last executing test programs: 2m15.616110732s ago: executing program 3 (id=1611): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050005000003eb7125af00000000000600000000000000951400001f000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2m15.556690346s ago: executing program 3 (id=1613): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x10, 0xffffffffffffffff, 0xbb0ce000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0xc000, 0x0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) write$sndseq(r2, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2m14.284330471s ago: executing program 3 (id=1614): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x10, 0xffffffffffffffff, 0xbb0ce000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0xc000, 0x0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) write$sndseq(r2, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2m12.446324843s ago: executing program 3 (id=1622): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) unshare(0x20400) (fail_nth: 21) 2m11.416041784s ago: executing program 3 (id=1627): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0xa002) r1 = dup(r0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000100)) read$FUSE(r1, 0x0, 0x2) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2m10.300042575s ago: executing program 3 (id=1633): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_create1(0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x2000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, 0x0, 0x8000) socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x9, 0x61, 0x10, 0x10}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x21c) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000000)={0x81}, 0x4) 2m9.832457755s ago: executing program 32 (id=1633): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_create1(0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x2000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, 0x0, 0x8000) socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x9, 0x61, 0x10, 0x10}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x21c) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000000)={0x81}, 0x4) 50.802793869s ago: executing program 0 (id=1993): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) unshare(0x4000600) r1 = socket$inet_udp(0x2, 0x2, 0x0) fgetxattr(r1, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f00000001c0)=""/78, 0x4e) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_pauseparam={0x12, 0x4, 0x8, 0xffffffff}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000080)=r5, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r10 = socket(0x2b, 0x6, 0x1) connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[], 0x70}}, 0x4004040) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b000000000005001000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0xfff3, 0xfff3}, {0xfff1, 0x9}, {0xe, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 50.644691687s ago: executing program 0 (id=1997): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x2a0242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) r1 = socket(0x10, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000440)={0x80, 0x14, 0xf00, 0x1, 0x0, 0x5, 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00', @ANYRES16=0x0, @ANYBLOB], 0x2c}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES8], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r6, r5) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) r8 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000000)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000280)={0x2, 0xfffffffa}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r8, 0x4020565b, &(0x7f00000001c0)={0x5, 0x0, 0x2}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x8, 0xc, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x0, 0x460c6}, 0x20, 0x7, 0x2}}) creat(&(0x7f0000000140)='./file0\x00', 0x40) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x2, 0x4) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x68e201, 0x0) preadv2(r9, &(0x7f0000000540), 0x0, 0x7, 0x0, 0x1) 50.169739989s ago: executing program 0 (id=2000): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000002, 0xfa11, 0xffffffff}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x119) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}], 0x1) 47.944922973s ago: executing program 0 (id=2008): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r3, &(0x7f00000002c0)=[{{&(0x7f0000000380)=@isdn, 0x80, &(0x7f0000000140)=[{&(0x7f0000000400)=""/149, 0x95}], 0x1, &(0x7f0000000ac0)=""/198, 0xc6}, 0x4}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x61c6, &(0x7f0000000300)={0x0, 0x4b40, 0x200, 0x2, 0x2b4}, &(0x7f0000000280)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180), 0x0, 0x4) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r8, 0x1, 0x0}) io_uring_enter(r5, 0x2fcc, 0xcd1e, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x4, 0x4, 0x4c8, 0xffffffff, 0x314, 0x0, 0x220, 0xfeffffff, 0xffffffff, 0x400, 0x400, 0x400, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1fc, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'lo\x00', {0x4, 0x8000, 0x8, 0x0, 0x2, 0x8, 0x196, 0xf, 0x18, 0x8}}}]}, @common=@unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x6a4}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', [0xff000000, 0xffffffff, 0xffffffff, 0xff], [0xff, 0xffffffff, 0x0, 0xff], 'team0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x87, 0x8, 0x2, 0xc}, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@srh={{0x2c}, {0x11, 0x1a, 0x40, 0x2, 0x9, 0x8a, 0x48}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@ipv6header={{0x24}, {0x4, 0x44}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x524) r9 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r9, 0x4068aea3, &(0x7f0000000040)={0xc0, 0x0, 0xb000}) syz_open_dev$video(&(0x7f0000000040), 0x5, 0x0) accept4$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14, 0x80800) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) 46.824234495s ago: executing program 0 (id=2015): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84080) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000880), 0x8, 0x10000) fcntl$setsig(r4, 0xa, 0x35) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2cf1389d, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') write$vga_arbiter(r6, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f0000000000)={0xf00001, 0x9, @value=0x7fffffff}) fcntl$setlease(r3, 0x400, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f00000002c0)={0x3, 0x100, 0x0, 0x4, 0x0, 0x9ff}) r7 = accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80800) r8 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xbb, 0x20, 0x7f, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0xf2, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4, 0x8, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x81, 0x1, 0x9}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x7, 0x7, 0xd, 0xff, 0x5}, 0x8, &(0x7f0000000200)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0x46, &(0x7f0000000240)=@string={0x46, 0x3, "014a08364e7dcf0864204ab94865201c899dc551179720492fd28d9226682de1f8cbcf9cda314964b911cd221126c89ee5a545c16d232d5c37bd10b9919b927c1b36eb35"}}, {0x5b, &(0x7f0000000300)=@string={0x5b, 0x3, "2871456e736525b2be21cc30ba93a3a73c0f2886ffe75f7c50337bf14c96b3a888487cdfe513b645cd32bcd3c2a9dfd102434e0ded6132e43cc24bd87da7c2d67c98ff6312bf8fc8c85a954a3c7ba7dcec38a5900030fdb8fa"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x419}}]}) syz_usb_control_io$printer(r8, &(0x7f0000000500)={0xc, &(0x7f0000000440)={0x40, 0x8, 0x97, {0x97, 0xb, "c38c6298d999f08dcc9bb932763f8cf4a990fb2c3449a8611cda160a17716ed24ee8ea1fc417ed95d3cdb8bc4539d8df2f83c83e6695bf140ffb66ee677210e785b34d85c9bfa4ca6597db90f1d47c3638271643cfbe4871bbff3fd6676ebaf7ff483948eacf18d56a8ab3b2229c0a3d758e67b4ba121e0ea2e93ba103f7b8f603c371331b2b5c7660e236e768729797051e62af0f"}}, &(0x7f0000000580)={0x0, 0x3, 0xa7, @string={0xa7, 0x3, "44022f7ba9b0599bcce410e89d199483587d0cec9d97ecd7aa029a4c7761a225f604df27a331b6fd36eeb8eaaa8313cfbd42ec10ff113c8601c5124994277c51cb250b973aede975ac5c003457cdd764f164226690b38cbfb5522e3f76fece088deb96797141e2b03f4d7f009d7910da236f289bde0cb6dda0daa11344821af5f0a98a46fdbda133f7f1c7ad86c2ed898c1788c1463506270d591050cca3c9b14f960837a3"}}}, &(0x7f0000000840)={0x1c, &(0x7f0000000640)={0x40, 0x31, 0x38, "f6879d9b0c2c899137fb2306eb4541999e65548bc366924dd517c838c0549e7c954eda2e58de4ff52a40b3ce57c3464e5db5fb21b30e2eea"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000740)={0x20, 0x0, 0x5e, {0x5c, "1798d6f08c20ef42141a10159fa41fadb7464c235244c8654de9c40ed176256aa962003439deb22a0a9e1205c5cdd075d13726a9aa07de07d10238c9f954e3dc347958cdb16f067a53a5a29ba4b9a238b047504b553d7a3c6b7a0ba0"}}, &(0x7f00000007c0)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000800)={0x20, 0x0, 0x1, 0x40}}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'pimreg\x00'}) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="e96d9982", 0x4}], 0x1, 0x1) 46.197707266s ago: executing program 0 (id=2021): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x2a4, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0xffffffff, 0x2cc, 0x2cc, 0x2cc, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x94}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x5, 0x2, 0x2, 0x38f, 0x5, 0x0, 0x9, 0x8]}}}, {{@uncond, 0x0, 0xa8, 0xcc, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x3}, {0x97}], 0x1, 0x1}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xd4}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x300) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r0, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}}, 0x0) 45.004064165s ago: executing program 33 (id=2021): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x2a4, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0xffffffff, 0x2cc, 0x2cc, 0x2cc, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x94}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x5, 0x2, 0x2, 0x38f, 0x5, 0x0, 0x9, 0x8]}}}, {{@uncond, 0x0, 0xa8, 0xcc, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x3}, {0x97}], 0x1, 0x1}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xd4}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x300) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r0, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}}, 0x0) 10.312196938s ago: executing program 5 (id=2208): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058", 0x1f}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x55, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x0, 0x2000000000001]}}) 10.102715888s ago: executing program 5 (id=2210): r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x4, 0x40402) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x42a00) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000580)={{0x3, 0x0, 0x1, 0x1, 0xffffffff}, 0x5, 0xc, 0x400001}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r3 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0x772b, 0x404) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f00000001c0)={0x7, @capture={0x1000, 0x1, {0x5, 0x2}, 0x1e49, 0x4}}) syz_usb_control_io$hid(r3, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000180)=@userptr={0x7, 0x0, 0x4, 0x0, 0x4, {0x0, 0xea60}, {0x1, 0xa, 0x9, 0xc, 0x6, 0x2}, 0x3, 0x2, {0x0}, 0x96000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r6, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) accept4(r7, &(0x7f0000000300)=@nl=@proc, &(0x7f0000000380)=0x80, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x1c, r10, 0x1, 0x4, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040802}, 0x10) openat$kvm(0xffffff9c, &(0x7f0000000440), 0x4ea03, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040080) 9.726903147s ago: executing program 6 (id=2213): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYRES64=r0], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x4c}}, 0x0) socket(0x10, 0x3, 0x4) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xfd7f) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r7 = socket(0x10, 0x2, 0x4) syz_usb_disconnect(0xffffffffffffffff) add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0xc0085508, 0x0) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r8 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000400)='})\x00', 0x0) recvmmsg(r7, &(0x7f00000081c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2}, 0xfffffffc}, {{0x0, 0x0, &(0x7f0000000f80)=[{0x0}, {&(0x7f0000000c80)=""/132, 0x84}], 0x2, &(0x7f0000000fc0)=""/10, 0xa}, 0x1}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x2, &(0x7f00000001c0)={0x77359400}) timer_create(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2000000000000246, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffcb9}, {0x2, 0x6, 0x6, 0x8}, {0x3, 0x8, 0x8, 0x480}, {0x6, 0x0, 0x4, 0x1}, {0x6, 0x5, 0x8, 0x3}, {0x3, 0x1, 0x94, 0x1}]}) 8.001543719s ago: executing program 6 (id=2217): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r1 = openat$audio(0xffffff9c, &(0x7f0000000140), 0xa0200, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000100)='hpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='source', &(0x7f0000000080)='//', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_addrs=@hci={0x1f, 0x0, 0x7}}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000000)=0x3, 0x4) fcntl$lock(r5, 0x7, &(0x7f0000000100)={0x0, 0x1, 0x2000000000008004, 0xffffffff}) syz_emit_ethernet(0x30e, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/746], 0x0) 7.56798713s ago: executing program 6 (id=2218): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x18, 0x54, 0x1e5, 0x70bd2a, 0xffffffff, {0x7, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0) unshare(0x28040600) fchown(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x80401, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000001980)=ANY=[@ANYBLOB="241200002f00080027bd7000fbdbdf250400000008000800", @ANYRES32=0x0, @ANYBLOB="e300408014fbd452f274d1ecfba10fbb950a4618693c9cdb64e95cfc7eb667e484b694e8a51d5b925bd33dd5c2ce45b0f1acaa47677463345cd42ab287f726ec320f51521923bc5a7c1e7c221ae15b4276c6149c1e2d5e9467eccb4b54bc7711a16ee6c98ba57621897702c282887b28fa60bfa5b6d63149bb079d1918c75d69a0618831edbcac653c0abf424dada4f69e684d26c441e66ec940175ce09b6c8b29086b8af7251b6be77b4cc69d45fff0c9109b5c2c9b29d90707409e656a2f0e149f5a08003400", @ANYRES32=r5, @ANYBLOB="08001f00", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x1224}, 0x1, 0x0, 0x0, 0x44000040}, 0x0) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x79a8, 0x4468, 0x1, 0x5000032f}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x4, 0x4, &(0x7f0000000600)=[{0x0}], 0x1, 0x12, 0x1}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) r11 = userfaultfd(0x1) r12 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8100) ioctl$SCSI_IOCTL_SEND_COMMAND(r12, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x8}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r11, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000600000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000, 0x3, 0x2}) 6.750216612s ago: executing program 5 (id=2220): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)={0x2, 'veth0_to_bridge\x00', {}, 0x1}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000280), 0x400480, 0x0) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000340), 0x4) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/116, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r3) poll(&(0x7f0000000180)=[{r3}], 0x1, 0x800) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000200)={0x1, r3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c00070c000000000000000007"], 0x34}}, 0x4000000) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x49, &(0x7f0000fcb000), 0x4) r5 = socket(0x15, 0x5, 0x0) connect$unix(r5, &(0x7f0000000080)=@abs={0xa}, 0x6e) getsockname$packet(r5, 0x0, &(0x7f0000000240)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000500)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/72, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) r6 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x3000}) io_uring_enter(r6, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) r7 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) sendmmsg$inet6(r7, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001400)='(8', 0x2}], 0x1}}], 0x1, 0x8004) 6.683273893s ago: executing program 2 (id=2221): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x1c2e, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r9, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000400)=ANY=[@ANYBLOB="080000000000000090000040", @ANYBLOB="b98b5aca7a"]) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x228, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@private1, @in=@private}, {@in6=@remote, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x10}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x120, 0x2, {{'cbc(aes)\x00'}, 0x6c0, "8a0600000038ffbf5d20d8d916efc639a90f111c37b78285501eae482a739e67e95b089042558af92682b981287758d8042c9bc0a0e29b3210771a8b786a09c2cf52823b517dc06475a0b70e4d77041f4192e81dcfe4ae9f0db0044f7d83182e5a3a05b375e23239be20e172d93b1889d480dea33e9e44e2ea4bb4be0d1efa193ee2b4d55b4d69183371eab956131861fe1a89aafab6e7f40e3a4fd40087f05b399f55d6cdfddafc3379302d92b2548c9f16de709596458c2342a08fe026c3c2f4eecfc9340ab551a6b585a2f009743ef6b6dcb5360d3100"}}, @replay_esn_val={0x1c}]}, 0x228}}, 0x0) sendmsg$tipc(r11, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="400917"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") read$char_usb(r13, 0x0, 0x17) 5.808700104s ago: executing program 5 (id=2227): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "d6"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x83, 0x2, "81f4"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000980)=ANY=[@ANYBLOB="201532"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f00000009c0)={0x40, 0x7, 0x2, "facd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000580)={0x40, 0x15, 0x2, "61f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000006c0)={0x40, 0x12, 0x2, "00a3"}, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x802c550a, &(0x7f0000000500)=@urb_type_control={0x2, {0x0, 0x1}, 0x6, 0x40, &(0x7f0000000000)={0x40, 0x11, 0xf801, 0x220}, 0x8, 0x8001, 0x0, 0x0, 0x1676ab34, 0xdffffff9, 0x0}) 4.391801274s ago: executing program 6 (id=2233): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x41, 0x91, 0xe3, 0x10, 0x17e9, 0xd52, 0x9b89, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd9, 0x0, 0x1, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x3, 0x3}}]}}]}}]}}, 0x0) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x1, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x3ee, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x7ff, 0x2, 0x1, 0x8000}, {0x3, 0x1, 0x3, 0x3e}]}}, @TCA_U32_LINK={0x8, 0x3, 0xffffffc7}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x0) r9 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r9, &(0x7f0000000400)={0x1d, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x8, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xed43, 0xf8, 0x1, 0x9, 0x155}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x5}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.496290479s ago: executing program 2 (id=2235): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x2a0242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) r1 = socket(0x10, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#Y?0W\xb3W\xd2\xbfP\xee', 0x0}, 0x30) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000440)={0x80, 0x14, 0xf00, 0x1, 0x0, 0x5, 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[], 0x2c}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r7 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES8=r2], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r7, r6) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) r9 