last executing test programs: 4m26.663553314s ago: executing program 3 (id=140): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000800)={@flat=@binder={0x73622a85, 0xa, 0x0, 0x38}, @flat=@handle={0x73682a85, 0x101, 0x2}, @fda={0x66642a85, 0xa, 0x1, 0x21}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000840)=ANY=[]) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x8c) add_key$keyring(&(0x7f0000000180), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r3) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000800)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0xc000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30"], 0x7c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a0101"], 0x188}}, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x891c, 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x22080c4, 0x0) 4m26.489468534s ago: executing program 3 (id=141): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) 4m26.420732643s ago: executing program 3 (id=142): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) (fail_nth: 1) 4m26.166623859s ago: executing program 3 (id=144): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r2, 0x0) timerfd_create(0x8, 0x80800) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_fuse_handle_req(r3, &(0x7f0000000240)="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", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000000)=0x200028, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) 4m25.933001655s ago: executing program 3 (id=145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) listen(r1, 0x5) accept4(r1, &(0x7f0000000240)=@x25, 0x0, 0x80800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x16, 0x0, &(0x7f0000000180)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010a5740000000000000000000000000a48000000170a01080000000000000000020000000900020073797a30000000000900010073797a30"], 0x70}}, 0x24040880) syz_emit_vhci(&(0x7f0000004940)=ANY=[@ANYBLOB="02c92012000e0005"], 0x17) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000040)) 4m25.450181871s ago: executing program 3 (id=148): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x400, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x24004080}, 0x800) connect$tipc(r0, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x1}}, 0x10) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002240)={0x100, 0x0, r2, [{0x8ac, 0x332, 0x1, 0x1, ':'}, {0x1, 0xfff, 0x3, 0x7f, '\'],'}, {0x6, 0x0, 0x5, 0x9dd, 'TIPC\x00'}, {0x1, 0x7ff, 0x6, 0x8, '\'%}.])'}, {0x2, 0x3, 0xf, 0x856d, '/dev/dlm_plock\x00'}, {0x5, 0x57, 0xf, 0x2, '/dev/dlm_plock\x00'}, {0x0, 0x6, 0x5, 0xfffffffa, 'TIPC\x00'}]}, 0x100) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x40044000) r4 = openat$cgroup_ro(r0, &(0x7f0000002440)='pids.events\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000002540)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x34, r1, 0x800, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x10, 0xc, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80d4}, 0x41) mount$9p_fd(0x0, &(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x60, &(0x7f0000002600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@fscache}], [{@uid_eq={'uid', 0x3d, r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x61, 0x53, 0x35, 0x65, 0x64, 0x64, 0x61], 0x2d, [0x61, 0x0, 0x33, 0x61], 0x2d, [0x62, 0x62, 0x61], 0x2d, [0x31, 0x66, 0x31], 0x2d, [0x30, 0x61, 0x61, 0x62, 0x37, 0x66, 0xf, 0x37]}}}]}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000002740)={'syztnl1\x00', &(0x7f00000026c0)={'ip6_vti0\x00', 0x0, 0x2f, 0xfc, 0xef, 0x4, 0x4c, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x80, 0x7fff}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000002800)={'ip6_vti0\x00', &(0x7f0000002780)={'ip6tnl0\x00', r5, 0x29, 0x2, 0xd, 0xffff, 0x60, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x8, 0x8000, 0x5d, 0x2}}) fsetxattr$security_capability(r4, &(0x7f0000002840), &(0x7f0000002880)=@v2={0x2000000, [{0x10000, 0xfffff87c}, {0x8, 0x9}]}, 0x14, 0x2) syz_open_dev$sndmidi(&(0x7f00000028c0), 0x3, 0x141000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002940), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000002c80)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c40)={&(0x7f00000029c0)={0x24c, r6, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xdbd9, 0x18}}}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_MESH_SETUP={0x1c4, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0xfe, 0x3, "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"}, @NL80211_MESH_SETUP_IE={0x9a, 0x3, "d76f91dfade13a0ac52772d7ab535f714a06afd1a78fc8886131e10d290ba71681f6bebc3d4e3df72bdd5927139996c0f765d3feeb03fa26de3e97bfe5884a8bb32d227bed9888f3c0d5356ba59b0c474e6aa1f91af1e3c44fdd75aec8f6127448b1e3722e0f7449fdd6a361838044b58ffe1bc79e34180aa72db679abd03227e47ec6c7b1ffaf1dbfd50da935430bdc0b0ed74e5354"}]}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10}]]}, 0x24c}, 0x1, 0x0, 0x0, 0x4}, 0x200040c0) r8 = add_key$keyring(&(0x7f0000002d40), &(0x7f0000002d80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000002cc0), &(0x7f0000002d00)={'syz', 0x1}, 0x0, 0x0, r8) sendmsg(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f0000002dc0)=@isdn={0x22, 0x9c, 0xb, 0x5, 0xb5}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002e40)="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", 0xff}, {&(0x7f0000002f40)="10b1addf88676efab8e19dba71890d57a5dd86e317e8279098d0654d99b2adb8faeaf77941e97048c33bef1b2ae9718f90ce3dcced5442a33171edb3befa780a982f0efa64d24b47398fa32831b82633d4be8b198cc095e069d8165fb5ff7598d179bbbc6b4ea0090ac291c5ccc95e811f3e7d860b1bbee55204d54f5657cc2946fa05b786b42640e2db35a3b944fd5b8ee12eeb2331495b643681b3f98a91b09987f4b96f35e99ed47ec72d6c3953484f1035", 0xb3}], 0x2, &(0x7f0000003040)=[{0x28, 0x1, 0x7543, "ae964706027c83cfcf999da8137a3a5f702bc26cb29703f2"}, {0x88, 0x113, 0x1, "6963985199e1eae2b6bb406f510b46a073df4461447f7687543b7c3bc298306df92d5aad632b6b67572b374f2854ac31f438a4dea9ef12aa719b15e40c10f4863668b64d47fe29b3ff777d2c12a1c298098692110bbd26f65945e05ab313e88fc57058c1a41aa8c6b7ca462db2c798b7fb64"}, {0xc8, 0x103, 0xb, "84df0b274d8b9570e45b60c9cf5255d02ec70de1d247aee27776d1e13338ffaf4dc1b3a6df45ed9b5cbc55f0f0f1f53609b2fbd220bb2e781a2522a9735fbc0b0ed58bad29c615dcc80edac5b6c6f42792da0a9325f31ddb1242885f9ef19d8951e5a95f28dac3d17ffb80026fc62185f09a24f117552b0160250ca46bc2578cb5859a89a25ce0e2ad438c74511c33591a22bb1904ca16116807b6d2bc6a4cb0150cbecd8f450f2d72b7b2aee4777634a0c563d59e65"}], 0x178}, 0x811) readv(0xffffffffffffffff, &(0x7f0000004480)=[{&(0x7f0000003200)=""/187, 0xbb}, {&(0x7f00000032c0)=""/136, 0x88}, {&(0x7f0000003380)=""/191, 0xbf}, {&(0x7f0000003440)=""/60, 0x3c}, {&(0x7f0000003480)=""/4096, 0x1000}], 0x5) socket$kcm(0x29, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000004500)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) bind$pptp(r9, &(0x7f0000004540)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000004580)={'veth1_virt_wifi\x00', {0x2, 0x4e23, @rand_addr=0x64010100}}) sendmsg$NFNL_MSG_ACCT_GET(r9, &(0x7f0000004680)={&(0x7f00000045c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004640)={&(0x7f0000004600)={0x28, 0x1, 0x7, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000046c0)={0x50, 0x0, r2, {0x7, 0x2b, 0x7f000000, 0x8000, 0xe, 0xe9f5, 0x7c, 0x0, 0x0, 0x0, 0x4}}, 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000004740)={0x0, 0x0}) syz_open_procfs(r10, &(0x7f00000047c0)='fd/3\x00') ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000004800)) 4m25.08189758s ago: executing program 32 (id=148): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x400, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x24004080}, 0x800) connect$tipc(r0, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x1}}, 0x10) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002240)={0x100, 0x0, r2, [{0x8ac, 0x332, 0x1, 0x1, ':'}, {0x1, 0xfff, 0x3, 0x7f, '\'],'}, {0x6, 0x0, 0x5, 0x9dd, 'TIPC\x00'}, {0x1, 0x7ff, 0x6, 0x8, '\'%}.])'}, {0x2, 0x3, 0xf, 0x856d, '/dev/dlm_plock\x00'}, {0x5, 0x57, 0xf, 0x2, '/dev/dlm_plock\x00'}, {0x0, 0x6, 0x5, 0xfffffffa, 'TIPC\x00'}]}, 0x100) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x40044000) r4 = openat$cgroup_ro(r0, &(0x7f0000002440)='pids.events\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000002540)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x34, r1, 0x800, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x10, 0xc, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80d4}, 0x41) mount$9p_fd(0x0, &(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x60, &(0x7f0000002600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@fscache}], [{@uid_eq={'uid', 0x3d, r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x61, 0x53, 0x35, 0x65, 0x64, 0x64, 0x61], 0x2d, [0x61, 0x0, 0x33, 0x61], 0x2d, [0x62, 0x62, 0x61], 0x2d, [0x31, 0x66, 0x31], 0x2d, [0x30, 0x61, 0x61, 0x62, 0x37, 0x66, 0xf, 0x37]}}}]}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000002740)={'syztnl1\x00', &(0x7f00000026c0)={'ip6_vti0\x00', 0x0, 0x2f, 0xfc, 0xef, 0x4, 0x4c, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x80, 0x7fff}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000002800)={'ip6_vti0\x00', &(0x7f0000002780)={'ip6tnl0\x00', r5, 0x29, 0x2, 0xd, 0xffff, 0x60, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x8, 0x8000, 0x5d, 0x2}}) fsetxattr$security_capability(r4, &(0x7f0000002840), &(0x7f0000002880)=@v2={0x2000000, [{0x10000, 0xfffff87c}, {0x8, 0x9}]}, 0x14, 0x2) syz_open_dev$sndmidi(&(0x7f00000028c0), 0x3, 0x141000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002940), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000002c80)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c40)={&(0x7f00000029c0)={0x24c, r6, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xdbd9, 0x18}}}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_MESH_SETUP={0x1c4, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0xfe, 0x3, "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"}, @NL80211_MESH_SETUP_IE={0x9a, 0x3, "d76f91dfade13a0ac52772d7ab535f714a06afd1a78fc8886131e10d290ba71681f6bebc3d4e3df72bdd5927139996c0f765d3feeb03fa26de3e97bfe5884a8bb32d227bed9888f3c0d5356ba59b0c474e6aa1f91af1e3c44fdd75aec8f6127448b1e3722e0f7449fdd6a361838044b58ffe1bc79e34180aa72db679abd03227e47ec6c7b1ffaf1dbfd50da935430bdc0b0ed74e5354"}]}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10}]]}, 0x24c}, 0x1, 0x0, 0x0, 0x4}, 0x200040c0) r8 = add_key$keyring(&(0x7f0000002d40), &(0x7f0000002d80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000002cc0), &(0x7f0000002d00)={'syz', 0x1}, 0x0, 0x0, r8) sendmsg(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f0000002dc0)=@isdn={0x22, 0x9c, 0xb, 0x5, 0xb5}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002e40)="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", 0xff}, {&(0x7f0000002f40)="10b1addf88676efab8e19dba71890d57a5dd86e317e8279098d0654d99b2adb8faeaf77941e97048c33bef1b2ae9718f90ce3dcced5442a33171edb3befa780a982f0efa64d24b47398fa32831b82633d4be8b198cc095e069d8165fb5ff7598d179bbbc6b4ea0090ac291c5ccc95e811f3e7d860b1bbee55204d54f5657cc2946fa05b786b42640e2db35a3b944fd5b8ee12eeb2331495b643681b3f98a91b09987f4b96f35e99ed47ec72d6c3953484f1035", 0xb3}], 0x2, &(0x7f0000003040)=[{0x28, 0x1, 0x7543, "ae964706027c83cfcf999da8137a3a5f702bc26cb29703f2"}, {0x88, 0x113, 0x1, "6963985199e1eae2b6bb406f510b46a073df4461447f7687543b7c3bc298306df92d5aad632b6b67572b374f2854ac31f438a4dea9ef12aa719b15e40c10f4863668b64d47fe29b3ff777d2c12a1c298098692110bbd26f65945e05ab313e88fc57058c1a41aa8c6b7ca462db2c798b7fb64"}, {0xc8, 0x103, 0xb, "84df0b274d8b9570e45b60c9cf5255d02ec70de1d247aee27776d1e13338ffaf4dc1b3a6df45ed9b5cbc55f0f0f1f53609b2fbd220bb2e781a2522a9735fbc0b0ed58bad29c615dcc80edac5b6c6f42792da0a9325f31ddb1242885f9ef19d8951e5a95f28dac3d17ffb80026fc62185f09a24f117552b0160250ca46bc2578cb5859a89a25ce0e2ad438c74511c33591a22bb1904ca16116807b6d2bc6a4cb0150cbecd8f450f2d72b7b2aee4777634a0c563d59e65"}], 0x178}, 0x811) readv(0xffffffffffffffff, &(0x7f0000004480)=[{&(0x7f0000003200)=""/187, 0xbb}, {&(0x7f00000032c0)=""/136, 0x88}, {&(0x7f0000003380)=""/191, 0xbf}, {&(0x7f0000003440)=""/60, 0x3c}, {&(0x7f0000003480)=""/4096, 0x1000}], 0x5) socket$kcm(0x29, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000004500)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) bind$pptp(r9, &(0x7f0000004540)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000004580)={'veth1_virt_wifi\x00', {0x2, 0x4e23, @rand_addr=0x64010100}}) sendmsg$NFNL_MSG_ACCT_GET(r9, &(0x7f0000004680)={&(0x7f00000045c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004640)={&(0x7f0000004600)={0x28, 0x1, 0x7, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000046c0)={0x50, 0x0, r2, {0x7, 0x2b, 0x7f000000, 0x8000, 0xe, 0xe9f5, 0x7c, 0x0, 0x0, 0x0, 0x4}}, 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000004740)={0x0, 0x0}) syz_open_procfs(r10, &(0x7f00000047c0)='fd/3\x00') ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000004800)) 3m38.395200594s ago: executing program 2 (id=400): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="577d0390101180b486c39cbc2871d38c8e4eaf6f7b42fd1314496644fd78dcaac99d689ddd90a0a407970d93c6e86b2cbcffd002826b316c1727d2074c", 0x3d}, {&(0x7f0000000080)="4274ca6f2d1462939766b7408a08121fa01ad87031135f65fd5765e962ab0684ad807f420b28d3d6e9abf399ccca9c9909bee546ad672c6af592b7d40d1fb61fac880c987790872da36175c92a43e9971c8d08c8f28421137dd34d93c4b5e6b1808438e0b5", 0x65}, {&(0x7f0000000280)="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", 0x280}, {&(0x7f00000006c0)="89c721e56715701b74a575f2140cedad26e2b2ef5e16c1a35a5b6322730ac9b33b96f175e0b24281f169a0e4384dcbe0102d49207fb83e17fb7a8433e58b4a2f9715e4d3a623ec642d20a5d18fc74238b49a2a2941880dd1a76f1ef64292a6f91e170da32cab0df318e3c33319457789662dbd0464bf8a3571f1d7b10099fc58554c62132f38fc37e9bb0931f53fbb3e7e5de371bfd4551a594d4ba71cfdc4635af68736951ed7687321b2fcdd35432ce37fd44de7ac4d", 0xb7}, {&(0x7f0000000140)="877eff5844d9808e9c47a77a6ef3e4f095f2be097064a8e8bb9e83156a45d5755dd7fe09163f8cdffe787bb1c987efd79dd93101c3b79d96decfbcaaa25b540488e4742db6f992349c411f21b14cc421b36c44aa091c82d303743b0a39d12bf4b1d5519ab23e4836076c20c4d6f52857a959cc0d43a11cb1bf0077467ce3", 0x7e}, {&(0x7f0000000780)="705d19fd5cefcc9c351f8ebee6b4ddfe40c9d8fd95b613ff7064081fbd0e27a3084d25766e2850ebd6172e9e70760d0990e0d5d7cbe2f92ec26144c190b7fff23703ea069ac2dd7eaee228f151d86515a5ba99e86fa4d5fa40191ffc8c97431f83d66c7f42705fad11ad6ac2dd86366a39dbdcd4a14090bdcd74070000001d03e3105bdf6a0400000000000000505f4e5f486471c4e969be420000000000000000000000007c3fc48f88cd49d6d439118146b5e4c0315ce751b4f77df0a5f980397e7de7747e0475f646d7b2221418993cc90d8e1600867b2f403632b605e5709ffd7a41c670", 0xe6}, {&(0x7f0000000880)="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", 0x103}, {&(0x7f0000001ac0)="5a91dc036950a633184152bb41a60707aa3059926b5a5bea537cec7fb5c5aa49690f8e884e5e56eb3d19004cb505f494967186a315ab737396674078cbc121d2095664b1ef2d892e96976e6f9615926d982e5328d33c7bae4898064b81b6f8efa90a43f5f307a0c8c7a9ce93655479ff9aa6940e21a568b79bad8b67280c18f9267a182aa91a94986963f0bd43ef08f84e940acbd392488a893c79fc036cfbdea63841267ba1d8966c2defb8bf36115f58d423ab2fedd97c6ad7c09a5502a2a7d1b585583448ef5de694bc51af8bdcfb6e29d37b934034582adb93d8edeaacff", 0xe0}], 0x8}}], 0x1, 0x20004010) 3m38.324633682s ago: executing program 2 (id=401): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x20, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) 3m38.123829064s ago: executing program 2 (id=402): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (fail_nth: 15) 3m37.728303485s ago: executing program 2 (id=404): munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3020, 0x3, &(0x7f0000968000/0x3000)=nil) 3m37.376385841s ago: executing program 2 (id=407): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@multiplanar_mmap={0x9, 0x2, 0x4, 0x2, 0x9, {}, {0xb289d58468e4db09, 0x0, 0x1, 0xff, 0x9, 0x3, "80322142"}, 0x6, 0x1, {0x0}, 0x7}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x20, 0x29, "fafc00"}, 0x0, 0x1, {0x0}}) syz_open_dev$loop(&(0x7f0000000000), 0x8412, 0x618442) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="fb3649228771b403f04709060e60ff069f6690362528c69b4713831c60f72c92b8022263e1cbfdfd865a328cfeb44ee239220db91fa029864542d6887654a70dee41f49caf1f81f0bc481636798132c5fed1e4747001c21d2b49fae9f86b4cbab2aa331847c9afccdd28aa0f4ba4ee1bb45293d640892aa39f722c81c13eeb2219af2e9c9d30b7b46ef00eed54ab604aadaab8d0612bbd1d2b4fd617dcf28ee44e530c"], 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) 3m35.811423356s ago: executing program 2 (id=413): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x6c, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8040) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000180)={0x0, 0x1, 0xe, 0x1, 0x0, 0x9, 0x0}) 3m20.611062699s ago: executing program 33 (id=413): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x6c, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8040) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000180)={0x0, 0x1, 0xe, 0x1, 0x0, 0x9, 0x0}) 10.556470452s ago: executing program 5 (id=1761): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0xfffffda6, {"cbf6b2169bda4f23ab3ad4e2a12aff0b"}, 0x70, 0x2, 0xffffffff7fffffff}, @in={0x2, 0x4e20, @multicast1}}}, 0x118) 9.968213754s ago: executing program 5 (id=1763): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xce, 0xf8, 0xbd, 0x8, 0xe41, 0x4142, 0xbc76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x6a, 0x2f, 0xf6}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x20, 0x10, 0xa3, {0xa3, 0x0, "9244e601da8fffd4bd64e880d2e078a92c53661169c3d3ca4a55baeeea0ffe19dda2679676da3891f3703192f859b063b8eebba2dbe9f87e0e40514f57ab3955817b999934530a1ba04269c88be8a3cc0ea4494b5f34c8045f02871973867a35ea84804071b8e926f32c16131e8dacd9bfcdcac8eb82204dd326bd39ef9a48d36341430094d15c1c006ac162a8ec50a08056f8ba6979a7df7267468911b34bad23"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc55}}}, &(0x7f0000000380)={0x34, &(0x7f0000000200)={0x20, 0xf, 