925f1f67566abadb93628af79a071f464316d8a4f99d9609140f8a54bbe47b8d31eebeed60d8d28cf7a470058a2e5fd6c13ea35adf693ea2b", @nested={0x3d, 0x3e, 0x0, 0x1, [@nested={0x4, 0x44}, @generic="1e70184c3095d899c947c39bdcc3f91ead2457411b60e1a5a5327796e589dc554f1b881b00f0c1ced263e422b1f4157859385a4f9a"]}, @nested={0xf0, 0x12b, 0x0, 0x1, [@typed={0xe4, 0x6e, 0x0, 0x0, @binary="9e57bb54c056e949418f4bc9bdb58d8904e9824586164c636ecd2d1ec2d7cfe47389065315ab92e91dc6e0a1c360e964b800ea88f8400b60347ec3c34509a6bd46522cba49fc6df99232a78397e08a3af24d19c99a9fd9ba3584e11eea94d9d83c60546c4499c7ab11c4dc2c24d06b00a4229bb3b6637939eccb5e1457d5a2c774aa4880964d892b8b1eeecb16750b74ffedb713fd2579d7f0d437da42ec4ed287f436c9b6e7818336988aaa2f1dde48c499531f8689c0df54c418addcd9aa177d5f316217b7b67040a6a9601d73352233f16cfdf6fe557dc7df6800cf5d7091"}, @typed={0x8, 0x42, 0x0, 0x0, @u32}]}, @nested={0x20, 0x60, 0x0, 0x1, [@nested={0x4, 0xd7}, @typed={0xa, 0xce, 0x0, 0x0, @str='^),:\x9d\x00'}, @nested={0x4, 0x18}, @typed={0x8, 0x2d, 0x0, 0x0, @ipv4=@empty}]}, @typed={0x9, 0x5f, 0x0, 0x0, @str='@:\xc5+\x00'}, @typed={0xbc, 0x12c, 0x0, 0x0, @binary="fac3c0141e3adaaaf3b7376ee937958e8e99b7060bed4cc1a526088fecce893d3f0a2983d0f657994a5bdeb014f2af89a9932eac59ddf94f064f72e76717b0861fe2e4ef954b2d9ddddf3805363eb9706a25b7672fb5c47e94d88f21082e753e680f3234ea26881b93973580d696f732214067a2d5dc91826f7dbb1dcc787c4e8b2d5c1e2eab2c7df4d768772b3dd58df24f457fbc22ea35e63ff78b68b1556e4ba923b4f448eedf2658f17fe48d0b8c668c853748488d45"}, @generic, @generic="d2ca7da41789e596ecf56604669cab1c7f89978d1564e43273efbe9b65fbd0af6878f9fd247379efca0a81ace7fa250a3176c8ded94ec4ced135bdbb0640a191a88aa71266b99c11caa514ced7209b7ea8cc77ab46beb1ffe101ee7da7484b679d47f32a30b04dcea12b5ab490768181225835cef44bff503209dc2f7803f7a12c6c3eeb91de9d554867bcfd18806c040263046865e1baa7daa63e080a1706447aa40767081765600300d61439f5ffb93fdf7efff0cc90c870af91", @typed={0x8, 0x2a, 0x0, 0x0, @pid}]}, 0x458}, {&(0x7f00000006c0)={0x10, 0x2e, 0x300, 0x70bd27, 0x25dfdbfe}, 0x10}, {&(0x7f0000000cc0)={0x190, 0x3a, 0x800, 0x70bd27, 0x25dfdbfb, "", [@typed={0x8, 0xcb, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="de38857969b3189a5878b8e1e0b3a2d85e713840fcfdfb56783f64436b2f417062ba7759ae94bd5576b3a65ef1a2d88795437dc4ebc08b59b1496ed23efd07200b3d7f1dad847e9cf7da3477f1f0229370d4c74fa4114e005db028095bc6550bb454d3d3050731847037461d2c56006b4399325338e0076e2ed5a7052cd94b814e4a9c83953ef3377d443fbc46d61723a34393965b3d4c85e79cea1853f63e4c9711aa6e72f43dcb176f2d2076cdbf292b955336c7ae0956d3fed948f5468ed2617450a32dfc", @nested={0xac, 0x51, 0x0, 0x1, [@generic="35c92aac336637ace6a168bd24479fbd6d769c9dc672dd487c2bb6955bc02e99371010413b6acb882cd48e883b415f4127f9de74dbb6b39cbc447804a1f3c65187dbbf9603ca67359397a26e20fe3cb3c2b4124477c3c17943152f8e5482793459bb326733f442fa19d64424e4c94607d8ff6eec57d02ca8b2c6dc3e6b26aed0a3ea61539b4665306e69e3754b6168aedd7117a9", @nested={0x4, 0x9f}, @typed={0xc, 0xb, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0x31}]}, @typed={0x4, 0x10f}]}, 0x190}, {&(0x7f0000000700)={0x10, 0x42, 0x800, 0x70bd27, 0x25dfdbfe}, 0x10}, {&(0x7f0000000e80)={0x414, 0x3e, 0x20, 0x70bd27, 0x25dfdbfb, "", [@typed={0xc, 0xbb, 0x0, 0x0, @u64=0x7}, @nested={0x11c, 0x1c, 0x0, 0x1, [@generic="85e9a216d42eb2f168c7452db6b0ff9113", @nested={0x4, 0x101}, @typed={0x90, 0x10b, 0x0, 0x0, @binary="8cf76efba193b3b287a35339a7745f7551d81893f648b71b66e54f152a595195772d98f6790e4f862e32d38dbb76f19f1883bb85b9cb532845e4104141e684a164abd9c890e9eaf5cb6cddaf2560ffbe8ea7e462c2d23c27c17285c7d0ca64cea76a77b953d5d4ca9aa751addca846affab1c896bebf69d7989369b6b2b5c5f6cb110d5369c108701537b740"}, @generic="759c249865a33e318e1fa697b0d9b60ff432254d8d2ed16dfe13f28dc03a03f1ab62f1afc66b20bc03f8308d1358535555b0775b53efd0bc194c9ba1ea7812f3a0ce24a462102e558668df0b5f35ce1b2f299b427d5007cb787478497f551e6525cbd9ba29f8fa65b7b8a4f3c0e129", @typed={0x4, 0xd1}]}, @nested={0xfd, 0x37, 0x0, 0x1, [@generic="68a2f8ad62e95ace611340473a73d8506bb992bd710b0cd230c1eb4272abd72fae3c4227f4425288833289bbdd877f623f22376419be1d3f53ab6439e19c6c03a7da33174ada4c95b715364098b6a9ab9a116ba6a6d8641124017c7c61838f1802561753e5121c3205249a450276de01141d73d33d29b6d91a", @generic="981da937775e3e69da84dbee85fdb89097505768b142fee4f5d7b51316a6616690df15c45205e3da75af1e51bc2aa700ecaab73d9de2b985e6658a8e229111a60fc3e711029a70bb982fb6310d4ad9905288940fe3d0f3013866ebd9ea540423538ea019e02863ec2a35dd6510fc10c840b1cbf9c36c66d0f4946e0f1e80292c"]}, @generic="504806035d215a039ec2bdd1c2d56d592783287ca2e67e6578006ee1c5f07de8e47d4551cbaf2ed2155fb0f30532088c1b44e0631d2b0c30ddd0944dd27b1b90aee103fc2f88993f9d527260aa2faf4fef3f0609a26f9a0e6acce7852d6a7e5643b7c485b5821fac05b9a0c40fedb1e9041fbec7fe85b7f2f07d676e142aa8d6453ddf6a7efac43dd104566ce743dec90b1a112034d59f4e94774f0027effb1af8b19abbcd802523f9ca28984f2bfb0a46bef07195a0c032c7cb99514df56f2c015f1d973e409d17c436f49cf1b87f01ae6249596ab922b8adcb4018f4b4cce7c8238f4cbe3e2f3f05", @nested={0xc4, 0xc3, 0x0, 0x1, [@generic="f01e48d6f8a8a5647799e0f6f6dfdc7b4bd13351b80c87d2594dfad835e679a7c9f91c13a857217ebc2b56a3bcd3739a19d2df526b91844fd808116df356b404eb6cb13b189b36f93da7f2398f86611f39b50fb424b9df464657b0302770486d784302b393e31019aa3b8b7a7b0b024cf93a6e1013b8cf92afeb7905226bd3252a4ad2e13053f1934b5e8686593b77ecc07385a54b4482f589e436e24d3025aa9fca351f7661b0888cd790f07e8a0075fa5ed196b8e7036b444cf29f", @nested={0x4, 0x13c}]}, @nested={0x18, 0xfd, 0x0, 0x1, [@nested={0x4, 0x69}, @nested={0x4, 0xf4}, @nested={0x4, 0x4f}, @typed={0x8, 0x12c, 0x0, 0x0, @fd=r3}]}, @generic="894fa81aa5c100291083098a6f30", @generic="01a67912dd6779"]}, 0x414}, {&(0x7f00000013c0)={0x8c, 0x22, 0x100, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x7c, 0xa6, 0x0, 0x1, [@nested={0x4}, @nested={0x4, 0xf9}, @generic="4bd0ff1a2719c1d0b10d117d74f186a52dd9e7813dd95e10002bd37c5da730b963a9e68a4c425d6111372f9c9e1a89ca35ba83f7723b22c96e417dfd28be908b1d1bf710f07f875a35db2f229a53e96479f28cc30a70914d7727bb6726c2975a867d6317947d5056aef2fc8b", @nested={0x4, 0x138}]}]}, 0x8c}], 0x6, &(0x7f0000002000)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000100000001000000", @ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="300000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="14000000010000000100000042d176a624d8179e9f965b5e0000000000ab5f53ab8e502035547f0dc73fd60400cfde19ee0f9ff4", @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000100000001000000", @ANYRES32=r4, @ANYRES32=r0], 0xfc}, 0x8080) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) close(0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xfffffffe) recvmsg$can_j1939(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000400)=""/143, 0x8f}], 0x1, &(0x7f00000004c0)=""/66, 0x42}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) syz_emit_ethernet(0xae, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6000030800783a00fc010000000000000000000000000000fe8000000000000000000000000000aa0200907800e6a83811000000605b52ab00002b00fc000000000000000000000000000000fc0000000000000000000000000000000004040201000000fc020000000000000000000000000000fe8800000000000000000000000000018802000000000000c910fe8000000000000000000000000000bb00000000"], 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r8, 0xc25c4111, &(0x7f0000000100)={0x3, [[0x7, 0x101, 0xc58c, 0x3, 0x4c7, 0x5, 0x4, 0x8], [0x2, 0x6, 0xd4, 0x7, 0x4, 0x4, 0x400, 0x3], [0x7ff, 0xffffff21, 0x1, 0x8, 0x5, 0x800000, 0x1, 0x6]], '\x00', [{0x5, 0x9, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x9, 0x1, 0x1, 0x1}, {0x1, 0x7fffffff, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x7fff, 0x0, 0x0, 0x1, 0x1}, {0x9, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xfffffff7, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x1, 0x0, 0x1}, {0xe3, 0x8c4, 0x0, 0x1, 0x1, 0x1}, {0x1000, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x9, 0x4, 0x0, 0x0, 0x1}, {0xb85, 0x4, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x0, 0x1}], '\x00', 0xc823}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="04030000090000000000000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) 9.03924046s ago: executing program 3 (id=2523): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r3) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r3) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_FAMILY={0x5, 0xd, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xce891f6b69d8060b) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000300)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r9], &(0x7f00000000c0)=[0x2], &(0x7f0000000280)=[r10, r10], &(0x7f0000000040)=[0x0]}) setsockopt$inet6_opts(r6, 0x29, 0x4d, &(0x7f0000000400)=ANY=[@ANYRES16], 0x8) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0xfffffffffffffdf0}, 0x0) sendto$inet6(r11, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={0x0, r12, 0x0, 0x3000000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xc, @loopback, 0x8}, r12}}, 0x30) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, &(0x7f0000001a40)=ANY=[], 0x0) 8.111400342s ago: executing program 3 (id=2524): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x28900) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000280)={0x0, 0x0}) syz_usb_connect(0x4, 0x5f, &(0x7f0000000300)=ANY=[@ANYBLOB="846d8da59d13ab5c681ae92ec0bba21f9519f427d09c59da57233b39a7c2c8d1e52b87c33d567ff38885cecc18e810d6171aa4d22fe7774a66141382282ae7f52a6fda08c5efa2641c9ed77184369c908c5fcb80386f8514beb4b9782ad55f1bdf01eb81822afd661d1951b4dfbe23f6a370e12a6c01cf8fc8e14726daf3f163f2c162", @ANYRES8, @ANYRES16, @ANYRES64=r1], 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e7, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0x4, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x588, 0x6, 0xf667, 0xfffffffc, 0x7, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x83, 0xe39, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0xca0, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x4e27, 0x3ff, 0x0, 0x8356, 0x0, 0x100006, 0x9b7, 0x1, 0x80000001, 0x7f, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, 0x0, 0x0) madvise(&(0x7f0000bdd000/0x2000)=nil, 0x2000, 0xa) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0x3eb, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x400, 0x0, 0x6, 0xfd}) r7 = openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) r8 = dup2(r6, r7) read$FUSE(r8, &(0x7f0000004380)={0x2020}, 0x2020) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0x10, 0x2, 0x4) 7.603901643s ago: executing program 1 (id=2525): add_key$user(0x0, 0x0, &(0x7f0000000100)="370c099069ef", 0x6, 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000280)='\x00') 6.737446894s ago: executing program 2 (id=2526): ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000200)={0x2, 0x100, 0x7, {0x0, 0x0, 0x7fe, 0x81}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x2b00, 0x12) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000140)='A', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000080), 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x0, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x3}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x4, 0x7, 0xd, 0xb9, 0x0, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xe7, 0x2, 0xff, 0x0, 0x4, 0x4, 0x7b, 0x209}, {0x1, 0x6, 0x18, 0x5, 0x80, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x0, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0x1, 0x202}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000480)={[{0x9570002, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x1009f83, 0x7, 0xe, 0x2e, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xc, 0x6, 0x46, 0xf8, 0x4f, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3}) 6.611995971s ago: executing program 0 (id=2527): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) socket$kcm(0xa, 0x3, 0x87) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[], 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_getevents(0x0, 0x9, 0x0, 0x0, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc) read$char_usb(r1, &(0x7f0000000100)=""/67, 0x43) syz_usb_disconnect(r0) pipe2$9p(0x0, 0x0) epoll_create1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000400)={{0x5, 0x7}, 0x100, './file0\x00'}) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000240)) 5.743269628s ago: executing program 4 (id=2528): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r4, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e", 0xb61}], 0x2) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000140)) bind$netlink(r2, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_team\x00', 0x7133}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f00000024c0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb72, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x655, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x749, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) readv(r7, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) ioctl$UI_DEV_DESTROY(r7, 0x5502) 5.330848296s ago: executing program 2 (id=2529): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0xfffff041) 4.620858273s ago: executing program 1 (id=2530): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9c000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8201000000420000140003006272696467655f736c6176655f30000008000400d4000000600016805c00018010000200f9ffffff"], 0x9c}}, 0x0) r1 = socket$packet(0x11, 0x1, 0x300) unshare(0x24020400) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080), 0x4) 4.212359488s ago: executing program 3 (id=2531): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000280)=0x1, 0x4) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=@bridge_setlink={0x8c, 0x13, 0x300, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, r7, 0x0, 0x1000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_1\x00'}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}]}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_TXQLEN={0x8, 0xd, 0x764d}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20004801}, 0x400c0) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000000)=0x60) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="fdaf00000000000000000e00000008000300", @ANYRES32], 0x1c}}, 0x0) 4.119756337s ago: executing program 1 (id=2532): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f1d5c0d99381b2ad39b78b466added66db275e163ab3cc23bf3014c40900ff0004000e00000000fb02000000", @ANYRES8=0x0], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x2588, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000200)=@file={0x1}, 0x6e) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000003c0)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x00']}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7a, 0xdd, 0x15, 0x20, 0x545, 0x8080, 0x301, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0xc3, 0x85}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) 3.830229202s ago: executing program 2 (id=2533): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x4, 0x53, 0x4, 0x7b, @dev={0xfe, 0x80, '\x00', 0x2b}, @mcast2={0xff, 0x5}, 0x8, 0x0, 0x40007d, 0x7f}}) (fail_nth: 9) 3.777088926s ago: executing program 4 (id=2534): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r3) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r3) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_FAMILY={0x5, 0xd, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xce891f6b69d8060b) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000300)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r9], &(0x7f00000000c0)=[0x2], &(0x7f0000000280)=[r10, r10], &(0x7f0000000040)=[0x0]}) setsockopt$inet6_opts(r6, 0x29, 0x4d, &(0x7f0000000400)=ANY=[@ANYRES16], 0x8) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0xfffffffffffffdf0}, 0x0) sendto$inet6(r11, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={0x0, r12, 0x0, 0x3000000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xc, @loopback, 0x8}, r12}}, 0x30) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, &(0x7f0000001a40)=ANY=[], 0x0) 3.707732585s ago: executing program 2 (id=2535): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0), 0x4) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x20004440) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r4, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r4, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) read(r3, &(0x7f00000004c0)=""/138, 0x8a) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {0x0, 0x9}, {0x0, 0x80000001}, {}, {0x0, 0xffdffffe}, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) 3.266702906s ago: executing program 0 (id=2536): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011801000000405804155000000000000109022d00010000000909040004010300000009210400040122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xd, {[@main=@item_4={0x3, 0x0, 0xa, "eed193c2"}, @global=@item_012={0x2, 0x1, 0x3, "cf63"}, @global=@item_4={0x3, 0x1, 0x3, "640e6abd"}]}}, 0x0}, 0x0) 3.206964243s ago: executing program 3 (id=2537): add_key$user(0x0, 0x0, &(0x7f0000000100)="370c099069effa43de", 0x9, 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000280)='\x00') 2.899126459s ago: executing program 4 (id=2538): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x28900) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000280)={0x0, 0x0}) syz_usb_connect(0x4, 0x5f, &(0x7f0000000300)=ANY=[@ANYBLOB="846d8da59d13ab5c681ae92ec0bba21f9519f427d09c59da57233b39a7c2c8d1e52b87c33d567ff38885cecc18e810d6171aa4d22fe7774a66141382282ae7f52a6fda08c5efa2641c9ed77184369c908c5fcb80386f8514beb4b9782ad55f1bdf01eb81822afd661d1951b4dfbe23f6a370e12a6c01cf8fc8e14726daf3f163f2c162", @ANYRES8, @ANYRES16, @ANYRES64=r1], 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e7, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0x4, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x588, 0x6, 0xf667, 0xfffffffc, 0x7, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x83, 0xe39, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0xca0, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x4e27, 0x3ff, 0x0, 0x8356, 0x0, 0x100006, 0x9b7, 0x1, 0x80000001, 0x7f, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, 0x0, 0x0) madvise(&(0x7f0000bdd000/0x2000)=nil, 0x2000, 0xa) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0x3eb, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x400, 0x0, 0x6, 0xfd}) r7 = openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) r8 = dup2(r6, r7) read$FUSE(r8, &(0x7f0000004380)={0x2020}, 0x2020) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0x10, 0x2, 0x4) 2.373930608s ago: executing program 2 (id=2539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0xff}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) (fail_nth: 