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f0000000000)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f0000000280)={0x2, 0xfffffffa}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r9, 0x4020565b, &(0x7f00000001c0)={0x5, 0x0, 0x2}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x8, 0xc, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x0, 0x460c6}, 0x20, 0x7, 0x2}}) creat(&(0x7f0000000140)='./file0\x00', 0x40) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x2, 0x4) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x68e201, 0x0) preadv2(r10, &(0x7f0000000540), 0x0, 0x7, 0x0, 0x1) 3.481354705s ago: executing program 1 (id=2236): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) r1 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = socket(0x8, 0x4, 0x5) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="e90f610faca2050e000000020800450000240000e0000011907800000000000000000000000000109078a2f0ff0100000022"], 0x0) 3.179960435s ago: executing program 1 (id=2237): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27050200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f901", 0x39}, {&(0x7f0000003a00)="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", 0xf21}], 0x2}, 0x9cdc2384056b48b8) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) read$FUSE(r5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1420d, 0x4a260}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x44050) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, 0xa, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7111}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000c04) syz_open_dev$sndmidi(&(0x7f0000000280), 0x7, 0x200200) 3.098158359s ago: executing program 2 (id=2238): pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) 3.016648978s ago: executing program 1 (id=2239): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000480)={0xa, 0xfffe, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c) dup2(r0, r0) r1 = userfaultfd(0x80001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8000, 0x100000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x7}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, 0x0, 0xa8) sendmsg$NFT_BATCH(r2, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], 0x0, 0x0, 0x2) r8 = syz_open_dev$video4linux(&(0x7f0000000800), 0xfffd, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0xc040564a, &(0x7f0000000180)={0x0, 0x0, 0x2015, 0x0, 0x0, 0x3}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) 2.879920199s ago: executing program 2 (id=2240): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000b40)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000c00)={0x60, 0x2, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x9000)=nil, 0x6, &(0x7f0000000b80)=[{0x3, 0xcaa, 0xfffffffffffffffc}, {0x1, 0xe7d, 0x9}, {0x1, 0x9, 0x3}, {0x6, 0x0, 0x988d}, {0xbb30000000000000, 0x0, 0x8}], 0x5, 0x6, 0x20, 0x54, 0x20, 0x41}) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4, 0x100}, 0x8) sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000140)=0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7800, 0x10, 0x1, 0x9, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast1, @loopback}}}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ftruncate(r4, 0xc17a) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000004280)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x1, 0x2, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, 0xffffffffffffffff, 0x1c, 0x0, @val=@netfilter={0xa, 0x1, 0x1}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) lseek(r4, 0x2000, 0x4) 2.732375198s ago: executing program 6 (id=2241): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) unshare(0x4000600) r1 = socket$inet_udp(0x2, 0x2, 0x0) fgetxattr(r1, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f00000001c0)=""/78, 0x4e) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_pauseparam={0x12, 0x4, 0x8, 0xffffffff}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000080)=r5, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r10 = socket(0x2b, 0x6, 0x1) connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[], 0x70}}, 0x4004040) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="30000000100001080000", @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0xfff3, 0xfff3}, {0xfff1, 0x9}, {0xe, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 2.501667865s ago: executing program 4 (id=2242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0xf5ff, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x40010) 2.244044227s ago: executing program 4 (id=2243): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x40009, 0x0, 0xfffffe0000000001, 0xfa11, 0x3fcd}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xfffffffe) writev(r4, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)="4888", 0x2}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xf, 0x2, 0x25) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x14, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) 2.240256014s ago: executing program 6 (id=2253): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r5, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)={0x34, r4, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffd}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0xe, [@ext_channel_switch={0x1c, 0x4, {0xfc, 0x0, 0x38}}]}]}, 0x34}}, 0x10) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 2.119845946s ago: executing program 5 (id=2244): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x1, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) unshare(0x28040600) r2 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') fallocate(r2, 0x3, 0x1ff, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) iopl(0x9) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$alg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) recvmsg$can_raw(r4, &(0x7f0000000680)={0x0, 0xf00, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/34, 0x22}], 0x1}, 0xf0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000008000100090808004149004001040800", 0x58}], 0x1) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000006) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x8001af85, &(0x7f0000000a40)) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/power/pm_freeze_timeout', 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5000000000003ad0d6a200000000c00095"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x20000227, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x54) sendfile(r7, r7, 0x0, 0xe) pipe2(&(0x7f0000000040)={0x0, 0x0}, 0x0) 1.586848346s ago: executing program 1 (id=2245): dup(0xffffffffffffffff) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x6a0001, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000009c0), r3, 0x1}}, 0x18) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_gettime(0x6, &(0x7f0000000180)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000001380)) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x2, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x104) preadv(r4, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}, {&(0x7f0000000340)=""/54, 0x36}], 0x2, 0x5b, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = getpid() syz_pidfd_open(r7, 0x0) 1.123898445s ago: executing program 2 (id=2246): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000a00000000000000000000000000c40000002900000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) 794.981328ms ago: executing program 2 (id=2247): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x41, 0x91, 0xe3, 0x10, 0x17e9, 0xd52, 0x9b89, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd9, 0x0, 0x1, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x3, 0x3}}]}}]}}]}}, 0x0) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x1, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x3ee, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x7ff, 0x2, 0x1, 0x8000}, {0x3, 0x1, 0x3, 0x3e}]}}, @TCA_U32_LINK={0x8, 0x3, 0xffffffc7}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r8 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r8, &(0x7f0000000400)={0x1d, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xed43, 0xf8, 0x1, 0x9, 0x155}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x5}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 689.525306ms ago: executing program 5 (id=2248): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004043d54d00000000000001090224000100003000091600907f030000f4082100007af778c71669ccc4030000000000"], 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x33455aed6cbf4c1b) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x3}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x2, 0x8, 0x42}) fcntl$lock(r0, 0x7, &(0x7f0000000400)={0x2, 0x0, 0x7ffff, 0xb137}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x7, 0x1, 0x400}, 0x36, [0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x7db, 0xa, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x9f1, 0x0, 0x0, 0x4, 0x7, 0x0, 0x3, 0x9, 0x0, 0x4000000, 0x0, 0x0, 0x4, 0x1, 0x40000, 0xfffffffe, 0x0, 0x0, 0x8, 0x0, 0xffffffb, 0x6, 0x0, 0x58, 0x0, 0x9, 0x0, 0xffffbffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x6], [0x2, 0x1, 0x0, 0x10000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100, 0x0, 0x200000, 0x0, 0x40, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x8, 0x55], [0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x10001, 0x810, 0x0, 0x0, 0x0, 0x800040, 0x40000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0xffffffff, 0x5, 0x0, 0x1, 0x0, 0xc9d2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4000, 0x200000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x5, 0x2000003], [0x0, 0x3, 0x2, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80, 0xd, 0x0, 0x20, 0x80800, 0x0, 0x8f4, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3e3}, {&(0x7f00000003c0)="847839fc378469d5765bd74a8532b82037b02c9e", 0x14}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x500}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xbdd2d932e4d38f0c}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20010010) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) 624.184759ms ago: executing program 1 (id=2249): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x2a0242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) r1 = socket(0x10, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#Y?0W\xb3W\xd2\xbfP\xee', 0x0}, 0x30) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000440)={0x80, 0x14, 0xf00, 0x1, 0x0, 0x5, 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[], 0x2c}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r7 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES8=r2], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r7, r6) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) r9 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f0000000000)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f0000000280)={0x2, 0xfffffffa}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r9, 0x4020565b, &(0x7f00000001c0)={0x5, 0x0, 0x2}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x8, 0xc, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x0, 0x460c6}, 0x20, 0x7, 0x2}}) creat(&(0x7f0000000140)='./file0\x00', 0x40) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x2, 0x4) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x68e201, 0x0) preadv2(r10, &(0x7f0000000540), 0x0, 0x7, 0x0, 0x1) 609.058238ms ago: executing program 4 (id=2250): pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) 489.132649ms ago: executing program 4 (id=2251): r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9d6a}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x4000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000580)={0x0, @reserved}) 488.191044ms ago: executing program 1 (id=2252): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000002, 0xfa11, 0xffffffff}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000"/245], 0x119) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}], 0x1) 388.116813ms ago: executing program 4 (id=2254): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="dc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000002e40)="ed", 0x1}], 0x1}}], 0x2, 0x3404c891) (fail_nth: 16) 0s ago: executing program 4 (id=2255): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x6) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001a00), 0x2000, 0x0) fcntl$setstatus(r1, 0x4, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIONCLEX(r2, 0x5450) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000490001002abd7000fedbdf2510004000", @ANYRES32=0x0, @ANYBLOB="a1a6000014000100fc010000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) kernel console output (not intermixed with test programs): syz0] on syz0 [ 429.169059][T11912] sock: sock_set_timeout: `syz.4.1756' (pid 11912) tries to set negative timeout [ 429.232328][T11912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.249996][T11912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.796894][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 430.095593][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 430.117938][ T9] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 430.126289][ T9] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 430.140250][ T9] usb 1-1: config 0 has no interface number 0 [ 430.146859][ T9] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 430.159080][ T9] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 430.170886][ T9] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 430.200252][ T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 430.209904][ T9] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 430.219234][ T9] usb 1-1: Product: syz [ 430.243904][ T9] usb 1-1: config 0 descriptor?? [ 430.253095][T11917] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 430.483822][ T812] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 430.496132][ T812] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 431.196491][ T9] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input23 [ 431.469133][ T9] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 431.627927][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.639952][ T9] usb 6-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.684207][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 431.705443][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=e14f, bcdDevice= 0.00 [ 431.731617][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.757474][ T9] usb 6-1: config 0 descriptor?? [ 431.788199][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 431.995411][ T5889] usb 6-1: USB disconnect, device number 5 [ 433.041426][ T5889] usb 1-1: USB disconnect, device number 60 [ 433.041532][ C0] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 433.276153][T11976] binder: 11971:11976 ioctl 4018620d 0 returned -22 [ 433.286823][T11976] binder: 11971:11976 ioctl c0306201 80000080 returned -14 [ 433.324604][ T9] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 433.505412][ T5918] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 433.531881][ T9] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3 [ 433.560926][ T9] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 433.588645][ T9] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 433.613568][ T9] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 433.624282][ T9] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 433.667760][ T812] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 433.678716][ T5918] usb 6-1: Using ep0 maxpacket: 16 [ 433.694304][ T5918] usb 6-1: config 0 has an invalid interface number: 217 but max is 0 [ 433.711522][ T5918] usb 6-1: config 0 has no interface number 0 [ 433.737673][ T5918] usb 6-1: config 0 interface 217 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 433.758953][ T9] usb 2-1: Manufacturer: syz [ 433.845347][ T812] usb 1-1: Using ep0 maxpacket: 16 [ 433.872901][T11967] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 433.918501][ T5918] usb 6-1: config 0 interface 217 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 433.936276][ T812] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.975773][ T5918] usb 6-1: New USB device found, idVendor=17e9, idProduct=0d52, bcdDevice=9b.89 [ 433.988012][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.998314][ T812] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 434.145460][ T5918] usb 6-1: Product: syz [ 434.156562][ T9] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 434.166864][ T5918] usb 6-1: Manufacturer: syz [ 434.171850][ T812] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 434.767189][ T5918] usb 6-1: SerialNumber: syz [ 434.792887][ T812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.804750][ T9] usb 2-1: USB disconnect, device number 81 [ 434.846646][ T5918] usb 6-1: config 0 descriptor?? [ 434.888674][ T812] usb 1-1: Product: syz [ 434.904772][ T812] usb 1-1: Manufacturer: syz [ 434.922472][ T812] usb 1-1: SerialNumber: syz [ 435.106802][T11974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.165810][T11974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.293868][ T5825] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 435.855770][ T5918] udl 6-1:0.217: [drm] Unrecognized vendor firmware descriptor [ 435.856586][ T5825] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz0] on syz0 [ 435.874293][ T5918] [drm:udl_init] *ERROR* Selecting channel failed [ 435.934951][ T5918] [drm] Initialized udl 0.0.1 for 6-1:0.217 on minor 2 [ 435.964810][ T5918] [drm] Initialized udl on minor 2 [ 435.974990][ T5918] udl 6-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 436.040159][ T5918] udl 6-1:0.217: [drm] Cannot find any crtc or sizes [ 436.047561][ T9] udl 6-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 436.131887][ T9] udl 6-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 436.151040][T12001] fido_id[12001]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 436.171189][ T5918] usb 6-1: USB disconnect, device number 6 [ 436.185863][ T9] udl 6-1:0.217: [drm] Cannot find any crtc or sizes [ 436.662109][ T5910] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 436.908880][ T5910] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz0] on syz0 [ 437.502185][T12012] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1786'. [ 437.524454][T12015] raw_sendmsg: syz.1.1787 forgot to set AF_INET. Fix it! [ 437.858337][T12027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.926539][T12027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.273471][T12040] usb usb8: usbfs: process 12040 (syz.2.1789) did not claim interface 0 before use [ 438.343977][ T5910] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 438.358446][ T5910] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz0] on syz0 [ 438.386667][ T812] usb 1-1: 0:2 : does not exist [ 438.435297][ T812] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 438.573560][ T812] usb 1-1: USB disconnect, device number 61 [ 439.215833][T12046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.256099][T12046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.283187][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.395147][T12046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.505915][T12046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.671360][T12050] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1796'. [ 439.933370][T12055] fuse: blksize only supported for fuseblk [ 439.990179][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.996788][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.309582][ T812] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 440.491816][ T812] usb 1-1: config 217 has an invalid interface number: 107 but max is 0 [ 440.505382][ T812] usb 1-1: config 