0x38, "0ba54b2ffc2ab71cc385656775446e16ed800860b1f4b1726935ba3d3207a9179a6418980b7f9224d762530b5d0e3eff1c9321f5fef4429d"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0xd5, {0xd3, "59b44f7a4b19b777924cb9bbccc41756d518ca35def10fc15b850611be891b07dcb60d51efd1b7d2f9b38acf9c577e1f2fa0ff4e9f6904f447148e3714659156ec13aa885d9c2e601ba3457f1e96eb71ca8034becf52b993e498b39926889572997512ca1dc923bfdbbc64ba95479c12149a98ec773ac3523e35837ba0ff77f904210c63d1bad9d2bbf11684d5189b16812896f5660bd887f79dc73fc8c0a151f464f7a54fd9ee44ff87ea42e1e4acc98c541e6f75818fb94d94e9670be0a8a8f870d65cf39ea68a4c43277d7395f4746d2410"}}, &(0x7f0000000300)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000340)={0x20, 0x0, 0x1, 0x1a}}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000000)='BBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000000)='BBBB') 9.544274588s ago: executing program 0 (id=1767): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x8, 0x1008, 0x10000001, 0xfffffff8, 0x7]}, &(0x7f0000000080)=0x54) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 6.842791564s ago: executing program 1 (id=1775): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00'], 0x0, 0x0, 0x0, 0x0}) 6.517014691s ago: executing program 0 (id=1776): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') 6.2482205s ago: executing program 0 (id=1777): landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x1}, 0x18, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) prctl$PR_SET_IO_FLUSHER(0x41, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f0000000140)={0xfffffffbfffffffa, 0x1, 0x0, 0x6, 0xc, 0x61, 0x7, 0x6}, &(0x7f00000002c0)={0x4, 0xffffffffffffffff, 0x0, 0xffffffffffffac28, 0xf, 0x6, 0x5, 0x4}, &(0x7f0000000300)={0x8001, 0x4, 0xffffffff9fb0ec2c, 0x5, 0x1000, 0x8, 0x4, 0x4}, &(0x7f0000000480), &(0x7f0000000540)={&(0x7f0000000500)={[0x8]}, 0x8}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) syz_open_dev$usbfs(0x0, 0xfffffffffffffffd, 0x4f8181) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) read$FUSE(r3, 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) 6.192007763s ago: executing program 4 (id=1778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a300000000014000380080002400000000008000140000000002c000000180a05000000000000000000010000000900010073797a30000000000c0005"], 0xc8}}, 0x4000450) 6.11439586s ago: executing program 1 (id=1779): syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f8040905810340"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 6.044160144s ago: executing program 4 (id=1780): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000880)={0x2020}, 0x2020) 5.572269832s ago: executing program 5 (id=1781): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 5.120156864s ago: executing program 4 (id=1782): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x0, 0x83, 0xec}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0}) 5.032376178s ago: executing program 1 (id=1783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x1c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24000080) 5.031914273s ago: executing program 0 (id=1784): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'new '}, 0x1c, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@remote, 0xfffffffc, 0x2b}, @in=@empty, {0x200000000, 0x0, 0x7, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {0x0, 0xffffffff}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x20000000) 4.935291196s ago: executing program 1 (id=1785): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0x0, 0x0, 0x42a3c0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) fsopen(0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) bind(0xffffffffffffffff, &(0x7f0000000080)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x4c740) 4.690147211s ago: executing program 0 (id=1786): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfd, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}]}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 4.689425377s ago: executing program 5 (id=1787): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) 4.10828096s ago: executing program 0 (id=1788): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0x0, 0x0, 0x42a3c0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) fsopen(&(0x7f0000000240)='tracefs\x00', 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x4c740) 3.731544342s ago: executing program 1 (id=1789): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x1100100) keyctl$chown(0x6, r1, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x831, 0x2, {0x0}, {}, 0x4, 0x8}) prlimit64(r2, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r4, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0}, 0x8000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x70bd28, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x80004}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40180}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x102) mount(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380)='rpc_pipefs\x00', 0x18642, 0x0) r7 = syz_clone(0x0, &(0x7f0000000280)="3405dec5957dd5fe1c795d880153fbe75a5adc7affab3cabc673db68567c07d416e723aa4c82c3e623e735d84cee3c96f72c37ba786f36bdc97c2443a35a50d55d6f8972996592a814490d9e7f9d37271de6add93cc20d1ecc5b03df62cc7b15a75a634e7ceee24a0f62b5edbbb098b25b7d5b7bd37ddfc9f4bd8ba94ce8ac28ad0f8fef291a87b2226a766aa8ed8c620f38a66f2533d40eb0fa3730db1d157815c7c19eb1b7707b87ac120bc6d0b3e287326a594e", 0xb5, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000340)="d6b3295a358519e844e5b5a517a1df62a423bbf445da1eb287ad669f9120a70f4f694c539d5a1ce11cea3bc27190c7211404886e3b0ae54d71369d3bc0c2ec44687099695fdb10") sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) 2.041876278s ago: executing program 1 (id=1790): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc1", 0xc3}, {&(0x7f0000000380)="3f82090ccda4f8ce1b08afd200c6075794cdd2e0021e32a0f6267447162a2085457cf687e74d142e85e9c4ac6eefcdaa493bcb54152b1339a38d3898707b77a9333cfb7bdc7c523ab4aa869c6db252e8e93bc14cfccfdedf9bbaed10dbc3c315aaedb987b398dd67a155fc3644e2fda199", 0x71}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79e8a7d588efb69636181b9c54f6d296386c95f8a08e27d5792dcb20fa3b5b4f60c71f310b31bb1ab4a825c2dc10fac150a17d92bb51849d9eea53c78d427d8d1036dc906084046fcae09499c220ef50c2c7c475f392bc288eb5efb8032d1ade92e88e50a05a95dd5c6cbbdfb086fa53bca14d40c8c3f7149b39b16b7c7370978389366174db5fbc99dbe958f8c1690cd695dfbe6c384162a412c8d3cfd7cf223f9df4c67b92514111891f53d4e19826797302e1a87e7a627c52740bb3bd311771a68d349c0a68ef6f2a765f8220323add67b2b6695ca41adcda387a4264bcd94c8578a9ccca3b55ebcda45369b56068cfeec34abc2cbd94b9b12d057fa9d4328d57073f40e5ae64443e4a10ed400575bbd1168a170a0134b9ad28735dbd9603a9e417cce864f2141a92f57e1fdfcff4776f94a794d6db8d3e9e0ecc783956c7ab15a8d5639d3df1ac9da6057af913a563bd55b657f37cbf4cae2919aea6ff8a748eb4c036361b8866cc062bbad019f43d02b0c38bd6309f2baa53924466203ab8d00daaac4c9da846e645d64c10e47c32e9824e79ade4eeee7cbf71b1bb48f760800b04334745ab553dea12a85f0671eb07a4cc67ceaffa8269e0b052f25136cfb8a6b9327a2d165c42933642d3171ad00ebf0be485f5ed319021600a94072f251c8905a2451eba3ba7db2ec5fb8613463a796610629719166259ffa3261e06f09b5a69798b88848da9028ff7ed8a729c3843", 0x2ff}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.928321599s ago: executing program 4 (id=1791): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x5, 0x4) sendto$inet(r0, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cf", 0x27, 0x0, 0x0, 0x0) 1.380493181s ago: executing program 4 (id=1792): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x127202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r5, 0x10000000, 0x80000005, 0xb, 0x1fd, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) 190.141606ms ago: executing program 5 (id=1793): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 401.252µs ago: executing program 5 (id=1794): r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000018c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001880)={&(0x7f0000001600)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 0s ago: executing program 4 (id=1795): connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0xfd9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x88000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) lsetxattr(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='osx./deV/cpu/#/'], 0x0, 0x0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x2, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x2, 0x0, 0x1, 0x100}, 0x3c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2e}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {0x36}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x9c) socket$inet6(0xa, 0xa, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setreuid(0x0, 0xee01) keyctl$session_to_parent(0x12) preadv2(r1, &(0x7f0000001540)=[{&(0x7f0000001380)=""/129, 0x81}], 0x1, 0x0, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0xc090, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) kernel console output (not intermixed with test programs): spca_stk1135: serial bus timeout: status=0x00 [ 294.783562][ T5835] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 294.785892][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 294.798346][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 294.805363][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 294.812092][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 294.818645][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 294.825361][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 294.828389][ T5835] ath9k_htc: Failed to initialize the device [ 294.832873][ T979] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 294.837635][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 294.837659][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 294.845790][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 294.845814][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 294.852820][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 294.852842][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 294.859361][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 294.859384][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 294.866425][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 294.866450][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 294.879643][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 294.879667][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 294.886113][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 294.886134][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 294.902634][ T5835] usb 2-1: ath9k_htc: USB layer deinitialized [ 294.907541][ T5942] gspca_stk1135: Sensor read failed [ 294.957068][ T5942] gspca_stk1135: Detected sensor type unknown (0x0) [ 294.975123][ T5942] gspca_stk1135: serial bus timeout: status=0x00 [ 294.989658][ T5942] gspca_stk1135: Sensor read failed [ 294.995775][ T5942] gspca_stk1135: serial bus timeout: status=0x00 [ 295.002886][ T5942] gspca_stk1135: Sensor read failed [ 295.012633][ T5942] gspca_stk1135: serial bus timeout: status=0x00 [ 295.026846][ T5942] gspca_stk1135: Sensor write failed [ 295.041768][ T5942] gspca_stk1135: serial bus timeout: status=0x00 [ 295.059923][ T5942] gspca_stk1135: Sensor write failed [ 295.076581][ T5942] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 295.106720][ T10] usb 1-1: USB disconnect, device number 38 [ 295.114133][ T10] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 295.160655][ T979] usb 6-1: Using ep0 maxpacket: 8 [ 295.171521][ T5942] usb 5-1: USB disconnect, device number 37 [ 295.193516][ T979] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 295.209428][ T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.220177][ T10] wwan wwan0: port wwan0mbim0 disconnected [ 295.254976][ T979] usb 6-1: Product: syz [ 295.259228][ T979] usb 6-1: Manufacturer: syz [ 295.263850][ T979] usb 6-1: SerialNumber: syz [ 295.321432][ T979] usb 6-1: config 0 descriptor?? [ 295.408381][ T5835] usb 2-1: USB disconnect, device number 64 [ 295.560685][ T979] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 296.460783][T10247] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 297.033541][T10189] vhci_hcd vhci_hcd.0: port 0 already used [ 297.122774][ T979] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 297.139328][ T979] usb 6-1: USB disconnect, device number 26 [ 297.299776][ T5839] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 297.631402][T10261] orangefs_mount: mount request failed with -4 [ 297.737455][ T979] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 297.830498][T10301] sg_write: process 923 (syz.1.1276) changed security contexts after opening file descriptor, this is not allowed. [ 297.885319][ T979] usb 1-1: device descriptor read/64, error -71 [ 298.145520][ T979] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 298.285677][ T979] usb 1-1: device descriptor read/64, error -71 [ 298.395950][ T979] usb usb1-port1: attempt power cycle [ 298.758021][ T979] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 298.819480][ T979] usb 1-1: device descriptor read/8, error -71 [ 299.084973][ T979] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 299.115608][ T979] usb 1-1: device descriptor read/8, error -71 [ 299.225001][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 299.233563][ T979] usb usb1-port1: unable to enumerate USB device [ 299.334978][ T5942] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 299.365056][ T10] usb 5-1: device descriptor read/64, error -71 [ 299.497161][ T5942] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 299.507306][ T5942] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.520543][ T5942] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 299.529886][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.605041][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 299.747677][ T10] usb 5-1: device descriptor read/64, error -71 [ 299.754141][ T5942] usb 6-1: GET_CAPABILITIES returned 0 [ 299.759802][ T5942] usbtmc 6-1:16.0: can't read capabilities [ 299.855332][ T10] usb usb5-port1: attempt power cycle [ 299.951785][ T5942] usb 6-1: USB disconnect, device number 27 [ 300.225144][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 300.255659][ T10] usb 5-1: device descriptor read/8, error -71 [ 300.496208][ T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 300.515618][ T10] usb 5-1: device descriptor read/8, error -71 [ 300.639169][ T10] usb usb5-port1: unable to enumerate USB device [ 300.706285][T10335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.845335][ T5847] Bluetooth: hci4: command 0x1003 tx timeout [ 300.848067][ T5839] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 301.257554][ T30] audit: type=1326 audit(1751536899.384:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10356 comm="syz.0.1297" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa489d8e929 code=0x0 [ 301.545057][ T5942] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 301.727541][ T5942] usb 1-1: Using ep0 maxpacket: 32 [ 301.735872][ T5942] usb 1-1: config 0 has an invalid interface number: 197 but max is 0 [ 301.744386][ T5942] usb 1-1: config 0 has no interface number 0 [ 301.755323][ T5942] usb 1-1: config 0 interface 197 has no altsetting 0 [ 301.764561][ T5942] usb 1-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=32.65 [ 301.774544][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.783940][ T5942] usb 1-1: Product: syz [ 301.804042][ T5942] usb 1-1: Manufacturer: syz [ 301.814171][ T5942] usb 1-1: SerialNumber: syz [ 301.831552][ T5942] usb 1-1: config 0 descriptor?? [ 301.852878][ T5942] gspca_main: etoms-2.14.0 probing 102c:6151 [ 301.885561][T10373] FAULT_INJECTION: forcing a failure. [ 301.885561][T10373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.899917][T10373] CPU: 0 UID: 0 PID: 10373 Comm: syz.1.1302 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 301.899948][T10373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 301.899962][T10373] Call Trace: [ 301.899971][T10373] [ 301.899980][T10373] dump_stack_lvl+0x189/0x250 [ 301.900009][T10373] ? __pfx____ratelimit+0x10/0x10 [ 301.900041][T10373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.900065][T10373] ? __pfx__printk+0x10/0x10 [ 301.900089][T10373] ? __might_fault+0xb0/0x130 [ 301.900124][T10373] should_fail_ex+0x414/0x560 [ 301.900162][T10373] _copy_from_user+0x2d/0xb0 [ 301.900185][T10373] ___sys_sendmsg+0x158/0x2a0 [ 301.900210][T10373] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.900268][T10373] ? __fget_files+0x2a/0x420 [ 301.900297][T10373] ? __fget_files+0x3a0/0x420 [ 301.900337][T10373] __x64_sys_sendmsg+0x19b/0x260 [ 301.900361][T10373] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 301.900393][T10373] ? __pfx_ksys_write+0x10/0x10 [ 301.900416][T10373] ? rcu_is_watching+0x15/0xb0 [ 301.900442][T10373] ? do_syscall_64+0xbe/0x3b0 [ 301.900475][T10373] do_syscall_64+0xfa/0x3b0 [ 301.900501][T10373] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.900527][T10373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.900547][T10373] ? clear_bhb_loop+0x60/0xb0 [ 301.900573][T10373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.900593][T10373] RIP: 0033:0x7f632af8e929 [ 301.900612][T10373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.900631][T10373] RSP: 002b:00007f632be24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.900654][T10373] RAX: ffffffffffffffda RBX: 00007f632b1b5fa0 RCX: 00007f632af8e929 [ 301.900670][T10373] RDX: 0000000004040800 RSI: 0000200000005980 RDI: 0000000000000003 [ 301.900691][T10373] RBP: 00007f632be24090 R08: 0000000000000000 R09: 0000000000000000 [ 301.900704][T10373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.900717][T10373] R13: 0000000000000000 R14: 00007f632b1b5fa0 R15: 00007ffce5a34128 [ 301.900748][T10373] [ 302.127452][T10358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.136584][T10358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.145736][T10358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.154621][T10358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.164159][T10358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.173082][T10358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.182143][T10358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.191065][T10358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.200303][T10358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.209209][T10358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.344663][ T5942] usb 1-1: USB disconnect, device number 43 [ 302.678735][T10391] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1307'. [ 302.725095][ T5929] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 302.725230][T10393] sp0: Synchronizing with TNC [ 302.885050][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 302.913172][ T5929] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 302.939872][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.953949][ T5929] usb 5-1: Product: syz [ 302.958501][ T5929] usb 5-1: Manufacturer: syz [ 302.963129][ T5929] usb 5-1: SerialNumber: syz [ 302.997477][ T5929] usb 5-1: config 0 descriptor?? [ 303.013014][ T5929] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 303.024415][T10410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.041728][T10410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.255022][ T5835] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 303.405088][ T5835] usb 6-1: Using ep0 maxpacket: 8 [ 303.414371][ T5835] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 303.422988][ T5835] usb 6-1: can't read configurations, error -61 [ 303.560407][ T5835] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 303.734951][ T5835] usb 6-1: Using ep0 maxpacket: 8 [ 303.761628][ T5835] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 303.769351][ T5835] usb 6-1: can't read configurations, error -61 [ 303.776213][ T5835] usb usb6-port1: attempt power cycle [ 303.815059][ T30] audit: type=1326 audit(1751536901.944:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa489d8e929 code=0x7fc00000 [ 303.859369][ T30] audit: type=1326 audit(1751536901.944:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa489d8d3df code=0x7fc00000 [ 303.881801][ T30] audit: type=1326 audit(1751536901.944:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa489d8e929 code=0x7fc00000 [ 303.905742][ T30] audit: type=1326 audit(1751536901.944:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa489d8e929 code=0x7fc00000 [ 303.928222][ T30] audit: type=1326 audit(1751536901.944:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa489d8e929 code=0x7fc00000 [ 303.950791][ T30] audit: type=1326 audit(1751536901.944:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa489d8e929 code=0x7fc00000 [ 303.974053][ T30] audit: type=1326 audit(1751536901.944:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa489d8e929 code=0x7fc00000 [ 303.998556][ T30] audit: type=1326 audit(1751536901.944:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa489d8e929 code=0x7fc00000 [ 304.023059][ T5929] gspca_stk1135: reg_w 0x7 err -71 [ 304.033163][ T30] audit: type=1326 audit(1751536901.954:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa489d8e929 code=0x7fc00000 [ 304.063586][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 304.080263][ T5929] gspca_stk1135: Sensor write failed [ 304.090455][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 304.107151][ T5929] gspca_stk1135: Sensor write failed [ 304.122818][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 304.133253][ T5929] gspca_stk1135: Sensor read failed [ 304.143440][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 304.145251][ T5835] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 304.153545][ T5929] gspca_stk1135: Sensor read failed [ 304.173797][ T5929] gspca_stk1135: Detected sensor type unknown (0x0) [ 304.180727][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 304.187830][ T5929] gspca_stk1135: Sensor read failed [ 304.193209][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 304.200277][ T5835] usb 6-1: Using ep0 maxpacket: 8 [ 304.200353][ T5929] gspca_stk1135: Sensor read failed [ 304.213075][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 304.219754][ T5929] gspca_stk1135: Sensor write failed [ 304.225820][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 304.232420][ T5929] gspca_stk1135: Sensor write failed [ 304.238427][ T5929] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 304.247144][ T5835] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 304.255216][ T5929] usb 5-1: USB disconnect, device number 42 [ 304.265207][ T5835] usb 6-1: can't read configurations, error -61 [ 304.416674][ T5835] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 304.455732][ T5835] usb 6-1: Using ep0 maxpacket: 8 [ 304.463594][ T5835] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 304.479487][ T5835] usb 6-1: can't read configurations, error -61 [ 304.500267][ T5835] usb usb6-port1: unable to enumerate USB device [ 304.522726][T10429] /dev/rnullb0: Can't open blockdev [ 304.591730][T10432] /dev/rnullb0: Can't open blockdev [ 304.663266][T10438] /dev/rnullb0: Can't open blockdev [ 304.975153][ T5929] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 305.114980][ T5929] usb 5-1: device descriptor read/64, error -71 [ 305.374947][ T5929] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 305.509947][ T5929] usb 5-1: device descriptor read/64, error -71 [ 305.625792][ T5929] usb usb5-port1: attempt power cycle [ 305.805066][ T5835] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 305.972014][ T5835] usb 1-1: Using ep0 maxpacket: 32 [ 305.975156][ T5929] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 305.988601][ T5835] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 305.999697][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.015986][ T5835] usb 1-1: Product: syz [ 306.020084][ T5929] usb 5-1: device descriptor read/8, error -71 [ 306.020240][ T5835] usb 1-1: Manufacturer: syz [ 306.044993][ T5835] usb 1-1: SerialNumber: syz [ 306.054962][ T5835] usb 1-1: config 0 descriptor?? [ 306.073784][ T5835] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 306.268695][ T5929] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 306.296768][ T5929] usb 5-1: device descriptor read/8, error -71 [ 306.407106][ T5929] usb usb5-port1: unable to enumerate USB device [ 306.475082][ T5882] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 306.625136][ T5882] usb 6-1: Using ep0 maxpacket: 16 [ 306.639034][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.652635][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.665545][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.680377][ T5882] usb 6-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 306.690202][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.702590][ T5882] usb 6-1: config 0 descriptor?? [ 307.082530][ T5835] gspca_stk1135: reg_w 0x7 err -71 [ 307.090773][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 307.097534][ T5835] gspca_stk1135: Sensor write failed [ 307.102945][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 307.109426][ T5835] gspca_stk1135: Sensor write failed [ 307.118255][ T5882] ryos 0003:1E7D:31CE.0010: nested delimiters [ 307.124486][ T5882] ryos 0003:1E7D:31CE.0010: item 0 4 2 10 parsing failed [ 307.131826][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 307.138614][ T5835] gspca_stk1135: Sensor read failed [ 307.143874][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 307.151023][ T5882] ryos 0003:1E7D:31CE.0010: parse failed [ 307.156886][ T5835] gspca_stk1135: Sensor read failed [ 307.162092][ T5835] gspca_stk1135: Detected sensor type unknown (0x0) [ 307.168869][ T5882] ryos 0003:1E7D:31CE.0010: probe with driver ryos failed with error -22 [ 307.177385][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 307.184097][ T5835] gspca_stk1135: Sensor read failed [ 307.193261][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 307.199777][ T5835] gspca_stk1135: Sensor read failed [ 307.205156][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 307.211515][ T5835] gspca_stk1135: Sensor write failed [ 307.216882][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 307.223225][ T5835] gspca_stk1135: Sensor write failed [ 307.228689][ T5835] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 307.242605][ T5835] usb 1-1: USB disconnect, device number 44 [ 307.330783][ T10] usb 6-1: USB disconnect, device number 32 [ 307.756719][T10470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.930030][ T5835] hid-generic 0002:0004:0009.0011: unknown main item tag 0x0 [ 307.940157][ T5835] hid-generic 0002:0004:0009.0011: unknown main item tag 0x0 [ 307.949169][ T5835] hid-generic 0002:0004:0009.0011: unknown main item tag 0x0 [ 307.956886][ T5835] hid-generic 0002:0004:0009.0011: unknown main item tag 0x0 [ 307.964363][ T5835] hid-generic 0002:0004:0009.0011: unknown main item tag 0x0 [ 307.972421][ T5835] hid-generic 0002:0004:0009.0011: unknown main item tag 0x0 [ 307.981457][ T5835] hid-generic 0002:0004:0009.0011: unknown main item tag 0x0 [ 307.989859][ T5835] hid-generic 0002:0004:0009.0011: unknown main item tag 0x0 [ 307.998277][ T5835] hid-generic 0002:0004:0009.0011: unknown main item tag 0x0 [ 308.006058][ T5835] hid-generic 0002:0004:0009.0011: unknown main item tag 0x0 [ 308.019521][ T5835] hid-generic 0002:0004:0009.0011: hidraw0: HID v0.04 Device [syz0] on syz0 [ 308.091295][T10488] fido_id[10488]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 308.175042][ T10] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 308.337691][ T10] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 308.347484][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.358717][ T10] usb 5-1: config 0 descriptor?? [ 308.555182][ T5835] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 308.717138][ T5835] usb 2-1: Using ep0 maxpacket: 32 [ 308.726350][ T5835] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 308.736404][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.744400][ T5835] usb 2-1: Product: syz [ 308.748769][ T5835] usb 2-1: Manufacturer: syz [ 308.753434][ T5835] usb 2-1: SerialNumber: syz [ 308.760992][ T5835] usb 2-1: config 0 descriptor?? [ 308.776666][ T5835] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 309.791904][ T5835] gspca_stk1135: reg_w 0x7 err -71 [ 309.802542][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 309.809171][ T5835] gspca_stk1135: Sensor write failed [ 309.814524][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 309.821223][ T5835] gspca_stk1135: Sensor write failed [ 309.826661][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 309.833028][ T5835] gspca_stk1135: Sensor read failed [ 309.838971][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 309.845860][ T5835] gspca_stk1135: Sensor read failed [ 309.846165][ T5942] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 309.851102][ T5835] gspca_stk1135: Detected sensor type unknown (0x0) [ 309.851143][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 309.872240][ T5835] gspca_stk1135: Sensor read failed [ 309.877544][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 309.883897][ T5835] gspca_stk1135: Sensor read failed [ 309.889630][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 309.896094][ T5835] gspca_stk1135: Sensor write failed [ 309.901523][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 309.907946][ T5835] gspca_stk1135: Sensor write failed [ 309.913321][ T5835] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 309.923826][ T5835] usb 2-1: USB disconnect, device number 65 [ 310.015031][ T5942] usb 1-1: Using ep0 maxpacket: 8 [ 310.022335][ T5942] usb 1-1: unable to get BOS descriptor or descriptor too short [ 310.031284][ T5942] usb 1-1: config 3 has an invalid interface number: 199 but max is 0 [ 310.039607][ T5942] usb 1-1: config 3 has no interface number 0 [ 310.046188][ T5942] usb 1-1: config 3 interface 199 has no altsetting 0 [ 310.055808][ T5942] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= e.70 [ 310.065192][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.073292][ T5942] usb 1-1: Product: syz [ 310.077568][ T5942] usb 1-1: Manufacturer: syz [ 310.082195][ T5942] usb 1-1: SerialNumber: syz [ 310.135192][ T5847] Bluetooth: hci4: command 0x1003 tx timeout [ 310.138199][ T5839] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 310.191658][ T10] usb 5-1: Cannot set autoneg [ 310.214283][ T10] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 310.227304][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 310.227322][ T30] audit: type=1326 audit(1751536908.364:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10495 comm="syz.5.1348" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e6678e929 code=0x0 [ 310.236705][ T10] usb 5-1: USB disconnect, device number 47 [ 310.255179][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.313648][ T5942] xr_serial 1-1:3.199: More than one union descriptor, skipping ... [ 310.339134][ T5942] usb 1-1: USB disconnect, device number 45 [ 310.667070][ T5929] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 310.827707][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 310.838909][ T5929] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 310.848517][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.859775][ T5929] usb 2-1: config 0 descriptor?? [ 311.165569][ T5882] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 311.278544][ T5929] pyra 0003:1E7D:2C24.0012: item fetching failed at offset 0/3 [ 311.287190][ T5929] pyra 0003:1E7D:2C24.0012: parse failed [ 311.292935][ T5929] pyra 0003:1E7D:2C24.0012: probe with driver pyra failed with error -22 [ 311.335529][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 311.342362][ T5882] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 311.351778][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.362785][ T5882] usb 1-1: config 0 descriptor?? [ 311.372436][ T5882] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 311.479735][T10501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.500132][T10501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.513484][ T5942] usb 2-1: USB disconnect, device number 66 [ 311.865104][ T5835] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 312.037366][ T5835] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.077231][ T5835] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.079411][T10518] FAULT_INJECTION: forcing a failure. [ 312.079411][T10518] name failslab, interval 1, probability 0, space 0, times 0 [ 312.086776][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.119933][T10518] CPU: 0 UID: 0 PID: 10518 Comm: syz.5.1356 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 312.119964][T10518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.119978][T10518] Call Trace: [ 312.119988][T10518] [ 312.119998][T10518] dump_stack_lvl+0x189/0x250 [ 312.120028][T10518] ? __pfx____ratelimit+0x10/0x10 [ 312.120057][T10518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.120082][T10518] ? __pfx__printk+0x10/0x10 [ 312.120113][T10518] ? __ip_dev_find+0x444/0x4e0 [ 312.120151][T10518] should_fail_ex+0x414/0x560 [ 312.120191][T10518] should_failslab+0xa8/0x100 [ 312.120220][T10518] kmem_cache_alloc_noprof+0x73/0x3c0 [ 312.120244][T10518] ? dst_alloc+0x105/0x170 [ 312.120272][T10518] dst_alloc+0x105/0x170 [ 312.120294][T10518] ? ip_check_mc_rcu+0x400/0x680 [ 312.120331][T10518] ip_route_output_key_hash_rcu+0x1482/0x23a0 [ 312.120367][T10518] ? ip_route_output_key_hash+0xde/0x2e0 [ 312.120393][T10518] ip_route_output_key_hash+0x1b9/0x2e0 [ 312.120417][T10518] ? __lock_acquire+0xab9/0xd20 [ 312.120450][T10518] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 312.120492][T10518] ip_route_output_flow+0x2a/0x150 [ 312.120512][T10518] ? security_sk_classify_flow+0x70/0x180 [ 312.120566][T10518] raw_sendmsg+0x1039/0x18b0 [ 312.120622][T10518] ? __pfx_raw_sendmsg+0x10/0x10 [ 312.120666][T10518] ? aa_sk_perm+0x81e/0x950 [ 312.120694][T10518] ? __pfx_aa_sk_perm+0x10/0x10 [ 312.120712][T10518] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 312.120742][T10518] ? sock_rps_record_flow+0x19/0x410 [ 312.120770][T10518] ? inet_sendmsg+0x2f4/0x370 [ 312.120793][T10518] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.120827][T10518] __sock_sendmsg+0x19c/0x270 [ 312.120857][T10518] ____sys_sendmsg+0x505/0x830 [ 312.120885][T10518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.120914][T10518] ? import_iovec+0x74/0xa0 [ 312.120940][T10518] ___sys_sendmsg+0x21f/0x2a0 [ 312.120963][T10518] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.121025][T10518] ? __fget_files+0x2a/0x420 [ 312.121053][T10518] ? __fget_files+0x3a0/0x420 [ 312.121092][T10518] __x64_sys_sendmsg+0x19b/0x260 [ 312.121117][T10518] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.121150][T10518] ? __pfx_ksys_write+0x10/0x10 [ 312.121173][T10518] ? rcu_is_watching+0x15/0xb0 [ 312.121200][T10518] ? do_syscall_64+0xbe/0x3b0 [ 312.121232][T10518] do_syscall_64+0xfa/0x3b0 [ 312.121259][T10518] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.121285][T10518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.121306][T10518] ? clear_bhb_loop+0x60/0xb0 [ 312.121332][T10518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.121353][T10518] RIP: 0033:0x7f6e6678e929 [ 312.121373][T10518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.121391][T10518] RSP: 002b:00007f6e67698038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.121414][T10518] RAX: ffffffffffffffda RBX: 00007f6e669b6080 RCX: 00007f6e6678e929 [ 312.121430][T10518] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000004 [ 312.121444][T10518] RBP: 00007f6e67698090 R08: 0000000000000000 R09: 0000000000000000 [ 312.121457][T10518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.121471][T10518] R13: 0000000000000000 R14: 00007f6e669b6080 R15: 00007fffdf39a8b8 [ 312.121504][T10518] [ 312.124147][ T5835] usb 5-1: Product: syz [ 312.385104][ T5942] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 312.400818][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.401660][ T5835] usb 5-1: Manufacturer: syz [ 312.480962][ T5835] usb 5-1: SerialNumber: syz [ 312.595127][ T5942] usb 2-1: Using ep0 maxpacket: 32 [ 312.608113][ T5942] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 312.617378][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.627373][ T5942] usb 2-1: Product: syz [ 312.631566][ T5942] usb 2-1: Manufacturer: syz [ 312.636227][ T5942] usb 2-1: SerialNumber: syz [ 312.647092][ T5942] usb 2-1: config 0 descriptor?? [ 312.657965][ T5942] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 313.106205][ T5835] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 313.112678][ T5835] cdc_ncm 5-1:1.0: bind() failure [ 313.125278][ T5835] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 313.132232][ T5835] cdc_ncm 5-1:1.1: bind() failure [ 313.279852][ T5882] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.660988][ T5942] gspca_stk1135: reg_w 0x7 err -71 [ 313.672601][ T5942] gspca_stk1135: serial bus timeout: status=0x00 [ 313.679144][ T5942] gspca_stk1135: Sensor write failed [ 313.684566][ T5942] gspca_stk1135: serial bus timeout: status=0x00 [ 313.693889][ T5942] gspca_stk1135: Sensor write failed [ 313.700098][ T5942] gspca_stk1135: serial bus timeout: status=0x00 [ 313.706751][ T5942] gspca_stk1135: Sensor read failed [ 313.711998][ T5942] gspca_stk1135: serial bus timeout: status=0x00 [ 313.718904][ T5942] gspca_stk1135: Sensor read failed [ 313.724120][ T5942] gspca_stk1135: Detected sensor type unknown (0x0) [ 313.730889][ T5942] gspca_stk1135: serial bus timeout: status=0x00 [ 313.737753][ T5942] gspca_stk1135: Sensor read failed [ 313.743021][ T5942] gspca_stk1135: serial bus timeout: status=0x00 [ 313.749439][ T5942] gspca_stk1135: Sensor read failed [ 313.754684][ T5942] gspca_stk1135: serial bus timeout: status=0x00 [ 313.761151][ T5942] gspca_stk1135: Sensor write failed [ 313.766585][ T5942] gspca_stk1135: serial bus timeout: status=0x00 [ 313.772936][ T5942] gspca_stk1135: Sensor write failed [ 313.778690][ T5942] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 313.795148][ T5942] usb 2-1: USB disconnect, device number 67 [ 314.090023][ T5882] gspca_vc032x: reg_w err -71 [ 314.095038][ T5882] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.100481][ T5882] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.105872][ T5882] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.111324][ T5882] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.116789][ T5882] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.122091][ T5882] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.127526][ T5882] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.132829][ T5882] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.138205][ T5882] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.143826][ T5882] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.149227][ T5882] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.154600][ T5882] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.160186][ T5882] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.165592][ T5882] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.170933][ T5882] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.184937][ T5882] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.190252][ T5882] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.203836][ T5882] gspca_vc032x: Unknown sensor... [ 314.212300][ T5882] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 314.223247][ T5882] usb 1-1: USB disconnect, device number 46 [ 314.675463][ T5835] usb 5-1: USB disconnect, device number 48 [ 315.045007][ T5835] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 315.195462][ T5882] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 315.203305][ T5835] usb 5-1: device descriptor read/64, error -71 [ 315.355063][ T5882] usb 2-1: Using ep0 maxpacket: 8 [ 315.371260][ T5882] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 315.383964][ T5882] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 315.399276][ T5882] usb 2-1: Product: syz [ 315.403589][ T5882] usb 2-1: Manufacturer: syz [ 315.408612][ T5882] usb 2-1: SerialNumber: syz [ 315.419277][ T5882] usb 2-1: config 0 descriptor?? [ 315.434270][ T5882] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 315.446493][ T5835] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 315.595089][ T5835] usb 5-1: device descriptor read/64, error -71 [ 315.640908][ T5882] gspca_zc3xx: reg_w_i err -71 [ 315.659923][ T5882] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 315.709200][ T5882] usb 2-1: USB disconnect, device number 68 [ 315.718567][ T5835] usb usb5-port1: attempt power cycle [ 316.015091][ T24] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 316.066096][ T5835] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 316.088220][ T5835] usb 5-1: device descriptor read/8, error -71 [ 316.177896][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 316.190045][ T24] usb 6-1: config 0 has no interface number 0 [ 316.202810][ T24] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 316.215619][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.223642][ T24] usb 6-1: Product: syz [ 316.227939][ T24] usb 6-1: Manufacturer: syz [ 316.232554][ T24] usb 6-1: SerialNumber: syz [ 316.240352][ T24] usb 6-1: config 0 descriptor?? [ 316.335002][ T5835] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 316.355826][ T5835] usb 5-1: device descriptor read/8, error -71 [ 316.434985][ T979] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 316.453420][ T24] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 316.467171][ T5835] usb usb5-port1: unable to enumerate USB device [ 316.474111][ T24] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 316.488287][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 316.496453][ T24] usb 6-1: media controller created [ 316.518825][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 316.597248][ T979] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 316.608118][ T979] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.608149][ T979] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 316.608200][ T979] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.610191][ T979] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 316.648634][ T979] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 316.656908][ T979] usb 2-1: Product: syz [ 316.661108][ T979] usb 2-1: Manufacturer: syz [ 316.709788][ T979] cdc_wdm 2-1:1.0: skipping garbage [ 316.717877][ T979] cdc_wdm 2-1:1.0: skipping garbage [ 316.728250][ T979] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 316.734293][ T979] cdc_wdm 2-1:1.0: Unknown control protocol [ 316.963997][T10588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1380'. [ 317.029570][ T24] usb 6-1: USB disconnect, device number 33 [ 317.160308][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 317.168630][ T979] usb 2-1: USB disconnect, device number 69 [ 317.249210][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.255676][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.659523][T10595] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 317.795185][ T24] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 317.851798][T10605] NILFS (nbd4): device size too small [ 317.994992][ T5929] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 318.155000][ T5929] usb 6-1: Using ep0 maxpacket: 16 [ 318.162147][ T5929] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 318.171143][ T5929] usb 6-1: config 0 has no interface number 0 [ 318.179104][ T5929] usb 6-1: config 0 interface 133 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 318.192646][ T5929] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 318.202185][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.210258][ T5929] usb 6-1: Product: syz [ 318.214459][ T5929] usb 6-1: Manufacturer: syz [ 318.219117][ T5929] usb 6-1: SerialNumber: syz [ 318.226325][ T5929] usb 6-1: config 0 descriptor?? [ 318.424990][ T24] usb 5-1: device descriptor read/64, error -71 [ 318.434571][T10600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.446689][T10600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.462969][ T5929] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 318.474500][ T5929] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 318.483155][ T5929] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 318.491279][ T5929] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 318.501904][ T5929] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 318.520765][ T5929] usb 6-1: USB disconnect, device number 34 [ 318.533575][ T5929] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 318.548554][ T5929] keyspan 6-1:0.133: device disconnected [ 318.618957][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1391'. [ 318.665009][ T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 318.814937][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 318.823943][ T24] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 318.836019][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.844119][ T24] usb 5-1: Product: syz [ 318.849792][ T24] usb 5-1: Manufacturer: syz [ 318.854777][ T24] usb 5-1: SerialNumber: syz [ 318.862479][ T24] usb 5-1: config 0 descriptor?? [ 318.871910][ T24] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 319.222487][T10621] nvme_fabrics: missing parameter 'transport=%s' [ 319.230814][T10621] nvme_fabrics: missing parameter 'nqn=%s' [ 319.294096][T10623] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 319.880441][ T24] gspca_stk1135: reg_w 0x7 err -71 [ 319.890818][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 319.897327][ T24] gspca_stk1135: Sensor write failed [ 319.902686][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 319.909228][ T24] gspca_stk1135: Sensor write failed [ 319.914559][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 319.921177][ T24] gspca_stk1135: Sensor read failed [ 319.926569][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 319.932945][ T24] gspca_stk1135: Sensor read failed [ 319.938721][ T24] gspca_stk1135: Detected sensor type unknown (0x0) [ 319.946465][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 319.952816][ T24] gspca_stk1135: Sensor read failed [ 319.958147][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 319.964537][ T24] gspca_stk1135: Sensor read failed [ 319.969905][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 319.976302][ T24] gspca_stk1135: Sensor write failed [ 319.981942][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 319.988345][ T24] gspca_stk1135: Sensor write failed [ 319.993687][ T24] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 320.015313][ T24] usb 5-1: USB disconnect, device number 54 [ 320.472581][T10642] FAULT_INJECTION: forcing a failure. [ 320.472581][T10642] name failslab, interval 1, probability 0, space 0, times 0 [ 320.485618][T10642] CPU: 1 UID: 0 PID: 10642 Comm: syz.1.1402 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 320.485645][T10642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 320.485657][T10642] Call Trace: [ 320.485666][T10642] [ 320.485674][T10642] dump_stack_lvl+0x189/0x250 [ 320.485701][T10642] ? __pfx____ratelimit+0x10/0x10 [ 320.485726][T10642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.485746][T10642] ? __pfx__printk+0x10/0x10 [ 320.485771][T10642] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 320.485800][T10642] should_fail_ex+0x414/0x560 [ 320.485833][T10642] should_failslab+0xa8/0x100 [ 320.485869][T10642] ? __pfx_ip6_dst_gc+0x10/0x10 [ 320.485890][T10642] kmem_cache_alloc_noprof+0x73/0x3c0 [ 320.485909][T10642] ? dst_alloc+0x105/0x170 [ 320.485930][T10642] ? __pfx_ip6_dst_gc+0x10/0x10 [ 320.485954][T10642] dst_alloc+0x105/0x170 [ 320.485980][T10642] ip6_pol_route+0xa21/0x1180 [ 320.486006][T10642] ? ip6_pol_route+0x162/0x1180 [ 320.486037][T10642] ? __pfx_ip6_pol_route+0x10/0x10 [ 320.486062][T10642] ? __lock_acquire+0xab9/0xd20 [ 320.486100][T10642] ? ip6t_do_table+0x1376/0x1560 [ 320.486136][T10642] fib6_rule_lookup+0x52f/0x6f0 [ 320.486166][T10642] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 320.486193][T10642] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 320.486231][T10642] ? ip6t_do_table+0x1db/0x1560 [ 320.486271][T10642] ip6_route_input+0x6ce/0xa50 [ 320.486307][T10642] ? __pfx_ip6_route_input+0x10/0x10 [ 320.486345][T10642] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 320.486386][T10642] ? ip6_rcv_finish_core+0x222/0x420 [ 320.486410][T10642] ip6_rcv_finish+0x141/0x2d0 [ 320.486435][T10642] NF_HOOK+0x30c/0x3a0 [ 320.486452][T10642] ? skb_orphan+0x4f/0xd0 [ 320.486474][T10642] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 320.486492][T10642] ? NF_HOOK+0x9a/0x3a0 [ 320.486511][T10642] ? __pfx_NF_HOOK+0x10/0x10 [ 320.486533][T10642] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 320.486567][T10642] __netif_receive_skb+0xd3/0x380 [ 320.486598][T10642] ? netif_receive_skb+0x115/0x790 [ 320.486622][T10642] netif_receive_skb+0x1cb/0x790 [ 320.486646][T10642] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 320.486664][T10642] ? _copy_from_iter+0x24c/0x16f0 [ 320.486688][T10642] ? __pfx_netif_receive_skb+0x10/0x10 [ 320.486713][T10642] ? tun_rx_batched+0x160/0x730 [ 320.486733][T10642] tun_rx_batched+0x1b9/0x730 [ 320.486750][T10642] ? __lock_acquire+0xab9/0xd20 [ 320.486777][T10642] ? __pfx_tun_rx_batched+0x10/0x10 [ 320.486798][T10642] ? tun_get_user+0x2549/0x3ce0 [ 320.486826][T10642] tun_get_user+0x298e/0x3ce0 [ 320.486846][T10642] ? tun_get_user+0x2549/0x3ce0 [ 320.486873][T10642] ? aa_file_perm+0x13e/0x11b0 [ 320.486894][T10642] ? aa_file_perm+0x13e/0x11b0 [ 320.486913][T10642] ? aa_file_perm+0x3ed/0x11b0 [ 320.486934][T10642] ? __pfx_tun_get_user+0x10/0x10 [ 320.486958][T10642] ? __lock_acquire+0xab9/0xd20 [ 320.486987][T10642] ? ref_tracker_alloc+0x318/0x460 [ 320.487002][T10642] ? __lock_acquire+0xab9/0xd20 [ 320.487027][T10642] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 320.487049][T10642] ? tun_get+0x1c/0x2f0 [ 320.487070][T10642] ? tun_get+0x1c/0x2f0 [ 320.487086][T10642] ? tun_get+0x1c/0x2f0 [ 320.487107][T10642] tun_chr_write_iter+0x113/0x200 [ 320.487127][T10642] vfs_write+0x54b/0xa90 [ 320.487151][T10642] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 320.487169][T10642] ? __pfx_vfs_write+0x10/0x10 [ 320.487200][T10642] ? __fget_files+0x2a/0x420 [ 320.487236][T10642] ksys_write+0x145/0x250 [ 320.487258][T10642] ? __pfx_ksys_write+0x10/0x10 [ 320.487276][T10642] ? rcu_is_watching+0x15/0xb0 [ 320.487297][T10642] ? do_syscall_64+0xbe/0x3b0 [ 320.487322][T10642] do_syscall_64+0xfa/0x3b0 [ 320.487343][T10642] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.487363][T10642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.487380][T10642] ? clear_bhb_loop+0x60/0xb0 [ 320.487400][T10642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.487415][T10642] RIP: 0033:0x7f632af8e929 [ 320.487430][T10642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.487444][T10642] RSP: 002b:00007f632be24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 320.487463][T10642] RAX: ffffffffffffffda RBX: 00007f632b1b5fa0 RCX: 00007f632af8e929 [ 320.487476][T10642] RDX: 000000000000007a RSI: 00002000000006c0 RDI: 0000000000000003 [ 320.487486][T10642] RBP: 00007f632be24090 R08: 0000000000000000 R09: 0000000000000000 [ 320.487496][T10642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.487506][T10642] R13: 0000000000000000 R14: 00007f632b1b5fa0 R15: 00007ffce5a34128 [ 320.487530][T10642] [ 320.988337][T10644] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 320.999173][T10644] UDF-fs: Scanning with blocksize 4096 failed [ 321.085574][T10648] FAULT_INJECTION: forcing a failure. [ 321.085574][T10648] name failslab, interval 1, probability 0, space 0, times 0 [ 321.145650][T10648] CPU: 1 UID: 0 PID: 10648 Comm: syz.4.1405 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 321.145681][T10648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.145695][T10648] Call Trace: [ 321.145704][T10648] [ 321.145713][T10648] dump_stack_lvl+0x189/0x250 [ 321.145742][T10648] ? __pfx____ratelimit+0x10/0x10 [ 321.145769][T10648] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.145800][T10648] ? __pfx__printk+0x10/0x10 [ 321.145827][T10648] ? __pfx___might_resched+0x10/0x10 [ 321.145848][T10648] ? fs_reclaim_acquire+0x7d/0x100 [ 321.145881][T10648] should_fail_ex+0x414/0x560 [ 321.145919][T10648] should_failslab+0xa8/0x100 [ 321.145946][T10648] __kmalloc_noprof+0xcb/0x4f0 [ 321.145968][T10648] ? tomoyo_mount_permission+0x27a/0x970 [ 321.145989][T10648] ? tomoyo_encode+0x28b/0x550 [ 321.146017][T10648] tomoyo_encode+0x28b/0x550 [ 321.146043][T10648] ? tomoyo_mount_permission+0x27a/0x970 [ 321.146067][T10648] tomoyo_mount_permission+0x331/0x970 [ 321.146097][T10648] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 321.146182][T10648] security_sb_mount+0xec/0x350 [ 321.146210][T10648] path_mount+0xbc/0xfe0 [ 321.146236][T10648] ? user_path_at+0x44/0x60 [ 321.146254][T10648] ? kmem_cache_free+0x18f/0x400 [ 321.146288][T10648] __se_sys_mount+0x317/0x410 [ 321.146324][T10648] ? __pfx___se_sys_mount+0x10/0x10 [ 321.146350][T10648] ? rcu_is_watching+0x15/0xb0 [ 321.146376][T10648] ? do_syscall_64+0xbe/0x3b0 [ 321.146402][T10648] ? __x64_sys_mount+0x20/0xc0 [ 321.146433][T10648] do_syscall_64+0xfa/0x3b0 [ 321.146459][T10648] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.146485][T10648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.146505][T10648] ? clear_bhb_loop+0x60/0xb0 [ 321.146530][T10648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.146550][T10648] RIP: 0033:0x7fc1bd78e929 [ 321.146568][T10648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.146586][T10648] RSP: 002b:00007fc1be576038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 321.146608][T10648] RAX: ffffffffffffffda RBX: 00007fc1bd9b5fa0 RCX: 00007fc1bd78e929 [ 321.146624][T10648] RDX: 0000200000001480 RSI: 0000200000001440 RDI: 0000200000001400 [ 321.146639][T10648] RBP: 00007fc1be576090 R08: 0000000000000000 R09: 0000000000000000 [ 321.146657][T10648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.146670][T10648] R13: 0000000000000000 R14: 00007fc1bd9b5fa0 R15: 00007ffc4e960728 [ 321.146702][T10648] [ 321.642718][T10663] FAULT_INJECTION: forcing a failure. [ 321.642718][T10663] name failslab, interval 1, probability 0, space 0, times 0 [ 321.663156][T10663] CPU: 1 UID: 0 PID: 10663 Comm: syz.4.1413 