last executing test programs: 13.248315247s ago: executing program 0 (id=600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}, 0x1, 0x2000000}, 0x4080) 13.169649139s ago: executing program 0 (id=601): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast1, @in=@empty, 0x4e23, 0x4000, 0x0, 0x0, 0xa, 0x0, 0x10, 0x0, 0x0, 0xee01}, {0x2, 0x8f22, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x1bd}, {0x1, 0xfffffffffffffff9, 0x4, 0x4}, 0xfffbffff, 0x0, 0x1, 0x0, 0x2}, {{@in=@multicast2, 0x0, 0x6c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x10000, 0x1, 0x3, 0x0, 0x80000, 0x9}}, 0xe8) sendmmsg$inet6(r0, &(0x7f00000090c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0xe, @empty}, 0x1c, 0x0, 0xfffd}}], 0x1, 0x0) 13.063730509s ago: executing program 0 (id=602): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x13) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x2010800, 0x0, 0x40, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, 0x0, 0x804) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r3, 0xff07, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) syz_open_procfs(0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) read$rfkill(r5, &(0x7f0000000200), 0x8) write(r4, 0x0, 0x0) 8.86801988s ago: executing program 0 (id=615): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0xfad3, 0x1, 0x0, 0x0, "f6a6756c9832488c"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, 0x0}], 0x1, 0x7d, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0xba25, 0xde2b, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg(r4, &(0x7f0000000180), 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x80108907, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e22, 0x0, @mcast2}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d13000000fffffffffffffffe00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000380)={0x200, 0x4, 0x6, 0x80, 0x0, 0x200}) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e23, 0x3, @loopback, 0x2}}, 0x0, 0x0, 0x1f, 0x0, "7c873eb0bf1265b9078a4c0301f7b9cc8644e953d839116ef5ba50526bb9deb02f583135a4e16fc10aca34d7b8f225748bce05090f9d8408c3e19eb58d1c1f7d38406a15840417cc1b0aa76c26d22f09"}, 0xd8) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000340)='hybla\x00', 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 7.734852786s ago: executing program 0 (id=616): socket(0x21, 0x5, 0xffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x0, 0x1e8, 0xffffffff, 0xf4, 0x1e8, 0x3ac, 0x3ac, 0xffffffff, 0x3ac, 0x3ac, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x10, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x19, @empty, @multicast2, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x4, @broadcast, @multicast2, @icmp_id=0x64, @gre_key=0x5}}}}, {{@ip={@multicast1, @multicast1, 0xff, 0xffffffff, 'ipvlan1\x00', 'caif0\x00', {0xff}, {0xff}, 0x21, 0x6, 0x1}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x3, @broadcast, @remote, @icmp_id=0x67, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x41000000, 0x0, 0x4000d}, 0x20000000) 7.73415071s ago: executing program 1 (id=617): r0 = syz_clone(0x28a8f3440af5771e, &(0x7f0000000000)="a44e82f7c5adc396a2da8741b3325f2ad539099d380379f5e532c7ad822013a97f38d2784bc9d472725f12a151a3137de63d54778c1d1ba6cfd8890366544a1fdcf273f8cc62e81972ea6584f048cab9285dc107ff863b784df7ee9a31cca882b1425bbec3d43659a6a8a20efc90c2fecee86fd5eea7314f9b1dbccd6f289a713605fcfa52251f83c83a36fd5b27c76351db3a5ced91de0df083182c689d1318dd52119a9dcce2baf1798c86db08d0bc6bbd31700f11718962e22db5814ca905ca27672872", 0xc5, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="c64d73c1564e3da8e397e30bd1ff8acb98309f52f6d285a365593b051ea58b4cbd18e6b838d9fee391027800ab1528d5bb21471a0ffe8c6770a464f3fa423fd8094e5e45a60cfc63bbc6130e02d403c8d844c9d8f2663b390a8384ababdb0d90c46d5b7feac3dd472d66a3d532660d1f42b0bdb07562e131b933c9650d69444b9991e68c9fd74cf08e34") ptrace$peekuser(0x3, r0, 0x4) (async) r1 = syz_open_dev$sg(&(0x7f0000000240), 0xfffffffffffffff7, 0x20100) ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000280)={'\x00', 0x8, 0x1c, 0x1a4c, 0x6, 0x2b, r0}) (async, rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2, 0x2, 0x2, 0x7, 0x3f}, 0x20) (async, rerun: 64) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000000340)=0x3ff) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f00000003c0), 0xda5, 0x2) (async) vmsplice(r1, &(0x7f0000000540)=[{&(0x7f0000000400)="d94236746c1deeabc147240e3afd084a7df8834754786a9300ecff58b97d5fea7be8abd04265c31f3df9c39cb7c2fd8079aef00f7615b2d329a4c5a94d70fd39f32c2e58d2ba06071a65fef9e23f9bab5f8a274c41ecc7d2b631b63f6cffcf9f7d88d31a4c5fd62b8755be1ad0960f1195dcb7aafbd88032091ffc687e0f72b901e2d974b98ba0bd39a412d056af08db637ef8f60b80d2", 0x97}, {&(0x7f00000004c0)="49b4dc767de3947455e0bf5021df1e6c5524bb451db5fa3df23d8b82dac596bd02486af0e03ee6c522fbad26ad069c3bfffb8607f475dfdf22e003ef319798da2812067ced6382060c9146c25b19cbf77db4", 0x52}], 0x2, 0xd) (async) r2 = syz_io_uring_setup(0x48c7, &(0x7f0000000580)={0x0, 0xe001, 0x1, 0x2, 0x34b}, &(0x7f0000000600), &(0x7f0000000640)) syz_io_uring_setup(0x1405, &(0x7f0000000680)={0x0, 0xb38e, 0x1020, 0x1, 0x34c, 0x0, r2}, &(0x7f0000000700), &(0x7f0000000740)) (async) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000780)={0x7f, 0xfffa, 0x0, 0x1ff}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000800)={0x8, &(0x7f00000007c0)=[{0x1, 0x6, 0x7, 0xfff}, {0x6, 0x0, 0x3, 0x1}, {0xf000, 0x7, 0x7, 0xafa89b6}, {0x400, 0x2, 0x9, 0xffffffff}, {0x5, 0xec, 0x3d, 0x1}, {0xc74, 0x6, 0x4, 0x8b}, {0x0, 0x5, 0xf, 0x6}, {0x200, 0x7f, 0x7f, 0xff}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r4, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000000) (async, rerun: 64) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000980)={0x9cd, 0xf9, {r0}, {}, 0x5, 0x5}) (rerun: 64) ptrace$ARCH_SHSTK_STATUS(0x1e, r5, &(0x7f00000009c0), 0x5005) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x68, r4, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x80}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x4004) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_io_uring_setup(0x1998, &(0x7f0000000bc0)={0x0, 0x519, 0x40, 0x2, 0x117}, &(0x7f0000000c40), &(0x7f0000000c80)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000006, 0x11, r7, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r5) socket$nl_generic(0x10, 0x3, 0x10) (async) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x19) (async) sched_setattr(0xffffffffffffffff, &(0x7f0000000cc0)={0x38, 0x3, 0x7, 0x8, 0x9, 0x524, 0x807, 0x8000000000000000, 0x8, 0x4}, 0x0) (async) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000d00)={0x69, ""/105}) (async) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffea}]}, 0x24}, 0x1, 0x0, 0x0, 0x1014}, 0xf0f6dd487d776bfa) 7.233255359s ago: executing program 1 (id=619): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) get_mempolicy(0x0, &(0x7f0000000080), 0x7, &(0x7f0000ffc000/0x4000)=nil, 0x6) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x1, 0x3}) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000001c0)="2f01bafb6d593566baf80cb8f0577482ef0dbafc0cec660f019e793f0000f30f1eeb0f080f20c03509000000f3af0f22c00f3066073881bcd0fb000000650fc7772e0fc734a3", 0x46}], 0x1, 0x77, 0x0, 0x0) (async) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="0fc3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.783697763s ago: executing program 1 (id=622): setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001a000100000000000400000002002000", @ANYRES32=0x0, @ANYBLOB="00000000040001"], 0x30}}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@deltclass={0x3c, 0x29, 0x0, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff3, 0xa}, {0xf, 0xfff6}, {0xffff, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @TCA_RATE={0x6, 0x5, {0xd, 0xbe}}, @TCA_RATE={0x6, 0x5, {0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6008044}, 0x20000840) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0x0, 0x9, 0x4, 0x9e, 0x8, 0x0, 0x4, 0x5, [{0x6, 0xfffffff8, 0x2}, {0x0, 0x20000000, 0x8, 0x1a15}, {0x1000, 0x3, 0x1ff, 0x7}, {0xc9, 0x1, 0x7, 0x4}]}}]}}]}, 0x84}}, 0x24040084) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r4, &(0x7f0000000580)={0x208, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {}, 0xffffffff, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) 5.53551398s ago: executing program 1 (id=626): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x88) r0 = socket(0x10, 0x2, 0x0) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="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", 0x139, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r2, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e21, @private=0xa010102}}) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0xb4142, 0x150) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000100)='./file1\x00', 0x95000809) fallocate(r5, 0x0, 0x80000001, 0x5) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) unshare(0x22020400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[], 0x0) r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, &(0x7f0000000080)={0x2, 0x800, @local}, 0x10) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x32806401}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x80, 0x4) sendmsg$key(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x18}}, 0x4808) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008280)="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", 0x2000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 4.701001455s ago: executing program 1 (id=632): r0 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x1, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = dup(r4) syz_io_uring_setup(0xbea, &(0x7f0000000180)={0x0, 0x4d24, 0x8, 0x1, 0xf5, 0x0, r5}, &(0x7f0000000200), &(0x7f0000000300)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000380)={0x0, 0x80000}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) syz_io_uring_submit(0x0, r8, &(0x7f0000000440)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x8, 0x0, r5, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r6}}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x23, 0x0, r5, 0x0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)="597e136f0b9f1729eeaa769aea69cf9375979120b33f5b7173d0bfc19df9e8ea6a25bfb0d74cfc61770ef77ad333f78f6d0abd15ce1c55c61d0434d0a4b8e44513100a2309d5c1ab9671fede8c5e41d3c26fa304a98c0cdb9bc1b5fc6ffa0485825b33dfa2335f4710b1e712adaa97623893ffb35c02fa4692bbb827a1ca1d42612e8dcea19d10aac0f962e83a0358ba0ce10cfa258f80d184418082c7d12c9c9b38eca1601f33045f6dc6c8c3e415", 0xaf}, {&(0x7f0000000600)="d94a0f42a9b726a37de2248335511edea911bcd99798616666eebbba8dcc3758d63bd255f69af2abd00ef5889032320e9c1b82dae9734297f6520beb860ffc3035ac00e2381017df808b41576e763c9a9397c604dad8cc689a1131a00869ec947639054a7ff5cf0fd522427f4cb1547668a26c8dc7cd30dae5c4b27c067ebadfc8d632293c6bb07aed00556bfb400df3166c00db354b82229546c81e78db0f7d4fc1b1227eb4376026cb69518c21c94aa3f60428523a352f6381ff518fa7dcc2c6a815124d8ee4e134017a3577dd5790083e1ddd36a6c602e105d471ca8c7894d399b0cc4cec9133b6d6a8cc", 0xec}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="9a379a568a5a08e567a56b467c39a488e1fd1188916c6777720449d47662f19f3e37528b6dbf0a09eeeceaa6537eff7c97feee7b1805b0bb6aa45a9e0968522623f8f54ac5a0119b97250460cdc1ca", 0x4f}], 0x4, &(0x7f0000000700)=[{0x80, 0x10b, 0x8, "9095b64971b68ac11008ebe24ea675e68ba5d4483d75ed5fe1f1ef1c9ddb101cae272ca1a58acfc756b124b6a19f84fcb78ef9c2ba94f3aecea27872e98b3a9fc0db91e0443b41d1ae22be4f4f0db397f00dfe7b211ecb05de670654cddeda41f5cc3fb8dafd816746308d"}], 0x80}, 0x0, 0x4, 0x1, {0x0, r6}}) io_uring_enter(r1, 0x2df0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x40000003, 0x0, 0x4, 0x0, 0x3, 0xc, 0xfeedcafe, 0x2, 0x3, 0x2}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120100004b41460860163209ea8001020301090212000100000000090400000005100f00806f264daccf006f3632a40be12aaedce772bc73bf9224674c29803da743431ad41eca90c3c9e3fafe841d55586b0a0391200d278e8467d7bfc0a6024c6b1489c8752cf8973077c432f853dc506ab918d89adb8448fea7fdbf24d4e96328eecf9491f5f128b43bf6"], 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000040)={&(0x7f0000000100)=[{0x3e, 0x4000, 0x0, 0x0}, {0x3e, 0x4201, 0x0, 0x0}], 0x2}) r10 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r10, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0xe07e872420dfefca) close(r10) socket$kcm(0x10, 0x3, 0x10) 4.463908789s ago: executing program 3 (id=634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000010000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 4.328599117s ago: executing program 3 (id=636): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r4, 0x891a, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000000000003900002a08000300", @ANYRES32=r3, @ANYBLOB="0c005a800400038004000280"], 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4000, 0x0, 0x865d, 0xfd, "ffff00"}) syz_open_pts(r0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xea) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f00000006c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f00000003c0)='z', 0x1, 0xceaa, 0x0, 0x5}]) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)=@delrng={0x10, 0x14, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4040) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@ip={@private=0xa010101, @multicast1, 0xff, 0xff000000, 'bond_slave_0\x00', 'vlan0\x00', {}, {0xff}, 0x6c}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xfff, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @broadcast}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 4.211915367s ago: executing program 4 (id=637): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$isdn(0x22, 0x3, 0x23) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000020000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a30"], 0x122}}, 0x0) 4.043855945s ago: executing program 3 (id=638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x11}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) 3.849179944s ago: executing program 3 (id=639): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x8}, {0x350}, {0xf4ef, 0x0, 0x8000000}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) 3.675637266s ago: executing program 0 (id=641): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r2, 0x0, 