last executing test programs: 7.342867588s ago: executing program 1 (id=812): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 7.259087013s ago: executing program 1 (id=813): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f90ba3c92b", 0x14}], 0x1}, 0x0) unshare(0x2040400) r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="18001d801400008006000500c0000000050007009e000000"], 0x34}}, 0x0) ioctl$SIOCSIFMTU(r6, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00'}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f00000001c0)=0x7) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x184}, {0xa, 0x2, 0x3}]}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) 5.400837524s ago: executing program 3 (id=819): r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000040), 0x220c2, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000000c0)={0xd, 0xc0, 0x2}) r1 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000280)={0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x24, &(0x7f00000002c0)={0x40, 0x16, 0x7e, "eaf62cbe9095752fb3392f1cc68561fe8a9b5a2dcc068edf533cbe7529e156c56bb8b955009640b8906495fe7a651b99efe1150b42bec74742f9bace7ac4520d04d86a85f68804d9c7f064eec31ed89f21de5244d0f47960883027a7cd9e8d473c591cc29cded6b94b202d5e610139ba378dfdf848d3742a895ebd7ce494"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x200, 0x800, 0x37a2, 0x6, 0x98b1, 0x7, 0x14, 0x2f, 0x0, 0xd2d8, 0x9, 0xb3}}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x87, 0x2, 0xb33}, &(0x7f0000000580)={0x20, 0x89, 0x2, 0x1}}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x80000000000000a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) openat$nullb(0xffffff9c, &(0x7f00000001c0), 0x20001, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, 0x0}) brk(0x7fffffffffffffff) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000100)=[0xb, 0x2ff]) 4.286376328s ago: executing program 4 (id=827): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x34e1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000280)={0x1ff, 0x32315241, 0x0, @stepwise={0x36, 0x5, 0x0, 0x8, 0x25, 0x78}}) 4.184061197s ago: executing program 4 (id=828): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000c00)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000d00)={0x48, 0x8, r1, 0x0, 0x80000000, 0x6b, &(0x7f0000000c80)="4e45469e1c82b309defca9ab25fd14e49affc09e5b403b8c588156b9ecb28886b7b36df6ab12ad6dbd1b95021870594ea806857f147987b73d8f8183e050a6e0c4cf9df5c3a91970904d9b61db8433a575eac61e5bebd38931814e9caff9a49f3a1d9ca4e4de27bb679146", 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r2 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) r6 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000bc0)="0477960a4a7cdcc82d22c608976fa6f22b7490ecdbaaf42479d77d9e627191a829d060f883de6e51d53849ee5f3bf9", 0x2f, 0xfffffffffffffffe) syz_emit_vhci(&(0x7f00000018c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @none, 0x1, 0x93}}}, 0xe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r6, r3, r6}, &(0x7f0000000580)=""/259, 0x54, &(0x7f00000002c0)={&(0x7f00000003c0)={'sha256-generic\x00'}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_usb_connect(0x5, 0x469, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x97, 0x51, 0xa4, 0x20, 0xc45, 0x60a8, 0x4959, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x457, 0x2, 0x9, 0xf2, 0x30, 0xed, [{{0x9, 0x4, 0xff, 0x6, 0xe, 0x80, 0xd, 0x85, 0x0, [], [{{0x9, 0x5, 0xf, 0x0, 0x200, 0xb3, 0x1, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x183, 0x1, 0x6b46}, @generic={0x2, 0x5}]}}, {{0x9, 0x5, 0x8, 0x4, 0x40, 0x10, 0x2, 0x0, [@generic={0x3d, 0xc, "d4ed25fcd06ab8162aca6fbc3d8dc0a93b8b82bce8f347ed44eabae910f5377f5df2012031dba4c66054113f1fd7d73a9d62a3ba10696c0c8ebac7"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4}]}}, {{0x9, 0x5, 0xc, 0x2, 0x10, 0x7, 0x6, 0x9, [@generic={0xbe, 0x1, "569f73afb6105e9ca1cbd4d3a2487bb5afd8fe7d6135530ccfafcffcc964cfb480dd59294306f5960e8ab2bea58e41652a5f8f4614384fe4276c9e42b2b8eb17619b5bdebfbd0a7d9c8b8b678505809bc9816e08874c34deed1c00ac7940965d77bfe9524e1056c72f039c0b32f0431afb015c53b90260da167d2ff2ed81117d94d20d7f4202eefddf42f7546dec7b73a22b81d985253da59b82ded123b700d704c2dddb48e8de903d411aeca3f24c6dfd01f809e54369bc7d456059"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xfff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x5, 0x2, 0xf7}}, {{0x9, 0x5, 0x5, 0x3, 0x8, 0x3, 0x1, 0xfb, [@generic={0xe0, 0xa, "fb260a95cfe2003eeacfa886cfa3e6dc71c77884e169990d67c0c421c575c5479dc9b4abd4d56bf51b5522dcf91b32dd6b52912782f17f7ec0a8accaa56c3fc6181452b1ca84953592b6c25855618de54c9f03f3b8b5d25c8b8700f5c6419cd7a6a144dcc6b21df6988cf3ae32221a2af2cf9a8a1a1649a3807e2a0963b7b791daf047dba18a8aa13b7808f14a7f43c3f8e9daae049d99857ae17dc9aea16cdee7d7c6ba875843582449d8770f23734c91275c72fcad724cd8e5f5f2f125a16ae836a2a70d862d76b342be116c158153e8f13d27cf88896787d8b49a0eaf"}]}}, {{0x9, 0x5, 0x28ee2d8cd88d4523, 0x0, 0x3ff, 0x1, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x80}]}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0x3, 0x4, 0x77}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0xb, 0x4, 0x3}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0x8, 0xf7, 0x6, [@generic={0x9, 0x11, "351ddf32ebd29b"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x1, 0x80, 0x45, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x9}]}}, {{0x9, 0x5, 0xf, 0x8, 0x3ff, 0xf, 0x7, 0x7, [@generic={0x38, 0x5, "3096c12448ba5959a8e58aef548f8aa7effc53c36dd49430733c868a5f91bef803ca2dd5ecf923b411d2b9495fc052df6d9751e817ef"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x7, 0x58, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0xfff9}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xe, 0x9}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x9c, 0x5, 0x5, [@generic={0xad, 0x3, "d22a9329d234d32f0e745346ccec8e2af84781d7918935a072be54abe47c09bde8e438340c083494004ee71d7ad5f8fce663f7d57fc47b2422e2c261c0c6605e8b51b68afbe9fb85a35952bffe8037f585de70ae5f3713d11cf9bacfd2e7289b149096fae43287c6685d81d52632bf4bad478399cd0dc1006bdc5a6c996fa814acb3b3ab0c552ade9338376102e1e4e310736172943f93d85915f2d797af24aeb24c8d89dc4e84bcbc6d66"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x400, 0x7, 0xb9, 0xf7}}]}}, {{0x9, 0x4, 0x1, 0x3, 0x2, 0x34, 0x3d, 0x70, 0x5, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xffffffe9, 0xd, 0x1, 0x7}, [@country_functional={0x6, 0x24, 0x7, 0x6}, @dmm={0x7, 0x24, 0x14, 0x2, 0x4}]}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "0f31e1"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xff, 0xd606, 0x6}, {0x6}, [@country_functional={0x10, 0x24, 0x7, 0x1, 0x4, [0xfff, 0x9c89, 0x91, 0x6, 0x1]}, @network_terminal={0x7, 0x24, 0xa, 0xde, 0xc0, 0x0, 0xe}, @mbim_extended={0x8, 0x24, 0x1c, 0xefe8, 0x1, 0x91}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x1}]}], [{{0x9, 0x5, 0x5, 0x1, 0x200, 0x0, 0x5, 0x35}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x40, 0x1, 0x81, [@generic={0x41, 0x3, "d13eac4bbebcf46f1f021d4eb9a92b060c427541276181280634022d4a90e854a57ff53ec614903e003940bcd4bc6b03d3905fa43d141913adad899d9d2fb8"}]}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x1, 0x1c, 0xb, 0x10, 0x4}, 0x12, &(0x7f0000000100)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x1, 0x4, 0x400}]}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x44}}, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000d80)=0x2810b0) 4.122614505s ago: executing program 1 (id=829): r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) chown(&(0x7f00000040c0)='./file0\x00', 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', r4, 0x0, 0x50) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0x1000000, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x3, @pix_mp={0x9, 0x2, 0x3432564e, 0x6, 0x1, [{0x1, 0x4}, {0xd3, 0x4}, {0x5, 0x4f11}, {0x5, 0x6}, {0x4, 0x3}, {0x400, 0x80000000}, {0x3ff, 0x2000002}, {0x5, 0x800000}], 0x9, 0xbe, 0x3}}) 3.820574353s ago: executing program 0 (id=831): socket$nl_route(0x10, 0x3, 0x0) mq_open(&(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x40, 0x80, &(0x7f0000000080)={0x6, 0x9, 0x3, 0x3}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$unix(r1, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44081}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0xc, 0x117, 0x2}}], 0xc, 0x850}}], 0x2, 0x20000000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') read$FUSE(r2, &(0x7f0000002180)={0x2020}, 0x2020) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB='stack :'], 0x564) 3.765652166s ago: executing program 0 (id=832): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000580)={'#! ', './file1/../file0', [{0x20, '\x00'}, {0x20, '@\x1d$.%{'}, {0x20, '&'}], 0xa, "0000783348b29e910024000029f50a899336010000000000000000ebf7fade3d580388d290d96721ec137228b60a0fd94415ad24ed37066498a2e1fed31075654e1b44ce"}, 0x63) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 3.49961074s ago: executing program 1 (id=834): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) landlock_create_ruleset(0x0, 0x0, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x4000, {0x0, 0x0, 0x0, 0x8002ead, 0x7fff, 0x0, 0x0, 0x19, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d34717deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0xfffffdcb, &(0x7f0000000340), &(0x7f0000000480), 0x8, 0x8e, 0x8, 0x8, &(0x7f00000004c0)}}, 0x3) 3.419932173s ago: executing program 0 (id=835): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 3.28649384s ago: executing program 0 (id=837): syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000c4b20710200e01015a000000000109021b000100000000090400"], 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80, 0x80000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth0\x00', 0x10) 3.134106418s ago: executing program 1 (id=838): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004600)=""/11, 0xb}, 0x40c3f}], 0x4000100, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, &(0x7f0000000180)=0x6, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400, 0x0, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) getresgid(&(0x7f00000011c0)=0x0, &(0x7f0000001200), &(0x7f0000001240)=0x0) syz_fuse_handle_req(r7, &(0x7f0000001ac0)="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", 0x2000, &(0x7f0000001540)={&(0x7f0000000300)={0x50, 0xfffffffffffffffe, 0x1, {0x7, 0x2b, 0x10000, 0x20000000, 0x9, 0x8000, 0x5, 0x5, 0x0, 0x0, 0x10, 0x7}}, &(0x7f0000000380)={0x18, 0x0, 0x4, {0xffff}}, &(0x7f00000003c0)={0x18, 0x0, 0x8, {0xa9}}, &(0x7f0000000400)={0x18, 0x0, 0x82, {0x2}}, &(0x7f00000004c0)={0x18, 0x0, 0x98, {0x8}}, 0x0, &(0x7f00000005c0)={0x60, 0x0, 0x6, {{0x10000, 0x5, 0x1, 0x0, 0xa17, 0x0, 0x2}}}, &(0x7f0000000640)={0x18, 0x0, 0x0, {0x1ff}}, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f00000006c0)={0x20, 0xfffffffffffffff5, 0x5, {0x0, 0x14}}, 0x0, &(0x7f00000009c0)={0x90, 0xfffffffffffffffe, 0x4, {0x5, 0x1, 0x0, 0x8, 0x6, 0xfffffffa, {0x0, 0x2, 0x9, 0xf, 0x3ff, 0xffffffffffffffff, 0x8, 0xfff, 0x4, 0xa000, 0x6, 0x0, 0x0, 0x4, 0x3}}}, 0x0, &(0x7f0000000d00)={0x1f0, 0x0, 0x4, [{{0x3, 0x1, 0x9, 0x1, 0x3, 0x9, {0x1, 0x1, 0x10000, 0x80000000, 0x0, 0x1, 0x140000, 0x2, 0x1, 0x8000, 0x3, 0x0, 0x0, 0x80000001, 0xffff1cbf}}, {0x0, 0x8, 0x0, 0xfffffffa}}, {{0x0, 0x1, 0x5, 0x9, 0x6, 0x1714, {0x4, 0x7fffffffffffffff, 0x400, 0x3, 0x8, 0x10, 0x1000, 0x1, 0x8, 0x2000, 0x90, 0x0, 0x0, 0xa0f, 0x401}}, {0x0, 0x81, 0x9, 0x3, '&]\\%^W}&;'}}, {{0x4, 0x0, 0x6, 0x8, 0x5, 0x6, {0x4, 0x4, 0x7fff, 0x2, 0x0, 0x4, 0x7, 0xe, 0x5, 0xa000, 0x4, 0x0, r8, 0x6, 0x4}}, {0x5, 0x5de8, 0x6, 0xce, '+]]\')%'}}]}, &(0x7f0000001080)={0xa0, 0xfffffffffffffffe, 0x0, {{0x0, 0x0, 0x5, 0x6930, 0x3, 0x3, {0x1, 0xfffffffffffffffb, 0xb2, 0x4c29, 0x5, 0x7, 0x83, 0xfffffeff, 0x10, 0x8000, 0xfffffff9, 0x0, 0x0, 0x7fff, 0xf}}, {0x0, 0xd}}}, &(0x7f0000001140)={0x20, 0x0, 0x5, {0x7ff, 0x0, 0xff, 0x100}}, &(0x7f0000001400)={0x130, 0x0, 0x95fc, {0x5, 0x80000001, 0x0, '\x00', {0x10, 0x0, 0x1, 0x8000, 0x0, r9, 0x6000, '\x00', 0x8001, 0x48000000, 0x2, 0xfffffffffffffff8, {0x8000000000000001, 0x5}, {0xe69, 0x4}, {0x1, 0x80000001}, {0xf6a, 0x7fff}, 0xe3, 0x83, 0x5, 0xf}}}}) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1}) r10 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00000ca000/0x3000)=nil, 0x3000, 0x3000000, 0x12, r10, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 2.525020655s ago: executing program 1 (id=839): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) timer_create(0x6, &(0x7f0000000100)={0x0, 0x29, 0x0, @thr={&(0x7f0000000140)="8826b7a17245d2eb52937ec4766a7de540f67bfe3e105445da3c9b3bd5d7d8fdafd441452c0c72caf30e58b1d0443ac1a9826454b6c0756842d5d41cf3bd9fc7098772e7449550645912014d53bbe76afc58cb37e16571f33f3e76990d32320030202cb71b94b1607d7e2e343d54b8b5c670f918aa438d6f", &(0x7f00000001c0)="8a16f8d903b0e3d642c258550bacf6c4e10f7dd31ac798dd24ee8cdecfb6e0ffe22ac4b61bb4c92d7ab82449deb7bcc6351c784a8efe71b9019719db2eb195ac5c0668aaeeffcc357905e9f7b3444fc9822d3d8529442c"}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x94, 0x7200, 0x0, 0x0}], 0x1}) syz_usb_control_io(r0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x100000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r6, 0x407, 0x100000) fcntl$setpipe(r6, 0x407, 0x1) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f00000006c0)=ANY=[@ANYRES8]) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0x2, 0xfffffff8, 0x1da0, 0x0, 0x0, "42f46749a2ed195a14cc4951dc7e8e5aec7776", 0x100000, 0xfdfdffff}) 2.416640679s ago: executing program 2 (id=840): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000580)={'#! ', './file1/../file0', [{0x20, '\x00'}, {0x20, '@\x1d$.%{'}, {0x20, '&'}], 0xa, "0000783348b29e910024000029f50a899336010000000000000000ebf7fade3d580388d290d96721ec137228b60a0fd94415ad24ed37066498a2e1fed31075654e1b44ce"}, 0x63) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 2.280390568s ago: executing program 2 (id=841): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/93, 0x5d}, {&(0x7f00000047c0)=""/4060, 0xfdc}, {&(0x7f00000037c0)=""/4069, 0xfe5}, {&(0x7f0000000080)=""/255, 0xff}, {&(0x7f0000001780)=""/14, 0xe}, {&(0x7f00000002c0)=""/140, 0x8c}, {&(0x7f00000004c0)=""/38, 0x26}], 0x7}, 0x40000100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 2.141076918s ago: executing program 3 (id=842): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/93, 0x5d}, {&(0x7f00000047c0)=""/4060, 0xfdc}, {&(0x7f00000037c0)=""/4069, 0xfe5}, {&(0x7f0000000080)=""/255, 0xff}, {&(0x7f0000001780)=""/14, 0xe}, {&(0x7f00000002c0)=""/140, 0x8c}, {&(0x7f00000004c0)=""/38, 0x26}], 0x7}, 0x40000100) (fail_nth: 1) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 2.091371481s ago: executing program 2 (id=843): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000340)=0x7) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000100)=0x7) writev(r2, &(0x7f0000000080), 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000300)={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x5}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x28, r1, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x28}}, 0x0) 1.904638718s ago: executing program 4 (id=844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x20050800) 1.879965402s ago: executing program 0 (id=845): socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x228100, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xffffffffffffff7b}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0x4, 0xa, 0x400, 0x1, 0x7, 0x80000000}}, {0x4}}, {{0x1c, 0x1, {0x8, 0x5, 0x2, 0x5, 0x0, 0x5, 0x7}}, {0x4}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x44000}, 0x9000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x8, 0x3, "02b51112"}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1.768199264s ago: executing program 2 (id=846): setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) futex(0x0, 0x80, 0x4, &(0x7f000000b000)={0x77359400}, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = getpid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b00010067656e65766500000400028008001300", @ANYRES32=r8, @ANYBLOB="0804042900e1ff00"], 0x44}}, 0x0) (async) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r11, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r12, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) 1.75905419s ago: executing program 3 (id=847): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[@ANYBLOB="a03700002d00010026bd7000", @ANYRES32, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1.61573862s ago: executing program 3 (id=848): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_usbip_server_init(0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_enter(r1, 0x6e2d, 0x6a4d, 0x40, &(0x7f0000000080)={[0x7f, 0xfac2]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10, 0x20040080}, 0x0) recvmmsg$unix(r3, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x18}}], 0x18}}], 0x1, 0x2060, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 1.511692351s ago: executing program 2 (id=849): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xfd, 0x9, 0xa9, 0x4, 0x0, 0x2, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x4, 0x0, 0x5e, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) (fail_nth: 6) 1.376368951s ago: executing program 4 (id=850): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xcb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) (fail_nth: 6) 1.261250721s ago: executing program 2 (id=851): openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x5c, 0x160, 0x134, 0x3e0, 0x240, 0x228, 0x25a, 0x240, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0x0, 0xffffff00], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xec, 0x134, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x24}, {0x0, "d176"}}, @common=@unspec=@state={{0x24}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x4}, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x364) socket$inet6(0xa, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="0500000000000000e6ff05000000080003", @ANYRES32], 0x2c}}, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f00000000c0)={0xe7d, 0x1, 0x4, 0x10, 0xdbf9, {0x77359400}, {0x3, 0xc, 0xda, 0x40, 0xf8, 0x3, "c82bd61e"}, 0x6}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12119e94bcd37f836da6a4780100003afe0620e6040b0000010102030109021b0001000010000904140001a0242600090582020800000000"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f00000005c0)={0x2, 0x4e24, @broadcast}, 0x10) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000ffdbdf2505000000080002000800000005000500070000001c000180080007001e639486e2ae5e3fb2f948099de60131771f93787ee5f14fa698be9adccf3331934290987bf0b730b3aa8f3b2cc4ba4587bd019536f9b9aea70efcb774d1fc5b4714b09137154a903598bf5e30d301d11c528cebb72ab18583442b7847", @ANYRES32=0x0, @ANYBLOB="060001000200000008000700", @ANYRES32=r8, @ANYBLOB="18000180140004002001000000000000000000000000000108000200010000000800020008000000"], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x50) write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) r9 = inotify_init1(0x80000) inotify_add_watch(r9, &(0x7f0000000080)='.