last executing test programs: 47m12.424491291s ago: executing program 1 (id=1027): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffffff}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x9, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 47m12.208004169s ago: executing program 1 (id=1029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x21, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) 47m11.929726538s ago: executing program 1 (id=1031): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$unix(0x1, 0x2, 0x0) preadv(r3, 0x0, 0x0, 0x1f1, 0x0) r4 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) pipe2$watch_queue(0x0, 0x80) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) 47m8.206601189s ago: executing program 1 (id=1046): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000040)='./file0\x00') 47m7.972465955s ago: executing program 1 (id=1049): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f00000013c0)=0xfcbf) sendmmsg$unix(r3, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20, 0x20040044}}], 0x1, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000500)=ANY=[], 0x78) splice(r2, 0x0, r5, 0x0, 0x39000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfb, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r8, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x50002, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r10 = inotify_init1(0x0) inotify_add_watch(r10, &(0x7f0000000180)='./control\x00', 0x64000ba6) inotify_add_watch(r10, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000000)=0xffff0018) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 47m7.583998435s ago: executing program 1 (id=1053): r0 = syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)={0x20, 0x11, 0x1, "f8"}, 0x0, 0x0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x700, 0xfdef) 47m6.331578128s ago: executing program 32 (id=1053): r0 = syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)={0x20, 0x11, 0x1, "f8"}, 0x0, 0x0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x700, 0xfdef) 8.840787884s ago: executing program 2 (id=8854): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xfe8e, 0x12) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f60c01a83d8"], 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) gettid() ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000040)=0x5) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x2db}}, './file0\x00'}) sendto$inet(r4, &(0x7f0000000340)="15f68e65fbb68cba3a4e527a52102fa7402c795837b0d1ae30c3dbf0422b67af64b6477f1849087732f721d08468b416bcb67e7b5e3d925488ad6d02b74f15c0d2923a3e38e49b88c3ace784d50d16e9cee7438ab4c03a42f9a933c61541343f30473fba66289a5fb71cb9f57641667969bd5f81e46ca75ff069609c16303fed2e8a0bce58e66c6f7a5a66916c187b573630f46f59270793cc1ade82", 0x9c, 0x24048010, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={r3, 0xffffffffffffffca, &(0x7f0000000040)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000002c0)=0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f0000001500)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001580)=""/53, 0x35}, {&(0x7f00000015c0)=""/224, 0xe0}, {&(0x7f00000016c0)=""/192, 0xc0}, {&(0x7f0000001780)=""/183, 0xb7}], 0x4, &(0x7f0000001880)=""/4096, 0x1000}, 0x40000002) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0x13, &(0x7f0000000240), 0x4) preadv2(r7, &(0x7f00000014c0)=[{&(0x7f0000000180)=""/125, 0x7d}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/140, 0x8c}], 0x3, 0x7, 0xd, 0x1a) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={r6}, &(0x7f0000000200)=0x8) 8.423687554s ago: executing program 4 (id=8856): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = socket(0x1d, 0x2, 0x26) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) getsockopt$SO_COOKIE(r2, 0x1, 0x39, 0x0, &(0x7f0000000300)) sendmmsg$sock(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000840)}}], 0x1, 0x845) r3 = socket(0x400000000010, 0x3, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x9, 0x4}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={r5, 0x5}, 0x8) poll(&(0x7f0000000200), 0x51, 0x0) r6 = socket(0x1e, 0x1, 0x20000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @value=0x100}}) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@inet=@socket2={{0x28}, 0x2}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000980)={0x314, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x80000000}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x2}, @NL80211_ATTR_PEER_MEASUREMENTS={0x44, 0x111, 0x0, 0x1, {0x40, 0x5, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3665}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x270, 0x111, 0x0, 0x1, {0x26c, 0x5, 0x0, 0x1, [{0x1fc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x48, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x62c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x88, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8a}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xdf3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x114, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8c}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x31}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x8001}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x9}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x8001}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7}, @NL80211_ATTR_TIMEOUT={0x8}]}, 0x314}, 0x1, 0x0, 0x0, 0x20044800}, 0x8004) 7.192262039s ago: executing program 0 (id=8860): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x135}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 7.098427615s ago: executing program 0 (id=8861): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000dcf51e107a09ff0107a6400d0904dd01007d362f02000000"], 0x0) bind$xdp(r0, &(0x7f00000000c0)={0x2c, 0x2, r1, 0x37}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000002000010300c99526dea0985b0a0000000000000001000000140003fc8b6328"], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x49090) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005780)=ANY=[@ANYRESHEX=r2, @ANYRES16=r6, @ANYBLOB="010028bd7000fcdbdf25010000001400020077673000000000000000000000000000060006004e21000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843080005000000000004010880"], 0x160}, 0x1, 0x0, 0x0, 0x20048000}, 0x814) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000002c0)={{0x0, 0x6, 0xfffffffffffffff8, 0x8, 0x9, 0xf, 0xffff, 0x9, 0xffffffff, 0x6f35, 0x80005, 0x9, 0x3a01, 0xffffffffffffffbd, 0x401}, 0x8, [0x0]}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, &(0x7f0000005740)={&(0x7f00000054c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005540)={&(0x7f00000003c0)={0x14, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0xe22e967d1831bc7) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000005580)={0x0, 0x9b4, 0x6, 0x5f5e, 0x7, 0xa}, 0x14) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001480)={0x0, 0x0, "5ee9c742104555da9f583cfb17e05c0ca740b4f8969e4919c97db149b7dabcadc14eb3c70813d9dcfa8e38c9290bfc2290e3b9598de563f0a8f631d5b4ffe0f1326e722ecff7ac35834f07807d94d16eadd8c545f948b4bcb8fc613f2c3801fefdf56f4e0e7c9759b75d066eb320c88f21254e00a3c2e9875d4162f727f221ebb63268db06d3bdd9081915e6b7c7f24b399da5390abf77d89d4964ff13e108752d0e67ca5252d683f04508e3b01599c3cbf2c600e713672b53a615c8e9286570a46254868ab05c0fb1ea113151af8a11a3670ccb1a3dd2df5179f4604d1193c43bda19a0a4e7e1aab739fdd36a616149ff3c565dc26c00", "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"}) r8 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x5, 0xfffffffffffffffc}) sendmmsg$inet_sctp(r8, &(0x7f0000000400), 0x0, 0x24004080) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x0) unshare(0x2040400) r9 = fsopen(&(0x7f0000000240)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) write$cgroup_subtree(r10, 0x0, 0x55) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') lseek(r11, 0x4, 0x0) syz_open_dev$vim2m(&(0x7f0000005480), 0x9f8a, 0x2) connect$inet(r11, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) syslog(0x9, &(0x7f0000000000)=""/60, 0x3c) 6.610139233s ago: executing program 3 (id=8862): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x38, r1, 0xc4fc9e906872338b, 0x70bd2d, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0x30, 0x1b, 0x3, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}]}]}, 0x38}}, 0x0) 6.217011381s ago: executing program 4 (id=8863): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) prctl$PR_SET_NAME(0x4, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x0, 0x0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x12) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/186, 0xba}], 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5d, 0x0) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000001200)={0x50, 0x0, r3, {0x7, 0x2b, 0x3, 0x200c0400, 0x0, 0x0, 0x0, 0xe382, 0x0, 0x0, 0x8}}, 0x50) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) statx(r2, &(0x7f0000000800)='./file0\x00', 0x0, 0x40, &(0x7f0000000840)) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x752f) syz_io_uring_setup(0x43f0, &(0x7f0000000040)={0x0, 0xcd2, 0x1000, 0x3, 0x1b6, 0x0, r4}, &(0x7f00000000c0), &(0x7f0000000200)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000580)=@IORING_OP_RECVMSG={0xa, 0x41, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f00000002c0)=""/5, 0x5}, {&(0x7f00000004c0)=""/106, 0x6a}], 0x3}, 0x0, 0x0, 0x0, {0x2, r6}}) read$FUSE(r2, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000480)={0x10, 0xffffffffffffffda, r7}, 0x10) 6.194415038s ago: executing program 3 (id=8864): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x12) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) 5.586157069s ago: executing program 2 (id=8865): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}}, 0x0) 5.473619957s ago: executing program 2 (id=8866): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) inotify_init() setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000040)=0xd7d, 0x4) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f18021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) syz_usb_connect(0x3, 0x710, &(0x7f0000000380)=ANY=[@ANYBLOB="120100035919c720c60502903db2010203010902fe06030901300809040300035b6c2b0609050d004000090807072501010508005f0323aee3e6f84881ea81e25935d67b887b2e8f664bb451a08743ccacc3a3b3f968b9cd322d92a1170844e0df41dd7e6552bccf2c298129bc503d5d989ff39b2326705979b1feae0584f795ece180a561bf9f99dc538619cb5ae910246d4209050500080003030107250181000dffd002fd4e6f57070fe29eceeb12303b8cd7fd17f3e125bc8d06cad0f55ba5bc4e7626a35b964f4879933b585c444359cef3da8dd77f4666853495b6e174bd9e552a681ff35268058038cd87a6a64b37fbc68fca5dc139535ac970dc06dad8e79c1f0a37b1d7cbd8e5cbcef9c6d1020c672b0477f425dc38e691e3b00785d2e80f760860c4409dbb1685ada107d951b2a775736ca1162b8c3696d3617a0beb37e773694e454150abd169f5719b5e861f445a98093109a800560f05abd2d6dc1355d152a2d26e46c10080ff03e52c27165d09050e01ff030c9308b50efed86670fb469a99d5c88a0d1a71f552fe9561ee493c5736027c0db0bc062104e2f0c8a906c3fb3e9ffc55c6d43b9da43b2a8ddb9219a6be5b8c9d24265e91bab043864a62ce2fb654246c55d17b658a63af77027667be3624569ad9ed568286b46b75a5018659640bdc967756cd0440826f3faeaff4ba2ceda72637d9808b566f10e5c8a69743e08f74c557429cb348d808cd2817edc42f52dfcff2325b7f7e209bbcdc1c4b82fb6d395a70cc96f0c04d63f5bb0bc2ccb4d540297d76347dea86dfa886c3b9300416e74a8e2b79bde991ca1f5dfdd7b3acd7a9e9cf3c2f10654f9a7dc89da011385425cf686bde526fd417032c1bce26860accfba39a157c6e523f6433b02f856d025bf721fed7ca75f79848db4c82a2065376f860550087258fdd4fced7f7c0e07464719c7597808157cc42b5b84b96275cfc8b0f0b85cbe6a1de267d6c0f51d9bed2bc61ecd1f519d71cda2bb55a36754e32c0099a187b78b1874eb57595d73cc6da8ec44d13090496fd07ffffff050724010f0a04000e240201070280078964c2f2ce330b2402010202b000b2c730072401010401100724010a1f0500092402024f4200000109050a1010004efc0507250100075400650ce36cdfccfb601485a49944e4bd4daf8a22183d18a54172b835bcaa23d1e8178fb3ace56538cfcb2cc84dc821f7e354d2aeb4045c66329bf840a8ca576d54d76f2b3886f55f88cf2ceeea548aec08232563abec856145ac6cefc71f253206ef4fb931ab09050d0010000500040923e057b73e69da9a6400460482e80c1f85d4fbb2fed6efdc71234cfeb067f564e36d02fbed5a37fdeff5c14482210662b7f70e1021dc70365313acdba7960aa7fe739ce4a79bacf1d8ef028a7b0ef7755f2262be4d509ec13986c7eeee14676b3209050108000207018709050e04"], &(0x7f0000000140)={0x0, 0x0, 0x35, 0x0}) 5.274834574s ago: executing program 3 (id=8868): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 5.217151483s ago: executing program 4 (id=8869): r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) 5.150393754s ago: executing program 3 (id=8870): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_vs\x00') 5.149332151s ago: executing program 4 (id=8871): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) (fail_nth: 10) 5.059924541s ago: executing program 4 (id=8872): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000300)=@generic={0xdac0d8dafe0bf3bf, "072271565d2f5777d3d7aa35f5508d3a28c3dc4deba3a2584e2b4216996e9846b7f067296b51a84163fcc53b5b6272381da0d5b0ae2cb610986a7f89f65686c82a300c6bfe2dad69e65ad2794055eafab546a0f6e32a994e2e69960b2de90a276fcbd3eb2560fc2fb09ff14075529e32897097efc51bdbb271bdc9ad5225"}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000600)="927f45d9cfbf0f460988410b08e1121d99024b6526ed4f7138fbf62ca4dc0fd4a2c5de39af5bfaf69b7143a95e367d834c4691591e35807dabcbc30079f7ce57768d546395b7d89eb551c0756fc972b45fa0f40c58bd36eddee4ac355c42ff53228f152aeea111690cf4aefd5249f83318080a5c813c3204a97bc94a3c9858d4ee664a39c87ebce5093a7d23d13ab54202d1e410da1b8671ace6c05e539fca9edf562968b6fbebe06a73c1b78a78060b467df0792b5a50772ff4dfe845ef9ac61bbf64b40b5bb2b2ffed67d47d148285656126fe5dc2eaea377d641eb9aa7ea3", 0xe0}, {&(0x7f0000000700)="2a266e18fa492cc14dae23615b551b79e89c4fe7bcfd52ff95e757540eac3cb9c89e628cbc30c87d8cdfa8b98e9eb6025540ee7123ec52615c1a270eaca8dee3054c46fa25ebd06b1108d6cb", 0x4c}, {&(0x7f0000000780)="9c3411e810eeaae4b728365b3cbda1e3a4fb9f58ccb018df2c0e656afbde92f9901c589201e134ad97627d3db1657e8ce0bd2a33d72c6e24e8f491eb48371fdeb87903c301c25ed42068407229c397745be2fd53575cceea5173bc74e198c9eba765e32ff2831c0522b0c27e97149d28b94743cd08fefb954faf", 0x7a}, {&(0x7f0000000040)="0a03f460ab58e70fb4c259e92a792125bc563df03fbec5f9a35e59d43d4ba5503bd9d023d17300678dee901d99dba085d9e294b89d", 0x35}], 0x4, &(0x7f0000000800)=[{0xa0, 0x10c, 0x2, "7cefa57852b12e93b7c407059e8b8ac6a7c3ba4c9814221860c537b2872c05bcd9f2ca6008e115b2864e46b710b4258ccc646c3c9bc0ea64423d5c1261c8048fd3773233b5dc0553d4db9280d4aab7352b77cbe4b1d95164fc82eab1a6f22c83bcbf576d5c2279023e628fd9824b8d5dd7d25fdb68d90b6975b89f43905b4b67c9f106ab79a40f2765508cd1a1bf"}, {0xb0, 0x108, 0xe1f6, "bef5760a29cd7a177ed1022892ebca6a8acc58251e4f3c1dbbcea8d4dc7b917a3533f6b4913512047abbe6e3a8cbabf18f6a589a181e4e4c69511ba870573c7471543dc56199717bf0c9a31e28a410d5a3793fa2240aeb4f30e670c86cb3eed491e288aac7a493b858a61906a0e65f3e111b6622b8e4a5a063321ca2556f4f800caad107b621ee149c0f4317f8480a274d4e48c4208dfe2513bbe1031a5a"}], 0x150}, 0xfda38b5ae582feb0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fc0400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b0001006272696467650000140002800500190006000000050018000100"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r5}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000100000085000000850000009500000000000000f42e55d838b5f4b34946e48cfd06401d975e6a4639962f9b34604b64f1030f3a8302c7f5fd4a0896f745a108cee8f2c92c40c91ddb19f5804603485cee31c3963f64140981ef8e0638ccbc2863d9d55fb1f4c82cba431fdfcb645c53d7a1d21b2ac941d6a97138493ff5fd401ba96774c636fce8339fad5c5e5b26e86233f2ed"], &(0x7f0000000380)='GPL\x00', 0x8, 0xad, &(0x7f0000000480)=""/173, 0x0, 0x42}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) r9 = syz_open_dev$video(&(0x7f00000003c0), 0x2, 0xc02) ioctl$VIDIOC_DQEVENT(r9, 0x80885659, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="280000004e000010cc000000000000000180e127d6fb000000822d0cfc0000000000000000000000ff7fffffffffd70e8cb3974479ee000000000636b6428b85551445fd5b3dc47e68ade701be286e7aa4613038a31f386ac23e87fadc61a6160a14a500"], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 4.715737422s ago: executing program 5 (id=8873): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x401, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000002c0)=""/114) (async) read$FUSE(r0, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) r2 = gettid() (async) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4}) (async) write$FUSE_LK(r0, &(0x7f0000000180)={0x28, 0xffffffffffffffda, r1, {{0x400, 0x10001, 0x0, r3}}}, 0x28) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7fd, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000200)={0x4, 0x1, 0x2, "84689571d31e9651295ae557ad33861bf9649dde41e5f9e891a778c36b9e4d42", 0x32314247}) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x45, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xe0a42, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r9 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec27, 0x8, 0x3, 0x40000333, 0x0, r0}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440), 0x0) (async) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000000c0), 0x4) (async) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x4007, @fd=r9, 0x5, &(0x7f0000003900)=[{&(0x7f0000000340)=""/232, 0xe8}, {&(0x7f0000000480)=""/191, 0xbf}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000002680)=""/195, 0xc3}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/77, 0x4d}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000003800)=""/115, 0x73}], 0x8, 0x10, 0x2}) syz_usb_connect(0x2, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 4.001697297s ago: executing program 0 (id=8874): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x28800, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) (fail_nth: 1) capset(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) 3.706030132s ago: executing program 2 (id=8875): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xfe8e, 0x12) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f60c01a83d8"], 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) gettid() ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000040)=0x5) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x2db}}, './file0\x00'}) sendto$inet(r4, &(0x7f0000000340)="15f68e65fbb68cba3a4e527a52102fa7402c795837b0d1ae30c3dbf0422b67af64b6477f1849087732f721d08468b416bcb67e7b5e3d925488ad6d02b74f15c0d2923a3e38e49b88c3ace784d50d16e9cee7438ab4c03a42f9a933c61541343f30473fba66289a5fb71cb9f57641667969bd5f81e46ca75ff069609c16303fed2e8a0bce58e66c6f7a5a66916c187b573630f46f59270793cc1ade82", 