last executing test programs: 8.612876758s ago: executing program 1 (id=3763): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000780)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0xe22, 0x0, @empty}, 0x1c) fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc01000000000000002503000000009cff02000000000000000000000000000100000e22"], 0x0) 8.531702116s ago: executing program 1 (id=3764): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1002000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}) 8.471160843s ago: executing program 1 (id=3766): r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req={0x3, 0x10004, 0x800, 0x7}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f00000002c0)={@local, @link_local, @val={@void, {0x8100, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b74000c00e63b9ba2ea4f115a67245b00", "584cbf2649a50f2dbc436fa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "9cfd56d3c86e55010000000000000000000000004137dfff2f8f00", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x3, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000"/207, @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCOUTQ(r7, 0x5411, &(0x7f0000000240)) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0xfffffffd}) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x0, 0xcb, 0xe7a, 0x2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 7.235373254s ago: executing program 3 (id=3772): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x69}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4845}, 0x20008010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmsg$can_raw(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x40002160) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r6 = socket(0x2b, 0x80801, 0x1) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) sendmsg$can_bcm(r6, &(0x7f0000000640)={&(0x7f0000000500), 0x10, &(0x7f0000000540)={&(0x7f00000005c0)={0x4, 0x10, 0x6, {}, {0x0, 0x2710}, {0x1, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x36, 0x0, 0x0, 0x0, "b5d26d4f2d36b2845f64323c3a6c37d73453f7f8d4f181ecc3d70b7cbde9ddaf3bb85780d3ef692f16c3c6c754eca4f67bf3d814f36f7ebc97e295e4085bd512"}}, 0x80}, 0x1, 0x0, 0x0, 0x880}, 0x40800) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000002c00)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r7, 0x627, 0xc1040000, 0x43, 0x0, 0x0) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000580)) r10 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 5.571740867s ago: executing program 0 (id=3774): personality(0x4000005) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) (async) ppoll(0x0, 0xffffffffffffffa2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000980)={[0x4]}, 0x8) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0xa00, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x2710, 0x0, 0xeeef0000, 0x2000, &(0x7f0000ffb000/0x2000)=nil, 0xffffffff00000001}) (async) r3 = fcntl$dupfd(r0, 0x406, r0) getpeername$packet(r3, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f000042d000/0x3000)=nil, 0x3000, 0x0, 0x4010, r3, 0x10000000) 5.258743218s ago: executing program 3 (id=3776): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0xd, 0x0, 0x3631564e, 0x5, 0x0, 0x0, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @private=0xa010100}, 0x10, 0x0, 0x2dc07ca4eb49d447}}, {{&(0x7f0000000300)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x18}}], 0x2, 0x20000000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000022000", @ANYRES32=r7, @ANYBLOB="0000000000000001b702000014000020b70300000010000085000000d4000000bf09000000ffffffe5090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0xa, 0xfed, &(0x7f0000001e40)=""/4077, 0x40f00, 0x0, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="183de80fff0b6cd3370000000000000018110000", @ANYRES32, @ANYBLOB="00000000000000c78a028c507f7cde3e381b00000000000085000000830000005c0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000045c64443386974ccc0084000000b7000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r8 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r7, 0xc0984124, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r11, 0x5) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 4.883595575s ago: executing program 1 (id=3777): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x9}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0xc0408c1}, 0x24000840) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000910000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020001000000000000000702000000ff05000500000000000a00000000000000ff01000000000000000000000000000100000000000000000200080008"], 0x80}}, 0x0) r5 = add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r3) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="411002000000d798"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = add_key$user(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000500)="000000c6d222406b096cc34801000000647418aaf9784416ed438eb9a332f44a1ec989b2d2e513f57632c54d863ecd9b0df090728300e43d59f817b99310b6b600968f3d2f02bbdfbbcb5c4f13e25d19bfdffe6f178f3580ea2b14da36c6095d68284c04c724611344d68d651aa37d305b61d2ffec13ebbbdaa51c2dac42788676771ee9f9a1cd34fbb8c576bfddf2a15d55dcb910f9eb6f9e572c362d7df6deb76cab9bff062885ec675056768437", 0xaf, r5) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) unshare(0x28000600) ftruncate(0xffffffffffffffff, 0xee72) socket$igmp6(0xa, 0x3, 0x2) 4.590880431s ago: executing program 0 (id=3778): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1003e00}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}) 4.49219558s ago: executing program 2 (id=3779): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0xc1501, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @remote}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x12c, @ioapic={0x100010000, 0x1, 0x0, 0x0, 0x0, [{0x6, 0x7, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x1}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0xc, 0xc, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xfe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x9, 0x8, '\x00', 0xff}, {0x16, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0x11, 0x2, 0xd, '\x00', 0x2}, {0x8, 0x83, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x3, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x6, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x81, '\x00', 0x10}, {0x80, 0x3, 0x80, '\x00', 0x6}]}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x74}, {0x6c}, {0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x40000000015, 0x5, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x1b0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private}, {@in, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "b74a27a4f44bd05db8f139a0e0f8147b"}}]}, 0x1b0}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c00080008"], 0x178}}, 0x0) recvmmsg(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/205, 0xcd}, 0x9}], 0x1, 0x23, 0x0) r11 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r11, 0x40045731, &(0x7f0000000000)) syz_emit_ethernet(0x32, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffff2180c20000000800460000240000007a8611907800000000000004c60000014e20000c907801000000000000"], 0x0) getitimer(0x2, &(0x7f0000000440)) 4.403104304s ago: executing program 0 (id=3780): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e20, @empty}, 0x261, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4007, 0x0, 0xfffc}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_connect(0x3, 0x11d4, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0xd0, 0xa, 0x2b, 0x10, 0x2c4e, 0x100, 0x6a7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11c2, 0x4, 0x81, 0x5, 0xa0, 0x8, [{{0x9, 0x4, 0x9e, 0x50, 0x10, 0xff, 0xff, 0xff, 0x7, [@hid_hid={0x9, 0x21, 0x9, 0xc2, 0x1, {0x22, 0x8f9}}], [{{0x9, 0x5, 0x80, 0x2, 0x228, 0xb, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x3}]}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0x4, 0xd, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0xc, 0xfffb}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x67, 0x6}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0xd, 0xe6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x6}]}}, {{0x9, 0x5, 0x9, 0x2, 0x0, 0xb, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x3, 0xd, 0x8f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x98}, @generic={0xf, 0x1, "01512f1ce847dbf9839eb2376b"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x5, 0x3, 0x4, [@generic={0x60, 0x4, "74f2b486594a5eaf8c472f4412e759dfb15cf137b75d14fc6be5c0ba9f14f1add430150cd652f772e29bf6e846fb46491170fb16e182e0219f3e747503be8ead991e36326a9c1c577c0a5be448fed7bfe1e6307dae56a2f26efb5a0f4212"}]}}, {{0x9, 0x5, 0x3, 0xe4b359d91f34eb45, 0x200, 0x7, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x81, 0x3ff}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x80, 0xc, 0xf, [@generic={0xc9, 0x0, "9777e5b73bb8b9fd3d676195db8f4a8b49a7423d6eb4bcfe82cf47c6d153dcd614c4fb42ed4413649884988a364a1e7b80bb05e62409efe49b07bd055a075f3d04108eaea5bc57ce781b091a58da5be89ddbd270ce6e22e60e7e1a111b2a2fa9bd85e83c8e1857625632c8eb184895ec84cf5cc27142edc64e391e1990ee30563f598f1d05ea7e773dba1581f9bcc9e644cc4cba8519592ced97c1068415baa59a296373dff91f89547e1d6758aa4b07bdb80d6d85daac14a42e5b15ce9bfd57ce8ad64e3240b4"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x400, 0x86, 0xff, 0x40, [@generic={0x2d, 0xb, "a0db1f6baff7d86d2ecbe1052c6ceff4b568f20ef011397b9472c85dc01b31d55a09111a6cb62a14341091"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x3, 0x3, 0x0, [@generic={0xd3, 0x3, "340fa28f8ad0163f9f5931e9df40c5f492bef510b32bf6f713576f8f235c85f0d8c8ee5c808f7cdce1f8baa893c4146dc29f4d62ce3e01c61d9af181ac9d284ae71ba0b8a49e6bc68b7886a5b07c273702bc51488038b474115cb9bacb63f24274e258a988ecb4d59faec58f8f7a77c941ffe58813002729639c3bd8fc18b59c83be1acd09d96a9b66b3b81f09eafeb0092e21824830cd369d9060b040f757591d83529bc2d2d01bb09d1da4411971dd1ebdaedcbb8b8cc3f01d765cd533bec9834f31c25e1df3327d71ddb84516d69ccd"}, @generic={0x4b, 0x2, "4330f3c9caa07d2459018acbf61ecf1c77dddbe19e796fdf359f85a9fb9a66fc1f3ee1953dab1ca4927fd1c3fc28624822c45bec2ce7bf7cf174d71a416a262daa2ee28c0aa4ac4b6b"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x10, 0x5, 0x34, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x7}, @generic={0xe5, 0xe, "ffb8db653b124bffed3d8f82ec2d65d413a5bedae04fb4c878f70e9ae41ec8d6aabaaa2087c6e721172b578a7f966526f044aea121531bdc3f4cc731e9a0d1d1b0f81a54f062be3e8733ae457457a6e2a9fcc13d9deacf0c21dc2cfc08485f242957d41777482022bcb5aa15176f3adeb4807ec5863b5c9f4738ca07d6abcdf386e0142d6b58631ca0c95d8a21392248cd254ad2c2856cd30fca949be9e18b9e22c3622feda10387f1474274fd2f11ec3d9425debcb4a95a147cffae9da50255ce38177ac4de3ad8d0b56c094ae39f2a425f7f88ec9d24106276801903c6702ad8a189"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x0, 0x4, 0x7, 0x0, [@generic={0x98, 0xc, "b36d32ab58f2ed2ca9937d15ccc5ad6d243022fe2ae434a2d95cbc8930989697a3cfac3458f4d3f0939ec65b9bbe276dbfd428b56019f17524701711c4198f95bcc20bc07baa1252aa6f45824dd82f1c1141ab3e763ba8c0a12e1171459c3f3620f69357f9d5b1cbabced8ee9fa12115165cd13423e3de0db1534836f76a1d0284a0096578b2d331ba8fcad7dd84911d5b8cdaac4c6d"}, @generic={0x3f, 0x23, "7f685614212ea5dfe545390786ccb894a081ed9c7dbf127d0a3391738be71ffb5da82dee76077807ae7c207b5d476ba5d5e407924cc38111723b33acc9"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x40, 0x3, 0x8, [@generic={0x57, 0x34, "28bc8e141c9b2daf9cccca086e14b9abc0faa73a78c8dc6e6a0ed7691d9261283bd7aacf18aefb776aa56f32a1d31f3f423ca9a9f45a6478c9b27e511657ecd00880bd5a38de4ae86e08fa74e6e0fb443a293d6a2f"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x6, 0xe, 0x1e, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf7, 0x9}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x21, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xb4, 0x4903}, @generic={0xa8, 0x4, "8dbe40420e8527ed6ee32880d2403d6aaeec8cdf9c947455f4978cb94514cebf602a13ff00ea2e9ac0b75004e56a0ca16d261850404f39a50febddb664abb45b4fa08a31617baf685daca23f3652f35774fe6509d515eb0d3efb0a3f8394d79dd93fe4ea27da2f8dbc3ac9c5d617950a862743ca3df87aee44674cacb0f2185efa98850f1b5fcb385de303317071c76a89a2db5c35a40763f6c809e797619b525b6b7db0a998"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x100, 0x6, 0xbd, 0x3, [@generic={0xfa, 0x2b, "87bb53a36333a92f9f388313e77d1a18bc9d87bc6687cb5145a2c2749a42e21e52ca4475eb0249aa84a04684eeef05711373c814f2c54b68ba9d2ecd1716fa5a8ddab7165eb933bc0b219b29efee0609f94439f1b467784cf185d3068a6080a42283d2c2c58d2fe73a5f92992b62c8a739ad82f70cb0c95177243de53f1af60fd74409c1b574ac6e5c88d622f3e643a3e43737fcc41a5ef0463074fdcadb95f394d4d11c2837d5ed3bab62e7a56c2c4c641a8167a8a2869f92458d0df51a266ea664a3b8c00eb6c3b1220f2978c1c679541ac62a53d2cb0a677cb4c7eaa974bd6f559ad754f0117cea7aabdce27d7d9280a206eaba8c31be"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x5}]}}]}}, {{0x9, 0x4, 0xce, 0xd3, 0x10, 0x4d, 0x9a, 0x88, 0x2, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "3015"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xa47, 0x7, 0x3}, {0x6, 0x24, 0x1a, 0x4, 0x23}, [@acm={0x4}]}, @uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x2, 0x4, 0x81, 0xb, "a91e441c"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x9, 0x5, 0x2, "a7d5"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5, 0x4, 0x2, 0x6, "d6b1", "f1f3e5"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x6c, 0x8, 0x2e, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf, 0x5}]}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x40, 0x2, [@generic={0xab, 0xe, "0597a3704385f1f40e53ead846f649bfaef062eaf3ef1b8c8838caa22a01cc946b8375d384f34d1f7e2a832d78882a7ec35646f92c64d7e3fd5b6224c194582c014aa1da177eb161a590ac2421b86da23c5c3f654bb6756ca43a59e8b6d0a7ba7ee923a7e327077bb912a15eb0786eefa2330b2d5ab67f7ed3c835b15894e7528479bf8e8734af63821818e9090b874e9b46848927f487ddc01a3935c95ce7a9b7c777ec95156907a6"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x4, 0x2, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x1}, @generic={0x26, 0x30, "e3c2557ddc99e3058113cc84f9bff1aa79698fc5387603c767a72f4717e0ce3d22a7bc90"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x7, 0x7, 0x6c, [@generic={0x90, 0x6, "a76244b563dc29dc1e157b78704d01f2650596530938b6b4ec8aec9e250e9f15fa1b9c505226b6aafc52fe9d73060f7623739b5abc4b18f6d1c7782cfa0f4f0b88d409fc6706248afec8be257b726dc5046fd776d6a8381f4c663b64d5a46bac72b087c4d24836caf499d1059a1df3b6849437dcdcfd0a311f2834fc10e5797d610ddc5bafde7fc43ac166378a7d"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x40, 0x73, 0x7f, 0x0, [@generic={0xae, 0x8, "daa75494ff6be9ce8cc93a652143af0dd47efd60c94dfc7e6c617647701a0d6b25941407e0a013147885a086df8b43bb0312fb5d4c2c1f36fe1b8bc7e90b05f0c248c32d85bbd6aa8615a2ca143e7f99669a4bf20e8247c9057f13e4049251d646171c0d187d55fbc44030afdb2cb7171bdb6b450434177752fb1567a9aea7235fed1a87261d5df942faa361913432a84e8bca5d29a9f145f1b9518e56a05ad6b0a777e5ffbb1c9e97114a93"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x8, 0x7, 0xc0, [@generic={0xe9, 0xd, "3595e17ce520ae256f74314713a248198971989510640dd4cf7a8a21c1aad5ed1f08bf1bf8c57cec2bdafe134546c61b5b31922c821d3875338210dc1a68e31e54368ffe4cc7e3d563a232410cf4480a0a236be2e0546efc6b9b6da61f47b49c11e07e28d2599f8b17cef9ef02e5b1e7e6789218c639c06691880363f4f77a4a6ea50b18aa6254bab008286e4e0dfd7143e004dbb846f84a916d26432c1b731f1368bed89d3976ab578fcf0afbdb16d4cb332eeb61828c8161ea9bcd860bd45e060d60170fbfb734a1a53f58c46e5e0fc7640643ce77abe3aaf64fa5988e560fc33b94150b0d5b"}, @generic={0x14, 0x21, "df694b5deb39da5fb21a7dcf90b228857ff3"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x3df, 0x4, 0x8e, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x568dd6aa5872369, 0x7f, 0x9}, @generic={0xbf, 0x7, "71c012daef4351f83a84668f3d6796b6d6405f6b8bf9e7a858159dc689c95430ff30fcc3e8c7cd4133b0919ce388c933080e894f475b0e2874db54cae530fe45dac691279d3437d7f1c35f68cdb2454fef90e2510edd8254f2c33a0b849331e083ea6d49b1fe1bd1f04040ce28b4c565ab07b5975d398798b328709f78b04dee30f816af953f9619e7c6907b1781b88a9cecb284d98cfb97a6ca3ae6d3e56a3e49437053964407c5aa125715c51540b063bddb5338e9649d26df48ac93"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x1, 0xd3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7ff}]}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0x7, 0x3a, 0x2, [@generic={0x30, 0x22, "c367a7b6ef4679647de3c74ed8e88cb35ae9acbae00194c01c3d399282e737efc3a43178106630e156b2cb45a101"}]}}, {{0x9, 0x5, 0xa, 0x6, 0x20, 0xd, 0xa, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0xba, 0x3}, @generic={0xf9, 0xe, "df12d59979325042f9183c65bd2ae7199447277d9279df56b5d8e74913a050a67c53d66a3db1e3e54927a01a4671b1be6194b54ba5aeed0f5cbe5fd21d8a01086fab087805e5b7e6e60a0c60b042d35e64de728f25e9c0f3e3acd2b29d49fd6b8413b752f2cc258a498e561b9095cfbf3d6524f66d24d329f45bcd46767c2106319e8956c6a4f3e1b913b9ec1a782cfa334608df265c1bb88773a4284137386818ccf857714580145890e886f3277e9d67bb27861a90408ad975ab19a3f1d996cd419947465fc8b057d0aaa319b0e22454dbbd2be60af8ad6349958eea32b3c91ac05c8a1770132d491cbbfdb8316cf8f6a09a54ec2847"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x3, 0x2, 0x5, [@generic={0xcf, 0x3, "162b4f52854dcc1e1840f2e2ac09fa28d7daf6f15e84ffa7c82d77bc68787a082405b4bb63bd7c66a68ce57c16c421230bd9d3215e41f643bca17585309734f83d58c6f1699efbf85955b664d8749b376f9f50ced6f77faa5d1d2cb3f86fb3cca05f00e96603452ace09c439993f340c300451d059ef963baf360f518742c2342bb57d02f497f738c4b4b7be3a09d925525826b077c264b16465eccf5737d37b3efdeef686b296c44616760df07476f4d9951193221060cca9251d0b8137aa3875352d37524dcab6bc5b65b70c"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x20, 0x8, 0x7, 0x9, [@generic={0xf0, 0x23, "3d9a3d90df462262ed081b28f9f70586784d70d66412781a6b7d6b1a8d998f217def0526c0e99e5f289c31d368b23072fad747f3ab5180d5324aeffe8fd0e20f8bda322dfa5dc6a25b01ae069fae7652252587a701711790bceef1b87e48d399b66740df85b0c5788ad2350d19b05ce54a0ff0f64a29ceeae70f0012fc200fce131211bf4afbb990d07df7d396589f072aba065a3f04f80e4195edf537914f22e46d89dc66d20a865eae74aaa1e6dc8cc39b5692358a79b7a3318b7618e58eef0bd3cdad33ecd78d316beaa0014c41bd6b55b717c5c099b7934d19fec595f09752ee62276b9856aadc19761e3f7f"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x6, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x1}]}}, {{0x9, 0x5, 0xc, 0x2, 0x20, 0x2e, 0x1, 0x8, [@generic={0xbb, 0x1, "7798af5e1d846e2d2b2b4340e94bebd5c25b923a4eb6684bd40b54476e06980378e2fab5af8c793092b08f7cd7eeac61048aeb282a76a6eac505bac52d51cfdeb97cb4e21614d834c041014e7b49d197175fcc688b762933d3c7cd757cc6615f1cb5fa0e97b77baae0fddc659c3648b4afb71a1e8c6b8a8c7baa5ff27a61ca63dc14134c1f3d1d4b2b136a2c8ab535d7d4d0e584e6cbb22e4e0bbd33b17817a597f5a583df365872c2bc2610075bfc49eda39ea14187c91b4d"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x2, 0x5c, 0x4, [@generic={0x47, 0x23, "c3aec30fedfb544e76bf7efb9907ee9fc296e4beed8890c65953022a0217dfcd6082e2f5f68cff662e82b8eee42c55add19c11c0bf867adee1aa1819fc13d69f3db1cda009"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x53, 0x8, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x10, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x1ff}]}}]}}, {{0x9, 0x4, 0x94, 0x1, 0x2, 0xe5, 0x63, 0xf3, 0x1, [@hid_hid={0x9, 0x21, 0x6, 0x1, 0x1, {0x22, 0x5e9}}], [{{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x1, 0x2, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7b, 0x6}]}}, {{0x9, 0x5, 0x6, 0x1, 0x20, 0x81, 0xa9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xc, 0x9}]}}]}}, {{0x9, 0x4, 0xf7, 0x2, 0x8, 0xb6, 0x7a, 0x30, 0xc, [@hid_hid={0x9, 0x21, 0xc, 0x4, 0x1, {0x22, 0xc4c}}], [{{0x9, 0x5, 0x3, 0x2, 0xae2452d8a5663dae, 0x9, 0x9f, 0xc, [@generic={0x45, 0x6, "42ac11a1b95ac0634d63ce6c45e29f5b816b25353e9c515fe57bcc8215cb8e8fca990f0d4bca46ae82b636731e93d2eaf43841d6b1e4a95c6a85fe28efb77cb33c6d58"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x0, 0x9, 0x1, 0x5, [@generic={0x41, 0x21, "1c2658e8c927b9f42cc444dc1f5eb7b550d07b9c7491d0a71c2aeab64df838c26fb21d7181b86fb24034140bc2cfae63317ac183b7bee254c66225744b06a6"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x0, 0x3, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xff}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x9, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x64, 0x7f}, @generic={0x67, 0x6, "97dbf538f25176aa502d203827bc9fd75374cbd69af53a33088c54a730259572293181e86b997d2207897fc8a9bdecdd080a811e2cd0beda0e75dbde83387482d6a98a374e2bf259b6596ffcf9fa8624e70467636258bc6592618547fd10e3e1cd6d679349"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x66, 0xd1, 0xb}}, {{0x9, 0x5, 0x3, 0xc, 0x200, 0x7, 0x1, 0x7, [@generic={0x14, 0x22, "3444019e0e8fea3f81a5f3cb64853c621929"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x10, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x82e8}]}}, {{0x9, 0x5, 0x2, 0x10, 0x697, 0x4, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x9a, 0x5}]}}]}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0xd, 0x1, 0x80, 0x30, 0x9}, 0x1bc, &(0x7f0000000180)={0x5, 0xf, 0x1bc, 0x4, [@ptm_cap={0x3}, @generic={0xaf, 0x10, 0x0, "eee6a1e6c6ab0887ec76803ba78a987da0065614485bcf39ccfe2a02fc6f197eb1a9eed40739e57c83c13252fce7c21c597c634b026a495ab73c1e04f602c9c99c62e7fc9d1b19e92c098681dd8f23ce33bc1a72c7b4c3ae806d29442c74b6ba52048a163aefbee47d1809b8905365af1b0309b8c65ad31cfa0bfb5780338328141f65bb037a5204c8990d3f3ed2b488ee722309bb7b726204ab7cd4d573cbe14735693545f5e423b0580978"}, @wireless={0xb, 0x10, 0x1, 0x6, 0x40, 0x62, 0x0, 0x87, 0x5}, @generic={0xfa, 0x10, 0x9, "d82bdb334a51afa1ee627316b77d92e746824f592b64295c13dc6b95a267e763b924e0ae2820135c19afab291678a73b29ffc5075b79df968d1ee183a3a2bd421ea62f8d326c594d3e4907665baed0815e9fb4f500c79dab7316acafe46212fecbe06cce82c29c40006ca8b6606c75c9a8b7265538cfe21b2fb93ed9a9849df3ea72b31a7ecc346b53906016741c11e8435908b92eae0e24fa091aabd51ffb6894d5e8735a0235afc2d5840f62274360c104946e00c2ac7e2306279989d135a57a70f24f316133b1036f8fc813690246980ca9ebbf01a87f0ad3549e8ec789a69287022aa16ac3c8ab1af7652dc4a88e194bfc55a00154"}]}, 0x5, [{0x4a, &(0x7f0000000340)=@string={0x4a, 0x3, "11052a32169d4c6448bb58874b8ec3ff0a3fda72e7cd4328d8a1868072f98e11911a24d622941cd827034f0cb4f8405e2a897ad447709f10a51f41f829417ffc91e35fc5a128f99a"}}, {0xf6, &(0x7f00000003c0)=@string={0xf6, 0x3, "c2f9689eb01feb4ec2b549c763c77a18dc3b92ead12bacb092ebe60bd4a2d8948de3c49a968648d9a9d368584503fd43ca98e949bdb681be2577f1f35362d2de8b4938f0839758a42dd0ef36dbb11e315316adb992d76813538cb4c0f64db20426c4d3b70ebd1b9884aebf157ce083133fe6a4b8cb7d990b1585b214db2907d9f3d9c17a9d14e87094395470683b1ac404681eaacc1d22c9a06b29a3f7bb5929b38dfb68bdf3838c21e58ccbc3afa9029a5fa2e6d750cd640a8bae01011cd52aeb0d2a71347b3b6f27fbc0fcbc523476f3019b24b0fafd5684fdd11f1407520f34db37a0e27b6713d2a0a8515a6b93dd07daf1c6"}}, {0x72, &(0x7f00000004c0)=@string={0x72, 