0xff2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) r5 = syz_pidfd_open(0x0, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1a, &(0x7f00000023c0)=""/4096, &(0x7f00000033c0)=0x1000) r6 = dup(r5) semget$private(0x0, 0x4000000009, 0x0) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0), 0x901000, 0x0) read$FUSE(r6, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, 0x0, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed0102030109022200010000000009040000"], 0x0) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x7401) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000044c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="978ca614b50bb78af34eba0f722ff6cfddc503c10b83be6dba8230fece6c1ca29407", 0x22}], 0x1, &(0x7f0000003400)=[@cred={{0x1c, 0x1, 0x2, {r9, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xee01, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r7, r8}}}], 0x60, 0x10}}, {{&(0x7f0000003640)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003900)=[{&(0x7f00000036c0)="63138d747e52763d1518c13d6c25877bba83d36044010c8bb8fd0c84a91f40c45a0f02683e9a172d330354064ce033145bf24e6a8c960f17c876e8", 0x3b}, {&(0x7f0000003780)="fa7e1217b0f820335f3674a0db074b12a6f1c3d3f945c6eb3749236ea8d8eefd", 0x20}, {0x0}], 0x3, 0x0, 0x0, 0x2004885}}, {{&(0x7f0000003940)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003bc0)=[{&(0x7f00000039c0)="3f4b051b5242a705ae69ce47190653cecbf988cf34", 0x15}, {&(0x7f0000003ac0)="d235c01bb24ac63054a3a889363953c0435bd59834027aa53665aa4b3c0d4908aab71ff8dcb8d7563ecc26d69b2377e8dc430ae95793c290ff0acc204c61327b03033a6b2264b27e9358ef333fab8b4085f2c8c52c1e03c7ec2de706a9b3d031065c9410b71ea49312f9deadd8c2680ce4efec0ad028c8fb24f844744ff1e10fc011cf6c5f62fc12d8dc0a50fd", 0x8d}], 0x2, &(0x7f0000003dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}, @rights={{0x1c, 0x1, 0x1, [r3, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9}}}, @cred={{0x1c, 0x1, 0x2, {r9, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r8}}}], 0xc0, 0x20044840}}, {{&(0x7f0000003ec0)=@file={0x0, './cgroup/cgroup.procs\x00'}, 0x6e, &(0x7f0000004080)=[{0x0}, {&(0x7f00000040c0)="2abdaf936774366d680990b226eec283c3863d1f4d6f22ae0a801b575af355c5172d02b36110133588d6e55edf18d0e12451eef4d6adf30c0d875bd9fb035ac8e9b3e7d995b39ffa7b0695ae310a842dd95b5c5de247157245cb213410d64572499e7098343d77c378afaa06741c", 0x6e}], 0x2, &(0x7f0000004140), 0x0, 0x20}}], 0x4, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getresuid(0x0, 0x0, 0x0) 3.438648863s ago: executing program 3 (id=642): setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x73, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118"], 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x3, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @empty, 0x91ff}, 0x1c) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_usb_connect$cdc_ecm(0x1, 0x55, &(0x7f0000001240)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0x9, 0xe0, 0x29, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xa, 0x5, 0x9}, [@acm={0x4, 0x24, 0x2, 0x6}, @acm={0x4, 0x24, 0x2, 0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x60, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0xc7, 0xf}}}}}]}}]}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x389800, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000002200)={{}, "a3953250e069bf988b94a856cff7cb1ba4368a4cdda93c14f18a04137de4b0e515766443449e0b16e4d8c396f9e8c3b4da7d72ebacff7ce41fbcf71bd6e1393854f3abc40788b900bbcc268242135b1984a53f42754b0ce106a87b7f02bf4d6420c2d92d1b9cf0bbfbd9204851ce8db0a4c86de3287081eedc83e9dee949c0577ee8a1f8e503c1b3700dd75223a357e187d65ad0215c4eb6c09ac75a4fbc8a7b4fc5f3c9e1e583dff5b155aceeb0ca35d968bda5113ff0f35c44476564b4f4f8769a6a4cb54c703a97fae8742fb61189d893960869245020ac67a64cef7954498f89639ea73f4477a223d15780889b3cf8600c23463b54b3e1490a98da8cf41c9a8de94a48a868a92d81c2696a44b9d7490d4943bf7e3efd33dc7c0fbbc4bf4a2737f16f86ab67479b1eb943af9bf077e5eac4a0571d21077c2004216f00b9ee397321aa1a5501a444368e9a5b31b27e03cf9ab28baab3062a3d5a33112bd954a5c10554cc967d87be168c7aeeda33ad90089c50b4bdeb998e579950d642d45ed3161f9d47a52efedb2d522d97bbf779be5d3af5c8de0a303841bbd30ab138f9dfaf0ce040dd9c9c43cd5e5e123ccbe2bf18707ac868afa2b6d8bfd170f5010bd8c0f5acd9e7c0a58501c4fe3cc209719b4e650182870a966380b31f7740322e14012e76c0e644505df69b63c420f1d24d3abe9691f6927d83c9f5da4b589bc03ae43bbbc13bb4b599a61fa5990c220863a6a3cc481116624e7dfbb5cb4495063c36a43734b2fbaff7f5dc454e043494aa31f80d4b309a89f836892869de3a453afe2030285324a56ec0c452f338e50b4d0a8d8f99e3809abf627fa32c15bf561336207bc9d1fe549bd3942a2bdd467e8b2f0de3fe09ab6e11c22a0a5f9ec04824f54be0efbfd4d07151ed923899f7aedc4602cc9dc3894ebbd249280ed1f44b6d6a22427d82dfc6fd5ec4fde665cbbd9f1ef2812b4cbea245be4d601e60a1eca598468b16b824aa7cd72111a0fda5a6d445a31d1c5ad59d296ee0ad47fc1a875a3d474a05443a7aa43bd2d6c2cf22b9056ed150d30f9d04ea2551ea204f9b409840049f7c15d5872ed975e38a168d7529f8894cfab22e10fae10c83598d0599a2cef35818b94bae5d36f22a6cddcd6e99d33e0d5b84d3a8169e41ccbea24dc31e0ecf9f4d8fa83dadc98d0ab1041b32a64721666c7c0606ef79599edfe7547f983655d637028dad1b81cce9e8e6ed09645d79dffa07cf323018e250eeea276db57c9e948f6550478dca06d9a54f16a532e896a3fe10c750f076735d93f1873122fdf11c219e67ce844a6da45ac14ff71b071caded30880a045892d629c0ba707ea572bf18a8d37db9d1393b3b510e32f441e9fa480252b2021527f754745c79bdf3e3ebc34b59b1ca7b9c77693f76d8e495320f29107472bc5f0edd88fbc90169114e112d6face0d249836427ec6a5b5909bbcc082bb78c60eeabc4d88c2165351ea46234bb57b412bedf484662ffa1e807cf75df234fae2e11566a6b9e0be26fc849fff3a0d5309fb20206edb0759afedca56095df0c2c06a2a3d8624dc45617e102e2a22032a0ac0e1ef2ab02f0b8263b039de74e65db2b1737982d7dec293f0894ae92f5b7c7270d5d3054237fd29fad8ae9c529ee487d17f36fb8df9550a45219bef623b63511b5c9669678fcd53caf8c8a00a138273104ed99ba1a18622d3c83e67fec8424dd9882bdb36f3e45a08c8870c8c317e53fe3db99dafb9a32274022d8ba1dd2c304f0a760914c2338bfbfbf81ae4d99148314a4ab495d8ae34207d7af9108d672d1805df54353b8681f5c937a5dec11f19f1faaa2c4c8d8d6f49f95d2852cd6336381ff4be37e33f6abd93bc1bd09588023f26b264560ea5ade2f52d4b91a9df4ea01e819398d58115041181c0f90a5c055f09d225588f00edb027c21766b663b067c862eeef0c2ed4ea02dfc95d1312c81b8927780b09b928619941b5632fcc2111e41a375fbeb86fc7e16f033659ece6669d91cd3a2e79de16e4dd7796e679c120a22a573d4123b98c5b9853bfd29a5af6a54a84eeaf8950b9191c48d8d4f54a8fdeed580a7237cc0a71c7dee4e1eb43cc0e871a8dbddf3c23e2017d6190aa5b045bd81e8f0a1cd1bbee321e9816dc339774e3b51187d4536b1dce11f161b1e5ef0b8fe6c9854a6eb5fb4c4e01a12dbca645786b5fdc4360d911bab233169cbc3d95ae5f3d3fbcc18dd9aded5d7ded8498b7853c040f7f0e98fc4ff0c16bb23fca2cfa657cece0944113e7be52e8c5954f8de7014038ec1239f52458cbb717709d954c40e87e4491796cf844d2df7c729b1625fbb1056f80bf30261b8ec8543ea6001d8da7f51839a568f733fa6e12ad46789ac4181dd5b4e467e099108963d80686fc6cc493de57a86cfe3b6859a6e3eb6e385f2372a291c9aa85ba66d9ed6b4cd5cffaa3ea31fd10e2f6d12f2687b6ce0951c536dd063855456af73a61645c29af13d9428ad7ca14c28e641c56288bca4b576607e41451f357cda449fb77f7902dde4b34eeeb9f5c33bdd82583d4c224c8a721885fb82e36e4633b1653ef0734c220af6f44364c29602e46f3a17a9ae9f7235e08e05230c3bb654fba79be3c8f1eb09a0e379b7b0a910734ca52a3e38a06ab331f09f7cd6c7c1cf84bba15edab2ee21c4cc6bad1eb619b0329dad1197b37b198de65dd8e9ad6955b123615b4828fc46ddee0702d247b4c06b106da83556874738c5da30b3ed2b498ddc9bcb2bbc80c33a9a922e9c66638d9a36c8ec2e1d8ac54fbd5719e8f6a8454e1dc0a1ebc4e5d275b52579ca4a973d2cd79a1f8f4645ddb046d12939652a86a00fb57a99ad830a173ff3cde19b45891511747cae9bb7c4e07bc58eeaef23a154a9617492df49284a73b9d961d9bab8d76e4566e9cdab2bcface4f94b7b88c96bd2ade64a11210a193c01bb2affec3582cf1a7bb05cbdcae6d3e806a3e3aed9fd7adfc7ef6c205b25825b21e1ef5ca0d6696bd55a172c3d221d29b0688c8a2f8967c4892ff09fd74b86978bdc8b8ca1ea97966bc33239a31f8803783f3a623ce29b6970ebf2996fec89b376b6848b3e2d8ffcabe6c17cbc87d5def1919746c1d626346967a02bed027294c941f26810781a36efc40a2d94c6c85cb5ceefacef490caed2c682e2984c33076fb0b77af57346e4ea524e23a0e3cbad306ccdac4f2ab21b8480911e205d01ca6b809a42135fa5d792ac4ff4e41e61840d1d614015bad2da27ef179f2a76643c60759dd674b33461257544f93346cd556a72ccb6087be89abbd44d19c6df2d7578ea9f871080ae5fdb9914dc16a19a52f393508952cbcaf09e5f029c6ba4e280d967c77b565ec9a0408de8e4d838fbe08c11d71f73a4690d88c7b4e6d5b963b85c47097afa22be3d0728880ab8e53d2f9863ecc50e421e00100000170f5e2779fef2acbfb16cd986e6c873c59cd2cb1ca0008d8e9aa10a936601656c0ad2535cdea2ee6a9003c2edcc197911a1b22bf16131767a6ce8011f4ad0e32cb8539c707faa0bf11c190d2b19d5a12d124e94018feacd8077218d1860975a51db08d857e537317d58ab126746c84d654662e6945f1e2437a976ed400d5b987d126ee3b04165374936bd0021f7e89002640f49d9f185ee67210cf16139bf95d43f78237d9c3b9c051c320188a9704ee7c74aea45b46cb78123560ac4714f15c377cd667aceb9223b78766d1e99ffd3957bb5cd2cf49341d2541116a10f85f4d1b28363ca8d710a229afb6dd5e035adfef8f7c47df45e02347ae658410c21a3386776b0230380698fa9bd1b1b4c57c133842fba4cfc59148eaf0e0cafef519ecddcc810ee3acab0f51b25d194fa2b8a945da9a99fe3762dcaf61ca5ac8563853c43da564b7a64aab5b4cf25827af6660a371fb289f93321c175a8573abb158088ef8f0b1bd76edb5f17bee2633f9501c2f106f5dbc97900736fc1bc8a827cb7126f73f7ac5dbcd4f2275566364dbc2d5f00f50730e448d4e701b1b27367dbd2e35088b02ca59fb65b34ce5c1b13544415655e99807e66a61ccdf59c2e0ae3fa300a210f763a4faecbe1c82d9d70c044f9e1d95173982ff937f54b50950eb19ffe0be0f12da1916ab58689723c17547e28187fd9ce3c5927129e839628a92e4f74de256c3d6794e513b5294633da21fdb9dad866b094b3c3d46aed79af4d3dd8367605d7a89cff11e9249a8533595baf125f4ec06206e6edf028edb55aacd40d6e3d21800aeeae662ab9f8d2a19c7cbf0e75685e99b07ba6f2d22e4e2e3d032fda1c5abbacac1c64fd760021514964a5020b944463d47db8e4917631af88a4fb8e59c59b6558ddd33640dac734f32c6b01b4a19c6587dbf039f1000eddcb490808e532e58a4017731f2e7dc2e6bdb26da5201d3eb57eb7b0e3ffc8df5de2f658494193f0b66f945e875741cf093bf8083d5668c58a93d9cf782ff4f56c487e9fb4040e54b9e2b390f98bc277eaacfcad28bea13bfc7509d95e43459f0b4099f71516bec86a21a91e150869c0edb783f0e47487407c965cd88e8333c99246b94fe370e2a593a427f496297c041abed232aae9fa69a2350d0a348420075a138f09ae0a57133d5664e8226b0e45f666cd7846d5b3d2a30d6f18f6d37614eeedf43df392a522ab95099034a2e13bfe1e8ea1fcb7e56ba9e676cd59189cd2b64c74ef3a5fb53ee3474aab82dbae1bdd34eb2938d1341ce7dfbd8889eb10ff4aafea937639d354255fbafcb2af99574999e1c990f8753d0161aef3d236ec5f252652b330962613197ff8b82353c0846adf5fae6bb9b48a9d142b6851aeada80556f726683d4b70f56edcadb67ae1a769d3235182058dbf815f816aec2e591f93fd0041c28e1c3abb7bdc2ff52c39e1cd162494282038ce3ea57057e9f7d1965d4978c7eac64ed9b415c5551084ce845ea1f7594def50d3d3353691aa1db2ef403212515ac268d437df8f351dd207b6300341df7d8c2fc350a5ea4afcd7945479d187ca3221d77c755a6079d5514723ce6a3ce86acbf955b65f59defb221b90883cf7c518028f8e07a9f85ff1f49ecf2c11fc864f881f1744ca343bd3709008c7b242596759523e0a9546e74181bdb19bc66ef808de986c04a105adcfe0fec8944cc8bce6ebb321e91dc5ab69d3583ea88acb54bfc5db89e89737dd499a856f0c0edbed0830541ae37ae762a92b76e29c32c2f9da0adab1f8d15e169eb688be72b2dc2c37b5ea17ff99d3a19869f040dc456ba661e0ccd2b8732bc0aebd0c96c4c46e6dd5bb11ef3dd204f7af2bc6dad25666b51e528bd86c8de43e8504793bccdc40ac5d5c440ab687c5301c6d949d9b3ddf3b0ffbfd654a40b8ed78627213f7cafb57f53b5499e4f9c400536597820cfcc16c3fb9625312d233effc081ada6987b91f584c718cfade54ef087726364e5b6ea1ae136c31c415b42de411fbf8e3bb1baa90a69b5d6da9b356a7e2b5866f952a892f1a2cf54b7aae3cbbb795ac9f8f04618bae0143020e313a50b01cfce723eec473cc565d0860ea1fc306a50e8a1d7905b47404bfd03242bab8f7b663a4f83713bf3c4c3bf9a002714db92ac09186c53832ae5e0010b2cd10c5380dd157547c6d24acf3ec79ad8ca6d785c816672ff99c3d87f4e552b12b4f136f4176762373d9268a46ae03693a55a55cd4cc31c97ccff36ac38146483b9bb866abe30ef02ec3b1eb00"}) 3.159712602s ago: executing program 4 (id=644): prlimit64(0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xee}}}}}]}}]}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000024ceac80cf04000001030000000921000900749bcb9d11a831f6ef8e6ac2e900"/53], 0x0) socket$kcm(0x2, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16], 0x1000f) 2.787767352s ago: executing program 2 (id=646): mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') read$FUSE(r0, &(0x7f000000cb80)={0x2020}, 0x2020) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x100, 0x7, 0x4, 0x0, 0x3}) 2.479906963s ago: executing program 2 (id=647): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c0000001000010400000000fd00000000000000", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e31"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.353108021s ago: executing program 2 (id=648): recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/169, 0xa9}], 0x1}, 0x8}], 0x1, 0x2, 0x0) r0 = socket(0x11, 0xa, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x10000, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90d, 0x3, '\x00', @string=0x0}}) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x3c49, 0x4) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 2.118668867s ago: executing program 2 (id=649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x105}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x15, 0x2, 0x10}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x88640000, 0x22044028}, 0x0) 1.951932385s ago: executing program 2 (id=650): bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8), 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x208010, &(0x7f0000000380)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@allow_other}, {@allow_other}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@permit_directio}, {@flag='posixacl'}, {@smackfstransmute={'smackfstransmute', 0x3d, '-&/}:'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, 'e'}}]}}, 0x1, 0x0, &(0x7f00000004c0)="7b0fa79880f32b3e7eacb7bf34c293bf634e985e1370ab6c1de37c3db56784b88c797b9501d65ae7f32866e2b7c40751e9b383c485ae4e0525d7ebe903d726ad77968f913e7bc0ea872eb1ec6efeec75a524c8b1d2148974d47fe8665df3f14b6bdbd7a3ec3c") r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000000)) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x20a040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000680)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) r11 = accept4(r10, 0x0, 0x0, 0x800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r12, 0xffffffffffffffff, 0x0) 1.709064331s ago: executing program 4 (id=651): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) syz_open_pts(r0, 0x900) socket$inet(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x10c, &(0x7f00000001c0)=0x7, 0x0, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) (fail_nth: 96) 1.203817802s ago: executing program 1 (id=652): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e09"], 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r3, 0xc004}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x14a, &(0x7f0000000840)=ANY=[@ANYBLOB="120101020200003f2505a1a44000010203010902380102010180070904000001020d00000a2406000153508a276905240000800d240f0100800000f70000020706241a214f02a2241303f4e9f603d0d10e776dfb5356af2822d0396671bb2ae6ea333227f8b9fdbbfa96f0a2d6283be2cb6ef6928bc03065b6c2d2c55d7745ceb85b89eda9043b9945af174f1d80dc7b7acc9f7f0000006a12d3bb8c9e3c3aa8ed61da30ebc467a157522d716ec1680dfce1c52497f3c0f148926670f348d5c278bea969347808c3cd85b30c818f2e796815449f731c41875f3dacf9f6997780fa6b373ab79cbe2c07240a0106080007241400300200182413084d3e78ba7163c8c731bdd6b92c7b9597cfe58ea70f241308c9b10aa60e809a3b619512ec42b6340905810320000356010904010000020d00000904010102020d0000090582020002e40474090503020800010304"], &(0x7f0000000600)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x9, 0x32, 0x2, 0x10, 0x8}, 0x4e, &(0x7f0000000480)={0x5, 0xf, 0x4e, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x9, 0xca, 0x5}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x3, 0x0, 0x7, [0x30, 0xff00, 0xc030, 0xc0]}, @ssp_cap={0xfffffffffffffdf0, 0x10, 0xa, 0x1, 0x0, 0x400, 0xf00, 0x8000}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xb, 0xb, 0x8}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x7fffff8, 0xf000, 0x5, [0xf0]}]}, 0x3, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x42c}}, {0x1f, &(0x7f00000007c0)=ANY=[@ANYBLOB="1f0335ac64c924247ebba40efc2e67a75f68c75754fa696783da75208fcab064943e017b44a0d6995614bff68b0f90943e9fa087e50de24407e9cbbd8eb6d7c2c8467cf392437db1ffcb666be97b3cc6c2aa6463d1b1bfb72cdc00"/105]}]}) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, 0x1407, 0x100, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x448c1}, 0x4000881) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x132e712c, 0x2fd, 0x3ff, 0x3d45}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_usb_connect(0x0, 0x3b, &(0x7f0000002080)=ANY=[@ANYBLOB="1201100160a73810490d0070676c010203010902290001080210020904c6090091b09bf60a2401530006020102052404053c092406020601090004"], 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0xa, 0xffffff9a, 0xa68, 0x9}}}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {0xf, 0xa}, {0xffe0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x84002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 1.203508186s ago: executing program 4 (id=653): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x7, 0x8e, 0x10001, 0xaa5d, 0x3}, &(0x7f0000000000)=0x98) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000b00000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 935.777157ms ago: executing program 4 (id=654): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000d08000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 633.728867ms ago: executing program 4 (id=655): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) sysfs$1(0x1, &(0x7f0000000300)='\\\'+$#\x00') syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$inet(0xa, 0x1, 0x100) listen(r3, 0x8) unlink(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00') syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f010000", @ANYBLOB="f7", @ANYRESDEC], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x10000004}) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r6, 0xc02c5625, &(0x7f0000000180)={0x0, 0x9, @value=0x4}) socket$netlink(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 240.778885ms ago: executing program 3 (id=656): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000000c0)="b8050000000f01c10f46a78900000066ba2100b2b267ee66ba2000ee6dec9e800000b94e060000b804000000ba000000000f3066bac0000f3066b808008ed0660f38806f008ee0", 0x47}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ftruncate(r0, 0x8000000000000000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000980)="202fb387", 0x4}], 0x2}, 0x48) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0xf000, 0x100, 0x1ff, 0x6, 0x0, [{0x4, 0xbd, 0x5, '\x00', 0x81}, {0x3, 0x71, 0x5, '\x00', 0xc7}, {0x95, 0xc4, 0x6, '\x00', 0x68}, {0x9, 0xf9, 0x4, '\x00', 0x72}, {0x9, 0xfc, 0x10, '\x00', 0xca}, {0xd, 0x8, 0x3, '\x00', 0x8}, {0x9, 0x20, 0x10, '\x00', 0xed}, {0x0, 0x4, 0x5, '\x00', 0xa1}, {0x3, 0x2, 0x7, '\x00', 0x8}, {0x8, 0xe1, 0x7f, '\x00', 0x8}, {0x1, 0xff, 0x2, '\x00', 0x2}, {0xfa, 0x6, 0x10, '\x00', 0xca}, {0x6, 0xe, 0xc, '\x00', 0x7}, {0x3, 0x5, 0x1, '\x00', 0xf2}, {0x8, 0x7, 0xfa, '\x00', 0x9}, {0xff, 0x8, 0x5, '\x00', 0x8f}, {0x80, 0x9, 0x2, '\x00', 0x8}, {0x6, 0x7, 0x8, '\x00', 0x1}, {0x8, 0x3, 0x9, '\x00', 0x7}, {0x5, 0xd, 0xa2, '\x00', 0x3}, {0x1, 0x0, 0x8, '\x00', 0x2}, {0x2, 0x0, 0x7, '\x00', 0xd}, {0x10, 0xf7, 0x8, '\x00', 0x7f}, {0x5, 0x80, 0x8d, '\x00', 0x8}]}}) r4 = io_uring_setup(0x7076, &(0x7f0000000200)={0x0, 0x9e34, 0x8, 0x3, 0x2a9}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000940)={0x0, 0x0, 0x1}, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=657): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000b000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) kernel console output (not intermixed with test programs): 3-1: config 0 interface 217 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 107.114312][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.125216][ T5839] usb 3-1: config 0 interface 217 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 107.135234][ T5917] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.148287][ T5917] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.157526][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.167445][ T5839] usb 3-1: New USB device found, idVendor=17e9, idProduct=0d52, bcdDevice=9b.89 [ 107.177992][ T5917] usb 4-1: config 0 descriptor?? [ 107.183039][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.191372][ T5839] usb 3-1: Product: syz [ 107.195614][ T5839] usb 3-1: Manufacturer: syz [ 107.203407][ T5839] usb 3-1: SerialNumber: syz [ 107.210243][ T1208] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 107.210342][ T5839] usb 3-1: config 0 descriptor?? [ 107.307809][ T6260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.317955][ T6260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.382687][ T1208] usb 1-1: Using ep0 maxpacket: 16 [ 107.396132][ T1208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 107.404844][ T6263] xt_SECMARK: invalid mode: 2 [ 107.413984][ T1208] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 107.442275][ T1208] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 107.449708][ T5839] udl 3-1:0.217: [drm] Unrecognized vendor firmware descriptor [ 107.456841][ T1208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.470113][ T5839] [drm:udl_init] *ERROR* Selecting channel failed [ 107.473518][ T1208] usb 1-1: config 0 descriptor?? [ 107.530913][ T5839] [drm] Initialized udl 0.0.1 for 3-1:0.217 on minor 2 [ 107.537827][ T5839] [drm] Initialized udl on minor 2 [ 107.560923][ T5839] udl 3-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 107.575243][ T5839] udl 3-1:0.217: [drm] Cannot find any crtc or sizes [ 107.583075][ T6265] netlink: 14 bytes leftover after parsing attributes in process `syz.4.111'. [ 107.584789][ T5901] udl 3-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 107.612841][ T5839] usb 3-1: USB disconnect, device number 8 [ 107.624551][ T5901] udl 3-1:0.217: [drm] Cannot find any crtc or sizes [ 107.715988][ T6255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.732676][ T6255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.758384][ T1208] usbhid 1-1:0.0: can't add hid device: -71 [ 107.768089][ T1208] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 107.790982][ T1208] usb 1-1: USB disconnect, device number 7 [ 107.842810][ T6269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.113'. [ 108.061059][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'. [ 108.387500][ T10] usb 2-1: USB disconnect, device number 6 [ 108.790491][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 108.962115][ T10] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.032575][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.032622][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 109.032648][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.070957][ T10] usb 2-1: config 0 descriptor?? [ 109.140693][ T5901] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 109.332252][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 109.344073][ T5901] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 109.354896][ T5901] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 109.413795][ T5901] usb 3-1: config 6 has no interface number 0 [ 109.440339][ T5901] usb 3-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 109.485536][ T5901] usb 3-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.522870][ T10] kye 0003:0458:5013.0004: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 109.537121][ T5901] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 109.547405][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.558545][ T5901] usb 3-1: Product: syz [ 109.567438][ T5901] usb 3-1: Manufacturer: syz [ 109.576234][ T5901] usb 3-1: SerialNumber: syz [ 109.606337][ T5901] hso 3-1:6.2: Failed to find INT IN ep [ 109.673508][ T10] kye 0003:0458:5013.0004: hidraw0: USB HID v8.00 Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 109.824608][ T1208] usb 3-1: USB disconnect, device number 9 [ 109.864532][ T10] kye 0003:0458:5013.0004: tablet-enabling feature report not found [ 109.907380][ T10] kye 0003:0458:5013.0004: tablet enabling failed [ 109.966788][ T10] usb 2-1: USB disconnect, device number 7 [ 109.978743][ T5917] usbhid 4-1:0.0: can't add hid device: -71 [ 110.031407][ T6299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.044403][ T5917] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 110.057127][ T6298] fido_id[6298]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 110.125177][ T5917] usb 4-1: USB disconnect, device number 6 [ 110.176484][ T6307] fuse: Bad value for 'user_id' [ 110.182262][ T6307] fuse: Bad value for 'user_id' [ 111.110089][ T5901] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 111.310063][ T5839] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 111.317670][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 111.346108][ T5901] usb 4-1: unable to get BOS descriptor or descriptor too short [ 111.370631][ T5901] usb 4-1: config 8 has an invalid interface number: 24 but max is 1 [ 111.378844][ T5901] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 111.424329][ T5901] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 111.460385][ T5901] usb 4-1: config 8 has no interface number 0 [ 111.481837][ T5839] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.500608][ T5901] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 111.515763][ T5839] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.552597][ T5901] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 111.583171][ T5839] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.604032][ T5901] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 111.635763][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.675022][ T5839] usb 2-1: Product: syz [ 111.684282][ T5901] usb 4-1: config 8 interface 24 has no altsetting 0 [ 111.694719][ T5839] usb 2-1: Manufacturer: syz [ 111.722703][ T5901] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 111.733130][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.741961][ T5839] usb 2-1: SerialNumber: syz [ 111.797923][ T5901] usb 4-1: Product: syz [ 111.837837][ T5901] usb 4-1: Manufacturer: syz [ 111.854301][ T5901] usb 4-1: SerialNumber: syz [ 112.109273][ T6312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.119417][ T6312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.950393][ T43] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 113.184549][ T43] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 113.203094][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.237081][ T43] usb 3-1: Product: syz [ 113.255430][ T43] usb 3-1: Manufacturer: syz [ 113.271898][ T43] usb 3-1: SerialNumber: syz [ 113.296304][ T43] usb 3-1: config 0 descriptor?? [ 113.423765][ T5901] vmk80xx 4-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 113.467030][ T5835] Bluetooth: hci5: urb ffff888077f46500 submission failed (2) [ 113.474449][ T5901] vmk80xx 4-1:8.24: probe with driver vmk80xx failed with error -22 [ 113.559256][ T5901] usb 4-1: USB disconnect, device number 7 [ 113.617392][ T6363] fuse: Bad value for 'user_id' [ 113.637079][ T6363] fuse: Bad value for 'user_id' [ 113.646985][ T1208] usb 3-1: USB disconnect, device number 10 [ 114.104787][ T5839] cdc_ncm 2-1:1.0: bind() failure [ 114.126521][ T5839] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 114.177137][ T5839] cdc_ncm 2-1:1.1: bind() failure [ 114.210965][ T5839] usb 2-1: USB disconnect, device number 8 [ 114.386751][ T6372] input: syz1 as /devices/virtual/input/input6 [ 115.769163][ T6388] netlink: 24 bytes leftover after parsing attributes in process `syz.3.148'. [ 116.180070][ T5839] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 116.360128][ T5839] usb 1-1: Using ep0 maxpacket: 16 [ 116.368857][ T5839] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 116.390028][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 116.412306][ T5839] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 116.421793][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.429818][ T5839] usb 1-1: Product: syz [ 116.441635][ T6404] FAULT_INJECTION: forcing a failure. [ 116.441635][ T6404] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 116.484694][ T6404] CPU: 1 UID: 0 PID: 6404 Comm: syz.2.153 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 116.484719][ T6404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.484730][ T6404] Call Trace: [ 116.484737][ T6404] [ 116.484745][ T6404] dump_stack_lvl+0x189/0x250 [ 116.484778][ T6404] ? __pfx____ratelimit+0x10/0x10 [ 116.484805][ T6404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.484834][ T6404] ? __pfx__printk+0x10/0x10 [ 116.484854][ T6404] ? __might_fault+0xb0/0x130 [ 116.484881][ T6404] should_fail_ex+0x414/0x560 [ 116.484908][ T6404] _copy_from_user+0x2d/0xb0 [ 116.484926][ T6404] ___sys_recvmsg+0x12e/0x510 [ 116.484955][ T6404] ? __pfx____sys_recvmsg+0x10/0x10 [ 116.485012][ T6404] ? __might_fault+0xb0/0x130 [ 116.485033][ T6404] do_recvmmsg+0x307/0x770 [ 116.485064][ T6404] ? __pfx_do_recvmmsg+0x10/0x10 [ 116.485099][ T6404] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 116.485143][ T6404] __x64_sys_recvmmsg+0x190/0x240 [ 116.485169][ T6404] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 116.485191][ T6404] ? rcu_is_watching+0x15/0xb0 [ 116.485223][ T6404] ? do_syscall_64+0xbe/0x3b0 [ 116.485254][ T6404] do_syscall_64+0xfa/0x3b0 [ 116.485298][ T6404] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.485325][ T6404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.485344][ T6404] ? clear_bhb_loop+0x60/0xb0 [ 116.485367][ T6404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.485386][ T6404] RIP: 0033:0x7f54fbd8e929 [ 116.485403][ T6404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.485430][ T6404] RSP: 002b:00007f54fcc9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 116.485449][ T6404] RAX: ffffffffffffffda RBX: 00007f54fbfb6080 RCX: 00007f54fbd8e929 [ 116.485462][ T6404] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000008 [ 116.485473][ T6404] RBP: 00007f54fcc9b090 R08: 0000000000000000 R09: 0000000000000000 [ 116.485484][ T6404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.485494][ T6404] R13: 0000000000000000 R14: 00007f54fbfb6080 R15: 00007f54fc0dfa28 [ 116.485520][ T6404] [ 116.707780][ T5839] usb 1-1: Manufacturer: syz [ 116.713933][ T5839] usb 1-1: SerialNumber: syz [ 116.875544][ T5839] usb 1-1: config 0 descriptor?? [ 116.883703][ T5839] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 116.893105][ T5839] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 116.960085][ T43] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 117.110064][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 117.120773][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 117.140407][ T43] usb 4-1: config 8 has an invalid interface number: 24 but max is 1 [ 117.148531][ T43] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 117.223990][ T43] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 117.285183][ T43] usb 4-1: config 8 has no interface number 0 [ 117.320814][ T43] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 117.409649][ T5839] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 117.443677][ T43] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 117.473289][ T43] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 117.497049][ T43] usb 4-1: config 8 interface 24 has no altsetting 0 [ 117.526487][ T5839] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 117.742418][ T43] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 117.789709][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.809738][ T43] usb 4-1: Product: syz [ 117.840131][ T43] usb 4-1: Manufacturer: syz [ 117.848777][ T43] usb 4-1: SerialNumber: syz [ 117.906081][ T6416] tipc: Started in network mode [ 117.927674][ T5839] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 117.938239][ T6416] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 117.972491][ T5839] em28xx 1-1:0.0: No AC97 audio processor [ 117.995318][ T6416] tipc: Enabling of bearer rejected, failed to enable media [ 118.035223][ T5839] usb 1-1: USB disconnect, device number 8 [ 118.061839][ T5839] em28xx 1-1:0.0: Disconnecting em28xx [ 118.116726][ T6399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.127078][ T6399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.148508][ T5839] em28xx 1-1:0.0: Freeing device [ 119.173568][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.163'. [ 119.458505][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.163'. [ 119.481819][ T6443] netlink: 'syz.4.163': attribute type 6 has an invalid length. [ 119.498611][ T6443] netlink: 'syz.4.163': attribute type 5 has an invalid length. [ 119.722034][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 119.882589][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 119.891777][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.907877][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 119.957966][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.143326][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 120.160773][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 120.180089][ T9] usb 5-1: Product: syz [ 120.189694][ T9] usb 5-1: Manufacturer: syz [ 120.221544][ T9] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 120.361381][ T5917] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 120.423644][ T6443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.518648][ T6443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.565451][ T9] usb 5-1: USB disconnect, device number 7 [ 120.583104][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 121.078413][ T5917] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 121.280028][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.329312][ T5917] usb 1-1: Product: syz [ 121.338628][ T5917] usb 1-1: Manufacturer: syz [ 121.344245][ T43] vmk80xx 4-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 121.367558][ T5917] usb 1-1: SerialNumber: syz [ 121.375106][ T43] vmk80xx 4-1:8.24: probe with driver vmk80xx failed with error -22 [ 121.397426][ T5917] usb 1-1: config 0 descriptor?? [ 121.444292][ T43] usb 4-1: USB disconnect, device number 8 [ 121.460168][ T5917] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 121.619665][ T6459] tipc: Cannot configure node identity twice [ 122.212773][ T43] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 122.314685][ T6469] FAULT_INJECTION: forcing a failure. [ 122.314685][ T6469] name failslab, interval 1, probability 0, space 0, times 0 [ 122.357328][ T6469] CPU: 1 UID: 0 PID: 6469 Comm: syz.4.171 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 122.357348][ T6469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.357356][ T6469] Call Trace: [ 122.357362][ T6469] [ 122.357367][ T6469] dump_stack_lvl+0x189/0x250 [ 122.357392][ T6469] ? __pfx____ratelimit+0x10/0x10 [ 122.357411][ T6469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.357431][ T6469] ? __pfx__printk+0x10/0x10 [ 122.357448][ T6469] ? __pfx___might_resched+0x10/0x10 [ 122.357468][ T6469] ? fs_reclaim_acquire+0x7d/0x100 [ 122.357491][ T6469] should_fail_ex+0x414/0x560 [ 122.357510][ T6469] should_failslab+0xa8/0x100 [ 122.357525][ T6469] __kmalloc_cache_noprof+0x70/0x3d0 [ 122.357538][ T6469] ? fuse_lookup_name+0x1b5/0x860 [ 122.357555][ T6469] fuse_lookup_name+0x1b5/0x860 [ 122.357577][ T6469] ? __pfx_fuse_lookup_name+0x10/0x10 [ 122.357590][ T6469] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 122.357605][ T6469] ? fuse_lock_inode+0xd3/0x120 [ 122.357627][ T6469] ? d_alloc_parallel+0x2e0/0x14e0 [ 122.357647][ T6469] ? d_alloc_parallel+0x13d0/0x14e0 [ 122.357669][ T6469] fuse_lookup+0x1e9/0x640 [ 122.357688][ T6469] ? __pfx_fuse_lookup+0x10/0x10 [ 122.357711][ T6469] ? __raw_spin_lock_init+0x45/0x100 [ 122.357727][ T6469] ? __init_waitqueue_head+0xa9/0x150 [ 122.357746][ T6469] __lookup_slow+0x297/0x3d0 [ 122.357765][ T6469] ? __pfx___lookup_slow+0x10/0x10 [ 122.357792][ T6469] ? down_read+0x1ad/0x2e0 [ 122.357806][ T6469] lookup_slow+0x53/0x70 [ 122.357823][ T6469] walk_component+0x2d2/0x400 [ 122.357837][ T6469] ? path_lookupat+0x156/0x430 [ 122.357854][ T6469] path_lookupat+0x163/0x430 [ 122.357875][ T6469] filename_lookup+0x212/0x570 [ 122.357893][ T6469] ? __lock_acquire+0xab9/0xd20 [ 122.357914][ T6469] ? __pfx_filename_lookup+0x10/0x10 [ 122.357946][ T6469] ? strncpy_from_user+0x150/0x290 [ 122.357967][ T6469] path_removexattrat+0x196/0x690 [ 122.357987][ T6469] ? __pfx_path_removexattrat+0x10/0x10 [ 122.358003][ T6469] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 122.358022][ T6469] ? __pfx_vfs_write+0x10/0x10 [ 122.358060][ T6469] ? __pfx_ksys_write+0x10/0x10 [ 122.358070][ T6469] ? rcu_is_watching+0x15/0xb0 [ 122.358095][ T6469] __x64_sys_removexattr+0x62/0x70 [ 122.358112][ T6469] do_syscall_64+0xfa/0x3b0 [ 122.358130][ T6469] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.358147][ T6469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.358160][ T6469] ? clear_bhb_loop+0x60/0xb0 [ 122.358175][ T6469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.358186][ T6469] RIP: 0033:0x7fefe378e929 [ 122.358197][ T6469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.358212][ T6469] RSP: 002b:00007fefe46d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 122.358225][ T6469] RAX: ffffffffffffffda RBX: 00007fefe39b5fa0 RCX: 00007fefe378e929 [ 122.358235][ T6469] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000500 [ 122.358243][ T6469] RBP: 00007fefe46d5090 R08: 0000000000000000 R09: 0000000000000000 [ 122.358250][ T6469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.358257][ T6469] R13: 0000000000000000 R14: 00007fefe39b5fa0 R15: 00007fefe3adfa28 [ 122.358276][ T6469] [ 122.694096][ T6452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.703657][ T6452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.720073][ T5917] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 122.800866][ T43] usb 3-1: config 0 has no interfaces? [ 122.818055][ T43] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 122.827156][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.835291][ T43] usb 3-1: Product: syz [ 122.843847][ T43] usb 3-1: Manufacturer: syz [ 122.848442][ T43] usb 3-1: SerialNumber: syz [ 123.051313][ T5917] usb 2-1: config 0 has no interfaces? [ 123.072934][ T5917] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 123.138267][ T43] usb 3-1: config 0 descriptor?? [ 123.177206][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.188776][ T5917] usb 2-1: Product: syz [ 123.212856][ T5917] usb 2-1: Manufacturer: syz [ 123.222822][ T5917] usb 2-1: SerialNumber: syz [ 123.257987][ T5917] usb 2-1: config 0 descriptor?? [ 123.478597][ T6467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.487499][ T6467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.504755][ T6467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.514983][ T6467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.886082][ T10] usb 2-1: USB disconnect, device number 9 [ 124.099193][ T6481] geneve2: entered allmulticast mode [ 124.157115][ T6484] netlink: 28 bytes leftover after parsing attributes in process `syz.4.175'. [ 124.176731][ T6482] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 124.584071][ T43] usb 1-1: USB disconnect, device number 9 [ 124.780446][ T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 124.930714][ T9] usb 2-1: device descriptor read/64, error -71 [ 125.056666][ T6508] netlink: 16 bytes leftover after parsing attributes in process `syz.3.183'. [ 125.066586][ T6508] openvswitch: netlink: EtherType 0 is less than min 600 [ 125.300398][ T9] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 125.520081][ T9] usb 2-1: device descriptor read/64, error -71 [ 125.590313][ T5917] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 125.683044][ T9] usb usb2-port1: attempt power cycle [ 125.730113][ T5917] usb 4-1: device descriptor read/64, error -71 [ 125.968535][ T5901] usb 3-1: USB disconnect, device number 11 [ 125.984330][ T5917] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 126.070206][ T9] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 126.125473][ T9] usb 2-1: device descriptor read/8, error -71 [ 126.160085][ T5917] usb 4-1: device descriptor read/64, error -71 [ 126.292420][ T5917] usb usb4-port1: attempt power cycle [ 126.380315][ T9] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 126.452537][ T9] usb 2-1: device descriptor read/8, error -71 [ 126.608051][ T9] usb usb2-port1: unable to enumerate USB device [ 126.660071][ T5917] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 126.680644][ T5917] usb 4-1: device descriptor read/8, error -71 [ 126.930157][ T5917] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 126.954552][ T5917] usb 4-1: device descriptor read/8, error -71 [ 127.082924][ T5917] usb usb4-port1: unable to enumerate USB device [ 128.570286][ T5939] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 128.760209][ T6552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.197'. [ 128.813847][ T5939] usb 3-1: config 0 has no interfaces? [ 128.856944][ T5939] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 128.909145][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.928673][ T5939] usb 3-1: Product: syz [ 128.944906][ T5939] usb 3-1: Manufacturer: syz [ 128.958646][ T5939] usb 3-1: SerialNumber: syz [ 128.986452][ T5939] usb 3-1: config 0 descriptor?? [ 129.104822][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.198'. [ 129.221817][ T6541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.250423][ T6541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.320630][ T6541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.351501][ T6541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.420378][ T5939] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 129.571967][ T5939] usb 2-1: device descriptor read/64, error -71 [ 129.734688][ T6566] syz.0.203 (6566): drop_caches: 0 [ 129.828785][ T6565] FAULT_INJECTION: forcing a failure. [ 129.828785][ T6565] name failslab, interval 1, probability 0, space 0, times 0 [ 129.847688][ T6565] CPU: 1 UID: 0 PID: 6565 Comm: syz.4.202 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 129.847712][ T6565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.847723][ T6565] Call Trace: [ 129.847730][ T6565] [ 129.847737][ T6565] dump_stack_lvl+0x189/0x250 [ 129.847771][ T6565] ? __pfx____ratelimit+0x10/0x10 [ 129.847805][ T6565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.847834][ T6565] ? __pfx__printk+0x10/0x10 [ 129.847859][ T6565] ? __pfx___might_resched+0x10/0x10 [ 129.847888][ T6565] ? fs_reclaim_acquire+0x7d/0x100 [ 129.847914][ T6565] should_fail_ex+0x414/0x560 [ 129.847941][ T6565] should_failslab+0xa8/0x100 [ 129.847962][ T6565] kmem_cache_alloc_noprof+0x73/0x3c0 [ 129.847991][ T6565] ? fuse_get_req+0x7b9/0x10b0 [ 129.848022][ T6565] fuse_get_req+0x7b9/0x10b0 [ 129.848047][ T6565] ? stack_depot_save_flags+0x40/0x900 [ 129.848081][ T6565] ? __pfx_fuse_get_req+0x10/0x10 [ 129.848105][ T6565] ? fuse_lookup_name+0x1b5/0x860 [ 129.848125][ T6565] ? __pfx_autoremove_wake_function+0x10/0x10 [ 129.848147][ T6565] ? filename_lookup+0x212/0x570 [ 129.848168][ T6565] ? path_removexattrat+0x196/0x690 [ 129.848192][ T6565] ? __x64_sys_removexattr+0x62/0x70 [ 129.848213][ T6565] ? do_syscall_64+0xfa/0x3b0 [ 129.848238][ T6565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.848266][ T6565] __fuse_simple_request+0x2aa/0x18d0 [ 129.848302][ T6565] ? __pfx___fuse_simple_request+0x10/0x10 [ 129.848349][ T6565] ? __kasan_kmalloc+0x93/0xb0 [ 129.848376][ T6565] fuse_lookup_name+0x34c/0x860 [ 129.848408][ T6565] ? __pfx_fuse_lookup_name+0x10/0x10 [ 129.848427][ T6565] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 129.848449][ T6565] ? fuse_lock_inode+0xd3/0x120 [ 129.848480][ T6565] ? d_alloc_parallel+0x2e0/0x14e0 [ 129.848513][ T6565] ? d_alloc_parallel+0x13d0/0x14e0 [ 129.848545][ T6565] fuse_lookup+0x1e9/0x640 [ 129.848572][ T6565] ? __pfx_fuse_lookup+0x10/0x10 [ 129.848605][ T6565] ? __raw_spin_lock_init+0x45/0x100 [ 129.848628][ T6565] ? __init_waitqueue_head+0xa9/0x150 [ 129.848654][ T6565] __lookup_slow+0x297/0x3d0 [ 129.848680][ T6565] ? __pfx___lookup_slow+0x10/0x10 [ 129.848719][ T6565] ? down_read+0x1ad/0x2e0 [ 129.848740][ T6565] lookup_slow+0x53/0x70 [ 129.848765][ T6565] walk_component+0x2d2/0x400 [ 129.848785][ T6565] ? path_lookupat+0x156/0x430 [ 129.848815][ T6565] path_lookupat+0x163/0x430 [ 129.848846][ T6565] filename_lookup+0x212/0x570 [ 129.848867][ T6565] ? __lock_acquire+0xab9/0xd20 [ 129.848896][ T6565] ? __pfx_filename_lookup+0x10/0x10 [ 129.848943][ T6565] ? strncpy_from_user+0x150/0x290 [ 129.848974][ T6565] path_removexattrat+0x196/0x690 [ 129.849002][ T6565] ? __pfx_path_removexattrat+0x10/0x10 [ 129.849025][ T6565] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 129.849053][ T6565] ? __pfx_vfs_write+0x10/0x10 [ 129.849109][ T6565] ? __pfx_ksys_write+0x10/0x10 [ 129.849123][ T6565] ? rcu_is_watching+0x15/0xb0 [ 129.849159][ T6565] __x64_sys_removexattr+0x62/0x70 [ 129.849183][ T6565] do_syscall_64+0xfa/0x3b0 [ 129.849209][ T6565] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.849234][ T6565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.849251][ T6565] ? clear_bhb_loop+0x60/0xb0 [ 129.849274][ T6565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.849291][ T6565] RIP: 0033:0x7fefe378e929 [ 129.849306][ T6565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.849321][ T6565] RSP: 002b:00007fefe46d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 129.849339][ T6565] RAX: ffffffffffffffda RBX: 00007fefe39b5fa0 RCX: 00007fefe378e929 [ 129.849352][ T6565] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000500 [ 129.849364][ T6565] RBP: 00007fefe46d5090 R08: 0000000000000000 R09: 0000000000000000 [ 129.849374][ T6565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.849384][ T6565] R13: 0000000000000000 R14: 00007fefe39b5fa0 R15: 00007fefe3adfa28 [ 129.849412][ T6565] [ 130.237582][ T5939] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 130.382686][ T5939] usb 2-1: device descriptor read/64, error -71 [ 130.501819][ T5939] usb usb2-port1: attempt power cycle [ 131.050107][ T5939] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 131.092048][ T5939] usb 2-1: device descriptor read/8, error -71 [ 131.131054][ T9] usb 3-1: USB disconnect, device number 12 [ 131.478296][ T5939] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 131.606864][ T5939] usb 2-1: device descriptor read/8, error -71 [ 131.750394][ T5939] usb usb2-port1: unable to enumerate USB device [ 131.756790][ T6601] capability: warning: `syz.0.212' uses deprecated v2 capabilities in a way that may be insecure [ 131.785999][ T6601] fuse: Bad value for 'rootmode' [ 131.870175][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 131.910062][ T1208] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 131.938822][ T6603] tipc: Started in network mode [ 131.950172][ T6603] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 131.959358][ T6603] tipc: Enabling of bearer rejected, failed to enable media [ 132.030148][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 132.042320][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 132.061750][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.070458][ T1208] usb 5-1: Using ep0 maxpacket: 16 [ 132.077831][ T1208] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 132.090085][ T9] usb 3-1: Product: syz [ 132.094280][ T9] usb 3-1: Manufacturer: syz [ 132.098977][ T9] usb 3-1: SerialNumber: syz [ 132.106030][ T1208] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.123270][ T1208] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.135307][ T9] usb 3-1: config 0 descriptor?? [ 132.147730][ T1208] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.157203][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.175028][ T1208] usb 5-1: Product: syz [ 132.179239][ T1208] usb 5-1: Manufacturer: syz [ 132.194248][ T1208] usb 5-1: SerialNumber: syz [ 132.349498][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 132.675029][ T1208] usb 5-1: 0:2 : does not exist [ 132.712622][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.719147][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.295556][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.211'. [ 133.310364][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.211'. [ 133.319262][ T6595] netlink: 'syz.4.211': attribute type 14 has an invalid length. [ 133.399011][ T1208] usb 5-1: USB disconnect, device number 8 [ 133.427398][ T6417] udevd[6417]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.820225][ T5939] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 134.131435][ T5939] usb 1-1: config 0 has no interfaces? [ 134.182079][ T5939] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 134.199570][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.228591][ T5939] usb 1-1: Product: syz [ 134.242185][ T5939] usb 1-1: Manufacturer: syz [ 134.276111][ T5939] usb 1-1: SerialNumber: syz [ 134.302557][ T5939] usb 1-1: config 0 descriptor?? [ 134.777646][ T6624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.787808][ T6624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.804873][ T6624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.814855][ T6624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.825592][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 134.911797][ T6632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.927461][ T9] usb 3-1: USB disconnect, device number 13 [ 135.376347][ T6645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.223'. [ 135.667558][ T6647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.225'. [ 136.303114][ T6651] fuse: Bad value for 'user_id' [ 136.308651][ T6651] fuse: Bad value for 'user_id' [ 136.588052][ T6654] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.596984][ T6654] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.605904][ T6654] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.615376][ T6654] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.663870][ T6654] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 137.529901][ T6663] FAULT_INJECTION: forcing a failure. [ 137.529901][ T6663] name failslab, interval 1, probability 0, space 0, times 0 [ 137.558936][ T6663] CPU: 1 UID: 0 PID: 6663 Comm: syz.1.230 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 137.558956][ T6663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.558965][ T6663] Call Trace: [ 137.558970][ T6663] [ 137.558976][ T6663] dump_stack_lvl+0x189/0x250 [ 137.559002][ T6663] ? __pfx____ratelimit+0x10/0x10 [ 137.559022][ T6663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.559043][ T6663] ? __pfx__printk+0x10/0x10 [ 137.559061][ T6663] ? __pfx___might_resched+0x10/0x10 [ 137.559081][ T6663] ? fs_reclaim_acquire+0x7d/0x100 [ 137.559106][ T6663] should_fail_ex+0x414/0x560 [ 137.559126][ T6663] should_failslab+0xa8/0x100 [ 137.559141][ T6663] __kmalloc_node_noprof+0xd1/0x4e0 [ 137.559154][ T6663] ? crypto_create_tfm_node+0x83/0x3f0 [ 137.559170][ T6663] crypto_create_tfm_node+0x83/0x3f0 [ 137.559186][ T6663] crypto_alloc_tfm_node+0x172/0x3f0 [ 137.559205][ T6663] kdf_alloc+0x21/0x100 [ 137.559225][ T6663] __keyctl_dh_compute+0x455/0xca0 [ 137.559250][ T6663] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 137.559269][ T6663] ? __lock_acquire+0xab9/0xd20 [ 137.559294][ T6663] ? __might_fault+0xb0/0x130 [ 137.559321][ T6663] keyctl_dh_compute+0x109/0x160 [ 137.559342][ T6663] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 137.559373][ T6663] __se_sys_keyctl+0x423/0x910 [ 137.559389][ T6663] ? __pfx___se_sys_keyctl+0x10/0x10 [ 137.559406][ T6663] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 137.559429][ T6663] ? __fget_files+0x3a0/0x420 [ 137.559448][ T6663] ? fput+0xa0/0xd0 [ 137.559465][ T6663] ? ksys_write+0x22a/0x250 [ 137.559478][ T6663] ? __pfx_ksys_write+0x10/0x10 [ 137.559488][ T6663] ? rcu_is_watching+0x15/0xb0 [ 137.559512][ T6663] ? do_syscall_64+0xbe/0x3b0 [ 137.559531][ T6663] ? __x64_sys_keyctl+0x20/0xc0 [ 137.559546][ T6663] do_syscall_64+0xfa/0x3b0 [ 137.559565][ T6663] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.559583][ T6663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.559596][ T6663] ? clear_bhb_loop+0x60/0xb0 [ 137.559612][ T6663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.559625][ T6663] RIP: 0033:0x7f530618e929 [ 137.559637][ T6663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.559648][ T6663] RSP: 002b:00007f5306f2f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 137.559662][ T6663] RAX: ffffffffffffffda RBX: 00007f53063b5fa0 RCX: 00007f530618e929 [ 137.559672][ T6663] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000017 [ 137.559680][ T6663] RBP: 00007f5306f2f090 R08: 0000200000000180 R09: 0000000000000000 [ 137.559689][ T6663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.559696][ T6663] R13: 0000000000000000 R14: 00007f53063b5fa0 R15: 00007f53064dfa28 [ 137.559726][ T6663] [ 137.559732][ T6663] could not allocate digest TFM handle sha3-512-generic [ 137.875505][ T5917] usb 1-1: USB disconnect, device number 10 [ 138.075409][ T6666] input: syz1 as /devices/virtual/input/input8 [ 138.081882][ T6666] input: failed to attach handler leds to device input8, error: -6 [ 138.400096][ T5919] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 138.439790][ T6673] netlink: 'syz.2.233': attribute type 4 has an invalid length. [ 138.620060][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 138.627956][ T5919] usb 1-1: config 0 has an invalid interface descriptor of length 5, skipping [ 138.659664][ T5919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.726272][ T5919] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 138.781525][ T5919] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice= 3.be [ 138.805134][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.828162][ T5919] usb 1-1: config 0 descriptor?? [ 139.070489][ T5919] usb 1-1: USB disconnect, device number 11 [ 139.160066][ T5917] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 139.500149][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 139.512383][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.522516][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.537192][ T5917] usb 2-1: unable to get BOS descriptor or descriptor too short [ 139.545131][ T5917] usb 2-1: no configurations [ 139.679108][ T5917] usb 2-1: can't read configurations, error -22 [ 139.694236][ T6686] netlink: 'syz.0.237': attribute type 10 has an invalid length. [ 139.713143][ T6686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.721806][ T6686] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 139.994028][ T6693] IPv6: NLM_F_REPLACE set, but no existing node found! [ 140.982195][ T5919] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 141.268785][ T5919] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 141.323483][ T5919] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 141.439547][ T5919] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 141.505027][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.835290][ T5919] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 141.877872][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 141.982920][ T5939] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 142.066789][ T6721] delete_channel: no stack [ 142.198446][ T5919] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 142.200438][ T5939] usb 3-1: Using ep0 maxpacket: 8 [ 142.235229][ T5919] usb 5-1: USB disconnect, device number 9 [ 142.339324][ T5939] usb 3-1: unable to get BOS descriptor or descriptor too short [ 142.714922][ T5939] usb 3-1: config 8 has an invalid interface number: 24 but max is 1 [ 143.202636][ T5939] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 143.379990][ T5939] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 143.578720][ T5939] usb 3-1: config 8 has no interface number 0 [ 143.590905][ T6758] fuse: Bad value for 'user_id' [ 143.595845][ T6758] fuse: Bad value for 'user_id' [ 143.705505][ T5939] usb 3-1: config 8 interface 24 altsetting 2 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 143.755035][ T5939] usb 3-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 144.115211][ T5939] usb 3-1: config 8 interface 24 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 144.135341][ T5939] usb 3-1: config 8 interface 24 has no altsetting 0 [ 144.384776][ T5939] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 144.403007][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.630043][ T5939] usb 3-1: Product: syz [ 144.640044][ T5939] usb 3-1: Manufacturer: syz [ 144.644682][ T5939] usb 3-1: SerialNumber: syz [ 144.702863][ T5939] usb 3-1: can't set config #8, error -71 [ 144.721646][ T5939] usb 3-1: USB disconnect, device number 14 [ 145.247306][ T6770] netlink: 132 bytes leftover after parsing attributes in process `syz.2.263'. [ 145.265494][ T6772] x_tables: duplicate underflow at hook 2 [ 145.396915][ T6772] Cannot find add_set index 0 as target [ 145.600093][ T5917] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 145.607525][ T6777] tipc: Cannot configure node identity twice [ 145.783908][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 145.810911][ T5917] usb 