217 has no interface number 0 [ 440.520000][ T812] usb 1-1: config 217 interface 107 altsetting 4 endpoint 0x8 has invalid wMaxPacketSize 0 [ 440.542695][ T812] usb 1-1: config 217 interface 107 altsetting 4 endpoint 0x6 has invalid maxpacket 64, setting to 8 [ 440.575654][ T812] usb 1-1: config 217 interface 107 has no altsetting 0 [ 440.675100][T12078] FAULT_INJECTION: forcing a failure. [ 440.675100][T12078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.745838][T12078] CPU: 0 UID: 0 PID: 12078 Comm: syz.4.1806 Not tainted syzkaller #0 PREEMPT(full) [ 440.745863][T12078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 440.745875][T12078] Call Trace: [ 440.745883][T12078] [ 440.745892][T12078] dump_stack_lvl+0x189/0x250 [ 440.745916][T12078] ? __pfx____ratelimit+0x10/0x10 [ 440.745943][T12078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.745961][T12078] ? __pfx__printk+0x10/0x10 [ 440.745992][T12078] should_fail_ex+0x414/0x560 [ 440.746024][T12078] _copy_to_user+0x31/0xb0 [ 440.746049][T12078] msr_io+0x4dc/0x570 [ 440.746077][T12078] ? __pfx_do_get_msr+0x10/0x10 [ 440.746102][T12078] ? __pfx_msr_io+0x10/0x10 [ 440.746134][T12078] kvm_arch_vcpu_ioctl+0x11ee/0x2b40 [ 440.746156][T12078] ? __lock_acquire+0xab9/0xd20 [ 440.746178][T12078] ? kvm_arch_vcpu_ioctl+0x11b1/0x2b40 [ 440.746205][T12078] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 440.746233][T12078] ? __lock_acquire+0xab9/0xd20 [ 440.746267][T12078] ? __lock_acquire+0xab9/0xd20 [ 440.746315][T12078] ? is_bpf_text_address+0x26/0x2b0 [ 440.746343][T12078] ? is_bpf_text_address+0x292/0x2b0 [ 440.746365][T12078] ? is_bpf_text_address+0x26/0x2b0 [ 440.746391][T12078] ? kernel_text_address+0xa5/0xe0 [ 440.746412][T12078] ? __kernel_text_address+0xd/0x40 [ 440.746431][T12078] ? unwind_get_return_address+0x4d/0x90 [ 440.746456][T12078] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 440.746475][T12078] ? arch_stack_walk+0xfc/0x150 [ 440.746521][T12078] ? __lock_acquire+0xab9/0xd20 [ 440.746550][T12078] ? __mutex_trylock_common+0x153/0x260 [ 440.746579][T12078] ? __pfx___mutex_trylock_common+0x10/0x10 [ 440.746602][T12078] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 440.746627][T12078] ? rcu_is_watching+0x15/0xb0 [ 440.746650][T12078] ? trace_contention_end+0x39/0x120 [ 440.746675][T12078] ? __mutex_lock+0x335/0x1350 [ 440.746706][T12078] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 440.746730][T12078] ? __pfx___mutex_lock+0x10/0x10 [ 440.746753][T12078] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.746772][T12078] kvm_vcpu_ioctl+0x74d/0xe90 [ 440.746786][T12078] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 440.746796][T12078] ? do_vfs_ioctl+0xbe8/0x1430 [ 440.746807][T12078] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 440.746825][T12078] ? __lock_acquire+0xab9/0xd20 [ 440.746846][T12078] kvm_vcpu_compat_ioctl+0x203/0x390 [ 440.746859][T12078] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 440.746870][T12078] ? __fget_files+0x3a0/0x420 [ 440.746882][T12078] ? __fget_files+0x2a/0x420 [ 440.746895][T12078] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 440.746911][T12078] __ia32_compat_sys_ioctl+0x543/0x840 [ 440.746923][T12078] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 440.746933][T12078] ? __fget_files+0x3a0/0x420 [ 440.746948][T12078] ? fput+0xa0/0xd0 [ 440.746962][T12078] ? ksys_write+0x22a/0x250 [ 440.746971][T12078] ? exc_page_fault+0x82/0x100 [ 440.746982][T12078] ? __pfx_ksys_write+0x10/0x10 [ 440.746994][T12078] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 440.747005][T12078] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.747017][T12078] __do_fast_syscall_32+0xb6/0x2b0 [ 440.747028][T12078] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.747040][T12078] do_fast_syscall_32+0x34/0x80 [ 440.747051][T12078] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 440.747062][T12078] RIP: 0023:0xf7ff3539 [ 440.747073][T12078] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 440.747082][T12078] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 440.747094][T12078] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c008ae88 [ 440.747101][T12078] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 440.747108][T12078] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 440.747113][T12078] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 440.747119][T12078] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 440.747135][T12078] [ 441.933966][T12093] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1811'. [ 442.440304][ T9] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 442.487625][ T9] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz0] on syz0 [ 442.883274][ T812] usb 1-1: New USB device found, idVendor=05da, idProduct=1018, bcdDevice=73.68 [ 443.025378][ T5825] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 443.053497][ T812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.084280][ T812] usb 1-1: can't set config #217, error -71 [ 443.106264][ T812] usb 1-1: USB disconnect, device number 62 [ 443.196262][ T5825] usb 6-1: Using ep0 maxpacket: 16 [ 443.225709][ T5825] usb 6-1: config 0 has an invalid interface number: 217 but max is 0 [ 443.234957][ T5825] usb 6-1: config 0 has no interface number 0 [ 443.244226][ T5825] usb 6-1: config 0 interface 217 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 443.265952][ T5825] usb 6-1: config 0 interface 217 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 443.326115][ T5825] usb 6-1: New USB device found, idVendor=17e9, idProduct=0d52, bcdDevice=9b.89 [ 443.380557][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.400994][ T5825] usb 6-1: Product: syz [ 443.405197][ T5825] usb 6-1: Manufacturer: syz [ 443.424888][ T5825] usb 6-1: SerialNumber: syz [ 443.469545][ T5825] usb 6-1: config 0 descriptor?? [ 443.497349][ T812] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 443.540442][T12115] FAULT_INJECTION: forcing a failure. [ 443.540442][T12115] name failslab, interval 1, probability 0, space 0, times 0 [ 443.553358][T12115] CPU: 0 UID: 0 PID: 12115 Comm: syz.2.1819 Not tainted syzkaller #0 PREEMPT(full) [ 443.553383][T12115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 443.553395][T12115] Call Trace: [ 443.553403][T12115] [ 443.553410][T12115] dump_stack_lvl+0x189/0x250 [ 443.553434][T12115] ? __pfx____ratelimit+0x10/0x10 [ 443.553463][T12115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.553483][T12115] ? __pfx__printk+0x10/0x10 [ 443.553508][T12115] ? __pfx___might_resched+0x10/0x10 [ 443.553531][T12115] ? fs_reclaim_acquire+0x7d/0x100 [ 443.553557][T12115] should_fail_ex+0x414/0x560 [ 443.553589][T12115] should_failslab+0xa8/0x100 [ 443.553615][T12115] __kmalloc_noprof+0xcb/0x7f0 [ 443.553635][T12115] ? tomoyo_encode+0x28b/0x550 [ 443.553661][T12115] tomoyo_encode+0x28b/0x550 [ 443.553689][T12115] tomoyo_realpath_from_path+0x58d/0x5d0 [ 443.553720][T12115] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 443.553748][T12115] tomoyo_path_number_perm+0x1e8/0x5a0 [ 443.553778][T12115] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 443.553822][T12115] ? __lock_acquire+0xab9/0xd20 [ 443.553863][T12115] ? __fget_files+0x2a/0x420 [ 443.553891][T12115] ? __fget_files+0x3a0/0x420 [ 443.553912][T12115] ? __fget_files+0x2a/0x420 [ 443.553937][T12115] security_file_ioctl_compat+0xcb/0x2d0 [ 443.553966][T12115] __ia32_compat_sys_ioctl+0x128/0x840 [ 443.553989][T12115] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 443.554009][T12115] ? __fget_files+0x3a0/0x420 [ 443.554035][T12115] ? fput+0xa0/0xd0 [ 443.554058][T12115] ? ksys_write+0x22a/0x250 [ 443.554075][T12115] ? exc_page_fault+0x82/0x100 [ 443.554094][T12115] ? __pfx_ksys_write+0x10/0x10 [ 443.554117][T12115] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 443.554138][T12115] ? lockdep_hardirqs_on+0x9c/0x150 [ 443.554160][T12115] __do_fast_syscall_32+0xb6/0x2b0 [ 443.554181][T12115] ? lockdep_hardirqs_on+0x9c/0x150 [ 443.554211][T12115] do_fast_syscall_32+0x34/0x80 [ 443.554231][T12115] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 443.554254][T12115] RIP: 0023:0xf7f64539 [ 443.554271][T12115] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 443.554287][T12115] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 443.554308][T12115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0cc5605 [ 443.554321][T12115] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 443.554333][T12115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 443.554346][T12115] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 443.554358][T12115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 443.554387][T12115] [ 443.554408][T12115] ERROR: Out of memory at tomoyo_realpath_from_path. [ 443.782909][T12103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.892902][ T812] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 443.893196][T12103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.909335][ T812] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.919753][ T10] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 443.935335][ T812] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 443.972055][ T812] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.002658][ T812] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.036549][ T812] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.047330][ T812] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.058406][ T812] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.073353][ T812] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.082373][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 444.094084][ T10] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 444.102595][ T812] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.117344][ T10] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 444.125835][ T812] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.144129][ T10] usb 2-1: config 0 has no interface number 0 [ 444.151251][ T10] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 444.171156][ T812] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.181831][ T812] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.191502][ T10] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 444.222399][ T10] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 444.236955][ T812] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.247669][ T812] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.259511][ T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 444.267650][T12125] IPVS: sh: FWM 3 0x00000003 - no destination available [ 444.275670][ T812] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.287542][ T10] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 444.295881][ T812] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.304992][ T10] usb 2-1: Product: syz [ 444.314828][ T812] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 444.319329][ T5825] udl 6-1:0.217: [drm] Unrecognized vendor firmware descriptor [ 444.328160][ T812] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 444.342995][ T10] usb 2-1: config 0 descriptor?? [ 444.349140][ T812] usb 1-1: Product: syz [ 444.353989][T12107] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 444.363997][ T812] usb 1-1: Manufacturer: syz [ 444.369124][ T812] usb 1-1: SerialNumber: syz [ 444.374781][ T5825] [drm:udl_init] *ERROR* Selecting channel failed [ 444.408079][ T812] usb 1-1: config 0 descriptor?? [ 444.416967][ T5825] [drm] Initialized udl 0.0.1 for 6-1:0.217 on minor 2 [ 444.423859][ T5825] [drm] Initialized udl on minor 2 [ 444.426299][ T812] yurex 1-1:0.0: Could not find endpoints [ 444.459885][ T5825] udl 6-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 444.471121][ T5825] udl 6-1:0.217: [drm] Cannot find any crtc or sizes [ 444.479623][ T5889] udl 6-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 444.492278][ T5889] udl 6-1:0.217: [drm] Cannot find any crtc or sizes [ 444.499389][ T5825] usb 6-1: USB disconnect, device number 7 [ 444.638131][ T5889] usb 1-1: USB disconnect, device number 63 [ 445.148242][ T10] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input24 [ 445.441422][T12142] bridge0: entered promiscuous mode [ 445.481215][T12142] macvlan2: entered promiscuous mode [ 446.110011][T12153] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1827'. [ 446.779490][ T5889] usb 2-1: USB disconnect, device number 82 [ 446.779581][ C0] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 446.871304][ T812] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 446.933951][ T812] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz0] on syz0 [ 446.968361][T12165] netlink: 'syz.1.1831': attribute type 30 has an invalid length. [ 447.554427][T12181] fido_id[12181]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 448.389950][T12189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.425931][T12189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.945436][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 450.745369][ T10] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 450.904723][ T10] usb 3-1: device descriptor read/64, error -71 [ 451.195432][ T10] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 451.345961][ T10] usb 3-1: device descriptor read/64, error -71 [ 451.415602][ T812] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 451.484345][T12246] netlink: 'syz.5.1856': attribute type 4 has an invalid length. [ 451.619393][ T10] usb usb3-port1: attempt power cycle [ 451.775335][ T812] usb 2-1: Using ep0 maxpacket: 16 [ 451.783635][ T812] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 451.793092][ T812] usb 2-1: config 0 has no interface number 0 [ 451.818181][ T812] usb 2-1: config 0 interface 217 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 451.835055][ T812] usb 2-1: config 0 interface 217 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 451.872585][ T812] usb 2-1: New USB device found, idVendor=17e9, idProduct=0d52, bcdDevice=9b.89 [ 451.885641][ T812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.894370][ T812] usb 2-1: Product: syz [ 451.905238][ T812] usb 2-1: Manufacturer: syz [ 451.918109][ T812] usb 2-1: SerialNumber: syz [ 451.940650][ T812] usb 2-1: config 0 descriptor?? [ 451.965359][ T10] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 451.988955][ T10] usb 3-1: device descriptor read/8, error -71 [ 452.192869][T12237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.221101][T12237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.235387][ T10] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 452.256163][ T10] usb 3-1: device descriptor read/8, error -71 [ 452.270548][ T812] udl 2-1:0.217: [drm] Unrecognized vendor firmware descriptor [ 452.418845][ T10] usb usb3-port1: unable to enumerate USB device [ 452.454786][ T812] [drm:udl_init] *ERROR* Selecting channel failed [ 452.507604][ T812] [drm] Initialized udl 0.0.1 for 2-1:0.217 on minor 2 [ 452.522239][ T812] [drm] Initialized udl on minor 2 [ 452.530404][ T812] udl 2-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 452.539379][ T812] udl 2-1:0.217: [drm] Cannot find any crtc or sizes [ 452.547625][ T10] udl 2-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 452.555930][ T10] udl 2-1:0.217: [drm] Cannot find any crtc or sizes [ 452.570143][ T812] usb 2-1: USB disconnect, device number 83 [ 452.607463][T12254] syz_tun: entered allmulticast mode [ 452.855455][ T5889] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 452.923852][T12268] netlink: 'syz.1.1865': attribute type 15 has an invalid length. [ 452.949847][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 452.949863][ T30] audit: type=1326 audit(1760889529.265:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 452.984653][ T30] audit: type=1326 audit(1760889529.295:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 453.009547][ T30] audit: type=1326 audit(1760889529.295:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 453.036177][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 453.042700][ T30] audit: type=1326 audit(1760889529.295:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 453.066774][ T5889] usb 6-1: config 0 has an invalid interface number: 83 but max is 0 [ 453.075070][ T5889] usb 6-1: config 0 has no interface number 0 [ 453.083215][ T30] audit: type=1326 audit(1760889529.295:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=307 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 453.111347][ T30] audit: type=1326 audit(1760889529.295:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 453.148270][ T5889] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 453.165375][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.174367][ T5889] usb 6-1: Product: syz [ 453.181221][ T5889] usb 6-1: Manufacturer: syz [ 453.186274][ T30] audit: type=1326 audit(1760889529.295:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 453.209831][ T5889] usb 6-1: SerialNumber: syz [ 453.221116][ T5889] usb 6-1: config 0 descriptor?? [ 453.231724][ T5889] redrat3 6-1:0.83: Couldn't find all endpoints [ 453.443618][T12283] netlink: 'syz.0.1869': attribute type 4 has an invalid length. [ 453.494449][T12254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.513797][T12254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.548388][T12272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.583984][T12272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.620900][T12272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.688125][T12272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.246489][T12254] syz_tun: left allmulticast mode [ 455.260164][T12300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.286153][T12300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.310592][T12300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.321331][T12300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.332966][ T5825] usb 6-1: USB disconnect, device number 8 [ 455.450217][T12292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1872'. [ 456.449308][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1880'. [ 456.655346][ T5889] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 456.807844][ T5889] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.823301][ T5889] usb 6-1: config 0 interface 0 has no altsetting 0 [ 456.845720][ T5889] usb 6-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 456.854791][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.868471][ T5889] usb 6-1: config 0 descriptor?? [ 456.901522][T12326] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 456.908064][T12326] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 456.932994][T12326] vhci_hcd vhci_hcd.0: Device attached [ 456.957227][T12326] netdevsim netdevsim4: Direct firmware load for nel/address_bits failed with error -2 [ 456.974392][T12326] netdevsim netdevsim4: Falling back to sysfs fallback for: nel/address_bits [ 457.175931][ T5825] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 457.429445][ T5889] hid-u2fzero 0003:20A0:4287.0035: hidraw0: USB HID v0.00 Device [HID 20a0:4287] on usb-dummy_hcd.5-1/input0 [ 457.468457][ T5889] hid-u2fzero 0003:20A0:4287.0035: NitroKey U2F LED initialised [ 457.512575][ T5889] hid-u2fzero 0003:20A0:4287.0035: NitroKey U2F RNG initialised [ 457.623217][T12317] program syz.5.1879 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 457.650120][T12317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.663330][T12317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.734177][ T10] usb 6-1: USB disconnect, device number 9 [ 457.755018][T12338] fido_id[12338]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 458.376677][T12359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1893'. [ 458.421856][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1893'. [ 459.195433][ T5910] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 459.469772][ T30] audit: type=1326 