0x3, "a026d8cd2eb9259319748f43ad329a16c4c692b00a99df9005a3b9987de104c4799de893181369697b4f524a686312f233e244116ffeffec71f87967017ee902fd89819078585f16f376c2ffc265f2aabdea7f4d6c32f95ffc6cccdb9240d9774b5d5d21a234fe5d7a5a7c08676258c6"}}, {0x81, &(0x7f0000000540)=@string={0x81, 0x3, "8793f8261bd273b81921bbe679f07d42d71921837fe89d0524414642c23cdaeae4bd45369231b36afe3b07d2e34753d33c9ca66d55647e93c7dd056522a925585205df5432cd38d188b95c17620a58e6cdf95f6cd81f6f050d1bb18f689ef9aec4ae9bf93112a6b3426a20b6e0194af25ef00337e582caae8eb34095622ee8"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x860}}]}) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xbb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x0, 0x68, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x3, 0xe, {0x9, 0x21, 0x8, 0x8, 0x1, {0x22, 0x321}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x70, 0xc}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x0, 0x3, 0x7}}]}}}]}}]}}, &(0x7f0000001f40)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x250, 0x4, 0x7a, 0x75, 0xff, 0x5}, 0xfe, &(0x7f00000007c0)={0x5, 0xf, 0xfe, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x6d, 0x2, 0x3ff, 0xf, 0x360, [0x0, 0xff000f]}, @generic={0xc3, 0x10, 0x3, "d677049bdba4f3584a6ac8e1d44e6afee7b621867d38ee5a65678f8f32aacb5f12fe885fff42083915293dd45286c82aeb57adb2460746cdf6ab8254574d987f83476e882863f8ef3b72c11aa4eb5162de68f4bfad50bd5639019c604715993c4ca6b477dbcf2b9200f3216482b84853000b8674c3f6a460748cf1af9e2a24d88bbe9e674a8accd04263f7eee8d58c86f082fc7dc9e9e902ef0697921d031ac0865d8b7fcffdbdfd4308c64fd4e60a6c1e97f473d2169f8a27e425e52bcf1908"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0xa1, 0x5, 0x1, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xc8, "e79511cef5015a21df1891d4c2394b13"}]}, 0x5, [{0x77, &(0x7f0000000900)=@string={0x77, 0x3, "fff9eb2eedff8440d3f2985dc99502d6d7e0b2ebd4c5ffd65edc672fe9d28ccfbc3bec7b8e968862c0415f0a314ad62738ebdb5ad5948963227b6b2e44c4d6324b16e9412374db3054b626036eff48caa2330577fbc1b7c1dd3eb15d5155994f3e9a87aea83e73cae452d72434044596fd0061af45"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x401}}, {0xe3, &(0x7f0000001e00)=@string={0xe3, 0x3, "b84a3da27c34a49d321c544e2fed83e4e2bc5fe35f05a08f7c728d211dcd6a0c8b300124652b0876f4438929ef31e71f8d673f1d43f6c97d6d0dd5bf94f72575c64a239a5ae8fd3fe25ea831b3bf71d1bc5f8221ecf32a5f2fa995e48d3976c3c28c342e84e06d9cdab23f797e89cc7042691affa8c6a764812e73c453da8630f7e7655a15b16f3a315257ddf930b032621aa5844277db620d6c6d73ccc38a82835694ad8e8bd537a1db9ee58a2fe6847cd02f88dcf850bd389d3a68de729908c2dbc31390cfb220ff5244f7cad62c2c7af7b8c84fd89b88db6bc08760f16280fe"}}, {0xc, &(0x7f0000000a00)=@string={0xc, 0x3, "0db110eaf4952fc57a88"}}, {0x4, &(0x7f0000001f00)=@lang_id={0x4, 0x3, 0x3c01}}]}) setpgid(0xffffffffffffffff, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000002d00)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x741, @loopback, 0x401}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=[@hoplimit_2292={{0x18, 0x29, 0x8, 0x6}}], 0x18}}], 0x1, 0x8004) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x2133, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xffd, 0x3, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xd, 0x1, 0xfc}}}}}]}}]}}, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') syz_usb_control_io$hid(r4, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "13a29094"}]}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 3.892303449s ago: executing program 3 (id=3782): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x18, 0x3c, 0x107, 0xfffffffc, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x88c4}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x1802, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000040)=[{r1, 0x1}], 0x1, 0x0, 0x0, 0x0) 3.707430014s ago: executing program 2 (id=3783): r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0xd, 0x0, 0x3631564e, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009a02"]) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x4827, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0xfffffffe, 0x28e, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x1, 0x9a2, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d024ecbbbc8e0a81b892000000010902900902000000000904eaab0d4ec3c0402b569e3b986f5ef38f83d4539b31639f9c835cf53f54f12d5eb760bd86dcb91763d562f0ad6038972382d3e9766795145956dfbda6d02f1f61b75e61bf7d8f966c1d4245028c5a35e614", @ANYRES32=r5], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x101, 0x2000) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f0000000140)=[0x9, 0x5]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x78881000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r10, 0xc0984124, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r11 = openat(r10, &(0x7f0000000040)='./file0\x00', 0x28dc1, 0x0) flock(r11, 0x5) pread64(r11, &(0x7f00000002c0)=""/173, 0xad, 0x2) r12 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r12) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r8, @ANYRESHEX=r13, @ANYBLOB="2cf26f6f746d6fc7d33d30300000008000000000303030303030303130303030302c757365725f69643d", @ANYRES16=r3, @ANYRESHEX, @ANYBLOB="07b743b6aa39cde53451aa3e7b072079b5b3dce45e43f01b05edac053b1ddc4ef81636312f4269d69aef142a9f12ad46e86122d39c5bd43a52337f1a804d00000000a0d100d3b7b4ccdd9199cee12f51b02ab757c2ffe607e557dbc4997907a25dfe1573b99e65d4f1e4b1a53d8d72bb7a8a33a47153c2dcd2ec47d98cbd1a01c4cf7267f45c466ca4494a48fb4280cc046fbf50b2daecea1df0a440727dc8a8e7947b2b6f1f83688193cc690cd9d3940eb23eb535a7648d2431e167018d53", @ANYRESHEX=r0, @ANYRESOCT=r5]) 2.889460303s ago: executing program 3 (id=3785): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709000000000100000001000000082009000200000014001f00000000000000000000000000000000011400180000000000000000000000ffffac1414bb0500070000000000060002000100000008000a0304000000"], 0x5c}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x9, 0x1, 0xff, 0x5, 0x4, 0x0, 0x5, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0xffffffffffff0001, 0x180, 0xc, 0x0, 0xf1, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x2, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.219149677s ago: executing program 2 (id=3786): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f5070000000900010073797a300000000050030000090a030000000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d04001280080003400000011008000c400000edd8f80209806000028004"], 0x398}}, 0x0) 1.982161955s ago: executing program 2 (id=3787): openat$dsp(0xffffffffffffff9c, 0x0, 0x101a03, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r3, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xe}) 1.950569597s ago: executing program 4 (id=3788): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @vsock={0x28, 0x0, 0x2711, @my=0x0}, @llc={0x1a, 0x303, 0x5, 0x6, 0x7, 0x0, @random="bef4e4d17f05"}, @l2tp={0x2, 0x0, @multicast2, 0x2}, 0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='macvlan0\x00', 0x1, 0x7f, 0x4}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2842, 0x0) close(0x3) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000001180)="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", 0xcd3}], 0x1) 1.890783331s ago: executing program 3 (id=3789): syz_emit_ethernet(0x66, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60b81923003000f02d5ecd000000000000000000000000aafe8000000000000000000000000011aa89"], 0x0) 1.747779828s ago: executing program 4 (id=3790): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1003f00}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}) 1.744689272s ago: executing program 3 (id=3791): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x75, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x4200, @private1, 0x7ffffffc}], 0x1c) r5 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r5, r5, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000b, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x20, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) 1.670303835s ago: executing program 0 (id=3792): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0xd, 0x0, 0x3631564e, 0x5, 0x0, 0x0, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0xffffffff, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="140023002100000000000085740011150000860200000000"], 0x18}}], 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x8b, 0x100000500) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000022000", @ANYRES32=r7, @ANYBLOB="0000000000000001b702000014000020b70300000010000085000000d4000000bf09000000ffffffe5090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0xa, 0xfed, &(0x7f0000001e40)=""/4077, 0x40f00, 0x0, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r7, 0xc0984124, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r10, 0x5) r11 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r11, 0x2) 1.657867877s ago: executing program 4 (id=3793): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/205, 0xcd}, 0x9}], 0x1, 0x23, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xe, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef7, 0x0, 0x18, 0x3}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x3}, 0x4048000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) io_setup(0x222, &(0x7f0000000180)=0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) io_submit(r4, 0x2, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6417, r5, &(0x7f00000000c0)='\x00', 0x1, 0x10, 0x0, 0x2}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x1, r5, 0x0, 0x0, 0x1}]) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0xc6}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 931.892771ms ago: executing program 2 (id=3794): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x48}}, 0x2400c080) 931.693181ms ago: executing program 1 (id=3795): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xabba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x5, 0xffff0000, 0x7ffffcff}, {0x1000000}, 0x1, 0x3f0, 0x0, 0xd613, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, 0x4}) 618.937731ms ago: executing program 1 (id=3796): r0 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff0000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000300)={0x0, 0x7, 0x0, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000780)=[{}, {}], 0x7, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f00000005c0)}) (async) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6f) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000001c0)) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x20000003, 0x8d, 0xce, 0x1c, 0x89, 0xfb, 0x7, 0x8, 0x0, 0xe56, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3ff}) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x81, &(0x7f0000000200)) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x30}}, 0x4004084) (async) landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) 560.513833ms ago: executing program 2 (id=3797): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') sendmsg$inet6(r2, &(0x7f0000000700)={&(0x7f0000000180)={0xa, 0x4e21, 0x4027, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000300)="eee632714b55dd89f8efc26ccb7339566fcf9173261c354d03fdd8bcad2a8182729bc92e37c9fe6498bae727abe8e858c0471600f4ed6caf68db2e277b6c84874440e7a41c", 0x45}, {&(0x7f0000000380)="0ab5e2c04bad0509936e27ebf664ef5b657d15e153b46ecafdb6c7e3763f2c53afd67ec0557468696d6899a8c82d15cdae761a504e79fd3a032b0f3c492c24cfafcb4e6fcb8faffcee571a1b730318d43a50469244705545039141a780c239543fb05f48bd1f732014e40bf5062642548ae625a2f6696072bb70de2838b955048ca1b45c18ad5e55f3c5b069a68cf42752e95bc4eb54c20b", 0x98}, {&(0x7f0000000540)="7de8404f7816b9569c70ba977f52fd7ee43242652a88ca5d60b4271329290fb50483903f8b81a7f5c01808ae15aabf8d0fa9a1bc7d8b50f479af5f86d0aecfc4cbadfc052d2042b87fe2a4cae6dcfd2cafe5a35b7cc04ad956c5c6250ed7df9ea97fed63b561f9e69ec66339e1c6adf5a0e9d02e63618410d0c040056229f9b613d8d1abb230c14ae5ce", 0x8a}], 0x3}, 0x4085) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000000)="52b52723e06c987242dafb8696010550e155755ac81ec64496b10b22ae97d3032772f28d7eb2138f627444f9e281b4ac3a03", &(0x7f0000000140)="a381e5b2fb565285333e274ccb90099533bf64c89a49d9e289ba3100000000", 0x800, r5}, 0x32) (fail_nth: 19) 511.745312ms ago: executing program 4 (id=3798): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000a5ce05400000000d08000640ffffff00080003400000000c2c0000000b0a0101000000000000000007000000090002f772797a31000000000900010073797a300600"], 0xc0}}, 0x0) 511.416164ms ago: executing program 0 (id=3799): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'pimreg1\x00'}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unshare(0x20000400) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x11, 0x0, &(0x7f0000000340)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x402001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, 0x94) r5 = syz_io_uring_setup(0x3b93, &(0x7f0000000380)={0x0, 0x807734, 0x400, 0x0, 0x101}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x36, 0x0, 0x0, 0x202}]}, 0x10) mprotect(&(0x7f00004a7000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xa, 0x2, 0x8b, 0xffffffff, 0x4}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder-control\x00', 0x2, 0x0) move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 336.115918ms ago: executing program 0 (id=3800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @local}, 0x0, 0x2, 0x2}}, 0x2e) (async) r2 = socket$inet6(0xa, 0x1, 0x80000000) bind$inet6(r2, 0x0, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x78, &(0x7f00002a0000/0x1000)=nil, 0x2) (async) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r3, &(0x7f0000000100)={0x0, 0x80000010, 0x1}) (async) mq_notify(r3, &(0x7f0000000180)={0x0, 0x2e, 0x0, @thr={0x0, 0x0}}) (async) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) (async) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) fsopen(&(0x7f0000000300)='tmpfs\x00', 0x0) 232.836471ms ago: executing program 4 (id=3801): syz_emit_ethernet(0x66, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60b81923003000f02d5ecd000000000000000000000000aafe800000000000000000000000003aaa89"], 0x0) 0s ago: executing program 4 (id=3802): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e20, @empty}, 0x261, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4007, 0x0, 0xfffc}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_connect(0x3, 0x11d4, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0xd0, 0xa, 0x2b, 0x10, 0x2c4e, 0x100, 0x6a7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11c2, 0x4, 0x81, 0x5, 0xa0, 0x8, [{{0x9, 0x4, 0x9e, 0x50, 0x10, 0xff, 0xff, 0xff, 0x7, [@hid_hid={0x9, 0x21, 0x9, 0xc2, 0x1, {0x22, 0x8f9}}], [{{0x9, 0x5, 0x80, 0x2, 0x228, 0xb, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x3}]}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0x4, 0xd, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0xc, 0xfffb}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x67, 0x6}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0xd, 0xe6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x6}]}}, {{0x9, 0x5, 0x9, 0x2, 0x0, 0xb, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x3, 0xd, 0x8f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x98}, @generic={0xf, 0x1, "01512f1ce847dbf9839eb2376b"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x5, 0x3, 0x4, [@generic={0x60, 0x4, "74f2b486594a5eaf8c472f4412e759dfb15cf137b75d14fc6be5c0ba9f14f1add430150cd652f772e29bf6e846fb46491170fb16e182e0219f3e747503be8ead991e36326a9c1c577c0a5be448fed7bfe1e6307dae56a2f26efb5a0f4212"}]}}, {{0x9, 0x5, 0x3, 0xe4b359d91f34eb45, 0x200, 0x7, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x81, 0x3ff}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x80, 0xc, 0xf, [@generic={0xc9, 0x0, "9777e5b73bb8b9fd3d676195db8f4a8b49a7423d6eb4bcfe82cf47c6d153dcd614c4fb42ed4413649884988a364a1e7b80bb05e62409efe49b07bd055a075f3d04108eaea5bc57ce781b091a58da5be89ddbd270ce6e22e60e7e1a111b2a2fa9bd85e83c8e1857625632c8eb184895ec84cf5cc27142edc64e391e1990ee30563f598f1d05ea7e773dba1581f9bcc9e644cc4cba8519592ced97c1068415baa59a296373dff91f89547e1d6758aa4b07bdb80d6d85daac14a42e5b15ce9bfd57ce8ad64e3240b4"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x400, 0x86, 0xff, 0x40, [@generic={0x2d, 0xb, "a0db1f6baff7d86d2ecbe1052c6ceff4b568f20ef011397b9472c85dc01b31d55a09111a6cb62a14341091"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x3, 0x3, 0x0, [@generic={0xd3, 0x3, "340fa28f8ad0163f9f5931e9df40c5f492bef510b32bf6f713576f8f235c85f0d8c8ee5c808f7cdce1f8baa893c4146dc29f4d62ce3e01c61d9af181ac9d284ae71ba0b8a49e6bc68b7886a5b07c273702bc51488038b474115cb9bacb63f24274e258a988ecb4d59faec58f8f7a77c941ffe58813002729639c3bd8fc18b59c83be1acd09d96a9b66b3b81f09eafeb0092e21824830cd369d9060b040f757591d83529bc2d2d01bb09d1da4411971dd1ebdaedcbb8b8cc3f01d765cd533bec9834f31c25e1df3327d71ddb84516d69ccd"}, @generic={0x4b, 0x2, "4330f3c9caa07d2459018acbf61ecf1c77dddbe19e796fdf359f85a9fb9a66fc1f3ee1953dab1ca4927fd1c3fc28624822c45bec2ce7bf7cf174d71a416a262daa2ee28c0aa4ac4b6b"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x10, 0x5, 0x34, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x7}, @generic={0xe5, 0xe, "ffb8db653b124bffed3d8f82ec2d65d413a5bedae04fb4c878f70e9ae41ec8d6aabaaa2087c6e721172b578a7f966526f044aea121531bdc3f4cc731e9a0d1d1b0f81a54f062be3e8733ae457457a6e2a9fcc13d9deacf0c21dc2cfc08485f242957d41777482022bcb5aa15176f3adeb4807ec5863b5c9f4738ca07d6abcdf386e0142d6b58631ca0c95d8a21392248cd254ad2c2856cd30fca949be9e18b9e22c3622feda10387f1474274fd2f11ec3d9425debcb4a95a147cffae9da50255ce38177ac4de3ad8d0b56c094ae39f2a425f7f88ec9d24106276801903c6702ad8a189"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x0, 0x4, 0x7, 0x0, [@generic={0x98, 0xc, "b36d32ab58f2ed2ca9937d15ccc5ad6d243022fe2ae434a2d95cbc8930989697a3cfac3458f4d3f0939ec65b9bbe276dbfd428b56019f17524701711c4198f95bcc20bc07baa1252aa6f45824dd82f1c1141ab3e763ba8c0a12e1171459c3f3620f69357f9d5b1cbabced8ee9fa12115165cd13423e3de0db1534836f76a1d0284a0096578b2d331ba8fcad7dd84911d5b8cdaac4c6d"}, @generic={0x3f, 0x23, "7f685614212ea5dfe545390786ccb894a081ed9c7dbf127d0a3391738be71ffb5da82dee76077807ae7c207b5d476ba5d5e407924cc38111723b33acc9"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x40, 0x3, 0x8, [@generic={0x57, 0x34, "28bc8e141c9b2daf9cccca086e14b9abc0faa73a78c8dc6e6a0ed7691d9261283bd7aacf18aefb776aa56f32a1d31f3f423ca9a9f45a6478c9b27e511657ecd00880bd5a38de4ae86e08fa74e6e0fb443a293d6a2f"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x6, 0xe, 0x1e, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf7, 0x9}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x21, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xb4, 0x4903}, @generic={0xa8, 0x4, "8dbe40420e8527ed6ee32880d2403d6aaeec8cdf9c947455f4978cb94514cebf602a13ff00ea2e9ac0b75004e56a0ca16d261850404f39a50febddb664abb45b4fa08a31617baf685daca23f3652f35774fe6509d515eb0d3efb0a3f8394d79dd93fe4ea27da2f8dbc3ac9c5d617950a862743ca3df87aee44674cacb0f2185efa98850f1b5fcb385de303317071c76a89a2db5c35a40763f6c809e797619b525b6b7db0a998"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x100, 0x6, 0xbd, 0x3, [@generic={0xfa, 0x2b, "87bb53a36333a92f9f388313e77d1a18bc9d87bc6687cb5145a2c2749a42e21e52ca4475eb0249aa84a04684eeef05711373c814f2c54b68ba9d2ecd1716fa5a8ddab7165eb933bc0b219b29efee0609f94439f1b467784cf185d3068a6080a42283d2c2c58d2fe73a5f92992b62c8a739ad82f70cb0c95177243de53f1af60fd74409c1b574ac6e5c88d622f3e643a3e43737fcc41a5ef0463074fdcadb95f394d4d11c2837d5ed3bab62e7a56c2c4c641a8167a8a2869f92458d0df51a266ea664a3b8c00eb6c3b1220f2978c1c679541ac62a53d2cb0a677cb4c7eaa974bd6f559ad754f0117cea7aabdce27d7d9280a206eaba8c31be"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x5}]}}]}}, {{0x9, 0x4, 0xce, 0xd3, 0x10, 0x4d, 0x9a, 0x88, 0x2, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "3015"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xa47, 0x7, 0x3}, {0x6, 0x24, 0x1a, 0x4, 0x23}, [@acm={0x4}]}, @uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x2, 0x4, 0x81, 0xb, "a91e441c"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x9, 0x5, 0x2, "a7d5"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5, 0x4, 0x2, 0x6, "d6b1", "f1f3e5"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x6c, 0x8, 0x2e, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf, 0x5}]}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x40, 0x2, [@generic={0xab, 0xe, "0597a3704385f1f40e53ead846f649bfaef062eaf3ef1b8c8838caa22a01cc946b8375d384f34d1f7e2a832d78882a7ec35646f92c64d7e3fd5b6224c194582c014aa1da177eb161a590ac2421b86da23c5c3f654bb6756ca43a59e8b6d0a7ba7ee923a7e327077bb912a15eb0786eefa2330b2d5ab67f7ed3c835b15894e7528479bf8e8734af63821818e9090b874e9b46848927f487ddc01a3935c95ce7a9b7c777ec95156907a6"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x4, 0x2, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x1}, @generic={0x26, 0x30, "e3c2557ddc99e3058113cc84f9bff1aa79698fc5387603c767a72f4717e0ce3d22a7bc90"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x7, 0x7, 0x6c, [@generic={0x90, 0x6, "a76244b563dc29dc1e157b78704d01f2650596530938b6b4ec8aec9e250e9f15fa1b9c505226b6aafc52fe9d73060f7623739b5abc4b18f6d1c7782cfa0f4f0b88d409fc6706248afec8be257b726dc5046fd776d6a8381f4c663b64d5a46bac72b087c4d24836caf499d1059a1df3b6849437dcdcfd0a311f2834fc10e5797d610ddc5bafde7fc43ac166378a7d"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x40, 0x73, 0x7f, 0x0, [@generic={0xae, 0x8, "daa75494ff6be9ce8cc93a652143af0dd47efd60c94dfc7e6c617647701a0d6b25941407e0a013147885a086df8b43bb0312fb5d4c2c1f36fe1b8bc7e90b05f0c248c32d85bbd6aa8615a2ca143e7f99669a4bf20e8247c9057f13e4049251d646171c0d187d55fbc44030afdb2cb7171bdb6b450434177752fb1567a9aea7235fed1a87261d5df942faa361913432a84e8bca5d29a9f145f1b9518e56a05ad6b0a777e5ffbb1c9e97114a93"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x8, 0x7, 0xc0, [@generic={0xe9, 0xd, "3595e17ce520ae256f74314713a248198971989510640dd4cf7a8a21c1aad5ed1f08bf1bf8c57cec2bdafe134546c61b5b31922c821d3875338210dc1a68e31e54368ffe4cc7e3d563a232410cf4480a0a236be2e0546efc6b9b6da61f47b49c11e07e28d2599f8b17cef9ef02e5b1e7e6789218c639c06691880363f4f77a4a6ea50b18aa6254bab008286e4e0dfd7143e004dbb846f84a916d26432c1b731f1368bed89d3976ab578fcf0afbdb16d4cb332eeb61828c8161ea9bcd860bd45e060d60170fbfb734a1a53f58c46e5e0fc7640643ce77abe3aaf64fa5988e560fc33b94150b0d5b"}, @generic={0x14, 0x21, "df694b5deb39da5fb21a7dcf90b228857ff3"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x3df, 0x4, 0x8e, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x568dd6aa5872369, 