0x9c, 0x24048010, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={r3, 0xffffffffffffffca, &(0x7f0000000040)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000002c0)=0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f0000001500)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001580)=""/53, 0x35}, {&(0x7f00000015c0)=""/224, 0xe0}, {&(0x7f00000016c0)=""/192, 0xc0}, {&(0x7f0000001780)=""/183, 0xb7}], 0x4, &(0x7f0000001880)=""/4096, 0x1000}, 0x40000002) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0x13, &(0x7f0000000240), 0x4) preadv2(r7, &(0x7f00000014c0)=[{&(0x7f0000000180)=""/125, 0x7d}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/140, 0x8c}], 0x3, 0x7, 0xd, 0x1a) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={r6}, &(0x7f0000000200)=0x8) 3.443989928s ago: executing program 0 (id=8876): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 3.371308385s ago: executing program 5 (id=8877): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280040003000400000008000200001a"], 0x44}, 0x1, 0x200000000000000}, 0x0) 3.370110243s ago: executing program 0 (id=8878): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x12) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) 3.181260886s ago: executing program 5 (id=8879): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) prctl$PR_SET_NAME(0x4, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x0, 0x0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x12) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/186, 0xba}], 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5d, 0x0) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000001200)={0x50, 0x0, r3, {0x7, 0x2b, 0x3, 0x200c0400, 0x0, 0x0, 0x0, 0xe382, 0x0, 0x0, 0x8}}, 0x50) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) statx(r2, &(0x7f0000000800)='./file0\x00', 0x0, 0x40, &(0x7f0000000840)) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x752f) syz_io_uring_setup(0x43f0, &(0x7f0000000040)={0x0, 0xcd2, 0x1000, 0x3, 0x1b6, 0x0, r4}, &(0x7f00000000c0), &(0x7f0000000200)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000580)=@IORING_OP_RECVMSG={0xa, 0x41, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f00000002c0)=""/5, 0x5}, {&(0x7f00000004c0)=""/106, 0x6a}], 0x3}, 0x0, 0x0, 0x0, {0x2, r6}}) read$FUSE(r2, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000480)={0x10, 0xffffffffffffffda, r7}, 0x10) 2.435887395s ago: executing program 0 (id=8880): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143b03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) unshare(0x24020400) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000180)=0x2, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r3) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000fc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf250f000000180001801400020076657468315f746f5f626f6e64000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r6}) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r7, &(0x7f0000000140)}, 0x20) unshare(0x48060000) unshare(0x24020400) rmdir(&(0x7f0000000100)='./file1\x00') 2.254082621s ago: executing program 5 (id=8881): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b0000000000050010000400"], 0x30}}, 0x0) (fail_nth: 2) 1.892210926s ago: executing program 3 (id=8882): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) (fail_nth: 2) 1.832112897s ago: executing program 5 (id=8883): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'sit0\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x4, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x45) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x5, 0x164, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0x80000003) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) 1.484720576s ago: executing program 3 (id=8884): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000400)='V', 0x1}], 0x1}}], 0x2, 0x4000000) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x20, 0x0, 0x316, 0x1, 0x3a}, 0x40) 1.345628974s ago: executing program 4 (id=8885): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/udplite6\x00') pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r3, 0x1, &(0x7f00000006c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x3, r2, &(0x7f0000000480)="e4b5eea546a2b4", 0x7, 0x494}]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x400, 0x10, &(0x7f0000000040)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="940000001d00000226bd7000fbdbdf258400050000000000000000000000000000000000000004d32b00000002000000ac14141f000000000000000000000000013500000201040006000000ff010000ff000000ac141426000000000000000000000000000004d53c0000000a000000ac1414bb0000000000000000000000000000000400ba94580600c0ac36208ae95f0142e7250200030000000000000023e80000a0", @ANYRES16], 0x94}, 0x1, 0x0, 0x0, 0x48014}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) ioctl$KVM_CAP_HYPERV_VP_INDEX(r1, 0x4068aea3, &(0x7f0000000340)) r8 = socket$inet6(0xa, 0x3, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0) recvmmsg(r8, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0xa6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x40000002, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000072000040"]) 1.070843424s ago: executing program 5 (id=8886): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x28800, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000400)={&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/99, 0x63}, {}, {&(0x7f0000000080)=""/34, 0x22}, {&(0x7f0000000340)=""/58, 0x3a}], 0x4, &(0x7f00000003c0)=""/11, 0xb}, 0x100) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000000000000000000000000ee104a00fa3ceb9874496808ff4b8f0600000000000000000000000000000000000000000000feffffff00001ababa0e0000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x141) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private=0xa010102}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x90}}, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x200, 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000000)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x8, 0x8, 0x0, 0x3, 0xa5, 0xbd, 0xf9, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x1003fe, 0x9, 0x0, 0xfd, 0x20, 0x5, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0xb82e}], 0x9}) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) 541.96919ms ago: executing program 2 (id=8887): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000440)="66f30f11de660f20d364260f013525af72b80f01c5f0f61866baf80c0f38cc8500000000ef66bafc0c66edc4c279417306660fc7717bc4c1d9d5be6806bbfb", 0x3f}], 0x1, 0x56, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x1fc}, 0x1, 0x0, 0x0, 0x5593ee2f0bddd481}, 0xb363ba6a26516d1b) 0s ago: executing program 2 (id=8888): r0 = socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f00000001c0)=0x5, 0x7e, 0x2) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x10, 0x6169, 0x9, 0xd3, 0x0, 0xffffeffa, 0x7, 0x2ac8}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0x9, 0xa}, {0x1, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b0000000000050010000400"], 0x30}}, 0x0) kernel console output (not intermixed with test programs): 4][ T801] usb 5-1: Manufacturer: syz [ 3086.526593][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3086.538767][ T801] usb 5-1: SerialNumber: syz [ 3086.570510][ T801] usb 5-1: config 0 descriptor?? [ 3086.585265][ T8724] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3086.594481][ T801] usb-storage 5-1:0.20: USB Mass Storage device detected [ 3086.610322][ T801] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 3086.636785][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 3086.646456][T16553] usb 6-1: Using ep0 maxpacket: 8 [ 3086.660696][T16553] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 3086.681215][T16553] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 3086.706059][T16553] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3086.734002][T16553] usb 6-1: config 0 descriptor?? [ 3086.766562][T17300] bond1: (slave bridge2): failed to get link speed/duplex [ 3086.795731][ T801] scsi host1: usb-storage 5-1:0.20 [ 3086.877664][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3087.000259][ T801] usb 5-1: USB disconnect, device number 38 [ 3087.676875][T23738] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 3087.856529][T23738] usb 3-1: config 0 has no interfaces? [ 3087.864391][T23738] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3087.881195][T23738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3087.923107][T23738] usb 3-1: Product: syz [ 3087.993967][T23738] usb 3-1: Manufacturer: syz [ 3088.043232][T23738] usb 3-1: SerialNumber: syz [ 3088.064002][ T8757] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8624'. [ 3088.079996][ T8757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8624'. [ 3088.094515][ T8757] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8624'. [ 3088.098284][T23738] usb 3-1: config 0 descriptor?? [ 3088.145974][ T8757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8624'. [ 3088.962918][T23738] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 3089.050206][T16553] usbhid 6-1:0.0: can't add hid device: -71 [ 3089.060976][T16553] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 3089.158605][T16553] usb 6-1: USB disconnect, device number 89 [ 3089.338093][ T30] audit: type=1326 audit(1751645152.846:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.0.8629" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f225fb8e929 code=0x0 [ 3089.489209][T23738] usb 5-1: config 0 has no interfaces? [ 3089.531351][T23738] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3089.544314][ T8778] FAULT_INJECTION: forcing a failure. [ 3089.544314][ T8778] name failslab, interval 1, probability 0, space 0, times 0 [ 3089.570689][ T8778] CPU: 0 UID: 0 PID: 8778 Comm: syz.5.8631 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 3089.570705][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3089.570712][ T8778] Call Trace: [ 3089.570718][ T8778] [ 3089.570723][ T8778] dump_stack_lvl+0x189/0x250 [ 3089.570741][ T8778] ? __pfx____ratelimit+0x10/0x10 [ 3089.570757][ T8778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3089.570768][ T8778] ? __pfx__printk+0x10/0x10 [ 3089.570784][ T8778] ? __pfx___might_resched+0x10/0x10 [ 3089.570796][ T8778] ? fs_reclaim_acquire+0x7d/0x100 [ 3089.570813][ T8778] should_fail_ex+0x414/0x560 [ 3089.570831][ T8778] should_failslab+0xa8/0x100 [ 3089.570845][ T8778] kmem_cache_alloc_noprof+0x73/0x3c0 [ 3089.570858][ T8778] ? ep_insert+0x272/0x1a00 [ 3089.570871][ T8778] ep_insert+0x272/0x1a00 [ 3089.570889][ T8778] ? do_epoll_ctl+0x3c9/0xe90 [ 3089.570900][ T8778] ? __pfx_ep_insert+0x10/0x10 [ 3089.570911][ T8778] ? __pfx___mutex_lock+0x10/0x10 [ 3089.570922][ T8778] ? rcu_is_watching+0x15/0xb0 [ 3089.570943][ T8778] do_epoll_ctl+0x7f4/0xe90 [ 3089.570959][ T8778] __x64_sys_epoll_ctl+0x163/0x1a0 [ 3089.570972][ T8778] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 3089.570983][ T8778] ? rcu_is_watching+0x15/0xb0 [ 3089.570996][ T8778] ? do_syscall_64+0xbe/0x3b0 [ 3089.571007][ T8778] do_syscall_64+0xfa/0x3b0 [ 3089.571016][ T8778] ? lockdep_hardirqs_on+0x9c/0x150 [ 3089.571030][ T8778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3089.571040][ T8778] ? clear_bhb_loop+0x60/0xb0 [ 3089.571051][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3089.571060][ T8778] RIP: 0033:0x7feceb58e929 [ 3089.571070][ T8778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3089.571079][ T8778] RSP: 002b:00007fecec3d3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 3089.571090][ T8778] RAX: ffffffffffffffda RBX: 00007feceb7b6080 RCX: 00007feceb58e929 [ 3089.571097][ T8778] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004 [ 3089.571103][ T8778] RBP: 00007fecec3d3090 R08: 0000000000000000 R09: 0000000000000000 [ 3089.571109][ T8778] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 3089.571115][ T8778] R13: 0000000000000000 R14: 00007feceb7b6080 R15: 00007feceb8dfa28 [ 3089.571130][ T8778] [ 3089.578055][T23738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3090.388463][ T801] usb 3-1: USB disconnect, device number 30 [ 3090.575019][T23738] usb 5-1: Product: syz [ 3090.591770][T23738] usb 5-1: Manufacturer: syz [ 3090.597183][ T49] net_ratelimit: 28 callbacks suppressed [ 3090.597202][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 3090.601919][T23738] usb 5-1: SerialNumber: syz [ 3090.635431][ T8788] FAULT_INJECTION: forcing a failure. [ 3090.635431][ T8788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3090.686091][ T8788] CPU: 1 UID: 0 PID: 8788 Comm: syz.0.8634 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 3090.686121][ T8788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3090.686131][ T8788] Call Trace: [ 3090.686139][ T8788] [ 3090.686146][ T8788] dump_stack_lvl+0x189/0x250 [ 3090.686170][ T8788] ? __pfx____ratelimit+0x10/0x10 [ 3090.686193][ T8788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3090.686213][ T8788] ? __pfx__printk+0x10/0x10 [ 3090.686241][ T8788] should_fail_ex+0x414/0x560 [ 3090.686269][ T8788] _copy_to_user+0x31/0xb0 [ 3090.686291][ T8788] simple_read_from_buffer+0xe1/0x170 [ 3090.686317][ T8788] proc_fail_nth_read+0x1df/0x250 [ 3090.686343][ T8788] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3090.686368][ T8788] ? rw_verify_area+0x258/0x650 [ 3090.686385][ T8788] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 3090.686406][ T8788] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3090.686427][ T8788] vfs_read+0x200/0x980 [ 3090.686452][ T8788] ? __pfx_vfs_read+0x10/0x10 [ 3090.686493][ T8788] ? __pfx_timespec64_add_safe+0x10/0x10 [ 3090.686521][ T8788] ksys_read+0x145/0x250 [ 3090.686542][ T8788] ? __pfx_ksys_read+0x10/0x10 [ 3090.686558][ T8788] ? rcu_is_watching+0x15/0xb0 [ 3090.686582][ T8788] ? do_syscall_64+0xbe/0x3b0 [ 3090.686602][ T8788] do_syscall_64+0xfa/0x3b0 [ 3090.686617][ T8788] ? lockdep_hardirqs_on+0x9c/0x150 [ 3090.686641][ T8788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3090.686657][ T8788] ? clear_bhb_loop+0x60/0xb0 [ 3090.686678][ T8788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3090.686694][ T8788] RIP: 0033:0x7f225fb8d33c [ 3090.686710][ T8788] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3090.686725][ T8788] RSP: 002b:00007f22609ba030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3090.686744][ T8788] RAX: ffffffffffffffda RBX: 00007f225fdb5fa0 RCX: 00007f225fb8d33c [ 3090.686757][ T8788] RDX: 000000000000000f RSI: 00007f22609ba0a0 RDI: 0000000000000004 [ 3090.686767][ T8788] RBP: 00007f22609ba090 R08: 0000000000000000 R09: 0000000000000000 [ 3090.686778][ T8788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3090.686789][ T8788] R13: 0000000000000000 R14: 00007f225fdb5fa0 R15: 00007f225fedfa28 [ 3090.686816][ T8788] [ 3090.706440][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3090.767682][T23738] usb 5-1: config 0 descriptor?? [ 3090.921347][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 3091.050551][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3091.084011][ T8804] FAULT_INJECTION: forcing a failure. [ 3091.084011][ T8804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3091.098327][ T8804] CPU: 0 UID: 0 PID: 8804 Comm: syz.0.8641 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 3091.098350][ T8804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3091.098358][ T8804] Call Trace: [ 3091.098363][ T8804] [ 3091.098367][ T8804] dump_stack_lvl+0x189/0x250 [ 3091.098384][ T8804] ? __pfx____ratelimit+0x10/0x10 [ 3091.098399][ T8804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3091.098423][ T8804] ? __pfx__printk+0x10/0x10 [ 3091.098437][ T8804] ? __might_fault+0xb0/0x130 [ 3091.098455][ T8804] should_fail_ex+0x414/0x560 [ 3091.098473][ T8804] _copy_from_iter+0x1db/0x16f0 [ 3091.098487][ T8804] ? __phys_addr+0xd3/0x180 [ 3091.098502][ T8804] ? __pfx__copy_from_iter+0x10/0x10 [ 3091.098512][ T8804] ? rcu_is_watching+0x15/0xb0 [ 3091.098523][ T8804] ? file_tty_write+0x2a8/0x990 [ 3091.098535][ T8804] ? file_tty_write+0x2e8/0x990 [ 3091.098549][ T8804] ? rcu_is_watching+0x15/0xb0 [ 3091.098560][ T8804] ? kfree+0x4d/0x440 [ 3091.098574][ T8804] file_tty_write+0x486/0x990 [ 3091.098589][ T8804] vfs_write+0x54b/0xa90 [ 3091.098604][ T8804] ? __pfx_tty_write+0x10/0x10 [ 3091.098615][ T8804] ? __pfx_vfs_write+0x10/0x10 [ 3091.098632][ T8804] ? __fget_files+0x2a/0x420 [ 3091.098650][ T8804] ksys_write+0x145/0x250 [ 3091.098662][ T8804] ? __pfx_ksys_write+0x10/0x10 [ 3091.098676][ T8804] ? do_syscall_64+0xbe/0x3b0 [ 3091.098688][ T8804] do_syscall_64+0xfa/0x3b0 [ 3091.098697][ T8804] ? lockdep_hardirqs_on+0x9c/0x150 [ 3091.098711][ T8804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3091.098721][ T8804] ? clear_bhb_loop+0x60/0xb0 [ 3091.098732][ T8804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3091.098742][ T8804] RIP: 0033:0x7f225fb8e929 [ 3091.098752][ T8804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3091.098760][ T8804] RSP: 002b:00007f2260999038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3091.098772][ T8804] RAX: ffffffffffffffda RBX: 00007f225fdb6080 RCX: 00007f225fb8e929 [ 3091.098779][ T8804] RDX: 00000000fffffdef RSI: 0000200000001040 RDI: 0000000000000008 [ 3091.098785][ T8804] RBP: 00007f2260999090 R08: 0000000000000000 R09: 0000000000000000 [ 3091.098791][ T8804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3091.098797][ T8804] R13: 0000000000000000 R14: 00007f225fdb6080 R15: 00007f225fedfa28 [ 3091.098812][ T8804] [ 3091.099262][ T8804] netlink: 'syz.0.8641': attribute type 10 has an invalid length. [ 3091.265248][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3091.283889][ C0] vkms_vblank_simulate: vblank timer overrun [ 3091.356770][ T363] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 3091.364474][T16553] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 3091.375410][ T8804] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8641'. [ 3091.410924][ T8804] batman_adv: batadv0: Interface deactivated: dummy0 [ 3091.418323][ T8804] batman_adv: batadv0: Removing interface: dummy0 [ 3091.445168][ T8804] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 3091.527133][ T1121] bond1: (slave bridge2): failed to get link speed/duplex [ 3091.546692][ T363] usb 4-1: Using ep0 maxpacket: 32 [ 3091.554272][ T363] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3091.572169][ T363] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3091.582109][T16553] usb 3-1: Using ep0 maxpacket: 16 [ 3091.592671][T16553] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 3091.610068][T16553] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3091.621137][ T363] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3091.634748][T16553] usb 3-1: Product: syz [ 3091.641448][T16553] usb 3-1: Manufacturer: syz [ 3091.647406][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 3091.657990][ T363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3091.668725][T16553] usb 3-1: SerialNumber: syz [ 3091.691081][ T363] usb 4-1: config 0 descriptor?? [ 3091.706662][T16553] r8152-cfgselector 3-1: Unknown version 0x0000 [ 3091.726794][T16553] r8152-cfgselector 3-1: config 0 descriptor?? [ 3091.756978][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 3091.866413][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 3092.053534][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8643'. [ 3092.069828][ T8809] netlink: 'syz.0.8643': attribute type 1 has an invalid length. [ 3092.085898][ T8809] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8643'. [ 3092.306676][ T801] r8152-cfgselector 3-1: USB disconnect, device number 31 [ 3092.335315][ T363] savu 0003:1E7D:2D5A.007D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 3092.515625][ T363] usb 5-1: USB disconnect, device number 39 [ 3092.560989][ T801] usb 4-1: USB disconnect, device number 38 [ 3093.214659][ T8831] vivid-000: disconnect [ 3093.536208][ T363] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 3093.544238][ T8838] input: syz1 as /devices/virtual/input/input320 [ 3093.764708][ T363] usb 6-1: Using ep0 maxpacket: 32 [ 3093.767087][ T8819] vivid-000: reconnect [ 3093.786969][ T363] usb 6-1: no configurations [ 3093.791609][ T363] usb 6-1: can't read configurations, error -22 [ 3093.936294][ T801] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 3093.949389][ T363] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 3094.096573][ T801] usb 5-1: Using ep0 maxpacket: 16 [ 3094.106015][ T801] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3094.116601][ T363] usb 6-1: Using ep0 maxpacket: 32 [ 3094.117432][ T363] usb 6-1: no configurations [ 3094.117449][ T363] usb 6-1: can't read configurations, error -22 [ 3094.117826][ T363] usb usb6-port1: attempt power cycle [ 3094.156357][ T801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3094.205049][ T801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3094.275773][ T801] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3094.336208][ T801] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3094.378182][ T801] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3094.391648][ T801] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3094.400131][ T801] usb 5-1: Manufacturer: syz [ 3094.419733][ T801] usb 5-1: config 0 descriptor?? [ 3094.536693][ T363] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 3094.556346][T16553] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 3094.565862][ T363] usb 6-1: Using ep0 maxpacket: 32 [ 3094.572198][ T363] usb 6-1: no configurations [ 3094.577194][ T363] usb 6-1: can't read configurations, error -22 [ 3094.706449][ T363] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 3094.714365][T16553] usb 4-1: Using ep0 maxpacket: 16 [ 3094.716251][ T801] rc_core: IR keymap rc-hauppauge not found [ 3094.727460][T16553] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3094.735822][T18733] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 3094.738659][ T363] usb 6-1: Using ep0 maxpacket: 32 [ 3094.751823][ T801] Registered IR keymap rc-empty [ 3094.756478][T16553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3094.766323][ T801] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 3094.776073][T16553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3094.787019][ T363] usb 6-1: no configurations [ 3094.791697][ T363] usb 6-1: can't read configurations, error -22 [ 3094.796251][ T801] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 3094.806781][ T363] usb usb6-port1: unable to enumerate USB device [ 3094.815605][T16553] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3094.827381][ T801] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3094.835206][T16553] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3094.859372][ T801] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input321 [ 3094.863936][T16553] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3094.885120][ T801] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 3094.889831][T16553] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3094.905384][T16553] usb 4-1: Manufacturer: syz [ 3094.927886][T16553] usb 4-1: config 0 descriptor?? [ 3094.958320][T18733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3094.969628][ T801] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 3094.977177][T18733] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 3095.006365][T18733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 3095.017386][ T801] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 3095.028426][T18733] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3095.046278][ T801] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 3095.053650][T18733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3095.062070][T18733] usb 3-1: Product: syz [ 3095.066606][ T801] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 3095.073893][T18733] usb 3-1: Manufacturer: syz [ 3095.078887][T18733] usb 3-1: SerialNumber: syz [ 3095.097612][T18733] usb 3-1: config 0 descriptor?? [ 3095.102835][ T801] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 3095.117764][ T8847] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 3095.125198][ T8847] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 3095.134434][T18733] usb 3-1: ucan: probing device on interface #0 [ 3095.141531][ T801] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 3095.166958][ T801] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 3095.209196][ T801] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 3095.236611][ T801] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 3095.246409][T16553] rc_core: IR keymap rc-hauppauge not found [ 3095.252562][T16553] Registered IR keymap rc-empty [ 3095.263207][T16553] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3095.278962][ T801] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 3095.286546][T16553] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3095.296214][ T801] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3095.307734][T16553] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 3095.331592][T16553] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input322 [ 3095.377162][T18733] usb 3-1: ucan: device protocol version 0 is not supported [ 3095.384564][T18733] usb 3-1: ucan: probe failed; try to update the device firmware [ 3095.396563][T16553] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3095.436883][T16553] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3095.456799][T16553] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3095.496514][T16553] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3095.562983][T16553] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3095.596620][T16553] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3095.636516][T16553] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3095.661523][T16553] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3095.676491][T17300] net_ratelimit: 30 callbacks suppressed [ 3095.676533][T17300] bond1: (slave bridge2): failed to get link speed/duplex [ 3095.706771][T16553] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3095.726341][T16553] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3095.769921][T16553] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 3095.789569][T16553] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3095.837445][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 3095.969642][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 3096.097433][T17300] bond1: (slave bridge2): failed to get link speed/duplex [ 3096.216413][ T1121] bond1: (slave bridge2): failed to get link speed/duplex [ 3096.336546][T17300] bond1: (slave bridge2): failed to get link speed/duplex [ 3096.456763][ T1121] bond1: (slave bridge2): failed to get link speed/duplex [ 3096.509952][ T801] usb 3-1: USB disconnect, device number 32 [ 3096.566698][T17300] bond1: (slave bridge2): failed to get link speed/duplex [ 3096.680072][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 3096.806666][ T1121] bond1: (slave bridge2): failed to get link speed/duplex [ 3097.266388][ T801] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 3097.463067][ T801] usb 3-1: config 0 has no interfaces? [ 3097.477526][ T801] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3097.487685][ T801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3097.495965][ T801] usb 3-1: Product: syz [ 3097.501288][ T801] usb 3-1: Manufacturer: syz [ 3097.557481][ T801] usb 3-1: SerialNumber: syz [ 3097.590264][ T801] usb 3-1: config 0 descriptor?? [ 3097.604911][T16553] usb 5-1: USB disconnect, device number 40 [ 3097.726399][ T363] usb 4-1: USB disconnect, device number 39 [ 3098.479870][ T8897] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8669'. [ 3099.646865][ T846] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 3099.947000][ T846] usb 6-1: Using ep0 maxpacket: 32 [ 3100.010091][T18733] usb 3-1: USB disconnect, device number 33 [ 3100.036328][ T846] usb 6-1: no configurations [ 3100.041018][ T846] usb 6-1: can't read configurations, error -22 [ 3100.208136][ T846] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 3100.426315][ T846] usb 6-1: Using ep0 maxpacket: 32 [ 3100.506294][ T846] usb 6-1: no configurations [ 3100.510946][ T846] usb 6-1: can't read configurations, error -22 [ 3100.531263][ T846] usb usb6-port1: attempt power cycle [ 3100.604850][ T8924] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3100.748016][ T2857] net_ratelimit: 31 callbacks suppressed [ 3100.748084][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3100.785609][ T8926] netlink: 'syz.2.8675': attribute type 21 has an invalid length. [ 3100.793806][ T8926] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8675'. [ 3100.806273][ T363] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 3100.814054][ T8926] netlink: 'syz.2.8675': attribute type 4 has an invalid length. [ 3100.822226][ T8926] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8675'. [ 3100.890016][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 3100.966549][ T846] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 3101.006333][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3101.016933][ T363] usb 4-1: Using ep0 maxpacket: 16 [ 3101.034114][ T363] usb 4-1: config 0 has an invalid interface number: 63 but max is 0 [ 3101.046946][ T846] usb 6-1: Using ep0 maxpacket: 32 [ 3101.061502][ T363] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3101.076506][ T846] usb 6-1: no configurations [ 3101.081187][ T846] usb 6-1: can't read configurations, error -22 [ 3101.112013][ T363] usb 4-1: config 0 has no interface number 0 [ 3101.118334][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3101.131840][ T8928] syzkaller0: entered promiscuous mode [ 3101.141030][ T363] usb 4-1: config 0 interface 63 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 3101.151702][ T8928] syzkaller0: entered allmulticast mode [ 3101.170515][ T363] usb 4-1: config 0 interface 63 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3101.210926][ T363] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice=41.e6 [ 3101.220600][ T363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3101.236283][ T846] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 3101.258055][ T363] usb 4-1: config 0 descriptor?? [ 3101.266822][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 3101.307052][ T846] usb 6-1: Using ep0 maxpacket: 32 [ 3101.315977][ T846] usb 6-1: no configurations [ 3101.331054][ T846] usb 6-1: can't read configurations, error -22 [ 3101.347329][ T846] usb usb6-port1: unable to enumerate USB device [ 3101.419224][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 3101.523654][ T8923] netlink: 16620 bytes leftover after parsing attributes in process `syz.3.8676'. [ 3101.559637][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3101.676539][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 3101.716746][ T363] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 3101.796718][ T846] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 3101.804864][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3101.878141][ T363] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3101.891161][ T363] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3101.952909][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 3101.962747][ T363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3101.979867][ T363] usb 1-1: config 0 descriptor?? [ 3101.986382][ T846] usb 5-1: Using ep0 maxpacket: 32 [ 3102.004004][ T363] pwc: Askey VC010 type 2 USB webcam detected. [ 3102.004201][ T846] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3102.083954][T16553] usb 4-1: USB disconnect, device number 40 [ 3102.151219][ T846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3102.180792][ T846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 3102.209948][ T846] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 3102.247424][ T846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 3102.282282][ T846] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 3102.330641][ T846] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 3102.343875][ T846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 3102.359558][ T846] usb 5-1: Product: syz [ 3102.373295][ T846] usb 5-1: Manufacturer: syz [ 3102.380723][ T846] usb 5-1: SerialNumber: syz [ 3102.398502][ T846] usb 5-1: config 0 descriptor?? [ 3102.429099][ T846] usb 5-1: no audio or video endpoints found [ 3102.438824][ T363] pwc: recv_control_msg error -32 req 02 val 2b00 [ 3102.477212][ T363] pwc: recv_control_msg error -32 req 02 val 2700 [ 3102.501042][ T363] pwc: recv_control_msg error -32 req 02 val 2c00 [ 3102.537901][ T363] pwc: recv_control_msg error -32 req 04 val 1000 [ 3102.554862][ T363] pwc: recv_control_msg error -32 req 04 val 1300 [ 3102.565969][ T363] pwc: recv_control_msg error -32 req 04 val 1400 [ 3102.580826][ T363] pwc: recv_control_msg error -32 req 02 val 2000 [ 3102.591375][ T363] pwc: recv_control_msg error -32 req 02 val 2100 [ 3102.609698][ T363] pwc: recv_control_msg error -32 req 04 val 1500 [ 3102.622935][ T363] pwc: recv_control_msg error -32 req 02 val 2500 [ 3102.624791][ T846] usb 5-1: USB disconnect, device number 41 [ 3102.633687][ T363] pwc: recv_control_msg error -32 req 02 val 2400 [ 3102.658419][ T363] pwc: recv_control_msg error -32 req 02 val 2600 [ 3102.671049][ T363] pwc: recv_control_msg error -32 req 02 val 2900 [ 3102.708750][ T363] pwc: recv_control_msg error -32 req 02 val 2800 [ 3102.728729][ T363] pwc: recv_control_msg error -32 req 04 val 1100 [ 3102.744695][ T363] pwc: Registered as video103. [ 3102.760990][ T363] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input323 [ 3103.208101][ T8955] vivid-000: disconnect [ 3103.626212][ T846] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 3103.666739][ T8947] vivid-000: reconnect [ 3103.872855][ T846] usb 3-1: config 4 has an invalid interface number: 38 but max is 2 [ 3103.891767][ T846] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 3103.912659][ T846] usb 3-1: config 4 has an invalid interface number: 174 but max is 2 [ 3103.925307][ T846] usb 3-1: config 4 has no interface number 0 [ 3103.945636][ T846] usb 3-1: config 4 has no interface number 1 [ 3103.946035][ T363] usb 1-1: USB disconnect, device number 32 [ 3103.966864][ T846] usb 3-1: config 4 interface 38 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 3104.068284][ T846] usb 3-1: config 4 interface 38 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 3104.091151][ T846] usb 3-1: config 4 interface 38 altsetting 4 endpoint 0x8 has invalid maxpacket 903, setting to 64 [ 3104.116525][T18733] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 3104.212065][ T846] usb 3-1: config 4 interface 38 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 3104.241161][ T846] usb 3-1: config 4 interface 174 altsetting 10 has an endpoint descriptor with address 0x18, changing to 0x8 [ 3104.277434][ T846] usb 3-1: config 4 interface 174 altsetting 10 has a duplicate endpoint with address 0x8, skipping [ 3104.288724][ T30] audit: type=1326 audit(1751645167.786:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.5.8692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feceb58e929 code=0x7ffc0000 [ 3104.311799][ T846] usb 3-1: config 4 interface 174 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 3104.323095][ T846] usb 3-1: config 4 interface 38 has no altsetting 0 [ 3104.330319][ T30] audit: type=1326 audit(1751645167.786:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.5.8692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feceb58e929 code=0x7ffc0000 [ 3104.352571][ C0] vkms_vblank_simulate: vblank timer overrun [ 3104.366212][ T846] usb 3-1: config 4 interface 2 has no altsetting 0 [ 3104.450343][ T363] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 3104.727999][T18733] usb 5-1: config 0 has no interfaces? [ 3104.733669][ T846] usb 3-1: config 4 interface 174 has no altsetting 0 [ 3104.747996][T18733] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3104.765276][ T846] usb 3-1: New USB device found, idVendor=1b3d, idProduct=017a, bcdDevice=b4.da [ 3104.775918][T18733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3104.798460][ T363] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3104.805575][ T846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3104.809439][ T363] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3104.817321][T18733] usb 5-1: Product: syz [ 3104.831912][ T30] audit: type=1326 audit(1751645167.786:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.5.8692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feceb58e929 