last executing test programs: 2m36.23190085s ago: executing program 0 (id=1187): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="0200000020"], 0x24, 0x0) 2m35.884639353s ago: executing program 0 (id=1188): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001dc0)={0x10, 0x36, 0x400, 0x70bd2a, 0x25dfdbfc}, 0x10}], 0x1}, 0x40004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="2801fe00000000000100000001"], 0x128}, 0x0) 2m35.578241997s ago: executing program 0 (id=1190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000010900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000050000000060a010400000000000000000100000808000b400000000028000480240001800b0001007470726f7879000014000280080003400800000a080001400000000a0900010073797a30"], 0xc4}}, 0x4008800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x1100, &(0x7f0000000280)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}, [@migrate={0x9c, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@mcast1, @in=@private=0xa010102, @in=@loopback, 0x33, 0x1, 0x0, 0x3506, 0xa, 0x8}]}]}, 0xec}}, 0x0) 2m35.26508656s ago: executing program 0 (id=1195): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) 2m34.785020807s ago: executing program 0 (id=1196): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m34.176716327s ago: executing program 0 (id=1198): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004b41460860163209ea80010203010902120003000000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x8602) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000400)={0x1, 0x5, 0x3, &(0x7f00000004c0)={0x1, "ef9af0d5f2595d69e3b5000005000000000000000000030000000000f4ffffff00"}}) read(r1, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)={0x2, 0x4, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x84623ea19519b178, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_sa={0x2, 0x1, 0x4d6, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x3, 0x6, 0x32, 0x0, 0x0, @in={0x2, 0x4e23, @private=0xa010102}}]}, 0x50}}, 0x20000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0xe, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x17, 0x10, &(0x7f0000000580)=ANY=[@ANYRES16=r1, @ANYRES8=r2, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdirat$cgroup(r4, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r5, r5, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000b, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="40100e0000000e11e8fd7d8a4cdc2ec7bbe52fed"], &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000100)={0x40, 0x13, 0x3, "18c66d"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x8c}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x0, 0x10, 0x2, 0x1, 0xf, 0x1, 0x1e, 0xef15, 0x3ba, 0x3, 0x240, 0x2b4d}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x5}, &(0x7f00000002c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xb1a}, &(0x7f0000000340)={0x20, 0x89, 0x2}}) r7 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOC_STREAMS(r7, 0x8008551c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000003c0)) 2m18.997745588s ago: executing program 32 (id=1198): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004b41460860163209ea80010203010902120003000000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x8602) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000400)={0x1, 0x5, 0x3, &(0x7f00000004c0)={0x1, "ef9af0d5f2595d69e3b5000005000000000000000000030000000000f4ffffff00"}}) read(r1, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)={0x2, 0x4, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x84623ea19519b178, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_sa={0x2, 0x1, 0x4d6, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x3, 0x6, 0x32, 0x0, 0x0, @in={0x2, 0x4e23, @private=0xa010102}}]}, 0x50}}, 0x20000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0xe, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x17, 0x10, &(0x7f0000000580)=ANY=[@ANYRES16=r1, @ANYRES8=r2, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdirat$cgroup(r4, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r5, r5, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000b, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="40100e0000000e11e8fd7d8a4cdc2ec7bbe52fed"], &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000100)={0x40, 0x13, 0x3, "18c66d"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x8c}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x0, 0x10, 0x2, 0x1, 0xf, 0x1, 0x1e, 0xef15, 0x3ba, 0x3, 0x240, 0x2b4d}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x5}, &(0x7f00000002c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xb1a}, &(0x7f0000000340)={0x20, 0x89, 0x2}}) r7 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOC_STREAMS(r7, 0x8008551c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000003c0)) 7.313893716s ago: executing program 2 (id=1772): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) (fail_nth: 1) 7.076867628s ago: executing program 2 (id=1775): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) r4 = memfd_create(&(0x7f0000000080), 0x0) splice(r2, 0x0, r4, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000406c256d000000000000010902240001000000000904000001030000000921000000012205000905810300"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000002540)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "83c5b03b"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000340)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x423}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000c80)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x412}}, 0x0, 0x0, 0x0}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r5, 0x8b1b, &(0x7f0000000040)) 6.848535897s ago: executing program 1 (id=1777): unshare(0x2c020400) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4b0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @mcast2, 0x9}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x11, 0x4, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, 0x0}, 0x20) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 6.649495589s ago: executing program 1 (id=1778): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getroute={0x14, 0x1a, 0x214, 0x70bd2a, 0x25dfdbfe}, 0x14}}, 0x40800) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getroute={0x14, 0x1a, 0x214, 0x70bd2a, 0x25dfdbfe}, 0x14}}, 0x40800) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x1bd}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x44}}, 0x0) 6.29305982s ago: executing program 4 (id=1780): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="78e7adca5a18", 'wg0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x1005}], 0x1, 0x0, 0x0) r2 = io_uring_setup(0x2c4c, &(0x7f00000000c0)={0x0, 0x1, 0x1000, 0x0, 0x4}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x18, &(0x7f0000000000), 0x1) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'tunl0\x00'}}, 0x1e) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000007480)={'wlan0\x00'}) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.162738043s ago: executing program 4 (id=1782): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xdd, 0x18, 0xb2, 0x10, 0x4e8, 0x6889, 0x779, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0xe3, 0x0, 0x0, 0x53, 0x95, 0x8c}}]}}]}}, 0x0) fcntl$setsig(r1, 0xa, 0x21) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) sendfile(r4, r4, 0x0, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000008d00)={0x0, 0x0, &(0x7f0000008cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="e8040000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf258100000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x4f8}, 0x1, 0x0, 0x0, 0x2005c800}, 0x8c0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r6) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000ffdbdf254a0000000600030000040000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x44000) syz_open_dev$radio(&(0x7f00000001c0), 0x1, 0x2) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="410000efffffff04ffffff000000"], 0x14}, 0x1, 0x0, 0x0, 0x8005}, 0x40004) 5.321329607s ago: executing program 3 (id=1785): socket(0x10, 0x803, 0x0) syz_usb_connect(0x6, 0x11e, &(0x7f0000002040)={{0x12, 0x1, 0x201, 0xcc, 0xf4, 0x59, 0xff, 0x56e, 0x5004, 0x1921, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10c, 0x2, 0xff, 0x3, 0x50, 0x2, [{{0x9, 0x4, 0x16, 0x0, 0x2, 0xb2, 0xe8, 0x73, 0x1, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x5, 0x5}}], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x7, 0x4, 0x9, [@generic={0x2, 0x23}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x6, 0x7c, 0x1, [@generic={0x3d, 0xb, "00d236169b5f51b704f8ffa100662cffceaa59c2c6d8589e88e6b098233995644383417ce07142f24416db33d6536d42f0a7c8c48c100e21e22110"}]}}]}}, {{0x9, 0x4, 0x1d, 0x4, 0x1, 0xff, 0xff, 0xff, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x9}, [@extension_unit={0x8, 0x24, 0x8, 0x5, 0x1, 0x7, "da"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x305, 0x1, 0x3, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x1ff, 0x3, 0xa6, 0x200, 0xb9, 0xf2}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "f5"}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0x6, 0x19, 0xa4}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x2, 0xdac8, 0xc3, 0x8, 0xcd6, 0x9a}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0x4, 0x0, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x1, 0x59, 0xb1}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0xab, 0x8, 0x5}]}], [{{0x9, 0x5, 0xc, 0xc, 0x8, 0x4, 0x73, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x7}, @generic={0x5, 0xc, "f7b43d"}]}}]}}]}}]}}, &(0x7f0000002400)={0xa, &(0x7f00000021c0)={0xa, 0x6, 0x100, 0x1, 0x2, 0xf, 0xff, 0xc}, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="07075be781a4c5d988050f050000faadac9ebe4b02adbd6ac8f94f7d0859e9ef31"], 0x2, [{0x87, &(0x7f0000002240)=ANY=[@ANYBLOB="8703372518001567a6c5dfd4c7245c71e204d7a9786d59ad52a2dc386afe0756c08944d9d680f36dbff8cf186b94e78146afe16bb8fbd9dd3d445f9d8f51698b52b9095293be12095ab6a08e5ebbfaacc9a1c1ccfad943daedec4a4b18047d7cfd99745434b5af26174b59a33aade6a0ff44bffd1e355cec1a8eb0cb809b4649"]}, {0x9b, &(0x7f0000002300)=ANY=[@ANYBLOB="9b03ce52199f544bbed5eb6d0353cbc1a269cdfc7db3aeac10717e3c1d153c2ff974e13b6a7e8a3eacbd1eb47e853ada12019d4af9effea8caff9bf67485798eb2d712ac1d2367ba3828fff128436c62b7ad2b4b3bb9f684ec527f4602ab1b22d2feaf45bf5c90577affe7807c6caf2c1204934a8cc9bb3d41c7a8811b2e29fb646905abfcf73a00c38b29e79dffc1cb62e0b8187226addd238012"]}]}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001900010928bd7000000000001318800000ac14140008000700ac1414383e1ffe6e834952326cacecae7a9861568112eedc09aa19c631a8bcca16907a446c6934e4be508e8ee6c8e17cb231aa63010e8f5f3a2057a68ccfa04492de61a5b153ed95a9568b61252e459f0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x0, 0x0}, &(0x7f0000000300)={0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0xa2442, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000140)={0x3, 0x4, 0x5, 0x2, @vifc_lcl_addr=@loopback, @remote}, 0x10) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x41c, 0x2c, 0xd27, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x3e0, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_ACT={0x394, 0x2, [@m_skbedit={0x14c, 0x1f, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x6, 0x20000000, 0xaf000000, 0xfffffffd}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3ff}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}]}, {0xef, 0x6, "4c0b2d056d27d61bf9caa7638256403e0a873ca84f9e23b21c8b50af1caf8445094c77efc7a906cc51927cae63f5582b9cd772754ad95975f8cd15a7eaf94d6407b559f7e03319122770e276d047f4e861875f58f1f09c50ed6055b988b88edb58dbe1b4964af4b889e66d3e316861be06762ece4361114a00bf7934b73b2fcfcc13476192158ee9e4eb6ac960884827b73b0070d251dfb26c40ee090cf9d8b117e148b8bf73557fc7200d34a97ba8fdfb6822477f55185368e5735891cf0e8306674740bbb34c5274c454ba6a9f17fe9ac26abf476434507f12237fdafb132634a52843c93aa663f4dac1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x130, 0x16, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x2, 0x9, 0xbde, 0x4}, @broadcast, @broadcast, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x5, 0x0, 0x400, 0xffff7fff}, @multicast1, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x8, 0x3, 0x1, 0x7}, @broadcast, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x43, 0x0, 0x9, 0x200}, @multicast1, @loopback, 0xffffffff, 0x1}}]}, {0x68, 0x6, "efb1ceb9e1fd5c3140979a820830591412b3a1e51ff01430b993e9513caeae48b445fc37a3632c283671b57dd18d62cc84acc268c7342a5de3348ec761f3af57144f222391ee893e8205a4803bb4aa896c4072f30729be7dd8940468da8e00213347348f"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0x114, 0x1a, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "a15a1126ed2dbc77499eb26844a4b31b"}, @TCA_CT_LABELS={0x14, 0x7, "bf91b338555d4b4d82637cd8f81d8678"}]}, {0xc2, 0x6, "c527675bf7f4646ae31c844a33598eff03ceaabbf6272a809016b3f45d79c400b539c7a4d14eaae83644f301ed04c18bf42d5c76a75e8a581d9a3557c255c6295de63eb3da7d415bef4d1f78361360ce6fe6411cab60fa0a5057105013247436fea28171a79df64b155fc529fcfebcabf8e2f34843a55ef8798b5d34a7f442bde0879242568c20977076b5be5c90ddd6de40fd02d6c00f1f52b2454bd700ba583c7a3e90fc14df63eeb534c65c8bfdca7233e81f51f78cc2c2ccc2f16679"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x6}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xfff5}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xe}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xf}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xb}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0xffffffff}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x240080d0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x21, &(0x7f0000000180)={0x0, 0x0, 0x1e}) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x1, 0x3ff, 0x32315559, 0x8, 0x203, 0x2, 0x7, 0x6, 0x1, 0x2, 0x1, 0x1}}) 4.577233009s ago: executing program 4 (id=1790): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) rseq(0xfffffffffffffffd, 0xfffffffffffffc9a, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x5c, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x5c}}, 0x800) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0xa00, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) mmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x3000000, 0x50, r4, 0xe887a000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000d3ba38720dd729c4780000000000772252d9c34e7210"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00"/36, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f00"], 0x254}}, 0x0) 4.43074835s ago: executing program 3 (id=1792): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="78e7adca5a18", 'wg0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x1005}], 0x1, 0x0, 0x0) r2 = io_uring_setup(0x2c4c, &(0x7f00000000c0)={0x0, 0x1, 0x1000, 0x0, 0x4}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x18, &(0x7f0000000000), 0x1) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'tunl0\x00'}}, 0x1e) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000007480)={'wlan0\x00'}) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.293321274s ago: executing program 4 (id=1793): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) msgget(0x3, 0x606) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) mknod(&(0x7f0000000000)='./file0\x00', 0x80, 0x96) io_uring_enter(r1, 0x3516, 0x483, 0x0, 0x0, 0x0) 4.235689013s ago: executing program 5 (id=1794): socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x4, 0x4) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 4.200810092s ago: executing program 3 (id=1795): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) set_mempolicy_home_node(&(0x7f0000942000/0x4000)=nil, 0x4000, 0x5, 0x0) 4.021064164s ago: executing program 4 (id=1796): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(r2, 0x0, &(0x7f0000000040)=""/111, 0x6f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x22000, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x5f41, 0x80}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000340), 0x14) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0xfffffd02, 0x0, 0x0, &(0x7f0000000140)=""/55, 0x37}, 0x202) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = syz_open_dev$loop(&(0x7f0000000280), 0x8001, 0x58880) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r3) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x2081, 0x0) write$uinput_user_dev(r7, &(0x7f0000000540)={'syz0\x00', {0x6, 0x3, 0xb, 0x5}, 0x50, [0xfa0, 0xc, 0x401, 0x8e8, 0x7, 0x3, 0x5, 0x5, 0x5, 0x10001, 0x2, 0x0, 0x1, 0x3, 0x707, 0x2, 0x7, 0xffffffff, 0x100000, 0xe82, 0x5, 0x4, 0xc959, 0x9, 0x9, 0x100, 0x0, 0x7, 0x9, 0x66, 0xa, 0x1ff, 0x1, 0x5b, 0x7, 0x2, 0x2, 0x7fff, 0x6, 0x1000, 0x5, 0x1, 0x1, 0xfffdff81, 0x3, 0x6, 0x3, 0x6, 0x9, 0x4, 0xe5, 0x3, 0x7, 0xfffffe00, 0xffffffff, 0x3bf, 0x5, 0x1, 0xa, 0x1, 0xa, 0x1, 0x7f, 0x8], [0x0, 0x80000000, 0x0, 0x5, 0xc31, 0x516, 0x0, 0x4, 0x8000, 0x3, 0x5, 0x7, 0x227, 0xfffffff0, 0x1, 0x92f, 0xccc4, 0xdf, 0x5, 0x4, 0x6, 0x3, 0x3, 0x3, 0xff, 0x5, 0xfffffff9, 0x3, 0x5, 0x6, 0x80, 0xb0d, 0x101, 0x1, 0x6, 0x6, 0x2f, 0x6c7, 0x0, 0x1, 0xf, 0x4, 0xffffff92, 0xa4, 0x3, 0x0, 0x5, 0x6, 0x0, 0x5, 0x935, 0x0, 0x2, 0x800000, 0x3, 0x8, 0x8, 0x2, 0x8001, 0x6, 0x3, 0x6, 0x5, 0xd50], [0x6, 0x3, 0x3, 0xe, 0x9, 0x7, 0x1, 0xfffffffc, 0x0, 0x4, 0x1000, 0x1, 0x7, 0x4, 0x2, 0x62, 0x5, 0x8, 0x0, 0x0, 0x1ff, 0x3, 0x8, 0x5, 0x3, 0xcd3, 0x7, 0x9, 0x5, 0x8, 0x2, 0x42, 0x13, 0x727, 0x7, 0x6, 0x6, 0x8e27, 0x1, 0x52, 0xc, 0x1, 0x1, 0x4180, 0x1ff, 0x7f, 0x7fffffff, 0x9, 0x8, 0xfffffffe, 0x1, 0x4, 0x4, 0x0, 0xd, 0x11, 0x8, 0x2, 0x7, 0x101, 0x3658f834, 0x2, 0x400, 0x1], [0x2, 0x101, 0x96, 0x8, 0x8, 0x1, 0x7, 0x7, 0xdd, 0x3, 0x5, 0x5, 0x10000, 0x7, 0x8, 0x7f, 0x4, 0x1, 0xa07, 0xd, 0x6, 0x4a88, 0x6, 0x8, 0x6, 0x2, 0x0, 0x372e, 0x0, 0x200, 0x7, 0x7fff, 0x400, 0x9, 0x80, 0x95, 0x0, 0x7, 0x3, 0x3ff, 0x6, 0xfffffffb, 0x7f, 0xe98, 0x6, 0xc, 0x10, 0x48, 0x10000, 0x5, 0x7, 0x1, 0x800, 0x0, 0x1, 0x7f, 0xc, 0x8, 0x3, 0x7, 0x401, 0x1, 0x8, 0x2deedef9]}, 0x45c) 3.951015975s ago: executing program 5 (id=1797): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 3.914281004s ago: executing program 2 (id=1798): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x55, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000480)=@multiplanar_mmap={0x2aab7e2c, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0x8001}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000440)={0x300, 0x2, 0x800, 0xfffffffffffffffc}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) 3.727857641s ago: executing program 5 (id=1799): pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7}, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x5, 0xfffffffffffffff8, 0x0, 0x4000000000}, 0x0, 0x0, 0x0) 3.477273506s ago: executing program 1 (id=1800): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0xffffffff, 0x0, 0x1fc000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000001f80)=""/4102, 0x1006) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x319a43, 0x0) 3.41328607s ago: executing program 5 (id=1801): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5128ef2c52fe809}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) r6 = syz_io_uring_setup(0x4ed, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0x0, 0x20024c}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f00000004c0), 0x1, 0x40, 0x1}) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x21, {0x4, 0x1}, 0x6}, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) 3.26019095s ago: executing program 1 (id=1802): r0 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0), 0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0x7f, 0x0, 0x0}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x140a, 0x603, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x6}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x28}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x4, 0x36f273, 0x22272d}) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000011) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000340)=@data_frame={@msdu=@type01={{0x0, 0x2, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4a62}, @device_a, @random="b1c0553d1e08", @device_b, {0x3, 0x10}, "", @value={0x0, 0x0, 0x0, 0x0, 0x28}, @value=@ver_80211n={0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0xb3, "6044ce6a449b6d9fd3bcd0a260df704b3b655907ebec6c78fb649f5ab7772d21cd1272b9c6f97ef62d34dad7f06e8f97ad4ed4dad94f768a7561181ad27608108bb7470a016245f447790d36df58a85e10966f234195f1f1d8c8cf349651fdb128463d2c7cb2a4bb7a1ee2bbfb265c9d0428f91254af694a4117c06c48def6402da837cb9ed6d72b00f19650a21605a20df5db2a3f951d6143b23652214595c53d85950d53bdb137bb1e7d352beb4b80881eba"}, {@device_a, @device_b, 