0x7f, 0x9}, @generic={0xbf, 0x7, "71c012daef4351f83a84668f3d6796b6d6405f6b8bf9e7a858159dc689c95430ff30fcc3e8c7cd4133b0919ce388c933080e894f475b0e2874db54cae530fe45dac691279d3437d7f1c35f68cdb2454fef90e2510edd8254f2c33a0b849331e083ea6d49b1fe1bd1f04040ce28b4c565ab07b5975d398798b328709f78b04dee30f816af953f9619e7c6907b1781b88a9cecb284d98cfb97a6ca3ae6d3e56a3e49437053964407c5aa125715c51540b063bddb5338e9649d26df48ac93"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x1, 0xd3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7ff}]}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0x7, 0x3a, 0x2, [@generic={0x30, 0x22, "c367a7b6ef4679647de3c74ed8e88cb35ae9acbae00194c01c3d399282e737efc3a43178106630e156b2cb45a101"}]}}, {{0x9, 0x5, 0xa, 0x6, 0x20, 0xd, 0xa, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0xba, 0x3}, @generic={0xf9, 0xe, "df12d59979325042f9183c65bd2ae7199447277d9279df56b5d8e74913a050a67c53d66a3db1e3e54927a01a4671b1be6194b54ba5aeed0f5cbe5fd21d8a01086fab087805e5b7e6e60a0c60b042d35e64de728f25e9c0f3e3acd2b29d49fd6b8413b752f2cc258a498e561b9095cfbf3d6524f66d24d329f45bcd46767c2106319e8956c6a4f3e1b913b9ec1a782cfa334608df265c1bb88773a4284137386818ccf857714580145890e886f3277e9d67bb27861a90408ad975ab19a3f1d996cd419947465fc8b057d0aaa319b0e22454dbbd2be60af8ad6349958eea32b3c91ac05c8a1770132d491cbbfdb8316cf8f6a09a54ec2847"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x3, 0x2, 0x5, [@generic={0xcf, 0x3, "162b4f52854dcc1e1840f2e2ac09fa28d7daf6f15e84ffa7c82d77bc68787a082405b4bb63bd7c66a68ce57c16c421230bd9d3215e41f643bca17585309734f83d58c6f1699efbf85955b664d8749b376f9f50ced6f77faa5d1d2cb3f86fb3cca05f00e96603452ace09c439993f340c300451d059ef963baf360f518742c2342bb57d02f497f738c4b4b7be3a09d925525826b077c264b16465eccf5737d37b3efdeef686b296c44616760df07476f4d9951193221060cca9251d0b8137aa3875352d37524dcab6bc5b65b70c"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x20, 0x8, 0x7, 0x9, [@generic={0xf0, 0x23, "3d9a3d90df462262ed081b28f9f70586784d70d66412781a6b7d6b1a8d998f217def0526c0e99e5f289c31d368b23072fad747f3ab5180d5324aeffe8fd0e20f8bda322dfa5dc6a25b01ae069fae7652252587a701711790bceef1b87e48d399b66740df85b0c5788ad2350d19b05ce54a0ff0f64a29ceeae70f0012fc200fce131211bf4afbb990d07df7d396589f072aba065a3f04f80e4195edf537914f22e46d89dc66d20a865eae74aaa1e6dc8cc39b5692358a79b7a3318b7618e58eef0bd3cdad33ecd78d316beaa0014c41bd6b55b717c5c099b7934d19fec595f09752ee62276b9856aadc19761e3f7f"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x6, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x1}]}}, {{0x9, 0x5, 0xc, 0x2, 0x20, 0x2e, 0x1, 0x8, [@generic={0xbb, 0x1, "7798af5e1d846e2d2b2b4340e94bebd5c25b923a4eb6684bd40b54476e06980378e2fab5af8c793092b08f7cd7eeac61048aeb282a76a6eac505bac52d51cfdeb97cb4e21614d834c041014e7b49d197175fcc688b762933d3c7cd757cc6615f1cb5fa0e97b77baae0fddc659c3648b4afb71a1e8c6b8a8c7baa5ff27a61ca63dc14134c1f3d1d4b2b136a2c8ab535d7d4d0e584e6cbb22e4e0bbd33b17817a597f5a583df365872c2bc2610075bfc49eda39ea14187c91b4d"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x2, 0x5c, 0x4, [@generic={0x47, 0x23, "c3aec30fedfb544e76bf7efb9907ee9fc296e4beed8890c65953022a0217dfcd6082e2f5f68cff662e82b8eee42c55add19c11c0bf867adee1aa1819fc13d69f3db1cda009"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x53, 0x8, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x10, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x1ff}]}}]}}, {{0x9, 0x4, 0x94, 0x1, 0x2, 0xe5, 0x63, 0xf3, 0x1, [@hid_hid={0x9, 0x21, 0x6, 0x1, 0x1, {0x22, 0x5e9}}], [{{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x1, 0x2, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7b, 0x6}]}}, {{0x9, 0x5, 0x6, 0x1, 0x20, 0x81, 0xa9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xc, 0x9}]}}]}}, {{0x9, 0x4, 0xf7, 0x2, 0x8, 0xb6, 0x7a, 0x30, 0xc, [@hid_hid={0x9, 0x21, 0xc, 0x4, 0x1, {0x22, 0xc4c}}], [{{0x9, 0x5, 0x3, 0x2, 0xae2452d8a5663dae, 0x9, 0x9f, 0xc, [@generic={0x45, 0x6, "42ac11a1b95ac0634d63ce6c45e29f5b816b25353e9c515fe57bcc8215cb8e8fca990f0d4bca46ae82b636731e93d2eaf43841d6b1e4a95c6a85fe28efb77cb33c6d58"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x0, 0x9, 0x1, 0x5, [@generic={0x41, 0x21, "1c2658e8c927b9f42cc444dc1f5eb7b550d07b9c7491d0a71c2aeab64df838c26fb21d7181b86fb24034140bc2cfae63317ac183b7bee254c66225744b06a6"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x0, 0x3, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xff}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x9, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x64, 0x7f}, @generic={0x67, 0x6, "97dbf538f25176aa502d203827bc9fd75374cbd69af53a33088c54a730259572293181e86b997d2207897fc8a9bdecdd080a811e2cd0beda0e75dbde83387482d6a98a374e2bf259b6596ffcf9fa8624e70467636258bc6592618547fd10e3e1cd6d679349"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x66, 0xd1, 0xb}}, {{0x9, 0x5, 0x3, 0xc, 0x200, 0x7, 0x1, 0x7, [@generic={0x14, 0x22, "3444019e0e8fea3f81a5f3cb64853c621929"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x10, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x82e8}]}}, {{0x9, 0x5, 0x2, 0x10, 0x697, 0x4, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x9a, 0x5}]}}]}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0xd, 0x1, 0x80, 0x30, 0x9}, 0x1bc, &(0x7f0000000180)={0x5, 0xf, 0x1bc, 0x4, [@ptm_cap={0x3}, @generic={0xaf, 0x10, 0x0, "eee6a1e6c6ab0887ec76803ba78a987da0065614485bcf39ccfe2a02fc6f197eb1a9eed40739e57c83c13252fce7c21c597c634b026a495ab73c1e04f602c9c99c62e7fc9d1b19e92c098681dd8f23ce33bc1a72c7b4c3ae806d29442c74b6ba52048a163aefbee47d1809b8905365af1b0309b8c65ad31cfa0bfb5780338328141f65bb037a5204c8990d3f3ed2b488ee722309bb7b726204ab7cd4d573cbe14735693545f5e423b0580978"}, @wireless={0xb, 0x10, 0x1, 0x6, 0x40, 0x62, 0x0, 0x87, 0x5}, @generic={0xfa, 0x10, 0x9, "d82bdb334a51afa1ee627316b77d92e746824f592b64295c13dc6b95a267e763b924e0ae2820135c19afab291678a73b29ffc5075b79df968d1ee183a3a2bd421ea62f8d326c594d3e4907665baed0815e9fb4f500c79dab7316acafe46212fecbe06cce82c29c40006ca8b6606c75c9a8b7265538cfe21b2fb93ed9a9849df3ea72b31a7ecc346b53906016741c11e8435908b92eae0e24fa091aabd51ffb6894d5e8735a0235afc2d5840f62274360c104946e00c2ac7e2306279989d135a57a70f24f316133b1036f8fc813690246980ca9ebbf01a87f0ad3549e8ec789a69287022aa16ac3c8ab1af7652dc4a88e194bfc55a00154"}]}, 0x5, [{0x4a, &(0x7f0000000340)=@string={0x4a, 0x3, "11052a32169d4c6448bb58874b8ec3ff0a3fda72e7cd4328d8a1868072f98e11911a24d622941cd827034f0cb4f8405e2a897ad447709f10a51f41f829417ffc91e35fc5a128f99a"}}, {0xf6, &(0x7f00000003c0)=@string={0xf6, 0x3, "c2f9689eb01feb4ec2b549c763c77a18dc3b92ead12bacb092ebe60bd4a2d8948de3c49a968648d9a9d368584503fd43ca98e949bdb681be2577f1f35362d2de8b4938f0839758a42dd0ef36dbb11e315316adb992d76813538cb4c0f64db20426c4d3b70ebd1b9884aebf157ce083133fe6a4b8cb7d990b1585b214db2907d9f3d9c17a9d14e87094395470683b1ac404681eaacc1d22c9a06b29a3f7bb5929b38dfb68bdf3838c21e58ccbc3afa9029a5fa2e6d750cd640a8bae01011cd52aeb0d2a71347b3b6f27fbc0fcbc523476f3019b24b0fafd5684fdd11f1407520f34db37a0e27b6713d2a0a8515a6b93dd07daf1c6"}}, {0x72, &(0x7f00000004c0)=@string={0x72, 0x3, "a026d8cd2eb9259319748f43ad329a16c4c692b00a99df9005a3b9987de104c4799de893181369697b4f524a686312f233e244116ffeffec71f87967017ee902fd89819078585f16f376c2ffc265f2aabdea7f4d6c32f95ffc6cccdb9240d9774b5d5d21a234fe5d7a5a7c08676258c6"}}, {0x81, &(0x7f0000000540)=@string={0x81, 0x3, "8793f8261bd273b81921bbe679f07d42d71921837fe89d0524414642c23cdaeae4bd45369231b36afe3b07d2e34753d33c9ca66d55647e93c7dd056522a925585205df5432cd38d188b95c17620a58e6cdf95f6cd81f6f050d1bb18f689ef9aec4ae9bf93112a6b3426a20b6e0194af25ef00337e582caae8eb34095622ee8"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x860}}]}) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xbb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x0, 0x68, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x3, 0xe, {0x9, 0x21, 0x8, 0x8, 0x1, {0x22, 0x321}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x70, 0xc}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x0, 0x3, 0x7}}]}}}]}}]}}, &(0x7f0000001f40)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x250, 0x4, 0x7a, 0x75, 0xff, 0x5}, 0xfe, &(0x7f00000007c0)={0x5, 0xf, 0xfe, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x6d, 0x2, 0x3ff, 0xf, 0x360, [0x0, 0xff000f]}, @generic={0xc3, 0x10, 0x3, "d677049bdba4f3584a6ac8e1d44e6afee7b621867d38ee5a65678f8f32aacb5f12fe885fff42083915293dd45286c82aeb57adb2460746cdf6ab8254574d987f83476e882863f8ef3b72c11aa4eb5162de68f4bfad50bd5639019c604715993c4ca6b477dbcf2b9200f3216482b84853000b8674c3f6a460748cf1af9e2a24d88bbe9e674a8accd04263f7eee8d58c86f082fc7dc9e9e902ef0697921d031ac0865d8b7fcffdbdfd4308c64fd4e60a6c1e97f473d2169f8a27e425e52bcf1908"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0xa1, 0x5, 0x1, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xc8, "e79511cef5015a21df1891d4c2394b13"}]}, 0x5, [{0x77, &(0x7f0000000900)=@string={0x77, 0x3, "fff9eb2eedff8440d3f2985dc99502d6d7e0b2ebd4c5ffd65edc672fe9d28ccfbc3bec7b8e968862c0415f0a314ad62738ebdb5ad5948963227b6b2e44c4d6324b16e9412374db3054b626036eff48caa2330577fbc1b7c1dd3eb15d5155994f3e9a87aea83e73cae452d72434044596fd0061af45"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x401}}, {0xe3, &(0x7f0000001e00)=@string={0xe3, 0x3, "b84a3da27c34a49d321c544e2fed83e4e2bc5fe35f05a08f7c728d211dcd6a0c8b300124652b0876f4438929ef31e71f8d673f1d43f6c97d6d0dd5bf94f72575c64a239a5ae8fd3fe25ea831b3bf71d1bc5f8221ecf32a5f2fa995e48d3976c3c28c342e84e06d9cdab23f797e89cc7042691affa8c6a764812e73c453da8630f7e7655a15b16f3a315257ddf930b032621aa5844277db620d6c6d73ccc38a82835694ad8e8bd537a1db9ee58a2fe6847cd02f88dcf850bd389d3a68de729908c2dbc31390cfb220ff5244f7cad62c2c7af7b8c84fd89b88db6bc08760f16280fe"}}, {0xc, &(0x7f0000000a00)=@string={0xc, 0x3, "0db110eaf4952fc57a88"}}, {0x4, &(0x7f0000001f00)=@lang_id={0x4, 0x3, 0x3c01}}]}) setpgid(0xffffffffffffffff, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000002d00)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x741, @loopback, 0x401}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=[@hoplimit_2292={{0x18, 0x29, 0x8, 0x6}}], 0x18}}], 0x1, 0x8004) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x2133, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xffd, 0x3, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xd, 0x1, 0xfc}}}}}]}}]}}, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') syz_usb_control_io$hid(r4, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "13a29094"}]}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): g backup interface [ 866.318747][ T2999] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 866.350628][ T2999] bond0 (unregistering): Released all slaves [ 866.694805][ T2999] bond1 (unregistering): Released all slaves [ 866.725175][T16684] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3087'. [ 866.737773][T16342] Bluetooth: hci3: command tx timeout [ 866.755473][T16655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.762616][T16655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.788786][T16655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.969799][ T2999] tipc: Disabling bearer [ 866.995342][ T2999] tipc: Left network mode [ 867.167046][T16655] hsr_slave_0: entered promiscuous mode [ 867.287861][T16655] hsr_slave_1: entered promiscuous mode [ 867.295540][T16655] debugfs: 'hsr0' already exists in 'hsr' [ 867.324744][T16655] Cannot create hsr debugfs directory [ 867.639077][T16717] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 868.317118][ T2999] batadv_slave_0: left promiscuous mode [ 868.381194][ T2999] hsr_slave_0: left promiscuous mode [ 868.422730][ T2999] hsr_slave_1: left promiscuous mode [ 868.487786][ T2999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.517033][ T2999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.811521][T16342] Bluetooth: hci3: command tx timeout [ 868.833516][T16746] FAULT_INJECTION: forcing a failure. [ 868.833516][T16746] name failslab, interval 1, probability 0, space 0, times 0 [ 868.846452][T16746] CPU: 1 UID: 0 PID: 16746 Comm: syz.1.3102 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 868.846480][T16746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 868.846492][T16746] Call Trace: [ 868.846501][T16746] [ 868.846509][T16746] dump_stack_lvl+0x189/0x250 [ 868.846537][T16746] ? __pfx____ratelimit+0x10/0x10 [ 868.846577][T16746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 868.846597][T16746] ? __pfx__printk+0x10/0x10 [ 868.846628][T16746] ? __pfx___might_resched+0x10/0x10 [ 868.846654][T16746] ? fs_reclaim_acquire+0x7d/0x100 [ 868.846693][T16746] should_fail_ex+0x414/0x560 [ 868.846725][T16746] should_failslab+0xa8/0x100 [ 868.846751][T16746] __kmalloc_noprof+0xcb/0x4f0 [ 868.846771][T16746] ? kfree+0x4d/0x440 [ 868.846788][T16746] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 868.846817][T16746] tomoyo_realpath_from_path+0xe3/0x5d0 [ 868.846844][T16746] ? tomoyo_domain+0xd9/0x130 [ 868.846873][T16746] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 868.846895][T16746] tomoyo_path_number_perm+0x1e8/0x5a0 [ 868.846918][T16746] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 868.846958][T16746] ? __lock_acquire+0xab9/0xd20 [ 868.847006][T16746] ? __fget_files+0x2a/0x420 [ 868.847031][T16746] ? __fget_files+0x2a/0x420 [ 868.847052][T16746] ? __fget_files+0x3a0/0x420 [ 868.847072][T16746] ? __fget_files+0x2a/0x420 [ 868.847100][T16746] security_file_ioctl+0xcb/0x2d0 [ 868.847121][T16746] __se_sys_ioctl+0x47/0x170 [ 868.847145][T16746] do_syscall_64+0xfa/0x3b0 [ 868.847162][T16746] ? lockdep_hardirqs_on+0x9c/0x150 [ 868.847190][T16746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.847208][T16746] ? clear_bhb_loop+0x60/0xb0 [ 868.847231][T16746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.847249][T16746] RIP: 0033:0x7faa5af8eb69 [ 868.847267][T16746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 868.847283][T16746] RSP: 002b:00007faa5be43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 868.847304][T16746] RAX: ffffffffffffffda RBX: 00007faa5b1b5fa0 RCX: 00007faa5af8eb69 [ 868.847318][T16746] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 868.847330][T16746] RBP: 00007faa5be43090 R08: 0000000000000000 R09: 0000000000000000 [ 868.847342][T16746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.847354][T16746] R13: 0000000000000000 R14: 00007faa5b1b5fa0 R15: 00007faa5b2dfa28 [ 868.847386][T16746] [ 868.847395][T16746] ERROR: Out of memory at tomoyo_realpath_from_path. [ 869.694556][ T2999] team0 (unregistering): Port device team_slave_1 removed [ 869.830913][ T2999] team0 (unregistering): Port device team_slave_0 removed [ 869.993334][T16760] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 870.246020][T16766] random: crng reseeded on system resumption [ 870.255887][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.255971][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.265548][ T9] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 870.288462][T15917] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 870.308557][ T5973] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 870.327877][T15917] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -2 [ 870.360454][ T5973] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -2 [ 870.370316][ T9] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 870.388978][ T5973] usb 2-1: USB disconnect, device number 127 [ 870.400566][T15917] usb 5-1: USB disconnect, device number 102 [ 870.498366][ T9] usb 4-1: USB disconnect, device number 106 [ 870.658566][T16733] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3099'. [ 870.730285][T15917] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 870.811016][ T9] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 870.903747][T16342] Bluetooth: hci3: command tx timeout [ 870.921086][T15917] usb 5-1: config 0 has no interfaces? [ 870.935076][T15917] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 870.949936][T15917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.958462][T15917] usb 5-1: Product: syz [ 870.975956][T15917] usb 5-1: Manufacturer: syz [ 870.985122][T15917] usb 5-1: SerialNumber: syz [ 870.990449][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 870.998688][T15917] usb 5-1: config 0 descriptor?? [ 871.021894][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.046143][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.076211][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 871.121359][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 871.153605][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.177456][ T9] usb 4-1: config 0 descriptor?? [ 871.445675][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 871.479834][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 871.504930][ T9] usb 4-1: USB disconnect, device number 107 [ 872.501046][ T5932] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 872.544454][T16655] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 872.578380][T16655] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 872.591544][T15917] usb 5-1: USB disconnect, device number 103 [ 872.612985][T16655] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 872.677804][T16655] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 872.679283][ T5932] usb 2-1: Using ep0 maxpacket: 32 [ 872.716947][ T5932] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 872.934745][ T5932] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 872.970248][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.978299][ T5932] usb 2-1: Product: syz [ 873.020411][ T5932] usb 2-1: Manufacturer: syz [ 873.025070][ T5932] usb 2-1: SerialNumber: syz [ 873.058146][ T5932] usb 2-1: config 0 descriptor?? [ 873.151132][T16796] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 873.186139][ T5932] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input41 [ 873.449718][ T5932] usb 2-1: USB disconnect, device number 2 [ 873.455968][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 873.659252][T16655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.763631][T16655] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.826981][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.834139][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.892457][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.899614][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.534295][T16655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.765017][T16655] veth0_vlan: entered promiscuous mode [ 875.779067][T16655] veth1_vlan: entered promiscuous mode [ 876.017319][T16655] veth0_macvtap: entered promiscuous mode [ 876.114305][T16655] veth1_macvtap: entered promiscuous mode [ 876.208165][T16655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.253402][T16655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.306450][T10564] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.342627][T10564] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.403102][T10564] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.527602][T10564] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.665558][T10564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.713029][ T5912] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 876.757267][T10564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.820142][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.828906][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.881362][ T5912] usb 1-1: config 0 has no interfaces? [ 876.892794][ T5912] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 876.904461][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.914948][ T5912] usb 1-1: Product: syz [ 876.919176][ T5912] usb 1-1: Manufacturer: syz [ 877.009804][ T5912] usb 1-1: SerialNumber: syz [ 877.052961][ T5912] usb 1-1: config 0 descriptor?? [ 877.701013][ T43] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 877.860585][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 877.887461][ T43] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 877.917313][ T43] usb 3-1: config 2 has no interface number 0 [ 877.939181][ T43] usb 3-1: config 2 interface 31 has no altsetting 0 [ 878.046928][ T43] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 878.057392][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.065647][ T43] usb 3-1: Product: syz [ 878.070044][ T43] usb 3-1: Manufacturer: syz [ 878.076491][ T43] usb 3-1: SerialNumber: syz [ 879.879192][ T43] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 879.902560][T16888] fuse: Bad value for 'fd' [ 880.364962][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 880.377081][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 880.385870][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 880.396067][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 880.405224][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 880.931059][ T5932] usb 1-1: USB disconnect, device number 95 [ 881.269326][ T5973] usb 3-1: USB disconnect, device number 109 [ 881.925230][T10564] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.947264][T10564] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 882.318000][T15917] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 882.490376][T16342] Bluetooth: hci1: command tx timeout [ 882.643566][T15917] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 882.701932][T15917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 882.719599][T15917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 882.734079][T10564] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.746775][T15917] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 882.760745][T10564] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 882.778898][T15917] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 882.797623][T15917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.888303][T15917] usb 4-1: config 0 descriptor?? [ 883.041929][T10564] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.055629][T10564] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 883.301114][ T5932] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 883.328784][T15917] plantronics 0003:047F:FFFF.001E: ignoring exceeding usage max [ 883.394276][T15917] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 883.480117][T16948] fuse: Bad value for 'fd' [ 883.491598][ T5932] usb 1-1: Using ep0 maxpacket: 32 [ 883.504846][ T5932] usb 1-1: unable to get BOS descriptor or descriptor too short [ 883.521824][ T5932] usb 1-1: config 8 has an invalid interface number: 143 but max is 3 [ 883.535924][T10564] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.565546][ T5932] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 883.581974][T10564] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 883.587360][ T5932] usb 1-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 883.657183][ T5932] usb 1-1: config 8 has no interface number 0 [ 883.671695][ T5932] usb 1-1: config 8 interface 143 altsetting 193 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 883.729984][ T5932] usb 1-1: config 8 interface 143 altsetting 193 endpoint 0x9 has invalid wMaxPacketSize 0 [ 883.774055][ T5932] usb 1-1: config 8 interface 143 altsetting 193 bulk endpoint 0x9 has invalid maxpacket 0 [ 883.828617][ T5932] usb 1-1: config 8 interface 143 altsetting 193 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 883.883540][ T5932] usb 1-1: config 8 interface 143 has no altsetting 0 [ 883.912811][ T5932] usb 1-1: New USB device found, idVendor=1608, idProduct=021d, bcdDevice= 8.a4 [ 883.922771][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.945637][ T5932] usb 1-1: Product: syz [ 883.956333][ T5932] usb 1-1: Manufacturer: syz [ 883.959043][T16897] chnl_net:caif_netlink_parms(): no params data found [ 883.968289][ T5932] usb 1-1: SerialNumber: syz [ 884.183147][ T5932] io_ti 1-1:8.143: required endpoints missing [ 884.219520][ T5932] usb 1-1: USB disconnect, device number 96 [ 884.222895][T10564] bridge_slave_1: left allmulticast mode [ 884.248757][T10564] bridge_slave_1: left promiscuous mode [ 884.274310][T10564] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.318984][T10564] : left allmulticast mode [ 884.335762][T10564] : left promiscuous mode [ 884.358088][T10564] bridge0: port 1() entered disabled state [ 884.571735][T16342] Bluetooth: hci1: command tx timeout [ 884.780762][ T5973] usb 4-1: reset high-speed USB device number 108 using dummy_hcd [ 884.835949][T10564] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 884.870075][T16974] FAULT_INJECTION: forcing a failure. [ 884.870075][T16974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.883402][ T5932] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 884.950621][ T5973] usb 4-1: device descriptor read/64, error -32 [ 884.976604][T16974] CPU: 0 UID: 0 PID: 16974 Comm: syz.0.3152 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 884.976632][T16974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 884.976644][T16974] Call Trace: [ 884.976651][T16974] [ 884.976661][T16974] dump_stack_lvl+0x189/0x250 [ 884.976687][T16974] ? __pfx____ratelimit+0x10/0x10 [ 884.976715][T16974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 884.976735][T16974] ? __pfx__printk+0x10/0x10 [ 884.976760][T16974] ? __might_fault+0xb0/0x130 [ 884.976794][T16974] should_fail_ex+0x414/0x560 [ 884.976826][T16974] _copy_from_user+0x2d/0xb0 [ 884.976849][T16974] ___sys_sendmsg+0x158/0x2a0 [ 884.976874][T16974] ? __pfx____sys_sendmsg+0x10/0x10 [ 884.976936][T16974] ? __fget_files+0x2a/0x420 [ 884.976958][T16974] ? __fget_files+0x3a0/0x420 [ 884.976994][T16974] __x64_sys_sendmsg+0x19b/0x260 [ 884.977019][T16974] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 884.977053][T16974] ? __pfx_ksys_write+0x10/0x10 [ 884.977072][T16974] ? rcu_is_watching+0x15/0xb0 [ 884.977104][T16974] ? do_syscall_64+0xbe/0x3b0 [ 884.977127][T16974] do_syscall_64+0xfa/0x3b0 [ 884.977142][T16974] ? lockdep_hardirqs_on+0x9c/0x150 [ 884.977175][T16974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.977194][T16974] ? clear_bhb_loop+0x60/0xb0 [ 884.977218][T16974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.977234][T16974] RIP: 0033:0x7fe71638eb69 [ 884.977252][T16974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 884.977268][T16974] RSP: 002b:00007fe717125038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 884.977289][T16974] RAX: ffffffffffffffda RBX: 00007fe7165b5fa0 RCX: 00007fe71638eb69 [ 884.977302][T16974] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 884.977314][T16974] RBP: 00007fe717125090 R08: 0000000000000000 R09: 0000000000000000 [ 884.977325][T16974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.977336][T16974] R13: 0000000000000000 R14: 00007fe7165b5fa0 R15: 00007fe7166dfa28 [ 884.977367][T16974] [ 885.187394][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.460519][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 885.514384][ T5932] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 885.528943][ T5932] usb 5-1: config 2 has no interface number 0 [ 885.539326][ T5932] usb 5-1: config 2 interface 31 has no altsetting 0 [ 885.590341][ T5973] usb 4-1: reset high-speed USB device number 108 using dummy_hcd [ 885.790404][ T5932] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 885.800011][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.830949][ T5932] usb 5-1: Product: syz [ 885.835169][ T5932] usb 5-1: Manufacturer: syz [ 885.839787][ T5932] usb 5-1: SerialNumber: syz [ 886.138171][T16991] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.3156'. [ 886.431842][T15917] usb 4-1: USB disconnect, device number 108 [ 886.774997][T16342] Bluetooth: hci1: command tx timeout [ 887.125798][T10564] bond2 (unregistering): (slave geneve2): Releasing active interface [ 887.375672][ T5932] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 888.187391][T10564] bond0 (unregistering): (slave 5@ÿ): Releasing backup interface [ 888.206937][T10564] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 888.255777][T10564] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 888.288849][T10564] bond0 (unregistering): Released all slaves [ 888.468773][T10564] bond1 (unregistering): Released all slaves [ 888.520870][ T5912] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 888.644076][T10564] bond2 (unregistering): Released all slaves [ 888.703598][ T5932] usb 5-1: USB disconnect, device number 104 [ 888.757231][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 888.787138][ T5912] usb 3-1: config 0 interface 0 has no altsetting 0 [ 888.822127][ T5912] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 888.884398][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.893330][T16342] Bluetooth: hci1: command tx timeout [ 888.916559][ T5912] usb 3-1: config 0 descriptor?? [ 888.976758][T17003] fuse: Bad value for 'fd' [ 889.033134][T10564] bond3 (unregistering): Released all slaves [ 889.209688][T10564] bond4 (unregistering): Released all slaves [ 889.490419][T10564] : left promiscuous mode [ 889.580440][T16171] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 889.785591][T16171] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 889.801315][T10564] tipc: Left network mode [ 889.837380][T16171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.884637][T16171] usb 5-1: config 0 descriptor?? [ 889.957268][T16897] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.968394][T16897] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.997011][T16897] bridge_slave_0: entered allmulticast mode [ 890.021058][T16897] bridge_slave_0: entered promiscuous mode [ 890.087198][T16897] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.199526][T16897] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.926807][T16171] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 890.971927][T16897] bridge_slave_1: entered allmulticast mode [ 891.000891][T16897] bridge_slave_1: entered promiscuous mode [ 891.403472][ T5912] usbhid 3-1:0.0: can't add hid device: -71 [ 891.423536][ T5912] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 891.504753][ T5912] usb 3-1: USB disconnect, device number 110 [ 891.740104][T16897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.814870][T16171] [drm:udl_init] *ERROR* Selecting channel failed [ 891.844653][T16897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.853048][T16171] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 891.867103][T16171] [drm] Initialized udl on minor 2 [ 891.899515][T10564] hsr_slave_0: left promiscuous mode [ 891.939471][T16171] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 891.950361][T10564] hsr_slave_1: left promiscuous mode [ 891.957612][T10564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 891.969205][T10564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 891.985138][T16171] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 892.015616][ T5933] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 892.025665][T10564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.031489][T16171] usb 5-1: USB disconnect, device number 105 [ 892.042094][ T5933] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 892.056477][T10564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.092892][T10564] batman_adv: batadv0: Removing interface: virt_wifi0 [ 892.153485][T10564] veth1_macvtap: left promiscuous mode [ 892.179907][T10564] veth0_macvtap: left promiscuous mode [ 892.230693][ T5945] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 892.407166][ T5945] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 892.417158][ T5945] usb 4-1: config 0 has no interface number 0 [ 892.427286][ T5945] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 892.446233][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.468535][ T5945] usb 4-1: Product: syz [ 892.479575][ T5945] usb 4-1: Manufacturer: syz [ 892.494198][ T5945] usb 4-1: SerialNumber: syz [ 892.518812][ T5945] usb 4-1: config 0 descriptor?? [ 892.540114][ T5933] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 892.729865][ T5945] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 892.740380][ T5933] usb 3-1: Using ep0 maxpacket: 32 [ 892.754141][ T5945] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 892.758936][ T5933] usb 3-1: config 7 has no interfaces? [ 892.765908][ T5945] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 892.781918][ T5933] usb 3-1: New USB device found, idVendor=06e1, idProduct=a333, bcdDevice=3e.de [ 892.793701][ T5945] usb 4-1: media controller created [ 892.821830][ T5933] usb 3-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 892.840150][ T5933] usb 3-1: Product: syz [ 892.854788][ T5933] usb 3-1: Manufacturer: syz [ 892.861283][ T5933] usb 3-1: SerialNumber: syz [ 892.886739][ T5945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 892.905135][T17062] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.3172'. [ 894.018882][ T5945] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 894.212267][T16897] team0: Port device team_slave_0 added [ 894.255236][T16897] team0: Port device team_slave_1 added [ 894.415657][T16897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.429141][T16897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.455146][ C1] vkms_vblank_simulate: vblank timer overrun [ 894.467953][T16897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.488865][ T30] audit: type=1800 audit(1754040245.241:296): pid=17080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3175" name="nullb0" dev="devtmpfs" ino=3596 res=0 errno=0 [ 894.504858][T16897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.523021][T16897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.555623][T16897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.633464][ T43] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 894.798604][T16897] hsr_slave_0: entered promiscuous mode [ 894.819567][ T43] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 894.829790][T16897] hsr_slave_1: entered promiscuous mode [ 894.838525][ T43] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 894.852265][T16897] debugfs: 'hsr0' already exists in 'hsr' [ 894.875368][T16897] Cannot create hsr debugfs directory [ 894.885606][ T43] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 894.931266][ T43] usb 1-1: config 220 has no interface number 2 [ 895.048695][ T43] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 895.214591][ T43] usb 1-1: config 220 interface 0 has no altsetting 0 [ 895.239974][ T43] usb 1-1: config 220 interface 76 has no altsetting 0 [ 895.291319][ T43] usb 1-1: config 220 interface 1 has no altsetting 0 [ 895.322454][ T30] audit: type=1800 audit(1754040246.071:297): pid=17095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3178" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 895.587409][ T43] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 895.608639][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.623849][ T43] usb 1-1: Product: syz [ 895.635694][ T43] usb 1-1: Manufacturer: syz [ 895.790379][ T43] usb 1-1: SerialNumber: syz [ 896.159970][ T43] usb 1-1: selecting invalid altsetting 0 [ 896.252118][ T43] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 896.340238][ T43] usb 1-1: No valid video chain found. [ 896.366342][ T43] usb 1-1: selecting invalid altsetting 0 [ 896.375213][ T43] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 896.573467][ T43] usb 1-1: USB disconnect, device number 97 [ 898.482059][T16897] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 898.523841][T16897] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 898.593937][T16897] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 898.688148][T16897] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 898.830351][T17132] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 899.001473][ T5943] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 899.180352][ T5943] usb 5-1: Using ep0 maxpacket: 16 [ 899.193291][ T5943] usb 5-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1024 [ 899.208341][ T5943] usb 5-1: config 1 interface 0 has no altsetting 0 [ 899.223179][ T5943] usb 5-1: string descriptor 0 read error: -22 [ 899.229714][ T5943] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 899.249709][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.269678][T17131] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 899.343743][T16897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.386637][T16897] 8021q: adding VLAN 0 to HW filter on device team0 [ 899.442362][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.449539][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.519740][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.527013][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.983174][T16897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 900.559783][T16897] veth0_vlan: entered promiscuous mode [ 900.631541][T16897] veth1_vlan: entered promiscuous mode [ 900.761515][T16897] veth0_macvtap: entered promiscuous mode [ 900.823750][T16897] veth1_macvtap: entered promiscuous mode [ 900.882100][T16897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 900.947987][T16897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 901.106322][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.134470][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.269991][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.300432][ T5912] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 901.365253][ T1329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.487266][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 901.492977][T17168] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 901.522707][ T5912] usb 1-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1024 [ 901.597749][ T5912] usb 1-1: config 1 interface 0 has no altsetting 0 [ 901.674360][ T5912] usb 1-1: string descriptor 0 read error: -22 [ 901.730032][ T5912] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 901.800485][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.873966][T17167] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 901.953547][T14987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.994015][T14987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.138629][ T1329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.167914][ T1329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.419716][ T5943] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 106 if 0 alt 9 proto 1 vid 0x0525 pid 0xA4A8 [ 903.554448][ T5943] usb 5-1: USB disconnect, device number 106 [ 903.601997][ T5943] usblp0: removed [ 905.466872][T17223] FAULT_INJECTION: forcing a failure. [ 905.466872][T17223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 905.629847][T17223] CPU: 1 UID: 0 PID: 17223 Comm: syz.2.3203 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 905.629878][T17223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 905.629890][T17223] Call Trace: [ 905.629899][T17223] [ 905.629908][T17223] dump_stack_lvl+0x189/0x250 [ 905.629944][T17223] ? __pfx____ratelimit+0x10/0x10 [ 905.629973][T17223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 905.629996][T17223] ? __pfx__printk+0x10/0x10 [ 905.630037][T17223] should_fail_ex+0x414/0x560 [ 905.630070][T17223] _copy_to_user+0x31/0xb0 [ 905.630098][T17223] simple_read_from_buffer+0xe1/0x170 [ 905.630129][T17223] proc_fail_nth_read+0x1b3/0x220 [ 905.630152][T17223] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 905.630175][T17223] ? rw_verify_area+0x2a6/0x4d0 [ 905.630195][T17223] ? __lock_acquire+0xab9/0xd20 [ 905.630227][T17223] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 905.630247][T17223] vfs_read+0x200/0x980 [ 905.630269][T17223] ? fdget_pos+0x247/0x320 [ 905.630299][T17223] ? __pfx___mutex_lock+0x10/0x10 [ 905.630320][T17223] ? __pfx_vfs_read+0x10/0x10 [ 905.630345][T17223] ? __fget_files+0x2a/0x420 [ 905.630376][T17223] ? __fget_files+0x3a0/0x420 [ 905.630400][T17223] ? __fget_files+0x2a/0x420 [ 905.630437][T17223] ksys_read+0x145/0x250 [ 905.630464][T17223] ? __pfx_ksys_read+0x10/0x10 [ 905.630494][T17223] ? do_syscall_64+0xbe/0x3b0 [ 905.630518][T17223] do_syscall_64+0xfa/0x3b0 [ 905.630537][T17223] ? lockdep_hardirqs_on+0x9c/0x150 [ 905.630566][T17223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.630586][T17223] ? clear_bhb_loop+0x60/0xb0 [ 905.630611][T17223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.630631][T17223] RIP: 0033:0x7f6142d8d57c [ 905.630650][T17223] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 905.630668][T17223] RSP: 002b:00007f6140bf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 905.630691][T17223] RAX: ffffffffffffffda RBX: 00007f6142fb6080 RCX: 00007f6142d8d57c [ 905.630706][T17223] RDX: 000000000000000f RSI: 00007f6140bf60a0 RDI: 0000000000000003 [ 905.630720][T17223] RBP: 00007f6140bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 905.630733][T17223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.630746][T17223] R13: 0000000000000001 R14: 00007f6142fb6080 R15: 00007f61430dfa28 [ 905.630778][T17223] [ 905.865728][ C1] vkms_vblank_simulate: vblank timer overrun [ 906.024385][ T5912] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 98 if 0 alt 9 proto 1 vid 0x0525 pid 0xA4A8 [ 906.040783][ T5912] usb 1-1: USB disconnect, device number 98 [ 906.058933][ T5912] usblp0: removed [ 907.074467][T17249] fuse: Bad value for 'fd' [ 907.625817][T17263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.657204][T17263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.338049][T17285] syz_tun: entered allmulticast mode [ 909.575019][T17291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3223'. [ 909.726609][T17291] netlink: 660 bytes leftover after parsing attributes in process `syz.3.3223'. [ 909.910377][ T5932] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 910.062159][ T5932] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 910.103118][ T5932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.177292][ T5932] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 910.204514][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.268705][ T5932] usb 2-1: Product: syz [ 910.312079][ T5932] usb 2-1: Manufacturer: syz [ 910.343373][ T5932] usb 2-1: SerialNumber: syz [ 910.394922][ T5932] usb 2-1: config 0 descriptor?? [ 910.432049][ T5932] ims_pcu 2-1:0.0: Missing CDC union descriptor [ 910.468723][ T5932] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 910.643766][ T5933] usb 2-1: USB disconnect, device number 3 [ 910.651022][T17283] syz_tun: left allmulticast mode [ 910.880322][T17304] fuse: Bad value for 'fd' [ 912.041232][T17332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3239'. [ 912.063904][T17332] netlink: 660 bytes leftover after parsing attributes in process `syz.0.3239'. [ 912.398345][T17346] FAULT_INJECTION: forcing a failure. [ 912.398345][T17346] name failslab, interval 1, probability 0, space 0, times 0 [ 912.463392][T17343] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3241'. [ 912.511993][T17346] CPU: 0 UID: 0 PID: 17346 Comm: syz.2.3242 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 912.512021][T17346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 912.512028][T17346] Call Trace: [ 912.512033][T17346] [ 912.512039][T17346] dump_stack_lvl+0x189/0x250 [ 912.512057][T17346] ? __pfx____ratelimit+0x10/0x10 [ 912.512075][T17346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 912.512088][T17346] ? __pfx__printk+0x10/0x10 [ 912.512106][T17346] ? __pfx___might_resched+0x10/0x10 [ 912.512124][T17346] ? fs_reclaim_acquire+0x7d/0x100 [ 912.512144][T17346] should_fail_ex+0x414/0x560 [ 912.512164][T17346] should_failslab+0xa8/0x100 [ 912.512180][T17346] kmem_cache_alloc_noprof+0x73/0x3c0 [ 912.512192][T17346] ? security_inode_alloc+0x39/0x330 [ 912.512209][T17346] security_inode_alloc+0x39/0x330 [ 912.512225][T17346] inode_init_always_gfp+0x9ed/0xdc0 [ 912.512244][T17346] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 912.512257][T17346] alloc_inode+0x82/0x1b0 [ 912.512272][T17346] new_inode+0x22/0x170 [ 912.512290][T17346] __debugfs_create_file+0x14d/0x4f0 [ 912.512306][T17346] debugfs_create_file_full+0x3f/0x60 [ 912.512321][T17346] ref_tracker_dir_debugfs+0x14e/0x270 [ 912.512339][T17346] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 912.512372][T17346] ? rcu_is_watching+0x15/0xb0 [ 912.512387][T17346] ? alloc_netdev_mqs+0xa3/0x1170 [ 912.512406][T17346] ? __raw_spin_lock_init+0x45/0x100 [ 912.512420][T17346] alloc_netdev_mqs+0x26f/0x1170 [ 912.512434][T17346] ? __pfx_geneve_setup+0x10/0x10 [ 912.512452][T17346] rtnl_create_link+0x31f/0xd10 [ 912.512472][T17346] rtnl_newlink_create+0x25c/0xb00 [ 912.512487][T17346] ? __pfx_aa_get_newest_label+0x10/0x10 [ 912.512500][T17346] ? __pfx_aa_get_newest_label+0x10/0x10 [ 912.512515][T17346] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 912.512530][T17346] ? __pfx___mutex_lock+0x10/0x10 [ 912.512548][T17346] ? ns_capable+0x8a/0xf0 [ 912.512567][T17346] rtnl_newlink+0x16d6/0x1c70 [ 912.512580][T17346] ? netlink_sendmsg+0x805/0xb30 [ 912.512599][T17346] ? __pfx_rtnl_newlink+0x10/0x10 [ 912.512626][T17346] ? kasan_quarantine_put+0xdd/0x220 [ 