3-1: config 8 has an invalid interface number: 206 but max is 0 [ 145.819112][ T5917] usb 3-1: config 8 has no interface number 0 [ 145.841321][ T5917] usb 3-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 145.846839][ T6784] fuse: Bad value for 'rootmode' [ 145.854758][ T5917] usb 3-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 145.854789][ T5917] usb 3-1: config 8 interface 206 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 145.854810][ T5917] usb 3-1: config 8 interface 206 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 145.854835][ T5917] usb 3-1: config 8 interface 206 has no altsetting 0 [ 145.857105][ T5917] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 145.920806][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.930309][ T5917] usb 3-1: Product: syz [ 145.934498][ T5917] usb 3-1: Manufacturer: syz [ 145.939100][ T5917] usb 3-1: SerialNumber: syz [ 146.022528][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 146.061209][ T6786] netlink: 20 bytes leftover after parsing attributes in process `syz.1.268'. [ 147.574872][ T5917] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected [ 147.652548][ T5917] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 147.688299][ T5917] usb 3-1: USB disconnect, device number 15 [ 147.730411][ T5917] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 147.768871][ T5917] garmin_gps 3-1:8.206: device disconnected [ 148.850089][ T43] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 149.050267][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 149.112450][ T43] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 149.136517][ T43] usb 1-1: config 0 has no interface number 0 [ 149.164036][ T43] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 149.175365][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.187512][ T43] usb 1-1: Product: syz [ 149.192739][ T43] usb 1-1: Manufacturer: syz [ 149.197584][ T43] usb 1-1: SerialNumber: syz [ 149.220687][ T43] usb 1-1: config 0 descriptor?? [ 149.246389][ T43] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 149.310927][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 149.331162][ T6819] hsr0: entered promiscuous mode [ 149.450962][ T43] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 149.503432][ T43] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 149.644620][ T6808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.662934][ T6808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.887045][ T43] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 149.965219][ T6808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.274'. [ 150.066820][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 150.076725][ T5917] usb 1-1: USB disconnect, device number 12 [ 150.085470][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 150.091483][ T5917] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 150.113334][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 150.134099][ T5917] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 150.158191][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 150.190662][ T5917] quatech2 1-1:0.51: device disconnected [ 150.196437][ T43] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 150.217647][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.241012][ T43] usb 3-1: config 0 descriptor?? [ 150.538473][ T6843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.576963][ T6843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.720217][ T5888] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 150.870138][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 150.930174][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.942079][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.991660][ T5888] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 151.006276][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.096433][ T5888] usb 1-1: config 0 descriptor?? [ 151.388457][ T6854] fuse: Bad value for 'user_id' [ 151.410347][ T6854] fuse: Bad value for 'user_id' [ 151.541077][ T5888] usbhid 1-1:0.0: can't add hid device: -71 [ 151.555441][ T5888] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 151.586523][ T5888] usb 1-1: USB disconnect, device number 13 [ 152.567797][ T6866] tipc: Enabling of bearer rejected, failed to enable media [ 152.641531][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 152.678996][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 152.738757][ T6868] loop4: detected capacity change from 0 to 524255232 [ 152.750473][ T43] usb 3-1: USB disconnect, device number 16 [ 152.842031][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.294'. [ 152.859592][ T6875] Cannot find add_set index 1 as target [ 153.590383][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 154.093009][ T6872] team0 (unregistering): Port device team_slave_0 removed [ 154.130040][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 154.164804][ T6872] team0 (unregistering): Port device team_slave_1 removed [ 154.209310][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 154.272542][ T9] usb 4-1: config 8 has an invalid interface number: 24 but max is 1 [ 154.390882][ T9] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 154.405154][ T9] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 154.414191][ T9] usb 4-1: config 8 has no interface number 0 [ 154.434149][ T9] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 154.546741][ T6893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.296'. [ 154.555887][ T9] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 154.597899][ T9] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 154.687102][ T9] usb 4-1: config 8 interface 24 has no altsetting 0 [ 154.705097][ T6897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'. [ 154.756253][ T9] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 154.765769][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.804285][ T9] usb 4-1: Product: syz [ 154.860055][ T9] usb 4-1: Manufacturer: syz [ 154.879828][ T9] usb 4-1: SerialNumber: syz [ 155.124048][ T6884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.134273][ T6884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.982428][ T5939] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 155.990171][ T43] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 156.184415][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.195481][ T5939] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 156.203721][ T5939] usb 5-1: config 0 has no interface number 0 [ 156.216040][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.264179][ T5939] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 156.294206][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.383156][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.405973][ T43] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.415592][ T5939] usb 5-1: Product: syz [ 156.421213][ T5939] usb 5-1: Manufacturer: syz [ 156.440609][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.448771][ T5939] usb 5-1: SerialNumber: syz [ 156.494868][ T5939] usb 5-1: config 0 descriptor?? [ 156.501521][ T43] usb 3-1: config 0 descriptor?? [ 157.044832][ T6925] fuse: Bad value for 'user_id' [ 157.049767][ T6925] fuse: Bad value for 'user_id' [ 157.221792][ T9] vmk80xx 4-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 157.257453][ T9] vmk80xx 4-1:8.24: probe with driver vmk80xx failed with error -22 [ 157.334117][ T9] usb 4-1: USB disconnect, device number 13 [ 157.465532][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.305'. [ 157.601960][ T6911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.630506][ T6911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.681418][ T5939] asix 5-1:0.239 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 158.744457][ T5939] asix 5-1:0.239: probe with driver asix failed with error -71 [ 158.830004][ T5939] usb 5-1: USB disconnect, device number 10 [ 159.145773][ T6954] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 160.017188][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 160.039358][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 160.113212][ T6959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.315'. [ 160.122654][ T43] usb 3-1: USB disconnect, device number 17 [ 160.450505][ T6962] tipc: Enabling of bearer rejected, failed to enable media [ 160.516106][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.314'. [ 160.592411][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.314'. [ 160.610645][ T6965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.317'. [ 160.619712][ T6965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.317'. [ 160.633551][ T6965] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 160.871253][ T6965] bond1: entered allmulticast mode [ 160.907415][ T6965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.188519][ T6991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.326'. [ 162.298610][ T6991] bond0: entered promiscuous mode [ 162.317995][ T9] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 162.322344][ T6997] fuse: Bad value for 'user_id' [ 162.330603][ T6997] fuse: Bad value for 'user_id' [ 162.358043][ T6991] bond_slave_0: entered promiscuous mode [ 162.364748][ T6991] bond_slave_1: entered promiscuous mode [ 162.371506][ T6991] vxlan0: entered promiscuous mode [ 162.378389][ T6991] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 163.023325][ T6991] bond0: left promiscuous mode [ 163.028147][ T6991] bond_slave_0: left promiscuous mode [ 163.050203][ T6995] fuse: Bad value for 'fd' [ 163.056369][ T6991] bond_slave_1: left promiscuous mode [ 163.103898][ T6991] vxlan0: left promiscuous mode [ 163.111803][ T9] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 163.127084][ T9] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 163.145306][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.400110][ T9] usb 5-1: Product: syz [ 163.411987][ T9] usb 5-1: Manufacturer: syz [ 163.417304][ T9] usb 5-1: SerialNumber: syz [ 163.445852][ T9] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 163.870891][ T9] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 165.083281][ T7025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.099010][ T7030] program syz.2.337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.121991][ T7025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.546455][ T7042] netlink: 36 bytes leftover after parsing attributes in process `syz.1.340'. [ 165.667633][ T7042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.340'. [ 165.683484][ T7042] netlink: 36 bytes leftover after parsing attributes in process `syz.1.340'. [ 165.697323][ T7044] loop2: detected capacity change from 0 to 7 [ 165.698279][ T7042] netlink: 36 bytes leftover after parsing attributes in process `syz.1.340'. [ 165.730374][ T5828] loop2: p1 p4 [ 165.733962][ T5828] loop2: partition table partially beyond EOD, truncated [ 165.745920][ T5828] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 165.805347][ T7044] loop2: p1 p4 [ 165.810400][ T7044] loop2: partition table partially beyond EOD, truncated [ 165.819131][ T7044] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 165.924175][ T6417] udevd[6417]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 165.928143][ T5828] udevd[5828]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 165.987335][ T6417] udevd[6417]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 166.000008][ T5828] udevd[5828]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 166.162371][ T1208] usb 5-1: USB disconnect, device number 11 [ 166.200717][ T7050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.342'. [ 166.300032][ T5919] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 166.493771][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.344'. [ 166.531688][ T5919] usb 4-1: config 0 has no interfaces? [ 166.541529][ T5919] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 166.559357][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.608600][ T5919] usb 4-1: Product: syz [ 166.624785][ T5919] usb 4-1: Manufacturer: syz [ 166.643027][ T5919] usb 4-1: SerialNumber: syz [ 166.670516][ T5919] usb 4-1: config 0 descriptor?? [ 166.809197][ T7068] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.852036][ T7069] netlink: 'syz.0.345': attribute type 9 has an invalid length. [ 166.881153][ T7069] netlink: 212160 bytes leftover after parsing attributes in process `syz.0.345'. [ 166.915509][ T7048] netlink: 'syz.3.341': attribute type 12 has an invalid length. [ 166.924497][ T7048] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.341'. [ 167.014337][ T5919] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 167.160624][ T5919] usb 2-1: device descriptor read/64, error -71 [ 167.400136][ T5919] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 167.544119][ T5919] usb 2-1: device descriptor read/64, error -71 [ 167.684762][ T5919] usb usb2-port1: attempt power cycle [ 167.995971][ T7085] xt_SECMARK: invalid mode: 2 [ 168.105723][ T7087] fuse: Bad value for 'rootmode' [ 168.113623][ T5919] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 168.278336][ T5919] usb 2-1: device descriptor read/8, error -71 [ 168.741238][ T5919] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 168.798841][ T5919] usb 2-1: device descriptor read/8, error -71 [ 169.032999][ T5919] usb usb2-port1: unable to enumerate USB device [ 169.046029][ T9] usb 4-1: USB disconnect, device number 14 [ 169.123344][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 169.171005][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 169.624736][ T7109] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 169.917769][ T7117] tipc: Enabling of bearer rejected, failed to enable media [ 170.971408][ T7136] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.066511][ T7134] autofs4:pid:7134:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 171.188860][ T7138] loop4: detected capacity change from 0 to 524255232 [ 171.200117][ T7134] autofs4:pid:7134:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 171.250785][ T7138] __nla_validate_parse: 3 callbacks suppressed [ 171.250803][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.372'. [ 171.376464][ T7148] netlink: 'syz.0.376': attribute type 12 has an invalid length. [ 171.536534][ T7148] netlink: 'syz.0.376': attribute type 29 has an invalid length. [ 171.607489][ T7148] netlink: 148 bytes leftover after parsing attributes in process `syz.0.376'. [ 171.668528][ T7148] netlink: 59 bytes leftover after parsing attributes in process `syz.0.376'. [ 172.614799][ T7175] fuse: Bad value for 'rootmode' [ 174.030358][ T5919] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 174.739685][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 174.786338][ T5919] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 174.818890][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.828134][ T5919] usb 3-1: Product: syz [ 174.835103][ T5919] usb 3-1: Manufacturer: syz [ 174.839802][ T5919] usb 3-1: SerialNumber: syz [ 174.849251][ T5919] usb 3-1: config 0 descriptor?? [ 174.869077][ T5919] gspca_main: se401-2.14.0 probing 047d:5003 [ 175.266548][ T5919] gspca_se401: ExtraFeatures: 48 [ 175.642225][ T7214] netlink: 'syz.3.394': attribute type 11 has an invalid length. [ 175.988093][ T7222] syz.1.395 uses obsolete (PF_INET,SOCK_PACKET) [ 176.328584][ T5919] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 176.947101][ T5939] usb 3-1: USB disconnect, device number 18 [ 177.624608][ T7262] xt_SECMARK: invalid mode: 2 [ 177.670324][ T5939] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 177.851777][ T5939] usb 1-1: config 0 has an invalid interface number: 147 but max is 0 [ 177.894916][ T5939] usb 1-1: config 0 has no interface number 0 [ 177.917396][ T5939] usb 1-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 177.978793][ T5939] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 178.004817][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.038674][ T5939] usb 1-1: Product: syz [ 178.058851][ T5939] usb 1-1: Manufacturer: syz [ 178.069140][ T5939] usb 1-1: SerialNumber: syz [ 178.085334][ T5939] usb 1-1: config 0 descriptor?? [ 178.097342][ T7250] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 178.152181][ T5939] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 178.341973][ T1208] usb 1-1: USB disconnect, device number 14 [ 178.348056][ T1044] usb 1-1: Failed to submit usb control message: -71 [ 178.357770][ T1044] usb 1-1: unable to send the bmi data to the device: -71 [ 178.416078][ T1044] usb 1-1: unable to get target info from device [ 178.431127][ T5901] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 178.445335][ T1044] usb 1-1: could not get target info (-71) [ 178.483531][ T1044] usb 1-1: could not probe fw (-71) [ 178.645407][ T5901] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 178.668632][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0 [ 178.693860][ T5901] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 178.725889][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 178.730434][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 178.769992][ T5901] usb 2-1: Product: syz [ 178.774282][ T5901] usb 2-1: Manufacturer: syz [ 178.789314][ T5901] usb 2-1: SerialNumber: syz [ 178.802697][ T5901] usb 2-1: config 0 descriptor?? [ 178.810227][ T43] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 178.847597][ T5901] usb 2-1: selecting invalid altsetting 0 [ 178.925839][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 179.000447][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 179.017224][ T7293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.026260][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.080414][ T7293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.092390][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.132632][ T43] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 179.183954][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.232503][ T43] usb 5-1: config 0 descriptor?? [ 179.407470][ T1208] usb 2-1: USB disconnect, device number 24 [ 179.541185][ T5939] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 179.687984][ T43] greenasia 0003:0E8F:0012.0005: item fetching failed at offset 0/3 [ 179.698218][ T43] greenasia 0003:0E8F:0012.0005: parse failed [ 179.704897][ T43] greenasia 0003:0E8F:0012.0005: probe with driver greenasia failed with error -22 [ 179.750204][ T5939] usb 1-1: Using ep0 maxpacket: 16 [ 179.763148][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 179.799576][ T5939] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 179.881358][ T5939] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 180.010458][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.037619][ T5939] usb 1-1: config 0 descriptor?? [ 180.246252][ T7313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.276079][ T7299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.288941][ T7313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.301206][ T7299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.321446][ T7299] netlink: 108 bytes leftover after parsing attributes in process `syz.0.412'. [ 180.345965][ T5939] usbhid 1-1:0.0: can't add hid device: -71 [ 180.364164][ T5939] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 180.404812][ T5939] usb 1-1: USB disconnect, device number 15 [ 180.461259][ T7313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.486929][ T7313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.554667][ T7315] block device autoloading is deprecated and will be removed. [ 180.618457][ T7315] syz.4.410: attempt to access beyond end of device [ 180.618457][ T7315] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 181.503967][ T30] audit: type=1326 audit(1751105162.993:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.0.417" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ab218e929 code=0x0 [ 181.530349][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 181.544811][ T9] usb 3-1: no configurations [ 181.563095][ T9] usb 3-1: can't read configurations, error -22 [ 181.824067][ T5939] usb 5-1: USB disconnect, device number 12 [ 182.831890][ T5939] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 183.094860][ T5939] usb 5-1: Using ep0 maxpacket: 32 [ 183.119693][ T5939] usb 5-1: config 0 has an invalid interface number: 12 but max is 2 [ 183.138977][ T5939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 183.166546][ T5939] usb 5-1: config 0 has no interface number 0 [ 183.317993][ T5939] usb 5-1: config 0 interface 12 has no altsetting 0 [ 183.342603][ T5939] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 183.354324][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.378657][ T5939] usb 5-1: Product: syz [ 183.398884][ T5939] usb 5-1: Manufacturer: syz [ 183.427773][ T7312] netlink: 36 bytes leftover after parsing attributes in process `syz.3.414'. [ 183.436800][ T5939] usb 5-1: SerialNumber: syz [ 183.470959][ T5939] usb 5-1: config 0 descriptor?? [ 183.758285][ T7368] binder: 7352:7368 ioctl c0306201 200000000080 returned -14 [ 183.811126][ T7368] binder: 7352:7368 ioctl c02464bb 200000000180 returned -22 [ 184.003413][ T7374] fuse: Bad value for 'user_id' [ 184.008342][ T7374] fuse: Bad value for 'user_id' [ 185.128366][ T5939] f81534 5-1:0.12: required endpoints missing [ 185.161411][ T5939] usb 5-1: USB disconnect, device number 13 [ 185.794893][ T7405] netlink: 'syz.4.429': attribute type 4 has an invalid length. [ 185.943981][ T7409] netlink: 'syz.4.429': attribute type 4 has an invalid length. [ 186.906214][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 186.969355][ T7433] bridge1: entered promiscuous mode [ 187.183581][ T9] usb 3-1: config 0 has an invalid interface number: 95 but max is 0 [ 187.209764][ T9] usb 3-1: config 0 has no interface number 0 [ 187.250241][ T9] usb 3-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 187.332247][ T9] usb 3-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 187.346054][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.364306][ T9] usb 3-1: Product: syz [ 187.394678][ T9] usb 3-1: Manufacturer: syz [ 187.414703][ T7443] FAULT_INJECTION: forcing a failure. [ 187.414703][ T7443] name failslab, interval 1, probability 0, space 0, times 0 [ 187.421444][ T9] usb 3-1: SerialNumber: syz [ 187.471072][ T7443] CPU: 0 UID: 0 PID: 7443 Comm: syz.4.437 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 187.471093][ T7443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.471101][ T7443] Call Trace: [ 187.471107][ T7443] [ 187.471112][ T7443] dump_stack_lvl+0x189/0x250 [ 187.471148][ T7443] ? __pfx____ratelimit+0x10/0x10 [ 187.471167][ T7443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.471187][ T7443] ? __pfx__printk+0x10/0x10 [ 187.471203][ T7443] ? __pfx___might_resched+0x10/0x10 [ 187.471222][ T7443] ? fs_reclaim_acquire+0x7d/0x100 [ 187.471241][ T7443] should_fail_ex+0x414/0x560 [ 187.471259][ T7443] should_failslab+0xa8/0x100 [ 187.471274][ T7443] __kmalloc_noprof+0xcb/0x4f0 [ 187.471285][ T7443] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 187.471303][ T7443] ? sock_kmalloc+0xd6/0x160 [ 187.471323][ T7443] sock_kmalloc+0xd6/0x160 [ 187.471341][ T7443] hash_recvmsg+0x1d4/0x840 [ 187.471361][ T7443] ? __pfx_hash_recvmsg+0x10/0x10 [ 187.471376][ T7443] sock_recvmsg_nosec+0x183/0x1c0 [ 187.471398][ T7443] ____sys_recvmsg+0x3aa/0x460 [ 187.471419][ T7443] ? __pfx_____sys_recvmsg+0x10/0x10 [ 187.471444][ T7443] ? import_iovec+0x74/0xa0 [ 187.471458][ T7443] ___sys_recvmsg+0x1b5/0x510 [ 187.471477][ T7443] ? __pfx____sys_recvmsg+0x10/0x10 [ 187.471513][ T7443] ? __might_fault+0xb0/0x130 [ 187.471527][ T7443] do_recvmmsg+0x307/0x770 [ 187.471548][ T7443] ? __pfx_do_recvmmsg+0x10/0x10 [ 187.471581][ T7443] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 187.471633][ T7443] __x64_sys_recvmmsg+0x190/0x240 [ 187.471654][ T7443] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 187.471676][ T7443] ? rcu_is_watching+0x15/0xb0 [ 187.471703][ T7443] ? do_syscall_64+0xbe/0x3b0 [ 187.471729][ T7443] do_syscall_64+0xfa/0x3b0 [ 187.471750][ T7443] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.471770][ T7443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.471785][ T7443] ? clear_bhb_loop+0x60/0xb0 [ 187.471802][ T7443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.471818][ T7443] RIP: 0033:0x7fefe378e929 [ 187.471835][ T7443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.471847][ T7443] RSP: 002b:00007fefe46d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 187.471866][ T7443] RAX: ffffffffffffffda RBX: 00007fefe39b5fa0 RCX: 00007fefe378e929 [ 187.471876][ T7443] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000008 [ 187.471886][ T7443] RBP: 00007fefe46d5090 R08: 0000000000000000 R09: 0000000000000000 [ 187.471894][ T7443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.471903][ T7443] R13: 0000000000000000 R14: 00007fefe39b5fa0 R15: 00007fefe3adfa28 [ 187.471925][ T7443] [ 187.747193][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.852687][ T9] usb 3-1: config 0 descriptor?? [ 187.858605][ T7429] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 188.024596][ T7448] veth1_macvtap: left promiscuous mode [ 188.030282][ T7448] macsec0: entered promiscuous mode [ 188.035492][ T7448] macsec0: entered allmulticast mode [ 188.421848][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 188.429336][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 188.595740][ T9] usb 3-1: USB disconnect, device number 21 [ 189.144762][ T7465] netlink: 28 bytes leftover after parsing attributes in process `syz.1.442'. [ 189.299419][ T7470] fuse: Bad value for 'user_id' [ 189.328903][ T7470] fuse: Bad value for 'user_id' [ 189.589787][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'. [ 190.020028][ T5919] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 190.121906][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 190.282525][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.299189][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.352593][ T5919] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.399242][ T9] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 190.432734][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 190.449542][ T5919] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.461555][ T7501] loop2: detected capacity change from 0 to 7 [ 190.473089][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 190.487481][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.510809][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 190.514904][ T7501] Dev loop2: unable to read RDB block 7 [ 190.527689][ T7501] loop2: unable to read partition table [ 190.536682][ T7501] loop2: partition table beyond EOD, truncated [ 190.543290][ T7501] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 190.571204][ T5919] usb 1-1: config 0 descriptor?? [ 190.695750][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.738178][ T5201] Dev loop2: unable to read RDB block 7 [ 190.748262][ T5201] loop2: unable to read partition table [ 190.754318][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.772939][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.787752][ T9] usb 2-1: config 0 descriptor?? [ 190.800148][ T5201] loop2: partition table beyond EOD, truncated [ 190.813620][ T7489] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 191.281878][ T7489] program syz.1.451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.291530][ T7489] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 191.305016][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 191.345008][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 191.367958][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 191.394202][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 191.440161][ T5888] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 191.452776][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 191.480644][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 191.539843][ T9] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 191.604709][ T9] usb 2-1: USB disconnect, device number 25 [ 191.637584][ T5888] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 191.652574][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.449'. [ 191.694559][ T5888] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 191.733466][ T5888] usb 3-1: config 220 has no interface number 2 [ 191.750778][ T5888] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 191.778410][ T5888] usb 3-1: config 220 interface 