\x00', 0x2000775) close(r6) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000003c0)=[{0x0}], 0x1}}], 0x1, 0x20004800) recvfrom$inet(r3, &(0x7f0000000100)=""/51, 0x33, 0x40, 0x0, 0x0) 495.9562ms ago: executing program 4 (id=852): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000000c0)=""/41, 0x29}, {&(0x7f00000007c0)=""/204, 0xcc}], 0x3, &(0x7f0000000280)=""/34, 0x22}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r1, 0x4, "ff264f", "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"}}, 0x110) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 392.567056ms ago: executing program 4 (id=853): r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000040), 0x220c2, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000000c0)={0xd, 0xc0, 0x2}) r1 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000280)={0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x24, &(0x7f00000002c0)={0x40, 0x16, 0xbd, "eaf62cbe9095752fb3392f1cc68561fe8a9b5a2dcc068edf533cbe7529e156c56bb8b955009640b8906495fe7a651b99efe1150b42bec74742f9bace7ac4520d04d86a85f68804d9c7f064eec31ed89f21de5244d0f47960883027a7cd9e8d473c591cc29cded6b94b202d5e610139ba378dfdf848d3742a895ebd7ce494a8b01b8d2f5401a6b5d146b35481f6ad6729841bdd9982f8fbb8b78b5dff8c439d3d9113489f295480a05e6a1560cc56977a0bd28cdef91d1d5e378a7ee602"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x200, 0x800, 0x37a2, 0x6, 0x98b1, 0x7, 0x14, 0x2f, 0x0, 0xd2d8, 0x9, 0xb3}}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x87, 0x2, 0xb33}, &(0x7f0000000580)={0x20, 0x89, 0x2, 0x1}}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x80000000000000a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) openat$nullb(0xffffff9c, &(0x7f00000001c0), 0x20001, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, 0x0}) brk(0x7fffffffffffffff) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000100)=[0xb, 0x2ff]) 361.186748ms ago: executing program 0 (id=854): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000c00)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000d00)={0x48, 0x8, r1, 0x0, 0x80000000, 0x6b, &(0x7f0000000c80)="4e45469e1c82b309defca9ab25fd14e49affc09e5b403b8c588156b9ecb28886b7b36df6ab12ad6dbd1b95021870594ea806857f147987b73d8f8183e050a6e0c4cf9df5c3a91970904d9b61db8433a575eac61e5bebd38931814e9caff9a49f3a1d9ca4e4de27bb679146", 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r2 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) r6 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000bc0)="0477960a4a7cdcc82d22c608976fa6f22b7490ecdbaaf42479d77d9e627191a829d060f883de6e51d53849ee5f3bf9", 0x2f, 0xfffffffffffffffe) syz_emit_vhci(&(0x7f00000018c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @none, 0x1, 0x93}}}, 0xe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r6, r3, r6}, &(0x7f0000000580)=""/259, 0x54, &(0x7f00000002c0)={&(0x7f00000003c0)={'sha256-generic\x00'}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_usb_connect(0x5, 0x469, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x97, 0x51, 0xa4, 0x20, 0xc45, 0x60a8, 0x4959, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x457, 0x2, 0x9, 0xf2, 0x30, 0xed, [{{0x9, 0x4, 0xff, 0x6, 0xe, 0x80, 0xd, 0x85, 0x0, [], [{{0x9, 0x5, 0xf, 0x0, 0x200, 0xb3, 0x1, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x183, 0x1, 0x6b46}, @generic={0x2, 0x5}]}}, {{0x9, 0x5, 0x8, 0x4, 0x40, 0x10, 0x2, 0x0, [@generic={0x3d, 0xc, "d4ed25fcd06ab8162aca6fbc3d8dc0a93b8b82bce8f347ed44eabae910f5377f5df2012031dba4c66054113f1fd7d73a9d62a3ba10696c0c8ebac7"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4}]}}, {{0x9, 0x5, 0xc, 0x2, 0x10, 0x7, 0x6, 0x9, [@generic={0xbe, 0x1, "569f73afb6105e9ca1cbd4d3a2487bb5afd8fe7d6135530ccfafcffcc964cfb480dd59294306f5960e8ab2bea58e41652a5f8f4614384fe4276c9e42b2b8eb17619b5bdebfbd0a7d9c8b8b678505809bc9816e08874c34deed1c00ac7940965d77bfe9524e1056c72f039c0b32f0431afb015c53b90260da167d2ff2ed81117d94d20d7f4202eefddf42f7546dec7b73a22b81d985253da59b82ded123b700d704c2dddb48e8de903d411aeca3f24c6dfd01f809e54369bc7d456059"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xfff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x5, 0x2, 0xf7}}, {{0x9, 0x5, 0x5, 0x3, 0x8, 0x3, 0x1, 0xfb, [@generic={0xe0, 0xa, "fb260a95cfe2003eeacfa886cfa3e6dc71c77884e169990d67c0c421c575c5479dc9b4abd4d56bf51b5522dcf91b32dd6b52912782f17f7ec0a8accaa56c3fc6181452b1ca84953592b6c25855618de54c9f03f3b8b5d25c8b8700f5c6419cd7a6a144dcc6b21df6988cf3ae32221a2af2cf9a8a1a1649a3807e2a0963b7b791daf047dba18a8aa13b7808f14a7f43c3f8e9daae049d99857ae17dc9aea16cdee7d7c6ba875843582449d8770f23734c91275c72fcad724cd8e5f5f2f125a16ae836a2a70d862d76b342be116c158153e8f13d27cf88896787d8b49a0eaf"}]}}, {{0x9, 0x5, 0x28ee2d8cd88d4523, 0x0, 0x3ff, 0x1, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x80}]}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0x3, 0x4, 0x77}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0xb, 0x4, 0x3}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0x8, 0xf7, 0x6, [@generic={0x9, 0x11, "351ddf32ebd29b"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x1, 0x80, 0x45, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x9}]}}, {{0x9, 0x5, 0xf, 0x8, 0x3ff, 0xf, 0x7, 0x7, [@generic={0x38, 0x5, "3096c12448ba5959a8e58aef548f8aa7effc53c36dd49430733c868a5f91bef803ca2dd5ecf923b411d2b9495fc052df6d9751e817ef"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x7, 0x58, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0xfff9}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xe, 0x9}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x9c, 0x5, 0x5, [@generic={0xad, 0x3, "d22a9329d234d32f0e745346ccec8e2af84781d7918935a072be54abe47c09bde8e438340c083494004ee71d7ad5f8fce663f7d57fc47b2422e2c261c0c6605e8b51b68afbe9fb85a35952bffe8037f585de70ae5f3713d11cf9bacfd2e7289b149096fae43287c6685d81d52632bf4bad478399cd0dc1006bdc5a6c996fa814acb3b3ab0c552ade9338376102e1e4e310736172943f93d85915f2d797af24aeb24c8d89dc4e84bcbc6d66"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x400, 0x7, 0xb9, 0xf7}}]}}, {{0x9, 0x4, 0x1, 0x3, 0x2, 0x34, 0x3d, 0x70, 0x5, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xffffffe9, 0xd, 0x1, 0x7}, [@country_functional={0x6, 0x24, 0x7, 0x6}, @dmm={0x7, 0x24, 0x14, 0x2, 0x4}]}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "0f31e1"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xff, 0xd606, 0x6}, {0x6}, [@country_functional={0x10, 0x24, 0x7, 0x1, 0x4, [0xfff, 0x9c89, 0x91, 0x6, 0x1]}, @network_terminal={0x7, 0x24, 0xa, 0xde, 0xc0, 0x0, 0xe}, @mbim_extended={0x8, 0x24, 0x1c, 0xefe8, 0x1, 0x91}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x1}]}], [{{0x9, 0x5, 0x5, 0x1, 0x200, 0x0, 0x5, 0x35}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x40, 0x1, 0x81, [@generic={0x41, 0x3, "d13eac4bbebcf46f1f021d4eb9a92b060c427541276181280634022d4a90e854a57ff53ec614903e003940bcd4bc6b03d3905fa43d141913adad899d9d2fb8"}]}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x1, 0x1c, 0xb, 0x10, 0x4}, 0x12, &(0x7f0000000100)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x1, 0x4, 0x400}]}, 0x6, [{0x20, &(0x7f0000000740)=@string={0x20, 0x3, "83479e913a328bcb8691671c4b55afe507a5fbf769ac7d0fe9d4de121ea5"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x444}}, {0x71, &(0x7f0000000900)=ANY=[@ANYBLOB]}, {0x50, &(0x7f0000000980)=@string={0x50, 0x3, "897015a3f28c26fbd46d763f51a14ec21cc71ee8b69cbb3407473bde6b01a1a00716bb3eb113dcfe6d10e37b02a6293d2070543895d10ac0070cc11ef27838cb69de1260e33f520d56f5c042e64c"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x457}}]}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x44}}, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000d80)=0x2810b0) 87.51456ms ago: executing program 3 (id=855): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000f40)={0x70, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x40}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x91}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2004c044}, 0x8000) 0s ago: executing program 3 (id=856): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x240c0005, &(0x7f00000000c0)={0xa, 0x4e20, 0x800000, @empty, 0x9}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) syz_clone3(&(0x7f0000000280)={0x20000, &(0x7f0000000380), &(0x7f0000000080), &(0x7f00000000c0), {0x10002f}, &(0x7f0000000100)=""/69, 0x45, &(0x7f0000000180)=""/97, &(0x7f0000000440)}, 0x58) (async) syz_clone3(&(0x7f0000000280)={0x20000, &(0x7f0000000380), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x10002f}, &(0x7f0000000100)=""/69, 0x45, &(0x7f0000000180)=""/97, &(0x7f0000000440)}, 0x58) syz_open_procfs(r7, &(0x7f0000000200)='net/sctp\x00') socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='mm_migrate_pages\x00', r2, 0x0, 0x7}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') (async) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r8 = fsopen(&(0x7f0000000480)='ubifs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(0xffffffffffffffff, 0x0, 0xf9) openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="2d70695ca1ef72"], 0x1f) (async) write$cgroup_subtree(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="2d70695ca1ef72"], 0x1f) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000000180)={r10, 0x3}, &(0x7f00000001c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000000180)={r10, 0x3}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000300)={r10, 0x3ae76458}, &(0x7f00000003c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000300)={r10, 0x3ae76458}, &(0x7f00000003c0)=0x8) read$FUSE(r1, &(0x7f0000001880)={0x2020}, 0x2020) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) kernel console output (not intermixed with test programs): 5-1: Using ep0 maxpacket: 32 [ 230.291561][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.317330][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.331935][ T5924] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 230.341227][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.372177][ T5924] usb 5-1: config 0 descriptor?? [ 230.404393][ T5907] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 230.423834][ T5907] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 230.433454][ T5907] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 230.442317][ T5907] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 230.453539][ T5907] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 230.464393][ T5907] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 230.485975][ T5907] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 230.627321][ T5907] usb 2-1: USB disconnect, device number 37 [ 230.680264][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 230.795162][ T7937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.605'. [ 230.810216][ T7937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.605'. [ 230.811176][ T5924] savu 0003:1E7D:2D5A.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 230.836081][ T7937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.605'. [ 230.847691][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 230.860523][ T24] usb 1-1: config 0 has no interface number 0 [ 230.864869][ T7937] netlink: 'syz.2.605': attribute type 29 has an invalid length. [ 230.899302][ T7937] netlink: 'syz.2.605': attribute type 29 has an invalid length. [ 230.910040][ T7937] netlink: 'syz.2.605': attribute type 29 has an invalid length. [ 230.920756][ T24] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 230.946417][ T7937] netlink: 'syz.2.605': attribute type 29 has an invalid length. [ 230.955953][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.974294][ T24] usb 1-1: Product: syz [ 230.984411][ T24] usb 1-1: Manufacturer: syz [ 230.994579][ T24] usb 1-1: SerialNumber: syz [ 231.016685][ T24] usb 1-1: config 0 descriptor?? [ 231.118749][ T7930] netlink: 'syz.4.602': attribute type 1 has an invalid length. [ 231.137037][ T5924] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 231.196038][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 231.230306][ T24] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 231.243017][ T7943] FAULT_INJECTION: forcing a failure. [ 231.243017][ T7943] name failslab, interval 1, probability 0, space 0, times 0 [ 231.258852][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 231.270190][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 231.278864][ T24] usb 1-1: media controller created [ 231.298435][ T7943] CPU: 1 UID: 0 PID: 7943 Comm: syz.1.606 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 231.298461][ T7943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 231.298472][ T7943] Call Trace: [ 231.298479][ T7943] [ 231.298488][ T7943] dump_stack_lvl+0x189/0x250 [ 231.298518][ T7943] ? __pfx____ratelimit+0x10/0x10 [ 231.298543][ T7943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.298573][ T7943] ? __pfx__printk+0x10/0x10 [ 231.298582][ T7943] ? __lock_acquire+0xab9/0xd20 [ 231.298603][ T7943] should_fail_ex+0x414/0x560 [ 231.298619][ T7943] should_failslab+0xa8/0x100 [ 231.298631][ T7943] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 231.298642][ T7943] ? __alloc_skb+0x112/0x2d0 [ 231.298656][ T7943] __alloc_skb+0x112/0x2d0 [ 231.298666][ T7943] ? __neigh_notify+0x29/0x310 [ 231.298678][ T7943] __neigh_notify+0x15c/0x310 [ 231.298691][ T7943] __neigh_update+0x1e5a/0x25a0 [ 231.298712][ T7943] arp_req_set+0x40a/0x620 [ 231.298723][ T7943] ? __pfx_arp_req_set+0x10/0x10 [ 231.298737][ T7943] arp_ioctl+0x302/0x450 [ 231.298747][ T7943] ? __pfx_arp_ioctl+0x10/0x10 [ 231.298762][ T7943] ? do_vfs_ioctl+0xf37/0x1990 [ 231.298780][ T7943] inet_ioctl+0x36e/0x4c0 [ 231.298791][ T7943] ? __pfx_inet_ioctl+0x10/0x10 [ 231.298823][ T7943] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 231.298843][ T7943] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 231.298863][ T7943] ? inet_compat_ioctl+0x1aa/0x3a0 [ 231.298881][ T7943] sock_do_ioctl+0xd9/0x300 [ 231.298899][ T7943] ? __pfx_sock_do_ioctl+0x10/0x10 [ 231.298914][ T7943] ? __lock_acquire+0xab9/0xd20 [ 231.298933][ T7943] compat_sock_ioctl+0xb8d/0xc80 [ 231.298949][ T7943] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 231.298965][ T7943] ? __fget_files+0x3a0/0x420 [ 231.298975][ T7943] ? __fget_files+0x2a/0x420 [ 231.298986][ T7943] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 231.299002][ T7943] __ia32_compat_sys_ioctl+0x540/0x840 [ 231.299018][ T7943] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 231.299033][ T7943] ? __fget_files+0x3a0/0x420 [ 231.299046][ T7943] ? fput+0xa0/0xd0 [ 231.299058][ T7943] ? ksys_write+0x22a/0x250 [ 231.299071][ T7943] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 231.299087][ T7943] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.299102][ T7943] __do_fast_syscall_32+0xb6/0x2b0 [ 231.299112][ T7943] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.299128][ T7943] do_fast_syscall_32+0x34/0x80 [ 231.299137][ T7943] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.299149][ T7943] RIP: 0023:0xf708e539 [ 231.299158][ T7943] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 231.299167][ T7943] RSP: 002b:00000000f507e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 231.299178][ T7943] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008955 [ 231.299185][ T7943] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.299191][ T7943] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 231.299197][ T7943] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 231.299202][ T7943] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 231.299217][ T7943] [ 231.617566][ T9] usb 3-1: device descriptor read/64, error -71 [ 231.673288][ T5924] usb 4-1: config 0 has no interfaces? [ 231.686671][ T5924] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 231.696364][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.704437][ T5924] usb 4-1: Product: syz [ 231.709127][ T5924] usb 4-1: Manufacturer: syz [ 231.713763][ T5924] usb 4-1: SerialNumber: syz [ 231.721813][ T5924] usb 4-1: config 0 descriptor?? [ 231.977337][ T7946] loop8: detected capacity change from 0 to 8 [ 231.988820][ T7946] Dev loop8: unable to read RDB block 8 [ 231.995928][ T7946] loop8: unable to read partition table [ 232.001913][ T7946] loop8: partition table beyond EOD, truncated [ 232.008968][ T7946] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 232.018458][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 232.049732][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.155838][ T9] usb 3-1: device descriptor read/64, error -71 [ 232.226565][ T5907] usb 5-1: reset high-speed USB device number 25 using dummy_hcd [ 232.285021][ T9] usb usb3-port1: attempt power cycle [ 232.384409][ T24] usb 1-1: USB disconnect, device number 30 [ 232.562719][ T7952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.610'. [ 232.578148][ T7952] netlink: 'syz.1.610': attribute type 10 has an invalid length. [ 232.586664][ T7952] bond0: left allmulticast mode [ 232.591737][ T7952] bond_slave_0: left allmulticast mode [ 232.600669][ T7952] bond_slave_1: left allmulticast mode [ 232.606546][ T7952] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 232.626095][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 232.640826][ T7952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.649587][ T7952] team0: Device bond0 failed to register rx_handler [ 232.657248][ T9] usb 3-1: device descriptor read/8, error -71 [ 232.849179][ T7956] loop8: detected capacity change from 0 to 7 [ 232.857858][ T7956] Dev loop8: unable to read RDB block 7 [ 232.863724][ T7956] loop8: unable to read partition table [ 232.871024][ T7956] loop8: partition table beyond EOD, truncated [ 232.877544][ T7956] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 232.906712][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 232.936657][ T9] usb 3-1: device descriptor read/8, error -71 [ 233.011015][ T30] kauditd_printk_skb: 617 callbacks suppressed [ 233.011032][ T30] audit: type=1326 audit(1750539145.575:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7957 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe558 code=0x7ffc0000 [ 233.066620][ T9] usb usb3-port1: unable to enumerate USB device [ 233.084703][ T30] audit: type=1326 audit(1750539145.575:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7957 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 233.106694][ T30] audit: type=1326 audit(1750539145.575:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7957 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 233.130117][ T30] audit: type=1326 audit(1750539145.575:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7957 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 233.159832][ T30] audit: type=1326 audit(1750539145.575:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7957 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe558 code=0x7ffc0000 [ 233.182246][ T30] audit: type=1326 audit(1750539145.575:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7957 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe558 code=0x7ffc0000 [ 233.204609][ T30] audit: type=1326 audit(1750539145.575:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7957 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe558 code=0x7ffc0000 [ 233.255713][ T30] audit: type=1326 audit(1750539145.575:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7957 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 233.278432][ T30] audit: type=1326 