9) 1.084271622s ago: executing program 1 (id=2540): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r4, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e", 0xb61}], 0x2) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000140)) bind$netlink(r2, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f00000024c0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb72, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x655, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x749, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) readv(r7, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) ioctl$UI_DEV_DESTROY(r7, 0x5502) 1.083954719s ago: executing program 2 (id=2541): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x28900) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000280)={0x0, 0x0}) syz_usb_connect(0x4, 0x5f, &(0x7f0000000300)=ANY=[@ANYBLOB="846d8da59d13ab5c681ae92ec0bba21f9519f427d09c59da57233b39a7c2c8d1e52b87c33d567ff38885cecc18e810d6171aa4d22fe7774a66141382282ae7f52a6fda08c5efa2641c9ed77184369c908c5fcb80386f8514beb4b9782ad55f1bdf01eb81822afd661d1951b4dfbe23f6a370e12a6c01cf8fc8e14726daf3f163f2c162", @ANYRES8, @ANYRES16, @ANYRES64=r1], 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e7, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0x4, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x588, 0x6, 0xf667, 0xfffffffc, 0x7, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x83, 0xe39, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0xca0, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x4e27, 0x3ff, 0x0, 0x8356, 0x0, 0x100006, 0x9b7, 0x1, 0x80000001, 0x7f, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, 0x0, 0x0) madvise(&(0x7f0000bdd000/0x2000)=nil, 0x2000, 0xa) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0x3eb, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x400, 0x0, 0x6, 0xfd}) r7 = openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) r8 = dup2(r6, r7) read$FUSE(r8, &(0x7f0000004380)={0x2020}, 0x2020) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) socket$inet6(0x10, 0x2, 0x4) 183.126868ms ago: executing program 0 (id=2542): socket$kcm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000e86dd600000000018870000000000000000000000ffffac1414bbff020000000000000000000000000001320201060000000020e8ff00000000000000000000000001"], 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1001, 0x0, 0x2}, 0xd, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket$kcm(0x10, 0x2, 0x4) connect(r2, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x65, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1, 0x1}, 0x80) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r4 = openat$vcsa(0xffffff9c, &(0x7f00000003c0), 0x10001, 0x0) renameat2(r4, &(0x7f0000000140)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x9) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r5 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) personality(0x5400004) ppoll(0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f00000001c0)={[0x3cf, 0x900]}, 0x8) connect$inet(r6, &(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r8 = semget$private(0x0, 0x6, 0x0) semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f0000000280)={{0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20, 0x3}, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x21}) socket$tipc(0x1e, 0x2, 0x0) 0s ago: executing program 3 (id=2543): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000003169000001"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r5, @ANYRES64=0x0, @ANYRESOCT=r4], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffe0, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0xb5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240008c0}, 0x0) kernel console output (not intermixed with test programs): uid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16124 comm="syz.2.2379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1202.437200][ C1] vkms_vblank_simulate: vblank timer overrun [ 1202.443769][ T30] audit: type=1326 audit(1756261338.172:7607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16124 comm="syz.2.2379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1202.466174][ C1] vkms_vblank_simulate: vblank timer overrun [ 1202.474105][ T30] audit: type=1326 audit(1756261338.172:7608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16124 comm="syz.2.2379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1202.496963][ T30] audit: type=1326 audit(1756261338.172:7609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16124 comm="syz.2.2379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1202.519665][ C1] vkms_vblank_simulate: vblank timer overrun [ 1202.526161][ T30] audit: type=1326 audit(1756261338.172:7610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16124 comm="syz.2.2379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1202.548852][ C1] vkms_vblank_simulate: vblank timer overrun [ 1202.555082][ T30] audit: type=1326 audit(1756261338.182:7611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16124 comm="syz.2.2379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1202.577720][ T30] audit: type=1326 audit(1756261338.182:7612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16124 comm="syz.2.2379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1202.600144][ C1] vkms_vblank_simulate: vblank timer overrun [ 1202.606721][ T30] audit: type=1326 audit(1756261338.182:7613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16124 comm="syz.2.2379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1202.783778][T14082] usb 4-1: USB disconnect, device number 83 [ 1203.216238][ T43] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1203.455717][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 1203.468852][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1203.486098][T14082] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1203.504646][ T43] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1203.536215][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.578248][ T43] usb 5-1: config 0 descriptor?? [ 1203.676510][T14082] usb 4-1: Using ep0 maxpacket: 16 [ 1203.683606][T14082] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.744416][ T9023] usb 2-1: USB disconnect, device number 77 [ 1203.786768][T14082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1203.845031][T14082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1203.883305][T14082] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1203.907851][T16137] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2383'. [ 1203.917331][T16137] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2383'. [ 1203.930031][T14082] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1203.957185][T14082] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1204.004565][T14082] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1204.029900][T16141] capability: warning: `syz.2.2384' uses deprecated v2 capabilities in a way that may be insecure [ 1204.035581][ T43] hid-multitouch 0003:0EEF:72C4.0040: item fetching failed at offset 4/5 [ 1204.053859][T14082] usb 4-1: Manufacturer: syz [ 1204.084908][T14082] usb 4-1: config 0 descriptor?? [ 1204.091706][ T43] hid-multitouch 0003:0EEF:72C4.0040: probe with driver hid-multitouch failed with error -22 [ 1204.850632][T14082] rc_core: IR keymap rc-hauppauge not found [ 1204.858426][T14082] Registered IR keymap rc-empty [ 1204.872486][T14082] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1204.906194][T14082] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1204.933974][T14082] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1204.958564][T14082] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input366 [ 1205.042836][T14082] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1205.076245][ T43] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1205.448282][T14082] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1205.470718][ T43] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10601, setting to 1024 [ 1205.483584][T14082] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1205.494455][ T43] usb 3-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1205.516232][T14082] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1205.525068][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1205.546972][T14082] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1205.555042][ T43] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1205.566350][ T43] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1205.578391][ T43] usb 3-1: Product: syz [ 1205.582765][ T43] usb 3-1: Manufacturer: syz [ 1205.588123][T14082] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1205.596590][ T43] usb 3-1: SerialNumber: syz [ 1205.604251][ T43] usb 3-1: config 0 descriptor?? [ 1205.609901][T14082] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1205.621419][T16153] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1205.641526][ T43] usb 3-1: selecting invalid altsetting 0 [ 1205.686338][T14082] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1205.906290][T14082] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1205.949477][T14082] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1205.992164][T14082] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1206.012237][T14082] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1206.035027][T14082] usb 4-1: USB disconnect, device number 84 [ 1206.172407][T16160] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2387'. [ 1206.183282][T16161] netlink: 'syz.3.2388': attribute type 10 has an invalid length. [ 1206.213678][T16161] team0: Port device bridge0 added [ 1207.326800][T14082] usb 5-1: USB disconnect, device number 75 [ 1207.446143][T16173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2392'. [ 1207.470323][T16151] snd-usb-audio 3-1:0.0: Runtime PM usage count underflow! [ 1207.487325][T15836] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1207.493435][ T43] usb 3-1: USB disconnect, device number 104 [ 1207.541140][T16177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2393'. [ 1207.686341][T15836] usb 4-1: Using ep0 maxpacket: 32 [ 1207.742024][T15836] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1207.816734][T15836] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1207.832252][T15836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.876502][T15836] usb 4-1: Product: syz [ 1207.890578][T15836] usb 4-1: Manufacturer: syz [ 1207.943357][T15836] usb 4-1: SerialNumber: syz [ 1207.964492][T16189] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1207.973651][ T30] kauditd_printk_skb: 183 callbacks suppressed [ 1207.973670][ T30] audit: type=1326 audit(1756261344.412:7797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16179 comm="syz.2.2394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1208.002309][ C1] vkms_vblank_simulate: vblank timer overrun [ 1208.016481][T16189] CPU: 1 UID: 0 PID: 16189 Comm: syz.2.2394 Not tainted syzkaller #0 PREEMPT(full) [ 1208.016509][T16189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1208.016521][T16189] Call Trace: [ 1208.016530][T16189] [ 1208.016540][T16189] dump_stack_lvl+0x189/0x250 [ 1208.016576][T16189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1208.016602][T16189] ? __pfx__printk+0x10/0x10 [ 1208.016632][T16189] ? __rcu_read_unlock+0x84/0xe0 [ 1208.016659][T16189] ? kernfs_path_from_node+0x2f/0x290 [ 1208.016681][T16189] ? kernfs_path_from_node+0x250/0x290 [ 1208.016702][T16189] ? kernfs_path_from_node+0x2f/0x290 [ 1208.016729][T16189] sysfs_warn_dup+0x8e/0xa0 [ 1208.016750][T16189] sysfs_do_create_link_sd+0xc0/0x110 [ 1208.016773][T16189] device_add_class_symlinks+0x1cf/0x240 [ 1208.016800][T16189] device_add+0x475/0xb50 [ 1208.016827][T16189] wiphy_register+0x1ba6/0x28d0 [ 1208.016877][T16189] ? __pfx_wiphy_register+0x10/0x10 [ 1208.016905][T16189] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 1208.016938][T16189] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 1208.016967][T16189] ieee80211_register_hw+0x3425/0x4080 [ 1208.017011][T16189] ? ieee80211_register_hw+0x1471/0x4080 [ 1208.017043][T16189] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1208.017095][T16189] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 1208.017160][T16189] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1208.017185][T16189] ? trace_kmalloc+0x1f/0xd0 [ 1208.017207][T16189] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1208.017234][T16189] ? kstrndup+0xbf/0x160 [ 1208.017347][T16189] hwsim_new_radio_nl+0xea4/0x1b10 [ 1208.017380][T16189] ? __pfx___nla_validate_parse+0x10/0x10 [ 1208.017448][T16189] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1208.017492][T16189] ? __nla_parse+0x40/0x60 [ 1208.017527][T16189] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1208.017565][T16189] genl_family_rcv_msg_doit+0x215/0x300 [ 1208.017600][T16189] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1208.017644][T16189] ? bpf_lsm_capable+0x9/0x20 [ 1208.017671][T16189] ? security_capable+0x7e/0x2e0 [ 1208.017711][T16189] genl_rcv_msg+0x60e/0x790 [ 1208.017745][T16189] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1208.017768][T16189] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1208.017815][T16189] netlink_rcv_skb+0x205/0x470 [ 1208.017843][T16189] ? __lock_acquire+0xab9/0xd20 [ 1208.017874][T16189] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1208.017900][T16189] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1208.017956][T16189] ? down_read+0x1ad/0x2e0 [ 1208.017981][T16189] genl_rcv+0x28/0x40 [ 1208.018002][T16189] netlink_unicast+0x82c/0x9e0 [ 1208.018043][T16189] ? __pfx_netlink_unicast+0x10/0x10 [ 1208.018067][T16189] ? security_netlink_send+0x237/0x290 [ 1208.018092][T16189] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 1208.018127][T16189] netlink_sendmsg+0x805/0xb30 [ 1208.018166][T16189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1208.018197][T16189] ? __import_iovec+0x5d4/0x7f0 [ 1208.018218][T16189] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1208.018249][T16189] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1208.018271][T16189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1208.018304][T16189] __sock_sendmsg+0x219/0x270 [ 1208.018337][T16189] ____sys_sendmsg+0x505/0x830 [ 1208.018367][T16189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1208.018399][T16189] ? finish_task_switch+0x266/0x950 [ 1208.018435][T16189] ___sys_sendmsg+0x21f/0x2a0 [ 1208.018461][T16189] ? __pfx____sys_sendmsg+0x10/0x10 [ 1208.018529][T16189] ? __fget_files+0x2a/0x420 [ 1208.018558][T16189] ? __fget_files+0x3a0/0x420 [ 1208.018608][T16189] __sys_sendmsg+0x164/0x220 [ 1208.018634][T16189] ? __pfx___sys_sendmsg+0x10/0x10 [ 1208.018652][T16189] ? irqentry_exit+0x74/0x90 [ 1208.018712][T16189] __do_fast_syscall_32+0xb6/0x2b0 [ 1208.018743][T16189] ? lockdep_hardirqs_on+0x9c/0x150 [ 1208.018778][T16189] do_fast_syscall_32+0x34/0x80 [ 1208.018809][T16189] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1208.018833][T16189] RIP: 0023:0xf7fe3539 [ 1208.018853][T16189] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1208.018871][T16189] RSP: 002b:00000000f54c455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1208.018894][T16189] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 1208.018909][T16189] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 1208.018921][T16189] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1208.018933][T16189] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1208.018945][T16189] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1208.018979][T16189] [ 1208.471670][ C1] vkms_vblank_simulate: vblank timer overrun [ 1208.531041][ T30] audit: type=1326 audit(1756261344.422:7798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16179 comm="syz.2.2394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1208.554726][ T30] audit: type=1326 audit(1756261344.422:7799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16179 comm="syz.2.2394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1208.599081][T15836] usb 4-1: config 0 descriptor?? [ 1208.608016][T14082] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1208.700453][T16195] input: syz1 as /devices/virtual/input/input369 [ 1208.968225][T16191] input: syz1 as /devices/virtual/input/input368 [ 1209.029459][ T30] audit: type=1326 audit(1756261344.422:7800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16179 comm="syz.2.2394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1209.059144][ T30] audit: type=1326 audit(1756261344.422:7801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16179 comm="syz.2.2394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1209.244289][T16190] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1209.252737][T16190] CPU: 1 UID: 0 PID: 16190 Comm: syz.0.2396 Not tainted syzkaller #0 PREEMPT(full) [ 1209.252765][T16190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1209.252777][T16190] Call Trace: [ 1209.252788][T16190] [ 1209.252797][T16190] dump_stack_lvl+0x189/0x250 [ 1209.252830][T16190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1209.252855][T16190] ? __pfx__printk+0x10/0x10 [ 1209.252889][T16190] ? kernfs_path_from_node+0x2f/0x290 [ 1209.252911][T16190] ? kernfs_path_from_node+0x250/0x290 [ 1209.252931][T16190] ? kernfs_path_from_node+0x2f/0x290 [ 1209.252956][T16190] sysfs_warn_dup+0x8e/0xa0 [ 1209.252977][T16190] sysfs_do_create_link_sd+0xc0/0x110 [ 1209.253001][T16190] device_add_class_symlinks+0x1cf/0x240 [ 1209.253027][T16190] device_add+0x475/0xb50 [ 1209.253052][T16190] wiphy_register+0x1ba6/0x28d0 [ 1209.253077][T16190] ? trace_irq_disable+0x37/0x110 [ 1209.253120][T16190] ? __pfx_wiphy_register+0x10/0x10 [ 1209.253158][T16190] ? ieee80211_register_hw+0x325a/0x4080 [ 1209.253187][T16190] ieee80211_register_hw+0x3425/0x4080 [ 1209.253240][T16190] ? ieee80211_register_hw+0x1471/0x4080 [ 1209.253272][T16190] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1209.253310][T16190] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1209.253345][T16190] ? __hrtimer_setup+0x187/0x210 [ 1209.253363][T16190] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1209.253393][T16190] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 1209.253454][T16190] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1209.253476][T16190] ? trace_kmalloc+0x1f/0xd0 [ 1209.253497][T16190] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1209.253522][T16190] ? kstrndup+0xbf/0x160 [ 1209.253553][T16190] hwsim_new_radio_nl+0xea4/0x1b10 [ 1209.253580][T16190] ? __pfx___nla_validate_parse+0x10/0x10 [ 