912.512638][T17346] ? lockdep_hardirqs_on+0x9c/0x150 [ 912.512658][T17346] ? nlmon_xmit+0xb0/0x100 [ 912.512673][T17346] ? kmem_cache_free+0x18f/0x400 [ 912.512692][T17346] ? __local_bh_enable_ip+0x12d/0x1c0 [ 912.512708][T17346] ? lockdep_hardirqs_on+0x9c/0x150 [ 912.512725][T17346] ? __local_bh_enable_ip+0x12d/0x1c0 [ 912.512741][T17346] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 912.512760][T17346] ? __dev_queue_xmit+0x27b/0x3b50 [ 912.512783][T17346] ? __lock_acquire+0xab9/0xd20 [ 912.512814][T17346] ? __pfx_rtnl_newlink+0x10/0x10 [ 912.512824][T17346] rtnetlink_rcv_msg+0x7cc/0xb70 [ 912.512839][T17346] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 912.512849][T17346] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 912.512859][T17346] ? ref_tracker_free+0x63a/0x7d0 [ 912.512882][T17346] ? __asan_memcpy+0x40/0x70 [ 912.512893][T17346] ? __pfx_ref_tracker_free+0x10/0x10 [ 912.512908][T17346] ? __skb_clone+0x63/0x7a0 [ 912.512928][T17346] netlink_rcv_skb+0x205/0x470 [ 912.512940][T17346] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 912.512953][T17346] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 912.512972][T17346] ? netlink_deliver_tap+0x2e/0x1b0 [ 912.512989][T17346] netlink_unicast+0x82c/0x9e0 [ 912.513012][T17346] ? __pfx_netlink_unicast+0x10/0x10 [ 912.513029][T17346] ? netlink_sendmsg+0x642/0xb30 [ 912.513038][T17346] ? skb_put+0x11b/0x210 [ 912.513053][T17346] netlink_sendmsg+0x805/0xb30 [ 912.513071][T17346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.513085][T17346] ? aa_sock_msg_perm+0x94/0x160 [ 912.513098][T17346] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 912.513109][T17346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.513123][T17346] __sock_sendmsg+0x21c/0x270 [ 912.513142][T17346] ____sys_sendmsg+0x505/0x830 [ 912.513160][T17346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 912.513180][T17346] ? import_iovec+0x74/0xa0 [ 912.513196][T17346] ___sys_sendmsg+0x21f/0x2a0 [ 912.513211][T17346] ? __pfx____sys_sendmsg+0x10/0x10 [ 912.513258][T17346] ? __fget_files+0x2a/0x420 [ 912.513280][T17346] ? __fget_files+0x3a0/0x420 [ 912.513309][T17346] __x64_sys_sendmsg+0x19b/0x260 [ 912.513325][T17346] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 912.513345][T17346] ? __pfx_ksys_write+0x10/0x10 [ 912.513356][T17346] ? rcu_is_watching+0x15/0xb0 [ 912.513376][T17346] ? do_syscall_64+0xbe/0x3b0 [ 912.513390][T17346] do_syscall_64+0xfa/0x3b0 [ 912.513400][T17346] ? lockdep_hardirqs_on+0x9c/0x150 [ 912.513417][T17346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.513428][T17346] ? clear_bhb_loop+0x60/0xb0 [ 912.513442][T17346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.513452][T17346] RIP: 0033:0x7f6142d8eb69 [ 912.513464][T17346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 912.513473][T17346] RSP: 002b:00007f6143b10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 912.513487][T17346] RAX: ffffffffffffffda RBX: 00007f6142fb5fa0 RCX: 00007f6142d8eb69 [ 912.513496][T17346] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 912.513503][T17346] RBP: 00007f6143b10090 R08: 0000000000000000 R09: 0000000000000000 [ 912.513510][T17346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 912.513517][T17346] R13: 0000000000000000 R14: 00007f6142fb5fa0 R15: 00007f61430dfa28 [ 912.513536][T17346] [ 912.513762][T17346] debugfs: out of free dentries, can not create file 'netdev@ffff88807ca8a610' [ 913.139817][T17343] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3241'. [ 914.035115][T17359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3247'. [ 914.100342][T17359] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3247'. [ 914.127750][T17359] geneve2: entered promiscuous mode [ 914.181361][T17359] geneve2: entered allmulticast mode [ 914.440338][ T5932] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 914.626483][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 914.674039][ T5932] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 914.708144][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.749237][ T5932] usb 1-1: Product: syz [ 914.777500][ T5932] usb 1-1: Manufacturer: syz [ 914.882024][ T5932] usb 1-1: SerialNumber: syz [ 915.253455][ T5932] usb 1-1: config 0 descriptor?? [ 915.320615][ T5932] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 915.400810][ T5932] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 915.512916][ T5932] usb 1-1: USB disconnect, device number 99 [ 915.662753][ T6115] udevd[6115]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 916.320545][T17385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3255'. [ 916.329472][T17385] netlink: 660 bytes leftover after parsing attributes in process `syz.4.3255'. [ 916.828894][T17403] input: syz1 as /devices/virtual/input/input42 [ 918.350468][ T5933] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 918.550795][ T5933] usb 5-1: device descriptor read/64, error -71 [ 918.668753][T17424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.678196][T17424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.880271][ T5933] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 919.050562][ T5933] usb 5-1: device descriptor read/64, error -71 [ 919.176474][ T5933] usb usb5-port1: attempt power cycle [ 919.531616][ T5933] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 919.587456][ T5933] usb 5-1: device descriptor read/8, error -71 [ 919.864797][T17449] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3267'. [ 919.890308][ T5933] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 919.988875][ T5933] usb 5-1: device descriptor read/8, error -71 [ 920.200524][ T5933] usb usb5-port1: unable to enumerate USB device [ 921.038763][T17479] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3275'. [ 921.805920][T17498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.815383][T17498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.826997][T17497] netlink: 'syz.0.3279': attribute type 10 has an invalid length. [ 922.116205][T17497] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 924.091005][T16171] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 924.321171][T16171] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 924.332358][T16171] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.366538][T16171] usb 1-1: Product: syz [ 924.379797][T16171] usb 1-1: Manufacturer: syz [ 924.572230][T17517] netlink: 'syz.4.3278': attribute type 4 has an invalid length. [ 924.605911][T17517] netlink: 'syz.4.3278': attribute type 4 has an invalid length. [ 924.698183][T16171] usb 1-1: SerialNumber: syz [ 924.841331][T16171] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 925.063222][ T5932] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 925.342228][T16171] usb 1-1: USB disconnect, device number 100 [ 926.174214][ T5932] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 926.204252][ T5932] ath9k_htc: Failed to initialize the device [ 926.225094][T16171] usb 1-1: ath9k_htc: USB layer deinitialized [ 927.430311][ T5932] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 927.597306][T17552] gre0: entered allmulticast mode [ 927.612899][ T5932] usb 1-1: device descriptor read/64, error -71 [ 927.763040][T17550] gre0: left allmulticast mode [ 927.886098][ T5932] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 928.170420][ T5932] usb 1-1: device descriptor read/64, error -71 [ 928.260385][T17571] tipc: Started in network mode [ 928.268908][T17571] tipc: Node identity 7eef7a6e632c, cluster identity 4711 [ 928.282526][T17571] tipc: Enabled bearer , priority 0 [ 928.289368][ T5932] usb usb1-port1: attempt power cycle [ 928.308866][T17561] syzkaller0: entered promiscuous mode [ 928.375209][T17561] syzkaller0: entered allmulticast mode [ 928.463488][T17560] tipc: Resetting bearer [ 928.650305][ T5932] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 928.682895][T17560] tipc: Disabling bearer [ 928.714916][ T5932] usb 1-1: device descriptor read/8, error -71 [ 928.752054][T17581] gre0: entered allmulticast mode [ 928.758109][T17577] gre0: left allmulticast mode [ 929.074466][ T5932] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 929.167256][ T5943] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 929.212056][ T5932] usb 1-1: device descriptor read/8, error -71 [ 929.360410][ T5943] usb 2-1: Using ep0 maxpacket: 16 [ 929.368758][ T5943] usb 2-1: config 0 has an invalid interface number: 194 but max is 0 [ 929.378287][ T5943] usb 2-1: config 0 has no interface number 0 [ 929.389169][ T5943] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.25 [ 929.399089][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.421933][ T5932] usb usb1-port1: unable to enumerate USB device [ 929.449523][ T5943] usb 2-1: Product: syz [ 929.479745][ T5943] usb 2-1: Manufacturer: syz [ 929.512338][ T5943] usb 2-1: SerialNumber: syz [ 929.544940][ T5943] usb 2-1: config 0 descriptor?? [ 929.583936][ T5943] cypress_cy7c63 2-1:0.194: Cypress CY7C63xxx device now attached [ 929.832728][ T5943] usb 2-1: USB disconnect, device number 4 [ 929.847641][ T5943] cypress_cy7c63 2-1:0.194: Cypress CY7C63xxx device now disconnected [ 929.941255][T17599] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3309'. [ 929.999571][T17598] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3309'. [ 930.372246][T17604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.421407][T17604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.501070][T17604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.549548][T17604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.581819][T17604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.610833][T17604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.731615][T17609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3314'. [ 930.816689][T17615] syz_tun: entered allmulticast mode [ 930.851672][T17613] syz_tun: left allmulticast mode [ 930.990394][ T43] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 931.170846][ T43] usb 2-1: device descriptor read/64, error -71 [ 931.171691][T17619] fuse: Bad value for 'fd' [ 931.443027][ T43] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 931.645489][T17627] FAULT_INJECTION: forcing a failure. [ 931.645489][T17627] name failslab, interval 1, probability 0, space 0, times 0 [ 931.694781][T17627] CPU: 1 UID: 0 PID: 17627 Comm: syz.4.3319 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 931.694800][T17627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 931.694808][T17627] Call Trace: [ 931.694814][T17627] [ 931.694820][T17627] dump_stack_lvl+0x189/0x250 [ 931.694837][T17627] ? __pfx____ratelimit+0x10/0x10 [ 931.694856][T17627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 931.694868][T17627] ? __pfx__printk+0x10/0x10 [ 931.694885][T17627] ? __pfx___might_resched+0x10/0x10 [ 931.694904][T17627] should_fail_ex+0x414/0x560 [ 931.694922][T17627] should_failslab+0xa8/0x100 [ 931.694939][T17627] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 931.694953][T17627] ? __alloc_skb+0x112/0x2d0 [ 931.694963][T17627] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 931.694984][T17627] __alloc_skb+0x112/0x2d0 [ 931.694998][T17627] pfkey_sendmsg+0x1dd/0x1090 [ 931.695015][T17627] ? __pfx___might_resched+0x10/0x10 [ 931.695029][T17627] ? __lock_acquire+0xab9/0xd20 [ 931.695047][T17627] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 931.695063][T17627] ? aa_sk_perm+0x81e/0x950 [ 931.695074][T17627] ? is_bpf_text_address+0x26/0x2b0 [ 931.695090][T17627] ? __pfx_aa_sk_perm+0x10/0x10 [ 931.695100][T17627] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 931.695118][T17627] ? aa_sock_msg_perm+0x94/0x160 [ 931.695131][T17627] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 931.695141][T17627] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 931.695154][T17627] __sock_sendmsg+0x21c/0x270 [ 931.695171][T17627] ____sys_sendmsg+0x505/0x830 [ 931.695188][T17627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 931.695207][T17627] ? import_iovec+0x74/0xa0 [ 931.695222][T17627] ___sys_sendmsg+0x21f/0x2a0 [ 931.695237][T17627] ? __pfx____sys_sendmsg+0x10/0x10 [ 931.695271][T17627] ? __fget_files+0x2a/0x420 [ 931.695285][T17627] ? __fget_files+0x3a0/0x420 [ 931.695305][T17627] __x64_sys_sendmsg+0x19b/0x260 [ 931.695320][T17627] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 931.695339][T17627] ? __pfx_ksys_write+0x10/0x10 [ 931.695351][T17627] ? rcu_is_watching+0x15/0xb0 [ 931.695370][T17627] ? do_syscall_64+0xbe/0x3b0 [ 931.695383][T17627] do_syscall_64+0xfa/0x3b0 [ 931.695394][T17627] ? lockdep_hardirqs_on+0x9c/0x150 [ 931.695410][T17627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.695421][T17627] ? clear_bhb_loop+0x60/0xb0 [ 931.695435][T17627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.695446][T17627] RIP: 0033:0x7f7eef78eb69 [ 931.695457][T17627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 931.695467][T17627] RSP: 002b:00007f7ef06e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 931.695481][T17627] RAX: ffffffffffffffda RBX: 00007f7eef9b5fa0 RCX: 00007f7eef78eb69 [ 931.695489][T17627] RDX: 0000000000040010 RSI: 0000200000000580 RDI: 0000000000000004 [ 931.695497][T17627] RBP: 00007f7ef06e2090 R08: 0000000000000000 R09: 0000000000000000 [ 931.695504][T17627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 931.695511][T17627] R13: 0000000000000000 R14: 00007f7eef9b5fa0 R15: 00007f7eefadfa28 [ 931.695528][T17627] [ 932.054252][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.060678][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.170671][ T43] usb 2-1: device descriptor read/64, error -71 [ 932.280526][ T43] usb usb2-port1: attempt power cycle [ 932.620510][ T43] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 932.657867][ T43] usb 2-1: device descriptor read/8, error -71 [ 932.677608][T17637] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3322'. [ 932.930490][ T43] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 932.964543][ T43] usb 2-1: device descriptor read/8, error -71 [ 933.288269][T17659] gre0: entered allmulticast mode [ 933.299412][T17658] gre0: left allmulticast mode [ 933.351335][ T43] usb usb2-port1: unable to enumerate USB device [ 933.986971][T17668] netlink: 'syz.1.3331': attribute type 12 has an invalid length. [ 933.994925][T17668] netlink: 'syz.1.3331': attribute type 29 has an invalid length. [ 934.002971][T17668] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3331'. [ 934.013672][T17668] netlink: 'syz.1.3331': attribute type 2 has an invalid length. [ 934.880500][T17673] FAULT_INJECTION: forcing a failure. [ 934.880500][T17673] name failslab, interval 1, probability 0, space 0, times 0 [ 934.910038][T17673] CPU: 1 UID: 0 PID: 17673 Comm: syz.1.3333 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 934.910068][T17673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 934.910080][T17673] Call Trace: [ 934.910088][T17673] [ 934.910098][T17673] dump_stack_lvl+0x189/0x250 [ 934.910124][T17673] ? __pfx____ratelimit+0x10/0x10 [ 934.910158][T17673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 934.910179][T17673] ? __pfx__printk+0x10/0x10 [ 934.910210][T17673] ? __pfx___might_resched+0x10/0x10 [ 934.910235][T17673] ? fs_reclaim_acquire+0x7d/0x100 [ 934.910267][T17673] should_fail_ex+0x414/0x560 [ 934.910298][T17673] ? alloc_netdev_mqs+0xa46/0x1170 [ 934.910322][T17673] should_failslab+0xa8/0x100 [ 934.910349][T17673] __kvmalloc_node_noprof+0x161/0x5f0 [ 934.910373][T17673] ? alloc_netdev_mqs+0xa46/0x1170 [ 934.910405][T17673] alloc_netdev_mqs+0xa46/0x1170 [ 934.910439][T17673] rtnl_create_link+0x31f/0xd10 [ 934.910473][T17673] rtnl_newlink_create+0x25c/0xb00 [ 934.910497][T17673] ? __pfx_aa_get_newest_label+0x10/0x10 [ 934.910519][T17673] ? __pfx_aa_get_newest_label+0x10/0x10 [ 934.910545][T17673] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 934.910572][T17673] ? __pfx___mutex_lock+0x10/0x10 [ 934.910603][T17673] ? ns_capable+0x8a/0xf0 [ 934.910678][T17673] rtnl_newlink+0x16d6/0x1c70 [ 934.910700][T17673] ? netlink_sendmsg+0x805/0xb30 [ 934.910734][T17673] ? __pfx_rtnl_newlink+0x10/0x10 [ 934.910782][T17673] ? kasan_quarantine_put+0xdd/0x220 [ 934.910802][T17673] ? lockdep_hardirqs_on+0x9c/0x150 [ 934.910836][T17673] ? nlmon_xmit+0xb0/0x100 [ 934.910854][T17673] ? kmem_cache_free+0x18f/0x400 [ 934.910884][T17673] ? __local_bh_enable_ip+0x12d/0x1c0 [ 934.910911][T17673] ? lockdep_hardirqs_on+0x9c/0x150 [ 934.910940][T17673] ? __local_bh_enable_ip+0x12d/0x1c0 [ 934.910966][T17673] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 934.910998][T17673] ? __dev_queue_xmit+0x27b/0x3b50 [ 934.911038][T17673] ? __lock_acquire+0xab9/0xd20 [ 934.911093][T17673] ? __pfx_rtnl_newlink+0x10/0x10 [ 934.911113][T17673] rtnetlink_rcv_msg+0x7cc/0xb70 [ 934.911137][T17673] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 934.911156][T17673] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 934.911173][T17673] ? ref_tracker_free+0x63a/0x7d0 [ 934.911201][T17673] ? __asan_memcpy+0x40/0x70 [ 934.911219][T17673] ? __pfx_ref_tracker_free+0x10/0x10 [ 934.911245][T17673] ? __skb_clone+0x63/0x7a0 [ 934.911280][T17673] netlink_rcv_skb+0x205/0x470 [ 934.911302][T17673] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 934.911324][T17673] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 934.911358][T17673] ? netlink_deliver_tap+0x2e/0x1b0 [ 934.911387][T17673] netlink_unicast+0x82c/0x9e0 [ 934.911426][T17673] ? __pfx_netlink_unicast+0x10/0x10 [ 934.911457][T17673] ? netlink_sendmsg+0x642/0xb30 [ 934.911474][T17673] ? skb_put+0x11b/0x210 [ 934.911501][T17673] netlink_sendmsg+0x805/0xb30 [ 934.911532][T17673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 934.911557][T17673] ? aa_sock_msg_perm+0x94/0x160 [ 934.911581][T17673] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 934.911600][T17673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 934.911621][T17673] __sock_sendmsg+0x21c/0x270 [ 934.911662][T17673] ____sys_sendmsg+0x505/0x830 [ 934.911693][T17673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 934.911728][T17673] ? import_iovec+0x74/0xa0 [ 934.911757][T17673] ___sys_sendmsg+0x21f/0x2a0 [ 934.911783][T17673] ? __pfx____sys_sendmsg+0x10/0x10 [ 934.911851][T17673] ? __fget_files+0x2a/0x420 [ 934.911874][T17673] ? __fget_files+0x3a0/0x420 [ 934.911911][T17673] __x64_sys_sendmsg+0x19b/0x260 [ 934.911937][T17673] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 934.911972][T17673] ? __pfx_ksys_write+0x10/0x10 [ 934.911992][T17673] ? rcu_is_watching+0x15/0xb0 [ 934.912028][T17673] ? do_syscall_64+0xbe/0x3b0 [ 934.912053][T17673] do_syscall_64+0xfa/0x3b0 [ 934.912070][T17673] ? lockdep_hardirqs_on+0x9c/0x150 [ 934.912098][T17673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.912117][T17673] ? clear_bhb_loop+0x60/0xb0 [ 934.912141][T17673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.912160][T17673] RIP: 0033:0x7f780dd8eb69 [ 934.912179][T17673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.912195][T17673] RSP: 002b:00007f780eb82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 934.912218][T17673] RAX: ffffffffffffffda RBX: 00007f780dfb5fa0 RCX: 00007f780dd8eb69 [ 934.912231][T17673] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 934.912244][T17673] RBP: 00007f780eb82090 R08: 0000000000000000 R09: 0000000000000000 [ 934.912256][T17673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 934.912267][T17673] R13: 0000000000000000 R14: 00007f780dfb5fa0 R15: 00007f780e0dfa28 [ 934.912301][T17673] [ 935.401933][T17676] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3334'. [ 936.470942][T17693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.485657][T17693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.002309][T17703] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3342'. [ 937.194036][T17705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.217653][T17705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.311048][T17705] pim6reg1: entered promiscuous mode [ 937.316403][T17705] pim6reg1: entered allmulticast mode [ 938.202593][T17689] netlink: 'syz.1.3338': attribute type 27 has an invalid length. [ 938.904447][T17729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.913924][T17729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.373498][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3351'. [ 939.622026][T17745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.657189][T17745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.790503][T16171] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 939.854560][ T5942] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 939.911011][T17747] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3354'. [ 939.982838][T16171] usb 5-1: Using ep0 maxpacket: 32 [ 940.001155][ T5942] usb 2-1: device descriptor read/64, error -71 [ 940.025918][T16171] usb 5-1: config 7 has no interfaces? [ 940.034573][T16171] usb 5-1: New USB device found, idVendor=06e1, idProduct=a333, bcdDevice=3e.de [ 940.047583][T16171] usb 5-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 940.062205][T16171] usb 5-1: Product: syz [ 940.066671][T16171] usb 5-1: Manufacturer: syz [ 940.075178][T16171] usb 5-1: SerialNumber: syz [ 940.260230][ T5942] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 940.461553][ T30] audit: type=1800 audit(1754040291.221:298): pid=17753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3355" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 940.560348][ T5942] usb 2-1: device descriptor read/64, error -71 [ 940.679215][ T5942] usb usb2-port1: attempt power cycle [ 941.020248][ T5942] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 941.041881][ T5942] usb 2-1: device descriptor read/8, error -71 [ 941.136166][T17757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.146603][T17757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.454192][ T5942] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 941.481033][ T5942] usb 2-1: device descriptor read/8, error -71 [ 941.615824][ T5942] usb usb2-port1: unable to enumerate USB device [ 942.017286][T17768] fuse: Bad value for 'fd' [ 942.247698][ T30] audit: type=1800 audit(1754040292.981:299): pid=17769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3358" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 943.271186][ T43] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 943.440291][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 943.448905][ T43] usb 1-1: config 7 has no interfaces? [ 943.458614][ T43] usb 1-1: New USB device found, idVendor=06e1, idProduct=a333, bcdDevice=3e.de [ 943.467965][ T43] usb 1-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 943.476050][ T43] usb 1-1: Product: syz [ 943.480650][ T43] usb 1-1: Manufacturer: syz [ 943.485334][ T43] usb 1-1: SerialNumber: syz [ 943.643874][T17786] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 943.748118][T17790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3369'. [ 943.761915][T17790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3369'. [ 943.884504][T17795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3371'. [ 943.894937][T17795] netlink: 660 bytes leftover after parsing attributes in process `syz.1.3371'. [ 943.981731][T15917] usb 1-1: USB disconnect, device number 105 [ 944.012629][T16342] Bluetooth: hci5: command 0x0406 tx timeout [ 944.718330][T17811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.732498][T17811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.954464][T17835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.999957][T17835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.449246][T17847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.508219][T17847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.609708][T17879] netlink: 'syz.4.3392': attribute type 4 has an invalid length. [ 948.698104][T17882] netlink: 'syz.4.3392': attribute type 4 has an invalid length. [ 950.212883][T17892] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 950.278916][T17892] team0: Port device batadv1 added [ 950.525523][ T5943] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 950.621939][T17902] batadv_slave_1: entered promiscuous mode [ 950.635427][T17901] batadv_slave_1: left promiscuous mode [ 950.869131][ T5943] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 950.890008][ T5943] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 950.921881][ T5943] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.940497][ T5943] usb 1-1: config 0 interface 0 has no altsetting 0 [ 950.949207][ T5943] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 950.958622][ T5943] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.996813][T17892] hub 9-0:1.0: USB hub found [ 951.036626][T17892] hub 9-0:1.0: 1 port detected [ 951.081396][ T5943] usb 1-1: config 0 interface 0 has no altsetting 0 [ 951.131676][ T5943] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 951.158585][ T5943] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 951.166726][ T30] audit: type=1326 audit(1754040301.911:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17908 comm="syz.1.