audit(1760889535.775:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12375 comm="syz.4.1900" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x0 [ 459.645563][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 459.652367][ T5910] usb 1-1: config 0 has no interfaces? [ 459.712228][T12386] netlink: 'syz.2.1901': attribute type 10 has an invalid length. [ 459.729588][T12386] team0: Port device dummy0 added [ 459.739835][T12386] netlink: 'syz.2.1901': attribute type 10 has an invalid length. [ 459.768693][T12386] team0: Failed to send options change via netlink (err -105) [ 459.777177][ T5910] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 459.786721][T12386] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 459.805351][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.816692][T12386] team0: Port device dummy0 removed [ 459.850653][T12386] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 459.877721][ T5910] usb 1-1: config 0 descriptor?? [ 459.912090][ T10] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 460.125042][T12377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.138690][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 460.148670][ T10] usb 2-1: config 0 has an invalid interface number: 205 but max is 1 [ 460.175588][ T5918] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 460.193376][ T10] usb 2-1: config 0 has no interface number 1 [ 460.193942][T12377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.205353][ T10] usb 2-1: config 0 interface 205 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 460.361255][ T10] usb 2-1: New USB device found, idVendor=413c, idProduct=8180, bcdDevice=25.25 [ 460.372187][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.380804][ T10] usb 2-1: Product: syz [ 460.386649][ T10] usb 2-1: Manufacturer: syz [ 460.397403][ T10] usb 2-1: SerialNumber: syz [ 460.418997][ T10] usb 2-1: config 0 descriptor?? [ 460.438194][ T10] option 2-1:0.205: GSM modem (1-port) converter detected [ 460.509453][ T5918] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 460.537888][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.595657][ T5918] usb 3-1: config 0 descriptor?? [ 460.651601][ T5918] pwc: Creative Labs Webcam Pro Ex detected. [ 460.672645][ T10] usb 2-1: USB disconnect, device number 84 [ 460.690492][ T10] option 2-1:0.205: device disconnected [ 462.119871][ T5910] usb 1-1: USB disconnect, device number 64 [ 462.646583][ T5918] pwc: Failed to set LED on/off time (-71) [ 462.673173][ T5918] pwc: send_video_command error -71 [ 462.692523][ T5918] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 462.723067][ T5918] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 462.778578][ T5918] usb 3-1: USB disconnect, device number 82 [ 463.155721][ T5918] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 463.331246][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.456022][ T5918] usb 3-1: config 0 has no interfaces? [ 463.514162][ T5918] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 463.681663][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.692170][ T5918] usb 3-1: Product: syz [ 463.705145][ T5918] usb 3-1: Manufacturer: syz [ 463.714241][ T5918] usb 3-1: SerialNumber: syz [ 463.845636][ T5918] usb 3-1: config 0 descriptor?? [ 464.087730][ T5910] usb 3-1: USB disconnect, device number 83 [ 465.555396][ T5918] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 466.145617][ T5918] usb 3-1: config 0 has no interfaces? [ 466.219627][ T5918] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 466.322002][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.358058][ T5918] usb 3-1: config 0 descriptor?? [ 466.583383][T12450] netlink: 'syz.2.1920': attribute type 10 has an invalid length. [ 466.677468][T12450] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 466.733177][ T5945] usb 3-1: USB disconnect, device number 84 [ 467.316586][T12485] netlink: 'syz.1.1930': attribute type 3 has an invalid length. [ 469.115348][ T5945] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 469.265755][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 469.275073][ T5945] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 469.300738][ T5945] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.338027][ T5945] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 470.110692][ T5918] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 470.165752][ T5945] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 470.174936][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.305614][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 470.313106][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 470.346144][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 470.357604][ T5945] usb 3-1: Product: syz [ 470.363098][ T5945] usb 3-1: Manufacturer: 꾝홦ꋳ榦ᄍ䵠㻮蹰噿喣錬途嫔踝샞ⲙ㖭꾑⛃큌惍竸榅㢮嗛⹿Ѭ✟蒉⽹ߺ㚁씨ᒶ䯈ᦒ㢆羮똴Ⴛꥨᕒ-눨蠽齔ﲬ脆뉻뇨䳩声쉩씆䲾ᯐ᧲⿾쮧꯮꩚ꖈ覷ꔝ融♫﶐㩯䓧㛴ٯ쒀攉嗔悻⍘㗋锷Ẃ [ 470.422237][ T5918] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 470.443597][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.480860][ T5918] usb 1-1: config 0 descriptor?? [ 470.529942][ T5918] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 470.555317][ T5945] usb 3-1: SerialNumber: syz [ 470.601983][T12539] kAFS: unable to lookup cell '/,' [ 470.736785][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1948'. [ 470.858591][ T5945] usb 3-1: 0:2 : does not exist [ 470.907169][ T5945] usb 3-1: USB disconnect, device number 85 [ 470.920380][T12545] Invalid logical block size (55998) [ 471.047740][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 471.432211][T12532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.527839][T12532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.986715][ T5918] usb 1-1: USB disconnect, device number 65 [ 473.080155][T12567] FAULT_INJECTION: forcing a failure. [ 473.080155][T12567] name failslab, interval 1, probability 0, space 0, times 0 [ 473.137512][T12567] CPU: 0 UID: 0 PID: 12567 Comm: syz.0.1953 Not tainted syzkaller #0 PREEMPT(full) [ 473.137528][T12567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 473.137535][T12567] Call Trace: [ 473.137540][T12567] [ 473.137546][T12567] dump_stack_lvl+0x189/0x250 [ 473.137563][T12567] ? __pfx____ratelimit+0x10/0x10 [ 473.137579][T12567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.137590][T12567] ? __pfx__printk+0x10/0x10 [ 473.137603][T12567] ? __pfx___might_resched+0x10/0x10 [ 473.137619][T12567] should_fail_ex+0x414/0x560 [ 473.137638][T12567] should_failslab+0xa8/0x100 [ 473.137652][T12567] __kmalloc_noprof+0xcb/0x7f0 [ 473.137663][T12567] ? sock_kmalloc+0xd6/0x160 [ 473.137677][T12567] sock_kmalloc+0xd6/0x160 [ 473.137688][T12567] ? __pfx_rng_accept_parent+0x10/0x10 [ 473.137698][T12567] rng_accept_parent+0x2a/0x130 [ 473.137710][T12567] ? __pfx_rng_accept_parent+0x10/0x10 [ 473.137719][T12567] af_alg_accept+0x177/0x520 [ 473.137736][T12567] do_accept+0x48f/0x680 [ 473.137753][T12567] ? __pfx_do_accept+0x10/0x10 [ 473.137777][T12567] io_accept+0x307/0x790 [ 473.137799][T12567] ? __pfx_io_accept+0x10/0x10 [ 473.137813][T12567] ? __fget_files+0x2a/0x420 [ 473.137824][T12567] ? __fget_files+0x3a0/0x420 [ 473.137837][T12567] __io_issue_sqe+0x181/0x4b0 [ 473.137848][T12567] ? io_file_get_normal+0x101/0x2f0 [ 473.137859][T12567] io_issue_sqe+0x165/0x1060 [ 473.137874][T12567] io_submit_sqes+0xa54/0x1e60 [ 473.137900][T12567] __se_sys_io_uring_enter+0x2df/0x2b20 [ 473.137921][T12567] ? ksys_write+0x1cb/0x250 [ 473.137933][T12567] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 473.137943][T12567] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 473.137954][T12567] ? __pfx_vfs_write+0x10/0x10 [ 473.137966][T12567] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 473.137979][T12567] ? __fget_files+0x3a0/0x420 [ 473.137994][T12567] ? fput+0xa0/0xd0 [ 473.138007][T12567] ? ksys_write+0x22a/0x250 [ 473.138017][T12567] ? exc_page_fault+0x82/0x100 [ 473.138027][T12567] ? __pfx_ksys_write+0x10/0x10 [ 473.138039][T12567] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 473.138051][T12567] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 473.138063][T12567] __do_fast_syscall_32+0xb6/0x2b0 [ 473.138075][T12567] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.138087][T12567] do_fast_syscall_32+0x34/0x80 [ 473.138097][T12567] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 473.138115][T12567] RIP: 0023:0xf7ff3539 [ 473.138126][T12567] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 473.138135][T12567] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 473.138147][T12567] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000003516 [ 473.138154][T12567] RDX: 0000000000003e44 RSI: 0000000000000008 RDI: 0000000000000000 [ 473.138160][T12567] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 473.138165][T12567] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 473.138171][T12567] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 473.138187][T12567] [ 473.686539][T12563] pim6reg: entered allmulticast mode [ 473.733523][T12563] pim6reg: left allmulticast mode [ 473.743139][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1955'. [ 473.806133][T12564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1952'. [ 473.861304][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1952'. [ 474.235388][ T10] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 474.405335][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 474.449376][ T10] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 474.587738][ T10] usb 2-1: config 0 has no interface number 0 [ 474.667577][ T10] usb 2-1: config 0 interface 217 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 474.684338][ T10] usb 2-1: config 0 interface 217 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 474.702104][ T10] usb 2-1: New USB device found, idVendor=17e9, idProduct=0d52, bcdDevice=9b.89 [ 474.721644][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.746521][ T10] usb 2-1: Product: syz [ 474.754222][ T10] usb 2-1: Manufacturer: syz [ 474.770907][ T10] usb 2-1: SerialNumber: syz [ 474.786324][ T10] usb 2-1: config 0 descriptor?? [ 474.998929][T12574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.013635][T12574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.111086][ T10] udl 2-1:0.217: [drm] Unrecognized vendor firmware descriptor [ 475.119158][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 475.131115][ T10] [drm] Initialized udl 0.0.1 for 2-1:0.217 on minor 2 [ 475.141439][ T10] [drm] Initialized udl on minor 2 [ 475.190549][ T10] udl 2-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 475.326206][T12593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.334963][T12593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.364592][ T10] udl 2-1:0.217: [drm] Cannot find any crtc or sizes [ 475.384501][ T5918] udl 2-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 475.404640][ T5918] udl 2-1:0.217: [drm] Cannot find any crtc or sizes [ 475.411729][ T10] usb 2-1: USB disconnect, device number 85 [ 475.577631][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1963'. [ 476.125200][T12610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1969'. [ 476.136676][T12610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1969'. [ 476.232134][T12610] team0: entered promiscuous mode [ 476.263140][T12610] bond0: entered promiscuous mode [ 476.268476][T12610] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 476.280837][T12610] debugfs: 'hsr1' already exists in 'hsr' [ 476.290493][T12610] Cannot create hsr debugfs directory [ 476.296843][T12610] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 476.307364][T12610] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 476.321094][T12610] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 476.640455][T12617] syz.5.1970 (12617): drop_caches: 2 [ 476.687089][T12617] syz.5.1970 (12617): drop_caches: 2 [ 476.903676][T12609] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 478.104743][T12646] netlink: 'syz.5.1977': attribute type 1 has an invalid length. [ 478.143849][T12646] netlink: 236 bytes leftover after parsing attributes in process `syz.5.1977'. [ 478.226622][T11410] Bluetooth: hci1: command 0x0405 tx timeout [ 478.336627][ T10] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 478.537787][ T5910] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 478.575362][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 478.586756][ T10] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 478.597023][ T10] usb 2-1: config 0 has no interface number 0 [ 478.603777][ T10] usb 2-1: config 0 interface 217 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 478.615722][ T10] usb 2-1: config 0 interface 217 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 478.639997][ T10] usb 2-1: New USB device found, idVendor=17e9, idProduct=0d52, bcdDevice=9b.89 [ 478.649993][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.665935][ T10] usb 2-1: Product: syz [ 478.679585][ T10] usb 2-1: Manufacturer: syz [ 478.696461][ T10] usb 2-1: SerialNumber: syz [ 478.744515][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 478.793655][ T10] usb 2-1: config 0 descriptor?? [ 478.882102][ T5910] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 478.905800][ T5910] usb 1-1: can't read configurations, error -61 [ 479.075659][T12644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.079826][ T5910] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 479.084506][T12644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.244481][ T10] udl 2-1:0.217: [drm] Unrecognized vendor firmware descriptor [ 479.252583][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 479.266260][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 479.310140][ T5910] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 479.324810][ T5910] usb 1-1: can't read configurations, error -61 [ 479.335141][ T5910] usb usb1-port1: attempt power cycle [ 479.378073][ T10] [drm] Initialized udl 0.0.1 for 2-1:0.217 on minor 2 [ 479.399181][ T10] [drm] Initialized udl on minor 2 [ 479.409092][ T10] udl 2-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 479.418032][ T10] udl 2-1:0.217: [drm] Cannot find any crtc or sizes [ 479.426433][ T5918] udl 2-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 479.434617][ T5918] udl 2-1:0.217: [drm] Cannot find any crtc or sizes [ 479.453695][ T10] usb 2-1: USB disconnect, device number 86 [ 479.684508][T12665] sch_tbf: burst 9 is lower than device lo mtu (65550) ! [ 479.787435][ T5910] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 479.839144][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 480.061590][T12674] batadv1: entered promiscuous mode [ 480.107983][T12675] netlink: 'syz.4.1985': attribute type 10 has an invalid length. [ 480.189551][ T5910] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 480.312293][ T5910] usb 1-1: can't read configurations, error -61 [ 480.322605][T12675] dummy0: entered promiscuous mode [ 480.346337][T12675] team0: Port device dummy0 added [ 480.668360][ T5910] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 480.885057][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 481.009327][ T5910] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 481.075401][ T5910] usb 1-1: can't read configurations, error -61 [ 481.105415][ T5910] usb usb1-port1: unable to enumerate USB device [ 481.276104][T12685] loop8: detected capacity change from 0 to 8 [ 481.306612][T12685] Dev loop8: unable to read RDB block 8 [ 481.312231][T12685] loop8: unable to read partition table [ 481.355565][T12685] loop8: partition table beyond EOD, truncated [ 481.377688][T12685] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 481.429487][T12642] delete_channel: no stack [ 481.570118][T12689] FAULT_INJECTION: forcing a failure. [ 481.570118][T12689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.635058][T12689] CPU: 1 UID: 0 PID: 12689 Comm: syz.1.1990 Not tainted syzkaller #0 PREEMPT(full) [ 481.635083][T12689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 481.635094][T12689] Call Trace: [ 481.635102][T12689] [ 481.635111][T12689] dump_stack_lvl+0x189/0x250 [ 481.635135][T12689] ? __pfx____ratelimit+0x10/0x10 [ 481.635161][T12689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.635181][T12689] ? __pfx__printk+0x10/0x10 [ 481.635200][T12689] ? __might_fault+0xb0/0x130 [ 481.635233][T12689] should_fail_ex+0x414/0x560 [ 481.635262][T12689] _copy_from_user+0x2d/0xb0 [ 481.635285][T12689] video_usercopy+0x346/0x1450 [ 481.635312][T12689] ? __pfx___video_do_ioctl+0x10/0x10 [ 481.635331][T12689] ? __pfx_video_usercopy+0x10/0x10 [ 481.635368][T12689] ? __fget_files+0x2a/0x420 [ 481.635392][T12689] v4l2_ioctl+0x18d/0x1e0 [ 481.635415][T12689] v4l2_compat_ioctl32+0x1d7/0x260 [ 481.635443][T12689] __ia32_compat_sys_ioctl+0x543/0x840 [ 481.635465][T12689] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 481.635484][T12689] ? __fget_files+0x3a0/0x420 [ 481.635518][T12689] ? fput+0xa0/0xd0 [ 481.635542][T12689] ? ksys_write+0x22a/0x250 [ 481.635560][T12689] ? exc_page_fault+0x82/0x100 [ 481.635579][T12689] ? __pfx_ksys_write+0x10/0x10 [ 481.635600][T12689] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 481.635621][T12689] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.635642][T12689] __do_fast_syscall_32+0xb6/0x2b0 [ 481.635663][T12689] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.635685][T12689] do_fast_syscall_32+0x34/0x80 [ 481.635705][T12689] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 481.635726][T12689] RIP: 0023:0xf700d539 [ 481.635743][T12689] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 481.635758][T12689] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 481.635778][T12689] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c050561a [ 481.635792][T12689] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 481.635803][T12689] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 481.635814][T12689] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 481.635825][T12689] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 481.635853][T12689] [ 482.575455][ T5910] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 482.760082][ T5910] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 482.771657][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.780139][ T5910] usb 3-1: Product: syz [ 482.789854][ T5910] usb 3-1: Manufacturer: syz [ 482.803313][ T5910] usb 3-1: SerialNumber: syz [ 482.846044][ T5910] usb 3-1: config 0 descriptor?? [ 483.087870][T12709] FAULT_INJECTION: forcing a failure. [ 483.087870][T12709] name failslab, interval 1, probability 0, space 0, times 0 [ 483.125559][T12709] CPU: 0 UID: 0 PID: 12709 Comm: syz.2.1996 Not tainted syzkaller #0 PREEMPT(full) [ 483.125576][T12709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 483.125583][T12709] Call Trace: [ 483.125588][T12709] [ 483.125593][T12709] dump_stack_lvl+0x189/0x250 [ 483.125609][T12709] ? __pfx____ratelimit+0x10/0x10 [ 483.125625][T12709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.125635][T12709] ? __pfx__printk+0x10/0x10 [ 483.125649][T12709] ? __pfx___might_resched+0x10/0x10 [ 483.125665][T12709] should_fail_ex+0x414/0x560 [ 483.125682][T12709] should_failslab+0xa8/0x100 [ 483.125697][T12709] __kmalloc_noprof+0xcb/0x7f0 [ 483.125707][T12709] ? kfree+0x4d/0x6d0 [ 483.125714][T12709] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 483.125730][T12709] tomoyo_realpath_from_path+0xe3/0x5d0 [ 483.125742][T12709] ? tomoyo_domain+0xd9/0x130 [ 483.125756][T12709] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 483.125772][T12709] tomoyo_path_number_perm+0x1e8/0x5a0 [ 483.125787][T12709] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 483.125811][T12709] ? __lock_acquire+0xab9/0xd20 [ 483.125833][T12709] ? __fget_files+0x2a/0x420 [ 483.125848][T12709] ? __fget_files+0x3a0/0x420 [ 483.125859][T12709] ? __fget_files+0x2a/0x420 [ 