1209.253626][T16190] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1209.253665][T16190] ? __nla_parse+0x40/0x60 [ 1209.253696][T16190] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1209.253729][T16190] genl_family_rcv_msg_doit+0x215/0x300 [ 1209.253764][T16190] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1209.253805][T16190] ? bpf_lsm_capable+0x9/0x20 [ 1209.253828][T16190] ? security_capable+0x7e/0x2e0 [ 1209.253866][T16190] genl_rcv_msg+0x60e/0x790 [ 1209.253898][T16190] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1209.253922][T16190] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1209.253949][T16190] ? __asan_memcpy+0x40/0x70 [ 1209.253970][T16190] ? __pfx_ref_tracker_free+0x10/0x10 [ 1209.254007][T16190] netlink_rcv_skb+0x205/0x470 [ 1209.254033][T16190] ? __lock_acquire+0xab9/0xd20 [ 1209.254063][T16190] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1209.254086][T16190] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1209.254156][T16190] ? down_read+0x1ad/0x2e0 [ 1209.254179][T16190] genl_rcv+0x28/0x40 [ 1209.254200][T16190] netlink_unicast+0x82c/0x9e0 [ 1209.254262][T16190] ? __pfx_netlink_unicast+0x10/0x10 [ 1209.254292][T16190] ? netlink_sendmsg+0x642/0xb30 [ 1209.254317][T16190] ? skb_put+0x11b/0x210 [ 1209.254342][T16190] netlink_sendmsg+0x805/0xb30 [ 1209.254384][T16190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1209.254416][T16190] ? __import_iovec+0x5d4/0x7f0 [ 1209.254435][T16190] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1209.254457][T16190] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1209.254475][T16190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1209.254504][T16190] __sock_sendmsg+0x219/0x270 [ 1209.254533][T16190] ____sys_sendmsg+0x505/0x830 [ 1209.254562][T16190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1209.254600][T16190] ___sys_sendmsg+0x21f/0x2a0 [ 1209.254623][T16190] ? __pfx____sys_sendmsg+0x10/0x10 [ 1209.254642][T16190] ? lockdep_hardirqs_on+0x9c/0x150 [ 1209.254709][T16190] ? __fget_files+0x2a/0x420 [ 1209.254735][T16190] ? __fget_files+0x3a0/0x420 [ 1209.254775][T16190] __sys_sendmsg+0x164/0x220 [ 1209.254789][T16190] ? __pfx___sys_sendmsg+0x10/0x10 [ 1209.254809][T16190] ? __secure_computing+0xe2/0x2a0 [ 1209.254832][T16190] __do_fast_syscall_32+0xb6/0x2b0 [ 1209.254869][T16190] do_fast_syscall_32+0x34/0x80 [ 1209.254897][T16190] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1209.254919][T16190] RIP: 0023:0xf7fa3539 [ 1209.254936][T16190] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1209.254947][T16190] RSP: 002b:00000000f548455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1209.254961][T16190] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 1209.254969][T16190] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 1209.254976][T16190] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1209.254982][T16190] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1209.254992][T16190] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1209.255024][T16190] [ 1209.716826][ C1] vkms_vblank_simulate: vblank timer overrun [ 1209.723433][ T30] audit: type=1326 audit(1756261344.422:7802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16179 comm="syz.2.2394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1209.746462][ T30] audit: type=1326 audit(1756261344.422:7803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16179 comm="syz.2.2394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1209.776825][ T30] audit: type=1326 audit(1756261344.422:7804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16179 comm="syz.2.2394" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1209.807199][ T30] audit: type=1326 audit(1756261345.122:7805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.0.2396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1209.837629][ T30] audit: type=1326 audit(1756261345.122:7806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.0.2396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1210.084745][T14082] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10601, setting to 1024 [ 1210.096063][T14082] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1210.106497][T14082] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1210.204599][ T43] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1210.266545][T15836] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 1210.578709][ T43] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10601, setting to 1024 [ 1210.593503][ T43] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1210.604481][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1210.719425][T15836] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1210.766382][ T43] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1210.775927][ T43] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1210.784916][T15836] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 1210.836191][T14082] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1210.876215][ T43] usb 5-1: Product: syz [ 1210.890589][T14082] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1210.904727][ T43] usb 5-1: Manufacturer: syz [ 1210.922012][ T43] usb 5-1: SerialNumber: syz [ 1210.940097][T14082] usb 2-1: Product: syz [ 1210.976741][ T43] usb 5-1: config 0 descriptor?? [ 1210.990376][T14082] usb 2-1: config 0 descriptor?? [ 1211.008646][T14082] usb 2-1: can't set config #0, error -71 [ 1211.032864][T14082] usb 2-1: USB disconnect, device number 78 [ 1211.348390][T16201] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1211.513096][T14082] usb 4-1: USB disconnect, device number 85 [ 1211.733910][ T43] usb 5-1: can't set config #0, error -71 [ 1211.772211][ T43] usb 5-1: USB disconnect, device number 76 [ 1211.818716][T15836] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1212.064770][T15836] usb 3-1: Using ep0 maxpacket: 16 [ 1212.134889][T15836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.146088][T15836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1212.161843][T15836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1212.175790][T15836] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1212.186538][T15836] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1212.244980][T15836] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1212.256284][T15836] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1212.256827][T14082] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1212.272845][T15836] usb 3-1: Manufacturer: syz [ 1212.285498][T15836] usb 3-1: config 0 descriptor?? [ 1212.538606][T14082] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.563054][T14082] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1212.588430][T14082] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1212.850110][T14082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1212.864596][T14082] usb 4-1: SerialNumber: syz [ 1212.926370][T15836] rc_core: IR keymap rc-hauppauge not found [ 1212.932325][T15836] Registered IR keymap rc-empty [ 1212.946240][T15836] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1213.031097][T15836] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1213.061818][T15836] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1213.096587][T15836] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input371 [ 1213.117715][T14082] usb 4-1: invalid UAC_HEADER (v1) [ 1213.128823][T15836] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1213.206610][T15836] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1213.226314][T15836] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1213.246249][T15836] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1213.256389][ T43] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1213.269144][T16228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2405'. [ 1213.278898][T15836] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1213.308484][T15836] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1213.340003][T14082] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1213.368094][T14082] usb 4-1: USB disconnect, device number 86 [ 1213.398355][T15836] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1213.461453][ T6332] udevd[6332]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1213.487591][T15836] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1213.517451][ T43] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10601, setting to 1024 [ 1213.548265][ T43] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1213.586219][T15836] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1213.587687][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1213.617129][T15836] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1213.660302][ T43] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1213.669481][T15836] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1213.676101][ T43] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1213.719156][ T43] usb 2-1: Product: syz [ 1213.762286][T15836] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1213.766944][ T43] usb 2-1: Manufacturer: syz [ 1213.799478][ T43] usb 2-1: SerialNumber: syz [ 1213.808661][T16233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2406'. [ 1213.830269][ T43] usb 2-1: config 0 descriptor?? [ 1213.853181][T15836] usb 3-1: USB disconnect, device number 105 [ 1213.858068][T16223] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1213.884093][ T43] usb 2-1: selecting invalid altsetting 0 [ 1214.937561][T15836] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1215.131459][T15836] usb 3-1: Using ep0 maxpacket: 32 [ 1215.176429][ T5924] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1215.185695][T15836] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1215.291143][T15836] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1215.301874][T15836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.314567][T15836] usb 3-1: Product: syz [ 1215.321143][T15836] usb 3-1: Manufacturer: syz [ 1215.372647][T15836] usb 3-1: SerialNumber: syz [ 1215.421836][T15836] usb 3-1: config 0 descriptor?? [ 1215.543972][ T5924] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10601, setting to 1024 [ 1215.555356][ T5924] usb 4-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1215.566083][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1215.624929][ T5924] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1215.709702][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1215.796401][ T5924] usb 4-1: Product: syz [ 1215.800939][ T5924] usb 4-1: Manufacturer: syz [ 1215.826443][ T5924] usb 4-1: SerialNumber: syz [ 1215.845717][ T5924] usb 4-1: config 0 descriptor?? [ 1215.865384][ T10] usb 2-1: USB disconnect, device number 79 [ 1215.886837][T16260] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1215.953532][T15836] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1215.970092][ T5924] usb 4-1: selecting invalid altsetting 0 [ 1216.473126][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1216.473145][ T30] audit: type=1326 audit(1756261352.932:7830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.4.2416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1216.686649][ T30] audit: type=1326 audit(1756261352.932:7831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.4.2416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1216.713648][ T30] audit: type=1326 audit(1756261352.932:7832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.4.2416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1216.740529][ T30] audit: type=1326 audit(1756261352.932:7833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.4.2416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1216.795462][T15836] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1216.816436][T15836] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 1216.816921][ T30] audit: type=1326 audit(1756261352.932:7834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.4.2416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1217.035826][T16274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2417'. [ 1217.099159][ T30] audit: type=1326 audit(1756261352.932:7835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.4.2416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1217.259173][ T30] audit: type=1326 audit(1756261352.932:7836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.4.2416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1217.401625][ T30] audit: type=1326 audit(1756261352.932:7837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.4.2416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1217.445660][ T30] audit: type=1326 audit(1756261352.932:7838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.4.2416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1217.473662][ T30] audit: type=1326 audit(1756261352.932:7839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.4.2416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1217.547980][ T43] usb 4-1: USB disconnect, device number 87 [ 1217.778733][T16282] binder: 16280:16282 ioctl c018aa3f 80000000 returned -22 [ 1218.671023][T15836] usb 3-1: USB disconnect, device number 106 [ 1219.076271][T15836] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1219.238871][T15836] usb 3-1: Using ep0 maxpacket: 16 [ 1219.246304][ T43] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1219.275383][T15836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.314408][T15836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1219.349827][T15836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1219.415076][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 1219.428454][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1219.442141][ T43] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1219.452526][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.479428][ T43] usb 4-1: config 0 descriptor?? [ 1219.497084][T16300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2423'. [ 1219.536383][T15836] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1219.552635][T15836] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1219.846422][T15836] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1219.869966][T15836] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1219.888968][T15836] usb 3-1: Manufacturer: syz [ 1219.915808][T15836] usb 3-1: config 0 descriptor?? [ 1219.981333][ T43] hid (null): invalid report_count 43536 [ 1220.042434][ T43] hid (null): unknown global tag 0xd [ 1220.252772][T16313] input: syz1 as /devices/virtual/input/input375 [ 1220.296185][T16311] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1220.306184][T16311] CPU: 1 UID: 0 PID: 16311 Comm: syz.1.2426 Not tainted syzkaller #0 PREEMPT(full) [ 1220.306213][T16311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1220.306225][T16311] Call Trace: [ 1220.306234][T16311] [ 1220.306243][T16311] dump_stack_lvl+0x189/0x250 [ 1220.306276][T16311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1220.306299][T16311] ? __pfx__printk+0x10/0x10 [ 1220.306331][T16311] ? kernfs_path_from_node+0x2f/0x290 [ 1220.306354][T16311] ? kernfs_path_from_node+0x250/0x290 [ 1220.306371][T16311] ? kernfs_path_from_node+0x2f/0x290 [ 1220.306395][T16311] sysfs_warn_dup+0x8e/0xa0 [ 1220.306415][T16311] sysfs_do_create_link_sd+0xc0/0x110 [ 1220.306448][T16311] device_add_class_symlinks+0x1cf/0x240 [ 1220.306473][T16311] device_add+0x475/0xb50 [ 1220.306498][T16311] wiphy_register+0x1ba6/0x28d0 [ 1220.306523][T16311] ? trace_irq_disable+0x37/0x110 [ 1220.306565][T16311] ? __pfx_wiphy_register+0x10/0x10 [ 1220.306611][T16311] ieee80211_register_hw+0x3425/0x4080 [ 1220.306634][T16311] ? preempt_schedule+0xae/0xc0 [ 1220.306677][T16311] ? ieee80211_register_hw+0x1471/0x4080 [ 1220.306709][T16311] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1220.306738][T16311] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1220.306774][T16311] ? __hrtimer_setup+0x187/0x210 [ 1220.306792][T16311] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1220.306825][T16311] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 1220.306882][T16311] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1220.306904][T16311] ? trace_kmalloc+0x1f/0xd0 [ 1220.306924][T16311] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1220.306950][T16311] ? kstrndup+0xbf/0x160 [ 1220.306981][T16311] hwsim_new_radio_nl+0xea4/0x1b10 [ 1220.307009][T16311] ? __pfx___nla_validate_parse+0x10/0x10 [ 1220.307054][T16311] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1220.307097][T16311] ? __nla_parse+0x40/0x60 [ 1220.307142][T16311] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1220.307178][T16311] genl_family_rcv_msg_doit+0x215/0x300 [ 1220.307213][T16311] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1220.307254][T16311] ? bpf_lsm_capable+0x9/0x20 [ 1220.307281][T16311] ? security_capable+0x7e/0x2e0 [ 1220.307319][T16311] genl_rcv_msg+0x60e/0x790 [ 1220.307353][T16311] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1220.307374][T16311] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1220.307403][T16311] ? __asan_memcpy+0x40/0x70 [ 1220.307425][T16311] ? __pfx_ref_tracker_free+0x10/0x10 [ 1220.307463][T16311] netlink_rcv_skb+0x205/0x470 [ 1220.307490][T16311] ? __lock_acquire+0xab9/0xd20 [ 1220.307520][T16311] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1220.307546][T16311] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1220.307601][T16311] ? down_read+0x1ad/0x2e0 [ 1220.307624][T16311] genl_rcv+0x28/0x40 [ 1220.307646][T16311] netlink_unicast+0x82c/0x9e0 [ 1220.307685][T16311] ? __pfx_netlink_unicast+0x10/0x10 [ 1220.307716][T16311] ? netlink_sendmsg+0x642/0xb30 [ 1220.307743][T16311] ? skb_put+0x11b/0x210 [ 1220.307768][T16311] netlink_sendmsg+0x805/0xb30 [ 1220.307810][T16311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1220.307844][T16311] ? __import_iovec+0x5d4/0x7f0 [ 1220.307865][T16311] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1220.307888][T16311] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1220.307910][T16311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1220.307941][T16311] __sock_sendmsg+0x219/0x270 [ 1220.307973][T16311] ____sys_sendmsg+0x505/0x830 [ 1220.308003][T16311] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1220.308048][T16311] ___sys_sendmsg+0x21f/0x2a0 [ 1220.308073][T16311] ? __pfx____sys_sendmsg+0x10/0x10 [ 1220.308092][T16311] ? lockdep_hardirqs_on+0x9c/0x150 [ 1220.308178][T16311] ? __fget_files+0x2a/0x420 [ 1220.308209][T16311] ? __fget_files+0x3a0/0x420 [ 1220.308253][T16311] __sys_sendmsg+0x164/0x220 [ 1220.308278][T16311] ? __pfx___sys_sendmsg+0x10/0x10 [ 1220.308316][T16311] ? __secure_computing+0xe2/0x2a0 [ 