0xc2, "2e74187f33e3dc43288437731dcc94f8b6b430021f548e5b42ce6c1de324509090ac7f63911f5041f14138c6914e6c122ae909327b0c7cd286f61d55545dca01b31c321cd46c7b755e29e733795c876e8fa729992abcaaf4e09813a5b1941169f6736a6db79a0d48c64345a58f2f5290905b913982fa1fc03fd399647adf1a65e846675778470a4089763dbb2de08546d72047e294a18f920ecb30e32e2df02fcb42ac91fe0e653bdf575a1d89418e190c9ee23d68f180c5b09d5c8aff150a7dc26c"}]}, 0x1b2) getdents64(r8, &(0x7f00000010c0)=""/4067, 0xfe3) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r9, &(0x7f0000000280)=[{{&(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}, 0x1}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="b000000000000000030100000800000003d57dd64b5a8166065a02760943f069b39ddb989097348e7ab5b0ae76b377770e0a01558e379c56be6818562bfd3526d23205d05a879bed2f7c82517d38426b8f8429f4659f8a4abdc8a0599fb95cd01be16c5cc4b49dae0da71eb938f12b747eede376cc0993c5e5b9cf74c25159af1111daf4095cd37296088102eb13e4221aad195be07f276ed81ed1395a69aa9234f4fcaefa03ef0a336f6b977324980000000000000029000000000000003a056d939623c59d3bb231546ec9392d1b6d06db940358d5ce73a24a4f4bcd18405edf131308059350a49b26b7a97221676794228a726a87a737e5b361e229ccce89d497b0e6f7ac6955f7093f352867a324e396d5e3a0674912b1cc510826536c6a4f39239e6f19d1f9de8f6d5906abf66095d2807b87bc1c06baa52ce622efcd0000000000000030000000000000000a01000009d800004d831bac0a7598bcea73b2eb3344c1e98eca1eb037ed9812c162f35274d300004000000000000000010100000100000078fa1f1346d5d3ca3e96cb968267e099540f40e0eba43e3389c072a437602a2a7f2375e3a4e1c4753ef7cc64820000000000"], 0x1b8}}], 0x1, 0x4008040) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 2.714958033s ago: executing program 3 (id=1803): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(r2, 0x0, &(0x7f0000000040)=""/111, 0x6f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x22000, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x5f41, 0x80}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000340), 0x14) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x202) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = syz_open_dev$loop(&(0x7f0000000280), 0x8001, 0x58880) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r3) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x2081, 0x0) write$uinput_user_dev(r7, &(0x7f0000000540)={'syz0\x00', {0x6, 0x3, 0xb, 0x5}, 0x50, [0xfa0, 0xc, 0x401, 0x8e8, 0x7, 0x3, 0x5, 0x5, 0x5, 0x10001, 0x2, 0x0, 0x1, 0x3, 0x707, 0x2, 0x7, 0xffffffff, 0x100000, 0xe82, 0x5, 0x4, 0xc959, 0x9, 0x9, 0x100, 0x0, 0x7, 0x9, 0x66, 0xa, 0x1ff, 0x1, 0x5b, 0x7, 0x2, 0x2, 0x7fff, 0x6, 0x1000, 0x5, 0x1, 0x1, 0xfffdff81, 0x3, 0x6, 0x3, 0x6, 0x9, 0x4, 0xe5, 0x3, 0x7, 0xfffffe00, 0xffffffff, 0x3bf, 0x5, 0x1, 0xa, 0x1, 0xa, 0x1, 0x7f, 0x8], [0x0, 0x80000000, 0x0, 0x5, 0xc31, 0x516, 0x0, 0x4, 0x8000, 0x3, 0x5, 0x7, 0x227, 0xfffffff0, 0x1, 0x92f, 0xccc4, 0xdf, 0x5, 0x4, 0x6, 0x3, 0x3, 0x3, 0xff, 0x5, 0xfffffff9, 0x3, 0x5, 0x6, 0x80, 0xb0d, 0x101, 0x1, 0x6, 0x6, 0x2f, 0x6c7, 0x0, 0x1, 0xf, 0x4, 0xffffff92, 0xa4, 0x3, 0x0, 0x5, 0x6, 0x0, 0x5, 0x935, 0x0, 0x2, 0x800000, 0x3, 0x8, 0x8, 0x2, 0x8001, 0x6, 0x3, 0x6, 0x5, 0xd50], [0x6, 0x3, 0x3, 0xe, 0x9, 0x7, 0x1, 0xfffffffc, 0x0, 0x4, 0x1000, 0x1, 0x7, 0x4, 0x2, 0x62, 0x5, 0x8, 0x0, 0x0, 0x1ff, 0x3, 0x8, 0x5, 0x3, 0xcd3, 0x7, 0x9, 0x5, 0x8, 0x2, 0x42, 0x13, 0x727, 0x7, 0x6, 0x6, 0x8e27, 0x1, 0x52, 0xc, 0x1, 0x1, 0x4180, 0x1ff, 0x7f, 0x7fffffff, 0x9, 0x8, 0xfffffffe, 0x1, 0x4, 0x4, 0x0, 0xd, 0x11, 0x8, 0x2, 0x7, 0x101, 0x3658f834, 0x2, 0x400, 0x1], [0x2, 0x101, 0x96, 0x8, 0x8, 0x1, 0x7, 0x7, 0xdd, 0x3, 0x5, 0x5, 0x10000, 0x7, 0x8, 0x7f, 0x4, 0x1, 0xa07, 0xd, 0x6, 0x4a88, 0x6, 0x8, 0x6, 0x2, 0x0, 0x372e, 0x0, 0x200, 0x7, 0x7fff, 0x400, 0x9, 0x80, 0x95, 0x0, 0x7, 0x3, 0x3ff, 0x6, 0xfffffffb, 0x7f, 0xe98, 0x6, 0xc, 0x10, 0x48, 0x10000, 0x5, 0x7, 0x1, 0x800, 0x0, 0x1, 0x7f, 0xc, 0x8, 0x3, 0x7, 0x401, 0x1, 0x8, 0x2deedef9]}, 0x45c) 2.301912401s ago: executing program 5 (id=1804): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x3ad, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) mknod$loop(0x0, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x2043, 0x0, 0x0) 1.688442332s ago: executing program 2 (id=1805): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="78e7adca5a18", 'wg0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x1005}], 0x1, 0x0, 0x0) r2 = io_uring_setup(0x2c4c, &(0x7f00000000c0)={0x0, 0x1, 0x1000, 0x0, 0x4}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x18, &(0x7f0000000000), 0x1) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'tunl0\x00'}}, 0x1e) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000007480)={'wlan0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xe}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.086278054s ago: executing program 2 (id=1806): sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0x1, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x1, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x5, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x4, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x202, 0x9, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) 573.924011ms ago: executing program 4 (id=1807): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000600)=ANY=[@ANYBLOB="01000000000100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000008001000000000000000900"], 0x48}}, 0x0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000cc0)={0x2c, &(0x7f0000000ac0)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = io_uring_setup(0x191a, &(0x7f0000000000)={0x0, 0x8394, 0x2000, 0xffffbfff, 0x360}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 501.001729ms ago: executing program 2 (id=1808): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000000000f4000040"]) r3 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r3, 0x1, 0x4) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x40001043, r4, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r5, 0x0, 0x200000000000a, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000100), 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x90, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r12, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x64, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0x8}, @TCA_U32_INDEV={0x14, 0x8, 'netdevsim0\x00'}]}}]}, 0x90}}, 0x24040084) write$binfmt_misc(r8, &(0x7f0000000240)="ab734b2a27db0db1bed6580ca86b19ad1f83d405caf3dcddd2c84b0fa37176ccb6a43e99ea6eb1d6f8653d77a480d3f79c7b4b088dd859755be8e3c73b5dafa77e6b4ed2c19579a5a400e02d2d62c3a21ff88c1ec42d10a5a75d5cdd0d09d89bacf67d74461c10a4881023dc7fde805098ca3d4304000000afec88b588d6fdcbd686a71b617a1f9bb6bd23fc20d0522b9bbd4311ce537376", 0x98) syz_usb_connect(0x3, 0x98, &(0x7f0000001140)=ANY=[@ANYBLOB="12011001186360088dac0000009b010203010902860003a2000000090454020317987b5b0a24010a00060201020c2408050600070d0a329ce2090586100004f40804072501832f08000905000040008103ff0905091b08000c078009040201042e2b1503090509000000030004090502020002f7810609050303ff030840040705a6c6415a9f0905850340000b020b4b00a7d80107000000"], 0x0) 458.922543ms ago: executing program 3 (id=1809): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 218.846813ms ago: executing program 3 (id=1810): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) socket$inet6(0xa, 0x802, 0x20) syz_io_uring_setup(0x237, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$kcm(0xa, 0x2, 0x3a) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040)="00000000f5ff", 0x6, 0xfffffffffffffffd) flistxattr(r3, &(0x7f00000002c0)=""/132, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, 0x0, 0x2000) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc040ff0b, 0x110c230003) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002cbd7015ffdbdf250500"], 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000640)=0x4) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000001780)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRESDEC=r4, @ANYRESOCT, @ANYBLOB="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", @ANYRESOCT=r2]) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$inet6(0xa, 0x3, 0xff) 207.618781ms ago: executing program 1 (id=1811): rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x80}) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7}, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x5, 0xfffffffffffffff8, 0x0, 0x4000000000}, 0x0, 0x0, 0x0) 1.054962ms ago: executing program 1 (id=1812): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cc}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) (fail_nth: 6) 0s ago: executing program 5 (id=1813): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x7]}, 0x8) r1 = syz_io_uring_setup(0x20c9, &(0x7f0000000080)={0x0, 0x125f, 0x10100, 0xfffffffe, 0x100000, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff01010000260000000019e1b6950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xa, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x2c, 0x0, 0xffffffffffffffff, 0x4a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) unshare(0x24060400) unshare(0x2a020400) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000011c0)={0x0, 0x0, 0x0}, &(0x7f0000001200)=0xc) r8 = getgid() r9 = socket(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_generic(r9, &(0x7f0000002880)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000023c0)={0x154, 0x41, 0x800, 0x70bd26, 0x25dfdbfc, {0x5}, [@nested={0x34, 0x8a, 0x0, 0x1, [@typed={0x8, 0x6e, 0x0, 0x0, @u32=0x5}, @typed={0x9, 0xd2, 0x0, 0x0, @str='sit0\x00'}, @nested={0x4, 0xdd}, @nested={0x4, 0x67}, @nested={0x4, 0xbd}, @nested={0x4, 0x124}, @typed={0x8, 0x14a, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0xd7}, @generic]}, @generic="2183979b339ddf6dc7816a940cf9c8d43d0376d9ccac0f48f593f1db08250c08655ea18e2381053831e62e9522382fe3393832c4ba4a8cd60a42afe547ac32", @typed={0x8, 0x14f, 0x0, 0x0, @uid=r10}, @typed={0xa3, 0xff, 0x0, 0x0, @binary="49e03e1bdf27eb95ae5798ff155616bc4beb753c9fb59ea507209188601bb50adf3aad8f4c1e4f3be8095fce372aff59d4a708ff5e170704ded36d1d10177b8b853764430172f16a4f97961da10bf00f0fb932d6e9a25884e0fd317f5387ac0418f8a03ba85cee3936b9642fc93b49ff20294ce224a26348ea1d5facf45d7e76c3d358afd8a6cdb1e63c755ce73c4e3b98c5143317bcdcb718d7555c1828ea"}, @nested={0x20, 0xf7, 0x0, 0x1, [@nested={0x4, 0x4a}, @typed={0x15, 0x150, 0x0, 0x0, @str='/dev/vhost-vsock\x00'}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x48081}, 0x2004c004) fstat(r6, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000004a00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000024c0)="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", 0x2000, &(0x7f00000013c0)={&(0x7f0000000400)={0x50, 0x0, 0x1, {0x7, 0x2b, 0x4, 0x2, 0x5, 0xe761, 0x75c, 0x5, 0x0, 0x0, 0x10, 0x800}}, &(0x7f0000000480)={0x18, 0x0, 0xffffffffffffffff, {0x7}}, &(0x7f00000004c0)={0x18, 0x0, 0x8000000000000000, {0xc}}, &(0x7f0000000500)={0x18, 0xb, 0x1, {0xfff}}, &(0x7f0000000580)={0x18, 0x0, 0x4, {0x9}}, &(0x7f00000005c0)={0x28, 0x0, 0x4, {{0x1ff8000000, 0x1c, 0x2}}}, &(0x7f0000000600)={0x60, 0x0, 0x4, {{0xabc4, 0xfff, 0x7, 0x6750, 0x2, 0x9b, 0x9, 0x9}}}, &(0x7f0000000680)={0x18, 0xfffffffffffffff5, 0x2, {0x49}}, &(0x7f00000006c0)={0x14, 0xffffffffffffffda, 0x5, {':\xb1@\x00'}}, &(0x7f0000000700)={0x20, 0x0, 0x4928, {0x0, 0x16}}, &(0x7f00000007c0)={0x78, 0x0, 0x6, {0x8, 0x9, 0x0, {0x6, 0x5, 0x6, 0x7fffffff, 0x4, 0x7, 0x3, 0x0, 0x98e, 0x6000, 0x1, 0x0, 0x0, 0x0, 0x8}}}, &(0x7f0000000a40)={0x90, 0xffffffffffffffda, 0x3, {0x5, 0x2, 0x9, 0x116, 0x5, 0xe3, {0x0, 0x4, 0x8, 0x7, 0x1, 0x8000000000000001, 0x66592b98, 0x1, 0x1, 0x6000, 0x2, 0x0, 0x0, 0x6, 0x6}}}, &(0x7f0000000b00)={0xc8, 0xfffffffffffffffe, 0x7, [{0x0, 0x7, 0x1, 0x51b4, '#'}, {0x3, 0x7f, 0x2, 0x3, '%^'}, {0x1, 0xffffffffffff5a31, 0x5, 0x3, './(\xbe*'}, {0x0, 0x1, 0x5, 0x6ea92a00, '.@.(^'}, {0x4, 0x7fffffffffffffff, 0x7, 0xfffffff7, 'bridge\x00'}, {0x3, 0x196, 0x0, 0x80000000}]}, &(0x7f00000044c0)={0x520, 0x0, 0x0, [{{0x4, 0x1, 0xa, 0xfe7f, 0x7, 0x2, {0x0, 0x6, 0x8, 0x8, 0x100000001, 0x8001, 0xe3c00000, 0x437052bc, 0x7ff, 0x8000, 0x1, 0x0, 0x0, 0x9, 0xac}}, {0x6, 0xfffffffffffffff9, 0x5, 0x81, 'syz0\x00'}}, {{0x3, 0x3, 0x2, 0xd235, 0x7, 0xfffffff7, {0x4, 0x52bb, 0x9, 0x8, 0xe7, 0x10001, 0x2, 0x3, 0x401, 0x1000, 0x6, 0xee00, 0x0, 0xfffffff9, 0x10001}}, {0x4, 0x0, 0x8, 0x8, ',-^%\x1c,\\-'}}, {{0x5, 0x2, 0x8, 0x2, 0x6b, 0x10, {0x5, 0x6, 0x0, 0xfffffffffffffffa, 0x5, 0x11, 0xfa, 0x3, 0x7, 0x1000, 0x6e, 0x0, 0x0, 0xedc, 0xdc}}, {0x6, 0xfffffffffffffffd, 0x4, 0x100, 'GPL\x00'}}, {{0x5, 0x0, 0x6, 0x1, 0xef9, 0x1, {0x0, 0x9, 0x1, 0x5, 0x80000000, 0x3, 0xb, 0x3, 0x1, 0x1000, 0x80000001, 0x0, 0x0, 0x388, 0x80}}, {0x3, 0x1, 0xd, 0x9, '/dev/net/tun\x00'}}, {{0x4, 0x3, 0x2, 0x1, 0x0, 0x3ff, {0x1, 0x7, 0x2, 0x7, 0x8, 0x421, 0x9c, 0x4, 0xff, 0xc000, 0xd825, 0xee00, 0x0, 0x1, 0x55}}, {0x5, 0x7, 0x3, 0x0, '+-\x00'}}, {{0x0, 0x2, 0x9, 0x1, 0xd, 0x9, {0x5, 0xfffffffffffffffb, 0xe8, 0x7fffffffffffffff, 0x8000, 0x673f14f6, 0x489, 0x38, 0x7e19, 0x1000, 0x0, 0xee00, 0x0, 0x2, 0x9}}, {0x4, 0x5, 0x5, 0x10, 'syz0\x00'}}, {{0x0, 0x3, 0x3, 0x5, 0xb0, 0x1000, {0x0, 0xfffffffffffff000, 0x3, 0x8, 0xb80f, 0x9, 0x7, 0x7, 0x5, 0x4000, 0x200, 0x0, r7, 0xffff, 0x9}}, {0x2, 0x800, 0xd, 0x2, '/dev/net/tun\x00'}}, {{0x1, 0x1, 0x8, 0x7, 0x9, 0xd9b, {0x5, 0xd8f, 0xffffffffffffffff, 0x5, 0x2, 0x5, 0x6, 0x1, 0x0, 0x1000, 0x4, 0xee01, r8, 0xfffffffe, 0x3b}}, {0x6, 0x5b, 0x7, 0x1, 'bridge\x00'}}]}, &(0x7f00000012c0)={0xa0, 0xfffffffffffffffe, 0x100000001, {{0x1, 0x0, 0x62, 0x2, 0xfff, 0x5, {0x0, 0x6, 0x0, 0x9, 0xfffffffffffffff9, 0x7, 0x1, 0x10001, 0x2, 0xc000, 0x2, r10, r11, 0x1ff, 0xfffffffa}}, {0x0, 0x6}}}, &(0x7f0000001380)={0x20, 0x0, 0x7a2, {0x7, 0x4, 0x8001, 0x7f}}, &(0x7f0000006a40)={0x130, 0x0, 0xc4, {0x85ab, 0x5, 0x0, '\x00', {0x400, 0x6, 0x6, 0x1, 0xffffffffffffffff, r12, 0x1000, '\x00', 0xe4e, 0x6, 0x0, 0x1, {0x0, 0xa}, {0xffffffffffffffff, 0x10000}, {0xb1dd, 0xffffffc0}, {0x7}, 0x5, 0x4, 0xc, 0x7}}}}) r13 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r13, 0x98, 0x40, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x7fffffffffffffff}, 0x0, 0x4a) syz_emit_ethernet(0xd2, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa01800000000000000000000000000000ff020000000000000000000000000001242088a8005400000006000062d73f2aab0307726a296574049d6d67fdfe28f26267953b1cee2b4e8bc9bdf102ccd8cc8d9f9899dca2c4a7d6f39dd7628311f7073b7af78876e33d470e28039b2789b0ff236f409714fda63ecbb96454a2a85d00000800000086dd88a888be08000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, 0x0, 0x1) kernel console output (not intermixed with test programs): 0.00 device (2833:0201) [ 500.546213][T10459] usb 3-1: No valid video chain found. [ 500.658806][T10459] usb 3-1: USB disconnect, device number 61 [ 503.107464][ T1215] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 503.286883][ T1215] usb 3-1: Using ep0 maxpacket: 16 [ 503.846497][T10430] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 504.045615][T10430] usb 2-1: Using ep0 maxpacket: 16 [ 504.062447][T10430] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.203540][T10430] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 504.299042][T10430] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 504.481559][T10430] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.512986][T10430] usb 2-1: config 0 descriptor?? [ 504.757042][T11368] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1327'. [ 505.107133][T10430] HID 045e:07da: Invalid code 65791 type 1 [ 505.199307][T10430] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0014/input/input23 [ 505.303832][T10430] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 505.375696][ T9] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 505.435698][T10429] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 505.524889][ T1215] usb 3-1: unable to get BOS descriptor or descriptor too short [ 505.537585][ T1215] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 505.565651][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 505.579303][ T1215] usb 3-1: can't read configurations, error -71 [ 505.598513][T10429] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.606094][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.626978][T10429] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.635794][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 505.663131][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.673500][T10429] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 505.707697][T10429] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.708922][ T9] usb 5-1: config 0 descriptor?? [ 505.781894][T10429] usb 4-1: config 0 descriptor?? [ 506.022332][T11386] fuse: Unknown parameter 'grou00000000000000000000' [ 506.149626][T11375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.159149][T11375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.182144][ T9] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 506.207482][ T9] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 506.229986][ T9] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 506.245800][ T1215] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 506.273138][ T9] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 506.283231][ T9] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 506.313755][ T9] mcp2221 0003:04D8:00DD.0015: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 506.434888][ T1215] usb 3-1: config 0 has no interfaces? [ 506.455428][ T1215] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 506.525565][ T1215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.533720][ T1215] usb 3-1: Product: syz [ 506.576925][ T1215] usb 3-1: Manufacturer: syz [ 506.651839][ T1215] usb 3-1: SerialNumber: syz [ 506.717238][ T1215] usb 3-1: config 0 descriptor?? [ 506.828358][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1330'. [ 506.861174][ T1215] usb 4-1: USB disconnect, device number 69 [ 506.930434][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.937334][T10430] usb 2-1: USB disconnect, device number 61 [ 506.943591][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.974945][T11384] program syz.2.1332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 506.985168][T11384] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 507.004941][T10429] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 507.175693][T10429] usb 6-1: Using ep0 maxpacket: 32 [ 507.182956][T10429] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 507.199737][T10429] usb 6-1: config 0 has no interface number 0 [ 507.207610][T10431] usb 5-1: USB disconnect, device number 71 [ 507.316064][T11395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1337'. [ 507.381829][T10429] usb 6-1: config 0 interface 1 has no altsetting 0 [ 507.436413][T10429] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 507.457019][T10429] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.465084][T10429] usb 6-1: Product: syz [ 507.473931][T10429] usb 6-1: Manufacturer: syz [ 507.479402][T10429] usb 6-1: SerialNumber: syz [ 507.504422][T10429] usb 6-1: config 0 descriptor?? [ 507.529405][T11401] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1338'. [ 508.067182][T10459] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 508.255803][T10459] usb 4-1: Using ep0 maxpacket: 32 [ 508.262965][T10459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.328015][T10459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.415034][T10459] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 508.434344][T10459] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.467438][T10459] usb 4-1: config 0 descriptor?? [ 508.632808][T11417] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1343'. [ 508.642385][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 508.835678][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 509.048958][T10459] savu 0003:1E7D:2D5A.0017: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 509.101302][T10429] f81534 6-1:0.1: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 509.115680][T10429] f81534 6-1:0.1: f81534_find_config_idx: read failed: -71 [ 509.161899][T10429] f81534 6-1:0.1: f81534_calc_num_ports: find idx failed: -71 [ 509.229400][T10429] f81534 6-1:0.1: probe with driver f81534 failed with error -71 [ 509.300367][ T1215] usb 3-1: USB disconnect, device number 63 [ 509.318930][T10429] usb 6-1: USB disconnect, device number 