audit(1750539145.575:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7957 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 233.305883][ T5924] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 233.336765][ T30] audit: type=1326 audit(1750539145.605:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7957 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe558 code=0x7ffc0000 [ 233.457208][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.470281][ T5924] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 233.481019][ T5924] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 233.490354][ T5924] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 233.498493][ T5924] usb 1-1: Manufacturer: syz [ 233.506189][ T5924] usb 1-1: config 0 descriptor?? [ 233.590230][ T2152] usb 5-1: USB disconnect, device number 25 [ 233.750861][ T5924] usb 4-1: USB disconnect, device number 29 [ 233.852341][ T7977] loop8: detected capacity change from 0 to 8 [ 233.871049][ T6875] Dev loop8: unable to read RDB block 8 [ 233.878182][ T6875] loop8: unable to read partition table [ 233.884179][ T6875] loop8: partition table beyond EOD, truncated [ 233.900689][ T7977] Dev loop8: unable to read RDB block 8 [ 233.915531][ T7977] loop8: unable to read partition table [ 233.923014][ T7977] loop8: partition table beyond EOD, truncated [ 233.934448][ T7977] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 234.105613][ T7987] loop8: detected capacity change from 0 to 7 [ 234.113292][ T7987] Dev loop8: unable to read RDB block 7 [ 234.121197][ T7987] loop8: unable to read partition table [ 234.127302][ T7987] loop8: partition table beyond EOD, truncated [ 234.134251][ T7987] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 234.475907][ T5907] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 234.637387][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 234.647617][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 234.657616][ T5907] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 234.667740][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.684298][ T5907] usb 3-1: config 0 descriptor?? [ 234.696855][ T5907] hub 3-1:0.0: bad descriptor, ignoring hub [ 234.702939][ T5907] hub 3-1:0.0: probe with driver hub failed with error -5 [ 234.711805][ T5907] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 234.915991][ T2152] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 235.080390][ T2152] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 235.090096][ T2152] usb 5-1: config 1 has an invalid descriptor of length 120, skipping remainder of the config [ 235.101348][ T2152] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 235.126418][ T2152] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 105, changing to 10 [ 235.137825][ T2152] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.164147][ T2152] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 235.173791][ T2152] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 235.182090][ T2152] usb 5-1: Product: syz [ 235.186627][ T2152] usb 5-1: Manufacturer: syz [ 235.200783][ T2152] cdc_wdm 5-1:1.0: skipping garbage [ 235.209996][ T2152] cdc_wdm 5-1:1.0: skipping garbage [ 235.217406][ T2152] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 235.223355][ T2152] cdc_wdm 5-1:1.0: Unknown control protocol [ 235.292829][ T8017] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 235.299369][ T8017] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 235.308031][ T8017] vhci_hcd vhci_hcd.0: Device attached [ 235.321556][ T8018] vhci_hcd: connection closed [ 235.323728][ T49] vhci_hcd: stop threads [ 235.333300][ T49] vhci_hcd: release socket [ 235.338344][ T49] vhci_hcd: disconnect device [ 235.405265][ T8002] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 235.414674][ T8001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.425050][ T8001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.433933][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.629'. [ 235.443514][ T8001] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 235.455268][ T8001] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 235.493944][ T8001] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 235.617800][ T2152] usb 5-1: USB disconnect, device number 26 [ 235.929043][ T8028] FAULT_INJECTION: forcing a failure. [ 235.929043][ T8028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.951667][ T8028] CPU: 1 UID: 0 PID: 8028 Comm: syz.1.638 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 235.951694][ T8028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.951704][ T8028] Call Trace: [ 235.951712][ T8028] [ 235.951720][ T8028] dump_stack_lvl+0x189/0x250 [ 235.951748][ T8028] ? __pfx____ratelimit+0x10/0x10 [ 235.951772][ T8028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.951796][ T8028] ? __pfx__printk+0x10/0x10 [ 235.951826][ T8028] should_fail_ex+0x414/0x560 [ 235.951852][ T8028] _copy_to_user+0x31/0xb0 [ 235.951871][ T8028] simple_read_from_buffer+0xe1/0x170 [ 235.951895][ T8028] proc_fail_nth_read+0x1df/0x250 [ 235.951919][ T8028] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.951941][ T8028] ? rw_verify_area+0x258/0x650 [ 235.951964][ T8028] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.951985][ T8028] vfs_read+0x1fd/0x980 [ 235.952012][ T8028] ? __pfx___mutex_lock+0x10/0x10 [ 235.952030][ T8028] ? __pfx_vfs_read+0x10/0x10 [ 235.952054][ T8028] ? __fget_files+0x2a/0x420 [ 235.952077][ T8028] ? __fget_files+0x3a0/0x420 [ 235.952100][ T8028] ? __fget_files+0x2a/0x420 [ 235.952127][ T8028] ksys_read+0x145/0x250 [ 235.952144][ T8028] ? __pfx_ksys_read+0x10/0x10 [ 235.952166][ T8028] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 235.952189][ T8028] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.952212][ T8028] __do_fast_syscall_32+0xb6/0x2b0 [ 235.952228][ T8028] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.952253][ T8028] do_fast_syscall_32+0x34/0x80 [ 235.952267][ T8028] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 235.952286][ T8028] RIP: 0023:0xf708e539 [ 235.952301][ T8028] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 235.952314][ T8028] RSP: 002b:00000000f507e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 235.952332][ T8028] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f507e620 [ 235.952344][ T8028] RDX: 000000000000000f RSI: 00000000f73f2ff4 RDI: 0000000000000000 [ 235.952354][ T8028] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 235.952362][ T8028] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 235.952371][ T8028] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 235.952395][ T8028] [ 236.243498][ T5924] usb 1-1: USB disconnect, device number 31 [ 236.606167][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 236.648701][ T8048] trusted_key: encrypted_key: insufficient parameters specified [ 236.791846][ T8053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.641'. [ 236.840208][ T9] usb 4-1: config 0 has no interfaces? [ 236.865436][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 236.912790][ T8055] loop6: detected capacity change from 0 to 63 [ 236.923998][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.926147][ T8057] buffer_io_error: 89 callbacks suppressed [ 236.926162][ T8057] Buffer I/O error on dev loop6, logical block 0, async page read [ 236.981092][ T9] usb 4-1: Product: syz [ 236.990818][ T8057] Buffer I/O error on dev loop6, logical block 1, async page read [ 237.003651][ T8057] Buffer I/O error on dev loop6, logical block 2, async page read [ 237.012774][ T9] usb 4-1: Manufacturer: syz [ 237.017077][ T8057] Buffer I/O error on dev loop6, logical block 3, async page read [ 237.017519][ T9] usb 4-1: SerialNumber: syz [ 237.035381][ T8055] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.061571][ T8055] Buffer I/O error on dev loop6, logical block 1, async page read [ 237.094290][ T9] usb 4-1: config 0 descriptor?? [ 237.111701][ T8055] Buffer I/O error on dev loop6, logical block 2, async page read [ 237.131015][ T8055] Buffer I/O error on dev loop6, logical block 3, async page read [ 237.145607][ T8059] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.231071][ T8059] Buffer I/O error on dev loop6, logical block 1, async page read [ 237.326511][ T2152] usb 3-1: USB disconnect, device number 31 [ 237.528591][ T8073] fuse: Unknown parameter 'subj_type' [ 237.826432][ T8079] fuse: Bad value for 'user_id' [ 237.831380][ T8079] fuse: Bad value for 'user_id' [ 238.132393][ T8079] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 238.162823][ T2152] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 238.275971][ T5907] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 238.476378][ T2152] usb 5-1: Using ep0 maxpacket: 32 [ 238.481708][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 238.517083][ T5907] usb 2-1: unable to get BOS descriptor or descriptor too short [ 238.546043][ T5907] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 238.565610][ T2152] usb 5-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 238.579231][ T5907] usb 2-1: config 7 has no interface number 0 [ 238.608381][ T5907] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947 [ 238.632700][ T2152] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.645505][ T5907] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 238.666153][ T2152] usb 5-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 238.684163][ T5907] usb 2-1: config 7 interface 187 has no altsetting 0 [ 238.708808][ T2152] usb 5-1: config 0 interface 0 has no altsetting 0 [ 238.763178][ T5907] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 238.784999][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.811647][ T2152] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 238.834081][ T5907] usb 2-1: Product: syz [ 238.846529][ T2152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.854781][ T5907] usb 2-1: Manufacturer: syz [ 238.900756][ T5907] usb 2-1: SerialNumber: syz [ 238.913674][ T2152] usb 5-1: config 0 descriptor?? [ 238.948019][ T8083] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 238.955580][ T8083] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 239.391100][ T5907] usb 2-1: Limiting number of CPorts to U8_MAX [ 239.402125][ T5907] usb 2-1: Unknown endpoint type found, address 0x07 [ 239.410831][ T5907] usb 2-1: Unused bulk OUT endpoint found: 0x03 [ 239.418510][ T5907] usb 2-1: Not enough endpoints found in device, aborting! [ 239.555581][ T10] usb 4-1: USB disconnect, device number 30 [ 239.659106][ T8101] loop6: detected capacity change from 0 to 63 [ 239.700293][ T8103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.700612][ T8103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.799199][ T2152] zeroplus 0003:0C12:0030.0010: invalid report_size 1021732524 [ 239.799216][ T2152] zeroplus 0003:0C12:0030.0010: item 0 4 1 7 parsing failed [ 239.799671][ T2152] zeroplus 0003:0C12:0030.0010: parse failed [ 239.799707][ T2152] zeroplus 0003:0C12:0030.0010: probe with driver zeroplus failed with error -22 [ 239.906019][ T8106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.906407][ T8106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.170899][ T8096] netlink: 52 bytes leftover after parsing attributes in process `syz.2.657'. [ 240.395560][ T8124] loop6: detected capacity change from 0 to 63 [ 240.653390][ T8132] netlink: 14212 bytes leftover after parsing attributes in process `syz.0.668'. [ 241.074029][ T5907] usb 2-1: USB disconnect, device number 38 [ 241.138988][ T923] usb 5-1: USB disconnect, device number 27 [ 241.485827][ T5907] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 241.645836][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 241.668162][ T5907] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 241.676600][ T5907] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 241.700560][ T5907] usb 2-1: config 179 has no interface number 0 [ 241.702971][ T923] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 241.707768][ T5907] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 241.724762][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.825661][ T8159] netlink: 14 bytes leftover after parsing attributes in process `syz.2.676'. [ 241.876070][ T923] usb 5-1: Using ep0 maxpacket: 8 [ 241.886772][ T923] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 241.905946][ T923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.919017][ T8156] netlink: 52 bytes leftover after parsing attributes in process `syz.3.675'. [ 241.924167][ T923] usb 5-1: Product: syz [ 241.937246][ T923] usb 5-1: Manufacturer: syz [ 241.962579][ T923] usb 5-1: SerialNumber: syz [ 241.989076][ T923] usb 5-1: config 0 descriptor?? [ 242.073597][ T9] usb 2-1: USB disconnect, device number 39 [ 242.221399][ T923] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 242.428997][ T8173] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 242.519026][ T8174] sctp: [Deprecated]: syz.4.673 (pid 8174) Use of struct sctp_assoc_value in delayed_ack socket option. [ 242.519026][ T8174] Use struct sctp_sack_info instead [ 243.606137][ T5907] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 243.745824][ T5907] usb 4-1: device descriptor read/64, error -71 [ 243.936473][ T24] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 243.985864][ T5907] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 244.007450][ T923] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 244.088123][ T24] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 244.096351][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.106541][ T2152] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 244.114747][ T24] usb 3-1: config 0 has no interface number 0 [ 244.121008][ T24] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 244.134529][ T5907] usb 4-1: device descriptor read/64, error -71 [ 244.143787][ T24] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 244.153448][ T24] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 244.161570][ T24] usb 3-1: Product: syz [ 244.167416][ T24] usb 3-1: SerialNumber: syz [ 244.173957][ T24] usb 3-1: config 0 descriptor?? [ 244.183100][ T24] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 244.246147][ T5907] usb usb4-port1: attempt power cycle [ 244.263518][ T923] usb 5-1: USB disconnect, device number 28 [ 244.289660][ T2152] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 244.301044][ T2152] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 244.315112][ T2152] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 244.324997][ T2152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 244.334858][ T2152] usb 2-1: SerialNumber: syz [ 244.346090][ T2152] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 244.355393][ T2152] usb-storage 2-1:1.0: USB Mass Storage device detected [ 244.367051][ T2152] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 244.377509][ T2152] scsi host1: usb-storage 2-1:1.0 [ 244.392781][ T8202] CUSE: DEVNAME unspecified [ 244.474695][ T8194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.494792][ T8194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.550680][ T2152] usb 2-1: USB disconnect, device number 40 [ 244.576728][ T24] usb 3-1: USB disconnect, device number 32 [ 244.598034][ T5907] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 244.656811][ T5907] usb 4-1: device descriptor read/8, error -71 [ 244.746003][ T923] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 244.906558][ T5907] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 244.907853][ T923] usb 5-1: config 0 has an invalid interface number: 189 but max is 0 [ 244.922532][ T923] usb 5-1: config 0 has no interface number 0 [ 244.929249][ T5907] usb 4-1: device descriptor read/8, error -71 [ 244.930006][ T923] usb 5-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 244.946602][ T923] usb 5-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 244.958355][ T923] usb 5-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 244.969933][ T923] usb 5-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 244.979927][ T923] usb 5-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 244.986601][ T5890] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 244.996256][ T923] usb 5-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 245.010172][ T923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.018548][ T923] usb 5-1: Product: syz [ 245.022923][ T923] usb 5-1: Manufacturer: syz [ 245.027699][ T923] usb 5-1: SerialNumber: syz [ 245.035599][ T923] usb 5-1: config 0 descriptor?? [ 245.041393][ T8202] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 245.050317][ T923] ums-alauda 5-1:0.189: USB Mass Storage device detected [ 245.056273][ T5907] usb usb4-port1: unable to enumerate USB device [ 245.077395][ T923] scsi host1: usb-storage 5-1:0.189 [ 245.175838][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 245.205485][ T8213] loop8: detected capacity change from 0 to 8 [ 245.207324][ T5890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.214832][ T8213] Dev loop8: unable to read RDB block 8 [ 245.227911][ T8213] loop8: unable to read partition table [ 245.229501][ T5890] usb 1-1: config 0 has no interfaces? [ 245.235037][ T8213] loop8: partition table beyond EOD, truncated [ 245.245894][ T8213] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 245.265882][ T5890] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 245.274972][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.327566][ T5890] usb 1-1: config 0 descriptor?? [ 245.482226][ T923] usb 5-1: USB disconnect, device number 29 [ 245.588601][ T8206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.625153][ T8206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.883582][ T8229] FAULT_INJECTION: forcing a failure. [ 245.883582][ T8229] name failslab, interval 1, probability 0, space 0, times 0 [ 245.898422][ T8229] CPU: 0 UID: 0 PID: 8229 Comm: syz.4.697 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 245.898447][ T8229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 245.898470][ T8229] Call Trace: [ 245.898481][ T8229] [ 245.898489][ T8229] dump_stack_lvl+0x189/0x250 [ 245.898522][ T8229] ? __pfx____ratelimit+0x10/0x10 [ 245.898546][ T8229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.898570][ T8229] ? __pfx__printk+0x10/0x10 [ 245.898594][ T8229] ? __pfx___might_resched+0x10/0x10 [ 245.898617][ T8229] ? fs_reclaim_acquire+0x7d/0x100 [ 245.898641][ T8229] should_fail_ex+0x414/0x560 [ 245.898668][ T8229] should_failslab+0xa8/0x100 [ 245.898688][ T8229] __kmalloc_cache_noprof+0x70/0x3d0 [ 245.898705][ T8229] ? fuse_lookup_name+0x1b5/0x860 [ 245.898728][ T8229] fuse_lookup_name+0x1b5/0x860 [ 245.898751][ T8229] ? check_path+0x21/0x40 [ 245.898772][ T8229] ? __pfx_fuse_lookup_name+0x10/0x10 [ 245.898792][ T8229] ? fuse_lock_inode+0xd3/0x120 [ 245.898808][ T8229] ? validate_chain+0x897/0x2140 [ 245.898853][ T8229] fuse_lookup+0x1e9/0x640 [ 245.898879][ T8229] ? __pfx_fuse_lookup+0x10/0x10 [ 245.898914][ T8229] ? _raw_spin_unlock+0x28/0x50 [ 245.898935][ T8229] ? d_alloc+0x144/0x190 [ 245.898958][ T8229] lookup_one_qstr_excl_raw+0x118/0x280 [ 245.898983][ T8229] do_renameat2+0x401/0xc50 [ 245.899021][ T8229] ? __pfx_do_renameat2+0x10/0x10 [ 245.899055][ T8229] ? getname_flags+0x1e5/0x540 [ 245.899079][ T8229] __ia32_sys_rename+0x81/0x90 [ 245.899098][ T8229] __do_fast_syscall_32+0xb6/0x2b0 [ 245.899115][ T8229] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.899151][ T8229] do_fast_syscall_32+0x34/0x80 [ 245.899168][ T8229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.899188][ T8229] RIP: 0023:0xf70fe539 [ 245.899203][ T8229] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 245.899217][ T8229] RSP: 002b:00000000f50ac55c EFLAGS: 00000206 ORIG_RAX: 0000000000000026 [ 245.899234][ T8229] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 00000000800000c0 [ 245.899246][ T8229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.899256][ T8229] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.899265][ T8229] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 245.899275][ T8229] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.899303][ T8229] [ 246.147302][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.551909][ T8232] FAULT_INJECTION: forcing a failure. [ 246.551909][ T8232] name failslab, interval 1, probability 0, space 0, times 0 [ 246.567705][ T8232] CPU: 0 UID: 0 PID: 8232 Comm: syz.2.698 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 246.567731][ T8232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 246.567741][ T8232] Call Trace: [ 246.567748][ T8232] [ 246.567756][ T8232] dump_stack_lvl+0x189/0x250 [ 246.567784][ T8232] ? __pfx____ratelimit+0x10/0x10 [ 246.567807][ T8232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.567830][ T8232] ? __pfx__printk+0x10/0x10 [ 246.567853][ T8232] ? __pfx___might_resched+0x10/0x10 [ 246.567875][ T8232] ? fs_reclaim_acquire+0x7d/0x100 [ 246.567897][ T8232] should_fail_ex+0x414/0x560 [ 246.567921][ T8232] should_failslab+0xa8/0x100 [ 246.567941][ T8232] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 246.567957][ T8232] ? __alloc_skb+0x112/0x2d0 [ 246.567978][ T8232] __alloc_skb+0x112/0x2d0 [ 246.567998][ T8232] netlink_ack+0x146/0xa50 [ 246.568015][ T8232] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 246.568029][ T8232] ? ref_tracker_free+0x63a/0x7d0 [ 246.568049][ T8232] ? __copy_skb_header+0xa7/0x550 [ 246.568070][ T8232] ? __pfx_ref_tracker_free+0x10/0x10 [ 246.568099][ T8232] netlink_rcv_skb+0x28c/0x470 [ 246.568119][ T8232] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 246.568145][ T8232] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 246.568175][ T8232] ? netlink_deliver_tap+0x2e/0x1b0 [ 246.568191][ T8232] ? netlink_deliver_tap+0x2e/0x1b0 [ 246.568212][ T8232] netlink_unicast+0x758/0x8d0 [ 246.568234][ T8232] netlink_sendmsg+0x805/0xb30 [ 246.568260][ T8232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.568279][ T8232] ? __import_iovec+0x5d4/0x7f0 [ 246.568293][ T8232] ? aa_sock_msg_perm+0x94/0x160 [ 246.568313][ T8232] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 246.568332][ T8232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.568351][ T8232] __sock_sendmsg+0x219/0x270 [ 246.568376][ T8232] ____sys_sendmsg+0x505/0x830 [ 246.568400][ T8232] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.568435][ T8232] ___sys_sendmsg+0x21f/0x2a0 [ 246.568457][ T8232] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.568508][ T8232] ? __fget_files+0x2a/0x420 [ 246.568525][ T8232] ? __fget_files+0x3a0/0x420 [ 246.568552][ T8232] __sys_sendmsg+0x164/0x220 [ 246.568571][ T8232] ? __pfx___sys_sendmsg+0x10/0x10 [ 246.568604][ T8232] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 246.568630][ T8232] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.568656][ T8232] __do_fast_syscall_32+0xb6/0x2b0 [ 246.568672][ T8232] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.568696][ T8232] do_fast_syscall_32+0x34/0x80 [ 246.568712][ T8232] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.568729][ T8232] RIP: 0023:0xf704e539 [ 246.568744][ T8232] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 246.568756][ T8232] RSP: 002b:00000000f503e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 246.568774][ T8232] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001200 [ 246.568785][ T8232] RDX: 0000000004000810 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.568796][ T8232] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.568806][ T8232] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 246.568816][ T8232] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.568838][ T8232] [ 246.815920][ T5890] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 246.820751][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.909070][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.000353][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 247.012142][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.042040][ T5890] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 247.070725][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.104387][ T5890] usb 4-1: config 0 descriptor?? [ 247.331677][ T8242] bridge_slave_0: left allmulticast mode [ 247.337570][ T8242] bridge_slave_0: left promiscuous mode [ 247.343575][ T8242] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.579097][ T8242] bridge_slave_1: left allmulticast mode [ 247.595501][ T8242] bridge_slave_1: left promiscuous mode [ 247.603396][ T8242] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.653799][ T8242] bond0: (slave bond_slave_0): Releasing backup interface [ 247.689069][ T5890] mcp2221 0003:04D8:00DD.0011: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 247.752598][ T10] usb 1-1: USB disconnect, device number 32 [ 247.852404][ T8242] bond0: (slave bond_slave_1): Releasing backup interface [ 247.871354][ T8249] loop8: detected capacity change from 0 to 8 [ 247.888190][ T8249] Dev loop8: unable to read RDB block 8 [ 247.916781][ T8242] team0: Port device team_slave_0 removed [ 247.986218][ T8249] loop8: unable to read partition table [ 247.996042][ T8249] loop8: partition table beyond EOD, truncated [ 248.041471][ T8249] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 248.072648][ T8242] team0: Port device team_slave_1 removed [ 248.355481][ T5890] usb 4-1: USB disconnect, device number 35 [ 248.673096][ T9] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 248.757796][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 248.839788][ T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 248.848414][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.859304][ T9] usb 5-1: config 0 has no interface number 0 [ 248.870153][ T9] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.974659][ T10] usb 1-1: config 0 has no interfaces? [ 248.989531][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 249.001085][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 249.012445][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.021467][ T9] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 249.050011][ T10] usb 1-1: Product: syz [ 249.080534][ T9] usb 5-1: Product: syz [ 249.084786][ T10] usb 1-1: Manufacturer: syz [ 249.091750][ T9] usb 5-1: SerialNumber: syz [ 249.096474][ T10] usb 1-1: SerialNumber: syz [ 249.105090][ T9] usb 5-1: config 0 descriptor?? [ 249.112718][ T10] usb 1-1: config 0 descriptor?? [ 249.132845][ T9] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 249.360338][ T8254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.369620][ T8254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.451097][ T9] usb 5-1: USB disconnect, device number 30 [ 249.583588][ T8265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.700918][ T8265] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 249.708494][ T8265] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 249.731696][ T8265] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 249.740483][ T8265] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 249.760241][ T8265] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 249.767051][ T8265] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 249.782634][ T8265] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 249.789682][ T8265] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 249.800783][ T8265] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 249.806878][ T8265] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 251.570380][ T8279] loop2: detected capacity change from 0 to 7 [ 251.607254][ T8279] loop2: [ 251.610275][ T8279] loop2: partition table partially beyond EOD, truncated [ 251.683695][ T9] usb 1-1: USB disconnect, device number 33 [ 251.767002][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 251.773098][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 251.782698][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 251.847302][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 251.853525][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 251.853927][ T8285] geneve3: entered promiscuous mode [ 251.877144][ T8285] geneve3: entered allmulticast mode [ 251.895337][ T8277] FAULT_INJECTION: forcing a failure. [ 251.895337][ T8277] name failslab, interval 1, probability 0, space 0, times 0 [ 251.908487][ T8277] CPU: 0 UID: 0 PID: 8277 Comm: syz.3.712 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 251.908510][ T8277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 251.908521][ T8277] Call Trace: [ 251.908528][ T8277] [ 251.908535][ T8277] dump_stack_lvl+0x189/0x250 [ 251.908562][ T8277] ? __pfx____ratelimit+0x10/0x10 [ 251.908586][ T8277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.908608][ T8277] ? __pfx__printk+0x10/0x10 [ 251.908629][ T8277] ? __pfx___might_resched+0x10/0x10 [ 251.908651][ T8277] ? fs_reclaim_acquire+0x7d/0x100 [ 251.908675][ T8277] should_fail_ex+0x414/0x560 [ 251.908700][ T8277] should_failslab+0xa8/0x100 [ 251.908719][ T8277] __kmalloc_cache_noprof+0x70/0x3d0 [ 251.908735][ T8277] ? hash_net_create+0x2fe/0xfe0 [ 251.908758][ T8277] hash_net_create+0x2fe/0xfe0 [ 251.908784][ T8277] ? __nla_parse+0x40/0x60 [ 251.908805][ T8277] ? __pfx_hash_net_create+0x10/0x10 [ 251.908824][ T8277] ip_set_create+0xa94/0x1940 [ 251.908848][ T8277] ? ip_set_create+0x4a2/0x1940 [ 251.908882][ T8277] ? __pfx_ip_set_create+0x10/0x10 [ 251.908940][ T8277] nfnetlink_rcv_msg+0xb4d/0x1130 [ 251.908964][ T8277] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 251.909004][ T8277] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 251.909058][ T8277] ? __lock_acquire+0xab9/0xd20 [ 251.909094][ T8277] netlink_rcv_skb+0x205/0x470 [ 251.909115][ T8277] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 251.909139][ T8277] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 251.909167][ T8277] ? bpf_lsm_capable+0x9/0x20 [ 251.909182][ T8277] ? security_capable+0x7e/0x2e0 [ 251.909206][ T8277] nfnetlink_rcv+0x26a/0x2520 [ 251.909230][ T8277] ? unwind_get_return_address+0x4d/0x90 [ 251.909252][ T8277] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 251.909270][ T8277] ? arch_stack_walk+0xfc/0x150 [ 251.909304][ T8277] ? stack_trace_save+0x9c/0xe0 [ 251.909329][ T8277] ? stack_depot_save_flags+0x40/0x900 [ 251.909353][ T8277] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 251.909376][ T8277] ? kasan_save_track+0x4f/0x80 [ 251.909396][ T8277] ? kasan_save_track+0x3e/0x80 [ 251.909423][ T8277] ? __lock_acquire+0xab9/0xd20 [ 251.909467][ T8277] ? __lock_acquire+0xab9/0xd20 [ 251.909497][ T8277] ? netlink_deliver_tap+0x2e/0x1b0 [ 251.909522][ T8277] ? netlink_deliver_tap+0x2e/0x1b0 [ 251.909539][ T8277] ? netlink_deliver_tap+0x2e/0x1b0 [ 251.909563][ T8277] netlink_unicast+0x758/0x8d0 [ 251.909591][ T8277] netlink_sendmsg+0x805/0xb30 [ 251.909619][ T8277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.909640][ T8277] ? __import_iovec+0x5d4/0x7f0 [ 251.909654][ T8277] ? aa_sock_msg_perm+0x94/0x160 [ 251.909676][ T8277] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 251.909695][ T8277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.909715][ T8277] __sock_sendmsg+0x219/0x270 [ 251.909742][ T8277] ____sys_sendmsg+0x505/0x830 [ 251.909767][ T8277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.909803][ T8277] ___sys_sendmsg+0x21f/0x2a0 [ 251.909825][ T8277] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.909881][ T8277] ? __fget_files+0x2a/0x420 [ 251.909897][ T8277] ? __fget_files+0x3a0/0x420 [ 251.909925][ T8277] __sys_sendmsg+0x164/0x220 [ 251.909947][ T8277] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.909979][ T8277] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 251.910004][ T8277] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.910028][ T8277] __do_fast_syscall_32+0xb6/0x2b0 [ 251.910045][ T8277] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.910070][ T8277] do_fast_syscall_32+0x34/0x80 [ 251.910086][ T8277] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 251.910105][ T8277] RIP: 0023:0xf7fd6539 [ 251.910121][ T8277] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 251.910135][ T8277] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 251.910153][ T8277] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 251.910166][ T8277] RDX: 00000000000000d4 RSI: 0000000000000000 RDI: 0000000000000000 [ 251.910176][ T8277] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.910185][ T8277] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 251.910195][ T8277] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 251.910221][ T8277] [ 252.475907][ T8285] warning: `syz.2.716' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 252.492478][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 252.555980][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 252.656803][ T8239] Set syz1 is full, maxelem 65536 reached [ 252.726141][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 252.736112][ T9] usb 1-1: config 9 has an invalid interface number: 255 but max is 1 [ 252.744326][ T9] usb 1-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 252.756276][ T9] usb 1-1: config 9 has no interface number 0 [ 252.762449][ T9] usb 1-1: config 9 interface 255 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 252.779576][ T9] usb 1-1: config 9 interface 255 altsetting 6 has an invalid endpoint descriptor of length 2, skipping [ 252.791116][ T9] usb 1-1: config 9 interface 255 altsetting 6 bulk endpoint 0xC has invalid maxpacket 16 [ 252.805983][ T9] usb 1-1: config 9 interface 255 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 252.826362][ T9] usb 1-1: config 9 interface 255 altsetting 6 has an endpoint descriptor with address 0x23, changing to 0x3 [ 252.838154][ T9] usb 1-1: config 9 interface 255 altsetting 6 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 252.855850][ T9] usb 1-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 252.876259][ T9] usb 1-1: config 9 interface 255 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 252.916483][ T9] usb 1-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 252.935892][ T9] usb 1-1: config 9 interface 255 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 252.957019][ T9] usb 1-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 252.968248][ T9] usb 1-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 252.995937][ T2152] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 252.995972][ T9] usb 1-1: config 9 interface 255 altsetting 6 bulk endpoint 0x6 has invalid maxpacket 1024 [ 253.025800][ T9] usb 1-1: config 9 interface 255 altsetting 6 has 16 endpoint descriptors, different from the interface descriptor's value: 14 [ 253.039448][ T9] usb 1-1: config 9 interface 1 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 253.056834][ T9] usb 1-1: config 9 interface 1 altsetting 3 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 253.085815][ T9] usb 1-1: config 9 interface 255 has no altsetting 0 [ 253.092653][ T9] usb 1-1: config 9 interface 1 has no altsetting 0 [ 253.105869][ T5890] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 253.122007][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=49.59 [ 253.132195][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.140749][ T9] usb 1-1: Product: ф [ 253.144918][ T9] usb 1-1: Manufacturer: я [ 253.158347][ T2152] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 253.169566][ T2152] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.181808][ T2152] usb 3-1: config 0 has no interface number 0 [ 253.188190][ T2152] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.205498][ T2152] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 253.220204][ T2152] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 253.265227][ T2152] usb 3-1: Product: syz [ 253.270908][ T5890] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.282133][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 253.293809][ T2152] usb 3-1: SerialNumber: syz [ 253.300821][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 253.311633][ T2152] usb 3-1: config 0 descriptor?? [ 253.318184][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 253.335563][ T2152] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 253.348990][ T5890] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 253.370522][ T5890] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 253.379827][ T5890] usb 4-1: Manufacturer: syz [ 253.392822][ T5890] usb 4-1: config 0 descriptor?? [ 253.413348][ T9] usb 1-1: USB disconnect, device number 34 [ 253.580384][ T8298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.591090][ T8298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.650231][ T9] usb 3-1: USB disconnect, device number 33 [ 253.666680][ T5890] rc_core: IR keymap rc-hauppauge not found [ 253.683285][ T5890] Registered IR keymap rc-empty [ 253.696562][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 253.725187][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 253.747043][ T5890] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 253.771187][ T5890] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input29 [ 253.775343][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.725'. [ 253.804424][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 253.826980][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 253.846715][ T5150] Bluetooth: hci2: command 0x0406 tx timeout [ 253.852896][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 253.859246][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 253.885900][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 253.892263][ T8314] netlink: 40 bytes leftover after parsing attributes in process `syz.4.727'. [ 253.926008][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 253.932109][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 253.956803][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 253.986215][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 254.005969][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 254.036024][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 254.066395][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 254.085896][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 254.114787][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 254.138937][ T5890] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 254.145901][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 254.155043][ T5890] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 254.195846][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 254.348930][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 254.358195][ T10] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 254.386421][ T9] usb 5-1: device descriptor read/64, error -71 [ 254.415866][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 254.432868][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 254.450641][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 254.468582][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 254.478671][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 254.496446][ T10] usb 2-1: Product: syz [ 254.502085][ T10] usb 2-1: Manufacturer: syz [ 254.522004][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 254.529287][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 254.539893][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 254.549216][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 254.655854][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 254.687542][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.730'. [ 254.706141][ T8326] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 254.717261][ T8326] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 254.785875][ T9] usb 5-1: device descriptor read/64, error -71 [ 254.896549][ T9] usb usb5-port1: attempt power cycle [ 255.246030][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 255.267488][ T9] usb 5-1: device descriptor read/8, error -71 [ 255.315845][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 255.485867][ T10] usb 1-1: device descriptor read/64, error -71 [ 255.506012][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 255.526766][ T9] usb 5-1: device descriptor read/8, error -71 [ 255.653101][ T9] usb usb5-port1: unable to enumerate USB device [ 255.726199][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 255.769757][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.776589][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.916570][ T8338] FAULT_INJECTION: forcing a failure. [ 255.916570][ T8338] name failslab, interval 1, probability 0, space 0, times 0 [ 255.931431][ T8338] CPU: 0 UID: 0 PID: 8338 Comm: syz.2.733 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 255.931458][ T8338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.931468][ T8338] Call Trace: [ 255.931476][ T8338] [ 255.931484][ T8338] dump_stack_lvl+0x189/0x250 [ 255.931517][ T8338] ? __pfx____ratelimit+0x10/0x10 [ 255.931542][ T8338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.931565][ T8338] ? __pfx__printk+0x10/0x10 [ 255.931590][ T8338] ? ref_tracker_alloc+0x318/0x460 [ 255.931615][ T8338] should_fail_ex+0x414/0x560 [ 255.931640][ T8338] should_failslab+0xa8/0x100 [ 255.931659][ T8338] kmem_cache_alloc_noprof+0x73/0x3c0 [ 255.931683][ T8338] ? skb_clone+0x212/0x3a0 [ 255.931711][ T8338] skb_clone+0x212/0x3a0 [ 255.931735][ T8338] __netlink_deliver_tap+0x404/0x850 [ 255.931767][ T8338] ? netlink_deliver_tap+0x2e/0x1b0 [ 255.931786][ T8338] netlink_deliver_tap+0x19c/0x1b0 [ 255.931806][ T8338] netlink_unicast+0x72f/0x8d0 [ 255.931835][ T8338] netlink_sendmsg+0x805/0xb30 [ 255.931864][ T8338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.931886][ T8338] ? __import_iovec+0x5d4/0x7f0 [ 255.931899][ T8338] ? aa_sock_msg_perm+0x94/0x160 [ 255.931922][ T8338] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 255.931942][ T8338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.931963][ T8338] __sock_sendmsg+0x219/0x270 [ 255.931991][ T8338] ____sys_sendmsg+0x505/0x830 [ 255.932017][ T8338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.932053][ T8338] ___sys_sendmsg+0x21f/0x2a0 [ 255.932075][ T8338] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.932128][ T8338] ? __fget_files+0x2a/0x420 [ 255.932152][ T8338] ? __fget_files+0x3a0/0x420 [ 255.932181][ T8338] __sys_sendmsg+0x164/0x220 [ 255.932204][ T8338] ? __pfx___sys_sendmsg+0x10/0x10 [ 255.932239][ T8338] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 255.932273][ T8338] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.932298][ T8338] __do_fast_syscall_32+0xb6/0x2b0 [ 255.932314][ T8338] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.932340][ T8338] do_fast_syscall_32+0x34/0x80 [ 255.932356][ T8338] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 255.932375][ T8338] RIP: 0023:0xf704e539 [ 255.932390][ T8338] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 255.932404][ T8338] RSP: 002b:00000000f503e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 255.932423][ T8338] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000380 [ 255.932434][ T8338] RDX: 0000000000042000 RSI: 0000000000000000 RDI: 0000000000000000 [ 255.932444][ T8338] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 255.932454][ T8338] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 255.932463][ T8338] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 255.932487][ T8338] [ 256.222875][ T10] usb 1-1: device descriptor read/64, error -71 [ 256.231947][ T5907] usb 4-1: USB disconnect, device number 36 [ 256.336474][ T10] usb usb1-port1: attempt power cycle [ 256.675899][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 256.716877][ T10] usb 1-1: device descriptor read/8, error -71 [ 256.955927][ T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 257.036873][ T10] usb 1-1: device descriptor read/8, error -71 [ 257.056929][ T923] usb 2-1: USB disconnect, device number 41 [ 257.155126][ T10] usb usb1-port1: unable to enumerate USB device [ 257.305853][ T5907] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 257.458067][ T5907] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 257.472146][ T5907] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.492095][ T5907] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 257.506059][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 257.514272][ T5907] usb 5-1: Product: syz [ 257.522717][ T5907] usb 5-1: Manufacturer: syz [ 257.525862][ T923] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 257.529339][ T5907] usb 5-1: SerialNumber: syz [ 257.546456][ T5907] usb 5-1: config 0 descriptor?? [ 257.577057][ T5907] usb 5-1: selecting invalid altsetting 0 [ 257.697011][ T923] usb 2-1: Using ep0 maxpacket: 32 [ 257.709073][ T923] usb 2-1: config 9 has an invalid interface number: 255 but max is 1 [ 257.721815][ T923] usb 2-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 257.748020][ T923] usb 2-1: config 9 has no interface number 0 [ 257.784658][ T2152] usb 5-1: USB disconnect, device number 35 [ 257.801427][ T923] usb 2-1: config 9 interface 255 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 257.830768][ T923] usb 2-1: config 9 interface 255 altsetting 6 has an invalid endpoint descriptor of length 2, skipping [ 257.852045][ T923] usb 2-1: config 9 interface 255 altsetting 6 bulk endpoint 0xC has invalid maxpacket 16 [ 257.863055][ T923] usb 2-1: config 9 interface 255 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 257.884777][ T923] usb 2-1: config 9 interface 255 altsetting 6 has an endpoint descriptor with address 0x23, changing to 0x3 [ 257.924374][ T923] usb 2-1: config 9 interface 255 altsetting 6 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 257.938852][ T923] usb 2-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 257.953892][ T923] usb 2-1: config 9 interface 255 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 257.965984][ T923] usb 2-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 257.977831][ T923] usb 2-1: config 9 interface 255 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 257.985888][ T5907] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 258.029490][ T923] usb 2-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 258.061492][ T923] usb 2-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 258.092121][ T923] usb 2-1: config 9 interface 255 altsetting 6 bulk endpoint 0x6 has invalid maxpacket 1024 [ 258.112267][ T923] usb 2-1: config 9 interface 255 altsetting 6 has 16 endpoint descriptors, different from the interface descriptor's value: 14 [ 258.132460][ T923] usb 2-1: config 9 interface 1 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 258.151270][ T923] usb 2-1: config 9 interface 1 altsetting 3 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 258.162383][ T923] usb 2-1: config 9 interface 255 has no altsetting 0 [ 258.176281][ T923] usb 2-1: config 9 interface 1 has no altsetting 0 [ 258.176768][ T5907] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 258.191832][ T5907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.196156][ T923] usb 2-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=49.59 [ 258.203223][ T5907] usb 4-1: config 0 has no interface number 0 [ 258.211796][ T923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.218634][ T5907] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 258.255020][ T5907] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 258.274262][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 258.275810][ T923] usb 2-1: Product: ф [ 258.283489][ T5907] usb 4-1: Product: syz [ 258.291067][ T5907] usb 4-1: SerialNumber: syz [ 258.299922][ T5907] usb 4-1: config 0 descriptor?? [ 258.315209][ T923] usb 2-1: Manufacturer: я [ 258.321893][ T5907] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 258.354815][ T8374] geneve3: entered promiscuous mode [ 258.369452][ T8374] geneve3: entered allmulticast mode [ 258.538419][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.746'. [ 258.625187][ T923] usb 2-1: USB disconnect, device number 42 [ 258.717155][ T8384] netlink: 14212 bytes leftover after parsing attributes in process `syz.4.749'. [ 258.772595][ T10] usb 4-1: USB disconnect, device number 37 [ 258.913676][ T8392] loop8: detected capacity change from 0 to 7 [ 258.921652][ T8392] Dev loop8: unable to read RDB block 7 [ 258.927703][ T8392] loop8: unable to read partition table [ 258.933750][ T8392] loop8: partition table beyond EOD, truncated [ 258.943451][ T8392] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 259.065898][ T5907] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 259.231999][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 259.243752][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 259.256264][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 259.269544][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 259.299720][ T5907] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.310290][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.325915][ T5907] usb 3-1: config 0 descriptor?? [ 259.331630][ T8388] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 259.783379][ T5907] usbhid 3-1:0.0: can't add hid device: -71 [ 259.790223][ T5907] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 259.808871][ T5907] usb 3-1: USB disconnect, device number 34 [ 260.020057][ T923] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 260.188338][ T923] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 260.205785][ T923] usb 4-1: config 0 has no interface number 0 [ 260.211977][ T923] usb 4-1: config 0 interface 255 has no altsetting 0 [ 260.226304][ T923] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 260.235432][ T923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.271583][ T923] usb 4-1: config 0 descriptor?? [ 260.289811][ T923] cp210x 4-1:0.255: cp210x converter detected [ 260.503835][ T923] cp210x 4-1:0.255: failed to get vendor val 0x370b size 1: -32 [ 260.538368][ T923] cp210x 4-1:0.255: querying part number failed [ 260.557389][ T8436] netlink: 14212 bytes leftover after parsing attributes in process `syz.0.764'. [ 260.585331][ T923] usb 4-1: cp210x converter now attached to ttyUSB0 [ 260.633786][ T923] usb 4-1: USB disconnect, device number 38 [ 260.692188][ T923] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 260.712551][ T8438] loop8: detected capacity change from 0 to 7 [ 260.748854][ T923] cp210x 4-1:0.255: device disconnected [ 260.785323][ T8440] Dev loop8: unable to read RDB block 7 [ 260.794750][ T8440] loop8: unable to read partition table [ 260.817009][ T8440] loop8: partition table beyond EOD, truncated [ 260.853639][ T8438] Dev loop8: unable to read RDB block 7 [ 260.868217][ T8438] loop8: unable to read partition table [ 260.896532][ T8438] loop8: partition table beyond EOD, truncated [ 260.913927][ T8438] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 261.154725][ T8450] FAULT_INJECTION: forcing a failure. [ 261.154725][ T8450] name failslab, interval 1, probability 0, space 0, times 0 [ 261.204304][ T8450] CPU: 0 UID: 0 PID: 8450 Comm: syz.2.769 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 261.204335][ T8450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.204347][ T8450] Call Trace: [ 261.204355][ T8450] [ 261.204363][ T8450] dump_stack_lvl+0x189/0x250 [ 261.204392][ T8450] ? __pfx____ratelimit+0x10/0x10 [ 261.204415][ T8450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.204439][ T8450] ? __pfx__printk+0x10/0x10 [ 261.204463][ T8450] ? __pfx___might_resched+0x10/0x10 [ 261.204485][ T8450] ? fs_reclaim_acquire+0x7d/0x100 [ 261.204509][ T8450] should_fail_ex+0x414/0x560 [ 261.204535][ T8450] should_failslab+0xa8/0x100 [ 261.204555][ T8450] __kmalloc_cache_noprof+0x70/0x3d0 [ 261.204572][ T8450] ? rtnl_newlink+0xed/0x1c70 [ 261.204590][ T8450] ? kasan_save_free_info+0x46/0x50 [ 261.204614][ T8450] rtnl_newlink+0xed/0x1c70 [ 261.204630][ T8450] ? netlink_sendmsg+0x805/0xb30 [ 261.204654][ T8450] ? __sock_sendmsg+0x219/0x270 [ 261.204675][ T8450] ? ____sys_sendmsg+0x505/0x830 [ 261.204693][ T8450] ? ___sys_sendmsg+0x21f/0x2a0 [ 261.204710][ T8450] ? __sys_sendmsg+0x164/0x220 [ 261.204728][ T8450] ? __do_fast_syscall_32+0xb6/0x2b0 [ 261.204744][ T8450] ? do_fast_syscall_32+0x34/0x80 [ 261.204759][ T8450] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.204786][ T8450] ? __pfx_rtnl_newlink+0x10/0x10 [ 261.204827][ T8450] ? kasan_quarantine_put+0xdd/0x220 [ 261.204850][ T8450] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.204877][ T8450] ? nlmon_xmit+0xb0/0x100 [ 261.204898][ T8450] ? kmem_cache_free+0x18f/0x400 [ 261.204921][ T8450] ? __local_bh_enable_ip+0x12d/0x1c0 [ 261.204945][ T8450] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.204968][ T8450] ? __local_bh_enable_ip+0x12d/0x1c0 [ 261.204991][ T8450] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 261.205017][ T8450] ? __dev_queue_xmit+0x27e/0x3a70 [ 261.205051][ T8450] ? __lock_acquire+0xab9/0xd20 [ 261.205096][ T8450] ? __pfx_rtnl_newlink+0x10/0x10 [ 261.205113][ T8450] rtnetlink_rcv_msg+0x7cf/0xb70 [ 261.205134][ T8450] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 261.205150][ T8450] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 261.205164][ T8450] ? ref_tracker_free+0x63a/0x7d0 [ 261.205183][ T8450] ? __copy_skb_header+0xa7/0x550 [ 261.205206][ T8450] ? __pfx_ref_tracker_free+0x10/0x10 [ 261.205237][ T8450] netlink_rcv_skb+0x205/0x470 [ 261.205259][ T8450] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 261.205279][ T8450] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 261.205311][ T8450] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.205330][ T8450] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.205355][ T8450] netlink_unicast+0x758/0x8d0 [ 261.205384][ T8450] netlink_sendmsg+0x805/0xb30 [ 261.205413][ T8450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.205435][ T8450] ? __import_iovec+0x5d4/0x7f0 [ 261.205451][ T8450] ? aa_sock_msg_perm+0x94/0x160 [ 261.205474][ T8450] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 261.205495][ T8450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.205515][ T8450] __sock_sendmsg+0x219/0x270 [ 261.205541][ T8450] ____sys_sendmsg+0x505/0x830 [ 261.205566][ T8450] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.205602][ T8450] ___sys_sendmsg+0x21f/0x2a0 [ 261.205625][ T8450] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.205686][ T8450] ? __fget_files+0x2a/0x420 [ 261.205703][ T8450] ? __fget_files+0x3a0/0x420 [ 261.205730][ T8450] __sys_sendmsg+0x164/0x220 [ 261.205749][ T8450] ? __pfx___sys_sendmsg+0x10/0x10 [ 261.205783][ T8450] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 261.205808][ T8450] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.205834][ T8450] __do_fast_syscall_32+0xb6/0x2b0 [ 261.205851][ T8450] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.205878][ T8450] do_fast_syscall_32+0x34/0x80 [ 261.205895][ T8450] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.205914][ T8450] RIP: 0023:0xf704e539 [ 261.205930][ T8450] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 261.205945][ T8450] RSP: 002b:00000000f503e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 261.205964][ T8450] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 261.205976][ T8450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.205987][ T8450] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 261.205997][ T8450] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 261.206008][ T8450] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 261.206034][ T8450] [ 261.638576][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.705882][ T2152] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 261.775869][ T5907] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 261.855827][ T2152] usb 1-1: Using ep0 maxpacket: 32 [ 261.927818][ T5907] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 262.088260][ T5907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.185852][ T5907] usb 2-1: config 0 has no interface number 0 [ 262.195839][ T5907] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 262.365986][ T2152] usb 1-1: config 9 has an invalid interface number: 255 but max is 1 [ 262.374289][ T2152] usb 1-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 262.405907][ T5924] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 262.423127][ T5907] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 262.432564][ T2152] usb 1-1: config 9 has no interface number 0 [ 262.444595][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 262.465243][ T2152] usb 1-1: config 9 interface 255 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 262.483658][ T5907] usb 2-1: Product: syz [ 262.490982][ T5907] usb 2-1: SerialNumber: syz [ 262.495632][ T2152] usb 1-1: config 9 interface 255 altsetting 6 has an invalid endpoint descriptor of length 2, skipping [ 262.510760][ T5907] usb 2-1: config 0 descriptor?? [ 262.516003][ T2152] usb 1-1: config 9 interface 255 altsetting 6 bulk endpoint 0xC has invalid maxpacket 16 [ 262.529340][ T5907] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 262.537676][ T2152] usb 1-1: config 9 interface 255 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 262.551834][ T2152] usb 1-1: config 9 interface 255 altsetting 6 has an endpoint descriptor with address 0x23, changing to 0x3 [ 262.580058][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 262.597491][ T5924] usb 3-1: unable to get BOS descriptor set [ 262.601894][ T2152] usb 1-1: config 9 interface 255 altsetting 6 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 262.606230][ T923] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 