1220.308349][T16311] __do_fast_syscall_32+0xb6/0x2b0 [ 1220.308380][T16311] ? lockdep_hardirqs_on+0x9c/0x150 [ 1220.308415][T16311] do_fast_syscall_32+0x34/0x80 [ 1220.308447][T16311] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1220.308471][T16311] RIP: 0023:0xf707e539 [ 1220.308490][T16311] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1220.308508][T16311] RSP: 002b:00000000f542c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1220.308531][T16311] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 1220.308546][T16311] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 1220.308558][T16311] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1220.308570][T16311] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1220.308582][T16311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1220.308617][T16311] [ 1220.393927][T15836] rc_core: IR keymap rc-hauppauge not found [ 1220.799657][ T43] redragon 0003:0C45:760B.0041: unknown main item tag 0x6 [ 1220.827958][ T43] redragon 0003:0C45:760B.0041: unknown main item tag 0x0 [ 1220.849445][ T43] redragon 0003:0C45:760B.0041: unknown main item tag 0x0 [ 1220.902417][T14082] hid-generic 0003:0004:0000.0042: unknown main item tag 0x0 [ 1220.926426][T14082] hid-generic 0003:0004:0000.0042: unknown main item tag 0x0 [ 1221.024182][ T43] redragon 0003:0C45:760B.0041: unknown main item tag 0x0 [ 1221.033220][T14082] hid-generic 0003:0004:0000.0042: unknown main item tag 0x0 [ 1221.049879][ T43] redragon 0003:0C45:760B.0041: unknown main item tag 0x5 [ 1221.065448][T14082] hid-generic 0003:0004:0000.0042: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1221.093732][ T43] redragon 0003:0C45:760B.0041: invalid report_count 43536 [ 1221.105754][ T43] redragon 0003:0C45:760B.0041: item 0 2 1 9 parsing failed [ 1221.168653][ T43] redragon 0003:0C45:760B.0041: probe with driver redragon failed with error -22 [ 1221.400842][T15836] Registered IR keymap rc-empty [ 1221.408699][T15836] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1221.436550][T15836] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1221.739432][T15836] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1221.835704][T15836] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input374 [ 1221.889259][T15836] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1221.916323][T15836] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1221.946346][T15836] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1221.966760][T15836] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1221.988278][T15836] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1222.018767][T15836] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1222.053347][T15836] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1222.080983][T15836] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1222.109310][T15836] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1222.141404][T15836] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1222.275022][ T43] usb 4-1: USB disconnect, device number 88 [ 1222.394857][T15836] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1222.443900][T15836] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1222.465385][T16324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2428'. [ 1222.543276][T15836] usb 3-1: USB disconnect, device number 107 [ 1222.936792][ T43] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1223.087552][T16338] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1223.126147][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 1223.133611][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1223.148527][ T43] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1223.172075][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.280154][ T43] usb 4-1: config 0 descriptor?? [ 1223.738175][ T43] mcp2221 0003:04D8:00DD.0043: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1223.940287][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 1223.940310][ T30] audit: type=1326 audit(1756261360.382:7927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16348 comm="syz.1.2433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1224.113455][ T30] audit: type=1326 audit(1756261360.382:7928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16348 comm="syz.1.2433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1224.174553][ T43] usb 4-1: USB disconnect, device number 89 [ 1224.215570][ T30] audit: type=1326 audit(1756261360.382:7929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16348 comm="syz.1.2433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1224.279268][ T30] audit: type=1326 audit(1756261360.382:7930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16348 comm="syz.1.2433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1224.386860][ T30] audit: type=1326 audit(1756261360.382:7931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16348 comm="syz.1.2433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1224.718596][ T30] audit: type=1326 audit(1756261360.382:7932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16348 comm="syz.1.2433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1224.883165][ T30] audit: type=1326 audit(1756261360.382:7933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16348 comm="syz.1.2433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1224.905583][T15836] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1224.970672][ T30] audit: type=1326 audit(1756261360.382:7934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16348 comm="syz.1.2433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1224.996138][ T30] audit: type=1326 audit(1756261360.592:7935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16348 comm="syz.1.2433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1225.029026][ T30] audit: type=1326 audit(1756261360.592:7936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16348 comm="syz.1.2433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1225.115813][T16364] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 1225.125422][T15836] usb 5-1: device descriptor read/64, error -71 [ 1225.516133][T15836] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1225.587266][T14082] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1225.666207][T15836] usb 5-1: device descriptor read/64, error -71 [ 1225.778145][T15836] usb usb5-port1: attempt power cycle [ 1225.924692][T14082] usb 3-1: Using ep0 maxpacket: 16 [ 1225.992046][T14082] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.018342][T14082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1226.136297][T15836] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1226.151764][T14082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1226.166892][T15836] usb 5-1: device descriptor read/8, error -71 [ 1226.260766][T14082] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1226.336516][T14082] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1226.378087][T14082] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1226.416198][T15836] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1226.463467][T14082] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1226.484814][T14082] usb 3-1: Manufacturer: syz [ 1226.500484][T14082] usb 3-1: config 0 descriptor?? [ 1226.526667][T15836] usb 5-1: device descriptor read/8, error -71 [ 1226.637227][T15836] usb usb5-port1: unable to enumerate USB device [ 1226.836144][T14082] rc_core: IR keymap rc-hauppauge not found [ 1226.981437][T14082] Registered IR keymap rc-empty [ 1227.010070][T14082] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1227.056234][T14082] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1227.077311][T14082] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1227.101843][T14082] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input377 [ 1227.121935][T14082] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1227.149974][T14082] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1227.176369][T14082] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1227.196238][T14082] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1227.216224][T14082] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1227.245505][T14082] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1227.286444][T14082] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1227.306230][T14082] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1227.356983][T14082] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1227.438670][T14082] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1227.498911][T14082] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1227.526235][T14082] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1227.540666][T14082] usb 3-1: USB disconnect, device number 108 [ 1228.085874][T16388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2443'. [ 1228.772057][T16396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2445'. [ 1229.309048][T16403] FAULT_INJECTION: forcing a failure. [ 1229.309048][T16403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1229.406355][T16403] CPU: 0 UID: 0 PID: 16403 Comm: syz.0.2447 Not tainted syzkaller #0 PREEMPT(full) [ 1229.406386][T16403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1229.406399][T16403] Call Trace: [ 1229.406408][T16403] [ 1229.406417][T16403] dump_stack_lvl+0x189/0x250 [ 1229.406447][T16403] ? __pfx____ratelimit+0x10/0x10 [ 1229.406475][T16403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1229.406499][T16403] ? __pfx__printk+0x10/0x10 [ 1229.406543][T16403] should_fail_ex+0x414/0x560 [ 1229.406574][T16403] _copy_to_user+0x31/0xb0 [ 1229.406599][T16403] simple_read_from_buffer+0xe1/0x170 [ 1229.406634][T16403] proc_fail_nth_read+0x1b3/0x220 [ 1229.406661][T16403] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1229.406687][T16403] ? rw_verify_area+0x2a6/0x4d0 [ 1229.406711][T16403] ? __lock_acquire+0xab9/0xd20 [ 1229.406737][T16403] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1229.406761][T16403] vfs_read+0x1fd/0xa30 [ 1229.406786][T16403] ? fdget_pos+0x247/0x320 [ 1229.406809][T16403] ? __pfx___mutex_lock+0x10/0x10 [ 1229.406839][T16403] ? __pfx_vfs_read+0x10/0x10 [ 1229.406867][T16403] ? __fget_files+0x2a/0x420 [ 1229.406901][T16403] ? __fget_files+0x3a0/0x420 [ 1229.406928][T16403] ? __fget_files+0x2a/0x420 [ 1229.406967][T16403] ksys_read+0x145/0x250 [ 1229.406996][T16403] ? __pfx_ksys_read+0x10/0x10 [ 1229.407026][T16403] ? lockdep_hardirqs_on+0x9c/0x150 [ 1229.407059][T16403] __do_fast_syscall_32+0xb6/0x2b0 [ 1229.407097][T16403] ? lockdep_hardirqs_on+0x9c/0x150 [ 1229.407129][T16403] do_fast_syscall_32+0x34/0x80 [ 1229.407158][T16403] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1229.407182][T16403] RIP: 0023:0xf7fa3539 [ 1229.407200][T16403] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1229.407216][T16403] RSP: 002b:00000000f54c6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1229.407239][T16403] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54c6620 [ 1229.407252][T16403] RDX: 000000000000000f RSI: 00000000f7434ff4 RDI: 0000000000000000 [ 1229.407265][T16403] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1229.407277][T16403] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1229.407288][T16403] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1229.407319][T16403] [ 1229.796173][T15836] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1230.086133][T15836] usb 4-1: Using ep0 maxpacket: 16 [ 1230.521910][T15836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1230.550716][T15836] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1230.586310][T15836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.848024][T15836] usb 4-1: config 0 descriptor?? [ 1231.436201][ T10] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1231.461895][T15836] mcp2221 0003:04D8:00DD.0044: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1231.776406][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1231.830222][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1231.938417][ T10] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1231.947939][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.957199][ T10] usb 3-1: Product: syz [ 1231.961635][ T10] usb 3-1: Manufacturer: syz [ 1231.966491][ T10] usb 3-1: SerialNumber: syz [ 1231.973563][ T10] usb 3-1: config 0 descriptor?? [ 1231.996152][T14082] usb 4-1: USB disconnect, device number 90 [ 1232.096847][T15836] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1232.316618][T15836] usb 2-1: Using ep0 maxpacket: 32 [ 1232.333194][T15836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.354514][T15836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.374985][T15836] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1232.395280][T15836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.427524][T15836] usb 2-1: config 0 descriptor?? [ 1232.452510][ T10] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1232.476835][T15836] hub 2-1:0.0: USB hub found [ 1232.641358][T15836] hub 2-1:0.0: 1 port detected [ 1232.843297][T16437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2457'. [ 1232.853030][T16437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1232.864011][T15836] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1232.874382][ T10] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1232.882834][T15836] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1232.892273][ T10] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 1232.918837][T15836] usbhid 2-1:0.0: can't add hid device: -71 [ 1232.962379][T15836] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1233.007563][T15836] usb 2-1: USB disconnect, device number 80 [ 1233.036332][T14082] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1233.082368][T16450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2460'. [ 1233.225083][T16445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.243137][T16445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.618908][T16455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2461'. [ 1234.175904][T15836] usb 3-1: USB disconnect, device number 109 [ 1234.653454][T16478] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1234.656106][ T30] audit: type=1326 audit(1756261371.132:7937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16470 comm="syz.1.2475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1234.765955][ T30] audit: type=1326 audit(1756261371.132:7938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16470 comm="syz.1.2475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1234.799189][T16476] input: syz1 as /devices/virtual/input/input378 [ 1234.809153][T16478] CPU: 1 UID: 0 PID: 16478 Comm: syz.1.2475 Not tainted syzkaller #0 PREEMPT(full) [ 1234.809184][T16478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1234.809197][T16478] Call Trace: [ 1234.809206][T16478] [ 1234.809216][T16478] dump_stack_lvl+0x189/0x250 [ 1234.809257][T16478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1234.809283][T16478] ? __pfx__printk+0x10/0x10 [ 1234.809319][T16478] ? kernfs_path_from_node+0x2f/0x290 [ 1234.809340][T16478] ? kernfs_path_from_node+0x250/0x290 [ 1234.809361][T16478] ? kernfs_path_from_node+0x2f/0x290 [ 1234.809389][T16478] sysfs_warn_dup+0x8e/0xa0 [ 1234.809412][T16478] sysfs_do_create_link_sd+0xc0/0x110 [ 1234.809438][T16478] device_add_class_symlinks+0x1cf/0x240 [ 1234.809466][T16478] device_add+0x475/0xb50 [ 1234.809494][T16478] wiphy_register+0x1ba6/0x28d0 [ 1234.809543][T16478] ? __pfx_wiphy_register+0x10/0x10 [ 1234.809571][T16478] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 1234.809601][T16478] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 1234.809621][T16478] ieee80211_register_hw+0x3425/0x4080 [ 1234.809654][T16478] ? ieee80211_register_hw+0x1471/0x4080 [ 1234.809688][T16478] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1234.809708][T16478] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1234.809737][T16478] ? __hrtimer_setup+0x187/0x210 [ 1234.809752][T16478] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1234.809779][T16478] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 1234.809828][T16478] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1234.809848][T16478] ? trace_kmalloc+0x1f/0xd0 [ 1234.809866][T16478] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1234.809886][T16478] ? kstrndup+0xbf/0x160 [ 1234.809911][T16478] hwsim_new_radio_nl+0xea4/0x1b10 [ 1234.809940][T16478] ? __pfx___nla_validate_parse+0x10/0x10 [ 1234.809976][T16478] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1234.810008][T16478] ? __nla_parse+0x40/0x60 [ 1234.810034][T16478] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1234.810061][T16478] genl_family_rcv_msg_doit+0x215/0x300 [ 1234.810087][T16478] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1234.810127][T16478] ? bpf_lsm_capable+0x9/0x20 [ 1234.810147][T16478] ? security_capable+0x7e/0x2e0 [ 1234.810176][T16478] genl_rcv_msg+0x60e/0x790 [ 1234.810202][T16478] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1234.810220][T16478] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1234.810241][T16478] ? __asan_memcpy+0x40/0x70 [ 1234.810258][T16478] ? __pfx_ref_tracker_free+0x10/0x10 [ 1234.810286][T16478] netlink_rcv_skb+0x205/0x470 [ 1234.810306][T16478] ? __lock_acquire+0xab9/0xd20 [ 1234.810329][T16478] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1234.810348][T16478] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1234.810388][T16478] ? down_read+0x1ad/0x2e0 [ 1234.810405][T16478] genl_rcv+0x28/0x40 [ 1234.810420][T16478] netlink_unicast+0x82c/0x9e0 [ 1234.810450][T16478] ? __pfx_netlink_unicast+0x10/0x10 [ 1234.810471][T16478] ? netlink_sendmsg+0x642/0xb30 [ 1234.810492][T16478] ? skb_put+0x11b/0x210 [ 1234.810511][T16478] netlink_sendmsg+0x805/0xb30 [ 1234.810542][T16478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1234.810567][T16478] ? __import_iovec+0x5d4/0x7f0 [ 1234.810582][T16478] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1234.810598][T16478] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1234.810614][T16478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1234.810637][T16478] __sock_sendmsg+0x219/0x270 [ 1234.810661][T16478] ____sys_sendmsg+0x505/0x830 [ 1234.810683][T16478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1234.810716][T16478] ___sys_sendmsg+0x21f/0x2a0 [ 1234.810735][T16478] ? __pfx____sys_sendmsg+0x10/0x10 [ 1234.810751][T16478] ? lockdep_hardirqs_on+0x9c/0x150 [ 1234.810806][T16478] ? __fget_files+0x2a/0x420 [ 1234.810827][T16478] ? __fget_files+0x3a0/0x420 [ 1234.810859][T16478] __sys_sendmsg+0x164/0x220 [ 1234.810877][T16478] ? __pfx___sys_sendmsg+0x10/0x10 [ 