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 321.663184][T10663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.663196][T10663] Call Trace: [ 321.663205][T10663] [ 321.663215][T10663] dump_stack_lvl+0x189/0x250 [ 321.663243][T10663] ? __pfx____ratelimit+0x10/0x10 [ 321.663270][T10663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.663293][T10663] ? __pfx__printk+0x10/0x10 [ 321.663323][T10663] ? ref_tracker_alloc+0x318/0x460 [ 321.663349][T10663] should_fail_ex+0x414/0x560 [ 321.663386][T10663] should_failslab+0xa8/0x100 [ 321.663413][T10663] kmem_cache_alloc_noprof+0x73/0x3c0 [ 321.663436][T10663] ? skb_clone+0x212/0x3a0 [ 321.663463][T10663] skb_clone+0x212/0x3a0 [ 321.663489][T10663] __netlink_deliver_tap+0x404/0x850 [ 321.663531][T10663] ? netlink_deliver_tap+0x2e/0x1b0 [ 321.663562][T10663] netlink_deliver_tap+0x19c/0x1b0 [ 321.663593][T10663] netlink_unicast+0x72f/0x8d0 [ 321.663631][T10663] netlink_sendmsg+0x805/0xb30 [ 321.663670][T10663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.663704][T10663] ? aa_sock_msg_perm+0xf1/0x1d0 [ 321.663729][T10663] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 321.663760][T10663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.663802][T10663] __sock_sendmsg+0x219/0x270 [ 321.663832][T10663] ____sys_sendmsg+0x505/0x830 [ 321.663860][T10663] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.663891][T10663] ? import_iovec+0x74/0xa0 [ 321.663917][T10663] ___sys_sendmsg+0x21f/0x2a0 [ 321.663941][T10663] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.664001][T10663] ? __fget_files+0x2a/0x420 [ 321.664030][T10663] ? __fget_files+0x3a0/0x420 [ 321.664070][T10663] __x64_sys_sendmsg+0x19b/0x260 [ 321.664095][T10663] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.664127][T10663] ? __pfx_ksys_write+0x10/0x10 [ 321.664150][T10663] ? rcu_is_watching+0x15/0xb0 [ 321.664177][T10663] ? do_syscall_64+0xbe/0x3b0 [ 321.664209][T10663] do_syscall_64+0xfa/0x3b0 [ 321.664235][T10663] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.664261][T10663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.664282][T10663] ? clear_bhb_loop+0x60/0xb0 [ 321.664307][T10663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.664327][T10663] RIP: 0033:0x7fc1bd78e929 [ 321.664346][T10663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.664365][T10663] RSP: 002b:00007fc1be576038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.664388][T10663] RAX: ffffffffffffffda RBX: 00007fc1bd9b5fa0 RCX: 00007fc1bd78e929 [ 321.664404][T10663] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 321.664418][T10663] RBP: 00007fc1be576090 R08: 0000000000000000 R09: 0000000000000000 [ 321.664437][T10663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.664450][T10663] R13: 0000000000000000 R14: 00007fc1bd9b5fa0 R15: 00007ffc4e960728 [ 321.664483][T10663] [ 322.621921][T10694] QAT: Invalid ioctl 21531 [ 322.646292][ T30] audit: type=1326 audit(1751536920.784:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10690 comm="syz.0.1421" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa489d8e929 code=0x0 [ 322.777797][T10698] FAULT_INJECTION: forcing a failure. [ 322.777797][T10698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.792144][T10698] CPU: 1 UID: 0 PID: 10698 Comm: syz.4.1425 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 322.792175][T10698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.792189][T10698] Call Trace: [ 322.792198][T10698] [ 322.792207][T10698] dump_stack_lvl+0x189/0x250 [ 322.792237][T10698] ? __pfx____ratelimit+0x10/0x10 [ 322.792265][T10698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.792289][T10698] ? __pfx__printk+0x10/0x10 [ 322.792314][T10698] ? __might_fault+0xb0/0x130 [ 322.792350][T10698] should_fail_ex+0x414/0x560 [ 322.792389][T10698] _copy_from_user+0x2d/0xb0 [ 322.792411][T10698] memdup_user+0x5e/0xd0 [ 322.792441][T10698] sctp_getsockopt_connectx3+0x1cc/0x440 [ 322.792473][T10698] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 322.792503][T10698] ? __local_bh_enable_ip+0x12d/0x1c0 [ 322.792524][T10698] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 322.792556][T10698] sctp_getsockopt+0x98a/0xb60 [ 322.792590][T10698] do_sock_getsockopt+0x35d/0x650 [ 322.792627][T10698] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 322.792659][T10698] ? do_syscall_64+0x60/0x3b0 [ 322.792686][T10698] ? __fget_files+0x3a0/0x420 [ 322.792714][T10698] ? __fget_files+0x2a/0x420 [ 322.792750][T10698] __x64_sys_getsockopt+0x1a5/0x250 [ 322.792781][T10698] ? do_syscall_64+0x60/0x3b0 [ 322.792814][T10698] ? do_syscall_64+0x60/0x3b0 [ 322.792845][T10698] do_syscall_64+0xfa/0x3b0 [ 322.792871][T10698] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.792897][T10698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.792926][T10698] ? clear_bhb_loop+0x60/0xb0 [ 322.792951][T10698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.792972][T10698] RIP: 0033:0x7fc1bd78e929 [ 322.792991][T10698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.793010][T10698] RSP: 002b:00007fc1be576038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 322.793033][T10698] RAX: ffffffffffffffda RBX: 00007fc1bd9b5fa0 RCX: 00007fc1bd78e929 [ 322.793049][T10698] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 322.793062][T10698] RBP: 00007fc1be576090 R08: 0000200000000240 R09: 0000000000000000 [ 322.793076][T10698] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.793090][T10698] R13: 0000000000000000 R14: 00007fc1bd9b5fa0 R15: 00007ffc4e960728 [ 322.793122][T10698] [ 323.165427][ T5835] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 323.327432][ T5835] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.342447][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 323.354027][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 323.371407][ T5835] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 323.387958][ T5835] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 323.397930][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.412867][ T5835] usb 6-1: config 0 descriptor?? [ 323.844156][ T5835] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 324.511732][T10710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.521914][T10710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.738554][ T5835] usb 6-1: USB disconnect, device number 35 [ 325.165168][ T5839] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 325.569091][ T979] hid_parser_main: 7 callbacks suppressed [ 325.569113][ T979] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 325.589303][ T979] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 325.600163][ T979] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 325.609894][ T979] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 325.617825][ T979] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 325.627678][ T979] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 325.635170][ T979] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 325.642604][ T979] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 325.650215][ T979] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 325.659768][ T979] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 325.668953][ T979] hid-generic 0002:0004:0009.0014: hidraw0: HID v0.04 Device [syz0] on syz0 [ 325.735034][T10736] fido_id[10736]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 326.485169][ T979] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 326.637044][ T979] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 326.650023][ T979] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 326.661732][ T979] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 326.674736][ T979] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 326.684480][ T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.700714][T10744] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 326.911639][T10744] overlayfs: missing 'lowerdir' [ 326.928499][ T979] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 326.938825][ T979] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input18 [ 326.987548][ T979] usb 6-1: USB disconnect, device number 36 [ 326.987613][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 327.715100][ T5835] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 327.724951][ T5839] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 327.866964][ T5835] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.878583][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 327.889535][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 327.899526][ T5835] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 327.912959][ T5835] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 327.922135][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.933164][ T5835] usb 6-1: config 0 descriptor?? [ 328.034956][ T43] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 328.045101][ T5839] Bluetooth: hci5: command 0x1003 tx timeout [ 328.045117][ T5847] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 328.186580][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 328.203179][ T43] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 328.212410][ T43] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 328.220650][ T43] usb 5-1: Product: syz [ 328.220699][ T43] usb 5-1: Manufacturer: syz [ 328.220718][ T43] usb 5-1: SerialNumber: syz [ 328.227965][ T43] usb 5-1: config 0 descriptor?? [ 328.238174][ T43] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 328.263462][ T5847] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 328.351367][ T5835] plantronics 0003:047F:FFFF.0015: ignoring exceeding usage max [ 328.390078][ T5835] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 328.584526][T10763] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1449'. [ 328.837441][ T43] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 329.039471][ T43] usb 5-1: USB disconnect, device number 55 [ 329.160431][T10776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.195857][T10776] bond0: (slave rose0): Enslaving as an active interface with an up link [ 330.368708][ T979] usb 6-1: USB disconnect, device number 37 [ 330.935703][ T979] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 331.005410][ T5839] Bluetooth: hci4: command 0x1003 tx timeout [ 331.012139][ T5847] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 331.097977][ T979] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 331.134382][T10849] kvm: pic: single mode not supported [ 331.142026][ T979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 331.204148][ T979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 331.228643][ T979] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 331.248075][T10851] binder: 10850:10851 ioctl c0306201 2000000001c0 returned -22 [ 331.263361][ T979] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 331.282110][ T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.329907][ T979] usb 6-1: config 0 descriptor?? [ 331.474580][T10857] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1469'. [ 331.483913][T10857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1469'. [ 331.493062][T10857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1469'. [ 331.764968][ T43] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 331.807116][ T979] hid_parser_main: 7 callbacks suppressed [ 331.807141][ T979] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 331.827233][ T979] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 331.834775][ T979] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 331.845891][ T979] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 331.857092][ T979] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 331.865826][ T979] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 331.873507][ T979] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 331.883062][ T979] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 331.890929][ T979] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 331.898988][ T979] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 331.914450][ T979] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 331.958009][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 331.971260][ T43] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 331.984960][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.996091][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.009103][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 332.022580][ T43] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 332.031876][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.046813][ T43] usb 2-1: config 0 descriptor?? [ 332.238992][T10868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.497535][ T43] redragon 0003:0C45:760B.0017: item fetching failed at offset 7/133 [ 332.510702][ T43] redragon 0003:0C45:760B.0017: probe with driver redragon failed with error -22 [ 332.592894][ T10] usb 6-1: USB disconnect, device number 38 [ 332.711236][T10857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.736010][T10857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.176553][T10890] FAULT_INJECTION: forcing a failure. [ 333.176553][T10890] name failslab, interval 1, probability 0, space 0, times 0 [ 333.190769][T10890] CPU: 0 UID: 0 PID: 10890 Comm: syz.4.1480 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 333.190799][T10890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.190812][T10890] Call Trace: [ 333.190824][T10890] [ 333.190843][T10890] dump_stack_lvl+0x189/0x250 [ 333.190870][T10890] ? __pfx____ratelimit+0x10/0x10 [ 333.190897][T10890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.190919][T10890] ? __pfx__printk+0x10/0x10 [ 333.190948][T10890] ? __pfx___might_resched+0x10/0x10 [ 333.190965][T10890] ? fs_reclaim_acquire+0x7d/0x100 [ 333.190992][T10890] should_fail_ex+0x414/0x560 [ 333.191025][T10890] should_failslab+0xa8/0x100 [ 333.191050][T10890] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 333.191070][T10890] ? __alloc_skb+0x112/0x2d0 [ 333.191100][T10890] __alloc_skb+0x112/0x2d0 [ 333.191127][T10890] netlink_ack+0x146/0xa50 [ 333.191149][T10890] ? __pfx_genl_rcv_msg+0x10/0x10 [ 333.191166][T10890] ? ref_tracker_free+0x63a/0x7d0 [ 333.191188][T10890] ? __pfx_ref_tracker_free+0x10/0x10 [ 333.191214][T10890] netlink_rcv_skb+0x28c/0x470 [ 333.191239][T10890] ? __pfx_genl_rcv_msg+0x10/0x10 [ 333.191258][T10890] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.191294][T10890] ? down_read+0x1ad/0x2e0 [ 333.191321][T10890] genl_rcv+0x28/0x40 [ 333.191337][T10890] netlink_unicast+0x75b/0x8d0 [ 333.191368][T10890] netlink_sendmsg+0x805/0xb30 [ 333.191406][T10890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.191437][T10890] ? aa_sock_msg_perm+0xf1/0x1d0 [ 333.191461][T10890] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.191490][T10890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.191518][T10890] __sock_sendmsg+0x219/0x270 [ 333.191545][T10890] __sys_sendto+0x3bd/0x520 [ 333.191573][T10890] ? __pfx___sys_sendto+0x10/0x10 [ 333.191606][T10890] ? count_memcg_event_mm+0x21/0x260 [ 333.191634][T10890] ? exc_page_fault+0x76/0xf0 [ 333.191659][T10890] ? do_user_addr_fault+0xc8a/0x1390 [ 333.191688][T10890] __x64_sys_sendto+0xde/0x100 [ 333.191716][T10890] do_syscall_64+0xfa/0x3b0 [ 333.191738][T10890] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.191760][T10890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.191778][T10890] ? clear_bhb_loop+0x60/0xb0 [ 333.191799][T10890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.191816][T10890] RIP: 0033:0x7fc1bd7907bc [ 333.191843][T10890] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 333.191858][T10890] RSP: 002b:00007fc1be574ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 333.191876][T10890] RAX: ffffffffffffffda RBX: 00007fc1be574fc0 RCX: 00007fc1bd7907bc [ 333.191888][T10890] RDX: 0000000000000020 RSI: 00007fc1be575010 RDI: 0000000000000004 [ 333.191900][T10890] RBP: 0000000000000000 R08: 00007fc1be574f14 R09: 000000000000000c [ 333.191911][T10890] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 333.191921][T10890] R13: 00007fc1be574f68 R14: 00007fc1be575010 R15: 0000000000000000 [ 333.191945][T10890] [ 333.720509][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1482'. [ 333.747912][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1482'. [ 334.933668][T10923] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1493'. [ 335.015323][ T5839] Bluetooth: hci4: command 0x1003 tx timeout [ 335.022672][ T5847] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 335.564976][ T979] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 335.717288][ T979] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 335.726749][ T979] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.739815][ T979] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 335.750014][ T979] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.764620][ T979] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 335.774118][ T979] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 335.782389][ T979] usb 1-1: Product: syz [ 335.786876][ T979] usb 1-1: Manufacturer: syz [ 335.802628][ T979] cdc_wdm 1-1:1.0: skipping garbage [ 335.808167][ T979] cdc_wdm 1-1:1.0: skipping garbage [ 335.815050][ T979] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 335.821209][ T979] cdc_wdm 1-1:1.0: Unknown control protocol [ 335.884354][T10938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.895663][T10938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.908634][T10938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.917382][T10938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.272487][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE [ 336.361893][T10948] syzkaller1: entered promiscuous mode [ 336.370588][T10948] syzkaller1: entered allmulticast mode [ 336.590278][ T1334] wlan0: IBSS 50:50:50:50:50:50 switches to unsupported channel (2484 MHz, width:0, CF1/2: 2484/0 MHz), disconnecting [ 336.625730][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.633802][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.669616][T10957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 336.996397][ T43] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 