code=0x7ffc0000 [ 3104.854656][ T846] usb 3-1: Product: syz [ 3104.859129][ T846] usb 3-1: Manufacturer: 䀁 [ 3104.863797][T18733] usb 5-1: Manufacturer: syz [ 3104.874688][ T8974] vivid-000: disconnect [ 3105.158319][ T8959] vivid-000: reconnect [ 3105.176277][T18733] usb 5-1: SerialNumber: syz [ 3105.186236][ T846] usb 3-1: SerialNumber: syz [ 3105.194255][ T30] audit: type=1326 audit(1751645167.786:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.5.8692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7feceb58e929 code=0x7ffc0000 [ 3105.216530][ C0] vkms_vblank_simulate: vblank timer overrun [ 3105.223340][T18733] usb 5-1: config 0 descriptor?? [ 3105.239086][ T30] audit: type=1326 audit(1751645167.786:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.5.8692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feceb58e929 code=0x7ffc0000 [ 3105.266066][ T30] audit: type=1326 audit(1751645167.786:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.5.8692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7feceb58e929 code=0x7ffc0000 [ 3105.303324][ T363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3105.364984][ T363] usb 1-1: config 0 descriptor?? [ 3105.394887][ T363] pwc: Askey VC010 type 2 USB webcam detected. [ 3105.483202][ T30] audit: type=1326 audit(1751645167.786:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.5.8692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feceb58e929 code=0x7ffc0000 [ 3105.612086][ T846] ftdi_sio 3-1:4.38: FTDI USB Serial Device converter detected [ 3105.623718][ T846] ftdi_sio ttyUSB0: unknown device type: 0xb4da [ 3105.633641][ T30] audit: type=1326 audit(1751645167.786:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.5.8692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7feceb58e929 code=0x7ffc0000 [ 3105.700258][ T846] ftdi_sio 3-1:4.2: FTDI USB Serial Device converter detected [ 3105.707045][ T8977] netlink: 316 bytes leftover after parsing attributes in process `syz.3.8693'. [ 3105.720521][ T846] ftdi_sio ttyUSB1: unknown device type: 0xb4da [ 3105.776277][ T30] audit: type=1326 audit(1751645167.786:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.5.8692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feceb58e929 code=0x7ffc0000 [ 3105.798748][ C0] vkms_vblank_simulate: vblank timer overrun [ 3105.816643][ T1121] net_ratelimit: 21 callbacks suppressed [ 3105.816663][ T1121] bond1: (slave bridge2): failed to get link speed/duplex [ 3105.823484][ T846] ftdi_sio 3-1:4.174: FTDI USB Serial Device converter detected [ 3105.879082][ T846] ftdi_sio ttyUSB2: unknown device type: 0xb4da [ 3105.912360][ T30] audit: type=1326 audit(1751645167.786:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.5.8692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feceb58e929 code=0x7ffc0000 [ 3105.934657][ C0] vkms_vblank_simulate: vblank timer overrun [ 3105.944288][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3105.946396][ T846] usb 3-1: USB disconnect, device number 34 [ 3105.977521][ T846] ftdi_sio 3-1:4.38: device disconnected [ 3105.997904][ T846] ftdi_sio 3-1:4.2: device disconnected [ 3106.009709][ T363] pwc: recv_control_msg error -32 req 02 val 2700 [ 3106.027642][ T846] ftdi_sio 3-1:4.174: device disconnected [ 3106.029740][ T363] pwc: recv_control_msg error -32 req 02 val 2c00 [ 3106.099819][ T1121] bond1: (slave bridge2): failed to get link speed/duplex [ 3106.142914][ T363] pwc: recv_control_msg error -71 req 04 val 1000 [ 3106.149963][T23738] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 3106.199242][ T363] pwc: recv_control_msg error -71 req 04 val 1300 [ 3106.223534][ T363] pwc: recv_control_msg error -71 req 04 val 1400 [ 3106.243716][ T363] pwc: recv_control_msg error -71 req 02 val 2000 [ 3106.256375][T17300] bond1: (slave bridge2): failed to get link speed/duplex [ 3106.295264][ T363] pwc: recv_control_msg error -71 req 02 val 2100 [ 3106.295875][ T8983] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8695'. [ 3106.318892][ T8983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8695'. [ 3106.333520][ T8983] FAULT_INJECTION: forcing a failure. [ 3106.333520][ T8983] name failslab, interval 1, probability 0, space 0, times 0 [ 3106.351665][ T8983] CPU: 0 UID: 0 PID: 8983 Comm: syz.2.8695 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 3106.351692][ T8983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3106.351703][ T8983] Call Trace: [ 3106.351711][ T8983] [ 3106.351720][ T8983] dump_stack_lvl+0x189/0x250 [ 3106.351745][ T8983] ? __pfx____ratelimit+0x10/0x10 [ 3106.351771][ T8983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3106.351791][ T8983] ? __pfx__printk+0x10/0x10 [ 3106.351821][ T8983] ? ref_tracker_alloc+0x318/0x460 [ 3106.351842][ T8983] should_fail_ex+0x414/0x560 [ 3106.351871][ T8983] should_failslab+0xa8/0x100 [ 3106.351895][ T8983] kmem_cache_alloc_noprof+0x73/0x3c0 [ 3106.351915][ T8983] ? skb_clone+0x212/0x3a0 [ 3106.351940][ T8983] skb_clone+0x212/0x3a0 [ 3106.351963][ T8983] __netlink_deliver_tap+0x404/0x850 [ 3106.351993][ T8983] ? netlink_deliver_tap+0x2e/0x1b0 [ 3106.352011][ T8983] netlink_deliver_tap+0x19c/0x1b0 [ 3106.352032][ T8983] netlink_unicast+0x72f/0x8d0 [ 3106.352062][ T8983] netlink_sendmsg+0x805/0xb30 [ 3106.352092][ T8983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3106.352117][ T8983] ? aa_sock_msg_perm+0x94/0x160 [ 3106.352142][ T8983] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3106.352159][ T8983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3106.352181][ T8983] __sock_sendmsg+0x219/0x270 [ 3106.352203][ T8983] ____sys_sendmsg+0x52d/0x830 [ 3106.352231][ T8983] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3106.352262][ T8983] ? import_iovec+0x74/0xa0 [ 3106.352286][ T8983] ___sys_sendmsg+0x21f/0x2a0 [ 3106.352310][ T8983] ? __pfx____sys_sendmsg+0x10/0x10 [ 3106.352365][ T8983] ? __fget_files+0x2a/0x420 [ 3106.352386][ T8983] ? __fget_files+0x3a0/0x420 [ 3106.352423][ T8983] __sys_sendmmsg+0x227/0x430 [ 3106.352451][ T8983] ? __pfx___sys_sendmmsg+0x10/0x10 [ 3106.352471][ T8983] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 3106.352516][ T8983] ? ksys_write+0x22a/0x250 [ 3106.352539][ T8983] ? __pfx_ksys_write+0x10/0x10 [ 3106.352556][ T8983] ? rcu_is_watching+0x15/0xb0 [ 3106.352583][ T8983] __x64_sys_sendmmsg+0xa0/0xc0 [ 3106.352613][ T8983] do_syscall_64+0xfa/0x3b0 [ 3106.352629][ T8983] ? lockdep_hardirqs_on+0x9c/0x150 [ 3106.352652][ T8983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3106.352669][ T8983] ? clear_bhb_loop+0x60/0xb0 [ 3106.352690][ T8983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3106.352706][ T8983] RIP: 0033:0x7ff46d38e929 [ 3106.352727][ T8983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3106.352743][ T8983] RSP: 002b:00007ff46e212038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3106.352768][ T8983] RAX: ffffffffffffffda RBX: 00007ff46d5b5fa0 RCX: 00007ff46d38e929 [ 3106.352780][ T8983] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 3106.352792][ T8983] RBP: 00007ff46e212090 R08: 0000000000000000 R09: 0000000000000000 [ 3106.352803][ T8983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3106.352814][ T8983] R13: 0000000000000000 R14: 00007ff46d5b5fa0 R15: 00007ff46d6dfa28 [ 3106.352842][ T8983] [ 3106.353181][ T8983] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8695'. [ 3106.356290][T23738] usb 4-1: Using ep0 maxpacket: 32 [ 3106.376408][ T8983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8695'. [ 3106.396772][ T363] pwc: recv_control_msg error -71 req 04 val 1500 [ 3106.397397][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 3106.462466][ T363] pwc: recv_control_msg error -71 req 02 val 2500 [ 3106.715738][T23738] usb 4-1: no configurations [ 3106.720761][T23738] usb 4-1: can't read configurations, error -22 [ 3106.732308][ T363] pwc: recv_control_msg error -71 req 02 val 2400 [ 3106.739884][ T363] pwc: recv_control_msg error -71 req 02 val 2600 [ 3106.756556][ T363] pwc: recv_control_msg error -71 req 02 val 2900 [ 3106.781419][ T363] pwc: recv_control_msg error -71 req 02 val 2800 [ 3106.788982][ T363] pwc: recv_control_msg error -71 req 04 val 1100 [ 3106.795835][ T363] pwc: recv_control_msg error -71 req 04 val 1200 [ 3106.814765][ T363] pwc: Registered as video103. [ 3106.856357][T23738] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 3106.883919][ T363] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input324 [ 3106.926277][ T846] usb 5-1: USB disconnect, device number 42 [ 3106.993278][ T363] usb 1-1: USB disconnect, device number 33 [ 3107.026209][T23738] usb 4-1: Using ep0 maxpacket: 32 [ 3107.041212][T23738] usb 4-1: no configurations [ 3107.061461][T23738] usb 4-1: can't read configurations, error -22 [ 3107.102432][T23738] usb usb4-port1: attempt power cycle [ 3107.116390][T17300] bond1: (slave bridge2): failed to get link speed/duplex [ 3107.226721][ T1121] bond1: (slave bridge2): failed to get link speed/duplex [ 3107.366385][T17300] bond1: (slave bridge2): failed to get link speed/duplex [ 3107.496286][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3107.496323][T23738] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 3107.647246][ T1121] bond1: (slave bridge2): failed to get link speed/duplex [ 3107.657289][T23738] usb 4-1: Using ep0 maxpacket: 32 [ 3107.666726][T23738] usb 4-1: no configurations [ 3107.671415][T23738] usb 4-1: can't read configurations, error -22 [ 3107.846249][T23738] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 3107.875145][T23738] usb 4-1: Using ep0 maxpacket: 32 [ 3107.881431][T23738] usb 4-1: no configurations [ 3107.896294][T23738] usb 4-1: can't read configurations, error -22 [ 3107.941933][T23738] usb usb4-port1: unable to enumerate USB device [ 3108.034024][ T9010] vivid-000: disconnect [ 3108.263767][ T8995] vivid-000: reconnect [ 3108.566239][T23738] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 3108.729189][T23738] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3108.739975][T23738] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3108.741633][ T9024] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8709'. [ 3108.757841][T23738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3108.758711][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8709'. [ 3108.779430][T23738] usb 1-1: config 0 descriptor?? [ 3108.797004][T23738] pwc: Askey VC010 type 2 USB webcam detected. [ 3108.825265][ T9026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8709'. [ 3108.840959][ T9026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8709'. [ 3109.166405][ T9041] fuse: Unknown parameter '0x0000000000000003' [ 3109.296575][ T846] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 3109.336233][ T801] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 3109.392986][T23738] pwc: recv_control_msg error -32 req 02 val 2700 [ 3109.396661][ T9043] vivid-000: disconnect [ 3109.414290][T23738] pwc: recv_control_msg error -32 req 02 val 2c00 [ 3109.422462][T23738] pwc: recv_control_msg error -71 req 04 val 1000 [ 3109.446276][ T846] usb 4-1: Using ep0 maxpacket: 32 [ 3109.454832][T23738] pwc: recv_control_msg error -71 req 04 val 1300 [ 3109.457130][ T846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3109.464383][T23738] pwc: recv_control_msg error -71 req 04 val 1400 [ 3109.484305][T23738] pwc: recv_control_msg error -71 req 02 val 2000 [ 3109.519499][ T846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3109.526228][T23738] pwc: recv_control_msg error -71 req 02 val 2100 [ 3109.531039][ T801] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 3109.537002][T23738] pwc: recv_control_msg error -71 req 04 val 1500 [ 3109.547005][ T801] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 3109.562097][T23738] pwc: recv_control_msg error -71 req 02 val 2500 [ 3109.576888][ T846] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3109.584897][T23738] pwc: recv_control_msg error -71 req 02 val 2400 [ 3109.586072][ T846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3109.601399][ T801] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3109.612610][T23738] pwc: recv_control_msg error -71 req 02 val 2600 [ 3109.620599][ T801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3109.629495][T23738] pwc: recv_control_msg error -71 req 02 val 2900 [ 3109.639026][T23738] pwc: recv_control_msg error -71 req 02 val 2800 [ 3109.646629][ T846] usb 4-1: config 0 descriptor?? [ 3109.659317][T23738] pwc: recv_control_msg error -71 req 04 val 1100 [ 3109.659428][ T801] usb 3-1: config 0 descriptor?? [ 3109.673881][T23738] pwc: recv_control_msg error -71 req 04 val 1200 [ 3109.699668][T23738] pwc: Registered as video103. [ 3109.721462][T23738] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input325 [ 3109.744833][ T801] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 3109.766775][T23738] usb 1-1: USB disconnect, device number 34 [ 3109.952732][ T9035] vivid-000: reconnect [ 3110.233912][ T846] savu 0003:1E7D:2D5A.007E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 3110.346251][ T363] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 3110.506371][ T9057] vivid-000: disconnect [ 3110.554272][T23738] usb 4-1: USB disconnect, device number 45 [ 3110.589795][ T363] usb 1-1: config 17 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3110.602061][ T363] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 3110.769364][ T363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3110.800858][ T363] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 3110.854564][ T9046] vivid-000: reconnect [ 3110.859593][ T49] net_ratelimit: 25 callbacks suppressed [ 3110.859609][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 3111.012531][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 3111.167024][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 3111.277137][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3111.396266][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 3111.506515][ T1121] bond1: (slave bridge2): failed to get link speed/duplex [ 3111.636268][ T1121] bond1: (slave bridge2): failed to get link speed/duplex [ 3111.766554][ T1121] bond1: (slave bridge2): failed to get link speed/duplex [ 3111.925305][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 3112.046727][ T1121] bond1: (slave bridge2): failed to get link speed/duplex [ 3112.116066][T16553] usb 3-1: USB disconnect, device number 35 [ 3112.274153][T27260] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 3112.296297][ T363] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 3112.443028][ T363] usb 4-1: device descriptor read/64, error -71 [ 3112.449910][T27260] usb 6-1: Using ep0 maxpacket: 16 [ 3112.457860][T27260] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3112.729740][T27260] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3112.743506][T27260] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3112.760802][T27260] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 3112.773674][T27260] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3112.788527][T27260] usb 6-1: config 0 descriptor?? [ 3112.806282][ T363] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 3112.806282][ T846] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 3112.936297][ T363] usb 4-1: device descriptor read/64, error -71 [ 3113.046713][ T846] usb 3-1: Using ep0 maxpacket: 8 [ 3113.056492][ T363] usb usb4-port1: attempt power cycle [ 3113.101607][ T846] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 3113.120320][T16553] usb 1-1: USB disconnect, device number 35 [ 3113.177072][ T846] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 3113.199338][ T846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3113.225179][ T9088] fuse: Unknown parameter '0x0000000000000003' [ 3113.257367][ T846] usb 3-1: config 0 descriptor?? [ 3113.416232][ T363] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 3113.437121][ T363] usb 4-1: device descriptor read/8, error -71 [ 3113.736531][T27260] usbhid 6-1:0.0: can't add hid device: -71 [ 3113.742640][ T363] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 3113.756381][T27260] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 3113.780244][T27260] usb 6-1: USB disconnect, device number 98 [ 3113.788566][ T363] usb 4-1: device descriptor read/8, error -71 [ 3113.900466][ T363] usb usb4-port1: unable to enumerate USB device [ 3114.339793][ T9097] vivid-000: disconnect [ 3114.663595][ T9091] vivid-000: reconnect [ 3115.481410][ T9113] netlink: 'syz.5.8737': attribute type 2 has an invalid length. [ 3115.616422][ T801] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 3115.641425][T27260] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 3115.705375][ T9119] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8738'. [ 3115.727306][ T9120] vivid-000: disconnect [ 3115.880091][ T9119] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8738'. [ 3115.906936][ T801] usb 5-1: Using ep0 maxpacket: 32 [ 3115.914450][ T801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3115.929770][ T2857] net_ratelimit: 31 callbacks suppressed [ 3115.929789][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3115.936490][T27260] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3115.973342][ T801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3115.975177][T27260] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3116.006358][ T801] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3116.033552][ T9105] vivid-000: reconnect [ 3116.036182][ T801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3116.054163][ T846] usbhid 3-1:0.0: can't add hid device: -71 [ 3116.062533][T27260] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3116.086667][T27260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3116.096643][ T801] usb 5-1: config 0 descriptor?? [ 3116.106216][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3116.113688][ T846] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3116.136042][ T9108] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3116.166093][T27260] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 3116.178281][ T846] usb 3-1: USB disconnect, device number 36 [ 3116.266958][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3116.437510][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 3116.606592][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3116.697556][ T801] savu 