3 [ 509.989199][T11430] fuse: Unknown parameter 'grou00000000000000000000' [ 510.083010][T11436] FAULT_INJECTION: forcing a failure. [ 510.083010][T11436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.096512][T11436] CPU: 1 UID: 0 PID: 11436 Comm: syz.2.1347 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 510.096543][T11436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 510.096553][T11436] Call Trace: [ 510.096559][T11436] [ 510.096566][T11436] dump_stack_lvl+0x189/0x250 [ 510.096606][T11436] ? __pfx____ratelimit+0x10/0x10 [ 510.096640][T11436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 510.096674][T11436] ? __pfx__printk+0x10/0x10 [ 510.096690][T11436] ? __might_fault+0xb0/0x130 [ 510.096713][T11436] should_fail_ex+0x414/0x560 [ 510.096742][T11436] _copy_from_iter+0x1db/0x16f0 [ 510.096789][T11436] ? __pfx__copy_from_iter+0x10/0x10 [ 510.096822][T11436] ? __build_skb_around+0x257/0x3e0 [ 510.096851][T11436] ? netlink_sendmsg+0x642/0xb30 [ 510.096868][T11436] ? skb_put+0x11b/0x210 [ 510.096890][T11436] netlink_sendmsg+0x6b2/0xb30 [ 510.096929][T11436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.096958][T11436] ? aa_sock_msg_perm+0x94/0x160 [ 510.096987][T11436] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 510.097006][T11436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.097025][T11436] __sock_sendmsg+0x219/0x270 [ 510.097062][T11436] ____sys_sendmsg+0x505/0x830 [ 510.097096][T11436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.097131][T11436] ? import_iovec+0x74/0xa0 [ 510.097152][T11436] ___sys_sendmsg+0x21f/0x2a0 [ 510.097174][T11436] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.097234][T11436] ? __fget_files+0x2a/0x420 [ 510.097257][T11436] ? __fget_files+0x3a0/0x420 [ 510.097296][T11436] __x64_sys_sendmsg+0x19b/0x260 [ 510.097318][T11436] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.097346][T11436] ? __pfx_ksys_write+0x10/0x10 [ 510.097366][T11436] ? rcu_is_watching+0x15/0xb0 [ 510.097406][T11436] ? do_syscall_64+0xbe/0x3b0 [ 510.097430][T11436] do_syscall_64+0xfa/0x3b0 [ 510.097449][T11436] ? lockdep_hardirqs_on+0x9c/0x150 [ 510.097482][T11436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.097504][T11436] ? clear_bhb_loop+0x60/0xb0 [ 510.097530][T11436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.097551][T11436] RIP: 0033:0x7f0e7458e929 [ 510.097570][T11436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.097588][T11436] RSP: 002b:00007f0e754cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.097610][T11436] RAX: ffffffffffffffda RBX: 00007f0e747b5fa0 RCX: 00007f0e7458e929 [ 510.097625][T11436] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 510.097638][T11436] RBP: 00007f0e754cc090 R08: 0000000000000000 R09: 0000000000000000 [ 510.097651][T11436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.097664][T11436] R13: 0000000000000000 R14: 00007f0e747b5fa0 R15: 00007f0e748dfa28 [ 510.097696][T11436] [ 510.439837][T10429] usb 4-1: USB disconnect, device number 70 [ 510.875468][T11445] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1350'. [ 512.278001][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 512.297743][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 512.361360][ T9] usb 2-1: can't read configurations, error -71 [ 512.439511][T11469] fuse: Unknown parameter 'group_i00000000000000000000' [ 512.960001][T11476] capability: warning: `syz.1.1361' uses 32-bit capabilities (legacy support in use) [ 513.274093][T11484] input: syz0 as /devices/virtual/input/input24 [ 513.682122][T11479] xt_CT: No such helper "syz0" [ 514.098382][T11490] binder: 11489:11490 ioctl c018620c 200000000100 returned -22 [ 514.371486][T10429] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 514.547947][T10429] usb 5-1: config 0 has an invalid interface number: 84 but max is 0 [ 514.584457][T10429] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 514.593267][T10429] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 514.603736][T10429] usb 5-1: config 0 has no interface number 0 [ 514.610419][T10429] usb 5-1: config 0 has no interface number 1 [ 514.617909][T10429] usb 5-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 514.629425][T10429] usb 5-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 514.644132][T10429] usb 5-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 514.656253][T10429] usb 5-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 514.667104][T10429] usb 5-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 514.679420][T10429] usb 5-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 514.692577][T10429] usb 5-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 514.704876][T10429] usb 5-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 514.715800][T10429] usb 5-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 514.730146][T10429] usb 5-1: config 0 interface 66 has no altsetting 0 [ 514.739399][T10429] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 514.749215][T10429] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.757472][T10429] usb 5-1: Product: syz [ 514.762191][T10429] usb 5-1: Manufacturer: syz [ 514.767449][T10429] usb 5-1: SerialNumber: syz [ 514.775087][T10429] usb 5-1: config 0 descriptor?? [ 514.785061][T10429] ljca 5-1:0.84: bulk endpoints not found [ 514.798763][ T9] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 514.806601][ T5840] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 514.968210][ T5840] usb 3-1: unable to get BOS descriptor or descriptor too short [ 514.978122][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 514.991075][T11486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.003940][ T9] usb 4-1: config 0 has no interface number 0 [ 515.012229][ T5840] usb 3-1: not running at top speed; connect to a high speed hub [ 515.021082][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.033458][T11486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.036285][ T5840] usb 3-1: config 7 has an invalid interface number: 180 but max is 0 [ 515.055176][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.065299][ T5840] usb 3-1: config 7 has no interface number 0 [ 515.071759][ T9] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 515.085097][ T5840] usb 3-1: config 7 interface 180 has no altsetting 0 [ 515.090801][T11486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.094188][ T9] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 515.122002][T11486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.122777][ T5840] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=3c.f2 [ 515.143035][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.152628][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.170452][ T9] usb 4-1: config 0 descriptor?? [ 515.182677][ T5840] usb 3-1: Product: syz [ 515.183306][T10429] ljca 5-1:0.66: probe with driver ljca failed with error -71 [ 515.187155][ T5840] usb 3-1: Manufacturer: ᆊ罾柵枨í†ã‰ëŽë¼±ç‘²î‰Œã»ì›’ຘ䭡듺늿=ሬ㻔㬚é§ç•¾í—î™â¹™é›ï¦¯â¨á—©å “툭ጃ㾋יⅤ㩩層ᗼæ£ê˜£ãŒë£‹ç€‚商羹ë€ê‡¶ä­Œæº©æ¡³îœ¼ê ˆì¤–伟î™í•¶ï”¢â¥¦ç…囧唵뮺㼑é¢å«¥ã—“뙼凳鼫俧拌᱓践 [ 515.219769][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.229659][T10429] usb 5-1: USB disconnect, device number 72 [ 515.255814][ T5840] usb 3-1: SerialNumber: syz [ 515.462974][T11504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.472121][T11504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.483241][T11501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.506040][T11501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.558873][ T5840] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 515.570813][ T5840] gspca_topro: reg_w err -71 [ 515.606186][ T5840] gspca_topro: Sensor soi763a [ 515.645579][ T5840] usb 3-1: USB disconnect, device number 64 [ 515.775855][T10429] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 515.942783][T10429] usb 6-1: Using ep0 maxpacket: 16 [ 516.021169][ T9] usbhid 4-1:0.1: can't add hid device: -71 [ 516.027334][ T9] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 516.114070][ T9] usb 4-1: USB disconnect, device number 71 [ 516.267780][T11514] fuse: Unknown parameter 'group_i00000000000000000000' [ 516.584088][T11525] netlink: 'syz.4.1374': attribute type 1 has an invalid length. [ 516.608944][T11525] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1374'. [ 517.521107][T11541] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1377'. [ 517.750724][T11518] dns_resolver: Unsupported server list version (0) [ 518.071925][ T30] audit: type=1326 audit(1749784180.010:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f3b8e929 code=0x7ffc0000 [ 518.104692][ T30] audit: type=1326 audit(1749784180.020:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f3b8e929 code=0x7ffc0000 [ 518.130963][ T30] audit: type=1326 audit(1749784180.020:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39f3b8e929 code=0x7ffc0000 [ 518.182794][ T30] audit: type=1326 audit(1749784180.020:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f3b8e929 code=0x7ffc0000 [ 518.207344][ T30] audit: type=1326 audit(1749784180.020:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f3b8e929 code=0x7ffc0000 [ 518.298430][ T30] audit: type=1326 audit(1749784180.050:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39f3b8e929 code=0x7ffc0000 [ 518.325636][ T30] audit: type=1326 audit(1749784180.050:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f3b8e929 code=0x7ffc0000 [ 518.417909][ T30] audit: type=1326 audit(1749784180.050:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39f3b8e929 code=0x7ffc0000 [ 518.571717][T10429] usb 6-1: unable to get BOS descriptor or descriptor too short [ 518.601298][ T30] audit: type=1326 audit(1749784180.050:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f3b8e929 code=0x7ffc0000 [ 518.628586][T10429] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 518.648480][T10429] usb 6-1: can't read configurations, error -71 [ 518.673207][ T30] audit: type=1326 audit(1749784180.050:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39f3b8e929 code=0x7ffc0000 [ 518.678899][T11562] fuse: Unknown parameter 'group_i00000000000000000000' [ 519.075655][T10430] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 519.187872][T11577] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1387'. [ 519.268032][T10430] usb 4-1: config index 0 descriptor too short (expected 32820, got 52) [ 519.344331][T10430] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.362849][T11580] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1388'. [ 519.375593][T10430] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 519.413263][T10430] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= a.97 [ 519.478650][T10430] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.487123][ T5906] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 519.797187][T10430] usb 4-1: Product: syz [ 519.854350][T10430] usb 4-1: Manufacturer: syz [ 519.859449][T10430] usb 4-1: SerialNumber: syz [ 519.869707][T10430] usb 4-1: config 0 descriptor?? [ 519.928412][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 519.974687][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.994279][ T5906] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 520.119891][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.174267][ T5906] usb 2-1: config 0 descriptor?? [ 520.220081][ T5906] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 520.424251][T11575] openvswitch: netlink: Tunnel attr 202 out of range max 16 [ 520.477545][T11595] dns_resolver: Unsupported server list version (0) [ 520.517070][ T1215] usb 2-1: USB disconnect, device number 64 [ 521.547700][T11605] netlink: 'syz.1.1394': attribute type 1 has an invalid length. [ 521.710593][T11605] 8021q: adding VLAN 0 to HW filter on device bond2 [ 521.811463][T11611] gretap1: entered promiscuous mode [ 521.832311][T11611] bond2: (slave gretap1): making interface the new active one [ 521.851791][T11611] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 521.889859][T11605] bond2: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 522.115599][ T1215] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 522.347424][ T1215] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.451356][ T1215] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 522.545657][ T1215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.559391][ T5906] usb 4-1: USB disconnect, device number 72 [ 522.611101][ T1215] usb 2-1: config 0 descriptor?? [ 522.655403][ T1215] pwc: Askey VC010 type 2 USB webcam detected. [ 523.025885][ T5906] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 523.194593][ T1215] pwc: recv_control_msg error -32 req 02 val 2b00 [ 523.209678][ T1215] pwc: recv_control_msg error -32 req 02 val 2700 [ 523.250882][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 523.407052][T11623] netlink: 'syz.5.1397': attribute type 21 has an invalid length. [ 523.481656][T11627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.512961][ T1215] pwc: recv_control_msg error -32 req 04 val 1000 [ 523.539332][ T1215] pwc: recv_control_msg error -71 req 04 val 1300 [ 523.569183][ T1215] pwc: recv_control_msg error -71 req 04 val 1400 [ 523.592618][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.594735][ T1215] pwc: recv_control_msg error -71 req 02 val 2000 [ 523.650296][ T5906] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 523.659919][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.672335][ T5906] usb 4-1: config 0 descriptor?? [ 523.743881][ T1215] pwc: recv_control_msg error -71 req 02 val 2100 [ 523.777271][ T1215] pwc: recv_control_msg error -71 req 04 val 1500 [ 523.808111][ T1215] pwc: recv_control_msg error -71 req 02 val 2500 [ 523.825759][ T1215] pwc: recv_control_msg error -71 req 02 val 2400 [ 523.842998][ T1215] pwc: recv_control_msg error -71 req 02 val 2600 [ 523.853141][ T1215] pwc: recv_control_msg error -71 req 02 val 2900 [ 523.866331][ T1215] pwc: recv_control_msg error -71 req 02 val 2800 [ 523.884452][ T1215] pwc: recv_control_msg error -71 req 04 val 1100 [ 523.902768][ T1215] pwc: recv_control_msg error -71 req 04 val 1200 [ 523.929827][ T1215] pwc: Registered as video103. [ 523.968336][ T1215] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input25 [ 524.121832][T11620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.135862][ T1215] usb 2-1: USB disconnect, device number 65 [ 524.180932][T11620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.323918][ T5906] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 524.352915][ T5906] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 524.373155][ T5906] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 524.395561][ T5906] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 524.407535][T11634] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1402'. [ 524.437679][ T5906] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 524.478545][ T5906] mcp2221 0003:04D8:00DD.0018: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 524.695881][ T9] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 524.936033][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 524.946730][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.969175][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 525.060004][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.170226][T11647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1405'. [ 525.250493][ T9] usb 5-1: config 0 descriptor?? [ 525.279416][ T5964] usb 4-1: USB disconnect, device number 73 [ 525.402508][ T9] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 525.583256][T11634] openvswitch: netlink: Tunnel attr 202 out of range max 16 [ 525.612734][ T5906] usb 5-1: USB disconnect, device number 73 [ 525.848989][T11654] FAULT_INJECTION: forcing a failure. [ 525.848989][T11654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.869862][T11654] CPU: 1 UID: 0 PID: 11654 Comm: syz.5.1407 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 525.869892][T11654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 525.869906][T11654] Call Trace: [ 525.869915][T11654] [ 525.869924][T11654] dump_stack_lvl+0x189/0x250 [ 525.869962][T11654] ? __pfx____ratelimit+0x10/0x10 [ 525.869994][T11654] ? __pfx_dump_stack_lvl+0x10/0x10 [ 525.870027][T11654] ? __pfx__printk+0x10/0x10 [ 525.870062][T11654] should_fail_ex+0x414/0x560 [ 525.870096][T11654] _copy_to_user+0x31/0xb0 [ 525.870122][T11654] simple_read_from_buffer+0xe1/0x170 [ 525.870150][T11654] proc_fail_nth_read+0x1df/0x250 [ 525.870180][T11654] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 525.870209][T11654] ? rw_verify_area+0x258/0x650 [ 525.870241][T11654] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 525.870269][T11654] vfs_read+0x200/0x980 [ 525.870306][T11654] ? __pfx___mutex_lock+0x10/0x10 [ 525.870326][T11654] ? __pfx_vfs_read+0x10/0x10 [ 525.870359][T11654] ? __fget_files+0x2a/0x420 [ 525.870388][T11654] ? __fget_files+0x3a0/0x420 [ 525.870410][T11654] ? __fget_files+0x2a/0x420 [ 525.870442][T11654] ksys_read+0x145/0x250 [ 525.870484][T11654] ? __fget_files+0x3a0/0x420 [ 525.870509][T11654] ? __pfx_ksys_read+0x10/0x10 [ 525.870548][T11654] ? do_syscall_64+0xbe/0x3b0 [ 525.870573][T11654] do_syscall_64+0xfa/0x3b0 [ 525.870592][T11654] ? lockdep_hardirqs_on+0x9c/0x150 [ 525.870623][T11654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.870656][T11654] ? clear_bhb_loop+0x60/0xb0 [ 525.870680][T11654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.870706][T11654] RIP: 0033:0x7fb49218d33c [ 525.870723][T11654] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 525.870741][T11654] RSP: 002b:00007fb492fc6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 525.870763][T11654] RAX: ffffffffffffffda RBX: 00007fb4923b5fa0 RCX: 00007fb49218d33c [ 525.870778][T11654] RDX: 000000000000000f RSI: 00007fb492fc60a0 RDI: 0000000000000004 [ 525.870791][T11654] RBP: 00007fb492fc6090 R08: 0000000000000000 R09: 0000000000000000 [ 525.870804][T11654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.870816][T11654] R13: 0000000000000000 R14: 00007fb4923b5fa0 R15: 00007fb4924dfa28 [ 525.870854][T11654] [ 526.439617][T11662] bridge1: entered promiscuous mode [ 527.875954][ T9] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 528.086528][T11686] input: syz0 as /devices/virtual/input/input26 [ 528.093313][T11686] input: failed to attach handler leds to device input26, error: -6 [ 528.129430][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 528.153185][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.166543][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 528.176039][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.352344][ T9] usb 3-1: config 0 descriptor?? [ 528.434409][T11695] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 528.966438][T11682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.987335][T11682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.022816][ T9] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 529.030087][ T9] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 529.037290][ T9] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 529.044551][ T9] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 529.069275][ T9] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 529.105284][ T9] mcp2221 0003:04D8:00DD.0019: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 529.755317][T11703] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1421'. [ 529.767120][ T9] usb 3-1: USB disconnect, device number 65 [ 530.035615][ T5906] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 530.186175][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 530.197836][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.239722][ T5906] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 530.271719][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.302998][ T5906] usb 2-1: config 0 descriptor?? [ 530.321577][ T5906] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 530.356647][ T9] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 530.365670][ T5964] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 530.478941][T11711] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1424'. [ 530.505692][ T5964] usb 4-1: device descriptor read/64, error -71 [ 530.515094][T11703] openvswitch: netlink: Tunnel attr 202 out of range max 16 [ 530.555886][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 530.564754][ T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 530.597007][ T9] usb 3-1: config 0 has