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780dd8eb69 code=0x7ffc0000 [ 951.192273][ T5943] usb 1-1: config 0 interface 0 has no altsetting 0 [ 951.258596][ T5943] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 951.290905][ T30] audit: type=1326 audit(1754040301.911:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17908 comm="syz.1.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780dd8eb69 code=0x7ffc0000 [ 951.328240][ T30] audit: type=1326 audit(1754040301.911:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17908 comm="syz.1.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780dd8eb69 code=0x7ffc0000 [ 951.351320][ T30] audit: type=1326 audit(1754040301.911:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17908 comm="syz.1.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780dd8eb69 code=0x7ffc0000 [ 951.359487][ T5943] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 951.374819][ T30] audit: type=1326 audit(1754040301.911:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17908 comm="syz.1.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f780dd8eb69 code=0x7ffc0000 [ 951.409202][ T30] audit: type=1326 audit(1754040301.911:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17908 comm="syz.1.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780dd8eb69 code=0x7ffc0000 [ 951.466953][ T5943] usb 1-1: config 0 interface 0 has no altsetting 0 [ 951.475351][ T30] audit: type=1326 audit(1754040301.911:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17908 comm="syz.1.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780dd8eb69 code=0x7ffc0000 [ 951.500581][ T30] audit: type=1326 audit(1754040301.951:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17908 comm="syz.1.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f780dd8eb69 code=0x7ffc0000 [ 951.525051][ T5943] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 951.534075][ T30] audit: type=1326 audit(1754040301.951:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17908 comm="syz.1.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780dd8eb69 code=0x7ffc0000 [ 951.564356][ T5943] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 951.579146][ T5943] usb 1-1: config 0 interface 0 has no altsetting 0 [ 951.673078][ T30] audit: type=1326 audit(1754040301.951:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17908 comm="syz.1.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780dd8eb69 code=0x7ffc0000 [ 951.695503][ C1] vkms_vblank_simulate: vblank timer overrun [ 951.746487][ T5943] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 951.783653][ T5943] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 951.840579][ T5943] usb 1-1: config 0 interface 0 has no altsetting 0 [ 951.856938][ T5943] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 951.866198][ T5943] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 951.880387][ T5943] usb 1-1: config 0 interface 0 has no altsetting 0 [ 951.889291][ T5943] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 951.904778][ T5943] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 951.917445][ T5943] usb 1-1: config 0 interface 0 has no altsetting 0 [ 951.937577][ T5943] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 952.041658][ T5943] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 952.076100][ T5943] usb 1-1: Product: syz [ 952.097637][ T5943] usb 1-1: Manufacturer: syz [ 952.250227][ T5943] usb 1-1: SerialNumber: syz [ 952.282218][ T5943] usb 1-1: config 0 descriptor?? [ 952.339117][ T5943] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 952.901359][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 952.910448][ T5933] usb 1-1: USB disconnect, device number 106 [ 952.983238][ T5933] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 953.941687][T17936] kernel profiling enabled (shift: 17) [ 954.529059][T17946] capability: warning: `syz.1.3417' uses 32-bit capabilities (legacy support in use) [ 954.680567][T17950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.754469][T17950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.085657][T17967] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 956.982315][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 956.982347][ T30] audit: type=1800 audit(1754040307.731:330): pid=17998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3429" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 957.829062][T18008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.938917][T18008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.305973][T18012] sctp: [Deprecated]: syz.0.3436 (pid 18012) Use of struct sctp_assoc_value in delayed_ack socket option. [ 958.305973][T18012] Use struct sctp_sack_info instead [ 958.458917][T18024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3436'. [ 958.576631][T18028] netlink: 'syz.1.3437': attribute type 4 has an invalid length. [ 958.817815][T18033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3442'. [ 958.826869][T18033] netlink: 660 bytes leftover after parsing attributes in process `syz.3.3442'. [ 959.600280][ T5943] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 959.770329][ T5943] usb 1-1: Using ep0 maxpacket: 8 [ 959.781430][ T5943] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 959.794175][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.824213][ T5943] usb 1-1: Product: syz [ 959.828433][ T5943] usb 1-1: Manufacturer: syz [ 959.835364][ T5943] usb 1-1: SerialNumber: syz [ 959.850064][ T5943] usb 1-1: config 0 descriptor?? [ 960.079737][ T5943] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 960.257576][T18055] fuse: Unknown parameter 'rolÕse2o#ú²‹øotmode' [ 960.837941][T18065] FAULT_INJECTION: forcing a failure. [ 960.837941][T18065] name failslab, interval 1, probability 0, space 0, times 0 [ 960.863715][T18065] CPU: 0 UID: 0 PID: 18065 Comm: syz.1.3449 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 960.863747][T18065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 960.863759][T18065] Call Trace: [ 960.863769][T18065] [ 960.863778][T18065] dump_stack_lvl+0x189/0x250 [ 960.863805][T18065] ? __pfx____ratelimit+0x10/0x10 [ 960.863834][T18065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 960.863854][T18065] ? __pfx__printk+0x10/0x10 [ 960.863884][T18065] ? __pfx___might_resched+0x10/0x10 [ 960.863911][T18065] ? fs_reclaim_acquire+0x7d/0x100 [ 960.863943][T18065] should_fail_ex+0x414/0x560 [ 960.863975][T18065] should_failslab+0xa8/0x100 [ 960.864001][T18065] kmem_cache_alloc_noprof+0x73/0x3c0 [ 960.864021][T18065] ? flock_lock_inode+0x21f/0x1420 [ 960.864050][T18065] flock_lock_inode+0x21f/0x1420 [ 960.864080][T18065] ? __pfx___might_resched+0x10/0x10 [ 960.864104][T18065] ? aa_file_perm+0x40c/0xe70 [ 960.864133][T18065] ? __pfx_flock_lock_inode+0x10/0x10 [ 960.864166][T18065] locks_lock_inode_wait+0x107/0x410 [ 960.864191][T18065] ? __pfx_locks_lock_inode_wait+0x10/0x10 [ 960.864214][T18065] ? __fget_files+0x2a/0x420 [ 960.864241][T18065] ? end_current_label_crit_section+0x152/0x180 [ 960.864266][T18065] ? common_file_perm+0x199/0x200 [ 960.864296][T18065] __se_sys_flock+0x467/0x5b0 [ 960.864319][T18065] ? __pfx___se_sys_flock+0x10/0x10 [ 960.864387][T18065] ? do_syscall_64+0xbe/0x3b0 [ 960.864413][T18065] do_syscall_64+0xfa/0x3b0 [ 960.864434][T18065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.864451][T18065] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 960.864469][T18065] ? clear_bhb_loop+0x60/0xb0 [ 960.864492][T18065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.864511][T18065] RIP: 0033:0x7f780dd8eb69 [ 960.864528][T18065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 960.864544][T18065] RSP: 002b:00007f780eb61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 960.864566][T18065] RAX: ffffffffffffffda RBX: 00007f780dfb6080 RCX: 00007f780dd8eb69 [ 960.864580][T18065] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000009 [ 960.864592][T18065] RBP: 00007f780eb61090 R08: 0000000000000000 R09: 0000000000000000 [ 960.864603][T18065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 960.864614][T18065] R13: 0000000000000000 R14: 00007f780dfb6080 R15: 00007f780e0dfa28 [ 960.864644][T18065] [ 961.112479][ C0] vkms_vblank_simulate: vblank timer overrun [ 961.644930][T18042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.687320][T18042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.200553][ T30] audit: type=1326 audit(1754040312.951:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18081 comm="syz.3.3456" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f111e98eb69 code=0x0 [ 962.290281][ T5933] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 962.314258][T18090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3459'. [ 962.323451][T18090] netlink: 660 bytes leftover after parsing attributes in process `syz.4.3459'. [ 962.438869][T18093] loop2: detected capacity change from 0 to 7 [ 962.447028][T18093] Dev loop2: unable to read RDB block 7 [ 962.450275][ T5933] usb 2-1: Using ep0 maxpacket: 8 [ 962.453085][T18093] loop2: unable to read partition table [ 962.463979][T18093] loop2: partition table beyond EOD, truncated [ 962.483406][T18093] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 962.486007][ T5933] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 962.509850][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.518998][ T5933] usb 2-1: Product: syz [ 962.523991][ T5933] usb 2-1: Manufacturer: syz [ 962.528894][ T5933] usb 2-1: SerialNumber: syz [ 962.543181][ T5933] usb 2-1: config 0 descriptor?? [ 962.647150][T18096] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 962.653393][ T5943] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 962.766880][T18098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.776663][T18082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.778034][T18098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.793876][T18082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.808143][T18082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.817858][T18082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.829969][ T5933] usb read operation failed. (-32) [ 962.994939][ T5943] usb 1-1: USB disconnect, device number 107 [ 963.054039][ T5933] usb write operation failed. (-71) [ 963.066687][ T5933] usb write operation failed. (-71) [ 963.101472][ T5933] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 963.135149][ T5933] usb 2-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 963.152450][ T5933] usb 2-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 963.342061][T18111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.351811][T18111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.430642][ T5943] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 963.610247][ T5943] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 963.633400][ T5943] usb 1-1: config 0 has no interface number 0 [ 963.662653][ T5943] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 963.685207][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.699372][ T5943] usb 1-1: Product: syz [ 963.703636][ T5943] usb 1-1: Manufacturer: syz [ 963.718162][ T5943] usb 1-1: SerialNumber: syz [ 963.747755][ T5943] usb 1-1: config 0 descriptor?? [ 964.294575][ T5943] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 964.382219][ T5943] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 964.405278][ T5943] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 964.414411][ T5943] usb 1-1: media controller created [ 964.444309][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 964.810856][ T5943] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 964.900074][ T5943] usb 1-1: USB disconnect, device number 108 [ 965.204306][T18136] FAULT_INJECTION: forcing a failure. [ 965.204306][T18136] name failslab, interval 1, probability 0, space 0, times 0 [ 965.217756][T18136] CPU: 1 UID: 0 PID: 18136 Comm: syz.4.3473 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 965.217785][T18136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 965.217797][T18136] Call Trace: [ 965.217806][T18136] [ 965.217815][T18136] dump_stack_lvl+0x189/0x250 [ 965.217842][T18136] ? __pfx____ratelimit+0x10/0x10 [ 965.217871][T18136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 965.217892][T18136] ? __pfx__printk+0x10/0x10 [ 965.217923][T18136] ? __pfx___might_resched+0x10/0x10 [ 965.217958][T18136] ? fs_reclaim_acquire+0x7d/0x100 [ 965.217989][T18136] should_fail_ex+0x414/0x560 [ 965.218021][T18136] should_failslab+0xa8/0x100 [ 965.218048][T18136] kmem_cache_alloc_noprof+0x73/0x3c0 [ 965.218070][T18136] ? flock_lock_inode+0x21f/0x1420 [ 965.218101][T18136] flock_lock_inode+0x21f/0x1420 [ 965.218131][T18136] ? __pfx___might_resched+0x10/0x10 [ 965.218156][T18136] ? aa_file_perm+0x40c/0xe70 [ 965.218182][T18136] ? __pfx_flock_lock_inode+0x10/0x10 [ 965.218218][T18136] locks_lock_inode_wait+0x107/0x410 [ 965.218250][T18136] ? __pfx_locks_lock_inode_wait+0x10/0x10 [ 965.218273][T18136] ? __fget_files+0x2a/0x420 [ 965.218299][T18136] ? end_current_label_crit_section+0x152/0x180 [ 965.218323][T18136] ? common_file_perm+0x199/0x200 [ 965.218354][T18136] __se_sys_flock+0x467/0x5b0 [ 965.218378][T18136] ? __pfx___se_sys_flock+0x10/0x10 [ 965.218437][T18136] ? do_syscall_64+0xbe/0x3b0 [ 965.218461][T18136] do_syscall_64+0xfa/0x3b0 [ 965.218478][T18136] ? lockdep_hardirqs_on+0x9c/0x150 [ 965.218506][T18136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.218524][T18136] ? clear_bhb_loop+0x60/0xb0 [ 965.218547][T18136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.218566][T18136] RIP: 0033:0x7f7eef78eb69 [ 965.218584][T18136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 965.218601][T18136] RSP: 002b:00007f7ef06c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 965.218632][T18136] RAX: ffffffffffffffda RBX: 00007f7eef9b6080 RCX: 00007f7eef78eb69 [ 965.218647][T18136] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000009 [ 965.218659][T18136] RBP: 00007f7ef06c1090 R08: 0000000000000000 R09: 0000000000000000 [ 965.218672][T18136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 965.218689][T18136] R13: 0000000000000000 R14: 00007f7eef9b6080 R15: 00007f7eefadfa28 [ 965.218728][T18136] [ 966.510374][ T5942] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 966.680381][ T5942] usb 1-1: Using ep0 maxpacket: 8 [ 966.709854][ T5942] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 966.731053][ T5942] usb 1-1: config 2 has no interface number 0 [ 966.739664][ T5942] usb 1-1: config 2 interface 31 has no altsetting 0 [ 966.777600][ T5942] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 966.793331][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.820250][ T5942] usb 1-1: Product: syz [ 966.829342][ T5942] usb 1-1: Manufacturer: syz [ 966.834398][ T5942] usb 1-1: SerialNumber: syz [ 966.913378][T18154] netlink: 'syz.4.3478': attribute type 4 has an invalid length. [ 968.100435][T18164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.171139][T18164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.341171][ T5942] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 968.383254][T18171] program syz.4.3482 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 968.489894][ T30] audit: type=1800 audit(1754040319.231:332): pid=18171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3482" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 969.182941][T16171] usb 1-1: USB disconnect, device number 109 [ 969.649052][T18186] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3490'. [ 969.693342][T16342] Bluetooth: hci2: command 0x0406 tx timeout [ 969.983924][T18196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.999485][T18196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.319263][T18202] hsr0: entered promiscuous mode [ 970.321429][T18202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3494'. [ 970.321803][T18202] hsr_slave_0: left promiscuous mode [ 970.328447][T18202] hsr_slave_1: left promiscuous mode [ 970.358078][T18202] hsr0 (unregistering): left promiscuous mode [ 971.163734][T18210] FAULT_INJECTION: forcing a failure. [ 971.163734][T18210] name failslab, interval 1, probability 0, space 0, times 0 [ 971.185013][T18210] CPU: 1 UID: 0 PID: 18210 Comm: syz.0.3497 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 971.185042][T18210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 971.185051][T18210] Call Trace: [ 971.185057][T18210] [ 971.185062][T18210] dump_stack_lvl+0x189/0x250 [ 971.185081][T18210] ? __pfx____ratelimit+0x10/0x10 [ 971.185099][T18210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 971.185111][T18210] ? __pfx__printk+0x10/0x10 [ 971.185129][T18210] ? __pfx___might_resched+0x10/0x10 [ 971.185144][T18210] ? fs_reclaim_acquire+0x7d/0x100 [ 971.185162][T18210] should_fail_ex+0x414/0x560 [ 971.185181][T18210] should_failslab+0xa8/0x100 [ 971.185197][T18210] kmem_cache_alloc_noprof+0x73/0x3c0 [ 971.185209][T18210] ? flock_lock_inode+0x21f/0x1420 [ 971.185226][T18210] flock_lock_inode+0x21f/0x1420 [ 971.185246][T18210] ? __pfx___might_resched+0x10/0x10 [ 971.185261][T18210] ? aa_file_perm+0x40c/0xe70 [ 971.185277][T18210] ? __pfx_flock_lock_inode+0x10/0x10 [ 971.185296][T18210] locks_lock_inode_wait+0x107/0x410 [ 971.185311][T18210] ? __pfx_locks_lock_inode_wait+0x10/0x10 [ 971.185325][T18210] ? __fget_files+0x2a/0x420 [ 971.185341][T18210] ? end_current_label_crit_section+0x152/0x180 [ 971.185356][T18210] ? common_file_perm+0x199/0x200 [ 971.185373][T18210] __se_sys_flock+0x467/0x5b0 [ 971.185387][T18210] ? __pfx___se_sys_flock+0x10/0x10 [ 971.185418][T18210] ? do_syscall_64+0xbe/0x3b0 [ 971.185432][T18210] do_syscall_64+0xfa/0x3b0 [ 971.185442][T18210] ? lockdep_hardirqs_on+0x9c/0x150 [ 971.185458][T18210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.185469][T18210] ? clear_bhb_loop+0x60/0xb0 [ 971.185482][T18210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.185500][T18210] RIP: 0033:0x7fe71638eb69 [ 971.185512][T18210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.185522][T18210] RSP: 002b:00007fe7141f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 971.185536][T18210] RAX: ffffffffffffffda RBX: 00007fe7165b6080 RCX: 00007fe71638eb69 [ 971.185544][T18210] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000009 [ 971.185551][T18210] RBP: 00007fe7141f6090 R08: 0000000000000000 R09: 0000000000000000 [ 971.185558][T18210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.185565][T18210] R13: 0000000000000000 R14: 00007fe7165b6080 R15: 00007fe7166dfa28 [ 971.185582][T18210] [ 971.868281][T18219] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 973.580281][ T5932] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 973.731856][ T5932] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 973.751780][ T5932] usb 1-1: config 0 has no interface number 0 [ 973.795036][ T5932] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 973.828730][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.870517][ T5932] usb 1-1: Product: syz [ 973.883635][ T5932] usb 1-1: Manufacturer: syz [ 973.900239][ T5932] usb 1-1: SerialNumber: syz [ 973.919836][ T5932] usb 1-1: config 0 descriptor?? [ 973.984744][T18253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.995005][T18253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.297704][ T5932] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 974.329207][ T5932] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 974.512818][ T5932] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 974.636828][ T5932] usb 1-1: media controller created [ 974.715041][T18262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.746467][T18262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.834394][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 975.934355][ T5932] i2c i2c-2: ec100: i2c rd failed=-110 reg=33 [ 976.375734][T18286] tipc: Enabling of bearer rejected, failed to enable media [ 976.420880][ T5943] usb 1-1: USB disconnect, device number 110 [ 977.213394][T18291] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.226515][T18291] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.212739][T18334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3534'. [ 980.043140][T18343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.054341][T18343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.143604][T18384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.220917][T18384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.310792][T18384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.365686][T18384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.797145][T18388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.838264][T18388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.159726][T18397] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 984.261330][ T30] audit: type=1326 audit(1754040335.001:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18393 comm="syz.0.