0003:1E7D:2D5A.007F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 3116.742909][T27260] usb 4-1: USB disconnect, device number 50 [ 3116.756329][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3116.840455][ T801] usb 5-1: USB disconnect, device number 43 [ 3116.866296][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 3116.996724][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 3117.009744][ T9134] fuse: Unknown parameter '0x0000000000000003' [ 3117.078308][ T9131] fido_id[9131]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 3117.110410][T18733] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 3117.136471][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3117.266922][T18733] usb 6-1: device descriptor read/64, error -71 [ 3117.273355][T17300] bond1: (slave bridge2): failed to get link speed/duplex [ 3117.496055][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8748'. [ 3117.507722][T18733] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 3117.646625][T18733] usb 6-1: device descriptor read/64, error -71 [ 3117.766620][ T9159] netlink: 'syz.0.8752': attribute type 1 has an invalid length. [ 3117.766896][T18733] usb usb6-port1: attempt power cycle [ 3118.139518][T18733] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 3118.183035][T18733] usb 6-1: device descriptor read/8, error -71 [ 3118.223622][ T9172] vivid-000: disconnect [ 3118.386224][ T801] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 3118.496576][T18733] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 3118.527307][T18733] usb 6-1: device descriptor read/8, error -71 [ 3118.634601][ T9158] vivid-000: reconnect [ 3118.653206][T18733] usb usb6-port1: unable to enumerate USB device [ 3118.729350][ T801] usb 4-1: config 0 has no interfaces? [ 3118.750535][ T801] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3118.764726][ T801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3118.804029][ T801] usb 4-1: Product: syz [ 3118.818848][ T801] usb 4-1: Manufacturer: syz [ 3118.823545][ T801] usb 4-1: SerialNumber: syz [ 3118.841214][ T9180] kvm: pic: non byte write [ 3118.873831][ T801] usb 4-1: config 0 descriptor?? [ 3119.105534][ T9170] program syz.3.8754 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3119.144653][ T9170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3119.164198][ T9170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3119.300312][ T9187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3119.300715][ T9187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3119.541390][ T9189] pimreg3: entered allmulticast mode [ 3119.645958][ T9191] fuse: Unknown parameter '0x0000000000000003' [ 3119.926403][T27260] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 3120.069187][T27260] usb 1-1: device descriptor read/64, error -71 [ 3120.186257][ T801] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 3120.317253][T27260] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 3120.462826][T27260] usb 1-1: device descriptor read/64, error -71 [ 3120.490132][ T801] usb 3-1: config 0 has no interfaces? [ 3120.496639][ T363] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 3120.578128][T27260] usb usb1-port1: attempt power cycle [ 3120.660148][ T801] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3120.679173][ T801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3120.680795][ T363] usb 6-1: Using ep0 maxpacket: 32 [ 3120.710948][ T801] usb 3-1: Product: syz [ 3120.721252][ T801] usb 3-1: Manufacturer: syz [ 3120.732598][ T801] usb 3-1: SerialNumber: syz [ 3120.737700][ T363] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3120.750491][ T363] usb 6-1: config 128 has an invalid interface number: 6 but max is 2 [ 3120.756855][ T801] usb 3-1: config 0 descriptor?? [ 3120.793522][ T363] usb 6-1: config 128 has an invalid interface number: 8 but max is 2 [ 3120.821557][ T363] usb 6-1: config 128 has an invalid interface number: 92 but max is 2 [ 3120.904436][ T363] usb 6-1: config 128 has no interface number 0 [ 3120.925229][ T363] usb 6-1: config 128 has no interface number 1 [ 3120.937844][ T363] usb 6-1: config 128 has no interface number 2 [ 3120.951019][ T363] usb 6-1: config 128 interface 6 has no altsetting 0 [ 3120.972606][ T363] usb 6-1: config 128 interface 8 has no altsetting 0 [ 3120.992128][ T363] usb 6-1: config 128 interface 92 has no altsetting 0 [ 3121.034389][T17300] net_ratelimit: 30 callbacks suppressed [ 3121.034409][T17300] bond1: (slave bridge2): failed to get link speed/duplex [ 3121.052429][T27260] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 3121.086884][ T363] usb 6-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=8c.42 [ 3121.097056][ T363] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3121.105294][T27260] usb 1-1: device descriptor read/8, error -71 [ 3121.113209][ T363] usb 6-1: Product: syz [ 3121.128315][ T363] usb 6-1: Manufacturer: syz [ 3121.133570][ T363] usb 6-1: SerialNumber: syz [ 3121.166577][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 3121.286469][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3121.356550][T27260] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 3121.368007][ T363] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 3121.387856][T27260] usb 1-1: device descriptor read/8, error -71 [ 3121.395269][ T363] usb 6-1: selecting invalid altsetting 0 [ 3121.420523][ T2347] pvrusb2: Invalid write control endpoint [ 3121.429490][ T363] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 3121.439804][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3121.467734][ T363] usb 6-1: selecting invalid altsetting 0 [ 3121.504785][ T363] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 3121.524309][T27260] usb usb1-port1: unable to enumerate USB device [ 3121.535221][ T2347] pvrusb2: Invalid write control endpoint [ 3121.547353][ T2347] pvrusb2: Invalid write control endpoint [ 3121.553544][ T2347] pvrusb2: Invalid write control endpoint [ 3121.560975][ T363] usb 6-1: selecting invalid altsetting 0 [ 3121.567748][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3121.600043][ T2347] pvrusb2: Invalid write control endpoint [ 3121.616586][ T2347] pvrusb2: Invalid write control endpoint [ 3121.627787][ T2347] pvrusb2: Invalid write control endpoint [ 3121.648941][ T363] usb 6-1: USB disconnect, device number 103 [ 3121.660237][ T2347] pvrusb2: Invalid write control endpoint [ 3121.679548][ T2347] pvrusb2: Invalid write control endpoint [ 3121.750764][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 3121.761737][ T2347] pvrusb2: Invalid write control endpoint [ 3121.776604][ T2347] pvrusb2: Invalid write control endpoint [ 3121.785204][ T2347] pvrusb2: Invalid write control endpoint [ 3121.799165][ T2347] pvrusb2: Invalid write control endpoint [ 3121.885596][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3121.916187][ T2347] pvrusb2: Invalid write control endpoint [ 3121.950350][ T2347] pvrusb2: Invalid write control endpoint [ 3121.951734][T27260] usb 4-1: USB disconnect, device number 51 [ 3121.976338][ T2347] pvrusb2: Invalid write control endpoint [ 3121.996561][T17300] bond1: (slave bridge2): failed to get link speed/duplex [ 3122.006986][ T2347] pvrusb2: Invalid write control endpoint [ 3122.080010][ T2347] pvrusb2: Invalid write control endpoint [ 3122.105610][ T2347] pvrusb2: Invalid write control endpoint [ 3122.111705][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3122.218131][T17300] bond1: (slave bridge2): failed to get link speed/duplex [ 3122.233669][ T2347] pvrusb2: Invalid write control endpoint [ 3122.252427][ T2347] pvrusb2: Invalid write control endpoint [ 3122.273715][ T2347] pvrusb2: Invalid write control endpoint [ 3122.295180][ T2347] pvrusb2: Invalid write control endpoint [ 3122.344992][ T2347] pvrusb2: Invalid write control endpoint [ 3122.360345][ T2347] pvrusb2: Invalid write control endpoint [ 3122.372686][ T2347] pvrusb2: Invalid write control endpoint [ 3122.383177][ T2347] pvrusb2: Invalid write control endpoint [ 3122.397193][ T2347] pvrusb2: Invalid write control endpoint [ 3122.416279][T27260] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 3122.418803][ T2347] pvrusb2: Invalid write control endpoint [ 3122.454757][ T2347] pvrusb2: Invalid write control endpoint [ 3122.463379][ T2347] pvrusb2: Invalid write control endpoint [ 3122.469595][ T2347] pvrusb2: Invalid write control endpoint [ 3122.475522][ T2347] pvrusb2: Invalid write control endpoint [ 3122.494928][ T2347] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 3122.584594][ T2347] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_c) [ 3122.586333][T27260] usb 4-1: Using ep0 maxpacket: 32 [ 3122.600557][T27260] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3122.626390][ T2347] pvrusb2: Invalid write control endpoint [ 3122.656952][ T2347] pvrusb2: Invalid write control endpoint [ 3122.662936][ T2347] pvrusb2: Invalid write control endpoint [ 3122.670173][ T2347] pvrusb2: Invalid write control endpoint [ 3122.676087][T27260] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3122.704059][ T2347] pvrusb2: Invalid write control endpoint [ 3122.715727][ T2347] pvrusb2: Invalid write control endpoint [ 3122.724717][T27260] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3122.740208][ T2347] pvrusb2: Invalid write control endpoint [ 3122.742916][T27260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3122.761041][ T2347] pvrusb2: Invalid write control endpoint [ 3122.762159][ T9217] FAULT_INJECTION: forcing a failure. [ 3122.762159][ T9217] name failslab, interval 1, probability 0, space 0, times 0 [ 3122.781053][ T2347] pvrusb2: Invalid write control endpoint [ 3122.781371][ T9217] CPU: 1 UID: 0 PID: 9217 Comm: syz.0.8768 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 3122.781393][ T9217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3122.781404][ T9217] Call Trace: [ 3122.781411][ T9217] [ 3122.781419][ T9217] dump_stack_lvl+0x189/0x250 [ 3122.781443][ T9217] ? __pfx____ratelimit+0x10/0x10 [ 3122.781468][ T9217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3122.781487][ T9217] ? __pfx__printk+0x10/0x10 [ 3122.781515][ T9217] ? __pfx___might_resched+0x10/0x10 [ 3122.781532][ T9217] ? fs_reclaim_acquire+0x7d/0x100 [ 3122.781558][ T9217] should_fail_ex+0x414/0x560 [ 3122.781586][ T9217] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 3122.781608][ T9217] should_failslab+0xa8/0x100 [ 3122.781630][ T9217] __kvmalloc_node_noprof+0x161/0x5f0 [ 3122.781650][ T9217] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 3122.781670][ T9217] ? alloc_netdev_mqs+0xc36/0x11e0 [ 3122.781696][ T9217] alloc_netdev_mqs+0xc9e/0x11e0 [ 3122.781725][ T9217] rtnl_create_link+0x31f/0xd10 [ 3122.781754][ T9217] rtnl_newlink_create+0x25c/0xb00 [ 3122.781780][ T9217] ? __pfx_aa_get_newest_label+0x10/0x10 [ 3122.781807][ T9217] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 3122.781824][ T9217] ? rtnl_newlink+0x8db/0x1c70 [ 3122.781844][ T9217] ? __pfx___mutex_lock+0x10/0x10 [ 3122.781871][ T9217] ? ns_capable+0x8a/0xf0 [ 3122.781893][ T9217] rtnl_newlink+0x16d6/0x1c70 [ 3122.781927][ T9217] ? __pfx_rtnl_newlink+0x10/0x10 [ 3122.781944][ T9217] ? is_bpf_text_address+0x26/0x2b0 [ 3122.781969][ T9217] ? __lock_acquire+0xab9/0xd20 [ 3122.781999][ T9217] ? __lock_acquire+0xab9/0xd20 [ 3122.782035][ T9217] ? is_bpf_text_address+0x26/0x2b0 [ 3122.782058][ T9217] ? is_bpf_text_address+0x292/0x2b0 [ 3122.782075][ T9217] ? is_bpf_text_address+0x26/0x2b0 [ 3122.782096][ T9217] ? kernel_text_address+0xa5/0xe0 [ 3122.782124][ T9217] ? __lock_acquire+0xab9/0xd20 [ 3122.782169][ T9217] ? __pfx_rtnl_newlink+0x10/0x10 [ 3122.782186][ T9217] rtnetlink_rcv_msg+0x7cc/0xb70 [ 3122.782208][ T9217] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 3122.782225][ T9217] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3122.782260][ T9217] netlink_rcv_skb+0x205/0x470 [ 3122.782281][ T9217] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3122.782301][ T9217] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3122.782333][ T9217] ? netlink_deliver_tap+0x2e/0x1b0 [ 3122.782352][ T9217] ? netlink_deliver_tap+0x2e/0x1b0 [ 3122.782383][ T9217] netlink_unicast+0x758/0x8d0 [ 3122.782412][ T9217] netlink_sendmsg+0x805/0xb30 [ 3122.782441][ T9217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3122.782464][ T9217] ? aa_sock_msg_perm+0x94/0x160 [ 3122.782487][ T9217] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3122.782503][ T9217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3122.782523][ T9217] __sock_sendmsg+0x219/0x270 [ 3122.782543][ T9217] ____sys_sendmsg+0x505/0x830 [ 3122.782569][ T9217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3122.782599][ T9217] ? import_iovec+0x74/0xa0 [ 3122.782621][ T9217] ___sys_sendmsg+0x21f/0x2a0 [ 3122.782643][ T9217] ? __pfx____sys_sendmsg+0x10/0x10 [ 3122.782703][ T9217] ? __fget_files+0x2a/0x420 [ 3122.782723][ T9217] ? __fget_files+0x3a0/0x420 [ 3122.782754][ T9217] __x64_sys_sendmsg+0x19b/0x260 [ 3122.782777][ T9217] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3122.782808][ T9217] ? __pfx_ksys_write+0x10/0x10 [ 3122.782824][ T9217] ? rcu_is_watching+0x15/0xb0 [ 3122.782848][ T9217] ? do_syscall_64+0xbe/0x3b0 [ 3122.782868][ T9217] do_syscall_64+0xfa/0x3b0 [ 3122.782883][ T9217] ? lockdep_hardirqs_on+0x9c/0x150 [ 3122.782905][ T9217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3122.782921][ T9217] ? clear_bhb_loop+0x60/0xb0 [ 3122.782941][ T9217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3122.782957][ T9217] RIP: 0033:0x7f225fb8e929 [ 3122.782972][ T9217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3122.782987][ T9217] RSP: 002b:00007f22609ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3122.783005][ T9217] RAX: ffffffffffffffda RBX: 00007f225fdb5fa0 RCX: 00007f225fb8e929 [ 3122.783018][ T9217] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 3122.783028][ T9217] RBP: 00007f22609ba090 R08: 0000000000000000 R09: 0000000000000000 [ 3122.783039][ T9217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3122.783049][ T9217] R13: 0000000000000000 R14: 00007f225fdb5fa0 R15: 00007f225fedfa28 [ 3122.783076][ T9217] [ 3122.835687][T27260] usb 4-1: config 0 descriptor?? [ 3123.005833][ T2347] pvrusb2: Invalid write control endpoint [ 3123.261768][ T2347] pvrusb2: Invalid write control endpoint [ 3123.268289][ T2347] pvrusb2: Invalid write control endpoint [ 3123.274549][ T2347] pvrusb2: Invalid write control endpoint [ 3123.281184][ T2347] pvrusb2: Invalid write control endpoint [ 3123.287394][ T2347] pvrusb2: Invalid write control endpoint [ 3123.293358][ T2347] pvrusb2: Invalid write control endpoint [ 3123.299541][ T2347] pvrusb2: Invalid write control endpoint [ 3123.305597][ T2347] pvrusb2: Invalid write control endpoint [ 3123.311783][ T2347] pvrusb2: Invalid write control endpoint [ 3123.318112][ T2347] pvrusb2: Invalid write control endpoint [ 3123.324051][ T2347] pvrusb2: Invalid write control endpoint [ 3123.331825][ T2347] pvrusb2: Attached sub-driver cs53l32a [ 3123.374660][ T2347] pvrusb2: Invalid write control endpoint [ 3123.382038][ T2347] pvrusb2: Invalid write control endpoint [ 3123.391710][ T2347] pvrusb2: Invalid write control endpoint [ 3123.399051][ T2347] pvrusb2: Invalid write control endpoint [ 3123.405096][ T2347] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 3123.422391][ T2347] pvrusb2: Device being rendered inoperable [ 3123.439799][ T2347] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 3123.459035][ T2347] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 3123.483561][ T846] usb 3-1: USB disconnect, device number 37 [ 3123.495331][ T2347] pvrusb2: Invalid write control endpoint [ 3123.516563][T18733] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 3123.610217][ T2347] pvrusb2: Invalid write control endpoint [ 3123.623812][ T2347] pvrusb2: Invalid write control endpoint [ 3123.646829][ T2347] pvrusb2: Invalid write control endpoint [ 3123.670681][ T2347] pvrusb2: Invalid write control endpoint [ 3123.680184][ T2347] pvrusb2: Invalid write control endpoint [ 3123.687032][ T2347] pvrusb2: Invalid write control endpoint [ 3123.693234][ T9224] FAULT_INJECTION: forcing a failure. [ 3123.693234][ T9224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3123.706772][ T2347] pvrusb2: Invalid write control endpoint [ 3123.712538][ T2347] pvrusb2: Invalid write control endpoint [ 3123.718663][ T2347] pvrusb2: Invalid write control endpoint [ 3123.724694][ T2347] pvrusb2: Invalid write control endpoint [ 3123.731244][ T2347] pvrusb2: Invalid write control endpoint [ 3123.738208][T18733] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 3123.752869][T18733] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3123.764149][ T2347] pvrusb2: Invalid write control endpoint [ 3123.770213][ T2347] pvrusb2: Invalid write control endpoint [ 3123.776198][ T9224] CPU: 0 UID: 0 PID: 9224 Comm: syz.2.8770 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 3123.776223][ T9224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3123.776234][ T9224] Call Trace: [ 3123.776241][ T9224] [ 3123.776248][ T9224] dump_stack_lvl+0x189/0x250 [ 3123.776278][ T9224] ? __pfx____ratelimit+0x10/0x10 [ 3123.776302][ T9224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3123.776322][ T9224] ? __pfx__printk+0x10/0x10 [ 3123.776344][ T9224] ? __might_fault+0xb0/0x130 [ 3123.776375][ T9224] should_fail_ex+0x414/0x560 [ 3123.776403][ T9224] _copy_from_user+0x2d/0xb0 [ 3123.776424][ T9224] ___sys_sendmsg+0x158/0x2a0 [ 3123.776448][ T9224] ? __pfx____sys_sendmsg+0x10/0x10 [ 3123.776500][ T9224] ? __fget_files+0x2a/0x420 [ 3123.776520][ T9224] ? __fget_files+0x3a0/0x420 [ 3123.776549][ T9224] __x64_sys_sendmsg+0x19b/0x260 [ 3123.776572][ T9224] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3123.776603][ T9224] ? __pfx_ksys_write+0x10/0x10 [ 3123.776626][ T9224] ? do_syscall_64+0xbe/0x3b0 [ 3123.776647][ T9224] do_syscall_64+0xfa/0x3b0 [ 3123.776662][ T9224] ? lockdep_hardirqs_on+0x9c/0x150 [ 3123.776684][ T9224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3123.776701][ T9224] ? clear_bhb_loop+0x60/0xb0 [ 3123.776721][ T9224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3123.776737][ T9224] RIP: 0033:0x7ff46d38e929 [ 3123.776752][ T9224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3123.776767][ T9224] RSP: 002b:00007ff46e212038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3123.776785][ T9224] RAX: ffffffffffffffda RBX: 00007ff46d5b5fa0 RCX: 00007ff46d38e929 [ 3123.776797][ T9224] RDX: 0000000000000090 RSI: 0000200000000100 RDI: 0000000000000003 [ 3123.776809][ T9224] RBP: 00007ff46e212090 R08: 0000000000000000 R09: 0000000000000000 [ 3123.776818][ T9224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3123.776828][ T9224] R13: 0000000000000000 R14: 00007ff46d5b5fa0 R15: 00007ff46d6dfa28 [ 3123.776855][ T9224] [ 3123.781496][T27260] savu 0003:1E7D:2D5A.0080: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 3123.786389][T18733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3124.006278][ T2347] pvrusb2: Invalid write control endpoint [ 3124.012068][ T2347] pvrusb2: Invalid write control endpoint [ 3124.021851][ T2347] pvrusb2: Invalid write control endpoint [ 3124.027717][ T2347] pvrusb2: Invalid write control endpoint [ 3124.033504][ T2347] pvrusb2: Invalid write control endpoint [ 3124.039335][ T2347] pvrusb2: Invalid write control endpoint [ 3124.045081][ T2347] pvrusb2: Invalid write control endpoint [ 3124.052745][ T2347] pvrusb2: Invalid write control endpoint [ 3124.059126][ T2347] pvrusb2: Invalid write control endpoint [ 3124.076211][ T2347] pvrusb2: Invalid write control endpoint [ 3124.082041][ T2347] pvrusb2: Invalid write control endpoint [ 3124.089421][ T2347] pvrusb2: Invalid write control endpoint [ 3124.089844][T27260] usb 4-1: USB disconnect, device number 52 [ 3124.095168][ T2347] pvrusb2: Invalid write control endpoint [ 3124.095186][ T2347] pvrusb2: Invalid write control endpoint [ 3124.095199][ T2347] pvrusb2: Invalid write control endpoint [ 3124.095211][ T2347] pvrusb2: Invalid write control endpoint [ 3124.095223][ T2347] pvrusb2: Invalid write control endpoint [ 3124.095242][ T2347] pvrusb2: Invalid write control endpoint [ 3124.122673][ T9225] fido_id[9225]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 3124.130903][ T2347] pvrusb2: Invalid write control endpoint [ 3124.172051][ T2347] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 3124.194841][T18733] usb 1-1: config 0 descriptor?? [ 3124.240555][T18733] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 3124.290931][ T2347] cs53l32a 3-0011: chip found @ 0x22 (pvrusb2_d) [ 3124.297973][ T2347] pvrusb2: Invalid write control endpoint [ 3124.305196][ T2347] pvrusb2: Invalid write control endpoint [ 3124.312029][ T2347] pvrusb2: Invalid write control endpoint [ 3124.408146][ T2347] pvrusb2: Invalid write control endpoint [ 3124.454290][ T2347] pvrusb2: Invalid write control endpoint [ 3124.483981][ T2347] pvrusb2: Invalid write control endpoint [ 3124.501728][ T2347] pvrusb2: Invalid write control endpoint [ 3124.511941][ T2347] pvrusb2: Invalid write control endpoint [ 3124.525928][ T2347] pvrusb2: Invalid write control endpoint [ 3124.535146][ T2347] pvrusb2: Invalid write control endpoint [ 3124.543729][ T2347] pvrusb2: Invalid write control endpoint [ 3124.552289][ T2347] pvrusb2: Invalid write control endpoint [ 3124.560719][ T2347] pvrusb2: Invalid write control endpoint [ 3124.569344][ T2347] pvrusb2: Invalid write control endpoint [ 3124.575228][ T2347] pvrusb2: Invalid write control endpoint [ 3124.584485][ T2347] pvrusb2: Invalid write control endpoint [ 3124.593683][ T2347] pvrusb2: Invalid write control endpoint [ 3124.602959][ T2347] pvrusb2: Invalid write control endpoint [ 3124.612511][ T2347] pvrusb2: Invalid write control endpoint [ 3124.621472][ T2347] pvrusb2: Invalid write control endpoint [ 3124.631573][ T2347] pvrusb2: Invalid write control endpoint [ 3124.641611][ T2347] pvrusb2: Attached sub-driver cs53l32a [ 3124.713130][ T2347] pvrusb2: Invalid write control endpoint [ 3124.721467][ T2347] pvrusb2: Invalid write control endpoint [ 3124.740941][ T2347] pvrusb2: Invalid write control endpoint [ 3124.748721][ T2347] pvrusb2: Invalid write control endpoint [ 3124.755404][ T2347] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 3124.772619][T18733] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 3124.783453][ T2347] pvrusb2: Device being rendered inoperable [ 3124.790690][ T2347] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 3124.804234][ T2347] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 3124.822351][ T2347] pvrusb2: Invalid write control endpoint [ 3124.876086][ T2347] pvrusb2: Invalid write control endpoint [ 3124.883188][ T2347] pvrusb2: Invalid write control endpoint [ 3124.889680][ T2347] pvrusb2: Invalid write control endpoint [ 3124.898958][ T2347] pvrusb2: Invalid write control endpoint [ 3124.905071][ T2347] pvrusb2: Invalid write control endpoint [ 3124.911211][ T2347] pvrusb2: Invalid write control endpoint [ 3124.917681][ T2347] pvrusb2: Invalid write control endpoint [ 3124.924682][ T2347] pvrusb2: Invalid write control endpoint [ 3124.931546][ T2347] pvrusb2: Invalid write control endpoint [ 3124.937598][ T2347] pvrusb2: Invalid write control endpoint [ 3124.943702][ T2347] pvrusb2: Invalid write control endpoint [ 3124.953695][T18733] usb 5-1: Using ep0 maxpacket: 32 [ 3124.960079][ T2347] pvrusb2: Invalid write control endpoint [ 3124.967616][T18733] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3124.979080][T18733] usb 5-1: config 0 has no interfaces? [ 3124.984757][ T2347] pvrusb2: Invalid write control endpoint [ 3124.991397][T18733] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 3125.000905][ T2347] pvrusb2: Invalid write control endpoint [ 3125.016225][ T2347] pvrusb2: Invalid write control endpoint [ 3125.025163][T18733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3125.035772][ T2347] pvrusb2: Invalid write control endpoint [ 3125.054537][ T2347] pvrusb2: Invalid write control endpoint [ 3125.064892][T18733] usb 5-1: config 0 descriptor?? [ 3125.078865][ T2347] pvrusb2: Invalid write control endpoint [ 3125.101514][ T2347] pvrusb2: Invalid write control endpoint [ 3125.117188][ T2347] pvrusb2: Invalid write control endpoint [ 3125.151838][ T2347] pvrusb2: Invalid write control endpoint [ 3125.166225][ T2347] pvrusb2: Invalid write control endpoint [ 3125.184569][ T2347] pvrusb2: Invalid write control endpoint [ 3125.201189][ T2347] pvrusb2: Invalid write control endpoint [ 3125.216627][ T2347] pvrusb2: Invalid write control endpoint [ 3125.232802][ T2347] pvrusb2: Invalid write control endpoint [ 3125.246193][ T2347] pvrusb2: Invalid write control endpoint [ 3125.251994][ T2347] pvrusb2: Invalid write control endpoint [ 3125.267608][ T2347] pvrusb2: Invalid write control endpoint [ 3125.283945][ T2347] pvrusb2: Invalid write control endpoint [ 3125.301325][ T2347] pvrusb2: Invalid write control endpoint [ 3125.322613][ T2347] pvrusb2: Invalid write control endpoint [ 3125.343415][ T2347] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 3125.463208][ T2347] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_e) [ 3125.471357][ T2347] pvrusb2: Invalid write control endpoint [ 3125.496185][ T2347] pvrusb2: Invalid write control endpoint [ 3125.512376][ T2347] pvrusb2: Invalid write control endpoint [ 3125.526178][ T2347] pvrusb2: Invalid write control endpoint [ 3125.559530][ T2347] pvrusb2: Invalid write control endpoint [ 3125.583130][ T2347] pvrusb2: Invalid write control endpoint [ 3125.608936][ T2347] pvrusb2: Invalid write control endpoint [ 3125.626528][ T2347] pvrusb2: Invalid write control endpoint [ 3125.635504][ T2347] pvrusb2: Invalid write control endpoint [ 3125.655798][ T2347] pvrusb2: Invalid write control endpoint [ 3125.665928][ T2347] pvrusb2: Invalid write control endpoint [ 3125.684816][ T2347] pvrusb2: Invalid write control endpoint [ 3125.699972][ T9255] fuse: Unknown parameter '0x0000000000000003' [ 3125.710815][ T2347] pvrusb2: Invalid write control endpoint [ 3125.723972][ T2347] pvrusb2: Invalid write control endpoint [ 3125.754583][ T2347] pvrusb2: Invalid write control endpoint [ 3125.765448][ T2347] pvrusb2: Invalid write control endpoint [ 3125.781281][ T2347] pvrusb2: Invalid write control endpoint [ 3125.788119][ T2347] pvrusb2: Invalid write control endpoint [ 3125.794678][ T2347] pvrusb2: Invalid write control endpoint [ 3125.811151][ T2347] pvrusb2: Invalid write control endpoint [ 3125.821284][ T2347] pvrusb2: Invalid write control endpoint [ 3125.832927][ T2347] pvrusb2: Attached sub-driver cs53l32a [ 3125.886837][ T2347] pvrusb2: Invalid write control endpoint [ 3125.892855][ T2347] pvrusb2: Invalid write control endpoint [ 3125.902529][ T2347] pvrusb2: Invalid write control endpoint [ 3125.908818][ T2347] pvrusb2: Invalid write control endpoint [ 3125.919255][ T2347] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 3125.943668][ T2347] pvrusb2: Device being rendered inoperable [ 3125.956597][T18733] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 3125.966585][ T2347] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 3125.992087][ T2347] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 3126.046500][ T13] net_ratelimit: 31 callbacks suppressed [ 3126.046518][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 3126.060859][ T9264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3126.078117][ T9264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3126.086886][T18733] usb 4-1: device descriptor read/64, error -71 [ 3126.114387][ T9265] macsec3: entered allmulticast mode [ 3126.120284][ T9265] gretap0: entered allmulticast mode [ 3126.176635][T10066] bond1: (slave bridge2): failed to get link speed/duplex [ 3126.268481][T27260] usb 1-1: USB disconnect, device number 40 [ 3126.297108][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 3126.336541][T18733] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 3126.386296][ T363] usb 6-1: new full-speed USB device number 104 using dummy_hcd [ 3126.406512][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 3126.486400][T18733] usb 4-1: device descriptor read/64, error -71 [ 3126.516511][T17300] bond1: (slave bridge2): failed to get link speed/duplex [ 3126.606965][T18733] usb usb4-port1: attempt power cycle [ 3126.636445][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3126.662448][ T9251] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8776'. [ 3126.757089][T17300] bond1: (slave bridge2): failed to get link speed/duplex [ 3126.917530][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 3126.986746][T18733] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 3127.007055][T18733] usb 4-1: device descriptor read/8, error -71 [ 3127.056865][T17300] bond1: (slave bridge2): failed to get link speed/duplex [ 3127.196310][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 3127.256488][T27260] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 3127.256617][T18733] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 3127.307272][T18733] usb 4-1: device descriptor read/8, error -71 [ 3127.416929][T18733] usb usb4-port1: unable to enumerate USB device [ 3127.422301][ T363] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3127.431232][T27260] usb 3-1: Using ep0 maxpacket: 32 [ 3127.439813][ T363] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 3127.453105][T27260] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3127.465264][ T363] usb 6-1: can't read configurations, error -71 [ 3127.471843][T27260] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3127.482723][T27260] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3127.494413][T27260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3127.543842][T18733] usb 5-1: USB disconnect, device number 44 [ 3127.545050][T27260] usb 3-1: config 0 descriptor?? [ 3127.926558][T18733] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 3128.061519][ T9279] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8785'. [ 3128.096091][T27260] savu 0003:1E7D:2D5A.0081: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 3128.123317][T18733] usb 5-1: Using ep0 maxpacket: 32 [ 3128.145936][T18733] usb 5-1: config 0 has an invalid interface number: 54 but max is 0 [ 3128.166600][T18733] usb 5-1: config 0 has no interface number 0 [ 3128.182466][T18733] usb 5-1: config 0 interface 54 has no altsetting 0 [ 3128.201104][T18733] usb 5-1: New USB device found, idVendor=0cf2, idProduct=8d50, bcdDevice=46.64 [ 3128.214416][T18733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3128.232881][T18733] usb 5-1: Product: syz [ 3128.243569][T18733] usb 5-1: Manufacturer: syz [ 3128.253933][T18733] usb 5-1: SerialNumber: syz [ 3128.278422][T18733] usb 5-1: config 0 descriptor?? [ 3128.313198][ T9282] x_tables: duplicate underflow at hook 2 [ 3128.349432][ T846] usb 3-1: USB disconnect, device number 38 [ 3128.520820][T18733] usb 5-1: USB disconnect, device number 45 [ 3128.737977][ T363] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 3128.916405][ T363] usb 6-1: Using ep0 maxpacket: 16 [ 3128.927779][ T363] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 3128.947891][ T363] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3128.967982][ T363] usb 6-1: Product: syz [ 3128.975390][ T363] usb 6-1: Manufacturer: syz [ 3128.984174][ T363] usb 6-1: SerialNumber: syz [ 3129.010533][ T363] r8152-cfgselector 6-1: Unknown version 0x0000 [ 3129.020686][ T363] r8152-cfgselector 6-1: config 0 descriptor?? [ 3129.106516][T27260] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 3129.274563][T27260] usb 4-1: config 0 has no interfaces? [ 3129.291517][T27260] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3129.301262][T27260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3129.309530][T27260] usb 4-1: Product: syz [ 3129.314357][T27260] usb 4-1: Manufacturer: syz [ 3129.319171][T27260] usb 4-1: SerialNumber: syz [ 3129.325827][T27260] usb 4-1: config 0 descriptor?? [ 3129.511584][T27260] r8152-cfgselector 6-1: USB disconnect, device number 106 [ 3129.833544][ T363] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 3130.000191][ T363] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3130.041166][ T363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3130.084907][ T363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3130.120424][ T363] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3130.191353][ T363] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3130.241127][ T363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3130.327502][ T363] usb 1-1: config 0 descriptor?? [ 3130.606606][ T846] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 3130.678402][ T9321] FAULT_INJECTION: forcing a failure. [ 3130.678402][ T9321] name failslab, interval 1, probability 0, space 0, times 0 [ 3130.738336][ T9321] CPU: 1 UID: 0 PID: 9321 Comm: syz.5.8799 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 3130.738363][ T9321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3130.738375][ T9321] Call Trace: [ 3130.738383][ T9321] [ 3130.738392][ T9321] dump_stack_lvl+0x189/0x250 [ 3130.738418][ T9321] ? __pfx____ratelimit+0x10/0x10 [ 3130.738446][ T9321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3130.738466][ T9321] ? __pfx__printk+0x10/0x10 [ 3130.738494][ T9321] ? __pfx___might_resched+0x10/0x10 [ 3130.738513][ T9321] ? fs_reclaim_acquire+0x7d/0x100 [ 3130.738541][ T9321] should_fail_ex+0x414/0x560 [ 3130.738570][ T9321] should_failslab+0xa8/0x100 [ 3130.738593][ T9321] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 3130.738615][ T9321] ? __alloc_skb+0x112/0x2d0 [ 3130.738639][ T9321] __alloc_skb+0x112/0x2d0 [ 3130.738670][ T9321] netlink_ack+0x146/0xa50 [ 3130.738708][ T9321] netlink_rcv_skb+0x28c/0x470 [ 3130.738729][ T9321] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 3130.738748][ T9321] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3130.738779][ T9321] ? bpf_lsm_capable+0x9/0x20 [ 3130.738797][ T9321] ? security_capable+0x7e/0x2e0 [ 3130.738828][ T9321] nfnetlink_rcv+0x26a/0x2520 [ 3130.738856][ T9321] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 3130.738884][ T9321] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 3130.738907][ T9321] ? __dev_queue_xmit+0x27e/0x3a70 [ 3130.738928][ T9321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3130.738953][ T9321] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 3130.738976][ T9321] ? __pfx___dev_queue_xmit+0x10/0x10 [ 3130.739009][ T9321] ? ref_tracker_free+0x63a/0x7d0 [ 3130.739022][ T9321] ? __copy_skb_header+0xa7/0x550 [ 3130.739044][ T9321] ? __pfx_ref_tracker_free+0x10/0x10 [ 3130.739078][ T9321] ? skb_clone+0x246/0x3a0 [ 3130.739103][ T9321] ? __netlink_deliver_tap+0x807/0x850 [ 3130.739123][ T9321] ? netlink_deliver_tap+0x2e/0x1b0 [ 3130.739149][ T9321] ? netlink_deliver_tap+0x2e/0x1b0 [ 3130.739168][ T9321] ? netlink_deliver_tap+0x2e/0x1b0 [ 3130.739191][ T9321] netlink_unicast+0x758/0x8d0 [ 3130.739218][ T9321] netlink_sendmsg+0x805/0xb30 [ 3130.739246][ T9321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3130.739270][ T9321] ? aa_sock_msg_perm+0x94/0x160 [ 3130.739294][ T9321] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3130.739306][ T9321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3130.739318][ T9321] __sock_sendmsg+0x219/0x270 [ 3130.739329][ T9321] ____sys_sendmsg+0x505/0x830 [ 3130.739345][ T9321] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3130.739362][ T9321] ? import_iovec+0x74/0xa0 [ 3130.739376][ T9321] ___sys_sendmsg+0x21f/0x2a0 [ 3130.739389][ T9321] ? __pfx____sys_sendmsg+0x10/0x10 [ 3130.739422][ T9321] ? __fget_files+0x2a/0x420 [ 3130.739435][ T9321] ? __fget_files+0x3a0/0x420 [ 3130.739453][ T9321] __x64_sys_sendmsg+0x19b/0x260 [ 3130.739467][ T9321] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3130.739484][ T9321] ? __pfx_ksys_write+0x10/0x10 [ 3130.739498][ T9321] ? do_syscall_64+0xbe/0x3b0 [ 3130.739510][ T9321] do_syscall_64+0xfa/0x3b0 [ 3130.739518][ T9321] ? lockdep_hardirqs_on+0x9c/0x150 [ 3130.739533][ T9321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3130.739542][ T9321] ? clear_bhb_loop+0x60/0xb0 [ 3130.739553][ T9321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3130.739563][ T9321] RIP: 0033:0x7feceb58e929 [ 3130.739573][ T9321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3130.739589][ T9321] RSP: 002b:00007fecec3f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3130.739601][ T9321] RAX: ffffffffffffffda RBX: 00007feceb7b5fa0 RCX: 00007feceb58e929 [ 3130.739608][ T9321] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 3130.739614][ T9321] RBP: 00007fecec3f4090 R08: 0000000000000000 R09: 0000000000000000 [ 3130.739620][ T9321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3130.739626][ T9321] R13: 0000000000000000 R14: 00007feceb7b5fa0 R15: 00007feceb8dfa28 [ 3130.739641][ T9321] [ 3131.126380][ T2857] net_ratelimit: 31 callbacks suppressed [ 3131.126399][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3131.341364][ T363] usbhid 1-1:0.0: can't add hid device: -71 [ 3131.350899][ T363] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 3131.361435][ T363] usb 1-1: USB disconnect, device number 41 [ 3131.404086][ T846] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3131.439340][ T846] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3131.464974][ T846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3131.502514][ T846] usb 5-1: config 0 descriptor?? [ 3131.514904][T17300] bond1: (slave bridge2): failed to get link speed/duplex [ 3131.554201][ T846] pwc: Askey VC010 type 2 USB webcam detected. [ 3131.722641][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3131.792543][T18733] usb 4-1: USB disconnect, device number 57 [ 3131.896765][T10066] bond1: (slave bridge2): failed to get link speed/duplex [ 3132.016471][T10066] bond1: (slave bridge2): failed to get link speed/duplex [ 3132.126678][T17300] bond1: (slave bridge2): failed to get link speed/duplex [ 3132.211287][ T846] pwc: recv_control_msg error -32 req 02 val 2700 [ 3132.219758][ T846] pwc: recv_control_msg error -32 req 02 val 2c00 [ 3132.235615][ T846] pwc: recv_control_msg error -71 req 04 val 1000 [ 3132.242639][T10066] bond1: (slave bridge2): failed to get link speed/duplex [ 3132.253293][ T846] pwc: recv_control_msg error -71 req 04 val 1300 [ 3132.260614][ T846] pwc: recv_control_msg error -71 req 04 val 1400 [ 3132.275069][ T846] pwc: recv_control_msg error -71 req 02 val 2000 [ 3132.298643][ T846] pwc: recv_control_msg error -71 req 02 val 2100 [ 3132.320519][ T846] pwc: recv_control_msg error -71 req 04 val 1500 [ 3132.356317][ T363] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 3132.366327][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 3132.371188][ T846] pwc: recv_control_msg error -71 req 02 val 2500 [ 3132.411704][ T9344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8807'. [ 3132.416608][ T846] pwc: recv_control_msg error -71 req 02 val 2400 [ 3132.437753][ T846] pwc: recv_control_msg error -71 req 02 val 2600 [ 3132.568853][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 3132.582526][ T363] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3132.602872][ T363] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3132.659281][ T846] pwc: recv_control_msg error -71 req 02 val 2900 [ 3132.676478][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3132.812724][ T363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3132.816023][ T846] pwc: recv_control_msg error -71 req 02 val 2800 [ 3132.856083][ T363] usb 4-1: config 0 descriptor?? [ 3132.858578][ T846] pwc: recv_control_msg error -71 req 04 val 1100 [ 3132.896231][ T846] pwc: recv_control_msg error -71 req 04 val 1200 [ 3132.907253][ T363] pwc: Askey VC010 type 2 USB webcam detected. [ 3132.943605][ T846] pwc: Registered as video103. [ 3132.981145][ T9347] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8808'. [ 3133.003222][ T846] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input327 [ 3133.076848][ T846] usb 5-1: USB disconnect, device number 46 [ 3133.529615][ T363] pwc: recv_control_msg error -32 req 02 val 2700 [ 3133.536939][ T363] pwc: recv_control_msg error -32 req 02 val 2c00 [ 3133.545213][ T363] pwc: recv_control_msg error -71 req 04 val 1000 [ 3133.552646][ T363] pwc: recv_control_msg error -71 req 04 val 1300 [ 3133.556428][ T846] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 3133.559838][ T363] pwc: recv_control_msg error -71 req 04 val 1400 [ 3133.574124][ T363] pwc: recv_control_msg error -71 req 02 val 2000 [ 3133.581723][ T363] pwc: recv_control_msg error -71 req 02 val 2100 [ 3133.588906][ T363] pwc: recv_control_msg error -71 req 04 val 1500 [ 3133.595655][ T363] pwc: recv_control_msg error -71 req 02 val 2500 [ 3133.606537][T18733] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 3133.609142][ T363] pwc: recv_control_msg error -71 req 02 val 2400 [ 3133.624628][ T363] pwc: recv_control_msg error -71 req 02 val 2600 [ 3133.632813][ T363] pwc: recv_control_msg error -71 req 02 val 2900 [ 3133.648447][ T363] pwc: recv_control_msg error -71 req 02 val 2800 [ 3133.655448][ T363] pwc: recv_control_msg error -71 req 04 val 1100 [ 3133.665853][ T363] pwc: recv_control_msg error -71 req 04 val 1200 [ 3133.675330][ T363] pwc: Registered as video103. [ 3133.688412][ T363] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input328 [ 3133.714186][ T363] usb 4-1: USB disconnect, device number 58 [ 3133.728283][ T846] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3133.736633][T16553] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 3133.759748][ T846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3133.789051][T18733] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 3133.809813][ T846] usb 5-1: config 0 descriptor?? [ 3133.838335][ T846] cp210x 5-1:0.0: cp210x converter detected [ 3133.844512][T18733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3133.865491][T18733] usb 3-1: config 0 descriptor?? [ 3133.898042][T16553] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3133.917168][T16553] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1289, setting to 1024 [ 3133.935019][T16553] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 3133.947150][T16553] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3133.963200][T16553] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3133.972667][T16553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3133.981194][T16553] usb 1-1: Product: syz [ 3133.985700][T16553] usb 1-1: Manufacturer: syz [ 3133.990412][T16553] usb 1-1: SerialNumber: syz [ 3133.999418][ T9344] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 3134.089493][T18733] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 3134.280497][ T846] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 3134.305073][ T846] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 3134.337945][ T846] usb 5-1: cp210x converter now attached to ttyUSB0 [ 3134.419651][ T846] usb 5-1: USB disconnect, device number 47 [ 3134.437680][ T846] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3134.446774][ T846] cp210x 5-1:0.0: device disconnected [ 3134.566619][T30286] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 3134.739304][T30286] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3134.752213][T30286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3134.785257][T30286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3134.810435][T30286] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3134.867021][T30286] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3134.887973][T30286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3134.921556][T18733] [drm:udl_init] *ERROR* Selecting channel failed [ 3134.952827][T30286] usb 4-1: config 0 descriptor?? [ 3135.199335][T18733] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 3135.216229][T18733] [drm] Initialized udl on minor 2 [ 3135.347615][T18733] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3135.412982][T30286] usbhid 4-1:0.0: can't add hid device: -71 [ 3135.422233][T30286] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3135.443327][T16553] cdc_ether 1-1:1.0: skipping garbage [ 3135.468868][T16553] cdc_ether 1-1:1.0: skipping garbage [ 3135.480126][T18733] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 3135.508392][T30286] usb 4-1: USB disconnect, device number 59 [ 3135.531102][ T846] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3135.551820][T18733] usb 3-1: USB disconnect, device number 39 [ 3135.565468][ T846] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 3135.645710][T16553] usb 1-1: bad CDC descriptors [ 3135.711982][T16553] usb 1-1: USB disconnect, device number 42 [ 3135.952678][ T9383] macsec2: entered promiscuous mode [ 3135.976698][ T9383] team0: entered promiscuous mode [ 3136.137523][ T13] net_ratelimit: 27 callbacks suppressed [ 3136.137541][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 3136.199713][T16553] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 3136.299156][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 3136.408035][T16553] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3136.421083][T16553] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3136.462009][T16553] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3136.462646][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 3136.552463][T16553] usb 1-1: config 0 descriptor?? [ 3136.580615][T16553] pwc: Askey VC010 type 2 USB webcam detected. [ 3136.636792][ T1121] bond1: (slave bridge2): failed to get link speed/duplex [ 3136.756545][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3136.866601][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 3136.902821][ T9398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8824'. [ 3136.912312][ T9398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8824'. [ 3136.922975][ T9398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8824'. [ 3136.932316][ T9398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8824'. [ 3136.996513][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3137.109285][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8827'. [ 3137.121770][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3137.182015][T16553] pwc: recv_control_msg error -32 req 02 val 2700 [ 3137.198476][T16553] pwc: recv_control_msg error -32 req 02 val 2c00 [ 3137.215279][T16553] pwc: recv_control_msg error -71 req 04 val 1000 [ 3137.235893][T16553] pwc: recv_control_msg error -71 req 04 val 1300 [ 3137.246689][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3137.254412][T16553] pwc: recv_control_msg error -71 req 04 val 1400 [ 3137.264885][T16553] pwc: recv_control_msg error -71 req 02 val 2000 [ 3137.273953][T16553] pwc: recv_control_msg error -71 req 02 val 2100 [ 3137.310403][T16553] pwc: recv_control_msg error -71 req 04 val 1500 [ 3137.318852][T16553] pwc: recv_control_msg error -71 req 02 val 2500 [ 3137.331046][T16553] pwc: recv_control_msg error -71 req 02 val 2400 [ 3137.338327][T16553] pwc: recv_control_msg error -71 req 02 val 2600 [ 3137.345111][T16553] pwc: recv_control_msg error -71 req 02 val 2900 [ 3137.352323][T16553] pwc: recv_control_msg error -71 req 02 val 2800 [ 3137.359081][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3137.373188][T16553] pwc: recv_control_msg error -71 req 04 val 1100 [ 3137.381426][T16553] pwc: recv_control_msg error -71 req 04 val 1200 [ 3137.390344][T16553] pwc: Registered as video103. [ 3137.417823][T16553] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input329 [ 3137.477598][T16553] usb 1-1: USB disconnect, device number 43 [ 3137.546566][T18733] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 3137.586714][T30286] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 3137.599258][ T9420] netlink: 212 bytes leftover after parsing attributes in process `syz.4.8831'. [ 3137.716814][T18733] usb 6-1: Using ep0 maxpacket: 32 [ 3137.729515][T18733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3137.751441][T18733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3137.776042][T18733] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3137.816402][T18733] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3137.825018][T30286] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3137.846205][T30286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3137.868414][T18733] usb 6-1: config 0 descriptor?? [ 3137.890074][T30286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3137.909899][T30286] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3137.926228][ T363] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 3137.929574][T30286] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3137.944417][T30286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3138.008986][T30286] usb 4-1: config 0 descriptor?? [ 3138.188411][ T363] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3138.231660][ T363] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 3138.251383][ T363] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 3138.265983][ T363] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3138.339079][ T363] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3138.369922][ T9422] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 3138.379365][T18733] savu 0003:1E7D:2D5A.0082: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 3138.398104][ T363] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3138.499703][T30286] usbhid 4-1:0.0: can't add hid device: -71 [ 3138.527958][T30286] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3138.607953][T30286] usb 4-1: USB disconnect, device number 60 [ 3138.677564][T18733] usb 6-1: USB disconnect, device number 107 [ 3138.987788][ T9436] vivid-000: disconnect [ 3139.198753][ T9430] vivid-000: reconnect [ 3140.446451][T18733] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 3140.596634][T18733] usb 3-1: Using ep0 maxpacket: 8 [ 3140.610964][T18733] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3141.267883][ T1121] net_ratelimit: 27 callbacks suppressed [ 3141.267923][ T1121] bond1: (slave bridge2): failed to get link speed/duplex [ 3141.427489][T18733] usb 3-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 3141.443326][T18733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3141.459099][T18733] usb 3-1: Product: syz [ 3141.463628][T18733] usb 3-1: Manufacturer: syz [ 3141.463912][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 3141.468617][T18733] usb 3-1: SerialNumber: syz [ 3141.485236][ T363] usb 5-1: USB disconnect, device number 48 [ 3141.572170][ T9459] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8843'. [ 3141.676379][T17300] bond1: (slave bridge2): failed to get link speed/duplex [ 3141.716794][T18733] usb 3-1: selecting invalid altsetting 1 [ 3141.746001][T18733] catc 3-1:8.0: Can't set altsetting 1. [ 3141.754845][T18733] catc 3-1:8.0: probe with driver catc failed with error -5 [ 3141.796597][T18733] usb 3-1: USB disconnect, device number 40 [ 3141.802756][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 3141.939749][ T1121] bond1: (slave bridge2): failed to get link speed/duplex [ 3142.066332][T17300] bond1: (slave bridge2): failed to get link speed/duplex [ 3142.106537][ T363] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 3142.227519][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 3142.415064][ T363] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3142.427532][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 3142.438275][ T363] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3142.474270][ T363] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3142.496285][ T9487] sctp: [Deprecated]: syz.0.8850 (pid 9487) Use of int in maxseg socket option. [ 3142.496285][ T9487] Use struct sctp_assoc_value instead [ 3142.517647][T18733] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 3142.531762][ T363] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3142.584261][ T1121] bond1: (slave bridge2): failed to get link speed/duplex [ 3142.601532][ T363] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3142.611314][ T363] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3142.640353][ T9492] netlink: 'syz.0.8850': attribute type 10 has an invalid length. [ 3142.682581][ T363] usb 5-1: config 0 descriptor?? [ 3142.702097][T18733] usb 4-1: Using ep0 maxpacket: 8 [ 3142.766481][T18733] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 3142.797505][T10066] bond1: (slave bridge2): failed to get link speed/duplex [ 3142.838530][T18733] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 3142.869380][T18733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3142.897120][T18733] usb 4-1: config 0 descriptor?? [ 3143.157824][ T363] usbhid 5-1:0.0: can't add hid device: -71 [ 3143.176371][ T363] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3143.363978][ T363] usb 5-1: USB disconnect, device number 49 [ 3143.482072][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.488627][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.887697][ T363] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 3144.061203][ T363] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3144.076955][ T363] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 3144.095072][ T363] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 3144.107440][ T363] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3144.217947][ T363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3144.251371][ T9500] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3144.299590][ T363] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 3144.704177][ T9508] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8858'. [ 3144.806944][ T9510] vivid-000: disconnect [ 3145.022697][ T9501] vivid-000: reconnect [ 3145.166429][T30286] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 3145.316353][T30286] usb 6-1: Using ep0 maxpacket: 32 [ 3145.323279][T30286] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 3145.338919][T30286] usb 6-1: config 0 has no interface number 0 [ 3145.355441][T30286] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3145.377020][T30286] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 3145.399983][T30286] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 3145.422349][T30286] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 3145.448165][T30286] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 3145.472557][T30286] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3145.496267][ T846] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 3145.511241][T30286] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 3145.538206][T30286] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3145.558058][T30286] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3145.602642][T18733] usbhid 4-1:0.0: can't add hid device: -71 [ 3145.614480][T18733] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3145.629420][T30286] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 3145.652797][T18733] usb 4-1: USB disconnect, device number 61 [ 3145.659836][ T846] usb 1-1: Using ep0 maxpacket: 16 [ 