no interface number 0 [ 530.603148][ T9] usb 3-1: config 0 interface 12 has no altsetting 0 [ 530.612337][ T5840] usb 2-1: USB disconnect, device number 66 [ 530.684892][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 530.743944][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.772511][ T9] usb 3-1: Product: syz [ 530.775727][ T5964] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 530.784250][ T9] usb 3-1: Manufacturer: syz [ 530.792376][ T9] usb 3-1: SerialNumber: syz [ 530.814614][ T9] usb 3-1: config 0 descriptor?? [ 530.925945][ T5964] usb 4-1: device descriptor read/64, error -71 [ 531.055960][ T5964] usb usb4-port1: attempt power cycle [ 531.427249][ T5964] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 531.476618][ T5964] usb 4-1: device descriptor read/8, error -71 [ 531.485703][ T5906] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 531.640850][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.651909][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.665708][ T5906] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 531.674804][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.690878][ T5906] usb 5-1: config 0 descriptor?? [ 531.716048][ T5964] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 531.739110][ T5964] usb 4-1: device descriptor read/8, error -71 [ 531.856257][ T5964] usb usb4-port1: unable to enumerate USB device [ 531.947288][T11734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1431'. [ 531.957868][T11734] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 531.973860][T11734] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.982074][T11734] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.293108][ T5906] steelseries 0003:1038:12B6.001A: unbalanced delimiter at end of report description [ 532.315124][ T5906] steelseries 0003:1038:12B6.001A: probe with driver steelseries failed with error -22 [ 532.785701][ T5906] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 532.898666][ T9] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 532.925092][ T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 532.934393][ T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 532.945673][ T9] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 532.966898][ T5906] usb 6-1: Using ep0 maxpacket: 16 [ 532.967184][ T9] usb 3-1: USB disconnect, device number 66 [ 532.992542][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.029484][ T5906] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 533.049614][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.068251][ T5906] usb 6-1: config 0 descriptor?? [ 533.525676][T11740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.547286][T11740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.597843][T11751] netlink: 'syz.3.1435': attribute type 21 has an invalid length. [ 533.721066][T11751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.336791][ T5906] usbhid 6-1:0.0: can't add hid device: -71 [ 534.401368][ T5906] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 534.455806][ T9] usb 5-1: USB disconnect, device number 74 [ 534.549130][ T5906] usb 6-1: USB disconnect, device number 6 [ 536.723236][T11792] FAULT_INJECTION: forcing a failure. [ 536.723236][T11792] name failslab, interval 1, probability 0, space 0, times 0 [ 536.761752][T11792] CPU: 0 UID: 0 PID: 11792 Comm: syz.1.1446 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 536.761785][T11792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.761797][T11792] Call Trace: [ 536.761804][T11792] [ 536.761813][T11792] dump_stack_lvl+0x189/0x250 [ 536.761850][T11792] ? __pfx____ratelimit+0x10/0x10 [ 536.761883][T11792] ? __pfx_dump_stack_lvl+0x10/0x10 [ 536.761916][T11792] ? __pfx__printk+0x10/0x10 [ 536.761944][T11792] ? __pfx___might_resched+0x10/0x10 [ 536.761981][T11792] should_fail_ex+0x414/0x560 [ 536.762012][T11792] ? vmemdup_user+0x26/0xd0 [ 536.762036][T11792] should_failslab+0xa8/0x100 [ 536.762060][T11792] __kvmalloc_node_noprof+0x161/0x5f0 [ 536.762082][T11792] ? vmemdup_user+0x26/0xd0 [ 536.762113][T11792] vmemdup_user+0x26/0xd0 [ 536.762138][T11792] path_setxattrat+0x244/0x3a0 [ 536.762177][T11792] ? __pfx_path_setxattrat+0x10/0x10 [ 536.762204][T11792] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 536.762251][T11792] ? ksys_write+0x22a/0x250 [ 536.762272][T11792] ? __pfx_ksys_write+0x10/0x10 [ 536.762288][T11792] ? rcu_is_watching+0x15/0xb0 [ 536.762324][T11792] __x64_sys_lsetxattr+0xbf/0xe0 [ 536.762353][T11792] do_syscall_64+0xfa/0x3b0 [ 536.762372][T11792] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.762403][T11792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.762422][T11792] ? clear_bhb_loop+0x60/0xb0 [ 536.762445][T11792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.762465][T11792] RIP: 0033:0x7f05d358e929 [ 536.762496][T11792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.762514][T11792] RSP: 002b:00007f05d443c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 536.762536][T11792] RAX: ffffffffffffffda RBX: 00007f05d37b5fa0 RCX: 00007f05d358e929 [ 536.762551][T11792] RDX: 0000200000000500 RSI: 0000200000000080 RDI: 0000200000000040 [ 536.762565][T11792] RBP: 00007f05d443c090 R08: 0000000000000000 R09: 0000000000000000 [ 536.762577][T11792] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 536.762589][T11792] R13: 0000000000000000 R14: 00007f05d37b5fa0 R15: 00007f05d38dfa28 [ 536.762621][T11792] [ 536.983178][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.140754][T11798] FAULT_INJECTION: forcing a failure. [ 537.140754][T11798] name failslab, interval 1, probability 0, space 0, times 0 [ 537.154835][T11798] CPU: 0 UID: 0 PID: 11798 Comm: syz.1.1447 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 537.154866][T11798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 537.154879][T11798] Call Trace: [ 537.154887][T11798] [ 537.154896][T11798] dump_stack_lvl+0x189/0x250 [ 537.154946][T11798] ? __pfx____ratelimit+0x10/0x10 [ 537.154978][T11798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.155010][T11798] ? __pfx__printk+0x10/0x10 [ 537.155039][T11798] ? __pfx___might_resched+0x10/0x10 [ 537.155076][T11798] should_fail_ex+0x414/0x560 [ 537.155109][T11798] ? alloc_netdev_mqs+0xa8b/0x11e0 [ 537.155139][T11798] should_failslab+0xa8/0x100 [ 537.155163][T11798] __kvmalloc_node_noprof+0x161/0x5f0 [ 537.155186][T11798] ? alloc_netdev_mqs+0xa8b/0x11e0 [ 537.155222][T11798] alloc_netdev_mqs+0xa8b/0x11e0 [ 537.155260][T11798] vti6_locate+0x5a6/0x750 [ 537.155295][T11798] ? __pfx_vti6_locate+0x10/0x10 [ 537.155324][T11798] ? vti6_siocdevprivate+0x508/0x700 [ 537.155356][T11798] vti6_siocdevprivate+0x52c/0x700 [ 537.155386][T11798] ? __pfx_vti6_siocdevprivate+0x10/0x10 [ 537.155409][T11798] ? rcu_is_watching+0x15/0xb0 [ 537.155483][T11798] ? netdev_name_node_lookup+0xdf/0x120 [ 537.155517][T11798] dev_ifsioc+0xb54/0xf00 [ 537.155548][T11798] dev_ioctl+0x84c/0x1150 [ 537.155574][T11798] sock_ioctl+0x719/0x790 [ 537.155608][T11798] ? __pfx_sock_ioctl+0x10/0x10 [ 537.155641][T11798] ? __fget_files+0x3a0/0x420 [ 537.155663][T11798] ? __fget_files+0x2a/0x420 [ 537.155690][T11798] ? bpf_lsm_file_ioctl+0x9/0x20 [ 537.155720][T11798] ? __pfx_sock_ioctl+0x10/0x10 [ 537.155756][T11798] __se_sys_ioctl+0xf9/0x170 [ 537.155789][T11798] do_syscall_64+0xfa/0x3b0 [ 537.155808][T11798] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.155838][T11798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.155858][T11798] ? clear_bhb_loop+0x60/0xb0 [ 537.155883][T11798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.155903][T11798] RIP: 0033:0x7f05d358e929 [ 537.155922][T11798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.155940][T11798] RSP: 002b:00007f05d443c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.155962][T11798] RAX: ffffffffffffffda RBX: 00007f05d37b5fa0 RCX: 00007f05d358e929 [ 537.155977][T11798] RDX: 00002000000000c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 537.155990][T11798] RBP: 00007f05d443c090 R08: 0000000000000000 R09: 0000000000000000 [ 537.156003][T11798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.156015][T11798] R13: 0000000000000000 R14: 00007f05d37b5fa0 R15: 00007f05d38dfa28 [ 537.156046][T11798] [ 537.417690][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.555606][ T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 537.718686][ T9] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 537.743887][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.765192][ T9] usb 3-1: config 0 descriptor?? [ 537.774166][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 537.897156][T10429] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 538.025840][ T5964] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 538.055604][T10429] usb 2-1: Using ep0 maxpacket: 16 [ 538.066386][T10429] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.086186][T10429] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 538.101405][T10429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.116903][T10429] usb 2-1: config 0 descriptor?? [ 538.183603][T11814] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1452'. [ 538.195356][ T5964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.207244][ T5964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.218434][ T5964] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 538.227882][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.241488][ T5964] usb 6-1: config 0 descriptor?? [ 538.385021][T11786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.394351][T11786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.402312][T10430] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 538.522898][T11820] netlink: 'syz.3.1455': attribute type 21 has an invalid length. [ 538.533626][T11804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.576236][T11804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.595707][T10430] usb 5-1: Using ep0 maxpacket: 32 [ 538.607728][T11786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1443'. [ 538.612182][T10430] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.621992][ T9] gspca_cpia1: usb_control_msg 02, error -71 [ 538.634540][T10430] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.643028][ T9] cpia1 3-1:0.0: only firmware version 1 is supported (got: 2) [ 538.676484][T10430] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 538.676767][ T9] usb 3-1: USB disconnect, device number 67 [ 538.726709][T10430] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 538.747863][T10430] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.762915][T11820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.869542][T10430] usb 5-1: config 0 descriptor?? [ 538.875226][ T5964] steelseries 0003:1038:12B6.001B: unbalanced delimiter at end of report description [ 538.901471][ T5964] steelseries 0003:1038:12B6.001B: probe with driver steelseries failed with error -22 [ 539.359076][T10429] usbhid 2-1:0.0: can't add hid device: -71 [ 539.418673][T10429] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 539.744025][T10429] usb 2-1: USB disconnect, device number 67 [ 540.283395][T11812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.299191][T11812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.428238][T10430] usbhid 5-1:0.0: can't add hid device: -71 [ 540.475816][T10430] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 540.645953][T10430] usb 5-1: USB disconnect, device number 75 [ 541.176717][T11842] kvm: kvm [11841]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x100000011 [ 541.192375][T11842] kvm: kvm [11841]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 541.201837][ T1215] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 541.231505][T11842] kvm_intel: kvm [11841]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x4001 [ 541.325668][ T1215] usb 5-1: device descriptor read/64, error -71 [ 541.565706][ T1215] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 541.713828][ T1215] usb 5-1: device descriptor read/64, error -71 [ 541.816350][ T9] usb 6-1: USB disconnect, device number 7 [ 541.869027][ T1215] usb usb5-port1: attempt power cycle [ 542.225605][ T1215] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 542.258121][ T1215] usb 5-1: device descriptor read/8, error -71 [ 542.549432][ T1215] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 542.705757][ T1215] usb 5-1: device descriptor read/8, error -71 [ 542.816620][ T5906] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 542.828504][ T1215] usb usb5-port1: unable to enumerate USB device [ 542.977739][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 543.007104][ T5906] usb 4-1: config 2 has an invalid interface number: 142 but max is 0 [ 543.024205][ T5906] usb 4-1: config 2 has no interface number 0 [ 543.034306][ T5906] usb 4-1: config 2 interface 142 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 543.052804][ T5906] usb 4-1: config 2 interface 142 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 543.064461][ T5906] usb 4-1: config 2 interface 142 altsetting 0 endpoint 0x82 has invalid maxpacket 12336, setting to 1024 [ 543.081518][ T5906] usb 4-1: config 2 interface 142 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 543.095104][ T5906] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c6.6e [ 543.109475][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.118004][ T5906] usb 4-1: Product: syz [ 543.125822][ T5906] usb 4-1: Manufacturer: syz [ 543.132304][ T5906] usb 4-1: SerialNumber: syz [ 543.137573][T10429] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 543.168443][T11863] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 543.183280][ T5906] usb 4-1: NFC: intf ffff8880427b3000 id ffffffff8eb52e00 [ 543.228481][T11882] netlink: 'syz.1.1470': attribute type 21 has an invalid length. [ 543.325627][T10429] usb 6-1: Using ep0 maxpacket: 16 [ 543.332739][T10429] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.345265][T10429] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 543.387591][T11882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.407619][T10429] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.437316][T10429] usb 6-1: config 0 descriptor?? [ 543.627886][ T1215] usb 4-1: USB disconnect, device number 78 [ 543.864180][T11871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.921282][T11871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.445646][ T1215] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 544.605657][ T1215] usb 5-1: Using ep0 maxpacket: 16 [ 544.629813][ T1215] usb 5-1: unable to get BOS descriptor or descriptor too short [ 544.650760][ T1215] usb 5-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 544.756357][T10429] usbhid 6-1:0.0: can't add hid device: -71 [ 544.776204][T10429] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 544.824760][T10429] usb 6-1: USB disconnect, device number 8 [ 544.853113][ T1215] usb 5-1: config 1 interface 0 has no altsetting 0 [ 544.965214][ T1215] usb 5-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40 [ 544.991465][ T1215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.005940][ T5906] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 545.047823][ T1215] usb 5-1: Product: syz [ 545.085747][ T1215] usb 5-1: Manufacturer: syz [ 545.118369][ T1215] usb 5-1: SerialNumber: syz [ 545.177627][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.258657][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.288669][ T5906] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 545.317678][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.376565][ T5906] usb 3-1: config 0 descriptor?? [ 545.853577][T11901] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1477'. [ 546.176842][T10429] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 546.245573][ T5906] steelseries 0003:1038:12B6.001C: unbalanced delimiter at end of report description [ 546.262853][ T5906] steelseries 0003:1038:12B6.001C: probe with driver steelseries failed with error -22 [ 546.345726][T10429] usb 2-1: Using ep0 maxpacket: 8 [ 546.353070][T10429] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.378549][T10429] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 546.513198][T10429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.549351][T10429] usb 2-1: config 0 descriptor?? [ 546.613512][T10429] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 546.751414][T11911] program syz.3.1480 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 546.778451][T11901] openvswitch: netlink: Tunnel attr 202 out of range max 16 [ 546.804993][T10429] usb 2-1: USB disconnect, device number 68 [ 547.532798][T11919] bridge1: entered promiscuous mode [ 548.487053][ T1215] usbhid 5-1:1.0: can't add hid device: -71 [ 548.511765][ T1215] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 548.567527][ T1215] usb 5-1: USB disconnect, device number 80 [ 548.715662][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 548.715683][ T30] audit: type=1326 audit(1749784210.600:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11920 comm="syz.5.1483" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb49218e929 code=0x0 [ 548.772148][T11937] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1488'. [ 548.808166][T11937] unsupported nla_type 65024 [ 549.033184][ T5840] usb 3-1: USB disconnect, device number 68 [ 550.018932][ T1215] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 550.101728][T11964] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 550.205830][ T1215] usb 5-1: device descriptor read/64, error -71 [ 550.615694][ T1215] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 550.965630][ T1215] usb 5-1: device descriptor read/64, error -71 [ 551.045778][T10430] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 551.088525][ T1215] usb usb5-port1: attempt power cycle [ 551.135579][ T9] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 551.215715][T10430] usb 6-1: Using ep0 maxpacket: 16 [ 551.232450][T10430] usb 6-1: unable to get BOS descriptor or descriptor too short [ 551.248424][T10430] usb 6-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 551.369368][ T9] usb 3-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 551.384199][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.403883][ T9] usb 3-1: config 0 descriptor?? [ 551.472589][ T5906] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 551.488626][ T1215] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 551.557741][ T1215] usb 5-1: device descriptor read/8, error -71 [ 551.557751][T10430] usb 6-1: config 1 interface 0 has no altsetting 0 [ 551.605947][T10430] usb 6-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40 [ 551.628998][T10430] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.702204][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.714621][T10430] usb 6-1: Product: syz [ 551.781688][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 551.792366][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 551.803247][T10430] usb 6-1: Manufacturer: syz [ 551.815937][ T1215] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 551.829054][ T9] usb 3-1: USB disconnect, device number 69 [ 551.838145][T10430] usb 6-1: SerialNumber: syz [ 551.843193][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.859655][ T1215] usb 5-1: device descriptor read/8, error -71 [ 551.985901][ T1215] usb usb5-port1: unable to enumerate USB device [ 552.035715][ T5906] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 552.094109][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.352290][ T5906] usb 2-1: config 0 descriptor?? [ 552.908806][ T5906] steelseries 0003:1038:12B6.001D: unbalanced delimiter at end of report description [ 553.052739][ T5906] steelseries 0003:1038:12B6.001D: probe with driver steelseries failed with error -22 [ 553.229073][ T5906] usb 2-1: USB disconnect, device number 69 [ 553.686610][T10429] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 553.805029][T11993] trusted_key: syz.2.1504 sent an empty control message without MSG_MORE. [ 553.866304][T10429] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.945853][T10429] usb 5-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 553.983782][T10429] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.044256][T10429] usb 5-1: config 0 descriptor?? [ 554.081666][T11996] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1505'. [ 554.274921][T10430] usbhid 6-1:1.0: can't add hid device: -71 [ 554.303417][T10430] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 