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71638eb69 code=0x7ffc0000 [ 984.283800][ C0] vkms_vblank_simulate: vblank timer overrun [ 984.389271][T18398] pim6reg: entered allmulticast mode [ 984.409507][T18398] pim6reg: left allmulticast mode [ 984.426485][ T30] audit: type=1326 audit(1754040335.001:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18393 comm="syz.0.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe71638eb69 code=0x7ffc0000 [ 984.469067][ T30] audit: type=1326 audit(1754040335.001:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18393 comm="syz.0.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71638eb69 code=0x7ffc0000 [ 984.570777][ T30] audit: type=1326 audit(1754040335.001:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18393 comm="syz.0.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe71638eb69 code=0x7ffc0000 [ 984.677762][ T30] audit: type=1326 audit(1754040335.001:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18393 comm="syz.0.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71638eb69 code=0x7ffc0000 [ 984.700205][ C0] vkms_vblank_simulate: vblank timer overrun [ 984.727774][ T30] audit: type=1326 audit(1754040335.011:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18393 comm="syz.0.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe71638eb69 code=0x7ffc0000 [ 984.727830][ T30] audit: type=1326 audit(1754040335.011:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18393 comm="syz.0.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71638eb69 code=0x7ffc0000 [ 984.727880][ T30] audit: type=1326 audit(1754040335.061:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18393 comm="syz.0.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe71638eb69 code=0x7ffc0000 [ 984.727927][ T30] audit: type=1326 audit(1754040335.061:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18393 comm="syz.0.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71638eb69 code=0x7ffc0000 [ 984.727972][ T30] audit: type=1326 audit(1754040335.111:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18393 comm="syz.0.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71638eb69 code=0x7ffc0000 [ 984.800527][ C0] vkms_vblank_simulate: vblank timer overrun [ 984.864237][T18407] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3556'. [ 984.980303][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 985.394605][T18413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3558'. [ 985.406544][T18413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.463810][T18413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.394218][T18431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 986.662288][T18435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.676426][T18435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.691817][T18435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.700471][ T5932] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 986.746096][T18435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.770967][T18435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.789408][T18435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.872493][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 986.883920][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.895351][ T5932] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 986.909652][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.929065][ T5932] usb 1-1: config 0 descriptor?? [ 986.938761][ T5932] xbox_remote_probe: endpoint_in message size==0? [ 987.137369][T18431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.146202][T18431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.160155][ T5932] usbhid 1-1:0.0: can't add hid device: -71 [ 987.167303][ T5932] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 987.192270][ T5932] usb 1-1: USB disconnect, device number 111 [ 988.070381][ T5943] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 988.230348][ T5943] usb 1-1: Using ep0 maxpacket: 16 [ 988.242389][ T5943] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 988.254148][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.262410][ T5943] usb 1-1: Product: syz [ 988.266591][ T5943] usb 1-1: Manufacturer: syz [ 988.271537][ T5943] usb 1-1: SerialNumber: syz [ 988.280074][ T5943] usb 1-1: config 0 descriptor?? [ 988.292990][ T5943] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 988.498362][ T5943] gspca_sn9c2028: read1 error -32 [ 988.508150][ T5943] gspca_sn9c2028: read1 error -32 [ 989.268465][T18460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.305686][T18460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.520284][T18468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.530525][T18468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.435704][T18483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.507725][T18483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.823760][ T5973] usb 1-1: USB disconnect, device number 112 [ 993.159595][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.169869][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.325918][T18511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.341395][T18511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.971947][T18541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.981039][T18541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.007172][T18541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.099649][T18541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.143962][T18541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.193306][T18541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.898968][T18554] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 996.931613][ T5973] IPVS: starting estimator thread 0... [ 997.050637][T18555] IPVS: using max 29 ests per chain, 69600 per kthread [ 997.052395][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3608'. [ 997.378780][T18569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3611'. [ 997.399942][T18573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.419056][T18573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.951560][T18580] FAULT_INJECTION: forcing a failure. [ 997.951560][T18580] name failslab, interval 1, probability 0, space 0, times 0 [ 997.974109][T18580] CPU: 1 UID: 0 PID: 18580 Comm: syz.4.3613 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 997.974150][T18580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 997.974162][T18580] Call Trace: [ 997.974170][T18580] [ 997.974178][T18580] dump_stack_lvl+0x189/0x250 [ 997.974206][T18580] ? __pfx____ratelimit+0x10/0x10 [ 997.974233][T18580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 997.974258][T18580] ? __pfx__printk+0x10/0x10 [ 997.974285][T18580] ? __pfx___might_resched+0x10/0x10 [ 997.974312][T18580] ? fs_reclaim_acquire+0x7d/0x100 [ 997.974341][T18580] should_fail_ex+0x414/0x560 [ 997.974373][T18580] should_failslab+0xa8/0x100 [ 997.974400][T18580] __kmalloc_noprof+0xcb/0x4f0 [ 997.974420][T18580] ? tomoyo_encode+0x28b/0x550 [ 997.974447][T18580] tomoyo_encode+0x28b/0x550 [ 997.974476][T18580] tomoyo_realpath_from_path+0x58d/0x5d0 [ 997.974513][T18580] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 997.974533][T18580] tomoyo_path_number_perm+0x1e8/0x5a0 [ 997.974556][T18580] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 997.974596][T18580] ? __lock_acquire+0xab9/0xd20 [ 997.974642][T18580] ? __fget_files+0x2a/0x420 [ 997.974671][T18580] ? __fget_files+0x2a/0x420 [ 997.974693][T18580] ? __fget_files+0x3a0/0x420 [ 997.974715][T18580] ? __fget_files+0x2a/0x420 [ 997.974742][T18580] security_file_ioctl+0xcb/0x2d0 [ 997.974764][T18580] __se_sys_ioctl+0x47/0x170 [ 997.974786][T18580] do_syscall_64+0xfa/0x3b0 [ 997.974803][T18580] ? lockdep_hardirqs_on+0x9c/0x150 [ 997.974846][T18580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.974865][T18580] ? clear_bhb_loop+0x60/0xb0 [ 997.974888][T18580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.974906][T18580] RIP: 0033:0x7f7eef78eb69 [ 997.974924][T18580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 997.974940][T18580] RSP: 002b:00007f7ef06e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 997.974961][T18580] RAX: ffffffffffffffda RBX: 00007f7eef9b5fa0 RCX: 00007f7eef78eb69 [ 997.974975][T18580] RDX: 00002000000003c0 RSI: 0000000000002285 RDI: 0000000000000003 [ 997.974987][T18580] RBP: 00007f7ef06e2090 R08: 0000000000000000 R09: 0000000000000000 [ 997.974999][T18580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 997.975011][T18580] R13: 0000000000000000 R14: 00007f7eef9b5fa0 R15: 00007f7eefadfa28 [ 997.975042][T18580] [ 998.225163][T18580] ERROR: Out of memory at tomoyo_realpath_from_path. [ 998.456794][T18585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.465968][T18585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.647928][T18589] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 1002.062976][T18624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1002.420425][T18628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.537052][T18631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.550962][T18628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.560723][T18631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.620963][T18628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.678343][T18628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.460402][T18644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3636'. [ 1003.497772][T18644] netlink: 660 bytes leftover after parsing attributes in process `syz.4.3636'. [ 1004.400224][ T5942] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1004.594813][T18660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.603605][T18660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.920529][ T5942] usb 1-1: config 0 has an invalid interface number: 204 but max is 0 [ 1004.967078][ T5942] usb 1-1: config 0 has no interface number 0 [ 1005.040608][ T5942] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 1005.068306][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.119059][ T5942] usb 1-1: Product: syz [ 1005.139385][ T5942] usb 1-1: Manufacturer: syz [ 1005.155241][ T5942] usb 1-1: SerialNumber: syz [ 1005.191206][ T5942] usb 1-1: config 0 descriptor?? [ 1005.222853][ T5942] ems_usb 1-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1005.260840][ T5942] ems_usb 1-1:0.204: probe with driver ems_usb failed with error -22 [ 1005.460372][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 1005.521413][T16171] usb 1-1: USB disconnect, device number 113 [ 1007.764373][T18695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3650'. [ 1007.790696][T18695] input: syz0 as /devices/virtual/input/input45 [ 1008.369889][T18706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.378940][T18706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.087797][T18713] fuse: Bad value for 'fd' [ 1012.130239][T16171] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1012.276438][T18758] fuse: Bad value for 'fd' [ 1012.350395][T16171] usb 1-1: device descriptor read/64, error -71 [ 1012.444478][T18761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.482472][T18761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.640328][T18762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.649482][T16171] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1012.822610][T18762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1013.012996][T16171] usb 1-1: device descriptor read/64, error -71 [ 1013.123282][T16171] usb usb1-port1: attempt power cycle [ 1013.470776][T16171] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1013.525738][T16171] usb 1-1: device descriptor read/8, error -71 [ 1013.820592][T16171] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1013.877705][T16171] usb 1-1: device descriptor read/8, error -71 [ 1014.000876][T16171] usb usb1-port1: unable to enumerate USB device [ 1015.821412][T18796] fuse: Bad value for 'fd' [ 1016.206868][T18801] FAULT_INJECTION: forcing a failure. [ 1016.206868][T18801] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.281057][T18801] CPU: 1 UID: 0 PID: 18801 Comm: syz.2.3680 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1016.281085][T18801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1016.281093][T18801] Call Trace: [ 1016.281098][T18801] [ 1016.281103][T18801] dump_stack_lvl+0x189/0x250 [ 1016.281121][T18801] ? __pfx____ratelimit+0x10/0x10 [ 1016.281139][T18801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1016.281151][T18801] ? __pfx__printk+0x10/0x10 [ 1016.281169][T18801] ? __pfx___might_resched+0x10/0x10 [ 1016.281184][T18801] ? fs_reclaim_acquire+0x7d/0x100 [ 1016.281203][T18801] should_fail_ex+0x414/0x560 [ 1016.281221][T18801] should_failslab+0xa8/0x100 [ 1016.281237][T18801] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1016.281250][T18801] ? flock_lock_inode+0x21f/0x1420 [ 1016.281267][T18801] flock_lock_inode+0x21f/0x1420 [ 1016.281286][T18801] ? __pfx___might_resched+0x10/0x10 [ 1016.281300][T18801] ? aa_file_perm+0x40c/0xe70 [ 1016.281315][T18801] ? __pfx_flock_lock_inode+0x10/0x10 [ 1016.281336][T18801] locks_lock_inode_wait+0x107/0x410 [ 1016.281351][T18801] ? __pfx_locks_lock_inode_wait+0x10/0x10 [ 1016.281365][T18801] ? __fget_files+0x2a/0x420 [ 1016.281380][T18801] ? end_current_label_crit_section+0x152/0x180 [ 1016.281395][T18801] ? common_file_perm+0x199/0x200 [ 1016.281413][T18801] __se_sys_flock+0x467/0x5b0 [ 1016.281427][T18801] ? __pfx___se_sys_flock+0x10/0x10 [ 1016.281460][T18801] ? do_syscall_64+0xbe/0x3b0 [ 1016.281474][T18801] do_syscall_64+0xfa/0x3b0 [ 1016.281484][T18801] ? lockdep_hardirqs_on+0x9c/0x150 [ 1016.281501][T18801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.281512][T18801] ? clear_bhb_loop+0x60/0xb0 [ 1016.281525][T18801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.281536][T18801] RIP: 0033:0x7f6142d8eb69 [ 1016.281548][T18801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1016.281557][T18801] RSP: 002b:00007f6140bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 1016.281572][T18801] RAX: ffffffffffffffda RBX: 00007f6142fb6080 RCX: 00007f6142d8eb69 [ 1016.281580][T18801] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 1016.281587][T18801] RBP: 00007f6140bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.281594][T18801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1016.281601][T18801] R13: 0000000000000000 R14: 00007f6142fb6080 R15: 00007f61430dfa28 [ 1016.281619][T18801] [ 1017.276852][T18818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.289568][T18818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.932388][T18828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.192610][T18828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.209219][T18833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.270664][T18833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.722169][T18838] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1018.729030][T18838] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1018.741829][T18838] hsr_slave_0: left promiscuous mode [ 1018.747826][T18838] hsr_slave_1: left promiscuous mode [ 1018.870320][T16171] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1019.031327][T16171] usb 1-1: Using ep0 maxpacket: 8 [ 1019.046767][T16171] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1019.068280][T16171] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 1019.104201][T16171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.198909][T16171] usb 1-1: config 0 descriptor?? [ 1019.649943][T16171] lenovo 0003:17EF:6062.001F: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.0-1/input0 [ 1020.296052][T18849] FAULT_INJECTION: forcing a failure. [ 1020.296052][T18849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.378572][T18849] CPU: 1 UID: 0 PID: 18849 Comm: syz.3.3695 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1020.378603][T18849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1020.378615][T18849] Call Trace: [ 1020.378623][T18849] [ 1020.378632][T18849] dump_stack_lvl+0x189/0x250 [ 1020.378659][T18849] ? __pfx____ratelimit+0x10/0x10 [ 1020.378725][T18849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1020.378747][T18849] ? __pfx__printk+0x10/0x10 [ 1020.378771][T18849] ? __might_fault+0xb0/0x130 [ 1020.378805][T18849] should_fail_ex+0x414/0x560 [ 1020.378837][T18849] _copy_from_iter+0x1db/0x16f0 [ 1020.378868][T18849] ? anon_pipe_write+0x16a/0x1360 [ 1020.378894][T18849] ? __pfx__copy_from_iter+0x10/0x10 [ 1020.378914][T18849] ? __pfx___mutex_lock+0x10/0x10 [ 1020.378935][T18849] ? aa_file_perm+0x122/0xe70 [ 1020.378963][T18849] ? page_copy_sane+0x4e/0x280 [ 1020.378986][T18849] copy_page_from_iter+0xdd/0x170 [ 1020.379011][T18849] anon_pipe_write+0x10b4/0x1360 [ 1020.379058][T18849] ? end_current_label_crit_section+0x152/0x180 [ 1020.379079][T18849] ? __pfx_anon_pipe_write+0x10/0x10 [ 1020.379094][T18849] ? common_file_perm+0x199/0x200 [ 1020.379108][T18849] ? bpf_lsm_file_permission+0x9/0x20 [ 1020.379120][T18849] ? security_file_permission+0x75/0x290 [ 1020.379142][T18849] vfs_write+0x548/0xa90 [ 1020.379158][T18849] ? __pfx_anon_pipe_write+0x10/0x10 [ 1020.379174][T18849] ? __pfx_vfs_write+0x10/0x10 [ 1020.379193][T18849] ? __fget_files+0x2a/0x420 [ 1020.379213][T18849] ksys_write+0x145/0x250 [ 1020.379227][T18849] ? __pfx_ksys_write+0x10/0x10 [ 1020.379243][T18849] ? do_syscall_64+0xbe/0x3b0 [ 1020.379257][T18849] do_syscall_64+0xfa/0x3b0 [ 1020.379267][T18849] ? lockdep_hardirqs_on+0x9c/0x150 [ 1020.379283][T18849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.379295][T18849] ? clear_bhb_loop+0x60/0xb0 [ 1020.379308][T18849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.379319][T18849] RIP: 0033:0x7f111e98d61f [ 1020.379330][T18849] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1020.379340][T18849] RSP: 002b:00007f111f842c50 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1020.379354][T18849] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f111e98d61f [ 1020.379363][T18849] RDX: 000000000000000b RSI: 00007f111f842e50 RDI: 0000000000000002 [ 1020.379370][T18849] RBP: 00007f111f842e50 R08: 0000000000000000 R09: 00007f111f842ce7 [ 1020.379377][T18849] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 1020.379384][T18849] R13: 00007f111eb87640 R14: 000000000000000b R15: 00007f111eb88ca0 [ 1020.379402][T18849] [ 1021.065984][T18863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.076309][T18863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.671453][ T5912] usb 1-1: USB disconnect, device number 118 [ 1023.656408][T18895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1023.679339][T18895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1023.869357][ T5933] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1023.948330][T18902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1023.984938][T18902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.014961][ T5933] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 1024.039937][ T5933] usb 2-1: USB disconnect, device number 13 [ 1024.070280][T16171] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 1024.233637][T16171] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1024.246655][T16171] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1024.260019][T16171] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1024.271865][T16171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1024.280046][T16171] usb 1-1: SerialNumber: syz [ 1024.292566][T16171] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1024.303080][T16171] usb-storage 1-1:1.0: USB Mass Storage device detected [ 1024.340737][T16171] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1024.376388][ T5933] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1024.387969][T16171] scsi host1: usb-storage 1-1:1.0 [ 1024.479526][T18907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.489123][T18908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.518766][T18908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.536231][T18907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.545207][T18908] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3713'. [ 1024.554612][T18908] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3713'. [ 1024.615236][ T5933] usb 2-1: device descriptor read/all, error -71 [ 1024.866862][T18913] netlink: 'syz.0.3711': attribute type 10 has an invalid length. [ 1024.878425][T18913] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3711'. [ 1024.898811][T18913] team0: Port device geneve0 added [ 1024.971671][ T5933] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1025.130662][ T5933] usb 2-1: Using ep0 maxpacket: 8 [ 1025.140473][ T5933] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1025.160614][ T5933] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 1025.170219][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.183635][T18924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.193150][T18924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.201707][ T5933] usb 2-1: config 0 descriptor?? [ 1025.668436][ T5943] usb 1-1: USB disconnect, device number 119 [ 1025.668521][ T5933] corsair 0003:1B1C:1B09.0020: hidraw0: USB HID v0.00 Device [HID 1b1c:1b09] on usb-dummy_hcd.1-1/input0 [ 1026.370471][T18941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3721'. [ 