1234.810904][T16478] ? __secure_computing+0xe2/0x2a0 [ 1234.810927][T16478] __do_fast_syscall_32+0xb6/0x2b0 [ 1234.810958][T16478] ? lockdep_hardirqs_on+0x9c/0x150 [ 1234.810982][T16478] do_fast_syscall_32+0x34/0x80 [ 1234.811004][T16478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1234.811022][T16478] RIP: 0023:0xf707e539 [ 1234.811037][T16478] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1234.811050][T16478] RSP: 002b:00000000f500955c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1234.811069][T16478] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 1234.811081][T16478] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 1234.811090][T16478] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1234.811099][T16478] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1234.811108][T16478] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1234.811136][T16478] [ 1235.367680][ T30] audit: type=1326 audit(1756261371.132:7939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16470 comm="syz.1.2475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1235.421722][ T30] audit: type=1326 audit(1756261371.132:7940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16470 comm="syz.1.2475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1235.444531][ T30] audit: type=1326 audit(1756261371.132:7941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16470 comm="syz.1.2475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1235.816816][ T30] audit: type=1326 audit(1756261371.132:7942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16470 comm="syz.1.2475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1235.958432][T14082] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1235.982439][T14082] usb 4-1: too many configurations: 111, using maximum allowed: 8 [ 1236.007603][ T30] audit: type=1326 audit(1756261371.132:7943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16470 comm="syz.1.2475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1236.007624][T14082] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1236.007665][T14082] usb 4-1: can't read configurations, error -71 [ 1236.033645][ T30] audit: type=1326 audit(1756261371.132:7944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16470 comm="syz.1.2475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1236.085143][ T30] audit: type=1326 audit(1756261371.132:7945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16470 comm="syz.1.2475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1236.173128][ T30] audit: type=1326 audit(1756261371.132:7946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16470 comm="syz.1.2475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1237.046414][T15836] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1237.326111][T15836] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10601, setting to 1024 [ 1237.358062][T15836] usb 3-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1237.379193][T15836] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1237.404610][T15836] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1237.414157][T15836] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1237.428520][T15836] usb 3-1: Product: syz [ 1237.432774][T15836] usb 3-1: Manufacturer: syz [ 1237.453176][T15836] usb 3-1: SerialNumber: syz [ 1237.482331][T15836] usb 3-1: config 0 descriptor?? [ 1237.501719][T16503] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1237.571413][T15836] usb 3-1: selecting invalid altsetting 0 [ 1238.386476][T14082] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1238.566154][T15836] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1238.731103][T14082] usb 2-1: Using ep0 maxpacket: 16 [ 1238.740540][T14082] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1238.754170][T14082] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1238.763974][T14082] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.791576][T15836] usb 5-1: Using ep0 maxpacket: 16 [ 1238.803540][T14082] usb 2-1: config 0 descriptor?? [ 1238.986310][T15836] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1238.999703][T15836] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1239.009339][T15836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.031793][T15836] usb 5-1: config 0 descriptor?? [ 1239.031857][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.066997][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.220001][T16515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2473'. [ 1239.261884][T14082] hid (null): invalid report_count 43536 [ 1239.268269][T14082] hid (null): unknown global tag 0xd [ 1239.295504][T14082] redragon 0003:0C45:760B.0045: unknown main item tag 0x6 [ 1239.353566][T14082] redragon 0003:0C45:760B.0045: unknown main item tag 0x0 [ 1239.440125][T14082] redragon 0003:0C45:760B.0045: unknown main item tag 0x0 [ 1239.591529][ T43] hid-generic 0003:0004:0000.0046: unknown main item tag 0x0 [ 1239.613130][ T43] hid-generic 0003:0004:0000.0046: unknown main item tag 0x0 [ 1239.621736][T14082] redragon 0003:0C45:760B.0045: unknown main item tag 0x0 [ 1239.642070][ T43] hid-generic 0003:0004:0000.0046: unknown main item tag 0x0 [ 1239.654155][T14082] redragon 0003:0C45:760B.0045: unknown main item tag 0x5 [ 1239.683540][ T10] usb 3-1: USB disconnect, device number 110 [ 1239.702399][T14082] redragon 0003:0C45:760B.0045: invalid report_count 43536 [ 1239.723204][T14082] redragon 0003:0C45:760B.0045: item 0 2 1 9 parsing failed [ 1239.784245][ T43] hid-generic 0003:0004:0000.0046: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1239.806903][T14082] redragon 0003:0C45:760B.0045: probe with driver redragon failed with error -22 [ 1240.098712][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2477'. [ 1240.178292][ T9023] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1240.376766][ T9023] usb 4-1: Using ep0 maxpacket: 32 [ 1240.492909][ T9023] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1240.510673][ T9023] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1240.520512][ T9023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.530154][ T9023] usb 4-1: Product: syz [ 1240.534600][ T9023] usb 4-1: Manufacturer: syz [ 1240.540150][ T9023] usb 4-1: SerialNumber: syz [ 1240.558276][ T9023] usb 4-1: config 0 descriptor?? [ 1240.577835][T16533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1240.710314][T15836] usbhid 5-1:0.0: can't add hid device: -71 [ 1240.825890][T15836] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1240.868056][T15836] usb 5-1: USB disconnect, device number 81 [ 1241.032548][ T9023] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 1241.191602][T15836] usb 2-1: USB disconnect, device number 81 [ 1241.465423][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1241.465496][ T30] audit: type=1326 audit(1756261377.932:7950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16538 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1241.542617][T16542] input: syz1 as /devices/virtual/input/input379 [ 1241.558647][ T9023] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1241.577806][ T9023] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 1241.610854][ T30] audit: type=1326 audit(1756261377.932:7951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16538 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1241.652347][T16541] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1241.660526][T16541] CPU: 0 UID: 0 PID: 16541 Comm: syz.2.2481 Not tainted syzkaller #0 PREEMPT(full) [ 1241.660555][T16541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1241.660569][T16541] Call Trace: [ 1241.660579][T16541] [ 1241.660589][T16541] dump_stack_lvl+0x189/0x250 [ 1241.660625][T16541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1241.660653][T16541] ? __pfx__printk+0x10/0x10 [ 1241.660690][T16541] ? kernfs_path_from_node+0x2f/0x290 [ 1241.660714][T16541] ? kernfs_path_from_node+0x250/0x290 [ 1241.660736][T16541] ? kernfs_path_from_node+0x2f/0x290 [ 1241.660763][T16541] sysfs_warn_dup+0x8e/0xa0 [ 1241.660786][T16541] sysfs_do_create_link_sd+0xc0/0x110 [ 1241.660813][T16541] device_add_class_symlinks+0x1cf/0x240 [ 1241.660841][T16541] device_add+0x475/0xb50 [ 1241.660870][T16541] wiphy_register+0x1ba6/0x28d0 [ 1241.660919][T16541] ? __pfx_wiphy_register+0x10/0x10 [ 1241.660948][T16541] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 1241.660982][T16541] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 1241.661011][T16541] ieee80211_register_hw+0x3425/0x4080 [ 1241.661056][T16541] ? ieee80211_register_hw+0x1471/0x4080 [ 1241.661091][T16541] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1241.661122][T16541] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1241.661170][T16541] ? __hrtimer_setup+0x187/0x210 [ 1241.661190][T16541] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1241.661225][T16541] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 1241.661291][T16541] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1241.661315][T16541] ? trace_kmalloc+0x1f/0xd0 [ 1241.661339][T16541] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1241.661368][T16541] ? kstrndup+0xbf/0x160 [ 1241.661403][T16541] hwsim_new_radio_nl+0xea4/0x1b10 [ 1241.661434][T16541] ? __pfx___nla_validate_parse+0x10/0x10 [ 1241.661484][T16541] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1241.661530][T16541] ? __nla_parse+0x40/0x60 [ 1241.661565][T16541] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1241.661602][T16541] genl_family_rcv_msg_doit+0x215/0x300 [ 1241.661638][T16541] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1241.661679][T16541] ? bpf_lsm_capable+0x9/0x20 [ 1241.661706][T16541] ? security_capable+0x7e/0x2e0 [ 1241.661745][T16541] genl_rcv_msg+0x60e/0x790 [ 1241.661778][T16541] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1241.661802][T16541] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1241.661835][T16541] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 1241.661876][T16541] netlink_rcv_skb+0x205/0x470 [ 1241.661901][T16541] ? __lock_acquire+0xab9/0xd20 [ 1241.661931][T16541] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1241.661958][T16541] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1241.662014][T16541] ? down_read+0x1ad/0x2e0 [ 1241.662039][T16541] genl_rcv+0x28/0x40 [ 1241.662060][T16541] netlink_unicast+0x82c/0x9e0 [ 1241.662100][T16541] ? __pfx_netlink_unicast+0x10/0x10 [ 1241.662131][T16541] ? netlink_sendmsg+0x642/0xb30 [ 1241.662167][T16541] ? skb_put+0x11b/0x210 [ 1241.662195][T16541] netlink_sendmsg+0x805/0xb30 [ 1241.662239][T16541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1241.662275][T16541] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1241.662297][T16541] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1241.662319][T16541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1241.662351][T16541] __sock_sendmsg+0x219/0x270 [ 1241.662384][T16541] ____sys_sendmsg+0x505/0x830 [ 1241.662415][T16541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1241.662460][T16541] ___sys_sendmsg+0x21f/0x2a0 [ 1241.662487][T16541] ? __pfx____sys_sendmsg+0x10/0x10 [ 1241.662509][T16541] ? lockdep_hardirqs_on+0x9c/0x150 [ 1241.662584][T16541] ? __fget_files+0x2a/0x420 [ 1241.662614][T16541] ? __fget_files+0x3a0/0x420 [ 1241.662659][T16541] __sys_sendmsg+0x164/0x220 [ 1241.662685][T16541] ? __pfx___sys_sendmsg+0x10/0x10 [ 1241.662724][T16541] ? __secure_computing+0xe2/0x2a0 [ 1241.662757][T16541] __do_fast_syscall_32+0xb6/0x2b0 [ 1241.662790][T16541] ? lockdep_hardirqs_on+0x9c/0x150 [ 1241.662824][T16541] do_fast_syscall_32+0x34/0x80 [ 1241.662855][T16541] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1241.662881][T16541] RIP: 0023:0xf7fe3539 [ 1241.662899][T16541] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1241.662916][T16541] RSP: 002b:00000000f54c455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1241.662940][T16541] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 1241.662955][T16541] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 1241.662967][T16541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1241.662979][T16541] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1241.662991][T16541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1241.663027][T16541] [ 1242.250759][ T30] audit: type=1326 audit(1756261377.932:7952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16538 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1242.454620][ T30] audit: type=1326 audit(1756261377.932:7953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16538 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1242.657982][ T30] audit: type=1326 audit(1756261377.932:7954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16538 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1242.811429][ T30] audit: type=1326 audit(1756261377.932:7955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16538 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1242.903598][ T30] audit: type=1326 audit(1756261377.932:7956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16538 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1242.992847][ T30] audit: type=1326 audit(1756261377.932:7957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16538 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1243.029267][T16556] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2485'. [ 1243.155706][ T30] audit: type=1326 audit(1756261377.932:7958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16538 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1243.296286][ T30] audit: type=1326 audit(1756261378.632:7959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16538 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 1243.801091][T16563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2486'. [ 1244.001213][T15836] usb 4-1: USB disconnect, device number 93 [ 1246.415218][T16589] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2492'. [ 1246.574963][T16590] kvm: apic: phys broadcast and lowest prio [ 1247.316252][ T9023] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1247.471116][ T9023] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1247.485491][ T9023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.504999][ T9023] usb 3-1: Product: syz [ 1247.519927][ T9023] usb 3-1: Manufacturer: syz [ 1247.525331][ T9023] usb 3-1: SerialNumber: syz [ 1248.096183][T15836] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1248.835266][T15836] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10601, setting to 1024 [ 1248.850940][T15836] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1248.876341][T15836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1248.897352][T15836] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1248.912704][T15836] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1248.956535][T15836] usb 5-1: Product: syz [ 1248.965826][T15836] usb 5-1: Manufacturer: syz [ 1248.973218][T15836] usb 5-1: SerialNumber: syz [ 1248.978076][ T10] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1249.075618][T15836] usb 5-1: config 0 descriptor?? [ 1249.091579][T16608] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1249.127918][T15836] usb 5-1: selecting invalid altsetting 0 [ 1249.248789][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1249.325177][T16619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2498'. [ 1249.442488][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1249.458560][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1249.481717][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.504267][ T10] usb 2-1: config 0 descriptor?? [ 1249.780719][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1249.780738][ T30] audit: type=1326 audit(1756261386.252:7996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16622 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1249.811734][T16626] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1249.819873][T16626] CPU: 0 UID: 0 PID: 16626 Comm: syz.0.2499 Not tainted syzkaller #0 PREEMPT(full) [ 1249.819908][T16626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1249.819921][T16626] Call Trace: [ 1249.819929][T16626] [ 1249.819939][T16626] dump_stack_lvl+0x189/0x250 [ 1249.819973][T16626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1249.819998][T16626] ? __pfx__printk+0x10/0x10 [ 1249.820042][T16626] ? kernfs_path_from_node+0x2f/0x290 [ 1249.820064][T16626] ? kernfs_path_from_node+0x250/0x290 [ 1249.820086][T16626] ? kernfs_path_from_node+0x2f/0x290 [ 1249.820114][T16626] sysfs_warn_dup+0x8e/0xa0 [ 1249.820136][T16626] sysfs_do_create_link_sd+0xc0/0x110 [ 1249.820163][T16626] device_add_class_symlinks+0x1cf/0x240 [ 1249.820189][T16626] device_add+0x475/0xb50 [ 1249.820217][T16626] wiphy_register+0x1ba6/0x28d0 [ 1249.820268][T16626] ? __pfx_wiphy_register+0x10/0x10 [ 1249.820297][T16626] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 1249.820331][T16626] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 1249.820359][T16626] ieee80211_register_hw+0x3425/0x4080 [ 1249.820404][T16626] ? ieee80211_register_hw+0x1471/0x4080 [ 1249.820439][T16626] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1249.820468][T16626] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1249.820503][T16626] ? __hrtimer_setup+0x187/0x210 [ 1249.820523][T16626] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1249.820558][T16626] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 1249.820622][T16626] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1249.820646][T16626] ? trace_kmalloc+0x1f/0xd0 [ 1249.820670][T16626] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1249.820696][T16626] ? kstrndup+0xbf/0x160 [ 1249.820731][T16626] hwsim_new_radio_nl+0xea4/0x1b10 [ 1249.820761][T16626] ? __pfx___nla_validate_parse+0x10/0x10 [ 1249.820806][T16626] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1249.820849][T16626] ? __nla_parse+0x40/0x60 [ 1249.820883][T16626] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1249.820918][T16626] genl_family_rcv_msg_doit+0x215/0x300 [ 1249.820951][T16626] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1249.820991][T16626] ? bpf_lsm_capable+0x9/0x20 [ 1249.821028][T16626] ? security_capable+0x7e/0x2e0 [ 1249.821067][T16626] genl_rcv_msg+0x60e/0x790 [ 1249.821098][T16626] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1249.821121][T16626] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1249.821159][T16626] ? __asan_memcpy+0x40/0x70 [ 1249.821183][T16626] ? __pfx_ref_tracker_free+0x10/0x10 [ 1249.821222][T16626] netlink_rcv_skb+0x205/0x470 [ 1249.821248][T16626] ? __lock_acquire+0xab9/0xd20 [ 