554.366212][T10430] usb 6-1: USB disconnect, device number 9 [ 554.375632][ T9] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 554.501943][T10429] wacom 0003:056A:00B0.001E: unknown main item tag 0x0 [ 554.519266][T10429] wacom 0003:056A:00B0.001E: unknown main item tag 0x0 [ 554.534417][T10429] wacom 0003:056A:00B0.001E: unknown main item tag 0x0 [ 554.565570][T10429] wacom 0003:056A:00B0.001E: unknown main item tag 0x0 [ 554.567313][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 554.591870][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.599332][T10429] wacom 0003:056A:00B0.001E: unknown main item tag 0x0 [ 554.637742][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 554.667519][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.690429][T11991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.716385][ T9] usb 2-1: config 0 descriptor?? [ 554.716444][T11991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.748930][ T9] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 554.819196][ T9] usb 5-1: USB disconnect, device number 85 [ 554.941689][T11996] openvswitch: netlink: Tunnel attr 202 out of range max 16 [ 554.977438][T10430] usb 2-1: USB disconnect, device number 70 [ 554.995592][T10429] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 555.148299][T10429] usb 6-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 555.157819][ T5964] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 555.170606][T10429] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.183925][T10429] usb 6-1: config 0 descriptor?? [ 555.344720][ T5964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.372919][ T5964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.424218][ T5964] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 555.463834][ T5964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.578863][ T5964] usb 4-1: config 0 descriptor?? [ 555.789568][T10429] usbhid 6-1:0.0: can't add hid device: -71 [ 555.801720][T10429] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 555.847518][T10429] usb 6-1: USB disconnect, device number 10 [ 555.929103][T12035] fuse: Bad value for 'fd' [ 556.005946][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1518'. [ 556.034307][ T5964] steelseries 0003:1038:12B6.001F: unbalanced delimiter at end of report description [ 556.045937][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1518'. [ 556.086821][ T5964] steelseries 0003:1038:12B6.001F: probe with driver steelseries failed with error -22 [ 556.219122][T12049] FAULT_INJECTION: forcing a failure. [ 556.219122][T12049] name failslab, interval 1, probability 0, space 0, times 0 [ 556.234421][T12049] CPU: 0 UID: 0 PID: 12049 Comm: syz.1.1521 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 556.234452][T12049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 556.234466][T12049] Call Trace: [ 556.234474][T12049] [ 556.234483][T12049] dump_stack_lvl+0x189/0x250 [ 556.234521][T12049] ? __pfx____ratelimit+0x10/0x10 [ 556.234554][T12049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.234586][T12049] ? __pfx__printk+0x10/0x10 [ 556.234622][T12049] should_fail_ex+0x414/0x560 [ 556.234656][T12049] should_failslab+0xa8/0x100 [ 556.234688][T12049] kmem_cache_alloc_noprof+0x73/0x3c0 [ 556.234721][T12049] ? skb_clone+0x212/0x3a0 [ 556.234755][T12049] skb_clone+0x212/0x3a0 [ 556.234787][T12049] __netlink_deliver_tap+0x404/0x850 [ 556.234825][T12049] ? netlink_deliver_tap+0x2e/0x1b0 [ 556.234852][T12049] netlink_deliver_tap+0x19c/0x1b0 [ 556.234878][T12049] netlink_sendskb+0x68/0x140 [ 556.234903][T12049] netlink_rcv_skb+0x28c/0x470 [ 556.234928][T12049] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 556.234953][T12049] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 556.234992][T12049] ? netlink_deliver_tap+0x2e/0x1b0 [ 556.235016][T12049] ? netlink_deliver_tap+0x2e/0x1b0 [ 556.235047][T12049] netlink_unicast+0x75b/0x8d0 [ 556.235080][T12049] netlink_sendmsg+0x805/0xb30 [ 556.235115][T12049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.235145][T12049] ? aa_sock_msg_perm+0x94/0x160 [ 556.235173][T12049] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 556.235200][T12049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.235245][T12049] __sock_sendmsg+0x219/0x270 [ 556.235282][T12049] ____sys_sendmsg+0x52d/0x830 [ 556.235316][T12049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 556.235355][T12049] ? import_iovec+0x74/0xa0 [ 556.235381][T12049] ___sys_sendmsg+0x21f/0x2a0 [ 556.235411][T12049] ? __pfx____sys_sendmsg+0x10/0x10 [ 556.235484][T12049] ? __fget_files+0x2a/0x420 [ 556.235507][T12049] ? __fget_files+0x3a0/0x420 [ 556.235541][T12049] __sys_sendmmsg+0x227/0x430 [ 556.235575][T12049] ? __pfx___sys_sendmmsg+0x10/0x10 [ 556.235601][T12049] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 556.235649][T12049] ? ksys_write+0x22a/0x250 [ 556.235672][T12049] ? __pfx_ksys_write+0x10/0x10 [ 556.235695][T12049] ? rcu_is_watching+0x15/0xb0 [ 556.235736][T12049] __x64_sys_sendmmsg+0xa0/0xc0 [ 556.235764][T12049] do_syscall_64+0xfa/0x3b0 [ 556.235784][T12049] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.235815][T12049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.235835][T12049] ? clear_bhb_loop+0x60/0xb0 [ 556.235861][T12049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.235881][T12049] RIP: 0033:0x7f05d358e929 [ 556.235900][T12049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.235920][T12049] RSP: 002b:00007f05d443c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 556.235943][T12049] RAX: ffffffffffffffda RBX: 00007f05d37b5fa0 RCX: 00007f05d358e929 [ 556.235958][T12049] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 556.235973][T12049] RBP: 00007f05d443c090 R08: 0000000000000000 R09: 0000000000000000 [ 556.235986][T12049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.235998][T12049] R13: 0000000000000000 R14: 00007f05d37b5fa0 R15: 00007f05d38dfa28 [ 556.236030][T12049] [ 556.558482][ C0] vkms_vblank_simulate: vblank timer overrun [ 556.569912][T12049] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1521'. [ 556.598851][ T5964] usb 4-1: USB disconnect, device number 79 [ 556.625669][ T9] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 556.758475][ T30] audit: type=1326 audit(1749784218.700:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12055 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d358e929 code=0x7ffc0000 [ 556.774737][T12056] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1524'. [ 556.793279][ T9] usb 5-1: config 1 has an invalid interface number: 138 but max is 0 [ 556.802874][ T9] usb 5-1: config 1 has no interface number 0 [ 556.809107][ T9] usb 5-1: config 1 interface 138 altsetting 9 endpoint 0xF has invalid wMaxPacketSize 0 [ 556.819004][ T9] usb 5-1: config 1 interface 138 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 556.829753][ T9] usb 5-1: config 1 interface 138 has no altsetting 0 [ 556.841738][ T30] audit: type=1326 audit(1749784218.710:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12055 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d358e929 code=0x7ffc0000 [ 556.864115][ C0] vkms_vblank_simulate: vblank timer overrun [ 556.880732][ T30] audit: type=1326 audit(1749784218.710:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12055 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f05d358e929 code=0x7ffc0000 [ 556.907484][ T30] audit: type=1326 audit(1749784218.710:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12055 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d358e929 code=0x7ffc0000 [ 556.929990][ C0] vkms_vblank_simulate: vblank timer overrun [ 556.937175][ T30] audit: type=1326 audit(1749784218.710:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12055 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d358e929 code=0x7ffc0000 [ 556.960137][ T9] usb 5-1: string descriptor 0 read error: -22 [ 556.966595][ T9] usb 5-1: New USB device found, idVendor=15e8, idProduct=9110, bcdDevice=a3.0c [ 556.977875][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.995876][ T30] audit: type=1326 audit(1749784218.710:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12055 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05d358e929 code=0x7ffc0000 [ 557.049655][ T30] audit: type=1326 audit(1749784218.710:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12055 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d358e929 code=0x7ffc0000 [ 557.129923][ T30] audit: type=1326 audit(1749784218.710:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12055 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d358e929 code=0x7ffc0000 [ 557.180878][ T30] audit: type=1326 audit(1749784218.710:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12055 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f05d358e929 code=0x7ffc0000 [ 557.263480][ T30] audit: type=1326 audit(1749784218.710:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12055 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d358e929 code=0x7ffc0000 [ 557.288315][ T9] pegasus 5-1:1.138: probe with driver pegasus failed with error -71 [ 557.319211][ T9] usb 5-1: USB disconnect, device number 86 [ 557.328812][T12068] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1527'. [ 557.628892][ T1215] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 557.785707][ T1215] usb 4-1: Using ep0 maxpacket: 8 [ 557.807791][ T1215] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.922713][ T1215] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 558.033556][ T1215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.065706][ T1215] usb 4-1: config 0 descriptor?? [ 558.073605][ T1215] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 558.292863][T12068] openvswitch: netlink: Tunnel attr 202 out of range max 16 [ 558.346732][ T5964] usb 4-1: USB disconnect, device number 80 [ 558.985927][T10429] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 558.995662][ T1215] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 559.171501][T10429] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 559.172128][ T1215] usb 5-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 559.195585][T10429] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.227268][ T1215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.234455][T10429] usb 2-1: Product: syz [ 559.239707][ T5964] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 559.250940][T10429] usb 2-1: Manufacturer: syz [ 559.266260][T10429] usb 2-1: SerialNumber: syz [ 559.282275][ T1215] usb 5-1: config 0 descriptor?? [ 559.286919][T10429] usb 2-1: config 0 descriptor?? [ 559.314399][T12102] tipc: Started in network mode [ 559.323413][T12102] tipc: Node identity 4, cluster identity 4711 [ 559.364394][T12102] tipc: Node number set to 4 [ 559.436250][ T5964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.455720][T12102] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 559.464193][ T5964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.499123][ T5964] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 559.519972][ T5964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.550429][T10429] airspy 2-1:0.0: usb_control_msg() failed -71 request 09 [ 559.565081][ T5964] usb 4-1: config 0 descriptor?? [ 559.580326][T10429] airspy 2-1:0.0: Could not detect board [ 559.594110][T10429] airspy 2-1:0.0: probe with driver airspy failed with error -71 [ 559.632415][T10429] usb 2-1: USB disconnect, device number 71 [ 559.879875][ T1215] usbhid 5-1:0.0: can't add hid device: -71 [ 559.893760][ T1215] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 559.947475][ T1215] usb 5-1: USB disconnect, device number 87 [ 560.019187][ T5964] steelseries 0003:1038:12B6.0020: unbalanced delimiter at end of report description [ 560.066648][ T5964] steelseries 0003:1038:12B6.0020: probe with driver steelseries failed with error -22 [ 560.214607][ T5964] usb 4-1: USB disconnect, device number 81 [ 560.936861][T12129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1540'. [ 563.195733][T12158] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1547'. [ 564.005547][T10429] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 564.248544][T10429] usb 6-1: Using ep0 maxpacket: 8 [ 564.284181][T10429] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.346188][T10429] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 564.355289][T10429] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.450527][T10429] usb 6-1: config 0 descriptor?? [ 564.461528][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 564.461549][ T30] audit: type=1400 audit(1749784226.380:213): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="}&:" pid=12160 comm="syz.1.1548" [ 564.553778][T10429] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 564.705670][ T5964] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 564.755660][T12158] openvswitch: netlink: Tunnel attr 202 out of range max 16 [ 564.898822][ T5906] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 564.908801][ T5964] usb 3-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 564.940523][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.989101][ T5964] usb 3-1: config 0 descriptor?? [ 565.008533][T10429] usb 6-1: USB disconnect, device number 11 [ 565.065085][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 565.098347][ T5906] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 565.223820][ T5906] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 565.293417][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 565.342408][ T5906] usb 5-1: Product: syz [ 565.386184][ T5906] usb 5-1: Manufacturer: syz [ 565.390914][ T5906] usb 5-1: SerialNumber: syz [ 565.446841][ T5906] usb 5-1: config 0 descriptor?? [ 565.485318][T12166] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 565.531369][ T5906] hub 5-1:0.0: bad descriptor, ignoring hub [ 565.580158][ T5964] usbhid 3-1:0.0: can't add hid device: -71 [ 565.595546][ T5906] hub 5-1:0.0: probe with driver hub failed with error -5 [ 565.617980][ T5964] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 565.683975][ T5964] usb 3-1: USB disconnect, device number 70 [ 565.747207][T12176] tc_dump_action: action bad kind [ 565.890058][T12179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.906928][T12179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.056062][ T1215] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 566.146775][T12179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.175940][T12179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.206076][ T1215] usb 2-1: device descriptor read/64, error -71 [ 566.465925][ T1215] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 566.615726][ T1215] usb 2-1: device descriptor read/64, error -71 [ 566.661483][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1559'. [ 566.726033][ T1215] usb usb2-port1: attempt power cycle [ 566.762707][T12195] dns_resolver: Unsupported server list version (0) [ 566.970803][ T5964] usb 5-1: USB disconnect, device number 88 [ 566.971367][T10445] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 567.091338][ T1215] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 567.126637][ T1215] usb 2-1: device descriptor read/8, error -71 [ 567.145699][T10445] usb 4-1: Using ep0 maxpacket: 16 [ 567.152341][T10445] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 567.164303][T10445] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 567.233380][T10445] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 567.271049][T10445] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 567.320604][T10445] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 567.365758][ T1215] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 567.373647][T10445] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 567.461456][T10445] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.469698][T10445] usb 4-1: Product: syz [ 567.473992][T10445] usb 4-1: Manufacturer: syz [ 567.481173][ T1215] usb 2-1: device descriptor read/8, error -71 [ 567.487984][T10445] usb 4-1: SerialNumber: syz [ 567.499056][T10445] usb 4-1: config 0 descriptor?? [ 567.511678][T10445] port100 4-1:0.0: NFC: Could not get supported command types [ 567.599753][ T1215] usb usb2-port1: unable to enumerate USB device [ 567.762672][T12199] ptrace attach of "./syz-executor exec"[12210] was attempted by "./syz-executor exec"[12199] [ 568.021704][ T9] usb 4-1: USB disconnect, device number 82 [ 568.165957][T10445] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 568.317996][T10445] usb 3-1: config 0 has no interfaces? [ 568.325400][T10445] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 568.338747][T10445] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.372338][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.389890][T10445] usb 3-1: Product: syz [ 568.390789][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.425661][T10445] usb 3-1: Manufacturer: syz [ 568.438168][T10445] usb 3-1: SerialNumber: syz [ 568.469474][T10445] usb 3-1: config 0 descriptor?? [ 568.940103][T12229] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 569.115575][ T5906] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 569.267664][ T5906] usb 6-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 569.278656][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.295717][ T9] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 569.318401][ T5906] usb 6-1: config 0 descriptor?? [ 569.470977][ T9] usb 5-1: config 0 has an invalid interface number: 189 but max is 0 [ 569.489528][ T9] usb 5-1: config 0 has no interface number 0 [ 569.503333][ T9] usb 5-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 569.517110][ T9] usb 5-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 569.529446][ T9] usb 5-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 569.541227][ T9] usb 5-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 569.551591][ T9] usb 5-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 569.572224][ T9] usb 5-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 569.583835][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.602981][ T9] usb 5-1: Product: syz [ 569.607832][ T9] usb 5-1: Manufacturer: syz [ 569.613234][ T9] usb 5-1: SerialNumber: syz [ 569.631582][ T9] usb 5-1: config 0 descriptor?? [ 569.653306][T12230] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 569.664682][ T9] ums-alauda 5-1:0.189: USB Mass Storage device detected [ 569.702783][ T9] scsi host1: usb-storage 5-1:0.189 [ 569.733332][ T5906] usbhid 6-1:0.0: can't add hid device: -71 [ 569.741512][ T5906] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 569.752895][ T5906] usb 6-1: USB disconnect, device number 12 [ 569.866031][ T9] usb 5-1: USB disconnect, device number 89 [ 570.077032][T12238] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1570'. [ 570.088225][T12239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1570'. [ 570.970284][T10445] usb 3-1: USB disconnect, device number 71 [ 571.350424][T12263] fuse: Bad value for 'fd' [ 571.786809][ T9] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 571.794552][ T1215] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 571.970619][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 571.980631][ T1215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.001802][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.012725][ T1215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.058164][ T9] usb 5-1: config 0 descriptor?? [ 572.065558][ T1215] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 572.109010][ T1215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.161385][ T1215] usb 2-1: config 0 descriptor?? [ 572.323295][T12278] could not allocate digest TFM handle [ 572.397979][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 572.404898][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 572.464625][ T9] usb 5-1: USB disconnect, device number 90 [ 572.765701][T12288] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 573.566039][ T5964] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 573.751107][ T5964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.918789][ T5964] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 574.229864][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.357119][ T5964] usb 6-1: config 0 descriptor?? [ 574.612544][ T5964] usbhid 6-1:0.0: can't add hid device: -71 [ 574.620322][ T5964] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 