1027.025042][T18960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.045227][T18960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.077913][T18961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.098955][T18961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.439278][T18961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.453601][T18961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.490716][ T5943] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1027.556913][T18961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.608473][T18961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.680225][ T5943] usb 1-1: Using ep0 maxpacket: 8 [ 1027.688419][ T5943] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1027.700809][ T5943] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1027.719512][ T5943] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1027.861114][ T30] audit: type=1326 audit(1754040378.621:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18962 comm="syz.0.3727" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe71638eb69 code=0x0 [ 1028.910020][ T5912] usb 2-1: USB disconnect, device number 15 [ 1029.034767][T18974] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3731'. [ 1029.807343][T18983] netlink: 'syz.1.3732': attribute type 10 has an invalid length. [ 1029.879305][T18983] team0: Device ipvlan1 failed to register rx_handler [ 1030.127797][ T5943] usb 1-1: string descriptor 0 read error: -71 [ 1030.144810][ T5943] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1030.170557][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.211665][ T5943] usb 1-1: can't set config #1, error -71 [ 1030.220696][ T5943] usb 1-1: USB disconnect, device number 120 [ 1030.701474][T19003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.717742][T19003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.400211][ T5943] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1031.570318][ T5943] usb 1-1: Using ep0 maxpacket: 32 [ 1031.589033][ T5943] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1031.618668][ T5943] usb 1-1: config 0 has no interface number 0 [ 1031.646061][ T5943] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1031.656735][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.668854][ T5943] usb 1-1: Product: syz [ 1031.676577][ T5943] usb 1-1: Manufacturer: syz [ 1031.683182][ T5943] usb 1-1: SerialNumber: syz [ 1031.697308][ T5943] usb 1-1: config 0 descriptor?? [ 1031.713602][ T5943] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1031.744975][ T5943] usb 1-1: selecting invalid altsetting 1 [ 1031.767693][ T5943] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1031.787952][ T5943] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1031.818062][ T5943] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1031.870758][ T5943] usb 1-1: media controller created [ 1031.922359][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1031.931006][T19013] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3745'. [ 1032.136310][ T5943] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1032.196348][T19023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.205795][T19023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.281733][ T5943] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1032.322172][ T5943] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1033.328592][ T5943] usb 1-1: USB disconnect, device number 121 [ 1033.880470][ T5933] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1033.916546][ T5943] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1034.089287][ T5943] usb 1-1: config 0 has no interfaces? [ 1034.104070][ T5943] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1034.114001][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.144924][ T5943] usb 1-1: Product: syz [ 1034.185912][ T5943] usb 1-1: Manufacturer: syz [ 1034.197209][ T5943] usb 1-1: SerialNumber: syz [ 1034.332180][ T5933] usb 2-1: Using ep0 maxpacket: 16 [ 1034.350016][ T5933] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1034.389768][ T5933] usb 2-1: config 0 has no interface number 0 [ 1034.400456][ T5943] usb 1-1: config 0 descriptor?? [ 1034.417960][ T5933] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1034.470850][ T5933] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1034.482160][ T5933] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1034.496069][ T5933] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1034.517026][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.606486][ T5933] usb 2-1: Product: syz [ 1034.617742][ T5933] usb 2-1: Manufacturer: syz [ 1034.652899][ T5933] usb 2-1: SerialNumber: syz [ 1034.698209][ T5933] usb 2-1: config 0 descriptor?? [ 1034.716715][T19042] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1034.724520][T19042] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1034.735438][T19044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.752268][T19044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.019741][T19042] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1035.035872][T19042] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1035.454267][ T5933] Error reading MAC address [ 1035.662980][ T5933] sr9700 2-1:0.41: probe with driver sr9700 failed with error -71 [ 1035.705359][ T5933] usb 2-1: USB disconnect, device number 16 [ 1035.710595][T19056] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3757'. [ 1035.879630][T19062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.908241][T19062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.935878][T19062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.948589][T19062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.979757][T19064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.990902][T19064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.004848][T19064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.013789][T19064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.024783][T19064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.033640][T19064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.384879][ T5943] usb 1-1: USB disconnect, device number 122 [ 1036.522763][T19081] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3768'. [ 1036.598978][T19083] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3766'. [ 1037.897460][T19099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.104570][T19099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.691613][T19083] syz.1.3766 (19083): drop_caches: 2 [ 1040.500290][ T43] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1040.859892][T19132] veth0: entered promiscuous mode [ 1040.876973][T19132] veth0: left promiscuous mode [ 1040.882283][ T43] usb 2-1: device descriptor read/64, error -71 [ 1041.032017][T19138] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3781'. [ 1041.070271][ T5912] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1041.130311][ T43] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1041.220222][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 1041.233595][ T5912] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1041.242844][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.253348][ T5912] usb 1-1: Product: syz [ 1041.271361][ T5912] usb 1-1: Manufacturer: syz [ 1041.272009][T19144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.286753][T19144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.331979][ T43] usb 2-1: device descriptor read/64, error -71 [ 1041.792974][ T5912] usb 1-1: SerialNumber: syz [ 1041.804459][ T43] usb usb2-port1: attempt power cycle [ 1041.834366][ T5912] usb 1-1: config 0 descriptor?? [ 1042.033517][T19152] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3785'. [ 1042.047085][T19130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.058945][T19130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.085545][T19130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.120697][T19130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.139661][T19152] kvm: pic: level sensitive irq not supported [ 1042.139728][T19152] picdev_read: 1 callbacks suppressed [ 1042.139739][T19152] kvm: pic: non byte read [ 1042.157632][T19152] kvm: pic: level sensitive irq not supported [ 1042.157723][T19152] kvm: pic: non byte read [ 1042.169180][T19152] kvm: pic: level sensitive irq not supported [ 1042.169239][T19152] kvm: pic: non byte read [ 1042.356406][ T43] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1042.385279][T19152] kvm: pic: level sensitive irq not supported [ 1042.385497][T19152] kvm: pic: non byte read [ 1042.394021][ T43] usb 2-1: device descriptor read/8, error -71 [ 1042.415134][T19152] kvm: pic: level sensitive irq not supported [ 1042.415215][T19152] kvm: pic: non byte read [ 1042.423583][ T5912] usb read operation failed. (-32) [ 1042.436765][T19152] kvm: pic: level sensitive irq not supported [ 1042.436846][T19152] kvm: pic: non byte read [ 1042.579988][T19152] kvm: pic: level sensitive irq not supported [ 1042.601596][T19152] kvm: pic: non byte read [ 1042.639341][ T5912] usb write operation failed. (-71) [ 1042.659849][ T5912] usb write operation failed. (-71) [ 1042.673186][ T43] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1042.690938][T19152] kvm: pic: level sensitive irq not supported [ 1042.691021][T19152] kvm: pic: non byte read [ 1042.711511][ T5912] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 1042.719039][T19152] kvm: pic: level sensitive irq not supported [ 1042.719120][T19152] kvm: pic: non byte read [ 1042.731772][ T43] usb 2-1: device descriptor read/8, error -71 [ 1042.735268][T19156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3786'. [ 1042.748726][ T5912] usb 1-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1042.765484][ T5912] usb 1-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1042.795198][T19156] netlink: 660 bytes leftover after parsing attributes in process `syz.2.3786'. [ 1042.857792][ T43] usb usb2-port1: unable to enumerate USB device [ 1043.647959][ T30] audit: type=1800 audit(1754040394.391:344): pid=19176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3793" name="nullb0" dev="devtmpfs" ino=3596 res=0 errno=0 [ 1043.957615][T19178] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3794'. [ 1044.439889][T19189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3798'. [ 1044.915686][T19199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.937864][T19199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.968791][T19199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.977523][ T31] INFO: task kworker/1:8:5945 blocked for more than 143 seconds. [ 1044.988670][ T31] Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 [ 1045.010885][T19199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.019730][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1045.037626][T19199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.053011][ T31] task:kworker/1:8 state:D stack:21592 pid:5945 tgid:5945 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1045.072802][T19199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.092639][ T31] Workqueue: usb_hub_wq hub_event [ 1045.127262][ T31] Call Trace: [ 1045.142454][ T31] [ 1045.146965][ T31] __schedule+0x1798/0x4cc0 [ 1045.157494][ T31] ? worker_thread+0x8a0/0xda0 [ 1045.168552][ T31] ? __lock_acquire+0xab9/0xd20 [ 1045.179209][ T31] ? __pfx___schedule+0x10/0x10 [ 1045.190220][ T31] ? schedule+0x91/0x360 [ 1045.199152][ T31] schedule+0x165/0x360 [ 1045.208274][ T31] schedule_timeout+0x9a/0x270 [ 1045.227944][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1045.249667][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1045.261791][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1045.284240][ T31] ? wait_for_completion+0x267/0x5d0 [ 1045.303213][ T31] wait_for_completion+0x2bf/0x5d0 [ 1045.330413][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1045.341104][ T31] i2c_del_adapter+0x581/0x6e0 [ 1045.345935][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1045.364673][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1045.370040][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 1045.390325][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 1045.395309][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 1045.410182][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 1045.421509][ T31] usb_probe_interface+0x637/0xbf0 [ 1045.442428][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 1045.454804][ T31] really_probe+0x26d/0x9e0 [ 1045.459572][ T31] __driver_probe_device+0x18c/0x2f0 [ 1045.466933][ T31] driver_probe_device+0x4f/0x430 [ 1045.472415][ T31] __device_attach_driver+0x2ce/0x530 [ 1045.478697][ T31] bus_for_each_drv+0x24e/0x2e0 [ 1045.487114][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1045.496568][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1045.505968][ T31] __device_attach+0x2b8/0x400 [ 1045.512012][ T31] ? __pfx___device_attach+0x10/0x10 [ 1045.517548][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1045.527611][ T31] bus_probe_device+0x185/0x260 [ 1045.533827][ T31] device_add+0x7b6/0xb50 [ 1045.538337][ T31] usb_set_configuration+0x1a87/0x20e0 [ 1045.547936][ T31] usb_generic_driver_probe+0x8d/0x150 [ 1045.555797][ T31] usb_probe_device+0x1c1/0x390 [ 1045.566600][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 1045.574508][ T31] really_probe+0x26d/0x9e0 [ 1045.579138][ T31] __driver_probe_device+0x18c/0x2f0 [ 1045.585240][ T31] driver_probe_device+0x4f/0x430 [ 1045.590479][ T31] __device_attach_driver+0x2ce/0x530 [ 1045.596009][ T31] bus_for_each_drv+0x24e/0x2e0 [ 1045.601842][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1045.607818][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1045.613671][ T31] __device_attach+0x2b8/0x400 [ 1045.618477][ T31] ? __pfx___device_attach+0x10/0x10 [ 1045.623903][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1045.629596][ T31] bus_probe_device+0x185/0x260 [ 1045.634554][ T31] device_add+0x7b6/0xb50 [ 1045.638914][ T31] usb_new_device+0xa39/0x16f0 [ 1045.643787][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 1045.649007][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1045.654538][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1045.659768][ T31] hub_event+0x2958/0x4a20 [ 1045.664506][ T31] ? __pfx_hub_event+0x10/0x10 [ 1045.669298][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1045.675203][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1045.680523][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1045.686303][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1045.692088][ T31] process_scheduled_works+0xae1/0x17b0 [ 1045.697693][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1045.703875][ T31] worker_thread+0x8a0/0xda0 [ 1045.708527][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1045.715035][ T31] ? __kthread_parkme+0x7b/0x200 [ 1045.720038][ T31] kthread+0x70e/0x8a0 [ 1045.724228][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1045.730375][ T31] ? __pfx_kthread+0x10/0x10 [ 1045.735015][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1045.741193][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1045.746433][ T31] ? __pfx_kthread+0x10/0x10 [ 1045.751292][ T31] ret_from_fork+0x3f9/0x770 [ 1045.755924][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1045.761577][ T31] ? __switch_to_asm+0x39/0x70 [ 1045.766369][ T31] ? __switch_to_asm+0x33/0x70 [ 1045.772579][ T31] ? __pfx_kthread+0x10/0x10 [ 1045.777265][ T31] ret_from_fork_asm+0x1a/0x30 [ 1045.782222][ T31] [ 1045.785350][ T31] [ 1045.785350][ T31] Showing all locks held in the system: [ 1045.793151][ T31] 1 lock held by khungtaskd/31: [ 1045.798022][ T31] #0: ffffffff8e139e60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1045.807993][ T31] 2 locks held by getty/5608: [ 1045.814845][ T31] #0: ffff88814de740a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1045.824824][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1045.835537][ T31] 6 locks held by kworker/1:5/5912: [ 1045.840854][ T31] #0: ffff88801de87d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1045.852674][ T31] #1: ffffc9000467fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1045.864645][ T31] #2: ffff88802770c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1045.873790][ T31] #3: ffff88807b775198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1045.883092][ T31] #4: ffff88802f53c160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1045.892380][ T31] #5: ffffffff8dfe0270 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 1045.902852][ T31] 5 locks held by kworker/1:8/5945: [ 1045.908214][ T31] #0: ffff88801de87d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1045.919620][ T31] #1: ffffc900048c7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1045.931988][ T31] #2: ffff8881463d2198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1045.941768][ T31] #3: ffff88805626b198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1045.951174][ T31] #4: ffff8880241ad160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1045.960519][ T31] 6 locks held by kworker/u8:3/14987: [ 1045.965908][ T31] 4 locks held by udevd/16026: [ 1045.970751][ T31] #0: ffff88807b70fd58 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 1045.979613][ T31] #1: ffff88807c61e488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 1045.989364][ T31] #2: ffff88805af3dd28 (kn->active#28){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 1045.999394][ T31] #3: ffff88805626b198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1046.008929][ T31] [ 1046.018499][ T31] ============================================= [ 1046.018499][ T31] [ 1046.028197][ T31] NMI backtrace for cpu 1 [ 1046.028216][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1046.028237][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1046.028248][ T31] Call Trace: [ 1046.028256][ T31] [ 1046.028264][ T31] dump_stack_lvl+0x189/0x250 [ 1046.028290][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1046.028308][ T31] ? __pfx__printk+0x10/0x10 [ 1046.028341][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1046.028368][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1046.028393][ T31] ? __pfx__printk+0x10/0x10 [ 1046.028418][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1046.028445][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1046.028470][ T31] watchdog+0xf93/0xfe0 [ 1046.028496][ T31] ? watchdog+0x1de/0xfe0 [ 1046.028536][ T31] kthread+0x70e/0x8a0 [ 1046.028559][ T31] ? __pfx_watchdog+0x10/0x10 [ 1046.028582][ T31] ? __pfx_kthread+0x10/0x10 [ 1046.028605][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1046.028633][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1046.028659][ T31] ? __pfx_kthread+0x10/0x10 [ 1046.028682][ T31] ret_from_fork+0x3f9/0x770 [ 1046.028713][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1046.028745][ T31] ? __switch_to_asm+0x39/0x70 [ 1046.028765][ T31] ? __switch_to_asm+0x33/0x70 [ 1046.028784][ T31] ? __pfx_kthread+0x10/0x10 [ 1046.028806][ T31] ret_from_fork_asm+0x1a/0x30 [ 1046.028842][ T31] [ 1046.028851][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1046.179823][ C0] NMI backtrace for cpu 0 [ 1046.179842][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1046.179860][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1046.179870][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1046.179897][ C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 2f 15 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1046.179911][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 1046.179927][ C0] RAX: be0d00c6d736fe00 RBX: ffffffff81967ab8 RCX: be0d00c6d736fe00 [ 1046.179939][ C0] RDX: 0000000000000001 RSI: ffffffff8d98513c RDI: ffffffff8be2fe00 [ 1046.179950][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 1046.179961][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa1b830 [ 1046.179972][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a18 [ 1046.179983][ C0] FS: 0000000000000000(0000) GS:ffff888125c5c000(0000) knlGS:0000000000000000 [ 1046.179996][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1046.180006][ C0] CR2: 00002000003e3030 CR3: 00000000787d6000 CR4: 00000000003526f0 [ 1046.180022][ C0] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 1046.180032][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1046.180042][ C0] Call Trace: [ 1046.180050][ C0] [ 1046.180056][ C0] default_idle+0x13/0x20 [ 1046.180072][ C0] default_idle_call+0x74/0xb0 [ 1046.180094][ C0] do_idle+0x1e8/0x510 [ 1046.180120][ C0] ? __pfx_do_idle+0x10/0x10 [ 1046.180150][ C0] cpu_startup_entry+0x44/0x60 [ 1046.180172][ C0] rest_init+0x2de/0x300 [ 1046.180190][ C0] start_kernel+0x3a9/0x410 [ 1046.180211][ C0] x86_64_start_reservations+0x24/0x30 [ 1046.180226][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1046.180242][ C0] common_startup_64+0x13e/0x147 [ 1046.180267][ C0] [ 1046.180973][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1046.180989][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1046.181010][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1046.181021][ T31] Call Trace: [ 1046.181030][ T31] [ 1046.181038][ T31] dump_stack_lvl+0x99/0x250 [ 1046.181061][ T31] ? __asan_memcpy+0x40/0x70 [ 1046.181079][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1046.181098][ T31] ? __pfx__printk+0x10/0x10 [ 1046.181131][ T31] vpanic+0x27a/0x730 [ 1046.181152][ T31] ? __pfx_vpanic+0x10/0x10 [ 1046.181170][ T31] ? preempt_schedule+0xae/0xc0 [ 1046.181195][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1046.181224][ T31] panic+0xb9/0xc0 [ 1046.181250][ T31] ? __pfx_panic+0x10/0x10 [ 1046.181269][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1046.181297][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1046.181323][ T31] watchdog+0xfd2/0xfe0 [ 1046.181349][ T31] ? watchdog+0x1de/0xfe0 [ 1046.181375][ T31] kthread+0x70e/0x8a0 [ 1046.181398][ T31] ? __pfx_watchdog+0x10/0x10 [ 1046.181418][ T31] ? __pfx_kthread+0x10/0x10 [ 1046.181438][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1046.181461][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1046.181483][ T31] ? __pfx_kthread+0x10/0x10 [ 1046.181503][ T31] ret_from_fork+0x3f9/0x770 [ 1046.181530][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1046.181559][ T31] ? __switch_to_asm+0x39/0x70 [ 1046.181577][ T31] ? __switch_to_asm+0x33/0x70 [ 1046.181596][ T31] ? __pfx_kthread+0x10/0x10 [ 1046.181615][ T31] ret_from_fork_asm+0x1a/0x30 [ 1046.181649][ T31] [ 1046.533939][ T31] Kernel Offset: disabled [ 1046.538261][ T31] Rebooting in 86400 seconds..