483.125872][T12709] security_file_ioctl_compat+0xcb/0x2d0 [ 483.125888][T12709] __ia32_compat_sys_ioctl+0x128/0x840 [ 483.125900][T12709] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 483.125910][T12709] ? __fget_files+0x3a0/0x420 [ 483.125924][T12709] ? fput+0xa0/0xd0 [ 483.125939][T12709] ? ksys_write+0x22a/0x250 [ 483.125950][T12709] ? __pfx_ksys_write+0x10/0x10 [ 483.125962][T12709] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 483.125974][T12709] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.125985][T12709] __do_fast_syscall_32+0xb6/0x2b0 [ 483.125997][T12709] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.126009][T12709] do_fast_syscall_32+0x34/0x80 [ 483.126020][T12709] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 483.126032][T12709] RIP: 0023:0xf7f64539 [ 483.126042][T12709] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 483.126051][T12709] RSP: 002b:00000000f543555c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 483.126062][T12709] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c0045520 [ 483.126069][T12709] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 483.126076][T12709] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 483.126081][T12709] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 483.126088][T12709] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 483.126103][T12709] [ 483.126108][T12709] ERROR: Out of memory at tomoyo_realpath_from_path. [ 483.776969][T12723] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2003'. [ 483.786149][T12723] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2003'. [ 483.795141][T12723] netlink: 'syz.1.2003': attribute type 3 has an invalid length. [ 483.803013][T12723] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2003'. [ 484.146054][T12728] netlink: 'syz.5.2004': attribute type 10 has an invalid length. [ 484.167166][T12728] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2004'. [ 484.177032][T12728] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 484.184428][T12728] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 484.197413][T12728] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 484.437010][T12733] : renamed from bond_slave_0 (while UP) [ 485.281574][ T5910] usb 3-1: USB disconnect, device number 86 [ 485.391795][T12754] FAULT_INJECTION: forcing a failure. [ 485.391795][T12754] name failslab, interval 1, probability 0, space 0, times 0 [ 485.405486][T12754] CPU: 1 UID: 0 PID: 12754 Comm: syz.2.2011 Not tainted syzkaller #0 PREEMPT(full) [ 485.405512][T12754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 485.405523][T12754] Call Trace: [ 485.405531][T12754] [ 485.405539][T12754] dump_stack_lvl+0x189/0x250 [ 485.405562][T12754] ? __pfx____ratelimit+0x10/0x10 [ 485.405590][T12754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.405610][T12754] ? __pfx__printk+0x10/0x10 [ 485.405634][T12754] ? __pfx___might_resched+0x10/0x10 [ 485.405656][T12754] ? fs_reclaim_acquire+0x7d/0x100 [ 485.405680][T12754] should_fail_ex+0x414/0x560 [ 485.405712][T12754] should_failslab+0xa8/0x100 [ 485.405737][T12754] __kmalloc_noprof+0xcb/0x7f0 [ 485.405753][T12754] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 485.405774][T12754] ? __local_bh_enable_ip+0x12d/0x1c0 [ 485.405803][T12754] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 485.405830][T12754] genl_family_rcv_msg_doit+0xb8/0x300 [ 485.405856][T12754] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 485.405882][T12754] ? apparmor_capable+0x137/0x1b0 [ 485.405904][T12754] ? bpf_lsm_capable+0x9/0x20 [ 485.405918][T12754] ? security_capable+0x7e/0x2e0 [ 485.405942][T12754] genl_rcv_msg+0x60e/0x790 [ 485.405973][T12754] ? __pfx_genl_rcv_msg+0x10/0x10 [ 485.405994][T12754] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 485.406011][T12754] ? __asan_memcpy+0x40/0x70 [ 485.406027][T12754] ? __pfx_ref_tracker_free+0x10/0x10 [ 485.406051][T12754] netlink_rcv_skb+0x208/0x470 [ 485.406072][T12754] ? __lock_acquire+0xab9/0xd20 [ 485.406094][T12754] ? __pfx_genl_rcv_msg+0x10/0x10 [ 485.406114][T12754] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 485.406152][T12754] ? down_read+0x1ad/0x2e0 [ 485.406174][T12754] genl_rcv+0x28/0x40 [ 485.406191][T12754] netlink_unicast+0x82f/0x9e0 [ 485.406220][T12754] ? __pfx_netlink_unicast+0x10/0x10 [ 485.406244][T12754] ? netlink_sendmsg+0x642/0xb30 [ 485.406264][T12754] ? skb_put+0x11b/0x210 [ 485.406293][T12754] netlink_sendmsg+0x805/0xb30 [ 485.406326][T12754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.406354][T12754] ? __import_iovec+0x5d4/0x7f0 [ 485.406374][T12754] ? aa_sock_msg_perm+0xf1/0x1d0 [ 485.406396][T12754] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 485.406417][T12754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.406446][T12754] __sock_sendmsg+0x21c/0x270 [ 485.406470][T12754] ____sys_sendmsg+0x505/0x830 [ 485.406493][T12754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.406526][T12754] ___sys_sendmsg+0x21f/0x2a0 [ 485.406547][T12754] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.406600][T12754] ? __fget_files+0x2a/0x420 [ 485.406621][T12754] ? __fget_files+0x3a0/0x420 [ 485.406653][T12754] __sys_sendmsg+0x164/0x220 [ 485.406673][T12754] ? __pfx___sys_sendmsg+0x10/0x10 [ 485.406700][T12754] ? __pfx_ksys_write+0x10/0x10 [ 485.406723][T12754] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 485.406744][T12754] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.406764][T12754] __do_fast_syscall_32+0xb6/0x2b0 [ 485.406791][T12754] do_fast_syscall_32+0x34/0x80 [ 485.406810][T12754] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 485.406831][T12754] RIP: 0023:0xf7f64539 [ 485.406847][T12754] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 485.406862][T12754] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 485.406882][T12754] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 485.406894][T12754] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 485.406904][T12754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 485.406914][T12754] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 485.406924][T12754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 485.406950][T12754] [ 486.023842][T12761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2014'. [ 488.292728][T12799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2023'. [ 488.301944][ T5910] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 488.519117][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 488.526621][ T5910] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 488.538202][ T5910] usb 3-1: config 0 has no interface number 0 [ 488.545388][ T5910] usb 3-1: config 0 interface 217 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 488.580996][ T5910] usb 3-1: config 0 interface 217 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 488.649287][ T5910] usb 3-1: New USB device found, idVendor=17e9, idProduct=0d52, bcdDevice=9b.89 [ 488.662660][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.822844][ T5910] usb 3-1: Product: syz [ 488.836187][ T5910] usb 3-1: Manufacturer: syz [ 488.840797][ T5910] usb 3-1: SerialNumber: syz [ 488.873581][ T5910] usb 3-1: config 0 descriptor?? [ 489.142035][T12790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.176020][T12790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.232704][ T5910] udl 3-1:0.217: [drm] Unrecognized vendor firmware descriptor [ 489.246343][ T5910] [drm:udl_init] *ERROR* Selecting channel failed [ 489.301489][ T5910] [drm] Initialized udl 0.0.1 for 3-1:0.217 on minor 2 [ 489.331143][ T5910] [drm] Initialized udl on minor 2 [ 489.336961][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 489.350587][ T5910] udl 3-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 489.359262][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 489.368581][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 489.386177][ T5910] udl 3-1:0.217: [drm] Cannot find any crtc or sizes [ 489.393053][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 489.401449][ T5889] udl 3-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 489.410513][ T5889] udl 3-1:0.217: [drm] Cannot find any crtc or sizes [ 489.418382][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 489.456664][ T5910] usb 3-1: USB disconnect, device number 87 [ 489.903615][T12824] tipc: Started in network mode [ 489.910805][T12824] tipc: Node identity 0641bceade94, cluster identity 4711 [ 489.919877][T12829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.934869][T12824] tipc: Enabled bearer , priority 0 [ 489.941173][T12829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.997488][T12824] tipc: Resetting bearer [ 490.017894][T12823] tipc: Disabling bearer [ 490.053539][T12814] chnl_net:caif_netlink_parms(): no params data found [ 490.181892][ T5889] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 490.237121][T12837] bond2: option miimon: invalid value (18446744073441116159) [ 490.244657][T12837] bond2: option miimon: allowed values 0 - 2147483647 [ 490.253442][T12837] bond2 (unregistering): Released all slaves [ 490.297662][T12814] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.304903][T12814] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.312645][T12814] bridge_slave_0: entered allmulticast mode [ 490.321437][T12814] bridge_slave_0: entered promiscuous mode [ 490.330663][T12814] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.345532][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 490.375547][T12814] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.401994][T12814] bridge_slave_1: entered allmulticast mode [ 490.408299][ T5889] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 490.426757][T12814] bridge_slave_1: entered promiscuous mode [ 490.433492][ T5889] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 490.453405][ T5889] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 490.485147][ T5889] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 490.490916][T12814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.567384][T12814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.607814][ T5889] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 490.617655][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.748956][T12814] team0: Port device team_slave_0 added [ 490.792294][T12814] team0: Port device team_slave_1 added [ 490.993911][ T5889] usb 2-1: GET_CAPABILITIES returned 0 [ 491.031420][ T5889] usbtmc 2-1:16.0: can't read capabilities [ 491.093750][T12814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.109670][T12814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.160519][T12814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.274712][T12814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.282816][T12814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.346227][T12814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.359400][T12857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.379032][T12857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.471516][T12857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.480556][T12857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.505395][T11410] Bluetooth: hci0: command tx timeout [ 491.558624][T12814] hsr_slave_0: entered promiscuous mode [ 491.565915][T12814] hsr_slave_1: entered promiscuous mode [ 491.573588][T12814] debugfs: 'hsr0' already exists in 'hsr' [ 491.579854][T12814] Cannot create hsr debugfs directory [ 491.796917][ T5918] usb 2-1: USB disconnect, device number 87 [ 491.953973][T12875] netlink: 'syz.2.2050': attribute type 322 has an invalid length. [ 492.029541][T12814] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 492.068461][T12814] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 492.094257][T12814] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 492.174323][T12814] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 492.345474][ T5910] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 492.435634][T12814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.475078][T12814] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.482536][ T812] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 492.566818][ T5910] usb 6-1: Using ep0 maxpacket: 32 [ 492.601507][ T5910] usb 6-1: config 0 interface 0 has no altsetting 0 [ 492.622726][ T1047] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.629900][ T1047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.653624][ T5910] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 492.678627][ T1047] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.685764][ T1047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.696013][ T812] usb 3-1: Using ep0 maxpacket: 8 [ 492.702870][ T812] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 492.713540][ T812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.745017][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.760974][ T812] usb 3-1: config 0 descriptor?? [ 492.781393][ T5910] usb 6-1: Product: syz [ 492.793082][ T5910] usb 6-1: Manufacturer: syz [ 492.843322][T12814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.872923][ T5910] usb 6-1: SerialNumber: syz [ 492.910750][ T5910] usb 6-1: config 0 descriptor?? [ 492.920500][T12814] veth0_vlan: entered promiscuous mode [ 492.984941][ T812] usb 3-1: string descriptor 0 read error: -71 [ 492.999822][ T812] uvcvideo 3-1:0.0: Found multiple Units with ID 1 [ 493.011078][ T812] uvcvideo 3-1:0.0: Found UVC 0.00 device (2833:0201) [ 493.027131][T12814] veth1_vlan: entered promiscuous mode [ 493.034599][ T812] uvcvideo 3-1:0.0: No valid video chain found. [ 493.067782][ T812] usb 3-1: USB disconnect, device number 88 [ 493.170950][T12814] veth0_macvtap: entered promiscuous mode [ 493.182203][T12814] veth1_macvtap: entered promiscuous mode [ 493.278959][T12814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.306286][T12814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.333544][ T9599] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.362260][ T9599] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.375121][ T5910] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 493.415466][ T9599] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.424308][ T9599] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.595752][T11410] Bluetooth: hci0: command tx timeout [ 493.622310][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.646460][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.708943][ T9591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.728971][ T9591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.787388][ T30] audit: type=1326 audit(1760889570.095:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12879 comm="syz.5.2051" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708d539 code=0x0 [ 494.142003][T12920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.172235][T12920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.203763][T12920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.223107][T12920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.625734][ T5910] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 494.636495][T12933] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2067'. [ 494.659235][ T5910] gs_usb 6-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPIPE) [ 494.669170][ T5910] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -32 [ 494.806688][T12942] netlink: 'syz.6.2066': attribute type 10 has an invalid length. [ 494.859565][T12940] batadv1: entered promiscuous mode [ 494.900841][T12942] team0: Port device dummy0 added [ 495.671458][T11410] Bluetooth: hci0: command tx timeout [ 495.726000][ T5918] usb 6-1: USB disconnect, device number 10 [ 496.071168][T12960] fuse: Bad value for 'user_id' [ 496.082200][T12962] input: syz0 as /devices/virtual/input/input28 [ 496.095398][T12960] fuse: Bad value for 'user_id' [ 496.509094][T12972] FAULT_INJECTION: forcing a failure. [ 496.509094][T12972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.522525][T12972] CPU: 1 UID: 0 PID: 12972 Comm: syz.5.2078 Not tainted syzkaller #0 PREEMPT(full) [ 496.522550][T12972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 496.522560][T12972] Call Trace: [ 496.522568][T12972] [ 496.522576][T12972] dump_stack_lvl+0x189/0x250 [ 496.522600][T12972] ? __pfx____ratelimit+0x10/0x10 [ 496.522628][T12972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.522647][T12972] ? __pfx__printk+0x10/0x10 [ 496.522665][T12972] ? __might_fault+0xb0/0x130 [ 496.522696][T12972] should_fail_ex+0x414/0x560 [ 496.522727][T12972] _copy_from_user+0x2d/0xb0 [ 496.522752][T12972] get_compat_msghdr+0xad/0x4a0 [ 496.522785][T12972] ? __pfx_get_compat_msghdr+0x10/0x10 [ 496.522823][T12972] ___sys_sendmsg+0x193/0x2a0 [ 496.522853][T12972] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.522907][T12972] ? __fget_files+0x2a/0x420 [ 496.522927][T12972] ? __fget_files+0x3a0/0x420 [ 496.522958][T12972] __sys_sendmsg+0x164/0x220 [ 496.522978][T12972] ? __pfx___sys_sendmsg+0x10/0x10 [ 496.523006][T12972] ? __pfx_ksys_write+0x10/0x10 [ 496.523029][T12972] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 496.523051][T12972] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.523072][T12972] __do_fast_syscall_32+0xb6/0x2b0 [ 496.523092][T12972] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.523115][T12972] do_fast_syscall_32+0x34/0x80 [ 496.523135][T12972] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 496.523156][T12972] RIP: 0023:0xf708d539 [ 496.523173][T12972] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 496.523189][T12972] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 496.523209][T12972] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 496.523222][T12972] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 496.523234][T12972] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 496.523246][T12972] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 496.523257][T12972] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 496.523286][T12972] [ 496.830151][T12977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.839070][T12977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.869880][T12977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.878723][T12977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.993422][T12980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2082'. [ 497.092678][T12986] syzkaller1: entered promiscuous mode [ 497.098347][T12986] syzkaller1: entered allmulticast mode [ 497.239440][T12990] FAULT_INJECTION: forcing a failure. [ 497.239440][T12990] name failslab, interval 1, probability 0, space 0, times 0 [ 497.257361][T12990] CPU: 1 UID: 0 PID: 12990 Comm: syz.6.2085 Not tainted syzkaller #0 PREEMPT(full) [ 497.257386][T12990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 497.257397][T12990] Call Trace: [ 497.257405][T12990] [ 497.257414][T12990] dump_stack_lvl+0x189/0x250 [ 497.257438][T12990] ? __pfx____ratelimit+0x10/0x10 [ 497.257465][T12990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.257484][T12990] ? __pfx__printk+0x10/0x10 [ 497.257522][T12990] should_fail_ex+0x414/0x560 [ 497.257554][T12990] should_failslab+0xa8/0x100 [ 497.257579][T12990] __kmalloc_cache_noprof+0x6f/0x6f0 [ 497.257599][T12990] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 497.257616][T12990] ? sctp_add_bind_addr+0x8c/0x370 [ 497.257641][T12990] sctp_add_bind_addr+0x8c/0x370 [ 497.257663][T12990] sctp_copy_local_addr_list+0x30b/0x4e0 [ 497.257686][T12990] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 497.257704][T12990] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 497.257727][T12990] ? sctp_v4_is_any+0x35/0x60 [ 497.257745][T12990] ? sctp_copy_one_addr+0x93/0x360 [ 497.257768][T12990] sctp_bind_addr_copy+0xb3/0x3c0 [ 497.257786][T12990] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 497.257814][T12990] sctp_connect_new_asoc+0x2e0/0x690 [ 497.257846][T12990] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 