1249.821280][T16626] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1249.821307][T16626] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1249.821363][T16626] ? down_read+0x1ad/0x2e0 [ 1249.821386][T16626] genl_rcv+0x28/0x40 [ 1249.821408][T16626] netlink_unicast+0x82c/0x9e0 [ 1249.821448][T16626] ? __pfx_netlink_unicast+0x10/0x10 [ 1249.821480][T16626] ? netlink_sendmsg+0x642/0xb30 [ 1249.821507][T16626] ? skb_put+0x11b/0x210 [ 1249.821532][T16626] netlink_sendmsg+0x805/0xb30 [ 1249.821576][T16626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1249.821612][T16626] ? __import_iovec+0x5d4/0x7f0 [ 1249.821633][T16626] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1249.821655][T16626] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1249.821675][T16626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1249.821707][T16626] __sock_sendmsg+0x219/0x270 [ 1249.821740][T16626] ____sys_sendmsg+0x505/0x830 [ 1249.821769][T16626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1249.821809][T16626] ___sys_sendmsg+0x21f/0x2a0 [ 1249.821835][T16626] ? __pfx____sys_sendmsg+0x10/0x10 [ 1249.821857][T16626] ? lockdep_hardirqs_on+0x9c/0x150 [ 1249.821931][T16626] ? __fget_files+0x2a/0x420 [ 1249.821960][T16626] ? __fget_files+0x3a0/0x420 [ 1249.822003][T16626] __sys_sendmsg+0x164/0x220 [ 1249.822036][T16626] ? __pfx___sys_sendmsg+0x10/0x10 [ 1249.822075][T16626] ? __secure_computing+0xe2/0x2a0 [ 1249.822105][T16626] __do_fast_syscall_32+0xb6/0x2b0 [ 1249.822147][T16626] do_fast_syscall_32+0x34/0x80 [ 1249.822179][T16626] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1249.822205][T16626] RIP: 0023:0xf7fa3539 [ 1249.822225][T16626] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1249.822241][T16626] RSP: 002b:00000000f548455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1249.822264][T16626] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 1249.822278][T16626] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 1249.822291][T16626] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1249.822304][T16626] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1249.822316][T16626] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1249.822350][T16626] [ 1250.877269][ T30] audit: type=1326 audit(1756261386.252:7997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16622 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1250.919652][T16627] input: syz1 as /devices/virtual/input/input383 [ 1250.944210][ T30] audit: type=1326 audit(1756261386.252:7998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16622 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1250.968838][ T9023] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 1251.053384][ T10] hid (null): invalid report_count 43536 [ 1251.067186][ T10] hid (null): unknown global tag 0xd [ 1251.093402][ T10] redragon 0003:0C45:760B.0047: unknown main item tag 0x6 [ 1251.121312][ T9023] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1251.139592][T16624] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1251.147762][ T9023] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1251.169515][T16624] CPU: 1 UID: 0 PID: 16624 Comm: syz.3.2500 Not tainted syzkaller #0 PREEMPT(full) [ 1251.169545][T16624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1251.169554][T16624] Call Trace: [ 1251.169560][T16624] [ 1251.169565][T16624] dump_stack_lvl+0x189/0x250 [ 1251.169587][T16624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1251.169602][T16624] ? __pfx__printk+0x10/0x10 [ 1251.169623][T16624] ? kernfs_path_from_node+0x2f/0x290 [ 1251.169637][T16624] ? kernfs_path_from_node+0x250/0x290 [ 1251.169649][T16624] ? kernfs_path_from_node+0x2f/0x290 [ 1251.169665][T16624] sysfs_warn_dup+0x8e/0xa0 [ 1251.169677][T16624] sysfs_do_create_link_sd+0xc0/0x110 [ 1251.169692][T16624] device_add_class_symlinks+0x1cf/0x240 [ 1251.169708][T16624] device_add+0x475/0xb50 [ 1251.169723][T16624] wiphy_register+0x1ba6/0x28d0 [ 1251.169759][T16624] ? __pfx_wiphy_register+0x10/0x10 [ 1251.169775][T16624] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 1251.169792][T16624] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 1251.169808][T16624] ieee80211_register_hw+0x3425/0x4080 [ 1251.169832][T16624] ? ieee80211_register_hw+0x1471/0x4080 [ 1251.169851][T16624] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1251.169868][T16624] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1251.169889][T16624] ? __hrtimer_setup+0x187/0x210 [ 1251.169900][T16624] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1251.169918][T16624] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 1251.169952][T16624] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1251.169966][T16624] ? trace_kmalloc+0x1f/0xd0 [ 1251.169978][T16624] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1251.169994][T16624] ? kstrndup+0xbf/0x160 [ 1251.170013][T16624] hwsim_new_radio_nl+0xea4/0x1b10 [ 1251.170031][T16624] ? __pfx___nla_validate_parse+0x10/0x10 [ 1251.170057][T16624] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1251.170079][T16624] ? __nla_parse+0x40/0x60 [ 1251.170098][T16624] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1251.170118][T16624] genl_family_rcv_msg_doit+0x215/0x300 [ 1251.170137][T16624] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1251.170158][T16624] ? bpf_lsm_capable+0x9/0x20 [ 1251.170172][T16624] ? security_capable+0x7e/0x2e0 [ 1251.170193][T16624] genl_rcv_msg+0x60e/0x790 [ 1251.170211][T16624] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1251.170223][T16624] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1251.170247][T16624] netlink_rcv_skb+0x205/0x470 [ 1251.170261][T16624] ? __lock_acquire+0xab9/0xd20 [ 1251.170278][T16624] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1251.170292][T16624] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1251.170320][T16624] ? down_read+0x1ad/0x2e0 [ 1251.170333][T16624] genl_rcv+0x28/0x40 [ 1251.170345][T16624] netlink_unicast+0x82c/0x9e0 [ 1251.170366][T16624] ? __pfx_netlink_unicast+0x10/0x10 [ 1251.170382][T16624] ? netlink_sendmsg+0x642/0xb30 [ 1251.170397][T16624] ? skb_put+0x11b/0x210 [ 1251.170411][T16624] netlink_sendmsg+0x805/0xb30 [ 1251.170433][T16624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1251.170452][T16624] ? __import_iovec+0x5d4/0x7f0 [ 1251.170463][T16624] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1251.170475][T16624] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1251.170487][T16624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1251.170504][T16624] __sock_sendmsg+0x219/0x270 [ 1251.170522][T16624] ____sys_sendmsg+0x505/0x830 [ 1251.170538][T16624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1251.170561][T16624] ___sys_sendmsg+0x21f/0x2a0 [ 1251.170575][T16624] ? __pfx____sys_sendmsg+0x10/0x10 [ 1251.170587][T16624] ? lockdep_hardirqs_on+0x9c/0x150 [ 1251.170625][T16624] ? __fget_files+0x2a/0x420 [ 1251.170641][T16624] ? __fget_files+0x3a0/0x420 [ 1251.170664][T16624] __sys_sendmsg+0x164/0x220 [ 1251.170677][T16624] ? __pfx___sys_sendmsg+0x10/0x10 [ 1251.170697][T16624] ? __secure_computing+0xe2/0x2a0 [ 1251.170714][T16624] __do_fast_syscall_32+0xb6/0x2b0 [ 1251.170731][T16624] ? lockdep_hardirqs_on+0x9c/0x150 [ 1251.170757][T16624] do_fast_syscall_32+0x34/0x80 [ 1251.170773][T16624] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1251.170788][T16624] RIP: 0023:0xf705e539 [ 1251.170799][T16624] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1251.170810][T16624] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1251.170824][T16624] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 1251.170833][T16624] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 1251.170840][T16624] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1251.170847][T16624] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1251.170854][T16624] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1251.170872][T16624] [ 1251.171993][ T9023] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1251.671892][ T10] redragon 0003:0C45:760B.0047: unknown main item tag 0x0 [ 1251.714478][ T10] redragon 0003:0C45:760B.0047: unknown main item tag 0x0 [ 1251.726080][ T30] audit: type=1326 audit(1756261386.252:7999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16622 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1251.794851][ T10] redragon 0003:0C45:760B.0047: unknown main item tag 0x0 [ 1251.841469][T14082] usb 5-1: USB disconnect, device number 82 [ 1251.870587][T16624] input: syz1 as /devices/virtual/input/input384 [ 1251.879131][ T10] redragon 0003:0C45:760B.0047: unknown main item tag 0x5 [ 1251.910018][ T10] redragon 0003:0C45:760B.0047: invalid report_count 43536 [ 1251.919618][ T30] audit: type=1326 audit(1756261386.252:8000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16622 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1251.953966][ T10] redragon 0003:0C45:760B.0047: item 0 2 1 9 parsing failed [ 1252.011841][ T10] redragon 0003:0C45:760B.0047: probe with driver redragon failed with error -22 [ 1252.088108][T16633] bond0: (slave veth0_to_hsr): Error: Device is in use and cannot be enslaved [ 1252.103349][ T30] audit: type=1326 audit(1756261386.252:8001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16622 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1252.177040][ T30] audit: type=1326 audit(1756261386.252:8002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16622 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1252.210576][ T30] audit: type=1326 audit(1756261386.252:8003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16622 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1252.257080][ T10] usb 2-1: USB disconnect, device number 82 [ 1252.421120][ T30] audit: type=1326 audit(1756261386.252:8004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16622 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1252.560672][ T9023] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1252.579599][ T9023] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1252.614622][ T9023] usb 3-1: USB disconnect, device number 111 [ 1252.678017][ T30] audit: type=1326 audit(1756261386.252:8005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16622 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1252.992124][T16644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2504'. [ 1253.596425][ T10] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1253.786155][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1253.798500][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.808867][ T122] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1253.818925][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1253.836651][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1253.849817][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.861006][ T10] usb 3-1: Product: syz [ 1253.872173][ T10] usb 3-1: Manufacturer: syz [ 1253.879430][ T10] usb 3-1: SerialNumber: syz [ 1253.978516][ T122] usb 2-1: Using ep0 maxpacket: 16 [ 1253.990447][ T122] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1254.002885][ T122] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1254.072403][ T122] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.131384][ T10] usb 3-1: 0:2 : does not exist [ 1254.154351][ T122] usb 2-1: config 0 descriptor?? [ 1254.174891][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1254.217500][ T10] usb 3-1: USB disconnect, device number 112 [ 1254.428879][ T6007] udevd[6007]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1254.655794][ T122] mcp2221 0003:04D8:00DD.0048: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1255.185492][ T122] usb 2-1: USB disconnect, device number 83 [ 1255.243687][T16657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2508'. [ 1256.220385][T16675] FAULT_INJECTION: forcing a failure. [ 1256.220385][T16675] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.282780][T16675] CPU: 0 UID: 0 PID: 16675 Comm: syz.2.2513 Not tainted syzkaller #0 PREEMPT(full) [ 1256.282811][T16675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1256.282824][T16675] Call Trace: [ 1256.282833][T16675] [ 1256.282843][T16675] dump_stack_lvl+0x189/0x250 [ 1256.282873][T16675] ? __pfx____ratelimit+0x10/0x10 [ 1256.282903][T16675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1256.282927][T16675] ? __pfx__printk+0x10/0x10 [ 1256.282957][T16675] ? __pfx___might_resched+0x10/0x10 [ 1256.282977][T16675] ? fs_reclaim_acquire+0x7d/0x100 [ 1256.283012][T16675] should_fail_ex+0x414/0x560 [ 1256.283044][T16675] should_failslab+0xa8/0x100 [ 1256.283075][T16675] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1256.283101][T16675] ? security_file_alloc+0x34/0x330 [ 1256.283132][T16675] security_file_alloc+0x34/0x330 [ 1256.283160][T16675] init_file+0x93/0x2f0 [ 1256.283186][T16675] alloc_empty_file+0x6e/0x1d0 [ 1256.283209][T16675] dentry_open+0x44/0xa0 [ 1256.283231][T16675] pidfs_alloc_file+0x186/0x270 [ 1256.283257][T16675] ? _raw_spin_unlock+0x28/0x50 [ 1256.283283][T16675] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 1256.283321][T16675] pidfd_prepare+0x14e/0x1b0 [ 1256.283341][T16675] ? sk_getsockopt+0x1e41/0x2530 [ 1256.283365][T16675] sk_getsockopt+0x1e53/0x2530 [ 1256.283393][T16675] ? __pfx_sk_getsockopt+0x10/0x10 [ 1256.283411][T16675] ? lockdep_hardirqs_on+0x90/0x150 [ 1256.283450][T16675] ? rcu_read_lock_any_held+0xb3/0x120 [ 1256.283473][T16675] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1256.283498][T16675] ? vfs_write+0x956/0xb30 [ 1256.283529][T16675] ? sb_end_write+0xe9/0x1c0 [ 1256.283550][T16675] ? vfs_write+0x956/0xb30 [ 1256.283594][T16675] do_sock_getsockopt+0x237/0x450 [ 1256.283615][T16675] ? lockdep_hardirqs_on+0x90/0x150 [ 1256.283639][T16675] ? count_memcg_event_mm+0x21/0x260 [ 1256.283667][T16675] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1256.283687][T16675] ? lockdep_hardirqs_on+0x90/0x150 [ 1256.283737][T16675] __ia32_sys_getsockopt+0x1a5/0x250 [ 1256.283759][T16675] ? lockdep_hardirqs_on+0x90/0x150 [ 1256.283786][T16675] ? lockdep_hardirqs_on+0x90/0x150 [ 1256.283816][T16675] __do_fast_syscall_32+0xb6/0x2b0 [ 1256.283844][T16675] ? lockdep_hardirqs_on+0x9c/0x150 [ 1256.283879][T16675] do_fast_syscall_32+0x34/0x80 [ 1256.283908][T16675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1256.283932][T16675] RIP: 0023:0xf7fe3539 [ 1256.283951][T16675] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1256.283967][T16675] RSP: 002b:00000000f550655c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 1256.283991][T16675] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000001 [ 1256.284006][T16675] RDX: 000000000000004d RSI: 0000000000000000 RDI: 0000000080000100 [ 1256.284019][T16675] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1256.284032][T16675] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1256.284044][T16675] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1256.284076][T16675] [ 1256.585314][ C0] vkms_vblank_simulate: vblank timer overrun [ 1257.546200][ T9023] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1257.801845][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 1257.801867][ T30] audit: type=1326 audit(1756261394.272:8079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.0.2516" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1257.869424][T16691] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1257.881043][ T122] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1257.888840][ T9023] usb 5-1: Using ep0 maxpacket: 32 [ 1257.894534][T16691] CPU: 1 UID: 0 PID: 16691 Comm: syz.0.2516 Not tainted syzkaller #0 PREEMPT(full) [ 1257.894562][T16691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1257.894580][T16691] Call Trace: [ 1257.894590][T16691] [ 1257.894600][T16691] dump_stack_lvl+0x189/0x250 [ 1257.894635][T16691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1257.894662][T16691] ? __pfx__printk+0x10/0x10 [ 1257.894694][T16691] ? __rcu_read_unlock+0x84/0xe0 [ 1257.894723][T16691] ? kernfs_path_from_node+0x2f/0x290 [ 1257.894745][T16691] ? kernfs_path_from_node+0x250/0x290 [ 1257.894765][T16691] ? kernfs_path_from_node+0x2f/0x290 [ 1257.894794][T16691] sysfs_warn_dup+0x8e/0xa0 [ 1257.894817][T16691] sysfs_do_create_link_sd+0xc0/0x110 [ 1257.894844][T16691] device_add_class_symlinks+0x1cf/0x240 [ 1257.894873][T16691] device_add+0x475/0xb50 [ 1257.894901][T16691] wiphy_register+0x1ba6/0x28d0 [ 1257.894952][T16691] ? __pfx_wiphy_register+0x10/0x10 [ 1257.894980][T16691] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 1257.895030][T16691] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 1257.895060][T16691] ieee80211_register_hw+0x3425/0x4080 [ 1257.895085][T16691] ? preempt_schedule+0xae/0xc0 [ 1257.895131][T16691] ? ieee80211_register_hw+0x1471/0x4080 [ 1257.895164][T16691] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1257.895192][T16691] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1257.895223][T16691] ? __hrtimer_setup+0x187/0x210 [ 1257.895237][T16691] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1257.895262][T16691] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 1257.895310][T16691] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1257.895328][T16691] ? trace_kmalloc+0x1f/0xd0 [ 1257.895346][T16691] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1257.895366][T16691] ? kstrndup+0xbf/0x160 [ 1257.895392][T16691] hwsim_new_radio_nl+0xea4/0x1b10 [ 1257.895414][T16691] ? __pfx___nla_validate_parse+0x10/0x10 [ 1257.895451][T16691] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1257.895482][T16691] ? __nla_parse+0x40/0x60 [ 1257.895510][T16691] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1257.895538][T16691] genl_family_rcv_msg_doit+0x215/0x300 [ 1257.895562][T16691] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1257.895593][T16691] ? bpf_lsm_capable+0x9/0x20 [ 1257.895612][T16691] ? security_capable+0x7e/0x2e0 [ 1257.895641][T16691] genl_rcv_msg+0x60e/0x790 [ 1257.895665][T16691] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1257.895682][T16691] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1257.895715][T16691] netlink_rcv_skb+0x205/0x470 [ 1257.895735][T16691] ? __lock_acquire+0xab9/0xd20 [ 1257.895758][T16691] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1257.895776][T16691] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1257.895817][T16691] ? down_read+0x1ad/0x2e0 [ 1257.895834][T16691] genl_rcv+0x28/0x40 [ 1257.895850][T16691] netlink_unicast+0x82c/0x9e0 [ 1257.895879][T16691] ? __pfx_netlink_unicast+0x10/0x10 [ 1257.895901][T16691] ? netlink_sendmsg+0x642/0xb30 [ 1257.895921][T16691] ? skb_put+0x11b/0x210 [ 1257.895940][T16691] netlink_sendmsg+0x805/0xb30 [ 1257.895972][T16691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1257.896013][T16691] ? __import_iovec+0x5d4/0x7f0 [ 1257.896030][T16691] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1257.896048][T16691] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1257.896064][T16691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1257.896089][T16691] __sock_sendmsg+0x219/0x270 [ 1257.896113][T16691] ____sys_sendmsg+0x505/0x830 [ 1257.896136][T16691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1257.896169][T16691] ___sys_sendmsg+0x21f/0x2a0 [ 1257.896189][T16691] ? __pfx____sys_sendmsg+0x10/0x10 [ 1257.896205][T16691] ? lockdep_hardirqs_on+0x9c/0x150 [ 1257.896261][T16691] ? __fget_files+0x2a/0x420 [ 1257.896282][T16691] ? __fget_files+0x3a0/0x420 [ 1257.896314][T16691] __sys_sendmsg+0x164/0x220 [ 1257.896333][T16691] ? __pfx___sys_sendmsg+0x10/0x10 [ 1257.896360][T16691] ? __secure_computing+0xe2/0x2a0 [ 1257.896384][T16691] __do_fast_syscall_32+0xb6/0x2b0 [ 1257.896414][T16691] do_fast_syscall_32+0x34/0x80 [ 1257.896436][T16691] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1257.896454][T16691] RIP: 0023:0xf7fa3539 [ 1257.896469][T16691] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1257.896482][T16691] RSP: 002b:00000000f548455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1257.896499][T16691] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 1257.896510][T16691] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 1257.896519][T16691] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1257.896528][T16691] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1257.896537][T16691] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1257.896563][T16691] [ 1258.408501][ T30] audit: type=1326 audit(1756261394.272:8080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.0.2516" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1258.430934][T14082] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1258.439590][ T30] audit: type=1326 audit(1756261394.272:8081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.0.2516" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1258.462601][ T9023] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1258.469847][ T30] audit: type=1326 audit(1756261394.272:8082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.0.2516" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1258.616131][T14082] usb 4-1: Using ep0 maxpacket: 16 [ 1259.117799][ T30] audit: type=1326 audit(1756261394.272:8083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.0.2516" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1259.169177][ T9023] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1259.201851][ T9023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.226070][ T122] usb 2-1: Using ep0 maxpacket: 16 [ 1259.266182][ T30] audit: type=1326 audit(1756261394.272:8084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.0.2516" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1259.306273][ T9023] usb 5-1: Product: syz [ 1259.336781][ T9023] usb 5-1: Manufacturer: syz [ 1259.339983][ T122] usb 2-1: device descriptor read/all, error -71 [ 1259.341466][ T9023] usb 5-1: SerialNumber: syz [ 1259.353171][ T30] audit: type=1326 audit(1756261394.272:8085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.0.2516" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1259.386332][ T30] audit: type=1326 audit(1756261394.282:8086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.0.2516" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1259.526420][T16695] input: syz1 as /devices/virtual/input/input386 [ 1259.745558][ T9023] usb 5-1: config 0 descriptor?? [ 1259.860773][ T30] audit: type=1326 audit(1756261394.282:8087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.0.2516" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1259.883582][T14082] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1259.892318][T14082] usb 4-1: can't read configurations, error -71 [ 1259.920898][ T30] audit: type=1326 audit(1756261394.282:8088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.0.2516" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1260.272422][T16700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2517'. [ 1260.775118][T16710] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 1261.055739][ T9023] usb 5-1: can't set config #0, error -71 [ 1261.173455][ T9023] usb 5-1: USB disconnect, device number 83 [ 1261.565390][ T43] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1261.637093][T16721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2523'. [ 1261.736212][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 1261.749165][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.839638][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1261.880155][ T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1261.891433][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.904369][ T43] usb 2-1: Product: syz [ 1261.925787][ T43] usb 2-1: Manufacturer: syz [ 1261.961998][ T43] usb 2-1: SerialNumber: syz [ 1262.016123][T14082] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1262.172978][T14082] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10601, setting to 1024 [ 1262.199954][T14082] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1262.262201][ T43] usb 2-1: 0:2 : does not exist [ 1262.287296][T14082] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1262.319967][ T43] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1262.339393][T14082] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1262.375402][T14082] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1262.417416][ T43] usb 2-1: USB disconnect, device number 86 [ 1262.437734][T14082] usb 5-1: Product: syz [ 1262.478180][T14082] usb 5-1: Manufacturer: syz [ 1262.513297][T14082] usb 5-1: SerialNumber: syz [ 1262.553947][T14082] usb 5-1: config 0 descriptor?? [ 1262.591910][T16722] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1262.622100][T14082] usb 5-1: selecting invalid altsetting 0 [ 1262.630179][ T6007] udevd[6007]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1263.348955][ T43] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1263.516793][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 1263.527240][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.540857][ T43] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1263.550559][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.631639][ T43] usb 2-1: config 0 descriptor?? [ 1264.351121][ T43] mcp2221 0003:04D8:00DD.0049: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1264.644637][ T43] usb 5-1: USB disconnect, device number 84 [ 1264.889042][T14082] usb 2-1: USB disconnect, device number 87 [ 1265.150505][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1265.150521][ T30] audit: type=1326 audit(1756261401.622:8091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16740 comm="syz.4.2528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1265.223419][T16743] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1265.233357][ T30] audit: type=1326 audit(1756261401.622:8092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16740 comm="syz.4.2528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1265.276720][ T30] audit: type=1326 audit(1756261401.622:8093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16740 comm="syz.4.2528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1265.324081][ T30] audit: type=1326 audit(1756261401.632:8094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16740 comm="syz.4.2528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1265.331241][T16743] CPU: 0 UID: 0 PID: 16743 Comm: syz.4.2528 Not tainted syzkaller #0 PREEMPT(full) [ 1265.331269][T16743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1265.331281][T16743] Call Trace: [ 1265.331289][T16743] [ 1265.331297][T16743] dump_stack_lvl+0x189/0x250 [ 1265.331330][T16743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1265.331351][T16743] ? __pfx__printk+0x10/0x10 [ 1265.331380][T16743] ? __rcu_read_unlock+0x84/0xe0 [ 1265.331404][T16743] ? kernfs_path_from_node+0x2f/0x290 [ 1265.331424][T16743] ? kernfs_path_from_node+0x250/0x290 [ 1265.331441][T16743] ? kernfs_path_from_node+0x2f/0x290 [ 1265.331464][T16743] sysfs_warn_dup+0x8e/0xa0 [ 1265.331484][T16743] sysfs_do_create_link_sd+0xc0/0x110 [ 1265.331507][T16743] device_add_class_symlinks+0x1cf/0x240 [ 1265.331531][T16743] device_add+0x475/0xb50 [ 1265.331555][T16743] wiphy_register+0x1ba6/0x28d0 [ 1265.331599][T16743] ? __pfx_wiphy_register+0x10/0x10 [ 1265.331622][T16743] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 1265.331651][T16743] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 1265.331676][T16743] ieee80211_register_hw+0x3425/0x4080 [ 1265.331696][T16743] ? preempt_schedule+0xae/0xc0 [ 1265.331739][T16743] ? ieee80211_register_hw+0x1471/0x4080 [ 1265.331769][T16743] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1265.331793][T16743] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1265.331824][T16743] ? __hrtimer_setup+0x187/0x210 [ 1265.331840][T16743] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1265.331870][T16743] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 1265.331936][T16743] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1265.331957][T16743] ? trace_kmalloc+0x1f/0xd0 [ 1265.331977][T16743] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1265.332002][T16743] ? kstrndup+0xbf/0x160 [ 1265.332032][T16743] hwsim_new_radio_nl+0xea4/0x1b10 [ 1265.332059][T16743] ? __pfx___nla_validate_parse+0x10/0x10 [ 1265.332087][T16743] ? preempt_schedule_notrace+0xd1/0x110 [ 1265.332121][T16743] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1265.332143][T16743] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1265.332173][T16743] ? __nla_parse+0x40/0x60 [ 1265.332203][T16743] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1265.332234][T16743] genl_family_rcv_msg_doit+0x215/0x300 [ 1265.332255][T16743] ? aa_get_newest_label+0x51/0x200 [ 1265.332297][T16743] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1265.332333][T16743] ? bpf_lsm_capable+0x9/0x20 [ 1265.332355][T16743] ? security_capable+0x7e/0x2e0 [ 1265.332389][T16743] genl_rcv_msg+0x60e/0x790 [ 1265.332417][T16743] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1265.332437][T16743] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1265.332477][T16743] netlink_rcv_skb+0x205/0x470 [ 1265.332500][T16743] ? __lock_acquire+0xab9/0xd20 [ 1265.332526][T16743] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1265.332548][T16743] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1265.332595][T16743] ? down_read+0x1ad/0x2e0 [ 1265.332616][T16743] genl_rcv+0x28/0x40 [ 1265.332633][T16743] netlink_unicast+0x82c/0x9e0 [ 1265.332686][T16743] ? __pfx_netlink_unicast+0x10/0x10 [ 1265.332739][T16743] ? skb_put+0x11b/0x210 [ 1265.332760][T16743] netlink_sendmsg+0x805/0xb30 [ 1265.332797][T16743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1265.332826][T16743] ? __import_iovec+0x5d4/0x7f0 [ 1265.332849][T16743] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1265.332872][T16743] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1265.332897][T16743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1265.332924][T16743] __sock_sendmsg+0x219/0x270 [ 1265.332951][T16743] ____sys_sendmsg+0x505/0x830 [ 1265.332978][T16743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1265.333005][T16743] ? finish_task_switch+0x266/0x950 [ 1265.333037][T16743] ___sys_sendmsg+0x21f/0x2a0 [ 1265.333059][T16743] ? __pfx____sys_sendmsg+0x10/0x10 [ 1265.333120][T16743] ? __fget_files+0x2a/0x420 [ 1265.333144][T16743] ? __fget_files+0x3a0/0x420 [ 1265.333181][T16743] __sys_sendmsg+0x164/0x220 [ 1265.333203][T16743] ? __pfx___sys_sendmsg+0x10/0x10 [ 1265.333219][T16743] ? irqentry_exit+0x74/0x90 [ 1265.333269][T16743] __do_fast_syscall_32+0xb6/0x2b0 [ 1265.333304][T16743] do_fast_syscall_32+0x34/0x80 [ 1265.333329][T16743] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1265.333350][T16743] RIP: 0023:0xf70ae539 [ 1265.333366][T16743] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1265.333382][T16743] RSP: 002b:00000000f545c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1265.333402][T16743] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 1265.333415][T16743] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 1265.333425][T16743] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1265.333436][T16743] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1265.333447][T16743] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1265.333476][T16743] [ 1265.767870][ C1] vkms_vblank_simulate: vblank timer overrun [ 1266.106759][T16746] input: syz1 as /devices/virtual/input/input387 [ 1266.236724][T16751] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2530'. [ 1266.258477][T16751] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1266.280715][ T30] audit: type=1326 audit(1756261401.632:8095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16740 comm="syz.4.2528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1266.302900][ C1] vkms_vblank_simulate: vblank timer overrun [ 1266.469840][ T30] audit: type=1326 audit(1756261401.662:8096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16740 comm="syz.4.2528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1266.564762][ T30] audit: type=1326 audit(1756261401.662:8097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16740 comm="syz.4.2528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1266.587141][ C1] vkms_vblank_simulate: vblank timer overrun [ 1266.607278][ T30] audit: type=1326 audit(1756261401.662:8098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16740 comm="syz.4.2528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1266.632050][ T30] audit: type=1326 audit(1756261401.672:8099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16740 comm="syz.4.2528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1266.654216][ C1] vkms_vblank_simulate: vblank timer overrun [ 1266.666318][ T30] audit: type=1326 audit(1756261401.672:8100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16740 comm="syz.4.2528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1266.688804][ C1] vkms_vblank_simulate: vblank timer overrun [ 1266.786225][ T9023] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1266.885076][T16762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2534'. [ 1266.928166][ T9023] usb 2-1: device descriptor read/64, error -71 [ 1267.326228][ T9023] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1267.487511][ T9023] usb 2-1: device descriptor read/64, error -71 [ 1267.508515][T16767] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2535'. [ 1267.596542][ T9023] usb usb2-port1: attempt power cycle [ 1267.637743][T16767] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2535'. [ 1267.650678][T16767] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2535'. [ 1267.706084][ T122] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1267.866326][ T122] usb 4-1: Using ep0 maxpacket: 16 [ 1267.965856][ T122] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1267.977120][ T122] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1267.987508][ T122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.035192][ T9023] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1268.107684][ T9023] usb 2-1: device descriptor read/8, error -71 [ 1268.139537][ T122] usb 4-1: config 0 descriptor?? [ 1268.304891][T16779] FAULT_INJECTION: forcing a failure. [ 1268.304891][T16779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1268.325408][T16779] CPU: 1 UID: 0 PID: 16779 Comm: syz.2.2539 Not tainted syzkaller #0 PREEMPT(full) [ 1268.325439][T16779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1268.325451][T16779] Call Trace: [ 1268.325459][T16779] [ 1268.325468][T16779] dump_stack_lvl+0x189/0x250 [ 1268.325497][T16779] ? __pfx____ratelimit+0x10/0x10 [ 1268.325532][T16779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1268.325553][T16779] ? __pfx__printk+0x10/0x10 [ 1268.325581][T16779] ? __might_fault+0xb0/0x130 [ 1268.325620][T16779] should_fail_ex+0x414/0x560 [ 1268.325651][T16779] _copy_from_user+0x2d/0xb0 [ 1268.325674][T16779] kstrtouint_from_user+0xc4/0x170 [ 1268.325706][T16779] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1268.325738][T16779] ? preempt_schedule_common+0x83/0xd0 [ 1268.325762][T16779] ? preempt_schedule+0xae/0xc0 [ 1268.325779][T16779] ? __pfx_preempt_schedule+0x10/0x10 [ 1268.325797][T16779] proc_fail_nth_write+0x88/0x200 [ 1268.325814][T16779] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1268.325832][T16779] ? preempt_schedule_thunk+0x16/0x30 [ 1268.325859][T16779] ? vfs_write+0x211/0xb30 [ 1268.325886][T16779] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1268.325908][T16779] vfs_write+0x27e/0xb30 [ 1268.325930][T16779] ? __pfx_vfs_write+0x10/0x10 [ 1268.325946][T16779] ? __fget_files+0x2a/0x420 [ 1268.325974][T16779] ? __fget_files+0x3a0/0x420 [ 1268.325999][T16779] ? __fget_files+0x2a/0x420 [ 1268.326034][T16779] ksys_write+0x145/0x250 [ 1268.326061][T16779] ? __pfx_ksys_write+0x10/0x10 [ 1268.326092][T16779] ? syscall_enter_from_user_mode_prepare+0x91/0x110 [ 1268.326126][T16779] __do_fast_syscall_32+0xb6/0x2b0 [ 1268.326155][T16779] ? lockdep_hardirqs_on+0x9c/0x150 [ 1268.326184][T16779] do_fast_syscall_32+0x34/0x80 [ 1268.326213][T16779] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1268.326235][T16779] RIP: 0023:0xf7fe3539 [ 1268.326253][T16779] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1268.326270][T16779] RSP: 002b:00000000f5506590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1268.326293][T16779] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5506620 [ 1268.326305][T16779] RDX: 0000000000000001 RSI: 00000000f7474ff4 RDI: 0000000000000000 [ 1268.326318][T16779] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1268.326329][T16779] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1268.326341][T16779] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1268.326372][T16779] [ 1268.575638][ C1] vkms_vblank_simulate: vblank timer overrun [ 1268.589352][ T9023] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1268.928525][ T9023] usb 2-1: device descriptor read/8, error -71 [ 1268.994926][ T122] mcp2221 0003:04D8:00DD.004A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1269.046523][ T9023] usb usb2-port1: unable to enumerate USB device [ 1269.407551][ T9023] usb 4-1: USB disconnect, device number 96 [ 1269.752560][T16788] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1269.760655][T16788] CPU: 0 UID: 0 