262.615182][ T2152] usb 1-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 262.647022][ T2152] usb 1-1: config 9 interface 255 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 262.655392][ T5924] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 262.692947][ T2152] usb 1-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 262.709386][ T5924] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 72 [ 262.724013][ T2152] usb 1-1: config 9 interface 255 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 262.749737][ T5924] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.775987][ T2152] usb 1-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 262.803579][ T5924] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.832178][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.840327][ T2152] usb 1-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 262.840359][ T2152] usb 1-1: config 9 interface 255 altsetting 6 bulk endpoint 0x6 has invalid maxpacket 1024 [ 262.840382][ T2152] usb 1-1: config 9 interface 255 altsetting 6 has 16 endpoint descriptors, different from the interface descriptor's value: 14 [ 262.840423][ T2152] usb 1-1: config 9 interface 1 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 262.840445][ T2152] usb 1-1: config 9 interface 1 altsetting 3 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 262.840468][ T2152] usb 1-1: config 9 interface 255 has no altsetting 0 [ 262.840485][ T2152] usb 1-1: config 9 interface 1 has no altsetting 0 [ 262.845202][ T2152] usb 1-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=49.59 [ 262.885984][ T5924] usb 3-1: Product: syz [ 262.894164][ T2152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.924367][ T5924] usb 3-1: Manufacturer: syz [ 262.924525][ T923] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 262.927157][ T2152] usb 1-1: Product: ф [ 262.954682][ T923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 262.966030][ T2152] usb 1-1: Manufacturer: я [ 262.975647][ T5907] usb 2-1: USB disconnect, device number 43 [ 262.981879][ T5924] usb 3-1: SerialNumber: syz [ 263.006887][ T923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 263.026276][ T923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.049908][ T8456] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 263.054186][ T923] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.065174][ T8456] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 263.085870][ T923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.102865][ T923] usb 4-1: config 0 descriptor?? [ 263.112328][ T8459] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 263.282771][ T2152] usb 1-1: USB disconnect, device number 39 [ 263.375573][ T8467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.402579][ T8467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.530298][ T5924] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 263.549232][ T923] usbhid 4-1:0.0: can't add hid device: -71 [ 263.585623][ T923] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 263.606257][ T5924] usb 3-1: USB disconnect, device number 35 [ 263.640766][ T923] usb 4-1: USB disconnect, device number 39 [ 264.164707][ T8487] netlink: 1276 bytes leftover after parsing attributes in process `syz.0.777'. [ 264.586135][ T9] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 264.655844][ T5924] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 264.783629][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 264.825344][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'. [ 264.854236][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 264.944545][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.049083][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 265.075864][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 265.104931][ T5924] usb 3-1: config 0 has no interfaces? [ 265.120579][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 265.130596][ T5924] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 265.141457][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 265.165153][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.175215][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.188185][ T5924] usb 3-1: Product: syz [ 265.192342][ T5924] usb 3-1: Manufacturer: syz [ 265.200413][ T5924] usb 3-1: SerialNumber: syz [ 265.205583][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 265.220023][ T5924] usb 3-1: config 0 descriptor?? [ 265.494479][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 265.545906][ T5907] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 265.577144][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 265.589220][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 265.614578][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.644893][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 265.657689][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 265.673587][ T9] usb 5-1: string descriptor 0 read error: -22 [ 265.685936][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 265.695211][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.725814][ T5907] usb 1-1: Using ep0 maxpacket: 16 [ 265.732029][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 265.791619][ T5907] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 265.809316][ T5907] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 265.821929][ T5907] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 265.839383][ T5907] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.851829][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.863518][ T5907] usb 1-1: Product: syz [ 265.867987][ T5907] usb 1-1: Manufacturer: syz [ 265.873048][ T5907] usb 1-1: SerialNumber: syz [ 266.119193][ T8510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.156510][ T8510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.193044][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.786'. [ 266.442322][ T5924] usb 5-1: USB disconnect, device number 36 [ 266.568444][ T5907] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 266.590137][ T5907] usb 1-1: unit 6 not found! [ 266.645617][ T5907] usb 1-1: USB disconnect, device number 40 [ 266.681480][ T6875] udevd[6875]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.765825][ T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 266.945919][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 266.961874][ T24] usb 4-1: config 9 has an invalid interface number: 255 but max is 1 [ 266.978088][ T24] usb 4-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 267.008703][ T24] usb 4-1: config 9 has no interface number 0 [ 267.035881][ T24] usb 4-1: config 9 interface 255 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 267.107404][ T24] usb 4-1: config 9 interface 255 altsetting 6 has an invalid endpoint descriptor of length 2, skipping [ 267.124335][ T24] usb 4-1: config 9 interface 255 altsetting 6 bulk endpoint 0xC has invalid maxpacket 16 [ 267.134513][ T24] usb 4-1: config 9 interface 255 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 267.145534][ T24] usb 4-1: config 9 interface 255 altsetting 6 has an endpoint descriptor with address 0x23, changing to 0x3 [ 267.156102][ T5924] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 267.165848][ T24] usb 4-1: config 9 interface 255 altsetting 6 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 267.177106][ T24] usb 4-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 267.206202][ T24] usb 4-1: config 9 interface 255 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 267.223520][ T24] usb 4-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 267.236688][ T24] usb 4-1: config 9 interface 255 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 267.268222][ T9] usb 3-1: USB disconnect, device number 36 [ 267.348026][ T5924] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 267.350889][ T24] usb 4-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 267.365780][ T5924] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.399948][ T5924] usb 2-1: config 0 has no interface number 0 [ 267.400918][ T24] usb 4-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 267.427301][ T5924] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 267.465058][ T24] usb 4-1: config 9 interface 255 altsetting 6 bulk endpoint 0x6 has invalid maxpacket 1024 [ 267.476854][ T24] usb 4-1: config 9 interface 255 altsetting 6 has 16 endpoint descriptors, different from the interface descriptor's value: 14 [ 267.498300][ T24] usb 4-1: config 9 interface 1 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 267.509298][ T24] usb 4-1: config 9 interface 1 altsetting 3 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 267.587882][ T24] usb 4-1: config 9 interface 255 has no altsetting 0 [ 267.595299][ T24] usb 4-1: config 9 interface 1 has no altsetting 0 [ 267.595449][ T5924] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 267.604972][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=49.59 [ 267.625807][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 267.626342][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.643867][ T24] usb 4-1: Product: syz [ 267.649233][ T24] usb 4-1: Manufacturer: syz [ 267.654222][ T24] usb 4-1: SerialNumber: syz [ 267.664341][ T5924] usb 2-1: Product: syz [ 267.674172][ T5924] usb 2-1: SerialNumber: syz [ 267.688428][ T5924] usb 2-1: config 0 descriptor?? [ 267.706245][ T5924] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 267.901374][ T24] usb 4-1: USB disconnect, device number 40 [ 268.074862][ T5924] usb 2-1: USB disconnect, device number 44 [ 268.493877][ T8549] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.501873][ T8549] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.674025][ T8549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.689976][ T8549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.837145][ T8549] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.846098][ T8549] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.854982][ T8549] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.864560][ T8549] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.018914][ T5833] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 269.046088][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 269.219685][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.231312][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.244669][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 269.257822][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 269.266929][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.283421][ T24] usb 4-1: config 0 descriptor?? [ 269.483943][ T923] IPVS: starting estimator thread 0... [ 269.606794][ T8584] IPVS: using max 28 ests per chain, 67200 per kthread [ 269.710416][ T24] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 269.732189][ T24] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 270.076032][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 270.101116][ T8590] loop6: detected capacity change from 0 to 524287999 [ 270.142628][ T6126] buffer_io_error: 185 callbacks suppressed [ 270.142649][ T6126] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 270.245885][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 270.254089][ T24] usb 3-1: config 9 has an invalid interface number: 255 but max is 1 [ 270.263004][ T24] usb 3-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 270.285859][ T24] usb 3-1: config 9 has no interface number 0 [ 270.292053][ T24] usb 3-1: config 9 interface 255 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 270.353681][ T24] usb 3-1: config 9 interface 255 altsetting 6 has an invalid endpoint descriptor of length 2, skipping [ 270.412440][ T24] usb 3-1: config 9 interface 255 altsetting 6 bulk endpoint 0xC has invalid maxpacket 16 [ 270.434456][ T24] usb 3-1: config 9 interface 255 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 270.450087][ T24] usb 3-1: config 9 interface 255 altsetting 6 has an endpoint descriptor with address 0x23, changing to 0x3 [ 270.480504][ T923] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 270.489513][ T24] usb 3-1: config 9 interface 255 altsetting 6 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 270.489549][ T24] usb 3-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 270.489570][ T24] usb 3-1: config 9 interface 255 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 270.489593][ T24] usb 3-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 270.489611][ T24] usb 3-1: config 9 interface 255 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 270.489629][ T24] usb 3-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 270.489650][ T24] usb 3-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 270.489671][ T24] usb 3-1: config 9 interface 255 altsetting 6 bulk endpoint 0x6 has invalid maxpacket 1024 [ 270.489693][ T24] usb 3-1: config 9 interface 255 altsetting 6 has 16 endpoint descriptors, different from the interface descriptor's value: 14 [ 270.490415][ T24] usb 3-1: config 9 interface 1 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 270.655927][ T9] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 270.655927][ T24] usb 3-1: config 9 interface 1 altsetting 3 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 270.655957][ T24] usb 3-1: config 9 interface 255 has no altsetting 0 [ 270.708793][ T24] usb 3-1: config 9 interface 1 has no altsetting 0 [ 270.719592][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=49.59 [ 270.730031][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.739593][ T24] usb 3-1: Product: syz [ 270.743912][ T24] usb 3-1: Manufacturer: syz [ 270.752644][ T24] usb 3-1: SerialNumber: syz [ 270.779020][ T923] usb 2-1: config 0 has no interfaces? [ 270.790970][ T923] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 270.803754][ T923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.812927][ T923] usb 2-1: Product: syz [ 270.820668][ T923] usb 2-1: Manufacturer: syz [ 270.827213][ T9] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 270.837497][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.851438][ T923] usb 2-1: SerialNumber: syz [ 270.856838][ T9] usb 1-1: config 0 has no interface number 0 [ 270.867346][ T923] usb 2-1: config 0 descriptor?? [ 270.873581][ T9] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.894294][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 270.915905][ T9] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 270.924109][ T9] usb 1-1: Product: syz [ 270.944780][ T9] usb 1-1: SerialNumber: syz [ 270.953514][ T9] usb 1-1: config 0 descriptor?? [ 270.986671][ T9] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 270.997215][ T5924] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 271.009754][ T24] usb 3-1: USB disconnect, device number 37 [ 271.163337][ T5924] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 271.179887][ T5924] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 271.209702][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.215844][ T5890] usb 4-1: reset high-speed USB device number 41 using dummy_hcd [ 271.255546][ T8603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.265443][ T8603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.311659][ T5924] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 271.376866][ T24] usb 1-1: USB disconnect, device number 41 [ 271.646989][ T8615] FAULT_INJECTION: forcing a failure. [ 271.646989][ T8615] name failslab, interval 1, probability 0, space 0, times 0 [ 271.661433][ T8615] CPU: 0 UID: 0 PID: 8615 Comm: syz.2.818 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 271.661459][ T8615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 271.661471][ T8615] Call Trace: [ 271.661479][ T8615] [ 271.661486][ T8615] dump_stack_lvl+0x189/0x250 [ 271.661517][ T8615] ? __pfx____ratelimit+0x10/0x10 [ 271.661541][ T8615] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.661562][ T8615] ? __pfx__printk+0x10/0x10 [ 271.661585][ T8615] ? __pfx___might_resched+0x10/0x10 [ 271.661610][ T8615] should_fail_ex+0x414/0x560 [ 271.661634][ T8615] should_failslab+0xa8/0x100 [ 271.661654][ T8615] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 271.661671][ T8615] ? __alloc_skb+0x112/0x2d0 [ 271.661702][ T8615] __alloc_skb+0x112/0x2d0 [ 271.661724][ T8615] netlink_sendmsg+0x5c6/0xb30 [ 271.661754][ T8615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.661775][ T8615] ? __import_iovec+0x5d4/0x7f0 [ 271.661790][ T8615] ? aa_sock_msg_perm+0x94/0x160 [ 271.661812][ T8615] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 271.661832][ T8615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.661852][ T8615] __sock_sendmsg+0x219/0x270 [ 271.661879][ T8615] ____sys_sendmsg+0x505/0x830 [ 271.661905][ T8615] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.661941][ T8615] ___sys_sendmsg+0x21f/0x2a0 [ 271.661964][ T8615] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.662014][ T8615] ? __fget_files+0x2a/0x420 [ 271.662031][ T8615] ? __fget_files+0x3a0/0x420 [ 271.662057][ T8615] __sys_sendmsg+0x164/0x220 [ 271.662078][ T8615] ? __pfx___sys_sendmsg+0x10/0x10 [ 271.662107][ T8615] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 271.662129][ T8615] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.662153][ T8615] __do_fast_syscall_32+0xb6/0x2b0 [ 271.662169][ T8615] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.662193][ T8615] do_fast_syscall_32+0x34/0x80 [ 271.662210][ T8615] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 271.662228][ T8615] RIP: 0023:0xf704e539 [ 271.662243][ T8615] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 271.662257][ T8615] RSP: 002b:00000000f503e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 271.662276][ T8615] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 271.662287][ T8615] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 271.662298][ T8615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 271.662308][ T8615] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 271.662319][ T8615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 271.662344][ T8615] [ 272.295833][ T2152] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 272.327014][ T5924] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 272.337035][ T5924] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 272.339064][ T5907] usb 4-1: USB disconnect, device number 41 [ 272.343702][ T5924] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 272.360543][ T5924] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 272.377357][ T5924] usb 5-1: USB disconnect, device number 37 [ 272.445888][ T2152] usb 3-1: Using ep0 maxpacket: 32 [ 272.458482][ T2152] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 272.460107][ T8631] loop6: detected capacity change from 0 to 63 [ 272.484158][ T6875] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.496506][ T2152] usb 3-1: config 0 has no interface number 0 [ 272.502182][ T8631] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.512118][ T6875] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.521126][ T8631] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.524425][ T2152] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 