497.257867][T12990] ? __local_bh_enable_ip+0x12d/0x1c0 [ 497.257898][T12990] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 497.257921][T12990] ? security_sctp_bind_connect+0x7e/0x2e0 [ 497.257949][T12990] sctp_sendmsg+0x155c/0x2810 [ 497.257983][T12990] ? __pfx_sctp_sendmsg+0x10/0x10 [ 497.258008][T12990] ? aa_sk_perm+0x81e/0x950 [ 497.258027][T12990] ? _copy_from_user+0x94/0xb0 [ 497.258053][T12990] ? __pfx_aa_sk_perm+0x10/0x10 [ 497.258075][T12990] ? sock_rps_record_flow+0x19/0x410 [ 497.258101][T12990] ? inet_sendmsg+0x2f4/0x370 [ 497.258129][T12990] __sock_sendmsg+0x19c/0x270 [ 497.258155][T12990] ____sys_sendmsg+0x505/0x830 [ 497.258180][T12990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.258215][T12990] ___sys_sendmsg+0x21f/0x2a0 [ 497.258236][T12990] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.258292][T12990] ? __fget_files+0x2a/0x420 [ 497.258312][T12990] ? __fget_files+0x3a0/0x420 [ 497.258345][T12990] __sys_sendmsg+0x164/0x220 [ 497.258365][T12990] ? __pfx___sys_sendmsg+0x10/0x10 [ 497.258393][T12990] ? __pfx_ksys_write+0x10/0x10 [ 497.258416][T12990] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 497.258437][T12990] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.258459][T12990] __do_fast_syscall_32+0xb6/0x2b0 [ 497.258479][T12990] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.258502][T12990] do_fast_syscall_32+0x34/0x80 [ 497.258522][T12990] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 497.258543][T12990] RIP: 0023:0xf7f32539 [ 497.258559][T12990] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 497.258575][T12990] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 497.258595][T12990] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001640 [ 497.258608][T12990] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 497.258619][T12990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 497.258630][T12990] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 497.258641][T12990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 497.258671][T12990] [ 497.652395][ T5910] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 497.750899][T11410] Bluetooth: hci0: command tx timeout [ 497.775676][T12995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.786897][T12995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.812778][ T5910] usb 6-1: Using ep0 maxpacket: 8 [ 497.820454][ T5910] usb 6-1: unable to get BOS descriptor or descriptor too short [ 497.830465][ T5910] usb 6-1: config 64 has an invalid interface number: 103 but max is 0 [ 497.838884][ T5910] usb 6-1: config 64 has no interface number 0 [ 497.845069][ T5910] usb 6-1: config 64 interface 103 has no altsetting 0 [ 497.854482][ T5910] usb 6-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=8d.88 [ 497.863663][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.872179][ T5910] usb 6-1: Product: syz [ 497.876402][ T5910] usb 6-1: Manufacturer: syz [ 497.881018][ T5910] usb 6-1: SerialNumber: syz [ 497.996304][ T10] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 498.120618][ T5910] snd-usb-audio 6-1:64.103: probe with driver snd-usb-audio failed with error -71 [ 498.136633][ T10] usb 3-1: device descriptor read/64, error -71 [ 498.137030][ T5910] usb 6-1: USB disconnect, device number 11 [ 498.530313][ T10] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 498.672696][ T10] usb 3-1: device descriptor read/64, error -71 [ 498.939878][ T10] usb usb3-port1: attempt power cycle [ 499.437818][T13026] input: syz0 as /devices/virtual/input/input29 [ 499.445335][ T10] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 499.469506][ T10] usb 3-1: device descriptor read/8, error -71 [ 499.574634][T13031] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2099'. [ 499.586890][ T5889] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 499.705442][ T5910] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 499.733196][T13041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2103'. [ 499.742774][T13041] netlink: 'syz.4.2103': attribute type 5 has an invalid length. [ 499.743557][ T10] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 499.750705][ T5889] usb 6-1: Using ep0 maxpacket: 16 [ 499.766192][ T5889] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 499.777531][ T10] usb 3-1: device descriptor read/8, error -71 [ 499.778170][ T5889] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 499.794009][ T5889] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 499.806081][ T5889] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 499.819734][ T5889] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 499.830760][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.839386][ T5889] usb 6-1: Product: syz [ 499.843708][ T5889] usb 6-1: Manufacturer: syz [ 499.848482][ T5889] usb 6-1: SerialNumber: syz [ 499.855338][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 499.867441][ T5910] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 499.878398][ T5910] usb 2-1: config 0 has no interface number 0 [ 499.884588][ T5910] usb 2-1: config 0 interface 217 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 499.896184][ T5910] usb 2-1: config 0 interface 217 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 499.896612][ T10] usb usb3-port1: unable to enumerate USB device [ 499.908804][ T5910] usb 2-1: New USB device found, idVendor=17e9, idProduct=0d52, bcdDevice=9b.89 [ 499.923707][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.932037][ T5910] usb 2-1: Product: syz [ 499.936695][ T5910] usb 2-1: Manufacturer: syz [ 499.944871][ T5910] usb 2-1: SerialNumber: syz [ 499.955533][ T5910] usb 2-1: config 0 descriptor?? [ 500.126342][ T5889] usb 6-1: USB disconnect, device number 12 [ 500.174757][T13028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.201659][T13028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.246592][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.273070][ T5910] udl 2-1:0.217: [drm] Unrecognized vendor firmware descriptor [ 500.291246][ T5910] [drm:udl_init] *ERROR* Selecting channel failed [ 500.312620][ T5910] [drm] Initialized udl 0.0.1 for 2-1:0.217 on minor 2 [ 500.321809][ T5910] [drm] Initialized udl on minor 2 [ 500.329276][ T5910] udl 2-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 500.338904][ T5910] udl 2-1:0.217: [drm] Cannot find any crtc or sizes [ 500.347018][ T5945] udl 2-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 500.363014][ T5910] usb 2-1: USB disconnect, device number 88 [ 500.369486][ T5945] udl 2-1:0.217: [drm] Cannot find any crtc or sizes [ 500.540211][T13048] syzkaller1: entered promiscuous mode [ 500.546026][T13048] syzkaller1: entered allmulticast mode [ 500.824760][T13054] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2108'. [ 501.105681][ T10] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 501.370947][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 501.429565][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.438722][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.454021][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.519284][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 501.535511][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 501.547072][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 501.557999][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.579015][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 501.588357][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 501.596515][ T10] usb 3-1: Manufacturer: syz [ 501.607302][ T10] usb 3-1: config 0 descriptor?? [ 501.855557][T13075] FAULT_INJECTION: forcing a failure. [ 501.855557][T13075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.906419][T13075] CPU: 0 UID: 0 PID: 13075 Comm: syz.5.2116 Not tainted syzkaller #0 PREEMPT(full) [ 501.906446][T13075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 501.906457][T13075] Call Trace: [ 501.906465][T13075] [ 501.906473][T13075] dump_stack_lvl+0x189/0x250 [ 501.906498][T13075] ? __pfx____ratelimit+0x10/0x10 [ 501.906524][T13075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.906543][T13075] ? __pfx__printk+0x10/0x10 [ 501.906562][T13075] ? __might_fault+0xb0/0x130 [ 501.906591][T13075] should_fail_ex+0x414/0x560 [ 501.906628][T13075] _copy_from_user+0x2d/0xb0 [ 501.906653][T13075] get_compat_msghdr+0xad/0x4a0 [ 501.906684][T13075] ? __pfx_get_compat_msghdr+0x10/0x10 [ 501.906711][T13075] ? ___sys_recvmsg+0x1c4/0x510 [ 501.906729][T13075] ? kfree+0x4d/0x6d0 [ 501.906753][T13075] ___sys_recvmsg+0x17f/0x510 [ 501.906776][T13075] ? __pfx____sys_recvmsg+0x10/0x10 [ 501.906813][T13075] ? __fget_files+0x3a0/0x420 [ 501.906845][T13075] do_recvmmsg+0x36a/0x770 [ 501.906868][T13075] ? __pfx_do_recvmmsg+0x10/0x10 [ 501.906884][T13075] ? ksys_write+0x1cb/0x250 [ 501.906921][T13075] ? __fget_files+0x3a0/0x420 [ 501.906947][T13075] __sys_recvmmsg+0x19d/0x280 [ 501.906966][T13075] ? __pfx___sys_recvmmsg+0x10/0x10 [ 501.906983][T13075] ? __pfx_ksys_write+0x10/0x10 [ 501.907006][T13075] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 501.907028][T13075] __do_fast_syscall_32+0xb6/0x2b0 [ 501.907048][T13075] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.907070][T13075] do_fast_syscall_32+0x34/0x80 [ 501.907089][T13075] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 501.907110][T13075] RIP: 0023:0xf708d539 [ 501.907126][T13075] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 501.907140][T13075] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 501.907161][T13075] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800034c0 [ 501.907173][T13075] RDX: 00000000040002af RSI: 0000000000000700 RDI: 0000000000000000 [ 501.907185][T13075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 501.907195][T13075] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 501.907206][T13075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 501.907232][T13075] [ 502.143426][ C0] vkms_vblank_simulate: vblank timer overrun [ 502.175519][ T10] rc_core: IR keymap rc-hauppauge not found [ 502.181509][ T10] Registered IR keymap rc-empty [ 502.186531][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 502.205426][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 502.226031][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 502.239093][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input30 [ 502.425863][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 502.455547][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 502.474379][T13082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.489976][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 502.523531][T13082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.556950][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 502.586080][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 502.635395][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 502.677435][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 502.705591][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 502.725456][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 502.756353][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 502.788305][ T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 502.978842][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 503.050312][T13104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.103171][T13104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.185816][ T5945] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 503.203354][T13107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.280455][T13107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.365807][ T5945] usb 7-1: Using ep0 maxpacket: 32 [ 503.413586][ T5945] usb 7-1: config 0 interface 0 has no altsetting 0 [ 503.416680][ T5945] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 503.416709][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.416723][ T5945] usb 7-1: Product: syz [ 503.416731][ T5945] usb 7-1: Manufacturer: syz [ 503.416740][ T5945] usb 7-1: SerialNumber: syz [ 503.447616][ T5945] usb 7-1: config 0 descriptor?? [ 503.868311][ T30] audit: type=1326 audit(1760889580.185:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13100 comm="syz.6.2121" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f32539 code=0x0 [ 504.277573][ T5889] usb 3-1: USB disconnect, device number 93 [ 504.716575][ T5945] gs_usb 7-1:0.0: Couldn't get device config: (err=-110) [ 504.752466][ T5945] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -110 [ 505.395451][ T5945] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 505.605351][ T9] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 505.606946][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.624983][ T5945] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 505.663640][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.729797][ T5945] usb 3-1: config 0 descriptor?? [ 505.769239][ T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 505.780196][ T9] usb 6-1: config 0 has no interface number 0 [ 505.786886][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 505.801454][ T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 505.813440][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 505.825646][ T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 505.837225][ T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 505.848560][ T9] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 505.863755][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 505.873318][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.887016][ T9] usb 6-1: config 0 descriptor?? [ 505.893032][T13138] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 505.910363][T13138] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 505.974094][ T9] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 505.974350][ T5945] usbhid 3-1:0.0: can't add hid device: -71 [ 505.995595][ T5945] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 506.024380][ T5945] usb 3-1: USB disconnect, device number 94 [ 506.080435][T13141] FAULT_INJECTION: forcing a failure. [ 506.080435][T13141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.102718][T13141] CPU: 1 UID: 0 PID: 13141 Comm: syz.4.2135 Not tainted syzkaller #0 PREEMPT(full) [ 506.102734][T13141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 506.102740][T13141] Call Trace: [ 506.102745][T13141] [ 506.102750][T13141] dump_stack_lvl+0x189/0x250 [ 506.102766][T13141] ? __pfx____ratelimit+0x10/0x10 [ 506.102782][T13141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.102792][T13141] ? __pfx__printk+0x10/0x10 [ 506.102809][T13141] should_fail_ex+0x414/0x560 [ 506.102827][T13141] _copy_to_user+0x31/0xb0 [ 506.102842][T13141] simple_read_from_buffer+0xe1/0x170 [ 506.102857][T13141] proc_fail_nth_read+0x1b3/0x220 [ 506.102873][T13141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 506.102894][T13141] ? rw_verify_area+0x2a6/0x4d0 [ 506.102903][T13141] ? __lock_acquire+0xab9/0xd20 [ 506.102916][T13141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 506.102930][T13141] vfs_read+0x200/0xa30 [ 506.102940][T13141] ? fdget_pos+0x247/0x320 [ 506.102955][T13141] ? __pfx___mutex_lock+0x10/0x10 [ 506.102966][T13141] ? __pfx_vfs_read+0x10/0x10 [ 506.102977][T13141] ? __fget_files+0x2a/0x420 [ 506.102991][T13141] ? __fget_files+0x3a0/0x420 [ 506.103002][T13141] ? __fget_files+0x2a/0x420 [ 506.103018][T13141] ksys_read+0x145/0x250 [ 506.103030][T13141] ? __pfx_ksys_read+0x10/0x10 [ 506.103042][T13141] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 506.103054][T13141] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.103066][T13141] __do_fast_syscall_32+0xb6/0x2b0 [ 506.103078][T13141] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.103090][T13141] do_fast_syscall_32+0x34/0x80 [ 506.103101][T13141] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 506.103114][T13141] RIP: 0023:0xf7ff3539 [ 506.103129][T13141] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 506.103138][T13141] RSP: 002b:00000000f54e6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 506.103149][T13141] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54e6620 [ 506.103156][T13141] RDX: 000000000000000f RSI: 00000000f7485ff4 RDI: 0000000000000000 [ 506.103162][T13141] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 506.103168][T13141] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 506.103174][T13141] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 506.103189][T13141] [ 506.526771][ T30] audit: type=1800 audit(1760889582.845:440): pid=13144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2136" name="nullb0" dev="devtmpfs" ino=2930 res=0 errno=0 [ 506.639809][ T10] usb 6-1: USB disconnect, device number 13 [ 506.649814][ T10] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 506.713248][ T9] usb 7-1: USB disconnect, device number 2 [ 506.816460][T13154] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 506.855673][ T5945] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 506.933875][T13160] sctp: [Deprecated]: syz.4.2143 (pid 13160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.933875][T13160] Use struct sctp_sack_info instead [ 507.005436][ T5945] usb 3-1: device descriptor read/64, error -71 [ 507.030992][T13163] syzkaller1: entered allmulticast mode [ 507.225761][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 507.251143][ T5945] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 507.409418][ T5945] usb 3-1: device descriptor read/64, error -71 [ 507.415347][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 507.429292][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 507.603299][ T5945] usb usb3-port1: attempt power cycle [ 507.686314][ T9] usb 7-1: config 4 has an invalid interface number: 146 but max is 0 [ 507.694868][ T9] usb 7-1: config 4 has no interface number 0 [ 507.703391][ T9] usb 7-1: config 4 interface 146 has no altsetting 0 [ 507.714840][ T9] usb 7-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=af.79 [ 507.724707][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.733332][T13167] fuse: Bad value for 'fd' [ 507.739215][ T9] usb 7-1: Product: Ь [ 507.743518][ T9] usb 7-1: Manufacturer: 磳铑㍹ⲷ䬌뗽޴ʽᤌ絕ຎꖰ稽䙊䫑㸚핚ꘘ뒌ྠ갖쾜Ē㹗閰늽戋蒉繷ꦧ枟㙲ꁟ䒡鳻褰ꮮዜﾈ憓쐗釖쁂䅓⽥뽎ⲯᤰ䭖藘觉部頰⿳傮荃ᆨ耹㵘亰░ච⣠❶逾繳᰼䋡岸✢㹕빏橊㋏骔提簯梿辒뗷箽㿌⧪ﴋ쨟닳꾹䃕秐軓鯴ꅒ詶̣㦃쑧䙤䍼┷ [ 507.779621][ T9] usb 7-1: SerialNumber: А [ 507.945401][ T5945] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 507.983803][ T5945] usb 3-1: device descriptor read/8, error -71 [ 508.016832][ T9] comedi comedi5: could not set alternate setting 3 in high speed [ 508.134880][ T9] usbduxsigma 7-1:4.146: driver 'usbduxsigma' failed to auto-configure device. [ 508.167170][ T9] usbduxsigma 7-1:4.146: probe with driver usbduxsigma failed with error -71 [ 508.210716][ T9] usb 7-1: USB disconnect, device number 3 [ 508.266751][T13179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2145'. [ 508.276000][ T5945] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 508.522261][ T5945] usb 3-1: device not accepting address 98, error -71 [ 508.529581][ T5945] usb usb3-port1: unable to enumerate USB device [ 510.118521][ T30] audit: type=1326 audit(1760889586.435:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13188 comm="syz.6.2149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7fc00000 [ 510.175809][T13205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2155'. [ 510.195771][T13205] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2155'. [ 510.206445][T13205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2155'. [ 510.235365][ T5918] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 510.371452][T13217] fuse: Bad value for 'fd' [ 510.495364][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 510.502820][ T5918] usb 2-1: config 0 interface 0 has no altsetting 0 [ 510.562117][ T5918] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 510.574880][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.623278][ T5918] usb 2-1: Product: syz [ 510.633913][ T5918] usb 2-1: Manufacturer: syz [ 510.645930][ T5918] usb 2-1: SerialNumber: syz [ 510.664833][ T5918] usb 2-1: config 0 descriptor?? [ 511.123131][T13218] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 511.134801][T13218] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 511.150267][T13218] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 511.237787][T13218] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 511.250666][ T30] audit: type=1326 audit(1760889587.565:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13199 comm="syz.1.2152" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d539 code=0x0 [ 511.272044][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.813445][T13232] netlink: 'syz.2.2159': attribute type 10 has an invalid length. [ 511.842855][ T5918] gs_usb 2-1:0.0: Couldn't send data format (err=-110) [ 511.861307][ T5918] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 511.889363][T13233] netlink: 'syz.2.2159': attribute type 10 has an invalid length. [ 511.899228][T13232] bond0: (slave dummy0): Releasing backup interface [ 512.008832][T13237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.017739][T13237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.042940][T13232] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 512.067168][T13232] team0: Failed to send options change via netlink (err -105) [ 512.171420][T13232] team0: Port device dummy0 added [ 512.268450][T13233] team0: Failed to send options change via netlink (err -105) [ 512.275588][ T5918] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 512.277916][T13233] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 512.378679][T13233] team0: Port device dummy0 removed [ 512.417060][T13233] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 512.625353][T11410] Bluetooth: hci1: command 0x0405 tx timeout [ 513.186171][T11410] Bluetooth: hci0: command 0x0c1a tx timeout [ 513.749092][T13258] input: syz1 as /devices/virtual/input/input31 [ 513.944772][ T5945] usb 2-1: USB disconnect, device number 89 [ 514.370267][T13267] pimreg: entered allmulticast mode [ 514.423791][T13268] fuse: Bad value for 'fd' [ 514.687472][T13275] binder: 13274:13275 unknown command 1074029334 [ 514.693887][T13275] binder: 13274:13275 ioctl c0306201 800007c0 returned -22 [ 515.343526][T11410] Bluetooth: hci0: command 0x0c1a tx timeout [ 516.347363][T13306] netlink: 'syz.4.2181': attribute type 11 has an invalid length. [ 516.355354][T13306] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2181'. [ 516.382929][T13309] FAULT_INJECTION: forcing a failure. [ 516.382929][T13309] name failslab, interval 1, probability 0, space 0, times 0 [ 516.397921][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 516.414175][T13309] CPU: 0 UID: 0 PID: 13309 Comm: syz.5.2182 Not tainted syzkaller #0 PREEMPT(full) [ 516.414199][T13309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 516.414210][T13309] Call Trace: [ 516.414218][T13309] [ 516.414227][T13309] dump_stack_lvl+0x189/0x250 [ 516.414250][T13309] ? __pfx____ratelimit+0x10/0x10 [ 516.414278][T13309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.414297][T13309] ? __pfx__printk+0x10/0x10 [ 516.414320][T13309] ? __pfx___might_resched+0x10/0x10 [ 516.414334][T13309] ? fs_reclaim_acquire+0x7d/0x100 [ 516.414350][T13309] should_fail_ex+0x414/0x560 [ 516.414368][T13309] should_failslab+0xa8/0x100 [ 516.414383][T13309] __kmalloc_cache_noprof+0x6f/0x6f0 [ 516.414394][T13309] ? snd_seq_port_connect+0x6b/0x460 [ 516.414409][T13309] snd_seq_port_connect+0x6b/0x460 [ 516.414420][T13309] ? do_raw_read_unlock+0x3d/0x80 [ 516.414430][T13309] ? _raw_read_unlock+0x28/0x50 [ 516.414442][T13309] snd_seq_ioctl_subscribe_port+0x360/0x790 [ 516.414458][T13309] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 516.414475][T13309] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 516.414510][T13309] snd_seq_oss_midi_open+0x471/0x810 [ 516.414533][T13309] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 516.414557][T13309] snd_seq_oss_process_event+0xd26/0x2a80 [ 516.414573][T13309] ? __pfx_snd_seq_oss_process_event+0x10/0x10 [ 516.414591][T13309] snd_seq_oss_write+0x4b7/0x930 [ 516.414611][T13309] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 516.414627][T13309] ? security_file_permission+0x75/0x290 [ 516.414644][T13309] odev_write+0x5a/0x80 [ 516.414654][T13309] ? __pfx_odev_write+0x10/0x10 [ 516.414664][T13309] vfs_write+0x27e/0xb30 [ 516.414679][T13309] ? __pfx_vfs_write+0x10/0x10 [ 516.414691][T13309] ? __fget_files+0x2a/0x420 [ 516.414704][T13309] ? __fget_files+0x2a/0x420 [ 516.414715][T13309] ? __fget_files+0x3a0/0x420 [ 516.414725][T13309] ? __fget_files+0x2a/0x420 [ 516.414741][T13309] ksys_write+0x145/0x250 [ 516.414751][T13309] ? exc_page_fault+0x82/0x100 [ 516.414762][T13309] ? __pfx_ksys_write+0x10/0x10 [ 516.414774][T13309] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 516.414785][T13309] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.414797][T13309] __do_fast_syscall_32+0xb6/0x2b0 [ 516.414809][T13309] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.414821][T13309] do_fast_syscall_32+0x34/0x80 [ 516.414832][T13309] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 516.414844][T13309] RIP: 0023:0xf708d539 [ 516.414854][T13309] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 516.414863][T13309] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 516.414875][T13309] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 516.414884][T13309] RDX: 0000000000000233 RSI: 0000000000000000 RDI: 0000000000000000 [ 516.414891][T13309] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 516.414896][T13309] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 516.414902][T13309] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 516.414917][T13309] [ 516.785501][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 516.805836][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 516.813403][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 516.822799][ T10] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 516.831869][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.839988][ T10] usb 7-1: Product: syz [ 516.844129][ T10] usb 7-1: Manufacturer: syz [ 516.848806][ T10] usb 7-1: SerialNumber: syz [ 516.859142][ T10] usb 7-1: config 0 descriptor?? [ 517.109066][ T30] audit: type=1326 audit(1760889593.425:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13299 comm="syz.6.2179" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f32539 code=0x0 [ 517.504318][T11410] Bluetooth: hci0: command 0x0c1a tx timeout [ 517.908471][ T10] gs_usb 7-1:0.0: Couldn't send data format (err=-110) [ 517.915690][ T10] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -110 [ 518.371585][T13333] syzkaller0: entered promiscuous mode [ 518.389699][T13333] syzkaller0: entered allmulticast mode [ 519.885097][T13349] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 519.899589][T13349] FAULT_INJECTION: forcing a failure. [ 519.899589][T13349] name failslab, interval 1, probability 0, space 0, times 0 [ 519.930550][T13349] CPU: 0 UID: 0 PID: 13349 Comm: syz.2.2194 Not tainted syzkaller #0 PREEMPT(full) [ 519.930577][T13349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 519.930589][T13349] Call Trace: [ 519.930597][T13349] [ 519.930606][T13349] dump_stack_lvl+0x189/0x250 [ 519.930630][T13349] ? __pfx____ratelimit+0x10/0x10 [ 519.930657][T13349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.930676][T13349] ? __pfx__printk+0x10/0x10 [ 519.930701][T13349] ? __pfx___might_resched+0x10/0x10 [ 519.930724][T13349] ? fs_reclaim_acquire+0x7d/0x100 [ 519.930750][T13349] should_fail_ex+0x414/0x560 [ 519.930782][T13349] should_failslab+0xa8/0x100 [ 519.930806][T13349] __kmalloc_noprof+0xcb/0x7f0 [ 519.930824][T13349] ? usb_hcd_submit_urb+0x798/0x1aa0 [ 519.930844][T13349] ? _raw_spin_unlock_irq+0x23/0x50 [ 519.930881][T13349] usb_hcd_submit_urb+0x798/0x1aa0 [ 519.930912][T13349] proc_do_submiturb+0x280c/0x37c0 [ 519.930952][T13349] ? proc_do_submiturb+0x22f0/0x37c0 [ 519.930986][T13349] proc_submiturb_compat+0x174/0x1d0 [ 519.931016][T13349] ? __pfx_proc_submiturb_compat+0x10/0x10 [ 519.931060][T13349] usbdev_ioctl+0x1655/0x20b0 [ 519.931087][T13349] ? __fget_files+0x2a/0x420 [ 519.931110][T13349] ? __pfx_usbdev_ioctl+0x10/0x10 [ 519.931131][T13349] ? __fget_files+0x3a0/0x420 [ 519.931151][T13349] ? __fget_files+0x2a/0x420 [ 519.931176][T13349] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 519.931204][T13349] __ia32_compat_sys_ioctl+0x543/0x840 [ 519.931227][T13349] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 519.931246][T13349] ? __fget_files+0x3a0/0x420 [ 519.931274][T13349] ? fput+0xa0/0xd0 [ 519.931298][T13349] ? ksys_write+0x22a/0x250 [ 519.931316][T13349] ? exc_page_fault+0x82/0x100 [ 519.931335][T13349] ? __pfx_ksys_write+0x10/0x10 [ 519.931361][T13349] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 519.931382][T13349] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.931405][T13349] __do_fast_syscall_32+0xb6/0x2b0 [ 519.931425][T13349] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.931448][T13349] do_fast_syscall_32+0x34/0x80 [ 519.931469][T13349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 519.931490][T13349] RIP: 0023:0xf7f64539 [ 519.931507][T13349] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 519.931522][T13349] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 519.931542][T13349] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000802c550a [ 519.931555][T13349] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 519.931567][T13349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 519.931578][T13349] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 519.931589][T13349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 519.931619][T13349] [ 519.932443][T13351] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 520.264681][ T10] usb 7-1: USB disconnect, device number 5 [ 520.723167][T13366] netlink: 'syz.5.2201': attribute type 3 has an invalid length. [ 520.731010][T13366] netlink: 666 bytes leftover after parsing attributes in process `syz.5.2201'. [ 521.154216][ T24] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 521.395377][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 521.425485][ T24] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 521.445456][ T24] usb 2-1: config 0 has no interface number 0 [ 521.451571][ T24] usb 2-1: config 0 interface 217 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 521.503069][ T24] usb 2-1: config 0 interface 217 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 521.516343][ T24] usb 2-1: New USB device found, idVendor=17e9, idProduct=0d52, bcdDevice=9b.89 [ 521.527636][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.536125][ T24] usb 2-1: Product: syz [ 521.540526][ T24] usb 2-1: Manufacturer: syz [ 521.551103][ T24] usb 2-1: SerialNumber: syz [ 521.567886][ T24] usb 2-1: config 0 descriptor?? [ 521.940797][T13369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.085993][T13369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.137297][ T24] udl 2-1:0.217: [drm] Unrecognized vendor firmware descriptor [ 522.158520][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 522.249440][T13385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.264058][T13385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.286740][ T24] [drm] Initialized udl 0.0.1 for 2-1:0.217 on minor 2 [ 522.344643][ T24] [drm] Initialized udl on minor 2 [ 522.520585][ T24] udl 2-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 522.523376][T13388] Invalid logical block size (85) [ 522.545047][ T24] udl 2-1:0.217: [drm] Cannot find any crtc or sizes [ 522.555450][ T5945] udl 2-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 522.563690][ T5945] udl 2-1:0.217: [drm] Cannot find any crtc or sizes [ 522.580273][ T24] usb 2-1: USB disconnect, device number 90 [ 523.125931][ T24] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 523.306155][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 523.312930][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 523.402592][ T24] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 523.412086][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.421023][ T24] usb 2-1: Product: syz [ 523.428855][ T24] usb 2-1: Manufacturer: syz [ 523.434149][ T24] usb 2-1: SerialNumber: syz [ 523.448589][ T24] usb 2-1: config 0 descriptor?? [ 523.897493][ T30] audit: type=1326 audit(1760889600.215:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13393 comm="syz.1.2211" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d539 code=0x0 [ 524.706456][ T24] gs_usb 2-1:0.0: Couldn't get device config: (err=-110) [ 524.743869][ T24] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 525.120274][ T30] audit: type=1326 audit(1760889601.435:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.6.2217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 525.142376][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.189658][ T30] audit: type=1326 audit(1760889601.475:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.6.2217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 525.271489][ T30] audit: type=1326 audit(1760889601.475:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.6.2217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 525.378632][ T30] audit: type=1326 audit(1760889601.475:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.6.2217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 525.449937][ T30] audit: type=1326 audit(1760889601.475:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.6.2217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 525.471934][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.479513][ T30] audit: type=1326 audit(1760889601.475:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.6.2217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 525.524359][ T30] audit: type=1326 audit(1760889601.475:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.6.2217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 525.584571][ T30] audit: type=1326 audit(1760889601.475:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.6.2217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 525.606608][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.678335][ T30] audit: type=1326 audit(1760889601.475:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.6.2217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 525.686323][ T5945] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 526.175305][ T5945] usb 7-1: Using ep0 maxpacket: 32 [ 526.213973][ T5945] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 526.223813][ T5945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.246958][ T5945] usb 7-1: config 0 descriptor?? [ 526.361340][ T5945] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 526.455358][ T5918] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 526.508798][ T10] usb 2-1: USB disconnect, device number 91 [ 526.607251][ T5918] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 526.617916][ T5918] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 526.630383][ T5918] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 526.640230][ T5918] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 526.653408][ T5918] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 526.671212][ T5918] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 526.684895][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 526.697389][ T5918] usb 3-1: Product: syz [ 526.704171][ T5918] usb 3-1: Manufacturer: syz [ 526.725984][ T5918] cdc_wdm 3-1:1.0: skipping garbage [ 526.731234][ T5918] cdc_wdm 3-1:1.0: skipping garbage [ 526.739618][ T5918] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 526.757861][ T5918] cdc_wdm 3-1:1.0: Unknown control protocol [ 526.813088][T13441] program syz.6.2218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 527.068449][ T5945] gspca_nw80x: reg_r err -110 [ 527.085137][ T5945] nw80x 7-1:0.0: probe with driver nw80x failed with error -110 [ 527.355405][ T5918] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 527.521484][ T5918] usb 6-1: unable to get BOS descriptor or descriptor too short [ 527.544111][ T5918] usb 6-1: not running at top speed; connect to a high speed hub [ 527.568857][ T5918] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.599636][ T5918] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 527.624563][ T5918] usb 6-1: string descriptor 0 read error: -22 [ 527.633394][ T5918] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 527.654653][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.696940][ T5918] usb 6-1: 0:2 : does not exist [ 528.085423][ T10] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 528.246192][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 528.260177][ T10] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 528.269217][ T10] usb 2-1: config 0 has no interface number 0 [ 528.276362][ T10] usb 2-1: config 0 interface 217 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 528.289586][ T10] usb 2-1: config 0 interface 217 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 528.304835][ T10] usb 2-1: New USB device found, idVendor=17e9, idProduct=0d52, bcdDevice=9b.89 [ 528.325677][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.333861][ T10] usb 2-1: Product: syz [ 528.338829][ T10] usb 2-1: Manufacturer: syz [ 528.343579][ T10] usb 2-1: SerialNumber: syz [ 528.354356][ T10] usb 2-1: config 0 descriptor?? [ 528.389243][ T24] usb 7-1: USB disconnect, device number 6 [ 528.601376][T13471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.617281][T13471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.703517][ T10] udl 2-1:0.217: [drm] Unrecognized vendor firmware descriptor [ 528.714109][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 528.740508][ T10] [drm] Initialized udl 0.0.1 for 2-1:0.217 on minor 2 [ 528.747807][ T10] [drm] Initialized udl on minor 2 [ 528.755141][ T10] udl 2-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 528.765728][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 528.769557][ T10] udl 2-1:0.217: [drm] Cannot find any crtc or sizes [ 528.786506][ T9] udl 2-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 528.815453][ T9] udl 2-1:0.217: [drm] Cannot find any crtc or sizes [ 528.829932][ T10] usb 2-1: USB disconnect, device number 92 [ 528.935778][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 528.943929][ T24] usb 7-1: config 0 has an invalid interface number: 217 but max is 0 [ 528.954973][ T24] usb 7-1: config 0 has no interface number 0 [ 528.961539][ T24] usb 7-1: config 0 interface 217 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 528.972872][ T24] usb 7-1: config 0 interface 217 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 528.988046][ T24] usb 7-1: New USB device found, idVendor=17e9, idProduct=0d52, bcdDevice=9b.89 [ 528.998973][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.016144][ T24] usb 7-1: Product: syz [ 529.020456][ T24] usb 7-1: Manufacturer: syz [ 529.025172][ T24] usb 7-1: SerialNumber: syz [ 529.041400][ T24] usb 7-1: config 0 descriptor?? [ 529.259603][T13475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.263549][ T10] usb 3-1: USB disconnect, device number 99 [ 529.349379][T13475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.506063][ T24] udl 7-1:0.217: [drm] Unrecognized vendor firmware descriptor [ 529.521795][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 529.613169][ T24] [drm] Initialized udl 0.0.1 for 7-1:0.217 on minor 2 [ 529.637156][ T24] [drm] Initialized udl on minor 2 [ 529.653851][ T24] udl 7-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 529.684256][ T24] udl 7-1:0.217: [drm] Cannot find any crtc or sizes [ 529.727791][T13487] : entered allmulticast mode [ 529.748775][ T5945] udl 