3145.668437][T30286] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3145.690662][ T846] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 3145.716382][T30286] usb 6-1: Product: syz [ 3145.720724][ T846] usb 1-1: can't read configurations, error -61 [ 3145.733539][T30286] usb 6-1: Manufacturer: syz [ 3145.748479][T30286] usb 6-1: SerialNumber: syz [ 3145.777737][T30286] usb 6-1: config 0 descriptor?? [ 3145.805825][ T9512] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 3145.820046][T30286] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 3145.851785][T30286] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 3145.878618][ T846] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 3145.899838][ T9518] netlink: 'syz.3.8862': attribute type 11 has an invalid length. [ 3146.031793][ T9512] netlink: 'syz.5.8859': attribute type 21 has an invalid length. [ 3146.043449][ T9512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3146.052439][ T9512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3146.099349][ T846] usb 1-1: Using ep0 maxpacket: 16 [ 3146.107583][ T846] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 3146.147401][ T846] usb 1-1: can't read configurations, error -61 [ 3146.155615][ T846] usb usb1-port1: attempt power cycle [ 3146.376256][T10066] net_ratelimit: 30 callbacks suppressed [ 3146.376276][T10066] bond1: (slave bridge2): failed to get link speed/duplex [ 3146.439092][ T363] usb 6-1: USB disconnect, device number 108 [ 3146.497010][ T1121] bond1: (slave bridge2): failed to get link speed/duplex [ 3146.536617][ T846] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 3146.567028][ T846] usb 1-1: Using ep0 maxpacket: 16 [ 3146.579926][ T846] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 3146.589198][ T846] usb 1-1: can't read configurations, error -61 [ 3146.606507][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3146.682076][T30286] usb 3-1: USB disconnect, device number 41 [ 3146.731382][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 3146.747917][ T846] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 3146.777107][ T846] usb 1-1: Using ep0 maxpacket: 16 [ 3146.784895][ T846] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 3146.793402][ T846] usb 1-1: can't read configurations, error -61 [ 3146.800250][ T846] usb usb1-port1: unable to enumerate USB device [ 3146.857015][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3146.966293][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3147.076741][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 3147.196828][T30286] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 3147.204526][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 3147.316364][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3147.376609][T30286] usb 3-1: Using ep0 maxpacket: 32 [ 3147.391232][ T9547] bridge4: entered promiscuous mode [ 3147.436634][ T363] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 3147.448849][ T2857] bond1: (slave bridge2): failed to get link speed/duplex [ 3147.458832][T30286] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3147.477763][T30286] usb 3-1: config 9 has an invalid interface number: 3 but max is 2 [ 3147.486027][T30286] usb 3-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 3147.495060][T30286] usb 3-1: config 9 has an invalid interface number: 150 but max is 2 [ 3147.503469][T30286] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 3147.546225][T30286] usb 3-1: config 9 has no interface number 1 [ 3147.556554][T30286] usb 3-1: config 9 has no interface number 2 [ 3147.576719][T30286] usb 3-1: config 9 interface 150 altsetting 253 has a duplicate endpoint with address 0xD, skipping [ 3147.628962][ T363] usb 4-1: config 17 has an invalid interface number: 255 but max is 0 [ 3147.636525][T30286] usb 3-1: config 9 interface 150 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 3147.637992][ T363] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 3147.661202][T30286] usb 3-1: config 9 interface 150 has no altsetting 0 [ 3147.668115][T30286] usb 3-1: New USB device found, idVendor=05c6, idProduct=9002, bcdDevice=b2.3d [ 3147.668144][T30286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3147.668161][T30286] usb 3-1: Product: syz [ 3147.668175][T30286] usb 3-1: Manufacturer: syz [ 3147.668187][T30286] usb 3-1: SerialNumber: syz [ 3147.811206][ T363] usb 4-1: config 17 has no interface number 0 [ 3147.897287][ T363] usb 4-1: too many endpoints for config 17 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 3148.013588][ T363] usb 4-1: config 17 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 3148.020743][T30286] usb 3-1: USB disconnect, device number 42 [ 3148.066372][ T363] usb 4-1: config 17 interface 255 has no altsetting 0 [ 3148.073323][ T363] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 3148.082911][ T363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3148.107917][ T363] aiptek 4-1:17.255: interface has no int in endpoints, but must have minimum 1 [ 3148.631679][ T9550] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 3148.866406][ T363] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 3149.028217][ T363] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3149.051936][ T363] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 3149.108534][ T363] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 3149.180747][ T363] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3149.224633][ T363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3149.275180][ T9556] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3149.303952][ T363] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 3150.077098][ T9578] FAULT_INJECTION: forcing a failure. [ 3150.077098][ T9578] name failslab, interval 1, probability 0, space 0, times 0 [ 3150.092056][ T9578] CPU: 1 UID: 0 PID: 9578 Comm: syz.5.8881 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 3150.092084][ T9578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3150.092095][ T9578] Call Trace: [ 3150.092102][ T9578] [ 3150.092110][ T9578] dump_stack_lvl+0x189/0x250 [ 3150.092136][ T9578] ? __pfx____ratelimit+0x10/0x10 [ 3150.092162][ T9578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3150.092180][ T9578] ? __pfx__printk+0x10/0x10 [ 3150.092206][ T9578] ? __pfx___might_resched+0x10/0x10 [ 3150.092229][ T9578] should_fail_ex+0x414/0x560 [ 3150.092256][ T9578] should_failslab+0xa8/0x100 [ 3150.092278][ T9578] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 3150.092299][ T9578] ? __alloc_skb+0x112/0x2d0 [ 3150.092322][ T9578] __alloc_skb+0x112/0x2d0 [ 3150.092344][ T9578] netlink_sendmsg+0x5c6/0xb30 [ 3150.092373][ T9578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3150.092396][ T9578] ? aa_sock_msg_perm+0x94/0x160 [ 3150.092421][ T9578] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3150.092443][ T9578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3150.092463][ T9578] __sock_sendmsg+0x219/0x270 [ 3150.092483][ T9578] ____sys_sendmsg+0x505/0x830 [ 3150.092510][ T9578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3150.092541][ T9578] ? import_iovec+0x74/0xa0 [ 3150.092565][ T9578] ___sys_sendmsg+0x21f/0x2a0 [ 3150.092588][ T9578] ? __pfx____sys_sendmsg+0x10/0x10 [ 3150.092645][ T9578] ? __fget_files+0x2a/0x420 [ 3150.092666][ T9578] ? __fget_files+0x3a0/0x420 [ 3150.092698][ T9578] __x64_sys_sendmsg+0x19b/0x260 [ 3150.092722][ T9578] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3150.092753][ T9578] ? __pfx_ksys_write+0x10/0x10 [ 3150.092771][ T9578] ? rcu_is_watching+0x15/0xb0 [ 3150.092795][ T9578] ? do_syscall_64+0xbe/0x3b0 [ 3150.092816][ T9578] do_syscall_64+0xfa/0x3b0 [ 3150.092831][ T9578] ? lockdep_hardirqs_on+0x9c/0x150 [ 3150.092855][ T9578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3150.092872][ T9578] ? clear_bhb_loop+0x60/0xb0 [ 3150.092892][ T9578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3150.092909][ T9578] RIP: 0033:0x7feceb58e929 [ 3150.092925][ T9578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3150.092941][ T9578] RSP: 002b:00007fecec3f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3150.092959][ T9578] RAX: ffffffffffffffda RBX: 00007feceb7b5fa0 RCX: 00007feceb58e929 [ 3150.092972][ T9578] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 3150.092983][ T9578] RBP: 00007fecec3f4090 R08: 0000000000000000 R09: 0000000000000000 [ 3150.092994][ T9578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3150.093003][ T9578] R13: 0000000000000000 R14: 00007feceb7b5fa0 R15: 00007feceb8dfa28 [ 3150.093030][ T9578] [ 3150.400996][ T363] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 3150.438930][ T9580] FAULT_INJECTION: forcing a failure. [ 3150.438930][ T9580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3150.474863][T16553] usb 4-1: USB disconnect, device number 62 [ 3150.537109][ T9580] CPU: 0 UID: 0 PID: 9580 Comm: syz.3.8882 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 3150.537141][ T9580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3150.537153][ T9580] Call Trace: [ 3150.537161][ T9580] [ 3150.537170][ T9580] dump_stack_lvl+0x189/0x250 [ 3150.537196][ T9580] ? __pfx____ratelimit+0x10/0x10 [ 3150.537221][ T9580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3150.537242][ T9580] ? __pfx__printk+0x10/0x10 [ 3150.537264][ T9580] ? __might_fault+0xb0/0x130 [ 3150.537296][ T9580] should_fail_ex+0x414/0x560 [ 3150.537325][ T9580] _copy_from_iter+0x1db/0x16f0 [ 3150.537358][ T9580] ? __pfx__copy_from_iter+0x10/0x10 [ 3150.537379][ T9580] ? rcu_is_watching+0x15/0xb0 [ 3150.537400][ T9580] ? trace_kmalloc+0x1f/0xd0 [ 3150.537417][ T9580] ? kernfs_fop_write_iter+0x158/0x4f0 [ 3150.537441][ T9580] kernfs_fop_write_iter+0x19f/0x4f0 [ 3150.537465][ T9580] vfs_write+0x54b/0xa90 [ 3150.537491][ T9580] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 3150.537511][ T9580] ? __pfx_vfs_write+0x10/0x10 [ 3150.537542][ T9580] ? __fget_files+0x2a/0x420 [ 3150.537572][ T9580] ksys_write+0x145/0x250 [ 3150.537595][ T9580] ? __pfx_ksys_write+0x10/0x10 [ 3150.537620][ T9580] ? do_syscall_64+0xbe/0x3b0 [ 3150.537642][ T9580] do_syscall_64+0xfa/0x3b0 [ 3150.537658][ T9580] ? lockdep_hardirqs_on+0x9c/0x150 [ 3150.537681][ T9580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3150.537698][ T9580] ? clear_bhb_loop+0x60/0xb0 [ 3150.537718][ T9580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3150.537735][ T9580] RIP: 0033:0x7f697698e929 [ 3150.537751][ T9580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3150.537767][ T9580] RSP: 002b:00007f69778c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3150.537787][ T9580] RAX: ffffffffffffffda RBX: 00007f6976bb5fa0 RCX: 00007f697698e929 [ 3150.537800][ T9580] RDX: 0000000000000009 RSI: 0000200000000280 RDI: 0000000000000004 [ 3150.537811][ T9580] RBP: 00007f69778c2090 R08: 0000000000000000 R09: 0000000000000000 [ 3150.537822][ T9580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3150.537833][ T9580] R13: 0000000000000000 R14: 00007f6976bb5fa0 R15: 00007f6976cdfa28 [ 3150.537861][ T9580] [ 3150.728056][ T363] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 3150.733585][ C0] vkms_vblank_simulate: vblank timer overrun [ 3150.751276][ T363] usb 1-1: config 0 has no interface number 0 [ 3150.789560][ T363] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 3150.807923][ T363] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 3150.841848][ T363] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3150.852374][ T363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3150.868055][ T363] usb 1-1: config 0 descriptor?? [ 3150.879627][ T9575] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 3150.899445][ T363] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 3151.180862][ T9575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3151.226747][ T9575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3151.666754][T17300] net_ratelimit: 32 callbacks suppressed [ 3151.666774][T17300] bond1: (slave bridge2): failed to get link speed/duplex [ 3151.806817][ T363] usb 3-1: USB disconnect, device number 43 [ 3152.226919][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 3152.336294][T17300] bond1: (slave bridge2): failed to get link speed/duplex [ 3152.382448][ T9602] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN PTI [ 3152.394400][ T9602] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af] [ 3152.402813][ T9602] CPU: 1 UID: 0 PID: 9602 Comm: syz.2.8888 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 3152.414794][ T9602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3152.424861][ T9602] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 3152.430256][ T9602] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 8d 42 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 aa 46 3e f8 85 [ 3152.449882][ T9602] RSP: 0018:ffffc9001bd470f0 EFLAGS: 00010206 [ 3152.456000][ T9602] RAX: ffffffff89821c13 RBX: 00000000000001a8 RCX: 0000000000080000 [ 3152.463982][ T9602] RDX: ffffc9000c479000 RSI: 000000000000033c RDI: 000000000000033d [ 3152.471959][ T9602] RBP: dffffc0000000000 R08: ffff888026c6bc00 R09: 0000000000000002 [ 3152.479937][ T9602] R10: 00000000ffffffff R11: ffffffff89821bf0 R12: dffffc0000000000 [ 3152.487917][ T9602] R13: 0000000000000035 R14: 0000000000000000 R15: ffff888055e02000 [ 3152.495920][ T9602] FS: 00007ff46e2126c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 3152.504862][ T9602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3152.511445][ T9602] CR2: 000000110c3499ac CR3: 00000000900de000 CR4: 00000000003526f0 [ 3152.519420][ T9602] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 3152.527392][ T9602] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3152.535362][ T9602] Call Trace: [ 3152.538640][ T9602] [ 3152.541565][ T9602] qdisc_tree_reduce_backlog+0x299/0x480 [ 3152.547204][ T9602] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 3152.552923][ T9602] hhf_change+0x764/0xad0 [ 3152.557258][ T9602] ? __pfx_hhf_change+0x10/0x10 [ 3152.562125][ T9602] ? __pfx_hhf_init+0x10/0x10 [ 3152.566808][ T9602] hhf_init+0x213/0x950 [ 3152.570971][ T9602] ? __pfx_hhf_init+0x10/0x10 [ 3152.575648][ T9602] qdisc_create+0x7a9/0xea0 [ 3152.580158][ T9602] tc_modify_qdisc+0x1426/0x2010 [ 3152.585192][ T9602] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 3152.590488][ T9602] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 3152.595769][ T9602] rtnetlink_rcv_msg+0x77c/0xb70 [ 3152.600720][ T9602] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 3152.605833][ T9602] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3152.611298][ T9602] ? ref_tracker_free+0x63a/0x7d0 [ 3152.616316][ T9602] ? __copy_skb_header+0xa7/0x550 [ 3152.621350][ T9602] ? __pfx_ref_tracker_free+0x10/0x10 [ 3152.626721][ T9602] netlink_rcv_skb+0x205/0x470 [ 3152.631498][ T9602] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3152.636974][ T9602] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3152.642422][ T9602] ? netlink_deliver_tap+0x2e/0x1b0 [ 3152.647719][ T9602] ? netlink_deliver_tap+0x2e/0x1b0 [ 3152.652922][ T9602] netlink_unicast+0x758/0x8d0 [ 3152.657697][ T9602] netlink_sendmsg+0x805/0xb30 [ 3152.662469][ T9602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3152.667754][ T9602] ? aa_sock_msg_perm+0x94/0x160 [ 3152.672701][ T9602] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3152.677983][ T9602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3152.683270][ T9602] __sock_sendmsg+0x219/0x270 [ 3152.687955][ T9602] ____sys_sendmsg+0x505/0x830 [ 3152.692747][ T9602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3152.698125][ T9602] ? import_iovec+0x74/0xa0 [ 3152.702629][ T9602] ___sys_sendmsg+0x21f/0x2a0 [ 3152.707314][ T9602] ? __pfx____sys_sendmsg+0x10/0x10 [ 3152.712529][ T9602] ? __fget_files+0x2a/0x420 [ 3152.717126][ T9602] ? __fget_files+0x3a0/0x420 [ 3152.721808][ T9602] __x64_sys_sendmsg+0x19b/0x260 [ 3152.726755][ T9602] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3152.732212][ T9602] ? rcu_is_watching+0x15/0xb0 [ 3152.737014][ T9602] ? do_syscall_64+0xbe/0x3b0 [ 3152.741687][ T9602] do_syscall_64+0xfa/0x3b0 [ 3152.746182][ T9602] ? lockdep_hardirqs_on+0x9c/0x150 [ 3152.751392][ T9602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3152.757465][ T9602] ? clear_bhb_loop+0x60/0xb0 [ 3152.762141][ T9602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3152.768031][ T9602] RIP: 0033:0x7ff46d38e929 [ 3152.772440][ T9602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3152.792053][ T9602] RSP: 002b:00007ff46e212038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3152.800468][ T9602] RAX: ffffffffffffffda RBX: 00007ff46d5b5fa0 RCX: 00007ff46d38e929 [ 3152.808451][ T9602] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000004 [ 3152.816425][ T9602] RBP: 00007ff46d410b39 R08: 0000000000000000 R09: 0000000000000000 [ 3152.824397][ T9602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3152.832370][ T9602] R13: 0000000000000000 R14: 00007ff46d5b5fa0 R15: 00007ff46d6dfa28 [ 3152.840351][ T9602] [ 3152.843374][ T9602] Modules linked in: [ 3152.847394][ T9602] ---[ end trace 0000000000000000 ]--- [ 3152.852863][ T9602] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 3152.858289][ T9602] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 8d 42 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 aa 46 3e f8 85 [ 3152.877952][ T9602] RSP: 0018:ffffc9001bd470f0 EFLAGS: 00010206 [ 3152.884039][ T9602] RAX: ffffffff89821c13 RBX: 00000000000001a8 RCX: 0000000000080000 [ 3152.892084][ T9602] RDX: ffffc9000c479000 RSI: 000000000000033c RDI: 000000000000033d [ 3152.900101][ T9602] RBP: dffffc0000000000 R08: ffff888026c6bc00 R09: 0000000000000002 [ 3152.908143][ T9602] R10: 00000000ffffffff R11: ffffffff89821bf0 R12: dffffc0000000000 [ 3152.916168][ T9602] R13: 0000000000000035 R14: 0000000000000000 R15: ffff888055e02000 [ 3152.924171][ T9602] FS: 00007ff46e2126c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 3152.933146][ T9602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3152.939784][ T9602] CR2: 000000110c3499ac CR3: 00000000900de000 CR4: 00000000003526f0 [ 3152.947823][ T9602] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 3152.955813][ T9602] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3152.963869][ T9602] Kernel panic - not syncing: Fatal exception in interrupt [ 3152.971320][ T9602] Kernel Offset: disabled [ 3152.975642][ T9602] Rebooting in 86400 seconds..