272.530127][ T6875] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.549429][ T8631] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.558300][ T5907] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 272.558337][ T8631] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.575660][ T6875] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.585447][ T6875] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.606028][ T2152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.617436][ T2152] usb 3-1: Product: syz [ 272.622214][ T2152] usb 3-1: Manufacturer: syz [ 272.627214][ T2152] usb 3-1: SerialNumber: syz [ 272.651447][ T2152] usb 3-1: config 0 descriptor?? [ 272.758179][ T5907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.769531][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 272.782262][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 272.792443][ T5907] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 272.813523][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 272.813542][ T30] audit: type=1800 audit(1750539185.375:711): pid=8633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.824" name="/" dev="fuse" ino=1 res=0 errno=0 [ 272.839997][ T5907] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 272.849376][ T5907] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 272.857499][ T5907] usb 4-1: Manufacturer: syz [ 272.864376][ T5907] usb 4-1: config 0 descriptor?? [ 272.877868][ T2152] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 272.961820][ T2152] usb 3-1: USB disconnect, device number 38 [ 273.097976][ T8641] loop8: detected capacity change from 0 to 7 [ 273.162379][ T8641] Dev loop8: unable to read RDB block 7 [ 273.195465][ T8641] loop8: unable to read partition table [ 273.206426][ T5890] usb 2-1: USB disconnect, device number 45 [ 273.217059][ T8641] loop8: partition table beyond EOD, truncated [ 273.229955][ T8641] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 273.312705][ T5907] rc_core: IR keymap rc-hauppauge not found [ 273.322274][ T5907] Registered IR keymap rc-empty [ 273.333441][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 273.358726][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 273.387460][ T5907] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 273.391935][ T8651] FAULT_INJECTION: forcing a failure. [ 273.391935][ T8651] name failslab, interval 1, probability 0, space 0, times 0 [ 273.403666][ T5907] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input34 [ 273.413627][ T8651] CPU: 0 UID: 0 PID: 8651 Comm: syz.0.830 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 273.413652][ T8651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 273.413662][ T8651] Call Trace: [ 273.413670][ T8651] [ 273.413678][ T8651] dump_stack_lvl+0x189/0x250 [ 273.413707][ T8651] ? __pfx____ratelimit+0x10/0x10 [ 273.413730][ T8651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.413753][ T8651] ? __pfx__printk+0x10/0x10 [ 273.413776][ T8651] ? __pfx___might_resched+0x10/0x10 [ 273.413799][ T8651] ? fs_reclaim_acquire+0x7d/0x100 [ 273.413822][ T8651] should_fail_ex+0x414/0x560 [ 273.413848][ T8651] should_failslab+0xa8/0x100 [ 273.413867][ T8651] kmem_cache_alloc_noprof+0x73/0x3c0 [ 273.413890][ T8651] ? skb_clone+0x212/0x3a0 [ 273.413915][ T8651] skb_clone+0x212/0x3a0 [ 273.413934][ T8651] ? nfnetlink_rcv+0x486/0x2520 [ 273.413960][ T8651] nfnetlink_rcv+0x4b4/0x2520 [ 273.413986][ T8651] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 273.414012][ T8651] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 273.414038][ T8651] ? __dev_queue_xmit+0x27e/0x3a70 [ 273.414079][ T8651] ? do_fast_syscall_32+0x34/0x80 [ 273.414105][ T8651] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 273.414142][ T8651] ? ref_tracker_free+0x63a/0x7d0 [ 273.414162][ T8651] ? __copy_skb_header+0xa7/0x550 [ 273.414184][ T8651] ? __pfx_ref_tracker_free+0x10/0x10 [ 273.414220][ T8651] ? skb_clone+0x246/0x3a0 [ 273.414243][ T8651] ? __netlink_deliver_tap+0x807/0x850 [ 273.414263][ T8651] ? netlink_deliver_tap+0x2e/0x1b0 [ 273.414287][ T8651] ? netlink_deliver_tap+0x2e/0x1b0 [ 273.414306][ T8651] ? netlink_deliver_tap+0x2e/0x1b0 [ 273.414329][ T8651] netlink_unicast+0x758/0x8d0 [ 273.414356][ T8651] netlink_sendmsg+0x805/0xb30 [ 273.414384][ T8651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.414405][ T8651] ? __import_iovec+0x5d4/0x7f0 [ 273.414420][ T8651] ? aa_sock_msg_perm+0x94/0x160 [ 273.414443][ T8651] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 273.414469][ T8651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.414489][ T8651] __sock_sendmsg+0x219/0x270 [ 273.414515][ T8651] ____sys_sendmsg+0x505/0x830 [ 273.414540][ T8651] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.414575][ T8651] ___sys_sendmsg+0x21f/0x2a0 [ 273.414597][ T8651] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.414649][ T8651] ? __fget_files+0x2a/0x420 [ 273.414667][ T8651] ? __fget_files+0x3a0/0x420 [ 273.414695][ T8651] __sys_sendmsg+0x164/0x220 [ 273.414716][ T8651] ? __pfx___sys_sendmsg+0x10/0x10 [ 273.414749][ T8651] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 273.414773][ T8651] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.414798][ T8651] __do_fast_syscall_32+0xb6/0x2b0 [ 273.414815][ T8651] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.414841][ T8651] do_fast_syscall_32+0x34/0x80 [ 273.414857][ T8651] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.414877][ T8651] RIP: 0023:0xf703e539 [ 273.414892][ T8651] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 273.414907][ T8651] RSP: 002b:00000000f502e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 273.414925][ T8651] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 273.414937][ T8651] RDX: 0000000020050800 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.414948][ T8651] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 273.414958][ T8651] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 273.414969][ T8651] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.414994][ T8651] [ 273.792758][ T8661] loop8: detected capacity change from 0 to 7 [ 273.801929][ T8661] Dev loop8: unable to read RDB block 7 [ 273.808431][ T8661] loop8: unable to read partition table [ 273.814402][ T8661] loop8: partition table beyond EOD, truncated [ 273.837080][ T8661] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 273.870081][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 273.909362][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 273.916729][ T2152] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 273.955901][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 273.992733][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 274.009365][ T8667] loop6: detected capacity change from 0 to 63 [ 274.034502][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 274.070218][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 274.083679][ T2152] usb 5-1: Using ep0 maxpacket: 32 [ 274.105268][ T2152] usb 5-1: config 9 has an invalid interface number: 255 but max is 1 [ 274.117114][ T2152] usb 5-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 274.133798][ T2152] usb 5-1: config 9 has no interface number 0 [ 274.140754][ T2152] usb 5-1: config 9 interface 255 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 274.154108][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 274.163144][ T2152] usb 5-1: config 9 interface 255 altsetting 6 has an invalid endpoint descriptor of length 2, skipping [ 274.177904][ T2152] usb 5-1: config 9 interface 255 altsetting 6 bulk endpoint 0xC has invalid maxpacket 16 [ 274.192310][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 274.216874][ T2152] usb 5-1: config 9 interface 255 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 274.228085][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 274.251869][ T2152] usb 5-1: config 9 interface 255 altsetting 6 has an endpoint descriptor with address 0x23, changing to 0x3 [ 274.269916][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 274.291814][ T2152] usb 5-1: config 9 interface 255 altsetting 6 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 274.303883][ T2152] usb 5-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 274.319925][ T5907] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 274.339028][ T2152] usb 5-1: config 9 interface 255 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 274.356786][ T5907] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 274.374836][ T2152] usb 5-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 274.396409][ T2152] usb 5-1: config 9 interface 255 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 274.408118][ T2152] usb 5-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 274.424164][ T2152] usb 5-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 274.435021][ T5890] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 274.442727][ T2152] usb 5-1: config 9 interface 255 altsetting 6 bulk endpoint 0x6 has invalid maxpacket 1024 [ 274.453077][ T2152] usb 5-1: config 9 interface 255 altsetting 6 has 16 endpoint descriptors, different from the interface descriptor's value: 14 [ 274.469569][ T2152] usb 5-1: config 9 interface 1 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 274.493530][ T2152] usb 5-1: config 9 interface 1 altsetting 3 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 274.517406][ T2152] usb 5-1: config 9 interface 255 has no altsetting 0 [ 274.527295][ T2152] usb 5-1: config 9 interface 1 has no altsetting 0 [ 274.551626][ T2152] usb 5-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=49.59 [ 274.564367][ T2152] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.584728][ T2152] usb 5-1: Product: syz [ 274.596856][ T2152] usb 5-1: Manufacturer: syz [ 274.607217][ T2152] usb 5-1: SerialNumber: syz [ 274.617953][ T5890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.631313][ T8672] netlink: 72 bytes leftover after parsing attributes in process `syz.2.836'. [ 274.644434][ T5890] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 274.653792][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.668810][ T5890] usb 1-1: config 0 descriptor?? [ 274.684880][ T5890] pegasus_notetaker 1-1:0.0: Invalid number of endpoints [ 274.698157][ T5890] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 274.904032][ T2152] usb 5-1: USB disconnect, device number 38 [ 274.923209][ T5907] usb 1-1: USB disconnect, device number 42 [ 274.987846][ T8682] loop8: detected capacity change from 0 to 7 [ 274.996674][ T8682] Dev loop8: unable to read RDB block 7 [ 275.002391][ T8682] loop8: unable to read partition table [ 275.011669][ T8682] loop8: partition table beyond EOD, truncated [ 275.019955][ T8682] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 275.145962][ T5924] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 275.166102][ T8685] netlink: 60 bytes leftover after parsing attributes in process `syz.2.841'. [ 275.180505][ T8684] netlink: 60 bytes leftover after parsing attributes in process `syz.2.841'. [ 275.193518][ T2152] usb 4-1: USB disconnect, device number 42 [ 275.253011][ T8687] FAULT_INJECTION: forcing a failure. [ 275.253011][ T8687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.290216][ T8687] CPU: 0 UID: 0 PID: 8687 Comm: syz.3.842 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 275.290244][ T8687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.290255][ T8687] Call Trace: [ 275.290263][ T8687] [ 275.290279][ T8687] dump_stack_lvl+0x189/0x250 [ 275.290308][ T8687] ? __pfx____ratelimit+0x10/0x10 [ 275.290332][ T8687] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.290355][ T8687] ? __pfx__printk+0x10/0x10 [ 275.290374][ T8687] ? __might_fault+0xb0/0x130 [ 275.290402][ T8687] should_fail_ex+0x414/0x560 [ 275.290429][ T8687] _copy_from_user+0x2d/0xb0 [ 275.290447][ T8687] get_compat_msghdr+0xad/0x4a0 [ 275.290467][ T8687] ? __lock_acquire+0xab9/0xd20 [ 275.290494][ T8687] ? __pfx_get_compat_msghdr+0x10/0x10 [ 275.290518][ T8687] ? get_pid_task+0x20/0x1f0 [ 275.290544][ T8687] ___sys_recvmsg+0x17f/0x510 [ 275.290568][ T8687] ? __pfx____sys_recvmsg+0x10/0x10 [ 275.290605][ T8687] ? __fget_files+0x3a0/0x420 [ 275.290631][ T8687] __sys_recvmsg+0x161/0x220 [ 275.290653][ T8687] ? __pfx___sys_recvmsg+0x10/0x10 [ 275.290688][ T8687] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 275.290713][ T8687] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.290738][ T8687] __do_fast_syscall_32+0xb6/0x2b0 [ 275.290756][ T8687] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.290783][ T8687] do_fast_syscall_32+0x34/0x80 [ 275.290801][ T8687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.290822][ T8687] RIP: 0023:0xf7fd6539 [ 275.290837][ T8687] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 275.290852][ T8687] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 275.290872][ T8687] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 275.290884][ T8687] RDX: 0000000040000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 275.290896][ T8687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 275.290907][ T8687] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 275.290918][ T8687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 275.290944][ T8687] [ 275.291269][ T8687] netlink: 60 bytes leftover after parsing attributes in process `syz.3.842'. [ 275.535800][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 275.569662][ T5924] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 275.589252][ T5924] usb 2-1: config 0 has no interface number 0 [ 275.595405][ T5924] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 275.653796][ T5924] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 275.685902][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.693940][ T5924] usb 2-1: Product: syz [ 275.726040][ T5924] usb 2-1: Manufacturer: syz [ 275.730690][ T5924] usb 2-1: SerialNumber: syz [ 275.758253][ T5924] usb 2-1: config 0 descriptor?? [ 275.778361][ T5924] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 275.816005][ T5924] em28xx 2-1:0.132: Video interface 132 found: [ 275.824993][ T8705] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 275.831543][ T8705] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 275.878162][ T8705] vhci_hcd vhci_hcd.0: Device attached [ 275.884153][ T8709] FAULT_INJECTION: forcing a failure. [ 275.884153][ T8709] name failslab, interval 1, probability 0, space 0, times 0 [ 275.918286][ T8709] CPU: 0 UID: 0 PID: 8709 Comm: syz.2.849 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 275.918316][ T8709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.918326][ T8709] Call Trace: [ 275.918334][ T8709] [ 275.918341][ T8709] dump_stack_lvl+0x189/0x250 [ 275.918367][ T8709] ? __pfx____ratelimit+0x10/0x10 [ 275.918389][ T8709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.918410][ T8709] ? __pfx__printk+0x10/0x10 [ 275.918436][ T8709] ? preempt_schedule_thunk+0x16/0x30 [ 275.918459][ T8709] should_fail_ex+0x414/0x560 [ 275.918484][ T8709] should_failslab+0xa8/0x100 [ 275.918503][ T8709] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 275.918520][ T8709] ? xfrm_state_flush+0x813/0x830 [ 275.918541][ T8709] ? __alloc_skb+0x112/0x2d0 [ 275.918563][ T8709] __alloc_skb+0x112/0x2d0 [ 275.918583][ T8709] unicast_flush_resp+0x2a/0x170 [ 275.918605][ T8709] pfkey_flush+0x14f/0x340 [ 275.918627][ T8709] ? __pfx_pfkey_flush+0x10/0x10 [ 275.918640][ T8709] ? kmem_cache_free+0x18f/0x400 [ 275.918665][ T8709] pfkey_sendmsg+0xbfb/0x1090 [ 275.918691][ T8709] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 275.918722][ T8709] ? __asan_memset+0x22/0x50 [ 275.918738][ T8709] ? __import_iovec+0x5d4/0x7f0 [ 275.918750][ T8709] ? aa_sock_msg_perm+0x94/0x160 [ 275.918769][ T8709] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 275.918789][ T8709] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 275.918807][ T8709] __sock_sendmsg+0x219/0x270 [ 275.918833][ T8709] ____sys_sendmsg+0x505/0x830 [ 275.918860][ T8709] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.918894][ T8709] ___sys_sendmsg+0x21f/0x2a0 [ 275.918916][ T8709] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.918971][ T8709] ? __fget_files+0x2a/0x420 [ 275.918989][ T8709] ? __fget_files+0x3a0/0x420 [ 275.919017][ T8709] __sys_sendmsg+0x164/0x220 [ 275.919038][ T8709] ? __pfx___sys_sendmsg+0x10/0x10 [ 275.919072][ T8709] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 275.919097][ T8709] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.919122][ T8709] __do_fast_syscall_32+0xb6/0x2b0 [ 275.919139][ T8709] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.919166][ T8709] do_fast_syscall_32+0x34/0x80 [ 275.919184][ T8709] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.919211][ T8709] RIP: 0023:0xf704e539 [ 275.919227][ T8709] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 275.919241][ T8709] RSP: 002b:00000000f503e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 275.919260][ T8709] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 275.919272][ T8709] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 275.919283][ T8709] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 275.919293][ T8709] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 275.919304][ T8709] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 275.919331][ T8709] [ 275.958252][ T8705] bond2: entered promiscuous mode [ 276.250318][ T8705] bond2: entered allmulticast mode [ 276.257702][ T8705] 8021q: adding VLAN 0 to HW filter on device bond2 [ 276.308394][ T2152] vhci_hcd: vhci_device speed not set [ 276.354648][ T8714] xt_CT: No such helper "snmp" [ 276.385881][ T2152] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 276.408577][ T8705] bond2 (unregistering): Released all slaves [ 276.428637][ T8717] FAULT_INJECTION: forcing a failure. [ 276.428637][ T8717] name failslab, interval 1, probability 0, space 0, times 0 [ 276.441484][ T923] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 276.446007][ T8717] CPU: 1 UID: 0 PID: 8717 Comm: syz.4.850 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 276.446033][ T8717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 276.446044][ T8717] Call Trace: [ 276.446053][ T8717] [ 276.446062][ T8717] dump_stack_lvl+0x189/0x250 [ 276.446090][ T8717] ? __pfx____ratelimit+0x10/0x10 [ 276.446113][ T8717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.446137][ T8717] ? __pfx__printk+0x10/0x10 [ 276.446160][ T8717] ? __pfx___might_resched+0x10/0x10 [ 276.446182][ T8717] ? fs_reclaim_acquire+0x7d/0x100 [ 276.446206][ T8717] should_fail_ex+0x414/0x560 [ 276.446233][ T8717] should_failslab+0xa8/0x100 [ 276.446253][ T8717] __kmalloc_cache_noprof+0x70/0x3d0 [ 276.446269][ T8717] ? tcf_block_get_ext+0x68d/0x17d0 [ 276.446293][ T8717] tcf_block_get_ext+0x68d/0x17d0 [ 276.446326][ T8717] clsact_init+0x23b/0x5a0 [ 276.446347][ T8717] ? __pfx_clsact_init+0x10/0x10 [ 276.446366][ T8717] qdisc_create+0x7a9/0xea0 [ 276.446391][ T8717] tc_modify_qdisc+0x175e/0x2010 [ 276.446428][ T8717] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 276.446480][ T8717] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 276.446503][ T8717] rtnetlink_rcv_msg+0x77c/0xb70 [ 