7-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 529.757186][ T24] usb 7-1: USB disconnect, device number 7 [ 529.770249][ T5945] udl 7-1:0.217: [drm] Cannot find any crtc or sizes [ 530.029157][ T5918] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 530.043067][ T5918] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 530.129121][ T5918] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 530.283719][ T5918] usb 6-1: USB disconnect, device number 14 [ 531.145485][ T5945] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 531.386947][ T5945] usb 7-1: Using ep0 maxpacket: 8 [ 531.563003][ T5945] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 531.584972][ T5945] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 531.617231][ T5945] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 531.650392][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.715542][ T5945] usb 7-1: Product: syz [ 531.726412][ T5945] usb 7-1: Manufacturer: syz [ 531.735582][ T5945] usb 7-1: SerialNumber: syz [ 531.760296][ T5945] usb 7-1: config 0 descriptor?? [ 532.130870][ T5945] usb 7-1: USB disconnect, device number 8 [ 532.337643][ T5918] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 532.388084][T13535] FAULT_INJECTION: forcing a failure. [ 532.388084][T13535] name failslab, interval 1, probability 0, space 0, times 0 [ 532.400982][T13535] CPU: 1 UID: 0 PID: 13535 Comm: syz.4.2254 Not tainted syzkaller #0 PREEMPT(full) [ 532.401006][T13535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 532.401016][T13535] Call Trace: [ 532.401021][T13535] [ 532.401027][T13535] dump_stack_lvl+0x189/0x250 [ 532.401042][T13535] ? __pfx____ratelimit+0x10/0x10 [ 532.401058][T13535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.401069][T13535] ? __pfx__printk+0x10/0x10 [ 532.401087][T13535] should_fail_ex+0x414/0x560 [ 532.401106][T13535] should_failslab+0xa8/0x100 [ 532.401120][T13535] __kmalloc_cache_noprof+0x6f/0x6f0 [ 532.401131][T13535] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 532.401142][T13535] ? sctp_add_bind_addr+0x8c/0x370 [ 532.401151][T13535] ? sctp_add_bind_addr+0xb0/0x370 [ 532.401163][T13535] sctp_add_bind_addr+0x8c/0x370 [ 532.401175][T13535] sctp_copy_local_addr_list+0x30b/0x4e0 [ 532.401188][T13535] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 532.401198][T13535] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 532.401209][T13535] ? sctp_v6_is_any+0x64/0x80 [ 532.401221][T13535] ? sctp_copy_one_addr+0x93/0x360 [ 532.401233][T13535] sctp_bind_addr_copy+0xb3/0x3c0 [ 532.401244][T13535] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 532.401259][T13535] sctp_connect_new_asoc+0x2e0/0x690 [ 532.401273][T13535] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 532.401284][T13535] ? __local_bh_enable_ip+0x12d/0x1c0 [ 532.401301][T13535] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 532.401314][T13535] ? security_sctp_bind_connect+0x7e/0x2e0 [ 532.401331][T13535] sctp_sendmsg+0x155c/0x2810 [ 532.401350][T13535] ? __pfx_sctp_sendmsg+0x10/0x10 [ 532.401365][T13535] ? aa_sk_perm+0x81e/0x950 [ 532.401378][T13535] ? __pfx_aa_sk_perm+0x10/0x10 [ 532.401390][T13535] ? sock_rps_record_flow+0x19/0x410 [ 532.401406][T13535] ? inet_sendmsg+0x2f4/0x370 [ 532.401421][T13535] __sock_sendmsg+0x19c/0x270 [ 532.401436][T13535] ____sys_sendmsg+0x52d/0x830 [ 532.401449][T13535] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.401468][T13535] ___sys_sendmsg+0x21f/0x2a0 [ 532.401480][T13535] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.401490][T13535] ? __lock_acquire+0xab9/0xd20 [ 532.401520][T13535] ? __fget_files+0x2a/0x420 [ 532.401531][T13535] ? __fget_files+0x3a0/0x420 [ 532.401549][T13535] __sys_sendmmsg+0x28e/0x430 [ 532.401562][T13535] ? __pfx___sys_sendmmsg+0x10/0x10 [ 532.401570][T13535] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 532.401596][T13535] ? ksys_write+0x22a/0x250 [ 532.401605][T13535] ? exc_page_fault+0x82/0x100 [ 532.401617][T13535] ? __pfx_ksys_write+0x10/0x10 [ 532.401639][T13535] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 532.401656][T13535] __do_fast_syscall_32+0xb6/0x2b0 [ 532.401668][T13535] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.401680][T13535] do_fast_syscall_32+0x34/0x80 [ 532.401691][T13535] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 532.401704][T13535] RIP: 0023:0xf7ff3539 [ 532.401714][T13535] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 532.401723][T13535] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 532.401735][T13535] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 532.401742][T13535] RDX: 0000000000000002 RSI: 000000003404c891 RDI: 0000000000000000 [ 532.401748][T13535] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 532.401754][T13535] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 532.401759][T13535] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 532.401775][T13535] [ 532.757476][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 532.796130][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 532.824000][ T5918] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 532.841402][ T5918] usb 3-1: config 0 has no interface number 0 [ 532.877708][T13544] ------------[ cut here ]------------ [ 532.883510][T13544] WARNING: CPU: 1 PID: 13544 at net/mac80211/chan.c:833 ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 532.894962][T13544] Modules linked in: [ 532.899156][T13544] CPU: 1 UID: 0 PID: 13544 Comm: syz.4.2255 Not tainted syzkaller #0 PREEMPT(full) [ 532.908592][T13544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 532.918680][T13544] RIP: 0010:ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 532.925916][T13544] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2b ce 54 f7 4d 8b 36 4d 39 fe 74 22 e8 2e 1c ef f6 e9 ef f8 ff ff e8 24 1c ef f6 90 <0f> 0b 90 e9 47 07 00 00 e8 16 1c ef f6 e9 39 07 00 00 48 83 7c 24 [ 532.945572][T13544] RSP: 0018:ffffc9000be96200 EFLAGS: 00010287 [ 532.951632][T13544] RAX: ffffffff8ad13012 RBX: 0000000000000000 RCX: 0000000000080000 [ 532.959638][T13544] RDX: ffffc9000cf5b000 RSI: 000000000001b42c RDI: 000000000001b42d [ 532.967635][T13544] RBP: ffffc9000be963e0 R08: ffff888061d557c7 R09: 1ffff1100c3aaaf8 [ 532.975668][T13544] R10: dffffc0000000000 R11: ffffed100c3aaaf9 R12: dffffc0000000000 [ 532.983638][T13544] R13: 0000000000000070 R14: ffff888023baa910 R15: ffff888023baa910 [ 532.992024][T13544] FS: 0000000000000000(0000) GS:ffff888125e0d000(0063) knlGS:00000000f54e6b40 [ 533.001009][T13544] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 533.007656][T13544] CR2: 00000000f54c5da4 CR3: 0000000030264000 CR4: 00000000003526f0 [ 533.015695][T13544] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 533.023656][T13544] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 533.031728][T13544] Call Trace: [ 533.034994][T13544] [ 533.037950][T13544] ? __pfx_ieee80211_recalc_chanctx_chantype+0x10/0x10 [ 533.044793][T13544] ? __local_bh_enable_ip+0x12d/0x1c0 [ 533.050186][T13544] ? __pfx___might_resched+0x10/0x10 [ 533.055498][T13544] ieee80211_assign_link_chanctx+0x5ca/0xd70 [ 533.061475][T13544] __ieee80211_link_release_channel+0x33b/0x4a0 [ 533.067734][T13544] ieee80211_leave_mesh+0xc5/0x130 [ 533.072831][T13544] cfg80211_leave_mesh+0x293/0x800 [ 533.077976][T13544] cfg80211_netdev_notifier_call+0x1aa/0x1440 [ 533.084035][T13544] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 533.090578][T13544] ? __resched_curr+0x2d9/0x3e0 [ 533.095662][T13544] ? __lock_acquire+0xab9/0xd20 [ 533.100507][T13544] ? do_raw_spin_lock+0x121/0x290 [ 533.105578][T13544] ? inetdev_event+0x464/0x15b0 [ 533.110423][T13544] ? igmp_netdev_event+0x7c/0x770 [ 533.115489][T13544] notifier_call_chain+0x1b6/0x3e0 [ 533.120807][T13544] __dev_close_many+0x106/0x6f0 [ 533.125671][T13544] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.130946][T13544] ? __local_bh_enable_ip+0x12d/0x1c0 [ 533.136573][T13544] ? __pfx___dev_close_many+0x10/0x10 [ 533.141967][T13544] __dev_change_flags+0x2c7/0x6d0 [ 533.147073][T13544] ? __pfx___dev_change_flags+0x10/0x10 [ 533.152637][T13544] ? netif_state_change+0x256/0x3a0 [ 533.157918][T13544] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 533.163914][T13544] ? __pfx_netif_state_change+0x10/0x10 [ 533.169598][T13544] netif_change_flags+0x88/0x1a0 [ 533.174531][T13544] do_setlink+0xc55/0x41c0 [ 533.178975][T13544] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 533.185130][T13544] ? __pfx_do_setlink+0x10/0x10 [ 533.190198][T13544] ? stack_trace_save+0x9c/0xe0 [ 533.195455][T13544] ? __pfx_stack_trace_save+0x10/0x10 [ 533.200847][T13544] ? __lock_acquire+0xab9/0xd20 [ 533.205742][T13544] ? __mutex_trylock_common+0x153/0x260 [ 533.211279][T13544] ? __pfx___mutex_trylock_common+0x10/0x10 [ 533.217194][T13544] ? rcu_is_watching+0x15/0xb0 [ 533.221951][T13544] ? trace_contention_end+0x39/0x120 [ 533.227348][T13544] ? __mutex_lock+0x335/0x1350 [ 533.232075][ T5918] usb 3-1: config 0 interface 217 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 533.232127][T13544] ? rtnl_newlink+0x8e9/0x1c80 [ 533.247899][T13544] ? __pfx___mutex_lock+0x10/0x10 [ 533.252921][T13544] ? ns_capable+0x8a/0xf0 [ 533.257293][T13544] ? rtnl_link_get_net_capable+0x16a/0x350 [ 533.263095][T13544] rtnl_newlink+0x14ad/0x1c80 [ 533.267823][T13544] ? __pfx_rtnl_newlink+0x10/0x10 [ 533.272846][T13544] ? is_bpf_text_address+0x26/0x2b0 [ 533.278216][T13544] ? __lock_acquire+0xab9/0xd20 [ 533.283067][T13544] ? __lock_acquire+0xab9/0xd20 [ 533.287953][T13544] ? is_bpf_text_address+0x26/0x2b0 [ 533.293148][T13544] ? is_bpf_text_address+0x292/0x2b0 [ 533.298655][T13544] ? is_bpf_text_address+0x26/0x2b0 [ 533.303868][T13544] ? __lock_acquire+0xab9/0xd20 [ 533.308764][T13544] ? __pfx_rtnl_newlink+0x10/0x10 [ 533.313781][T13544] rtnetlink_rcv_msg+0x7cf/0xb70 [ 533.318795][T13544] ? __lock_acquire+0xab9/0xd20 [ 533.323637][T13544] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 533.328770][T13544] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 533.334225][T13544] netlink_rcv_skb+0x208/0x470 [ 533.339039][T13544] ? __lock_acquire+0xab9/0xd20 [ 533.343878][T13544] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 533.349588][T13544] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 533.354879][T13544] ? netlink_deliver_tap+0x2e/0x1b0 [ 533.360216][T13544] netlink_unicast+0x82f/0x9e0 [ 533.364970][T13544] ? __pfx_netlink_unicast+0x10/0x10 [ 533.370332][T13544] ? netlink_sendmsg+0x642/0xb30 [ 533.375319][T13544] ? skb_put+0x11b/0x210 [ 533.379549][T13544] netlink_sendmsg+0x805/0xb30 [ 533.384299][T13544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.389608][T13544] ? __import_iovec+0x5d4/0x7f0 [ 533.394456][T13544] ? aa_sock_msg_perm+0xf1/0x1d0 [ 533.399395][T13544] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.404851][T13544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.410169][T13544] __sock_sendmsg+0x21c/0x270 [ 533.414836][T13544] ____sys_sendmsg+0x505/0x830 [ 533.419622][T13544] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.424894][T13544] ? __pfx_futex_wake_mark+0x10/0x10 [ 533.430261][T13544] ___sys_sendmsg+0x21f/0x2a0 [ 533.434929][T13544] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.440182][T13544] ? __fget_files+0x2a/0x420 [ 533.444756][T13544] ? __fget_files+0x3a0/0x420 [ 533.449462][T13544] __sys_sendmsg+0x164/0x220 [ 533.454036][T13544] ? __pfx___sys_sendmsg+0x10/0x10 [ 533.459169][T13544] ? rcu_is_watching+0x15/0xb0 [ 533.463921][T13544] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 533.470603][T13544] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.475813][T13544] __do_fast_syscall_32+0xb6/0x2b0 [ 533.480924][T13544] do_fast_syscall_32+0x34/0x80 [ 533.485787][T13544] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.492100][T13544] RIP: 0023:0xf7ff3539 [ 533.496200][T13544] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 533.516056][T13544] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 533.524461][T13544] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 533.532467][T13544] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 533.540460][T13544] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 533.548472][T13544] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 533.556466][T13544] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.564442][T13544] [ 533.567480][T13544] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 533.574739][T13544] CPU: 1 UID: 0 PID: 13544 Comm: syz.4.2255 Not tainted syzkaller #0 PREEMPT(full) [ 533.584082][T13544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 533.594123][T13544] Call Trace: [ 533.597388][T13544] [ 533.600299][T13544] dump_stack_lvl+0x99/0x250 [ 533.604873][T13544] ? __asan_memcpy+0x40/0x70 [ 533.609462][T13544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.614653][T13544] ? __pfx__printk+0x10/0x10 [ 533.619231][T13544] vpanic+0x237/0x6d0 [ 533.623200][T13544] ? __pfx_vpanic+0x10/0x10 [ 533.627699][T13544] panic+0xb9/0xc0 [ 533.631412][T13544] ? __pfx_panic+0x10/0x10 [ 533.635814][T13544] __warn+0x31b/0x4b0 [ 533.639793][T13544] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 533.646362][T13544] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 533.652930][T13544] report_bug+0x2be/0x4f0 [ 533.657247][T13544] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 533.663818][T13544] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 533.670390][T13544] ? ieee80211_recalc_chanctx_chantype+0x89f/0x10f0 [ 533.676981][T13544] handle_bug+0x84/0x160 [ 533.681206][T13544] exc_invalid_op+0x1a/0x50 [ 533.685688][T13544] asm_exc_invalid_op+0x1a/0x20 [ 533.690613][T13544] RIP: 0010:ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 533.697790][T13544] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2b ce 54 f7 4d 8b 36 4d 39 fe 74 22 e8 2e 1c ef f6 e9 ef f8 ff ff e8 24 1c ef f6 90 <0f> 0b 90 e9 47 07 00 00 e8 16 1c ef f6 e9 39 07 00 00 48 83 7c 24 [ 533.717471][T13544] RSP: 0018:ffffc9000be96200 EFLAGS: 00010287 [ 533.723525][T13544] RAX: ffffffff8ad13012 RBX: 0000000000000000 RCX: 0000000000080000 [ 533.731477][T13544] RDX: ffffc9000cf5b000 RSI: 000000000001b42c RDI: 000000000001b42d [ 533.739453][T13544] RBP: ffffc9000be963e0 R08: ffff888061d557c7 R09: 1ffff1100c3aaaf8 [ 533.747414][T13544] R10: dffffc0000000000 R11: ffffed100c3aaaf9 R12: dffffc0000000000 [ 533.755465][T13544] R13: 0000000000000070 R14: ffff888023baa910 R15: ffff888023baa910 [ 533.763431][T13544] ? ieee80211_recalc_chanctx_chantype+0x10e2/0x10f0 [ 533.770111][T13544] ? __pfx_ieee80211_recalc_chanctx_chantype+0x10/0x10 [ 533.776951][T13544] ? __local_bh_enable_ip+0x12d/0x1c0 [ 533.782311][T13544] ? __pfx___might_resched+0x10/0x10 [ 533.787609][T13544] ieee80211_assign_link_chanctx+0x5ca/0xd70 [ 533.793579][T13544] __ieee80211_link_release_channel+0x33b/0x4a0 [ 533.799802][T13544] ieee80211_leave_mesh+0xc5/0x130 [ 533.804890][T13544] cfg80211_leave_mesh+0x293/0x800 [ 533.809995][T13544] cfg80211_netdev_notifier_call+0x1aa/0x1440 [ 533.816067][T13544] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 533.822560][T13544] ? __resched_curr+0x2d9/0x3e0 [ 533.827398][T13544] ? __lock_acquire+0xab9/0xd20 [ 533.832239][T13544] ? do_raw_spin_lock+0x121/0x290 [ 533.837254][T13544] ? inetdev_event+0x464/0x15b0 [ 533.842109][T13544] ? igmp_netdev_event+0x7c/0x770 [ 533.847119][T13544] notifier_call_chain+0x1b6/0x3e0 [ 533.852220][T13544] __dev_close_many+0x106/0x6f0 [ 533.857055][T13544] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.862230][T13544] ? __local_bh_enable_ip+0x12d/0x1c0 [ 533.867588][T13544] ? __pfx___dev_close_many+0x10/0x10 [ 533.872946][T13544] __dev_change_flags+0x2c7/0x6d0 [ 533.877955][T13544] ? __pfx___dev_change_flags+0x10/0x10 [ 533.883484][T13544] ? netif_state_change+0x256/0x3a0 [ 533.888681][T13544] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 533.894643][T13544] ? __pfx_netif_state_change+0x10/0x10 [ 533.900173][T13544] netif_change_flags+0x88/0x1a0 [ 533.905099][T13544] do_setlink+0xc55/0x41c0 [ 533.909503][T13544] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 533.915651][T13544] ? __pfx_do_setlink+0x10/0x10 [ 533.920497][T13544] ? stack_trace_save+0x9c/0xe0 [ 533.925333][T13544] ? __pfx_stack_trace_save+0x10/0x10 [ 533.930705][T13544] ? __lock_acquire+0xab9/0xd20 [ 533.935551][T13544] ? __mutex_trylock_common+0x153/0x260 [ 533.941170][T13544] ? __pfx___mutex_trylock_common+0x10/0x10 [ 533.947054][T13544] ? rcu_is_watching+0x15/0xb0 [ 533.951806][T13544] ? trace_contention_end+0x39/0x120 [ 533.957104][T13544] ? __mutex_lock+0x335/0x1350 [ 533.961854][T13544] ? rtnl_newlink+0x8e9/0x1c80 [ 533.966603][T13544] ? __pfx___mutex_lock+0x10/0x10 [ 533.971654][T13544] ? ns_capable+0x8a/0xf0 [ 533.976071][T13544] ? rtnl_link_get_net_capable+0x16a/0x350 [ 533.981864][T13544] rtnl_newlink+0x14ad/0x1c80 [ 533.986532][T13544] ? __pfx_rtnl_newlink+0x10/0x10 [ 533.991544][T13544] ? is_bpf_text_address+0x26/0x2b0 [ 533.996730][T13544] ? __lock_acquire+0xab9/0xd20 [ 534.001570][T13544] ? __lock_acquire+0xab9/0xd20 [ 534.006412][T13544] ? is_bpf_text_address+0x26/0x2b0 [ 534.011604][T13544] ? is_bpf_text_address+0x292/0x2b0 [ 534.016873][T13544] ? is_bpf_text_address+0x26/0x2b0 [ 534.022092][T13544] ? __lock_acquire+0xab9/0xd20 [ 534.026940][T13544] ? __pfx_rtnl_newlink+0x10/0x10 [ 534.031952][T13544] rtnetlink_rcv_msg+0x7cf/0xb70 [ 534.036894][T13544] ? __lock_acquire+0xab9/0xd20 [ 534.041729][T13544] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 534.046820][T13544] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 534.052272][T13544] netlink_rcv_skb+0x208/0x470 [ 534.057019][T13544] ? __lock_acquire+0xab9/0xd20 [ 534.061853][T13544] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 534.067299][T13544] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 534.072575][T13544] ? netlink_deliver_tap+0x2e/0x1b0 [ 534.077760][T13544] netlink_unicast+0x82f/0x9e0 [ 534.082510][T13544] ? __pfx_netlink_unicast+0x10/0x10 [ 534.087777][T13544] ? netlink_sendmsg+0x642/0xb30 [ 534.092698][T13544] ? skb_put+0x11b/0x210 [ 534.097033][T13544] netlink_sendmsg+0x805/0xb30 [ 534.101785][T13544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.107074][T13544] ? __import_iovec+0x5d4/0x7f0 [ 534.111907][T13544] ? aa_sock_msg_perm+0xf1/0x1d0 [ 534.116838][T13544] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 534.122130][T13544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.127429][T13544] __sock_sendmsg+0x21c/0x270 [ 534.132415][T13544] ____sys_sendmsg+0x505/0x830 [ 534.137170][T13544] ? __pfx_____sys_sendmsg+0x10/0x10 [ 534.142438][T13544] ? __pfx_futex_wake_mark+0x10/0x10 [ 534.147711][T13544] ___sys_sendmsg+0x21f/0x2a0 [ 534.152374][T13544] ? __pfx____sys_sendmsg+0x10/0x10 [ 534.157573][T13544] ? __fget_files+0x2a/0x420 [ 534.162144][T13544] ? __fget_files+0x3a0/0x420 [ 534.166807][T13544] __sys_sendmsg+0x164/0x220 [ 534.171382][T13544] ? __pfx___sys_sendmsg+0x10/0x10 [ 534.176483][T13544] ? rcu_is_watching+0x15/0xb0 [ 534.181240][T13544] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 534.187895][T13544] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.193096][T13544] __do_fast_syscall_32+0xb6/0x2b0 [ 534.198193][T13544] do_fast_syscall_32+0x34/0x80 [ 534.203028][T13544] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 534.209337][T13544] RIP: 0023:0xf7ff3539 [ 534.213393][T13544] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 534.233015][T13544] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 534.241445][T13544] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 534.249404][T13544] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 534.257374][T13544] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 534.265328][T13544] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 534.273288][T13544] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 534.281283][T13544] [ 534.284565][T13544] Kernel Offset: disabled [ 534.288874][T13544] Rebooting in 86400 seconds..