PID: 16788 Comm: syz.1.2540 Not tainted syzkaller #0 PREEMPT(full) [ 1269.760687][T16788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1269.760700][T16788] Call Trace: [ 1269.760711][T16788] [ 1269.760722][T16788] dump_stack_lvl+0x189/0x250 [ 1269.760764][T16788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1269.760798][T16788] ? __pfx__printk+0x10/0x10 [ 1269.760831][T16788] ? __rcu_read_unlock+0x84/0xe0 [ 1269.760859][T16788] ? kernfs_path_from_node+0x2f/0x290 [ 1269.760884][T16788] ? kernfs_path_from_node+0x250/0x290 [ 1269.760905][T16788] ? kernfs_path_from_node+0x2f/0x290 [ 1269.760933][T16788] sysfs_warn_dup+0x8e/0xa0 [ 1269.760957][T16788] sysfs_do_create_link_sd+0xc0/0x110 [ 1269.760984][T16788] device_add_class_symlinks+0x1cf/0x240 [ 1269.761013][T16788] device_add+0x475/0xb50 [ 1269.761042][T16788] wiphy_register+0x1ba6/0x28d0 [ 1269.761092][T16788] ? __pfx_wiphy_register+0x10/0x10 [ 1269.761135][T16788] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 1269.761163][T16788] ieee80211_register_hw+0x3425/0x4080 [ 1269.761205][T16788] ? ieee80211_register_hw+0x1471/0x4080 [ 1269.761236][T16788] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1269.761257][T16788] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1269.761285][T16788] ? __hrtimer_setup+0x187/0x210 [ 1269.761299][T16788] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1269.761324][T16788] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 1269.761357][T16788] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1269.761390][T16788] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1269.761424][T16788] hwsim_new_radio_nl+0xea4/0x1b10 [ 1269.761446][T16788] ? __pfx___nla_validate_parse+0x10/0x10 [ 1269.761483][T16788] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1269.761516][T16788] ? __nla_parse+0x40/0x60 [ 1269.761543][T16788] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1269.761570][T16788] genl_family_rcv_msg_doit+0x215/0x300 [ 1269.761588][T16788] ? aa_get_newest_label+0x8d/0x200 [ 1269.761615][T16788] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1269.761646][T16788] ? bpf_lsm_capable+0x9/0x20 [ 1269.761665][T16788] ? security_capable+0x7e/0x2e0 [ 1269.761693][T16788] genl_rcv_msg+0x60e/0x790 [ 1269.761718][T16788] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1269.761735][T16788] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1269.761776][T16788] netlink_rcv_skb+0x205/0x470 [ 1269.761796][T16788] ? __lock_acquire+0xab9/0xd20 [ 1269.761818][T16788] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1269.761837][T16788] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1269.761877][T16788] ? down_read+0x1ad/0x2e0 [ 1269.761894][T16788] genl_rcv+0x28/0x40 [ 1269.761910][T16788] netlink_unicast+0x82c/0x9e0 [ 1269.761939][T16788] ? __pfx_netlink_unicast+0x10/0x10 [ 1269.761961][T16788] ? netlink_sendmsg+0x642/0xb30 [ 1269.761981][T16788] ? skb_put+0x11b/0x210 [ 1269.761999][T16788] netlink_sendmsg+0x805/0xb30 [ 1269.762031][T16788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1269.762056][T16788] ? __import_iovec+0x5d4/0x7f0 [ 1269.762071][T16788] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1269.762087][T16788] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1269.762104][T16788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1269.762127][T16788] __sock_sendmsg+0x219/0x270 [ 1269.762151][T16788] ____sys_sendmsg+0x505/0x830 [ 1269.762174][T16788] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1269.762207][T16788] ___sys_sendmsg+0x21f/0x2a0 [ 1269.762226][T16788] ? __pfx____sys_sendmsg+0x10/0x10 [ 1269.762279][T16788] ? __fget_files+0x2a/0x420 [ 1269.762300][T16788] ? __fget_files+0x3a0/0x420 [ 1269.762333][T16788] __sys_sendmsg+0x164/0x220 [ 1269.762351][T16788] ? __pfx___sys_sendmsg+0x10/0x10 [ 1269.762379][T16788] ? __secure_computing+0xe2/0x2a0 [ 1269.762402][T16788] __do_fast_syscall_32+0xb6/0x2b0 [ 1269.762433][T16788] do_fast_syscall_32+0x34/0x80 [ 1269.762455][T16788] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1269.762473][T16788] RIP: 0023:0xf707e539 [ 1269.762488][T16788] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1269.762501][T16788] RSP: 002b:00000000f542c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1269.762520][T16788] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 1269.762531][T16788] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 1269.762540][T16788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1269.762549][T16788] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1269.762558][T16788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1269.762584][T16788] [ 1270.209603][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1270.209622][ T30] audit: type=1326 audit(1756261406.182:8103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16783 comm="syz.1.2540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1270.238397][ T30] audit: type=1326 audit(1756261406.182:8104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16783 comm="syz.1.2540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1270.260533][ T30] audit: type=1326 audit(1756261406.182:8105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16783 comm="syz.1.2540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1270.282632][ T30] audit: type=1326 audit(1756261406.182:8106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16783 comm="syz.1.2540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1270.305006][ T30] audit: type=1326 audit(1756261406.192:8107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16783 comm="syz.1.2540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1270.327383][ T30] audit: type=1326 audit(1756261406.192:8108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16783 comm="syz.1.2540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1270.349786][ T30] audit: type=1326 audit(1756261406.192:8109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16783 comm="syz.1.2540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1270.371970][ T30] audit: type=1326 audit(1756261406.202:8110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16783 comm="syz.1.2540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1270.394299][ T30] audit: type=1326 audit(1756261406.202:8111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16783 comm="syz.1.2540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1270.470559][ T30] audit: type=1326 audit(1756261406.952:8112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16783 comm="syz.1.2540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1270.557762][T16788] input: syz1 as /devices/virtual/input/input388 [ 1375.655953][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1375.663055][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16787/1:b..l [ 1375.671540][ C0] rcu: (detected by 0, t=10502 jiffies, g=125585, q=172 ncpus=2) [ 1375.679638][ C0] task:syz.2.2541 state:R running task stack:25480 pid:16787 tgid:16781 ppid:5880 task_flags:0x400140 flags:0x20004000 [ 1375.694331][ C0] Call Trace: [ 1375.697757][ C0] [ 1375.700720][ C0] __schedule+0x1798/0x4cc0 [ 1375.705282][ C0] ? __pfx___schedule+0x10/0x10 [ 1375.710151][ C0] ? irqentry_exit+0x74/0x90 [ 1375.714788][ C0] preempt_schedule_irq+0xb5/0x150 [ 1375.720018][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1375.725781][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1375.731639][ C0] irqentry_exit+0x6f/0x90 [ 1375.736156][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1375.742426][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 1375.747732][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b f4 02 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 1375.767535][ C0] RSP: 0018:ffffc900035f6c98 EFLAGS: 00000206 [ 1375.773647][ C0] RAX: a6e6fecc65bd9100 RBX: 0000000000000000 RCX: a6e6fecc65bd9100 [ 1375.781634][ C0] RDX: 0000000000000000 RSI: ffffffff8dba6cac RDI: ffffffff8be33680 [ 1375.789619][ C0] RBP: ffffffff8172c195 R08: 0000000000000000 R09: ffffffff8172c195 [ 1375.797690][ C0] R10: ffffc900035f6e58 R11: ffffffff81ac3820 R12: 0000000000000002 [ 1375.805711][ C0] R13: ffffffff8e139ee0 R14: 0000000000000000 R15: 0000000000000246 [ 1375.813729][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1375.818958][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1375.825214][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1375.830466][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1375.835707][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1375.841363][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1375.846490][ C0] unwind_next_frame+0xc2/0x2390 [ 1375.851443][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1375.856580][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1375.861794][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1375.866838][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1375.873104][ C0] arch_stack_walk+0x11c/0x150 [ 1375.877901][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1375.883679][ C0] stack_trace_save+0x9c/0xe0 [ 1375.888485][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1375.894064][ C0] kasan_save_track+0x3e/0x80 [ 1375.898755][ C0] ? kasan_save_track+0x3e/0x80 [ 1375.903715][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1375.908927][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1375.914652][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1375.919526][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1375.925001][ C0] ? anon_vma_clone+0xb8/0x4f0 [ 1375.929786][ C0] anon_vma_clone+0xb8/0x4f0 [ 1375.934414][ C0] __split_vma+0x351/0xa00 [ 1375.938854][ C0] ? __pfx___split_vma+0x10/0x10 [ 1375.943828][ C0] vma_modify+0x13b3/0x1970 [ 1375.948363][ C0] vma_modify_flags+0x1e8/0x230 [ 1375.953319][ C0] ? __pfx_vma_modify_flags+0x10/0x10 [ 1375.958730][ C0] ? __pfx_load_gs_index+0x10/0x10 [ 1375.963868][ C0] madvise_vma_behavior+0x1ba8/0x3af0 [ 1375.969273][ C0] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1375.975115][ C0] ? finish_task_switch+0x18b/0x950 [ 1375.980401][ C0] ? finish_task_switch+0x266/0x950 [ 1375.985915][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1375.991136][ C0] ? finish_task_switch+0x266/0x950 [ 1375.996475][ C0] ? mas_prev_node+0xb32/0xdb0 [ 1376.001265][ C0] ? mas_prev_slot+0xb31/0xbb0 [ 1376.006062][ C0] ? find_vma_prev+0xfc/0x170 [ 1376.010766][ C0] ? __pfx_find_vma_prev+0x10/0x10 [ 1376.016101][ C0] ? preempt_schedule+0xae/0xc0 [ 1376.020985][ C0] madvise_walk_vmas+0x51c/0xa30 [ 1376.025955][ C0] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1376.031501][ C0] ? blk_start_plug+0x6f/0x1b0 [ 1376.036291][ C0] madvise_do_behavior+0x38e/0x550 [ 1376.041433][ C0] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1376.047107][ C0] do_madvise+0x1bc/0x270 [ 1376.051554][ C0] ? __pfx_do_madvise+0x10/0x10 [ 1376.056462][ C0] __ia32_sys_madvise+0xa7/0xc0 [ 1376.061332][ C0] __do_fast_syscall_32+0xb6/0x2b0 [ 1376.066474][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1376.071700][ C0] do_fast_syscall_32+0x34/0x80 [ 1376.076583][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1376.082963][ C0] RIP: 0023:0xf7fe3539 [ 1376.087347][ C0] RSP: 002b:00000000f54c455c EFLAGS: 00000206 ORIG_RAX: 00000000000000db [ 1376.096004][ C0] RAX: ffffffffffffffda RBX: 0000000080bdd000 RCX: 0000000000002000 [ 1376.104003][ C0] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000000 [ 1376.112074][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1376.120055][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1376.128126][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1376.136219][ C0] [ 1376.139360][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10544 jiffies! g125585 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1376.152060][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=81952 [ 1376.160310][ C0] rcu: rcu_preempt kthread starved for 10545 jiffies! g125585 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1376.171777][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1376.181756][ C0] rcu: RCU grace-period kthread stack dump: [ 1376.187742][ C0] task:rcu_preempt state:I stack:27160 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1376.199946][ C0] Call Trace: [ 1376.203496][ C0] [ 1376.206719][ C0] __schedule+0x1798/0x4cc0 [ 1376.211270][ C0] ? __pfx___schedule+0x10/0x10 [ 1376.216155][ C0] ? schedule+0x91/0x360 [ 1376.220422][ C0] schedule+0x165/0x360 [ 1376.224599][ C0] schedule_timeout+0x12b/0x270 [ 1376.229473][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1376.234955][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1376.240951][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1376.246355][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1376.251923][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1376.256808][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1376.262023][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 1376.267933][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1376.273233][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1376.278452][ C0] ? finish_swait+0xcd/0x1f0 [ 1376.283066][ C0] rcu_gp_kthread+0x99/0x390 [ 1376.287678][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1376.292895][ C0] ? __kthread_parkme+0x7b/0x200 [ 1376.297843][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1376.302885][ C0] kthread+0x70e/0x8a0 [ 1376.306977][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1376.312193][ C0] ? __pfx_kthread+0x10/0x10 [ 1376.316833][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1376.322248][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1376.327621][ C0] ? __pfx_kthread+0x10/0x10 [ 1376.332479][ C0] ret_from_fork+0x3f9/0x770 [ 1376.337092][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1376.342232][ C0] ? __switch_to_asm+0x39/0x70 [ 1376.347287][ C0] ? __switch_to_asm+0x33/0x70 [ 1376.352169][ C0] ? __pfx_kthread+0x10/0x10 [ 1376.357086][ C0] ret_from_fork_asm+0x1a/0x30 [ 1376.361982][ C0] [ 1376.365186][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1376.371691][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1376.377005][ C1] NMI backtrace for cpu 1 [ 1376.377020][ C1] CPU: 1 UID: 0 PID: 16794 Comm: syz.3.2543 Not tainted syzkaller #0 PREEMPT(full) [ 1376.377039][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1376.377048][ C1] RIP: 0010:lock_is_held_type+0xba/0x190 [ 1376.377073][ C1] Code: f0 0a 00 00 45 31 ff 49 83 ff 31 73 24 48 89 df 4c 89 f6 e8 78 02 00 00 85 c0 75 2a 49 ff c7 49 63 85 e8 0a 00 00 48 83 c3 28 <49> 39 c7 7c d8 eb 11 48 c7 c7 b0 b1 00 8e 4c 89 fe e8 30 af 85 f9 [ 1376.377086][ C1] RSP: 0018:ffffc90003226fc8 EFLAGS: 00000092 [ 1376.377102][ C1] RAX: 0000000000000003 RBX: ffff88804b7d8b40 RCX: ae7e35927e267f00 [ 1376.377114][ C1] RDX: ffff88804b7d8000 RSI: ffffffff8e139ee0 RDI: ffff88804b7d8b18 [ 1376.377126][ C1] RBP: 00000000ffffffff R08: ffff88804b7d8000 R09: 0000000000000002 [ 1376.377137][ C1] R10: 00000000ffffffff R11: 0000000000000002 R12: 0000000000000246 [ 1376.377147][ C1] R13: ffff88804b7d8000 R14: ffffffff8e139ee0 R15: 0000000000000002 [ 1376.377158][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0063) knlGS:00000000f544eb40 [ 1376.377172][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1376.377183][ C1] CR2: 00000000800012c0 CR3: 0000000077650000 CR4: 00000000003526f0 [ 1376.377199][ C1] Call Trace: [ 1376.377207][ C1] [ 1376.377216][ C1] qdisc_lookup_rcu+0x381/0x6d0 [ 1376.377236][ C1] qdisc_tree_reduce_backlog+0x1b2/0x480 [ 1376.377254][ C1] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 1376.377272][ C1] fq_codel_change+0x9f6/0xda0 [ 1376.377299][ C1] ? __pfx_fq_codel_change+0x10/0x10 [ 1376.377318][ C1] ? __sock_sendmsg+0x219/0x270 [ 1376.377342][ C1] fq_codel_init+0x355/0x960 [ 1376.377362][ C1] ? lockdep_rtnl_is_held+0x26/0x40 [ 1376.377379][ C1] ? __pfx_fq_codel_init+0x10/0x10 [ 1376.377399][ C1] qdisc_create+0x7ac/0xea0 [ 1376.377419][ C1] tc_modify_qdisc+0x1538/0x20e0 [ 1376.377442][ C1] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1376.377469][ C1] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1376.377485][ C1] rtnetlink_rcv_msg+0x779/0xb70 [ 1376.377506][ C1] ? __lock_acquire+0xab9/0xd20 [ 1376.377535][ C1] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1376.377554][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1376.377580][ C1] netlink_rcv_skb+0x205/0x470 [ 1376.377601][ C1] ? __lock_acquire+0xab9/0xd20 [ 1376.377620][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1376.377640][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1376.377664][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1376.377687][ C1] netlink_unicast+0x82c/0x9e0 [ 1376.377708][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1376.377727][ C1] ? netlink_sendmsg+0x642/0xb30 [ 1376.377746][ C1] ? skb_put+0x11b/0x210 [ 1376.377761][ C1] netlink_sendmsg+0x805/0xb30 [ 1376.377785][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1376.377806][ C1] ? __import_iovec+0x5d4/0x7f0 [ 1376.377822][ C1] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1376.377837][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1376.377853][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1376.377874][ C1] __sock_sendmsg+0x219/0x270 [ 1376.377893][ C1] ____sys_sendmsg+0x505/0x830 [ 1376.377910][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1376.377928][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 1376.377951][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 1376.377967][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 1376.377994][ C1] ? __fget_files+0x2a/0x420 [ 1376.378014][ C1] ? __fget_files+0x3a0/0x420 [ 1376.378037][ C1] __sys_sendmsg+0x164/0x220 [ 1376.378053][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 1376.378073][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1376.378093][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 1376.378115][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1376.378134][ C1] do_fast_syscall_32+0x34/0x80 [ 1376.378155][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1376.378173][ C1] RIP: 0023:0xf705e539 [ 1376.378187][ C1] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1376.378199][ C1] RSP: 002b:00000000f544e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1376.378214][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800012c0 [ 1376.378224][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1376.378234][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1376.378243][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1376.378253][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1376.378268][ C1]