337.072304][T10964] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1508'. [ 337.134954][ T43] usb 5-1: device descriptor read/64, error -71 [ 337.377961][ T43] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 337.515056][ T43] usb 5-1: device descriptor read/64, error -71 [ 337.625633][ T43] usb usb5-port1: attempt power cycle [ 337.965102][ T43] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 337.986419][ T43] usb 5-1: device descriptor read/8, error -71 [ 338.225038][ T43] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 338.245658][ T43] usb 5-1: device descriptor read/8, error -71 [ 338.346025][ T5835] usb 1-1: USB disconnect, device number 47 [ 338.356224][ T43] usb usb5-port1: unable to enumerate USB device [ 338.408198][ T5839] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 338.525226][ T5847] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 338.531998][ T5839] Bluetooth: hci4: command 0x1003 tx timeout [ 338.944080][T10992] netlink: 'syz.1.1517': attribute type 21 has an invalid length. [ 338.950542][T10996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.961666][T10992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1517'. [ 338.973989][T10996] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1518'. [ 338.984808][T10996] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1518'. [ 338.994241][T10996] netlink: 'syz.0.1518': attribute type 6 has an invalid length. [ 339.004100][T10996] netlink: 'syz.0.1518': attribute type 5 has an invalid length. [ 339.012362][T10996] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1518'. [ 339.132062][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'. [ 339.888084][T11005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.277908][T11015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.290280][T11015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.584528][T11023] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1531'. [ 340.597201][T11023] autofs: Bad value for 'fd' [ 340.668347][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1532'. [ 341.051226][T11033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.067867][T11033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.165206][ T5839] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 341.165879][ T5847] Bluetooth: hci4: command 0x1003 tx timeout [ 341.735071][ T979] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 341.899413][ T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.923309][ T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.956307][ T979] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 341.978037][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.999947][ T979] usb 1-1: config 0 descriptor?? [ 342.026859][ T10] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 342.215398][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 342.227601][ T10] usb 5-1: config 0 has no interfaces? [ 342.239500][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=817a, bcdDevice=eb.19 [ 342.256948][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.267423][ T10] usb 5-1: Product: syz [ 342.271647][ T10] usb 5-1: Manufacturer: syz [ 342.278153][ T10] usb 5-1: SerialNumber: syz [ 342.287026][ T10] usb 5-1: config 0 descriptor?? [ 342.370082][ T5942] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 342.440180][ T979] logitech-djreceiver 0003:046D:C534.0018: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.0-1/input0 [ 342.500650][ T10] usb 5-1: USB disconnect, device number 60 [ 342.537137][ T5942] usb 6-1: Using ep0 maxpacket: 32 [ 342.547905][ T5942] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 342.557858][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.566446][ T5942] usb 6-1: Product: syz [ 342.570794][ T5942] usb 6-1: Manufacturer: syz [ 342.575452][ T5942] usb 6-1: SerialNumber: syz [ 342.582189][ T5942] usb 6-1: config 0 descriptor?? [ 342.591374][ T5942] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 342.635360][ T979] usb 1-1: USB disconnect, device number 48 [ 343.072419][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1546'. [ 343.401083][T11109] netlink: 368 bytes leftover after parsing attributes in process `syz.0.1549'. [ 343.412722][T11109] qnx4: no qnx4 filesystem (no root dir). [ 343.814800][T11080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.823883][T11080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.953233][T11116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.971619][T11116] XFS (rnullb0): Invalid superblock magic number [ 344.058249][ T5942] gspca_ov534_9: reg_r err -32 [ 344.126055][ T5847] Bluetooth: hci4: command 0x1003 tx timeout [ 344.128494][ T5839] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 344.250797][T11128] macsec0: entered allmulticast mode [ 344.256577][T11128] veth1_macvtap: entered allmulticast mode [ 344.264164][T11130] FAULT_INJECTION: forcing a failure. [ 344.264164][T11130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.280565][T11130] CPU: 1 UID: 0 PID: 11130 Comm: syz.4.1556 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 344.280594][T11130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 344.280608][T11130] Call Trace: [ 344.280616][T11130] [ 344.280625][T11130] dump_stack_lvl+0x189/0x250 [ 344.280651][T11130] ? __pfx____ratelimit+0x10/0x10 [ 344.280676][T11130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.280698][T11130] ? __pfx__printk+0x10/0x10 [ 344.280731][T11130] should_fail_ex+0x414/0x560 [ 344.280766][T11130] _copy_to_user+0x31/0xb0 [ 344.280787][T11130] simple_read_from_buffer+0xe1/0x170 [ 344.280836][T11130] proc_fail_nth_read+0x1df/0x250 [ 344.280859][T11130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.280882][T11130] ? rw_verify_area+0x258/0x650 [ 344.280904][T11130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.280925][T11130] vfs_read+0x200/0x980 [ 344.280954][T11130] ? __pfx___mutex_lock+0x10/0x10 [ 344.280981][T11130] ? __pfx_vfs_read+0x10/0x10 [ 344.281007][T11130] ? __fget_files+0x2a/0x420 [ 344.281039][T11130] ? __fget_files+0x3a0/0x420 [ 344.281065][T11130] ? __fget_files+0x2a/0x420 [ 344.281101][T11130] ksys_read+0x145/0x250 [ 344.281145][T11130] ? __pfx_ksys_read+0x10/0x10 [ 344.281165][T11130] ? rcu_is_watching+0x15/0xb0 [ 344.281189][T11130] ? do_syscall_64+0xbe/0x3b0 [ 344.281218][T11130] do_syscall_64+0xfa/0x3b0 [ 344.281241][T11130] ? lockdep_hardirqs_on+0x9c/0x150 [ 344.281265][T11130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.281284][T11130] ? clear_bhb_loop+0x60/0xb0 [ 344.281307][T11130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.281325][T11130] RIP: 0033:0x7fc1bd78d33c [ 344.281342][T11130] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 344.281358][T11130] RSP: 002b:00007fc1be576030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 344.281378][T11130] RAX: ffffffffffffffda RBX: 00007fc1bd9b5fa0 RCX: 00007fc1bd78d33c [ 344.281392][T11130] RDX: 000000000000000f RSI: 00007fc1be5760a0 RDI: 0000000000000003 [ 344.281404][T11130] RBP: 00007fc1be576090 R08: 0000000000000000 R09: 0000000000000000 [ 344.281416][T11130] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 344.281428][T11130] R13: 0000000000000000 R14: 00007fc1bd9b5fa0 R15: 00007ffc4e960728 [ 344.281457][T11130] [ 344.545120][ T5942] gspca_ov534_9: Unknown sensor 0000 [ 344.545221][ T5942] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 344.555336][T11133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.600357][T11133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.605680][T11136] program syz.4.1558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.622608][T11133] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 344.854949][ T5835] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 345.005123][ T5835] usb 5-1: Using ep0 maxpacket: 8 [ 345.012016][ T5835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.022294][ T5835] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 345.031337][ T5835] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.048631][ T5835] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 345.057906][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.066443][ T5835] usb 5-1: Product: syz [ 345.073057][ T5835] usb 5-1: Manufacturer: syz [ 345.077947][ T5835] usb 5-1: SerialNumber: syz [ 345.085292][ T5835] usb 5-1: config 0 descriptor?? [ 345.093811][ T5835] powermate 5-1:0.0: probe with driver powermate failed with error -22 [ 345.293439][T11143] Mount JFS Failure: -22 [ 345.321776][ T5839] block nbd0: Receive control failed (result -32) [ 345.370076][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1561'. [ 345.483653][ T5835] usb 5-1: USB disconnect, device number 61 [ 345.867222][ T5839] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 346.280006][ T5835] usb 6-1: USB disconnect, device number 39 [ 346.353352][T11159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1566'. [ 346.437780][T11162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.447878][T11162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.670999][T11172] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1572'. [ 347.098067][T11180] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 347.113321][T11180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.123286][T11180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.591784][T11186] /dev/rnullb0: Can't open blockdev [ 347.648941][T11189] FAULT_INJECTION: forcing a failure. [ 347.648941][T11189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.668103][T11189] CPU: 1 UID: 0 PID: 11189 Comm: syz.0.1579 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 347.668131][T11189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 347.668143][T11189] Call Trace: [ 347.668152][T11189] [ 347.668161][T11189] dump_stack_lvl+0x189/0x250 [ 347.668187][T11189] ? __pfx____ratelimit+0x10/0x10 [ 347.668211][T11189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.668233][T11189] ? __pfx__printk+0x10/0x10 [ 347.668254][T11189] ? __might_fault+0xb0/0x130 [ 347.668305][T11189] should_fail_ex+0x414/0x560 [ 347.668342][T11189] _copy_from_user+0x2d/0xb0 [ 347.668363][T11189] ___sys_recvmsg+0x12e/0x510 [ 347.668391][T11189] ? __pfx____sys_recvmsg+0x10/0x10 [ 347.668437][T11189] ? __fget_files+0x3a0/0x420 [ 347.668475][T11189] do_recvmmsg+0x307/0x770 [ 347.668505][T11189] ? __pfx_do_recvmmsg+0x10/0x10 [ 347.668538][T11189] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 347.668584][T11189] __x64_sys_recvmmsg+0x190/0x240 [ 347.668608][T11189] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 347.668628][T11189] ? rcu_is_watching+0x15/0xb0 [ 347.668661][T11189] ? do_syscall_64+0xbe/0x3b0 [ 347.668696][T11189] do_syscall_64+0xfa/0x3b0 [ 347.668721][T11189] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.668745][T11189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.668764][T11189] ? clear_bhb_loop+0x60/0xb0 [ 347.668789][T11189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.668808][T11189] RIP: 0033:0x7fa489d8e929 [ 347.668827][T11189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.668844][T11189] RSP: 002b:00007fa48acc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 347.668866][T11189] RAX: ffffffffffffffda RBX: 00007fa489fb5fa0 RCX: 00007fa489d8e929 [ 347.668887][T11189] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000003 [ 347.668900][T11189] RBP: 00007fa48acc0090 R08: 0000000000000000 R09: 0000000000000000 [ 347.668913][T11189] R10: 0000000040008062 R11: 0000000000000246 R12: 0000000000000001 [ 347.668926][T11189] R13: 0000000000000000 R14: 00007fa489fb5fa0 R15: 00007ffc863301d8 [ 347.668957][T11189] [ 347.887573][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.967807][ T5839] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 348.108139][T11201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1584'. [ 348.210351][ T10] IPVS: starting estimator thread 0... [ 348.304962][T11205] IPVS: using max 28 ests per chain, 67200 per kthread [ 348.348089][ T5942] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 348.515673][ T5942] usb 1-1: Using ep0 maxpacket: 16 [ 348.522796][ T5942] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.537941][ T5942] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.551558][ T5942] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 348.561091][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.569961][ T5942] usb 1-1: Product: syz [ 348.574244][ T5942] usb 1-1: Manufacturer: syz [ 348.580557][ T5942] usb 1-1: SerialNumber: syz [ 348.798757][ T5942] usb 1-1: 0:2 : does not exist [ 348.810231][ T5942] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 348.833880][ T5942] usb 1-1: USB disconnect, device number 49 [ 348.872625][ T6359] udevd[6359]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.105377][ T5835] hid_parser_main: 6 callbacks suppressed [ 349.105395][ T5835] hid-generic 0002:0004:0009.0019: unknown main item tag 0x0 [ 349.126227][ T5835] hid-generic 0002:0004:0009.0019: unknown main item tag 0x0 [ 349.133667][ T5835] hid-generic 0002:0004:0009.0019: unknown main item tag 0x0 [ 349.141377][ T5835] hid-generic 0002:0004:0009.0019: unknown main item tag 0x0 [ 349.149403][ T5835] hid-generic 0002:0004:0009.0019: unknown main item tag 0x0 [ 349.156966][ T5835] hid-generic 0002:0004:0009.0019: unknown main item tag 0x0 [ 349.164708][ T5835] hid-generic 0002:0004:0009.0019: unknown main item tag 0x0 [ 349.172832][ T5835] hid-generic 0002:0004:0009.0019: unknown main item tag 0x0 [ 349.180723][ T5835] hid-generic 0002:0004:0009.0019: unknown main item tag 0x0 [ 349.189870][ T5835] hid-generic 0002:0004:0009.0019: unknown main item tag 0x0 [ 349.199521][ T5835] hid-generic 0002:0004:0009.0019: hidraw0: HID v0.04 Device [syz0] on syz0 [ 349.268944][T11224] fido_id[11224]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 349.927138][T11242] FAULT_INJECTION: forcing a failure. [ 349.927138][T11242] name failslab, interval 1, probability 0, space 0, times 0 [ 349.941800][T11242] CPU: 1 UID: 0 PID: 11242 Comm: syz.0.1599 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 349.941822][T11242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 349.941837][T11242] Call Trace: [ 349.941845][T11242] [ 349.941854][T11242] dump_stack_lvl+0x189/0x250 [ 349.941883][T11242] ? __pfx____ratelimit+0x10/0x10 [ 349.941912][T11242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.941929][T11242] ? __pfx__printk+0x10/0x10 [ 349.941950][T11242] ? __pfx___might_resched+0x10/0x10 [ 349.941987][T11242] should_fail_ex+0x414/0x560 [ 349.942015][T11242] should_failslab+0xa8/0x100 [ 349.942034][T11242] __kmalloc_noprof+0xcb/0x4f0 [ 349.942050][T11242] ? sock_kmalloc+0xd6/0x160 [ 349.942069][T11242] sock_kmalloc+0xd6/0x160 [ 349.942086][T11242] af_alg_alloc_areq+0x8d/0x260 [ 349.942106][T11242] skcipher_recvmsg+0x356/0x11c0 [ 349.942129][T11242] ? aa_sk_perm+0x81e/0x950 [ 349.942152][T11242] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 349.942174][T11242] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 349.942195][T11242] ? security_socket_recvmsg+0x7e/0x2e0 [ 349.942215][T11242] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 349.942235][T11242] sock_recvmsg+0x229/0x270 [ 349.942257][T11242] __sys_recvfrom+0x1f6/0x340 [ 349.942280][T11242] ? __pfx___sys_recvfrom+0x10/0x10 [ 349.942320][T11242] ? count_memcg_event_mm+0x21/0x260 [ 349.942355][T11242] ? exc_page_fault+0x76/0xf0 [ 349.942385][T11242] ? do_user_addr_fault+0xc8a/0x1390 [ 349.942415][T11242] __x64_sys_recvfrom+0xde/0x100 [ 349.942440][T11242] do_syscall_64+0xfa/0x3b0 [ 349.942459][T11242] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.942477][T11242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.942492][T11242] ? clear_bhb_loop+0x60/0xb0 [ 349.942510][T11242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.942523][T11242] RIP: 0033:0x7fa489d906f4 [ 349.942537][T11242] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 349.942550][T11242] RSP: 002b:00007fa48acbeed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 349.942566][T11242] RAX: ffffffffffffffda RBX: 00007fa48acbefc0 RCX: 00007fa489d906f4 [ 349.942577][T11242] RDX: 0000000000001000 RSI: 00007fa48acbf010 RDI: 0000000000000004 [ 349.942587][T11242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 349.942596][T11242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 349.942605][T11242] R13: 00007fa48acbef68 R14: 00007fa48acbf010 R15: 0000000000000000 [ 349.942627][T11242] [ 350.192489][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.514959][ T5835] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 350.596680][T11248] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 350.667709][ T5835] usb 1-1: Using ep0 maxpacket: 32 [ 350.674564][ T5835] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 350.685337][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.705854][ T5835] usb 1-1: config 0 descriptor?? [ 350.714126][ T5835] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 350.765537][ T5843] Bluetooth: hci4: command 0x1003 tx timeout [ 350.769398][ T5839] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 351.078065][ T5942] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 351.095127][ T10] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 351.234917][ T5942] usb 6-1: Using ep0 maxpacket: 32 [ 351.244661][ T5942] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 351.254085][ T5839] Bluetooth: hci5: command 0x1003 tx timeout [ 351.260177][ T5847] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 351.260650][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 351.291111][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.314005][ T5942] usb 6-1: Product: syz [ 351.319641][ T10] usb 5-1: config 0 has an invalid interface number: 28 but max is 0 [ 351.330628][ T5942] usb 6-1: Manufacturer: syz [ 351.336848][ T10] usb 5-1: config 0 has no interface number 0 [ 351.343066][ T5942] usb 6-1: SerialNumber: syz [ 351.354700][ T10] usb 5-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=3f.37 [ 351.369661][ T5942] usb 6-1: config 0 descriptor?? [ 351.374975][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.383132][ T10] usb 5-1: Product: syz [ 351.391115][ T10] usb 5-1: Manufacturer: syz [ 351.399197][ T5942] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 351.406088][ T10] usb 5-1: SerialNumber: syz [ 351.419281][ T10] usb 5-1: config 0 descriptor?? [ 351.435880][ T10] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 351.442490][ T10] command write [95] error -22 [ 351.666644][ T10] usb 5-1: USB disconnect, device number 62 [ 351.707650][T11263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.718018][T11263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.333220][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1611'. [ 352.612163][ T5942] gspca_stk1135: reg_w 0xd err -71 [ 352.627478][ T5942] gspca_stk1135: serial bus timeout: status=0x00 [ 352.633921][ T5942] gspca_stk1135: Sensor write failed [ 352.641450][ T5942] gspca_stk1135: serial bus timeout: status=0x00 [ 352.653007][ T5942] gspca_stk1135: Sensor write failed [ 352.658650][ T5942] gspca_stk1135: serial bus timeout: status=0x00 [ 352.668079][ T5942] gspca_stk1135: Sensor read failed [ 352.673322][ T5942] gspca_stk1135: serial bus timeout: status=0x00 [ 352.680165][ T5942] gspca_stk1135: Sensor read failed [ 352.687917][ T5942] gspca_stk1135: Detected sensor type unknown (0x0) [ 352.697590][ T5942] gspca_stk1135: serial bus timeout: status=0x00 [ 352.704008][ T5942] gspca_stk1135: Sensor read failed [ 352.710944][ T5942] gspca_stk1135: serial bus timeout: status=0x00 [ 352.719256][ T5942] gspca_stk1135: Sensor read failed [ 352.724611][ T5942] gspca_stk1135: serial bus timeout: status=0x00 [ 352.733080][ T5942] gspca_stk1135: Sensor write failed [ 352.740315][ T5942] gspca_stk1135: serial bus timeout: status=0x00 [ 352.753056][ T5942] gspca_stk1135: Sensor write failed [ 352.760404][ T5942] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 352.773281][ T5942] usb 6-1: USB disconnect, device number 40 [ 353.243770][ T5835] gspca_vc032x: reg_r err -71 [ 353.259625][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.277940][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.304424][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.319753][T11279] syz.4.1611 (11279): drop_caches: 2 [ 353.336901][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.341449][ T5942] hid-generic 0002:0004:0009.001A: hidraw0: HID v0.04 Device [syz0] on syz0 [ 353.351326][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.366713][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.378841][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.394540][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.409926][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.424628][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.444237][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.460127][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.474690][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.488686][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.498403][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.504489][T11287] fido_id[11287]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 353.508298][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.530537][ T5835] gspca_vc032x: I2c Bus Busy Wait 00 [ 353.537335][ T5835] gspca_vc032x: Unknown sensor... [ 353.542803][ T5835] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 353.557552][ T5835] usb 1-1: USB disconnect, device number 50 [ 353.661165][T11295] FAULT_INJECTION: forcing a failure. [ 353.661165][T11295] name failslab, interval 1, probability 0, space 0, times 0 [ 353.683654][T11295] CPU: 0 UID: 0 PID: 11295 Comm: syz.4.1617 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 353.683686][T11295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 353.683700][T11295] Call Trace: [ 353.683709][T11295] [ 353.683719][T11295] dump_stack_lvl+0x189/0x250 [ 353.683748][T11295] ? __pfx____ratelimit+0x10/0x10 [ 353.683776][T11295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.683799][T11295] ? __pfx__printk+0x10/0x10 [ 353.683830][T11295] ? __pfx___might_resched+0x10/0x10 [ 353.683849][T11295] ? fs_reclaim_acquire+0x7d/0x100 [ 353.683882][T11295] should_fail_ex+0x414/0x560 [ 353.683921][T11295] ? nf_hook_entries_grow+0x27c/0x710 [ 353.683947][T11295] should_failslab+0xa8/0x100 [ 353.683974][T11295] __kvmalloc_node_noprof+0x161/0x5f0 [ 353.683999][T11295] ? nf_hook_entries_grow+0x27c/0x710 [ 353.684031][T11295] nf_hook_entries_grow+0x27c/0x710 [ 353.684075][T11295] __nf_register_net_hook+0x2c9/0x930 [ 353.684115][T11295] nf_register_net_hook+0xb2/0x190 [ 353.684145][T11295] nf_register_net_hooks+0x44/0x1b0 [ 353.684177][T11295] nf_ct_netns_do_get+0x3bf/0x5a0 [ 353.684209][T11295] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 353.684246][T11295] ? __local_bh_enable_ip+0x12d/0x1c0 [ 353.684271][T11295] __ip_vs_update_dest+0x105f/0x16a0 [ 353.684308][T11295] ip_vs_add_dest+0x16d0/0x1b00 [ 353.684346][T11295] ? __lock_acquire+0xab9/0xd20 [ 353.684389][T11295] ? __pfx_ip_vs_add_dest+0x10/0x10 [ 353.684435][T11295] do_ip_vs_set_ctl+0x90d/0xa60 [ 353.684464][T11295] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 353.684483][T11295] ? rcu_is_watching+0x15/0xb0 [ 353.684521][T11295] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 353.684557][T11295] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 353.684584][T11295] ? aa_sk_perm+0x81e/0x950 [ 353.684612][T11295] ? __pfx_aa_sk_perm+0x10/0x10 [ 353.684641][T11295] nf_setsockopt+0x26f/0x290 [ 353.684662][T11295] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 353.684693][T11295] do_sock_setsockopt+0x25a/0x3e0 [ 353.684729][T11295] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 353.684767][T11295] ? __fget_files+0x2a/0x420 [ 353.684810][T11295] __x64_sys_setsockopt+0x18b/0x220 [ 353.684847][T11295] do_syscall_64+0xfa/0x3b0 [ 353.684874][T11295] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.684900][T11295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.684920][T11295] ? clear_bhb_loop+0x60/0xb0 [ 353.684945][T11295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.684965][T11295] RIP: 0033:0x7fc1bd78e929 [ 353.684984][T11295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.685002][T11295] RSP: 002b:00007fc1be576038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 353.685025][T11295] RAX: ffffffffffffffda RBX: 00007fc1bd9b5fa0 RCX: 00007fc1bd78e929 [ 353.685040][T11295] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000004 [ 353.685053][T11295] RBP: 00007fc1be576090 R08: 0000000000000044 R09: 0000000000000000 [ 353.685067][T11295] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.685080][T11295] R13: 0000000000000000 R14: 00007fc1bd9b5fa0 R15: 00007ffc4e960728 [ 353.685114][T11295] [ 354.308055][ T24] hid_parser_main: 24 callbacks suppressed [ 354.308078][ T24] hid-generic 0002:0004:0009.001B: unknown main item tag 0x0 [ 354.327396][ T24] hid-generic 0002:0004:0009.001B: unknown main item tag 0x0 [ 354.335154][ T5835] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 354.344766][ T24] hid-generic 0002:0004:0009.001B: unknown main item tag 0x0 [ 354.354452][ T24] hid-generic 0002:0004:0009.001B: unknown main item tag 0x0 [ 354.369195][ T24] hid-generic 0002:0004:0009.001B: unknown main item tag 0x0 [ 354.379580][ T24] hid-generic 0002:0004:0009.001B: unknown main item tag 0x0 [ 354.387619][ T24] hid-generic 0002:0004:0009.001B: unknown main item tag 0x0 [ 354.395310][ T24] hid-generic 0002:0004:0009.001B: unknown main item tag 0x0 [ 354.402767][ T24] hid-generic 0002:0004:0009.001B: unknown main item tag 0x0 [ 354.412984][ T24] hid-generic 0002:0004:0009.001B: unknown main item tag 0x0 [ 354.422351][ T24] hid-generic 0002:0004:0009.001B: hidraw0: HID v0.04 Device [syz0] on syz0 [ 354.508230][ T5835] usb 6-1: config 0 interface 0 altsetting 238 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.516212][T11313] fido_id[11313]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 354.533210][ T5835] usb 6-1: config 0 interface 0 altsetting 238 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.552163][ T5835] usb 6-1: config 0 interface 0 has no altsetting 0 [ 354.569549][ T5835] usb 6-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 354.578875][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.594277][ T5835] usb 6-1: config 0 descriptor?? [ 355.049215][ T5835] acrux 0003:1A34:F705.001C: unexpected long global item [ 355.058806][ T5835] acrux 0003:1A34:F705.001C: parse failed [ 355.064708][ T5835] acrux 0003:1A34:F705.001C: probe with driver acrux failed with error -22 [ 355.227648][ T5942] usb 6-1: USB disconnect, device number 41 [ 355.364952][ T5929] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 355.505070][ T5929] usb 5-1: device descriptor read/64, error -71 [ 355.705470][ T5835] hid-generic 0002:0004:0009.001D: hidraw0: HID v0.04 Device [syz0] on syz0 [ 355.757980][ T5929] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 355.804299][T11341] fido_id[11341]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 355.905368][ T5929] usb 5-1: device descriptor read/64, error -71 [ 356.015508][ T5929] usb usb5-port1: attempt power cycle [ 356.214918][ T10] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 356.364950][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 356.376814][ T10] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 356.386242][ T5929] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 356.393969][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.411891][ T10] usb 6-1: config 0 descriptor?? [ 356.417644][ T5929] usb 5-1: device descriptor read/8, error -71 [ 356.426502][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 356.674922][ T5929] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 356.700574][ T5929] usb 5-1: device descriptor read/8, error -71 [ 356.825263][ T5929] usb usb5-port1: unable to enumerate USB device [ 356.940079][T11360] FAULT_INJECTION: forcing a failure. [ 356.940079][T11360] name failslab, interval 1, probability 0, space 0, times 0 [ 356.953963][T11360] CPU: 1 UID: 0 PID: 11360 Comm: syz.0.1643 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 356.953992][T11360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 356.954006][T11360] Call Trace: [ 356.954014][T11360] [ 356.954022][T11360] dump_stack_lvl+0x189/0x250 [ 356.954050][T11360] ? __pfx____ratelimit+0x10/0x10 [ 356.954085][T11360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.954107][T11360] ? __pfx__printk+0x10/0x10 [ 356.954136][T11360] ? __pfx___might_resched+0x10/0x10 [ 356.954155][T11360] ? fs_reclaim_acquire+0x7d/0x100 [ 356.954188][T11360] should_fail_ex+0x414/0x560 [ 356.954225][T11360] should_failslab+0xa8/0x100 [ 356.954251][T11360] __kmalloc_cache_noprof+0x70/0x3d0 [ 356.954274][T11360] ? nfnetlink_rcv+0xeff/0x2520 [ 356.954301][T11360] nfnetlink_rcv+0xeff/0x2520 [ 356.954357][T11360] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 356.954392][T11360] ? __lock_acquire+0xab9/0xd20 [ 356.954469][T11360] ? netlink_deliver_tap+0x2e/0x1b0 [ 356.954516][T11360] ? netlink_deliver_tap+0x2e/0x1b0 [ 356.954551][T11360] netlink_unicast+0x75b/0x8d0 [ 356.954589][T11360] netlink_sendmsg+0x805/0xb30 [ 356.954628][T11360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.954661][T11360] ? aa_sock_msg_perm+0xf1/0x1d0 [ 356.954685][T11360] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 356.954715][T11360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.954745][T11360] __sock_sendmsg+0x219/0x270 [ 356.954775][T11360] ____sys_sendmsg+0x505/0x830 [ 356.954801][T11360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.954836][T11360] ? import_iovec+0x74/0xa0 [ 356.954861][T11360] ___sys_sendmsg+0x21f/0x2a0 [ 356.954884][T11360] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.954942][T11360] ? __fget_files+0x2a/0x420 [ 356.954970][T11360] ? __fget_files+0x3a0/0x420 [ 356.955008][T11360] __x64_sys_sendmsg+0x19b/0x260 [ 356.955032][T11360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 356.955064][T11360] ? __pfx_ksys_write+0x10/0x10 [ 356.955093][T11360] ? rcu_is_watching+0x15/0xb0 [ 356.955120][T11360] ? do_syscall_64+0xbe/0x3b0 [ 356.955152][T11360] do_syscall_64+0xfa/0x3b0 [ 356.955178][T11360] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.955204][T11360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.955224][T11360] ? clear_bhb_loop+0x60/0xb0 [ 356.955250][T11360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.955270][T11360] RIP: 0033:0x7fa489d8e929 [ 356.955288][T11360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.955306][T11360] RSP: 002b:00007fa48acc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.955329][T11360] RAX: ffffffffffffffda RBX: 00007fa489fb5fa0 RCX: 00007fa489d8e929 [ 356.955344][T11360] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 356.955357][T11360] RBP: 00007fa48acc0090 R08: 0000000000000000 R09: 0000000000000000 [ 356.955371][T11360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.955383][T11360] R13: 0000000000000000 R14: 00007fa489fb5fa0 R15: 00007ffc863301d8 [ 356.955416][T11360] [ 357.252876][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.319959][T11352] netlink: 'syz.5.1639': attribute type 6 has an invalid length. [ 357.329200][T11352] netlink: 'syz.5.1639': attribute type 7 has an invalid length. [ 357.340480][T11352] netlink: 13182 bytes leftover after parsing attributes in process `syz.5.1639'. [ 357.517003][ T5835] usb 6-1: USB disconnect, device number 42 [ 357.664982][ T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 357.814911][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 357.836248][ T10] usb 1-1: config 1 has an invalid descriptor of length 163, skipping remainder of the config [ 357.846610][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.867763][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 357.876925][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.884985][ T10] usb 1-1: Product: syz [ 357.889168][ T10] usb 1-1: Manufacturer: syz [ 357.893782][ T10] usb 1-1: SerialNumber: syz [ 358.133203][ T10] usb 1-1: 0:2 : does not exist [ 358.173918][ T10] usb 1-1: USB disconnect, device number 51 [ 358.235073][ T6359] udevd[6359]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.261582][ T5942] hid-generic 0002:0004:0009.001E: hidraw0: HID v0.04 Device [syz0] on syz0 [ 358.416445][T11372] fido_id[11372]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 358.441569][T11376] delete_channel: no stack [ 358.449819][T11376] delete_channel: no stack [ 358.482429][T11376] overlay: ./file0 is not a directory [ 358.710538][T11385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1652'. [ 358.728675][T11382] syzkaller0: entered promiscuous mode [ 358.734163][T11382] syzkaller0: entered allmulticast mode [ 359.065070][ T24] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 359.237363][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 359.260434][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 359.272324][T11393] qnx4: no qnx4 filesystem (no root dir). [ 359.301925][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 359.320076][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 359.353597][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 359.374976][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.397373][ T24] usb 5-1: config 0 descriptor?? [ 359.484370][ T5835] hid_parser_main: 41 callbacks suppressed [ 359.484426][ T5835] hid-generic 0002:0004:0009.001F: unknown main item tag 0x0 [ 359.507747][ T5835] hid-generic 0002:0004:0009.001F: unknown main item tag 0x0 [ 359.518575][ T5835] hid-generic 0002:0004:0009.001F: unknown main item tag 0x0 [ 359.530822][ T5835] hid-generic 0002:0004:0009.001F: unknown main item tag 0x0 [ 359.538568][ T5835] hid-generic 0002:0004:0009.001F: unknown main item tag 0x0 [ 359.546241][ T5835] hid-generic 0002:0004:0009.001F: unknown main item tag 0x0 [ 359.554029][ T5835] hid-generic 0002:0004:0009.001F: unknown main item tag 0x0 [ 359.561689][ T5835] hid-generic 0002:0004:0009.001F: unknown main item tag 0x0 [ 359.575454][ T5835] hid-generic 0002:0004:0009.001F: unknown main item tag 0x0 [ 359.582981][ T5835] hid-generic 0002:0004:0009.001F: unknown main item tag 0x0 [ 359.610757][ T5835] hid-generic 0002:0004:0009.001F: hidraw0: HID v0.04 Device [syz0] on syz0 [ 359.701403][T11399] fido_id[11399]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 359.840986][ T24] plantronics 0003:047F:FFFF.0020: ignoring exceeding usage max [ 359.888246][ T24] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 359.999308][T11408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.020815][T11408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.689238][T11414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.710425][T11414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.391459][ T5929] hid-generic 0002:0004:0009.0021: hidraw1: HID v0.04 Device [syz0] on syz0 [ 361.510621][T11433] fido_id[11433]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 361.700501][T11444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.709608][T11444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.805009][ T43] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 361.966575][ T5835] usb 5-1: USB disconnect, device number 67 [ 361.980710][ T43] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 362.009979][ T43] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.023369][ T43] usb 6-1: config 0 interface 0 has no altsetting 0 [ 362.033545][ T43] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 362.049503][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.060105][ T43] usb 6-1: config 0 descriptor?? [ 362.333088][T11452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.343977][T11452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.493531][ T43] hid-steam 0003:28DE:1102.0022: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 362.565263][ T43] hid-steam 0003:28DE:1102.0022: Steam Controller 'XXXXXXXXXX' connected [ 362.579619][ T43] input: Steam Controller as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28DE:1102.0022/input/input20 [ 362.646364][ T43] hid-steam 0003:28DE:1102.0023: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 362.770614][ T10] usb 6-1: USB disconnect, device number 43 [ 362.795496][ T43] hid-generic 0002:0004:0009.0024: hidraw1: HID v0.04 Device [syz0] on syz0 [ 362.857262][ T10] hid-steam 0003:28DE:1102.0022: Steam Controller 'XXXXXXXXXX' disconnected [ 362.976138][T11457] fido_id[11457]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 363.075265][T11463] tipc: Started in network mode [ 363.080428][T11463] tipc: Node identity 4, cluster identity 4711 [ 363.087748][T11463] tipc: Node number set to 4 [ 363.414636][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1681'. [ 363.423902][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1681'. [ 363.606505][ T10] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 363.809004][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 363.892237][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.970738][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.049988][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 364.094175][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.134609][ T10] usb 5-1: config 0 descriptor?? [ 364.256068][ T43] hid-generic 0002:0004:0009.0025: hidraw0: HID v0.04 Device [syz0] on syz0 [ 364.448992][T11492] fido_id[11492]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 364.784298][ T10] usbhid 5-1:0.0: can't add hid device: -32 [ 364.799850][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 364.813837][ T10] usb 5-1: USB disconnect, device number 68 [ 364.905089][ T43] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 364.947090][ T24] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 365.054976][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 365.063324][ T43] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 365.072490][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.080602][ T43] usb 1-1: Product: syz [ 365.084763][ T43] usb 1-1: Manufacturer: syz [ 365.089582][ T24] usb 6-1: device descriptor read/64, error -71 [ 365.095997][ T43] usb 1-1: SerialNumber: syz [ 365.108903][ T43] usb 1-1: config 0 descriptor?? [ 365.118622][ T43] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 365.344929][ T24] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 365.368949][T11520] qnx4: no qnx4 filesystem (no root dir). [ 365.475034][ T24] usb 6-1: device descriptor read/64, error -71 [ 365.585452][ T24] usb usb6-port1: attempt power cycle [ 365.724970][ T10] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 365.876594][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 365.887557][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 365.899173][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 365.912928][ T10] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 365.922129][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.930220][ T10] usb 5-1: Product: syz [ 365.934397][ T10] usb 5-1: Manufacturer: syz [ 365.935140][ T24] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 365.939106][ T10] usb 5-1: SerialNumber: syz [ 365.953925][ T10] usb 5-1: config 0 descriptor?? [ 365.960628][T11524] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 365.968156][T11524] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 365.977597][ T10] usb 5-1: ucan: probing device on interface #0 [ 365.983346][ T24] usb 6-1: device descriptor read/8, error -71 [ 366.245195][ T24] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 366.265580][ T24] usb 6-1: device descriptor read/8, error -71 [ 366.325314][ T43] gspca_stk1135: reg_w 0xd err -71 [ 366.331521][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 366.337978][ T43] gspca_stk1135: Sensor write failed [ 366.343308][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 366.349724][ T43] gspca_stk1135: Sensor write failed [ 366.355166][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 366.361515][ T43] gspca_stk1135: Sensor read failed [ 366.370606][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 366.377238][ T43] gspca_stk1135: Sensor read failed [ 366.379140][ T10] usb 5-1: ucan: device reported invalid device info [ 366.382458][ T43] gspca_stk1135: Detected sensor type unknown (0x0) [ 366.392029][ T10] usb 5-1: ucan: probe failed; try to update the device firmware [ 366.396291][ T24] usb usb6-port1: unable to enumerate USB device [ 366.414570][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 366.421183][ T43] gspca_stk1135: Sensor read failed [ 366.429807][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 366.436425][ T43] gspca_stk1135: Sensor read failed [ 366.441659][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 366.448254][ T43] gspca_stk1135: Sensor write failed [ 366.453572][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 366.459963][ T43] gspca_stk1135: Sensor write failed [ 366.465506][ T43] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 366.476569][ T43] usb 1-1: USB disconnect, device number 52 [ 366.584753][ T24] usb 5-1: USB disconnect, device number 69 [ 366.845182][ T5839] Bluetooth: hci4: command 0x1003 tx timeout [ 366.851655][ T5847] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 366.936147][ T30] audit: type=1326 audit(1751536965.074:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11527 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632af8e929 code=0x7ffc0000 [ 366.964558][ T30] audit: type=1326 audit(1751536965.074:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11527 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632af8e929 code=0x7ffc0000 [ 366.988702][ T30] audit: type=1326 audit(1751536965.094:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11527 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f632af8e929 code=0x7ffc0000 [ 367.012226][ T30] audit: type=1326 audit(1751536965.094:113): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=11527 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632af8e929 code=0x7ffc0000 [ 367.036359][ T30] audit: type=1326 audit(1751536965.094:114): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=11527 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632af8e929 code=0x7ffc0000 [ 368.463286][T11565] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1716'. [ 368.541962][T11569] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1718'. [ 368.574077][T11569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1718'. [ 369.025900][T11596] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1731'. [ 369.056177][T11596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1731'. [ 369.306435][ T43] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 369.512509][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 369.532728][ T43] usb 1-1: not running at top speed; connect to a high speed hub [ 369.553379][ T43] usb 1-1: config 253 has an invalid interface number: 141 but max is 0 [ 369.562533][ T43] usb 1-1: config 253 has no interface number 0 [ 369.580434][ T43] usb 1-1: New USB device found, idVendor=0572, idProduct=960c, bcdDevice=85.c1 [ 369.590050][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.598718][ T43] usb 1-1: Product: syz [ 369.603248][ T43] usb 1-1: Manufacturer: syz [ 369.608481][ T43] usb 1-1: SerialNumber: syz [ 369.835221][ T43] usb 1-1: USB disconnect, device number 53 [ 370.215505][ T10] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 370.385005][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 370.398967][ T10] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 370.412097][ T10] usb 6-1: config 0 has no interface number 0 [ 370.431151][ T10] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 370.448029][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.469696][ T10] usb 6-1: Product: syz [ 370.473930][ T10] usb 6-1: Manufacturer: syz [ 370.488924][ T10] usb 6-1: SerialNumber: syz [ 370.506693][ T10] usb 6-1: config 0 descriptor?? [ 370.777598][ T10] radio-si470x 6-1:0.35: this is not a si470x device. [ 371.061573][ T10] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 371.089855][ T10] usb 6-1: USB disconnect, device number 48 [ 371.866235][ T10] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 372.216613][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 372.307520][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 372.469762][ T10] usb 5-1: config 255 has an invalid interface number: 247 but max is 2 [ 372.495988][ T10] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 372.518935][ T10] usb 5-1: config 255 has 1 interface, different from the descriptor's value: 3 [ 372.531154][ T10] usb 5-1: config 255 has no interface number 0 [ 372.607806][ T10] usb 5-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=72.cc [ 372.650216][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.695568][ T10] usb 5-1: Product: syz [ 372.732145][ T10] usb 5-1: Manufacturer: syz [ 372.775675][ T10] usb 5-1: SerialNumber: syz [ 373.485201][ T10] HFC-S_USB 5-1:255.247: probe with driver HFC-S_USB failed with error -5 [ 373.548058][ T10] usb 5-1: USB disconnect, device number 70 [ 374.004985][T11673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.215483][T11673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.149117][ T10] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 375.317429][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 375.354485][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.589240][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 375.874901][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 375.883994][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.956020][ T10] usb 6-1: config 0 descriptor?? [ 376.510587][T11675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.633594][T11675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.899715][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 376.911684][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0026/input/input21 [ 376.935255][ T10] microsoft 0003:045E:07DA.0026: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 377.353775][T11718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.388881][T11718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.592210][ T43] usb 6-1: USB disconnect, device number 49 [ 378.009882][T11736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.041672][T11736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.708082][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.714548][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.313677][T11758] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 379.313677][T11758] program syz.1.1785 not setting count and/or reply_len properly [ 379.341170][ T10] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 379.683489][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.703409][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 379.713692][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.778686][ T10] usb 5-1: config 0 descriptor?? [ 379.808797][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 380.032928][ T10] pwc: send_video_command error -71 [ 380.042402][ T10] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 380.058156][ T10] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 380.095996][ T10] usb 5-1: USB disconnect, device number 71 [ 380.675278][ T10] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 382.294962][ T10] usb 5-1: device not accepting address 72, error -71 [ 382.966862][ T30] audit: type=1326 audit(1751536981.104:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.5.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e6672ab19 code=0x7ffc0000 [ 383.034922][ T30] audit: type=1326 audit(1751536981.104:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.5.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e6672ab19 code=0x7ffc0000 [ 383.117150][ T30] audit: type=1326 audit(1751536981.104:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.5.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e6672ab19 code=0x7ffc0000 [ 383.189501][ T30] audit: type=1326 audit(1751536981.104:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.5.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e6672ab19 code=0x7ffc0000 [ 383.261991][ T30] audit: type=1326 audit(1751536981.104:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.5.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e6672ab19 code=0x7ffc0000 [ 383.327828][ T30] audit: type=1326 audit(1751536981.104:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.5.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e6672ab19 code=0x7ffc0000 [ 383.397944][ T30] audit: type=1326 audit(1751536981.104:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.5.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e6672ab19 code=0x7ffc0000 [ 383.447097][ T30] audit: type=1326 audit(1751536981.104:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.5.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e6672ab19 code=0x7ffc0000 [ 383.483408][ T30] audit: type=1326 audit(1751536981.104:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.5.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e6672ab19 code=0x7ffc0000 [ 383.706182][ T30] audit: type=1326 audit(1751536981.104:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.5.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e6672ab19 code=0x7ffc0000 [ 383.950436][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1793'. [ 383.970702][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1793'. [ 384.089909][ T5834] [ 384.092271][ T5834] ============================================ [ 384.098414][ T5834] WARNING: possible recursive locking detected [ 384.105347][ T5834] 6.16.0-rc4-next-20250702-syzkaller #0 Not tainted [ 384.111924][ T5834] -------------------------------------------- [ 384.118066][ T5834] syz-executor/5834 is trying to acquire lock: [ 384.124210][ T5834] ffff888054c0c8c8 (&sb->s_type->i_mutex_key#29){+.+.}-{4:4}, at: rpc_close_pipes+0x10a/0x730 [ 384.134474][ T5834] [ 384.134474][ T5834] but task is already holding lock: [ 384.141861][ T5834] ffff888054c091c8 (&sb->s_type->i_mutex_key#29){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 384.153130][ T5834] [ 384.153130][ T5834] other info that might help us debug this: [ 384.161297][ T5834] Possible unsafe locking scenario: [ 384.161297][ T5834] [ 384.168769][ T5834] CPU0 [ 384.172067][ T5834] ---- [ 384.175367][ T5834] lock(&sb->s_type->i_mutex_key#29); [ 384.180857][ T5834] lock(&sb->s_type->i_mutex_key#29); [ 384.186324][ T5834] [ 384.186324][ T5834] *** DEADLOCK *** [ 384.186324][ T5834] [ 384.194469][ T5834] May be due to missing lock nesting notation [ 384.194469][ T5834] [ 384.202786][ T5834] 4 locks held by syz-executor/5834: [ 384.208065][ T5834] #0: ffff8880242780e0 (&type->s_umount_key#106){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 384.218347][ T5834] #1: ffff8880308210a0 (&sn->pipefs_sb_lock){+.+.}-{4:4}, at: rpc_kill_sb+0x77/0x190 [ 384.227923][ T5834] #2: ffffffff8f8e2df0 ((rpc_pipefs_notifier_list).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 384.240014][ T5834] #3: ffff888054c091c8 (&sb->s_type->i_mutex_key#29){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 384.251684][ T5834] [ 384.251684][ T5834] stack backtrace: [ 384.257586][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 384.257607][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 384.257620][ T5834] Call Trace: [ 384.257628][ T5834] [ 384.257636][ T5834] dump_stack_lvl+0x189/0x250 [ 384.257657][ T5834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.257674][ T5834] ? __pfx__printk+0x10/0x10 [ 384.257692][ T5834] ? print_lock_name+0xde/0x100 [ 384.257710][ T5834] print_deadlock_bug+0x28b/0x2a0 [ 384.257728][ T5834] validate_chain+0x1a3f/0x2140 [ 384.257752][ T5834] __lock_acquire+0xab9/0xd20 [ 384.257778][ T5834] ? rpc_close_pipes+0x10a/0x730 [ 384.257792][ T5834] lock_acquire+0x120/0x360 [ 384.257813][ T5834] ? rpc_close_pipes+0x10a/0x730 [ 384.257834][ T5834] down_write+0x96/0x1f0 [ 384.257857][ T5834] ? rpc_close_pipes+0x10a/0x730 [ 384.257871][ T5834] ? __pfx_down_write+0x10/0x10 [ 384.257892][ T5834] ? __pfx_find_submount+0x10/0x10 [ 384.257906][ T5834] ? _raw_spin_unlock+0x28/0x50 [ 384.257923][ T5834] ? d_walk+0x6f4/0x780 [ 384.257946][ T5834] rpc_close_pipes+0x10a/0x730 [ 384.257961][ T5834] ? d_invalidate+0x204/0x260 [ 384.257975][ T5834] ? __pfx_rpc_close_pipes+0x10/0x10 [ 384.257991][ T5834] ? up_write+0x1c4/0x420 [ 384.258007][ T5834] ? __pfx_rpc_close_pipes+0x10/0x10 [ 384.258022][ T5834] __simple_recursive_removal+0x208/0x510 [ 384.258041][ T5834] ? __pfx_rpc_close_pipes+0x10/0x10 [ 384.258057][ T5834] rpc_unlink+0x56/0x80 [ 384.258071][ T5834] rpc_pipefs_event+0xc0/0x170 [ 384.258094][ T5834] notifier_call_chain+0x1b3/0x3e0 [ 384.258112][ T5834] blocking_notifier_call_chain+0x6a/0x90 [ 384.258129][ T5834] rpc_kill_sb+0xd0/0x190 [ 384.258147][ T5834] deactivate_locked_super+0xb9/0x130 [ 384.258164][ T5834] cleanup_mnt+0x425/0x4c0 [ 384.258179][ T5834] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.258199][ T5834] task_work_run+0x1d1/0x260 [ 384.258239][ T5834] ? __pfx_task_work_run+0x10/0x10 [ 384.258259][ T5834] ? __x64_sys_umount+0x122/0x160 [ 384.258280][ T5834] ? exit_to_user_mode_loop+0x40/0x110 [ 384.258305][ T5834] exit_to_user_mode_loop+0xec/0x110 [ 384.258328][ T5834] do_syscall_64+0x2bd/0x3b0 [ 384.258349][ T5834] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.258368][ T5834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.258384][ T5834] ? clear_bhb_loop+0x60/0xb0 [ 384.258402][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.258423][ T5834] RIP: 0033:0x7f632af8fc57 [ 384.258439][ T5834] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 384.258454][ T5834] RSP: 002b:00007ffce5a333b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 384.258471][ T5834] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f632af8fc57 [ 384.258482][ T5834] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce5a33470 [ 384.258493][ T5834] RBP: 00007ffce5a33470 R08: 0000000000000000 R09: 0000000000000000 [ 384.258504][ T5834] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffce5a34500 [ 384.258515][ T5834] R13: 00007f632b010925 R14: 000000000005d01d R15: 00007ffce5a34540 [ 384.258533][ T5834] [ 384.563691][ C0] vkms_vblank_simulate: vblank timer overrun