574.655852][ T5964] usb 6-1: USB disconnect, device number 13 [ 575.147369][ T5964] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 575.356562][ T5964] usb 6-1: Using ep0 maxpacket: 32 [ 575.402517][ T5964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.416677][ T5964] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 575.499044][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.562249][ T5964] usb 6-1: config 0 descriptor?? [ 575.586455][ T5964] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 575.603561][ T5964] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 575.921203][ T1215] usbhid 2-1:0.0: can't add hid device: -71 [ 575.927843][ T1215] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 575.976122][ T1215] usb 2-1: USB disconnect, device number 76 [ 576.002375][T12297] loop6: detected capacity change from 0 to 63 [ 576.012361][T12297] Buffer I/O error on dev loop6, logical block 0, async page read [ 576.081404][T12297] Buffer I/O error on dev loop6, logical block 1, async page read [ 576.094672][T12297] Buffer I/O error on dev loop6, logical block 2, async page read [ 576.125080][T12297] Buffer I/O error on dev loop6, logical block 3, async page read [ 576.160455][ T6063] Buffer I/O error on dev loop6, logical block 0, async page read [ 576.181919][ T6063] Buffer I/O error on dev loop6, logical block 1, async page read [ 576.222133][ T6063] Buffer I/O error on dev loop6, logical block 2, async page read [ 576.254514][ T6063] Buffer I/O error on dev loop6, logical block 3, async page read [ 576.289830][ T6063] Buffer I/O error on dev loop6, logical block 0, async page read [ 576.333068][ T6063] Buffer I/O error on dev loop6, logical block 1, async page read [ 576.435570][ T1215] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 576.675371][ T1215] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 576.696440][ T1215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.718411][ T1215] usb 2-1: config 0 descriptor?? [ 577.155440][ T1215] usbhid 2-1:0.0: can't add hid device: -71 [ 577.232003][ T1215] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 577.427201][T10429] usb 6-1: USB disconnect, device number 14 [ 577.443729][ T1215] usb 2-1: USB disconnect, device number 77 [ 577.505854][T10429] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 577.591763][T12353] dvmrp1: entered allmulticast mode [ 577.647292][T12354] dvmrp1: left allmulticast mode [ 577.873353][T12354] kvm: pic: non byte write [ 577.889298][T12354] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 577.947541][T12365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1603'. [ 579.938367][T12399] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 580.354836][T12413] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1610'. [ 580.365676][T12413] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1610'. [ 580.885279][T12421] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1618'. [ 582.454938][T12438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 582.795591][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 582.964042][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1627'. [ 583.002746][ T9] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 583.026103][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.034273][ T9] usb 3-1: Product: syz [ 583.043372][ T9] usb 3-1: Manufacturer: syz [ 583.049681][ T9] usb 3-1: SerialNumber: syz [ 583.067639][ T9] usb 3-1: config 0 descriptor?? [ 583.074106][ T30] audit: type=1326 audit(1749784245.020:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12449 comm="syz.4.1628" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39f3b8e929 code=0x0 [ 583.095935][ C0] vkms_vblank_simulate: vblank timer overrun [ 583.128092][ T9] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 583.682937][ T9] gspca_sunplus: reg_r err -110 [ 583.732010][ T9] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 583.925645][T10429] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 583.940508][ T1215] usb 3-1: USB disconnect, device number 72 [ 584.175574][T10429] usb 5-1: Using ep0 maxpacket: 16 [ 584.362591][T10429] usb 5-1: unable to get BOS descriptor or descriptor too short [ 584.460065][T10429] usb 5-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 584.519315][T10429] usb 5-1: config 1 interface 0 has no altsetting 0 [ 584.537367][T10429] usb 5-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40 [ 584.549913][T10429] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.559750][T10429] usb 5-1: Product: syz [ 584.564176][T10429] usb 5-1: Manufacturer: syz [ 584.573005][T10429] usb 5-1: SerialNumber: syz [ 584.615620][ T5964] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 584.745658][ T5906] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 584.775784][ T5964] usb 3-1: Using ep0 maxpacket: 8 [ 584.843768][ T5964] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 584.930299][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 585.025834][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 585.037426][ T5906] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 585.186240][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.202224][ T5906] usb 2-1: Product: syz [ 585.208219][ T5906] usb 2-1: Manufacturer: syz [ 585.226652][ T5906] usb 2-1: SerialNumber: syz [ 585.233601][ T5964] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 585.243995][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.337257][ T5964] usb 3-1: Product: syz [ 585.345891][ T5964] usb 3-1: Manufacturer: syz [ 585.351598][ T5906] usb 2-1: config 0 descriptor?? [ 585.375774][ T5964] usb 3-1: SerialNumber: syz [ 585.417186][ T5964] usb 3-1: config 0 descriptor?? [ 585.461309][ T5964] streamzap 3-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 585.562424][ T5906] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 586.779193][T10429] usbhid 5-1:1.0: can't add hid device: -71 [ 586.801402][T10429] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 586.842320][T10429] usb 5-1: USB disconnect, device number 91 [ 587.208226][T10445] usb 3-1: USB disconnect, device number 73 [ 588.114930][ T5906] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 588.127644][ T5906] usb 2-1: USB disconnect, device number 78 [ 588.271682][ T30] audit: type=1400 audit(1749784250.210:215): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=12501 comm="syz.5.1645" [ 588.303081][ C0] vkms_vblank_simulate: vblank timer overrun [ 588.696024][ T1215] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 588.855602][ T1215] usb 3-1: Using ep0 maxpacket: 8 [ 588.867012][ T1215] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 588.892321][ T1215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.927539][ T1215] usb 3-1: config 0 descriptor?? [ 588.965701][ T5906] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 589.051589][T12530] loop4: detected capacity change from 0 to 7 [ 589.062117][T12530] Dev loop4: unable to read RDB block 7 [ 589.068943][T12530] loop4: unable to read partition table [ 589.074993][T12530] loop4: partition table beyond EOD, truncated [ 589.081667][T12530] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 589.141792][ T1215] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 589.164937][ T1215] asix 3-1:0.0: probe with driver asix failed with error -61 [ 589.165515][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 589.205100][ T5906] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 589.215769][ T5906] usb 2-1: config 0 has no interface number 0 [ 589.228385][ T5906] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 589.275685][T10445] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 589.296315][ T5906] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 589.333721][ T5906] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 589.350483][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.372614][ T5906] usb 2-1: Product: syz [ 589.385780][ T5906] usb 2-1: Manufacturer: syz [ 589.390454][ T5906] usb 2-1: SerialNumber: syz [ 589.407209][ T5906] usb 2-1: config 0 descriptor?? [ 589.416781][T12521] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 589.426142][T10445] usb 4-1: device descriptor read/64, error -71 [ 589.442806][T12521] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 589.476330][T12536] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1658'. [ 589.669204][T12521] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 589.689727][T10445] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 589.695955][T12521] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 589.865826][T10445] usb 4-1: device descriptor read/64, error -71 [ 589.975900][T10445] usb usb4-port1: attempt power cycle [ 590.253911][ T5906] asix 2-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 590.270635][ T5906] asix 2-1:0.251: probe with driver asix failed with error -524 [ 590.317089][T10445] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 590.352535][T10445] usb 4-1: device descriptor read/8, error -71 [ 590.427357][ T9] usb 3-1: USB disconnect, device number 74 [ 590.595940][T10445] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 590.838022][T10445] usb 4-1: device descriptor read/8, error -71 [ 590.850228][T12555] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1663'. [ 590.945910][T10445] usb usb4-port1: unable to enumerate USB device [ 591.285630][T10445] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 591.435878][T10445] usb 6-1: Using ep0 maxpacket: 16 [ 591.451992][T10445] usb 6-1: too many configurations: 236, using maximum allowed: 8 [ 591.462012][T10445] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 591.500721][T10445] usb 6-1: can't read configurations, error -61 [ 591.650862][T10445] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 591.805639][T10445] usb 6-1: Using ep0 maxpacket: 16 [ 591.813565][T10445] usb 6-1: too many configurations: 236, using maximum allowed: 8 [ 591.821859][ T9] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 591.831668][T10445] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 591.840112][T10445] usb 6-1: can't read configurations, error -61 [ 591.847854][T10445] usb usb6-port1: attempt power cycle [ 591.889347][ T1215] usb 2-1: USB disconnect, device number 79 [ 591.987728][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 592.008815][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 592.032022][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 592.051951][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 592.078949][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 592.099980][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 592.109586][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 592.122590][ T9] usb 3-1: Product: syz [ 592.131276][ T9] usb 3-1: Manufacturer: syz [ 592.153596][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 592.159636][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 592.171542][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 592.182837][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 592.195639][T10445] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 592.226917][T10445] usb 6-1: Using ep0 maxpacket: 16 [ 592.234587][T10445] usb 6-1: too many configurations: 236, using maximum allowed: 8 [ 592.251379][T10445] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 592.264847][T10445] usb 6-1: can't read configurations, error -61 [ 592.395809][T10445] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 592.439442][T10445] usb 6-1: Using ep0 maxpacket: 16 [ 592.464216][T10445] usb 6-1: too many configurations: 236, using maximum allowed: 8 [ 592.496692][T10445] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 592.509516][T10445] usb 6-1: can't read configurations, error -61 [ 592.523449][T10445] usb usb6-port1: unable to enumerate USB device [ 592.659494][T12589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.705097][T12589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.126432][T12594] FAULT_INJECTION: forcing a failure. [ 593.126432][T12594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.145859][T12594] CPU: 1 UID: 0 PID: 12594 Comm: syz.1.1675 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 593.145891][T12594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 593.145904][T12594] Call Trace: [ 593.145912][T12594] [ 593.145922][T12594] dump_stack_lvl+0x189/0x250 [ 593.145961][T12594] ? __pfx____ratelimit+0x10/0x10 [ 593.145992][T12594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 593.146031][T12594] ? __pfx__printk+0x10/0x10 [ 593.146053][T12594] ? __might_fault+0xb0/0x130 [ 593.146086][T12594] should_fail_ex+0x414/0x560 [ 593.146110][T12594] _copy_from_user+0x2d/0xb0 [ 593.146127][T12594] __se_sys_move_pages+0xf6d/0x16d0 [ 593.146173][T12594] ? __pfx___se_sys_move_pages+0x10/0x10 [ 593.146241][T12594] ? fput+0xa0/0xd0 [ 593.146260][T12594] ? ksys_write+0x22a/0x250 [ 593.146275][T12594] ? __pfx_ksys_write+0x10/0x10 [ 593.146293][T12594] ? __x64_sys_move_pages+0x21/0xf0 [ 593.146326][T12594] do_syscall_64+0xfa/0x3b0 [ 593.146347][T12594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.146366][T12594] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 593.146392][T12594] ? clear_bhb_loop+0x60/0xb0 [ 593.146411][T12594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.146426][T12594] RIP: 0033:0x7f05d358e929 [ 593.146440][T12594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.146459][T12594] RSP: 002b:00007f05d443c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 593.146482][T12594] RAX: ffffffffffffffda RBX: 00007f05d37b5fa0 RCX: 00007f05d358e929 [ 593.146498][T12594] RDX: 0000200000000080 RSI: 0000000000001efe RDI: 0000000000000000 [ 593.146511][T12594] RBP: 00007f05d443c090 R08: 0000200000000040 R09: 0000000000000000 [ 593.146524][T12594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 593.146535][T12594] R13: 0000000000000000 R14: 00007f05d37b5fa0 R15: 00007f05d38dfa28 [ 593.146567][T12594] [ 593.880233][T12583] netlink: 'syz.3.1672': attribute type 21 has an invalid length. [ 594.089776][T12600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.235672][ T9] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 594.409843][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 594.431124][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.444717][ T9] usb 5-1: config 0 descriptor?? [ 594.649765][T12586] delete_channel: no stack [ 594.829688][ T5906] usb 3-1: USB disconnect, device number 75 [ 595.233642][T12628] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1686'. [ 595.298665][T12629] FAULT_INJECTION: forcing a failure. [ 595.298665][T12629] name failslab, interval 1, probability 0, space 0, times 0 [ 595.336259][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 595.368839][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 595.385738][T12629] CPU: 0 UID: 0 PID: 12629 Comm: syz.2.1686 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 595.385763][T12629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 595.385774][T12629] Call Trace: [ 595.385782][T12629] [ 595.385789][T12629] dump_stack_lvl+0x189/0x250 [ 595.385821][T12629] ? __pfx____ratelimit+0x10/0x10 [ 595.385848][T12629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 595.385875][T12629] ? __pfx__printk+0x10/0x10 [ 595.385905][T12629] should_fail_ex+0x414/0x560 [ 595.385932][T12629] should_failslab+0xa8/0x100 [ 595.385952][T12629] __kmalloc_cache_noprof+0x70/0x3d0 [ 595.385969][T12629] ? sctp_add_bind_addr+0x8c/0x370 [ 595.385990][T12629] sctp_add_bind_addr+0x8c/0x370 [ 595.386017][T12629] sctp_copy_local_addr_list+0x30b/0x4e0 [ 595.386042][T12629] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 595.386062][T12629] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 595.386084][T12629] ? sctp_v6_is_any+0x64/0x80 [ 595.386107][T12629] ? sctp_copy_one_addr+0x93/0x360 [ 595.386130][T12629] sctp_bind_addr_copy+0xb3/0x3c0 [ 595.386151][T12629] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 595.386184][T12629] sctp_connect_new_asoc+0x2e0/0x690 [ 595.386213][T12629] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 595.386236][T12629] ? __local_bh_enable_ip+0x12d/0x1c0 [ 595.386272][T12629] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 595.386303][T12629] ? security_sctp_bind_connect+0x7e/0x2e0 [ 595.386325][T12629] sctp_sendmsg+0x155c/0x2810 [ 595.386357][T12629] ? __pfx_sctp_sendmsg+0x10/0x10 [ 595.386381][T12629] ? aa_sk_perm+0x81e/0x950 [ 595.386406][T12629] ? __pfx_aa_sk_perm+0x10/0x10 [ 595.386428][T12629] ? sock_rps_record_flow+0x19/0x410 [ 595.386448][T12629] ? inet_sendmsg+0x2f4/0x370 [ 595.386468][T12629] __sock_sendmsg+0x19c/0x270 [ 595.386499][T12629] __sys_sendto+0x3bd/0x520 [ 595.386521][T12629] ? __pfx___sys_sendto+0x10/0x10 [ 595.386538][T12629] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 595.386566][T12629] ? __fget_files+0x3a0/0x420 [ 595.386595][T12629] ? ksys_write+0x22a/0x250 [ 595.386612][T12629] ? __pfx_ksys_write+0x10/0x10 [ 595.386625][T12629] ? rcu_is_watching+0x15/0xb0 [ 595.386657][T12629] __x64_sys_sendto+0xde/0x100 [ 595.386680][T12629] do_syscall_64+0xfa/0x3b0 [ 595.386696][T12629] ? lockdep_hardirqs_on+0x9c/0x150 [ 595.386721][T12629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.386737][T12629] ? clear_bhb_loop+0x60/0xb0 [ 595.386758][T12629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.386774][T12629] RIP: 0033:0x7f0e7458e929 [ 595.386789][T12629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.386807][T12629] RSP: 002b:00007f0e754ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 595.386827][T12629] RAX: ffffffffffffffda RBX: 00007f0e747b6080 RCX: 00007f0e7458e929 [ 595.386859][T12629] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 595.386872][T12629] RBP: 00007f0e754ab090 R08: 0000200000000080 R09: 000000000000001c [ 595.386885][T12629] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 595.386898][T12629] R13: 0000000000000001 R14: 00007f0e747b6080 R15: 00007f0e748dfa28 [ 595.386931][T12629] [ 595.392984][ T9] usb 5-1: USB disconnect, device number 92 [ 595.660372][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.281695][T12666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.351226][T12666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.485581][ T9] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 597.510962][T12661] delete_channel: no stack [ 597.605784][ T5840] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 597.767624][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.837251][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.893680][ T5840] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 597.921315][T12681] FAULT_INJECTION: forcing a failure. [ 597.921315][T12681] name failslab, interval 1, probability 0, space 0, times 0 [ 597.942904][ T5840] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 597.952738][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.974912][T12681] CPU: 0 UID: 0 PID: 12681 Comm: syz.1.1705 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 597.974941][T12681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 597.974953][T12681] Call Trace: [ 597.974961][T12681] [ 597.974970][T12681] dump_stack_lvl+0x189/0x250 [ 597.975016][T12681] ? __pfx____ratelimit+0x10/0x10 [ 597.975048][T12681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 597.975081][T12681] ? __pfx__printk+0x10/0x10 [ 597.975107][T12681] ? __pfx___might_resched+0x10/0x10 [ 597.975136][T12681] ? fs_reclaim_acquire+0x7d/0x100 [ 597.975164][T12681] should_fail_ex+0x414/0x560 [ 597.975196][T12681] should_failslab+0xa8/0x100 [ 597.975221][T12681] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 597.975254][T12681] ? __alloc_skb+0x112/0x2d0 [ 597.975282][T12681] __alloc_skb+0x112/0x2d0 [ 597.975309][T12681] netlink_ack+0x146/0xa50 [ 597.975330][T12681] ? __pfx_genl_rcv_msg+0x10/0x10 [ 597.975357][T12681] ? ref_tracker_free+0x63a/0x7d0 [ 597.975388][T12681] ? __pfx_ref_tracker_free+0x10/0x10 [ 597.975445][T12681] netlink_rcv_skb+0x28c/0x470 [ 597.975476][T12681] ? __pfx_genl_rcv_msg+0x10/0x10 [ 597.975508][T12681] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 597.975553][T12681] ? down_read+0x1ad/0x2e0 [ 597.975577][T12681] genl_rcv+0x28/0x40 [ 597.975606][T12681] netlink_unicast+0x75b/0x8d0 [ 597.975641][T12681] netlink_sendmsg+0x805/0xb30 [ 597.975677][T12681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.975705][T12681] ? aa_sock_msg_perm+0x94/0x160 [ 597.975734][T12681] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 597.975761][T12681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.975788][T12681] __sock_sendmsg+0x219/0x270 [ 597.975826][T12681] ____sys_sendmsg+0x505/0x830 [ 597.975872][T12681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 597.975908][T12681] ? import_iovec+0x74/0xa0 [ 597.975933][T12681] ___sys_sendmsg+0x21f/0x2a0 [ 597.975962][T12681] ? __pfx____sys_sendmsg+0x10/0x10 [ 597.976033][T12681] ? __fget_files+0x2a/0x420 [ 597.976056][T12681] ? __fget_files+0x3a0/0x420 [ 597.976091][T12681] __x64_sys_sendmsg+0x19b/0x260 [ 597.976121][T12681] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 597.976159][T12681] ? __pfx_ksys_write+0x10/0x10 [ 597.976175][T12681] ? rcu_is_watching+0x15/0xb0 [ 597.976214][T12681] ? do_syscall_64+0xbe/0x3b0 [ 597.976238][T12681] do_syscall_64+0xfa/0x3b0 [ 597.976256][T12681] ? lockdep_hardirqs_on+0x9c/0x150 [ 597.976287][T12681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.976307][T12681] ? clear_bhb_loop+0x60/0xb0 [ 597.976333][T12681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.976353][T12681] RIP: 0033:0x7f05d358e929 [ 597.976372][T12681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.976390][T12681] RSP: 002b:00007f05d443c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.976413][T12681] RAX: ffffffffffffffda RBX: 00007f05d37b5fa0 RCX: 00007f05d358e929 [ 597.976428][T12681] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 597.976442][T12681] RBP: 00007f05d443c090 R08: 0000000000000000 R09: 0000000000000000 [ 597.976454][T12681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.976466][T12681] R13: 0000000000000000 R14: 00007f05d37b5fa0 R15: 00007f05d38dfa28 [ 597.976498][T12681] [ 598.297239][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.306725][ T5840] usb 3-1: config 0 descriptor?? [ 598.785953][ T5840] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 598.813123][ T5840] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 598.926162][ T9] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 599.076052][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 599.090688][T12668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.093222][ T9] usb 2-1: config 0 has an invalid interface number: 39 but max is 0 [ 599.115228][ T9] usb 2-1: config 0 has no interface number 0 [ 599.122961][ T9] usb 2-1: config 0 interface 39 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 599.135272][ T9] usb 2-1: config 0 interface 39 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 599.150104][T12668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.184823][ T9] usb 2-1: New USB device found, idVendor=0c52, idProduct=2212, bcdDevice= 1.ca [ 599.232234][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.275539][ T9] usb 2-1: Product: syz [ 599.279684][T10430] usb 3-1: USB disconnect, device number 76 [ 599.287459][T12695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1699'. [ 599.297750][ T9] usb 2-1: Manufacturer: syz [ 599.314616][ T9] usb 2-1: SerialNumber: syz [ 599.327032][ T9] usb 2-1: config 0 descriptor?? [ 599.339555][T12686] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 599.370545][ T9] ftdi_sio 2-1:0.39: FTDI USB Serial Device converter detected [ 599.396807][ T9] usb 2-1: Detected SIO [ 599.399106][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 599.903769][ T9] usb 2-1: USB disconnect, device number 81 [ 599.930832][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 599.988246][ T9] ftdi_sio 2-1:0.39: device disconnected [ 600.556415][ T9] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 600.760037][ T9] usb 3-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 600.804801][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.843708][ T9] usb 3-1: config 0 descriptor?? [ 601.466011][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 601.492372][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 601.512752][ T9] usb 3-1: USB disconnect, device number 77 [ 602.705301][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1717'. [ 602.715061][T12733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1717'. [ 603.235630][T10429] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 603.381505][T12765] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1730'. [ 603.445589][T10430] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 603.458021][T10429] usb 2-1: Using ep0 maxpacket: 16 [ 603.522789][T10429] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 603.540683][T10429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.570665][T10429] usb 2-1: config 0 descriptor?? [ 603.594783][T10429] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 603.655896][T10430] usb 4-1: Using ep0 maxpacket: 16 [ 603.685163][T12762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1729'. [ 603.694673][T12762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1729'. [ 603.733372][ T30] audit: type=1326 audit(1749784265.680:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12758 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3c18e929 code=0x7ffc0000 [ 603.831685][ T30] audit: type=1326 audit(1749784265.680:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12758 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3c18e929 code=0x7ffc0000 [ 603.916537][ T5906] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 603.954655][ T30] audit: type=1326 audit(1749784265.680:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12758 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3c18e929 code=0x7ffc0000 [ 603.977066][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.133034][ T5906] usb 3-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 604.135571][ T30] audit: type=1326 audit(1749784265.680:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12758 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c3c18e52b code=0x7ffc0000 [ 604.164392][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.176723][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.309786][T10429] gspca_sonixj: reg_r err -110 [ 604.339438][ T5906] usb 3-1: config 0 descriptor?? [ 604.353982][T10429] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 604.386048][ T30] audit: type=1326 audit(1749784265.680:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12758 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3c18e929 code=0x7ffc0000 [ 604.408674][ T30] audit: type=1326 audit(1749784265.680:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12758 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3c18e929 code=0x7ffc0000 [ 604.432876][ T30] audit: type=1800 audit(1749784266.290:222): pid=12773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1733" name="file1" dev="tmpfs" ino=494 res=0 errno=0 [ 604.640806][ T5906] usbhid 3-1:0.0: can't add hid device: -71 [ 604.647735][ T5906] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 604.687364][ T5906] usb 3-1: USB disconnect, device number 78 [ 604.889411][T12771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.912822][T12771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.025763][ T5840] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 606.205892][ T5840] usb 3-1: device descriptor read/64, error -71 [ 606.326765][ T9] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 606.341704][ T1215] usb 2-1: USB disconnect, device number 82 [ 606.385878][T12774] Bluetooth: hci5: command 0x0406 tx timeout [ 606.465681][ T5840] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 606.725593][T10430] usb 4-1: unable to get BOS descriptor or descriptor too short [ 606.766234][ T5840] usb 3-1: device descriptor read/64, error -71 [ 606.775600][T10430] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 606.844933][T10430] usb 4-1: can't read configurations, error -71 [ 606.886257][ T5840] usb usb3-port1: attempt power cycle [ 607.578918][ T9] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 607.594326][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.635679][ T5840] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 607.672241][ T9] usb 5-1: Product: syz [ 607.687033][ T9] usb 5-1: Manufacturer: syz [ 607.716371][ T5840] usb 3-1: device descriptor read/8, error -71 [ 607.775262][ T9] usb 5-1: SerialNumber: syz [ 607.808218][ T9] usb 5-1: config 0 descriptor?? [ 608.022959][T12821] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1747'. [ 608.046431][ T5840] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 608.120935][ T5840] usb 3-1: device descriptor read/8, error -71 [ 608.246910][ T5840] usb usb3-port1: unable to enumerate USB device [ 608.397926][ T1215] usb 5-1: USB disconnect, device number 93 [ 609.556377][T12836] syzkaller0: entered promiscuous mode [ 609.561909][T12836] syzkaller0: entered allmulticast mode [ 609.646787][ T1215] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 609.806017][ T1215] usb 6-1: Using ep0 maxpacket: 8 [ 609.823555][ T1215] usb 6-1: unable to get BOS descriptor or descriptor too short [ 609.839167][ T1215] usb 6-1: config 64 has an invalid interface number: 103 but max is 0 [ 609.857744][ T1215] usb 6-1: config 64 has no interface number 0 [ 609.870131][ T1215] usb 6-1: config 64 interface 103 has no altsetting 0 [ 609.885355][ T1215] usb 6-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=8d.88 [ 609.900068][ T1215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.912914][ T1215] usb 6-1: Product: syz [ 609.925032][ T1215] usb 6-1: Manufacturer: Ђ [ 609.932087][ T1215] usb 6-1: SerialNumber: syz [ 610.015771][ T5840] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 610.176231][ T5840] usb 3-1: Using ep0 maxpacket: 8 [ 610.181551][ T5840] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 610.181591][ T5840] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 610.181609][ T5840] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 610.181653][ T5840] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 610.181671][ T5840] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 610.181705][ T5840] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 610.181722][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.427307][ T5840] usb 3-1: usb_control_msg returned -32 [ 610.427388][ T5840] usbtmc 3-1:16.0: can't read capabilities [ 610.485697][T10429] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 610.645731][T10429] usb 2-1: device descriptor read/64, error -71 [ 610.780913][T12857] usbtmc 3-1:16.0: control status returned 0 [ 610.895924][T10429] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 611.035703][T10429] usb 2-1: device descriptor read/64, error -71 [ 611.297710][T10429] usb usb2-port1: attempt power cycle [ 611.657674][T10429] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 611.697758][T10429] usb 2-1: device descriptor read/8, error -71 [ 611.725434][ T9] usb 3-1: USB disconnect, device number 83 [ 611.937946][T10429] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 611.966351][T10429] usb 2-1: device descriptor read/8, error -71 [ 612.082541][T10429] usb usb2-port1: unable to enumerate USB device [ 612.622825][ T1215] snd-usb-audio 6-1:64.103: probe with driver snd-usb-audio failed with error -71 [ 612.649576][ T1215] usb 6-1: USB disconnect, device number 19 [ 613.146030][ T1215] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 613.326060][ T1215] usb 3-1: Using ep0 maxpacket: 8 [ 613.335623][ T1215] usb 3-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 613.350451][ T1215] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.361026][ T1215] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 613.370224][ T1215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.708958][T12879] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1767'. [ 614.143853][ T1215] usb 3-1: string descriptor 0 read error: -71 [ 614.164352][ T1215] hub 3-1:32.0: bad descriptor, ignoring hub [ 614.195620][ T1215] hub 3-1:32.0: probe with driver hub failed with error -5 [ 614.321825][ T1215] usb 3-1: USB disconnect, device number 84 [ 614.831693][T12887] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 615.115322][T12897] FAULT_INJECTION: forcing a failure. [ 615.115322][T12897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.130346][T12889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'. [ 615.151900][T12889] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1769'. [ 615.161120][T12897] CPU: 0 UID: 0 PID: 12897 Comm: syz.2.1772 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 615.161152][T12897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 615.161166][T12897] Call Trace: [ 615.161176][T12897] [ 615.161196][T12897] dump_stack_lvl+0x189/0x250 [ 615.161235][T12897] ? __pfx____ratelimit+0x10/0x10 [ 615.161269][T12897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 615.161303][T12897] ? __pfx__printk+0x10/0x10 [ 615.161327][T12897] ? __might_fault+0xb0/0x130 [ 615.161359][T12897] should_fail_ex+0x414/0x560 [ 615.161394][T12897] _copy_from_user+0x2d/0xb0 [ 615.161417][T12897] ___sys_sendmsg+0x158/0x2a0 [ 615.161450][T12897] ? __pfx____sys_sendmsg+0x10/0x10 [ 615.161518][T12897] ? __fget_files+0x2a/0x420 [ 615.161542][T12897] ? __fget_files+0x3a0/0x420 [ 615.161577][T12897] __x64_sys_sendmsg+0x19b/0x260 [ 615.161609][T12897] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 615.161649][T12897] ? __pfx_ksys_write+0x10/0x10 [ 615.161667][T12897] ? rcu_is_watching+0x15/0xb0 [ 615.161706][T12897] ? do_syscall_64+0xbe/0x3b0 [ 615.161731][T12897] do_syscall_64+0xfa/0x3b0 [ 615.161750][T12897] ? lockdep_hardirqs_on+0x9c/0x150 [ 615.161783][T12897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.161804][T12897] ? clear_bhb_loop+0x60/0xb0 [ 615.161831][T12897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.161853][T12897] RIP: 0033:0x7f0e7458e929 [ 615.161874][T12897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.161898][T12897] RSP: 002b:00007f0e754cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.161927][T12897] RAX: ffffffffffffffda RBX: 00007f0e747b5fa0 RCX: 00007f0e7458e929 [ 615.161946][T12897] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000003 [ 615.161963][T12897] RBP: 00007f0e754cc090 R08: 0000000000000000 R09: 0000000000000000 [ 615.161979][T12897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.161994][T12897] R13: 0000000000000000 R14: 00007f0e747b5fa0 R15: 00007f0e748dfa28 [ 615.162032][T12897] [ 615.355793][ T9] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 615.357479][T12889] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1769'. [ 615.527358][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 615.549996][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 615.562091][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 615.574127][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.582841][ T9] usb 4-1: Product: syz [ 615.590520][ T9] usb 4-1: Manufacturer: syz [ 615.599612][ T9] usb 4-1: SerialNumber: syz [ 615.613612][ T9] usb 4-1: config 0 descriptor?? [ 615.765544][T10430] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 615.917599][T10430] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 615.917924][T12914] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1779'. [ 615.929509][T10430] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.962007][T10430] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 615.979592][T10430] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.991408][T10430] usb 3-1: config 0 descriptor?? [ 616.015874][ T5906] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 616.025369][ T9] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 616.182023][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 616.199834][ T5906] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 616.217863][ T5906] usb 2-1: config 0 has no interface number 0 [ 616.237461][ T5906] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 616.250012][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.260454][ T5906] usb 2-1: Product: syz [ 616.265340][ T5906] usb 2-1: Manufacturer: syz [ 616.276035][ T5906] usb 2-1: SerialNumber: syz [ 616.291687][ T5906] usb 2-1: config 0 descriptor?? [ 616.303462][ T5906] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 616.432604][T10429] usb 4-1: USB disconnect, device number 89 [ 616.509653][ T1215] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 616.527782][ T5906] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 616.544632][ T5906] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 616.625317][T10430] usb 3-1: string descriptor 0 read error: -22 [ 616.675828][ T1215] usb 5-1: Using ep0 maxpacket: 16 [ 616.688209][ T1215] usb 5-1: config 6 has an invalid interface number: 227 but max is 0 [ 616.707461][ T1215] usb 5-1: config 6 has no interface number 0 [ 616.721581][ T1215] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 7.79 [ 616.751355][ T1215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.780277][ T1215] usb 5-1: Product: syz [ 616.791650][ T1215] usb 5-1: Manufacturer: syz [ 616.805759][ T1215] usb 5-1: SerialNumber: syz [ 616.827499][T10430] uclogic 0003:256C:006D.0022: interface is invalid, ignoring [ 616.828678][ T1215] kalmia 5-1:6.227: probe with driver kalmia failed with error -22 [ 617.067085][T12920] netlink: 1220 bytes leftover after parsing attributes in process `syz.4.1782'. [ 617.117338][T12941] syz_tun: entered allmulticast mode [ 617.131164][T12920] netlink: 'syz.4.1782': attribute type 3 has an invalid length. [ 617.147394][T10429] usb 5-1: USB disconnect, device number 94 [ 617.174477][T12941] pimreg: entered allmulticast mode [ 617.194713][T12941] pimreg: left allmulticast mode [ 617.319840][T12940] syz_tun: left allmulticast mode [ 617.865077][T12965] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1790'. [ 618.384561][T10430] usb 3-1: USB disconnect, device number 85 [ 618.801296][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 618.803153][ T9] usb 2-1: USB disconnect, device number 87 [ 618.867877][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 618.932391][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 618.935686][T10430] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 618.984534][ T9] quatech2 2-1:0.51: device disconnected [ 619.169021][T10430] usb 3-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 619.200845][T10430] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.506247][T10430] usb 3-1: config 0 descriptor?? [ 619.921183][T10430] usbhid 3-1:0.0: can't add hid device: -71 [ 619.936479][T10430] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 620.163337][T10430] usb 3-1: USB disconnect, device number 86 [ 620.603541][T13003] netlink: 'syz.1.1802': attribute type 21 has an invalid length. [ 621.101069][T13003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.481158][T13027] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1806'. [ 621.555761][T13027] netlink: 'syz.2.1806': attribute type 6 has an invalid length. [ 621.615696][T13027] netlink: 'syz.2.1806': attribute type 5 has an invalid length. [ 621.665650][T13027] netlink: 'syz.2.1806': attribute type 4 has an invalid length. [ 622.215865][ T1215] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 622.243419][T13032] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 622.411388][ T1215] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 622.456242][ T1215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.465567][T10430] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 622.498238][T13046] FAULT_INJECTION: forcing a failure. [ 622.498238][T13046] name failslab, interval 1, probability 0, space 0, times 0 [ 622.501547][ T1215] usb 5-1: config 0 descriptor?? [ 622.549094][T13045] netlink: 'syz.5.1813': attribute type 8 has an invalid length. [ 622.610672][T13046] CPU: 1 UID: 0 PID: 13046 Comm: syz.1.1812 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 622.610707][T13046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 622.610721][T13046] Call Trace: [ 622.610730][T13046] [ 622.610739][T13046] dump_stack_lvl+0x189/0x250 [ 622.610778][T13046] ? __pfx____ratelimit+0x10/0x10 [ 622.610814][T13046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 622.610848][T13046] ? __pfx__printk+0x10/0x10 [ 622.610868][T13046] ? trace_contention_end+0x39/0x120 [ 622.610901][T13046] should_fail_ex+0x414/0x560 [ 622.610926][T13046] should_failslab+0xa8/0x100 [ 622.610948][T13046] __kmalloc_cache_noprof+0x70/0x3d0 [ 622.610971][T13046] ? __io_queue_proc+0x23a/0x4d0 [ 622.611000][T13046] ? add_wait_queue+0xba/0x170 [ 622.611028][T13046] __io_queue_proc+0x23a/0x4d0 [ 622.611055][T13046] ? vb2_core_poll+0x104/0x840 [ 622.611075][T13046] vb2_fop_poll+0x24e/0x380 [ 622.611098][T13046] ? __pfx_vb2_fop_poll+0x10/0x10 [ 622.611123][T13046] v4l2_poll+0x147/0x2c0 [ 622.611142][T13046] ? __pfx_v4l2_poll+0x10/0x10 [ 622.611165][T13046] __io_arm_poll_handler+0x372/0xbb0 [ 622.611208][T13046] io_arm_poll_handler+0x726/0xb70 [ 622.611251][T13046] ? __pfx_io_arm_poll_handler+0x10/0x10 [ 622.611279][T13046] ? __pfx_io_async_queue_proc+0x10/0x10 [ 622.611316][T13046] ? io_issue_sqe+0x3bb/0xfd0 [ 622.611350][T13046] io_queue_async+0x79/0x2f0 [ 622.611384][T13046] io_poll_task_func+0xc08/0xff0 [ 622.611424][T13046] ? __pfx_io_poll_task_func+0x10/0x10 [ 622.611462][T13046] ? percpu_ref_get_many+0x18c/0x1e0 [ 622.611484][T13046] ? __pfx_io_poll_task_func+0x10/0x10 [ 622.611521][T13046] io_handle_tw_list+0x1f5/0x4c0 [ 622.611553][T13046] tctx_task_work_run+0x99/0x370 [ 622.611581][T13046] tctx_task_work+0x3f/0x90 [ 622.611605][T13046] task_work_run+0x1d1/0x260 [ 622.611636][T13046] ? __pfx_task_work_run+0x10/0x10 [ 622.611667][T13046] ? video_usercopy+0xe22/0x14f0 [ 622.611690][T13046] ? rcu_is_watching+0x15/0xb0 [ 622.611728][T13046] get_signal+0x11ed/0x1340 [ 622.611763][T13046] ? video_usercopy+0xe22/0x14f0 [ 622.611806][T13046] arch_do_signal_or_restart+0x9a/0x750 [ 622.611842][T13046] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 622.611889][T13046] ? exit_to_user_mode_loop+0x40/0x110 [ 622.611924][T13046] exit_to_user_mode_loop+0x75/0x110 [ 622.611956][T13046] do_syscall_64+0x2bd/0x3b0 [ 622.611976][T13046] ? lockdep_hardirqs_on+0x9c/0x150 [ 622.612008][T13046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.612030][T13046] ? clear_bhb_loop+0x60/0xb0 [ 622.612056][T13046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.612077][T13046] RIP: 0033:0x7f05d358e929 [ 622.612097][T13046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.612117][T13046] RSP: 002b:00007f05d443c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 622.612141][T13046] RAX: 0000000000000000 RBX: 00007f05d37b5fa0 RCX: 00007f05d358e929 [ 622.612156][T13046] RDX: 00002000000000c0 RSI: 00000000c0045627 RDI: 0000000000000003 [ 622.612170][T13046] RBP: 00007f05d443c090 R08: 0000000000000000 R09: 0000000000000000 [ 622.612184][T13046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.612197][T13046] R13: 0000000000000000 R14: 00007f05d37b5fa0 R15: 00007f05d38dfa28 [ 622.612233][T13046] [ 622.945315][ T31] INFO: task kworker/0:7:5943 blocked for more than 143 seconds. [ 622.965763][T10430] usb 3-1: Using ep0 maxpacket: 8 [ 622.978331][T10430] usb 3-1: config 162 has an invalid interface number: 84 but max is 2 [ 622.978764][ T1215] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 622.987401][T10430] usb 3-1: config 162 has an invalid descriptor of length 75, skipping remainder of the config [ 622.994221][ T31] Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 [ 623.005629][T10430] usb 3-1: config 162 has 2 interfaces, different from the descriptor's value: 3 [ 623.022729][T10430] usb 3-1: config 162 has no interface number 0 [ 623.029288][T10430] usb 3-1: config 162 has no interface number 1 [ 623.035844][T10430] usb 3-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 623.049288][T10430] usb 3-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 623.060609][T10430] usb 3-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 623.072576][T10430] usb 3-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 623.084142][T10430] usb 3-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 623.094502][T10430] usb 3-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 623.107655][T10430] usb 3-1: config 162 interface 84 has no altsetting 0 [ 623.114548][T10430] usb 3-1: config 162 interface 2 has no altsetting 0 [ 623.124757][T10430] usb 3-1: New USB device found, idVendor=ac8d, idProduct=0000, bcdDevice=9b.00 [ 623.133966][T10430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.142029][T10430] usb 3-1: Product: syz [ 623.146242][T10430] usb 3-1: Manufacturer: syz [ 623.150865][T10430] usb 3-1: SerialNumber: syz [ 623.165609][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 623.203283][ T1215] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 623.207327][ T31] task:kworker/0:7 state:D stack:21400 pid:5943 tgid:5943 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 623.222254][ T31] Workqueue: usb_hub_wq hub_event [ 623.227940][ T31] Call Trace: [ 623.231240][ T31] [ 623.234184][ T31] __schedule+0x16f5/0x4d00 [ 623.238751][ T31] ? __driver_probe_device+0x18c/0x2f0 [ 623.244231][ T31] ? driver_probe_device+0x4f/0x430 [ 623.249574][ T31] ? __device_attach+0x2b8/0x400 [ 623.254538][ T31] ? bus_probe_device+0x185/0x260 [ 623.259624][ T31] ? process_scheduled_works+0xae1/0x17b0 [ 623.265372][ T31] ? worker_thread+0x8a0/0xda0 [ 623.270199][ T31] ? schedule+0x165/0x360 [ 623.275632][ T31] ? __lock_acquire+0xab9/0xd20 [ 623.283734][ T31] ? __pfx___schedule+0x10/0x10 [ 623.288932][ T31] ? schedule+0x91/0x360 [ 623.293286][ T31] schedule+0x165/0x360 [ 623.297555][ T31] schedule_timeout+0x9a/0x270 [ 623.302364][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 623.307874][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 623.313218][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.318627][ T31] ? wait_for_completion+0x267/0x5d0 [ 623.323988][ T31] wait_for_completion+0x2bf/0x5d0 [ 623.329826][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 623.335607][ T31] i2c_del_adapter+0x581/0x6e0 [ 623.340466][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 623.345886][ T31] ? rcu_is_watching+0x15/0xb0 [ 623.350752][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 623.360413][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 623.365223][ T31] dvb_usb_device_exit+0x1be/0x350 [ 623.370483][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 623.376273][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 623.382230][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.387690][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 623.393652][ T31] cxusb_probe+0x603/0x700 [ 623.398176][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 623.403175][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 623.426414][ T31] usb_probe_interface+0x641/0xbc0 [ 623.432301][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 623.438188][ T1215] [drm] Initialized udl on minor 2 [ 623.442450][ T31] really_probe+0x26a/0x9a0 [ 623.452608][ T31] __driver_probe_device+0x18c/0x2f0 [ 623.465211][ T31] driver_probe_device+0x4f/0x430 [ 623.481819][ T1215] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 623.500211][ T31] __device_attach_driver+0x2ce/0x530 [ 623.543128][ T31] bus_for_each_drv+0x251/0x2e0 [ 623.548067][ T1215] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 623.607575][T10430] usb 3-1: USB disconnect, device number 87 [ 623.615661][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 623.636011][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 623.641509][ T31] __device_attach+0x2b8/0x400 [ 623.689736][ T31] ? __pfx___device_attach+0x10/0x10 [ 623.695975][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 623.701252][ T31] bus_probe_device+0x185/0x260 [ 623.734293][ T31] device_add+0x7b6/0xb50 [ 623.771957][ T31] usb_set_configuration+0x1a87/0x20e0 [ 623.790227][ T31] usb_generic_driver_probe+0x8d/0x150 [ 623.798564][ T31] usb_probe_device+0x1c4/0x390 [ 623.803501][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 623.821538][ T31] really_probe+0x26a/0x9a0 [ 623.826413][ T31] __driver_probe_device+0x18c/0x2f0 [ 623.831836][ T31] driver_probe_device+0x4f/0x430 [ 623.837222][ T31] __device_attach_driver+0x2ce/0x530 [ 623.843297][ T31] bus_for_each_drv+0x251/0x2e0 [ 623.848555][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 623.854582][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 623.860550][ T31] __device_attach+0x2b8/0x400 [ 623.868745][ T31] ? __pfx___device_attach+0x10/0x10 [ 623.883558][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 623.891554][ T31] bus_probe_device+0x185/0x260 [ 623.899006][ T31] device_add+0x7b6/0xb50 [ 623.903570][ T31] usb_new_device+0xa39/0x16c0 [ 623.911141][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 623.918350][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 623.927010][T13050] dns_resolver: Unsupported server list version (0) [ 623.950893][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.956809][ T31] hub_event+0x2941/0x4a00 [ 623.961854][ T31] ? __pfx_hub_event+0x10/0x10 [ 623.967241][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 623.973234][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 623.979343][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 623.985302][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 623.991890][ T31] process_scheduled_works+0xae1/0x17b0 [ 623.998011][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 624.004502][ T31] worker_thread+0x8a0/0xda0 [ 624.009661][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 624.016716][ T31] ? __kthread_parkme+0x7b/0x200 [ 624.021863][ T31] kthread+0x70e/0x8a0 [ 624.026627][ T31] ? __pfx_worker_thread+0x10/0x10 [ 624.031996][ T31] ? __pfx_kthread+0x10/0x10 [ 624.037250][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 624.105153][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.118097][ T31] ? __pfx_kthread+0x10/0x10 [ 624.122952][ T31] ret_from_fork+0x3fc/0x770 [ 624.129271][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 624.134769][ T31] ? __switch_to_asm+0x39/0x70 [ 624.142923][ T31] ? __switch_to_asm+0x33/0x70 [ 624.150989][ T31] ? __pfx_kthread+0x10/0x10 [ 624.158903][ T31] ret_from_fork_asm+0x1a/0x30 [ 624.163971][ T31] [ 624.168256][ T31] INFO: task syz.0.1198:10924 blocked for more than 144 seconds. [ 624.189767][ T31] Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 [ 624.201519][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 624.225082][ T31] task:syz.0.1198 state:D stack:28328 pid:10924 tgid:10903 ppid:5852 task_flags:0x400040 flags:0x00004004 [ 624.243867][ T31] Call Trace: [ 624.247586][ T31] [ 624.252395][ T31] __schedule+0x16f5/0x4d00 [ 624.260979][ T31] ? __lock_acquire+0xab9/0xd20 [ 624.266346][ T31] ? schedule+0x165/0x360 [ 624.270833][ T31] ? __pfx___schedule+0x10/0x10 [ 624.279431][ T31] ? schedule+0x91/0x360 [ 624.284103][ T31] schedule+0x165/0x360 [ 624.289070][ T31] schedule_preempt_disabled+0x13/0x30 [ 624.294798][ T31] __mutex_lock+0x724/0xe80 [ 624.303822][ T31] ? __mutex_lock+0x51b/0xe80 [ 624.309352][ T31] ? usbdev_open+0x16e/0x760 [ 624.314283][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 624.323532][ T31] ? bus_find_device+0x273/0x2b0 [ 624.331535][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 624.338162][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 624.343190][ T31] ? usbdev_open+0xa7/0x760 [ 624.348297][ T31] usbdev_open+0x16e/0x760 [ 624.354721][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 624.360215][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 624.365918][ T31] chrdev_open+0x4c9/0x5e0 [ 624.370443][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 624.376153][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 624.381185][ T31] do_dentry_open+0xdf0/0x1970 [ 624.386960][ T31] vfs_open+0x3b/0x340 [ 624.391119][ T31] ? path_openat+0x2ecd/0x3830 [ 624.396677][ T31] path_openat+0x2ee5/0x3830 [ 624.401392][ T31] ? arch_stack_walk+0xfc/0x150 [ 624.407089][ T31] ? __pfx_path_openat+0x10/0x10 [ 624.412132][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.419245][ T31] do_filp_open+0x1fa/0x410 [ 624.423820][ T31] ? __lock_acquire+0xab9/0xd20 [ 624.429460][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 624.434680][ T31] ? _raw_spin_unlock+0x28/0x50 [ 624.445386][ T31] ? alloc_fd+0x64c/0x6c0 [ 624.460624][ T31] do_sys_openat2+0x121/0x1c0 [ 624.466049][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 624.471618][ T31] ? exc_page_fault+0x76/0xf0 [ 624.477153][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 624.482746][ T31] __x64_sys_openat+0x138/0x170 [ 624.488413][ T31] do_syscall_64+0xfa/0x3b0 [ 624.493212][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.499011][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.505407][ T31] ? clear_bhb_loop+0x60/0xb0 [ 624.510971][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.517480][ T31] RIP: 0033:0x7effa7d8d290 [ 624.522053][ T31] RSP: 002b:00007effa8c7fb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 624.531807][ T31] RAX: ffffffffffffffda RBX: 000000000000a401 RCX: 00007effa7d8d290 [ 624.540230][ T31] RDX: 000000000000a401 RSI: 00007effa8c7fc10 RDI: 00000000ffffff9c [ 624.548833][ T31] RBP: 00007effa8c7fc10 R08: 0000000000000000 R09: 0000000000000000 [ 624.564016][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 624.574016][ T31] R13: 0000000000000001 R14: 00007effa7fb6080 R15: 00007effa80dfa28 [ 624.586205][ T31] [ 624.592649][T10429] usb 5-1: USB disconnect, device number 95 [ 624.621234][ T31] [ 624.621234][ T31] Showing all locks held in the system: [ 624.626313][ T5840] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 624.630074][ T31] 1 lock held by khungtaskd/31: [ 624.643600][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 624.667963][ T31] 2 locks held by kworker/u8:4/78: [ 624.673319][ T31] #0: ffff88801e385948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 624.677228][ T5840] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 624.691724][ T31] #1: ffffc9000210fbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 624.691835][ T31] 2 locks held by getty/5599: [ 624.691851][ T31] #0: ffff8880331b80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 624.691913][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 624.691982][ T31] 4 locks held by udevd/5835: [ 624.691997][ T31] #0: ffff8880328c60a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 624.692068][ T31] #1: ffff88805a872088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 624.692147][ T31] #2: ffff8880693de788 (kn->active#21){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 624.692226][ T31] #3: ffff8880240bf198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 624.692306][ T31] 11 locks held by kworker/0:3/5840: [ 624.692327][ T31] 5 locks held by kworker/0:7/5943: [ 624.692341][ T31] #0: ffff888140ac3148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 624.692414][ T31] #1: ffffc90004dffbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 624.692486][ T31] #2: ffff888028677198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 624.692544][ T31] #3: ffff8880240bf198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 624.692607][ T31] #4: ffff888020f3f160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 624.692672][ T31] 5 locks held by kworker/1:0/10429: [ 624.692687][ T31] #0: ffff888140ac3148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 624.692759][ T31] #1: ffffc90003547bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 624.692828][ T31] #2: ffff8880288e0198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 624.692885][ T31] #3: ffff88802a1ee198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x910 [ 624.692952][ T31] #4: ffff88805aaa9160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 624.693020][ T31] 1 lock held by syz.0.1198/10924: [ 624.693034][ T31] #0: ffff888028677198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 624.693150][ T31] [ 624.693160][ T31] ============================================= [ 624.693160][ T31] [ 624.693186][ T31] NMI backtrace for cpu 1 [ 624.693201][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 624.693227][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 624.693241][ T31] Call Trace: [ 624.693250][ T31] [ 624.693258][ T31] dump_stack_lvl+0x189/0x250 [ 624.693301][ T31] ? __wake_up_klogd+0xd9/0x110 [ 624.693330][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 624.693362][ T31] ? __pfx__printk+0x10/0x10 [ 624.693399][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 624.693430][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 624.693462][ T31] ? _printk+0xcf/0x120 [ 624.693495][ T31] ? __pfx__printk+0x10/0x10 [ 624.693526][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 624.693563][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 624.693601][ T31] watchdog+0xfee/0x1030 [ 624.693638][ T31] ? watchdog+0x1de/0x1030 [ 624.693679][ T31] kthread+0x70e/0x8a0 [ 624.693712][ T31] ? __pfx_watchdog+0x10/0x10 [ 624.693745][ T31] ? __pfx_kthread+0x10/0x10 [ 624.693774][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 624.693810][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.693844][ T31] ? __pfx_kthread+0x10/0x10 [ 624.693874][ T31] ret_from_fork+0x3fc/0x770 [ 624.693913][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 624.693956][ T31] ? __switch_to_asm+0x39/0x70 [ 624.693979][ T31] ? __switch_to_asm+0x33/0x70 [ 624.694003][ T31] ? __pfx_kthread+0x10/0x10 [ 624.694032][ T31] ret_from_fork_asm+0x1a/0x30 [ 624.694077][ T31] [ 624.694090][ T31] Sending NMI from CPU 1 to CPUs 0: [ 625.077376][ C0] NMI backtrace for cpu 0 [ 625.077394][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 625.077416][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 625.077428][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 625.077460][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 05 22 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 625.077476][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 625.077498][ C0] RAX: 06f0df7d2d47ab00 RBX: ffffffff81976058 RCX: 06f0df7d2d47ab00 [ 625.077513][ C0] RDX: 0000000000000001 RSI: ffffffff8d981334 RDI: ffffffff8be28300 [ 625.077526][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 625.077540][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa10bf0 [ 625.077554][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 625.077566][ C0] FS: 0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 625.077582][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 625.077595][ C0] CR2: 000000110c3ebe3a CR3: 000000002a756000 CR4: 00000000003526f0 [ 625.077611][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 625.077622][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 625.077633][ C0] Call Trace: [ 625.077640][ C0] [ 625.077647][ C0] default_idle+0x13/0x20 [ 625.077667][ C0] default_idle_call+0x74/0xb0 [ 625.077687][ C0] do_idle+0x1e8/0x510 [ 625.077706][ C0] ? __pfx_do_idle+0x10/0x10 [ 625.077730][ C0] cpu_startup_entry+0x44/0x60 [ 625.077747][ C0] rest_init+0x2de/0x300 [ 625.077766][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 625.077792][ C0] start_kernel+0x47d/0x500 [ 625.077812][ C0] x86_64_start_reservations+0x24/0x30 [ 625.077835][ C0] x86_64_start_kernel+0x143/0x1c0 [ 625.077857][ C0] common_startup_64+0x13e/0x147 [ 625.077886][ C0] [ 625.083733][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 625.288807][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 625.300644][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 625.310728][ T31] Call Trace: [ 625.314030][ T31] [ 625.316982][ T31] dump_stack_lvl+0x99/0x250 [ 625.321606][ T31] ? __asan_memcpy+0x40/0x70 [ 625.326233][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 625.331460][ T31] ? __pfx__printk+0x10/0x10 [ 625.336078][ T31] panic+0x2db/0x790 [ 625.340004][ T31] ? __pfx_panic+0x10/0x10 [ 625.344444][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 625.350268][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 625.355665][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 625.361850][ T31] watchdog+0x102d/0x1030 [ 625.366206][ T31] ? watchdog+0x1de/0x1030 [ 625.370656][ T31] kthread+0x70e/0x8a0 [ 625.374749][ T31] ? __pfx_watchdog+0x10/0x10 [ 625.379449][ T31] ? __pfx_kthread+0x10/0x10 [ 625.384090][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 625.389324][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 625.394548][ T31] ? __pfx_kthread+0x10/0x10 [ 625.399161][ T31] ret_from_fork+0x3fc/0x770 [ 625.403781][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 625.408923][ T31] ? __switch_to_asm+0x39/0x70 [ 625.413701][ T31] ? __switch_to_asm+0x33/0x70 [ 625.418493][ T31] ? __pfx_kthread+0x10/0x10 [ 625.423183][ T31] ret_from_fork_asm+0x1a/0x30 [ 625.427982][ T31] [ 625.431353][ T31] Kernel Offset: disabled [ 625.435720][ T31] Rebooting in 86400 seconds..