276.446526][ T8717] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 276.446543][ T8717] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 276.446575][ T8717] netlink_rcv_skb+0x205/0x470 [ 276.446595][ T8717] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 276.446615][ T8717] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 276.446647][ T8717] ? netlink_deliver_tap+0x2e/0x1b0 [ 276.446670][ T8717] ? netlink_deliver_tap+0x2e/0x1b0 [ 276.446694][ T8717] netlink_unicast+0x758/0x8d0 [ 276.446723][ T8717] netlink_sendmsg+0x805/0xb30 [ 276.446751][ T8717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.446773][ T8717] ? __import_iovec+0x5d4/0x7f0 [ 276.446788][ T8717] ? aa_sock_msg_perm+0x94/0x160 [ 276.446811][ T8717] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 276.446831][ T8717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.446851][ T8717] __sock_sendmsg+0x219/0x270 [ 276.446878][ T8717] ____sys_sendmsg+0x505/0x830 [ 276.446909][ T8717] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.446946][ T8717] ___sys_sendmsg+0x21f/0x2a0 [ 276.446968][ T8717] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.447070][ T8717] ? __fget_files+0x2a/0x420 [ 276.447089][ T8717] ? __fget_files+0x3a0/0x420 [ 276.447117][ T8717] __sys_sendmsg+0x164/0x220 [ 276.447139][ T8717] ? __pfx___sys_sendmsg+0x10/0x10 [ 276.447173][ T8717] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 276.447197][ T8717] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.447222][ T8717] __do_fast_syscall_32+0xb6/0x2b0 [ 276.447240][ T8717] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.447265][ T8717] do_fast_syscall_32+0x34/0x80 [ 276.447282][ T8717] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 276.447301][ T8717] RIP: 0023:0xf70fe539 [ 276.447317][ T8717] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 276.447331][ T8717] RSP: 002b:00000000f50ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 276.447349][ T8717] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 276.447361][ T8717] RDX: 0000000000044080 RSI: 0000000000000000 RDI: 0000000000000000 [ 276.447372][ T8717] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 276.447382][ T8717] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 276.447392][ T8717] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 276.447419][ T8717] [ 276.641879][ T8706] vhci_hcd: connection reset by peer [ 276.644455][ T5924] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 276.649045][ T8718] netlink: 72 bytes leftover after parsing attributes in process `syz.0.845'. [ 276.676539][ T12] vhci_hcd: stop threads [ 276.824086][ T12] vhci_hcd: release socket [ 276.828648][ T12] vhci_hcd: disconnect device [ 276.876282][ T923] usb 3-1: device descriptor read/64, error -71 [ 277.120648][ T5924] em28xx 2-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 277.130784][ T5924] em28xx 2-1:0.132: board has no eeprom [ 277.136842][ T923] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 277.175909][ T5907] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 277.225938][ T5924] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 277.233925][ T5924] em28xx 2-1:0.132: analog set to bulk mode. [ 277.240674][ T10] em28xx 2-1:0.132: Registering V4L2 extension [ 277.266064][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 277.282519][ T923] usb 3-1: device descriptor read/64, error -71 [ 277.351531][ T5907] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.383535][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 277.401101][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 277.406449][ T923] usb usb3-port1: attempt power cycle [ 277.411288][ T5907] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 277.449075][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 277.451374][ T5907] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 277.457630][ T9] usb 1-1: config 9 has an invalid interface number: 255 but max is 1 [ 277.465166][ T5907] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 277.477650][ T9] usb 1-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 277.481629][ T5907] usb 5-1: Manufacturer: syz [ 277.498946][ T5907] usb 5-1: config 0 descriptor?? [ 277.502189][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 277.514582][ T5924] usb 2-1: USB disconnect, device number 46 [ 277.522697][ T9] usb 1-1: config 9 has no interface number 0 [ 277.530467][ T5924] em28xx 2-1:0.132: Disconnecting em28xx [ 277.536546][ T9] usb 1-1: config 9 interface 255 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 277.549116][ T9] usb 1-1: config 9 interface 255 altsetting 6 has an invalid endpoint descriptor of length 2, skipping [ 277.561342][ T9] usb 1-1: config 9 interface 255 altsetting 6 bulk endpoint 0xC has invalid maxpacket 16 [ 277.572350][ T9] usb 1-1: config 9 interface 255 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 277.583708][ T9] usb 1-1: config 9 interface 255 altsetting 6 has an endpoint descriptor with address 0x23, changing to 0x3 [ 277.597252][ T9] usb 1-1: config 9 interface 255 altsetting 6 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 277.608383][ T9] usb 1-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 277.619312][ T9] usb 1-1: config 9 interface 255 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 277.630621][ T9] usb 1-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 277.641467][ T9] usb 1-1: config 9 interface 255 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 277.652504][ T9] usb 1-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 277.663332][ T9] usb 1-1: config 9 interface 255 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 277.674177][ T9] usb 1-1: config 9 interface 255 altsetting 6 bulk endpoint 0x6 has invalid maxpacket 1024 [ 277.684595][ T10] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 277.697703][ T10] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 277.704848][ T10] em28xx 2-1:0.132: No AC97 audio processor [ 277.710826][ T9] usb 1-1: config 9 interface 255 altsetting 6 has 16 endpoint descriptors, different from the interface descriptor's value: 14 [ 277.734234][ T10] usb 2-1: Decoder not found [ 277.745821][ T9] usb 1-1: config 9 interface 1 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 277.757368][ T10] em28xx 2-1:0.132: failed to create media graph [ 277.763760][ T10] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 277.785816][ T9] usb 1-1: config 9 interface 1 altsetting 3 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 277.801279][ T10] em28xx 2-1:0.132: Remote control support is not available for this card. [ 277.801470][ T8735] ================================================================== [ 277.812582][ T9] usb 1-1: config 9 interface 255 has no altsetting 0 [ 277.817929][ T8735] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 277.817953][ T8735] Read of size 8 at addr ffff88807c124738 by task v4l_id/8735 [ 277.817967][ T8735] [ 277.817976][ T8735] CPU: 1 UID: 0 PID: 8735 Comm: v4l_id Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 277.817995][ T8735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 277.818005][ T8735] Call Trace: [ 277.818012][ T8735] [ 277.818019][ T8735] dump_stack_lvl+0x189/0x250 [ 277.818043][ T8735] ? __virt_addr_valid+0x1c8/0x5c0 [ 277.818057][ T8735] ? rcu_is_watching+0x15/0xb0 [ 277.818080][ T8735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.818101][ T8735] ? rcu_is_watching+0x15/0xb0 [ 277.818122][ T8735] ? lock_release+0x4b/0x3e0 [ 277.818144][ T8735] ? __virt_addr_valid+0x1c8/0x5c0 [ 277.818160][ T8735] ? __virt_addr_valid+0x4a5/0x5c0 [ 277.818177][ T8735] print_report+0xd2/0x2b0 [ 277.818197][ T8735] ? v4l2_fh_open+0xc7/0x430 [ 277.818210][ T8735] kasan_report+0x118/0x150 [ 277.818229][ T8735] ? v4l2_fh_open+0xc7/0x430 [ 277.818246][ T8735] v4l2_fh_open+0xc7/0x430 [ 277.818260][ T8735] ? __pfx___mutex_lock+0x10/0x10 [ 277.818278][ T8735] em28xx_v4l2_open+0x157/0x9a0 [ 277.818305][ T8735] v4l2_open+0x20c/0x360 [ 277.818323][ T8735] chrdev_open+0x4cc/0x5e0 [ 277.818341][ T8735] ? __pfx_chrdev_open+0x10/0x10 [ 277.818362][ T8735] ? __pfx_chrdev_open+0x10/0x10 [ 277.818378][ T8735] do_dentry_open+0xdf3/0x1970 [ 277.818403][ T8735] vfs_open+0x3b/0x340 [ 277.818420][ T8735] ? path_openat+0x2ecd/0x3830 [ 277.818442][ T8735] path_openat+0x2ee5/0x3830 [ 277.818462][ T8735] ? arch_stack_walk+0xfc/0x150 [ 277.818490][ T8735] ? __pfx_path_openat+0x10/0x10 [ 277.818509][ T8735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.818533][ T8735] do_filp_open+0x1fa/0x410 [ 277.818553][ T8735] ? __lock_acquire+0xab9/0xd20 [ 277.818573][ T8735] ? __pfx_do_filp_open+0x10/0x10 [ 277.818601][ T8735] ? _raw_spin_unlock+0x28/0x50 [ 277.818620][ T8735] ? alloc_fd+0x64c/0x6c0 [ 277.818641][ T8735] do_sys_openat2+0x121/0x1c0 [ 277.818661][ T8735] ? __pfx_do_sys_openat2+0x10/0x10 [ 277.818681][ T8735] ? exc_page_fault+0x76/0xf0 [ 277.818704][ T8735] ? do_user_addr_fault+0xc8a/0x1390 [ 277.818724][ T8735] __x64_sys_openat+0x138/0x170 [ 277.818746][ T8735] do_syscall_64+0xfa/0x3b0 [ 277.818761][ T8735] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.818781][ T8735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.818797][ T8735] ? clear_bhb_loop+0x60/0xb0 [ 277.818814][ T8735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.818830][ T8735] RIP: 0033:0x7f406eea7407 [ 277.818852][ T8735] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 277.818867][ T8735] RSP: 002b:00007ffeec5e3310 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 277.818885][ T8735] RAX: ffffffffffffffda RBX: 00007f406f671880 RCX: 00007f406eea7407 [ 277.818898][ T8735] RDX: 0000000000000000 RSI: 00007ffeec5e4f1b RDI: ffffffffffffff9c [ 277.818910][ T8735] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 277.818920][ T8735] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 277.818930][ T8735] R13: 00007ffeec5e3560 R14: 00007f406f7d8000 R15: 000055593600c4d8 [ 277.818949][ T8735] [ 277.818955][ T8735] [ 277.824997][ T5924] em28xx 2-1:0.132: Closing input extension [ 277.832120][ T8735] Allocated by task 10: [ 277.832133][ T8735] kasan_save_track+0x3e/0x80 [ 277.832156][ T8735] __kasan_kmalloc+0x93/0xb0 [ 277.832169][ T8735] __kmalloc_cache_noprof+0x230/0x3d0 [ 277.832182][ T8735] em28xx_v4l2_init+0x10b/0x2e70 [ 277.832200][ T8735] em28xx_init_extension+0x120/0x1c0 [ 277.832217][ T8735] process_scheduled_works+0xae1/0x17b0 [ 277.832237][ T8735] worker_thread+0x8a0/0xda0 [ 277.832247][ T8735] kthread+0x70e/0x8a0 [ 277.840475][ T923] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 277.842173][ T8735] ret_from_fork+0x3f9/0x770 [ 277.854504][ T9] usb 1-1: config 9 interface 1 has no altsetting 0 [ 277.863810][ T8735] ret_from_fork_asm+0x1a/0x30 [ 277.863838][ T8735] [ 277.863844][ T8735] Freed by task 10: [ 277.863852][ T8735] kasan_save_track+0x3e/0x80 [ 277.863872][ T8735] kasan_save_free_info+0x46/0x50 [ 277.863888][ T8735] __kasan_slab_free+0x62/0x70 [ 277.863901][ T8735] kfree+0x18e/0x440 [ 277.863919][ T8735] em28xx_v4l2_init+0x1683/0x2e70 [ 277.863939][ T8735] em28xx_init_extension+0x120/0x1c0 [ 277.873961][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=49.59 [ 277.874787][ T8735] process_scheduled_works+0xae1/0x17b0 [ 277.880145][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.884619][ T8735] worker_thread+0x8a0/0xda0 [ 277.884639][ T8735] kthread+0x70e/0x8a0 [ 277.890561][ T923] usb 3-1: device descriptor read/8, error -71 [ 277.894557][ T8735] ret_from_fork+0x3f9/0x770 [ 277.894582][ T8735] ret_from_fork_asm+0x1a/0x30 [ 277.894599][ T8735] [ 277.900785][ T9] usb 1-1: Product: ф [ 277.904243][ T8735] The buggy address belongs to the object at ffff88807c124000 [ 277.904243][ T8735] which belongs to the cache kmalloc-8k of size 8192 [ 277.904262][ T8735] The buggy address is located 1848 bytes inside of [ 277.904262][ T8735] freed 8192-byte region [ffff88807c124000, ffff88807c126000) [ 277.909501][ T9] usb 1-1: Manufacturer: я [ 277.913741][ T8735] [ 277.913748][ T8735] The buggy address belongs to the physical page: [ 277.913769][ T8735] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c120 [ 278.147507][ T923] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 278.151732][ T8735] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 278.151751][ T8735] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 278.175113][ T9] usb 1-1: USB disconnect, device number 43 [ 278.175446][ T8735] page_type: f5(slab) [ 278.182799][ T923] usb 3-1: device descriptor read/8, error -71 [ 278.186237][ T8735] raw: 00fff00000000040 ffff88801a442280 ffffea0001dc5000 0000000000000006 [ 278.186254][ T8735] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 278.186268][ T8735] head: 00fff00000000040 ffff88801a442280 ffffea0001dc5000 0000000000000006 [ 278.186282][ T8735] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 278.186296][ T8735] head: 00fff00000000003 ffffea0001f04801 00000000ffffffff 00000000ffffffff [ 278.186309][ T8735] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 278.186319][ T8735] page dumped because: kasan: bad access detected [ 278.186342][ T8735] page_owner tracks the page as allocated [ 278.186350][ T8735] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7910, tgid 7909 (syz.2.597), ts 230181883160, free_ts 228334836796 [ 278.296300][ T923] usb usb3-port1: unable to enumerate USB device [ 278.299568][ T8735] post_alloc_hook+0x240/0x2a0 [ 278.299593][ T8735] get_page_from_freelist+0x21e4/0x22c0 [ 278.497285][ T8735] __alloc_frozen_pages_noprof+0x181/0x370 [ 278.503088][ T8735] alloc_pages_mpol+0x232/0x4a0 [ 278.507923][ T8735] allocate_slab+0x8a/0x3b0 [ 278.512412][ T8735] ___slab_alloc+0xbfc/0x1480 [ 278.517078][ T8735] __kmalloc_cache_noprof+0x296/0x3d0 [ 278.522435][ T8735] audit_log_d_path+0xb5/0x190 [ 278.527358][ T8735] audit_log_d_path_exe+0x42/0x70 [ 278.532364][ T8735] audit_log_task+0x2b3/0x3c0 [ 278.537029][ T8735] audit_seccomp+0x86/0x190 [ 278.541516][ T8735] __seccomp_filter+0x9aa/0x1a40 [ 278.546439][ T8735] syscall_trace_enter+0xaa/0x160 [ 278.551448][ T8735] do_int80_emulation+0x101/0x390 [ 278.556453][ T8735] asm_int80_emulation+0x1a/0x20 [ 278.561382][ T8735] page last free pid 5845 tgid 5845 stack trace: [ 278.567687][ T8735] __free_frozen_pages+0xc71/0xe70 [ 278.572793][ T8735] __put_partials+0x161/0x1c0 [ 278.577470][ T8735] put_cpu_partial+0x17c/0x250 [ 278.582226][ T8735] __slab_free+0x2f7/0x400 [ 278.586711][ T8735] qlist_free_all+0x97/0x140 [ 278.591291][ T8735] kasan_quarantine_reduce+0x148/0x160 [ 278.596742][ T8735] __kasan_slab_alloc+0x22/0x80 [ 278.601578][ T8735] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 278.607027][ T8735] ptlock_alloc+0x20/0x70 [ 278.611333][ T8735] pte_alloc_one+0x7d/0x170 [ 278.615823][ T8735] __pte_alloc+0x25/0x1a0 [ 278.620138][ T8735] copy_pmd_range+0x68e6/0x7000 [ 278.624978][ T8735] copy_page_range+0xc46/0x1270 [ 278.629815][ T8735] dup_mmap+0xf57/0x1ac0 [ 278.634036][ T8735] copy_mm+0x13c/0x4b0 [ 278.638084][ T8735] copy_process+0x1706/0x3c00 [ 278.642742][ T8735] [ 278.645045][ T8735] Memory state around the buggy address: [ 278.650654][ T8735] ffff88807c124600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 278.658699][ T8735] ffff88807c124680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 278.666750][ T8735] >ffff88807c124700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 278.674802][ T8735] ^ [ 278.680676][ T8735] ffff88807c124780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 278.688718][ T8735] ffff88807c124800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 278.696763][ T8735] ================================================================== [ 278.756892][ T5907] rc_core: IR keymap rc-hauppauge not found [ 278.762839][ T5907] Registered IR keymap rc-empty [ 278.767984][ T5907] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 278.789115][ T5907] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 278.797717][ T8735] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 278.804937][ T8735] CPU: 1 UID: 0 PID: 8735 Comm: v4l_id Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 278.816585][ T8735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.826655][ T8735] Call Trace: [ 278.829947][ T8735] [ 278.832898][ T8735] dump_stack_lvl+0x99/0x250 [ 278.837505][ T8735] ? __asan_memcpy+0x40/0x70 [ 278.842093][ T8735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.847283][ T8735] ? __pfx__printk+0x10/0x10 [ 278.851861][ T8735] panic+0x2db/0x790 [ 278.855753][ T8735] ? __pfx_panic+0x10/0x10 [ 278.860166][ T8735] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 278.866055][ T8735] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 278.872457][ T8735] ? print_memory_metadata+0x314/0x400 [ 278.877911][ T8735] ? v4l2_fh_open+0xc7/0x430 [ 278.882489][ T8735] check_panic_on_warn+0x89/0xb0 [ 278.887417][ T8735] ? v4l2_fh_open+0xc7/0x430 [ 278.891992][ T8735] end_report+0x78/0x160 [ 278.896222][ T8735] kasan_report+0x129/0x150 [ 278.900709][ T8735] ? v4l2_fh_open+0xc7/0x430 [ 278.905286][ T8735] v4l2_fh_open+0xc7/0x430 [ 278.909687][ T8735] ? __pfx___mutex_lock+0x10/0x10 [ 278.914712][ T8735] em28xx_v4l2_open+0x157/0x9a0 [ 278.919559][ T8735] v4l2_open+0x20c/0x360 [ 278.923794][ T8735] chrdev_open+0x4cc/0x5e0 [ 278.928205][ T8735] ? __pfx_chrdev_open+0x10/0x10 [ 278.933131][ T8735] ? __pfx_chrdev_open+0x10/0x10 [ 278.938142][ T8735] do_dentry_open+0xdf3/0x1970 [ 278.942895][ T8735] vfs_open+0x3b/0x340 [ 278.946964][ T8735] ? path_openat+0x2ecd/0x3830 [ 278.951722][ T8735] path_openat+0x2ee5/0x3830 [ 278.956299][ T8735] ? arch_stack_walk+0xfc/0x150 [ 278.961144][ T8735] ? __pfx_path_openat+0x10/0x10 [ 278.966069][ T8735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.972139][ T8735] do_filp_open+0x1fa/0x410 [ 278.976633][ T8735] ? __lock_acquire+0xab9/0xd20 [ 278.981477][ T8735] ? __pfx_do_filp_open+0x10/0x10 [ 278.986502][ T8735] ? _raw_spin_unlock+0x28/0x50 [ 278.991427][ T8735] ? alloc_fd+0x64c/0x6c0 [ 278.995746][ T8735] do_sys_openat2+0x121/0x1c0 [ 279.000420][ T8735] ? __pfx_do_sys_openat2+0x10/0x10 [ 279.005606][ T8735] ? exc_page_fault+0x76/0xf0 [ 279.010273][ T8735] ? do_user_addr_fault+0xc8a/0x1390 [ 279.015549][ T8735] __x64_sys_openat+0x138/0x170 [ 279.020390][ T8735] do_syscall_64+0xfa/0x3b0 [ 279.024878][ T8735] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.030066][ T8735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.036130][ T8735] ? clear_bhb_loop+0x60/0xb0 [ 279.040801][ T8735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.046681][ T8735] RIP: 0033:0x7f406eea7407 [ 279.051081][ T8735] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 279.070678][ T8735] RSP: 002b:00007ffeec5e3310 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 279.079078][ T8735] RAX: ffffffffffffffda RBX: 00007f406f671880 RCX: 00007f406eea7407 [ 279.087038][ T8735] RDX: 0000000000000000 RSI: 00007ffeec5e4f1b RDI: ffffffffffffff9c [ 279.094993][ T8735] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 279.102948][ T8735] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 279.110910][ T8735] R13: 00007ffeec5e3560 R14: 00007f406f7d8000 R15: 000055593600c4d8 [ 279.118874][ T8735] [ 279.122124][ T8735] Kernel Offset: disabled [ 279.126444][ T8735] Rebooting in 86400 seconds..