0 has no altsetting 0 [ 191.797409][ T5888] usb 3-1: config 220 interface 76 has no altsetting 0 [ 191.834943][ T7518] fido_id[7518]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 191.860028][ T5939] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 191.970939][ T5888] usb 3-1: config 220 interface 1 has no altsetting 0 [ 191.997083][ T5888] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 192.007258][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.018742][ T5888] usb 3-1: Product: syz [ 192.026421][ T5888] usb 3-1: Manufacturer: syz [ 192.031355][ T5939] usb 4-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 192.033488][ T5888] usb 3-1: SerialNumber: syz [ 192.148378][ T5939] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 192.194000][ T5939] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 192.246055][ T7523] fuse: Unknown parameter 'rgotmode' [ 192.258748][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.274193][ T5888] usb 3-1: selecting invalid altsetting 0 [ 192.298092][ T5939] usb 4-1: config 0 descriptor?? [ 192.299177][ T5888] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 192.328268][ T5939] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 192.332396][ T5888] usb 3-1: No valid video chain found. [ 192.450531][ T5888] usb 3-1: selecting invalid altsetting 0 [ 192.461436][ T5888] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 192.495708][ T5888] usb 3-1: USB disconnect, device number 22 [ 192.590126][ T1208] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 192.769825][ T1208] usb 5-1: not running at top speed; connect to a high speed hub [ 192.799409][ T1208] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 192.814988][ T1208] usb 5-1: config 1 interface 0 has no altsetting 0 [ 192.824681][ T1208] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.840058][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.867257][ T1208] usb 5-1: Product: 숕锜㕮蕇呺鷹䊙玥뿚䆚妬덋￑䆨ꇜ蜤ᾉ㔳鷇᫺拧慨蘙ꗌᕌ愅㫫᳹粆᪑䷯玲籡폜퉱ᅞ꓍嬱ⵁ녺쎷ɋ쓵榑刳쯝㋏鳓⤆艡㳾츢欲ꯔ䅶芳囧꿍䢉찧뼯鍁퐘銩述ᖫö꣎索앏紝杝偋쯝 [ 192.945887][ T1208] usb 5-1: Manufacturer: ∳≩⊏㌚菥뒟ᴇ쭰폭䢩岬죦덦應懇挅礛㍷穯ఱᩡ㪠饐剸れª᯿⠾䋘ᢃ쿇롹齦膉점ﲒꟑ吼ᙓ黿 [ 193.008328][ T7529] loop8: detected capacity change from 0 to 79 [ 193.019146][ T1208] usb 5-1: SerialNumber: ꅊ﨣៴顑뤳祩佚龕䁣͏ਡ핢沨ᰨㅝ孜娱챜ᏽ饤⏾䳨貹᠁జ矃ꬉ듨㟦봪檬膞☤ᣢ衵곘肵Ꝗ⯵隌桱냬鿜优쁌ꎨ毓半역賾灰炜릜ప馣㾘ਥⷠ瀦噩臔レ妞띪邟ﯛ⤍ꟓ蓍甅ᗝ줲徶獌툃뻸拾ປꎯ퉭澜祷豗ヮﷻ瀑놇 [ 193.116240][ T5917] usb 4-1: USB disconnect, device number 15 [ 193.140351][ T7529] loop8: detected capacity change from 79 to 78 [ 193.175209][ T7525] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 193.494184][ T7535] tipc: Failed to remove unknown binding: 66,1,1/0:3242644866/3242644868 [ 193.511972][ T7535] tipc: Failed to remove unknown binding: 66,1,1/0:3242644866/3242644868 [ 193.544324][ T7535] tipc: Failed to remove unknown binding: 66,1,1/0:3242644866/3242644868 [ 193.618242][ T5919] usbhid 1-1:0.0: can't add hid device: -71 [ 193.664098][ T5919] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 193.728592][ T5919] usb 1-1: USB disconnect, device number 16 [ 194.153621][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.164307][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.460787][ T5888] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 194.532341][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 194.622952][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 194.722785][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 194.760188][ T1208] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 194.840736][ T7550] FAULT_INJECTION: forcing a failure. [ 194.840736][ T7550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.850073][ T5888] usb 1-1: config 0 has an invalid interface number: 12 but max is 2 [ 194.874454][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 194.894894][ T7550] CPU: 1 UID: 0 PID: 7550 Comm: syz.3.470 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 194.894919][ T7550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.894931][ T7550] Call Trace: [ 194.894936][ T7550] [ 194.894942][ T7550] dump_stack_lvl+0x189/0x250 [ 194.894965][ T7550] ? __pfx____ratelimit+0x10/0x10 [ 194.894984][ T7550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.895004][ T7550] ? __pfx__printk+0x10/0x10 [ 194.895018][ T7550] ? __might_fault+0xb0/0x130 [ 194.895038][ T7550] should_fail_ex+0x414/0x560 [ 194.895056][ T7550] _copy_from_user+0x2d/0xb0 [ 194.895069][ T7550] ___sys_recvmsg+0x12e/0x510 [ 194.895089][ T7550] ? __pfx____sys_recvmsg+0x10/0x10 [ 194.895143][ T7550] ? __might_fault+0xb0/0x130 [ 194.895161][ T7550] do_recvmmsg+0x307/0x770 [ 194.895182][ T7550] ? __pfx_do_recvmmsg+0x10/0x10 [ 194.895205][ T7550] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 194.895236][ T7550] __x64_sys_recvmmsg+0x190/0x240 [ 194.895254][ T7550] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 194.895269][ T7550] ? rcu_is_watching+0x15/0xb0 [ 194.895293][ T7550] ? do_syscall_64+0xbe/0x3b0 [ 194.895314][ T7550] do_syscall_64+0xfa/0x3b0 [ 194.895332][ T7550] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.895349][ T7550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.895362][ T7550] ? clear_bhb_loop+0x60/0xb0 [ 194.895377][ T7550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.895389][ T7550] RIP: 0033:0x7f28ffd8e929 [ 194.895400][ T7550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.895412][ T7550] RSP: 002b:00007f2900b96038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 194.895425][ T7550] RAX: ffffffffffffffda RBX: 00007f28fffb5fa0 RCX: 00007f28ffd8e929 [ 194.895434][ T7550] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000008 [ 194.895442][ T7550] RBP: 00007f2900b96090 R08: 0000000000000000 R09: 0000000000000000 [ 194.895450][ T7550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.895457][ T7550] R13: 0000000000000000 R14: 00007f28fffb5fa0 R15: 00007f29000dfa28 [ 194.895476][ T7550] [ 194.918405][ T5888] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 195.127299][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 195.141111][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 195.150509][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.161393][ T1208] usb 5-1: USB disconnect, device number 14 [ 195.172368][ T9] usb 2-1: config 0 descriptor?? [ 195.188824][ T5888] usb 1-1: config 0 has no interface number 0 [ 195.197886][ T5888] usb 1-1: config 0 interface 12 has no altsetting 0 [ 195.215162][ T5888] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 195.225458][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.279836][ T5888] usb 1-1: Product: syz [ 195.284432][ T5888] usb 1-1: Manufacturer: syz [ 195.289444][ T5888] usb 1-1: SerialNumber: syz [ 195.309539][ T5888] usb 1-1: config 0 descriptor?? [ 195.347278][ T7554] sock: sock_timestamping_bind_phc: sock not bind to device [ 195.392042][ T7545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.405959][ T7545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.570010][ T5901] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 195.590154][ T7561] binder: 7542:7561 ioctl c0306201 200000000080 returned -14 [ 195.602463][ T7561] binder: 7542:7561 ioctl c02464bb 200000000180 returned -22 [ 195.760575][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 195.890549][ T7566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.905007][ T7566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.620181][ T5919] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 196.783350][ T5919] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 196.791995][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 196.803640][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 196.814633][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 196.828998][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 196.848522][ T5919] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 196.858758][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.875441][ T5919] usb 5-1: config 0 descriptor?? [ 196.884919][ T7571] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 197.215949][ T5888] f81534 1-1:0.12: required endpoints missing [ 197.242266][ T5888] usb 1-1: USB disconnect, device number 17 [ 197.316050][ T5919] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 197.333076][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 197.339107][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 197.351407][ T5919] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 197.368574][ T9] usb 2-1: USB disconnect, device number 26 [ 197.390028][ T5919] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 197.419028][ T5919] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 197.443331][ T5919] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 197.462463][ T5919] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 197.530326][ T5919] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 197.586972][ T9] usb 5-1: USB disconnect, device number 15 [ 197.760043][ T5917] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 197.919511][ T7580] fido_id[7580]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 197.934089][ T5917] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.949716][ T5917] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.33 [ 197.959120][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.967198][ T5917] usb 1-1: Product: syz [ 197.990296][ T5917] usb 1-1: Manufacturer: syz [ 197.994948][ T5917] usb 1-1: SerialNumber: syz [ 198.346583][ T7577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.367224][ T7577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.421651][ T5901] usb 4-1: unable to get BOS descriptor or descriptor too short [ 198.455350][ T5901] usb 4-1: no configurations [ 198.516883][ T5901] usb 4-1: can't read configurations, error -22 [ 198.970124][ T5901] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 199.138029][ T5901] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 199.163548][ T5901] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 199.186212][ T5901] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt [ 199.213817][ T5901] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.305438][ T5901] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 199.318862][ T5917] cdc_ncm 1-1:1.0: bind() failure [ 199.342447][ T5917] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 199.351637][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.391213][ T5917] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 199.414206][ T5901] usbtmc 4-1:16.0: bulk endpoints not found [ 199.424878][ T5917] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 199.520406][ T5917] usb 1-1: USB disconnect, device number 18 [ 199.620670][ T9] usb 4-1: USB disconnect, device number 17 [ 199.802395][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.481'. [ 199.850021][ T7586] veth0: entered promiscuous mode [ 201.653995][ T7634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.492'. [ 202.030279][ T5917] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 202.049378][ T7642] loop4: detected capacity change from 0 to 524255232 [ 202.172566][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'. [ 202.361335][ T5917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.383767][ T5917] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 202.395533][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.403601][ T5917] usb 5-1: Product: syz [ 202.407752][ T5917] usb 5-1: Manufacturer: syz [ 202.415023][ T5917] usb 5-1: SerialNumber: syz [ 202.588087][ T5917] usb 5-1: config 0 descriptor?? [ 202.629173][ T7648] input: syz0 as /devices/virtual/input/input11 [ 202.735730][ T5917] IPVS: starting estimator thread 0... [ 202.853019][ T7652] IPVS: using max 29 ests per chain, 69600 per kthread [ 203.047022][ T7646] team0 (unregistering): Port device team_slave_0 removed [ 203.197467][ T7646] team0 (unregistering): Port device team_slave_1 removed [ 203.849648][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.498'. [ 204.432931][ T7670] binder: 7669:7670 ioctl c0306201 2000000003c0 returned -14 [ 204.777394][ T7673] fuse: Bad value for 'rootmode' [ 204.850694][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'. [ 204.919321][ T7677] hsr0: entered promiscuous mode [ 205.234489][ T5888] usb 5-1: USB disconnect, device number 16 [ 205.311930][ T7694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.330061][ T5939] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 205.357940][ T7694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.465801][ T7694] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 205.535242][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 205.550613][ T5901] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 205.575664][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.603551][ T5939] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 205.619854][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.641855][ T5939] usb 3-1: config 0 descriptor?? [ 205.740342][ T5917] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 205.891789][ T5917] usb 5-1: config 0 has an invalid interface number: 112 but max is 0 [ 205.990485][ T5917] usb 5-1: config 0 has no interface number 0 [ 205.999757][ T5917] usb 5-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 206.009687][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.023435][ T5917] usb 5-1: Product: syz [ 206.031799][ T5917] usb 5-1: Manufacturer: syz [ 206.041066][ T5917] usb 5-1: SerialNumber: syz [ 206.076830][ T7687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.093898][ T7687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.105631][ T5917] usb 5-1: config 0 descriptor?? [ 206.280768][ T5917] mvusb_mdio 5-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 206.392851][ T9] usb 5-1: USB disconnect, device number 17 [ 206.465762][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 206.465781][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 206.472816][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 206.478268][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 206.484022][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 206.548464][ T7716] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 206.802512][ T5939] usbhid 3-1:0.0: can't add hid device: -71 [ 206.841173][ T5939] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 206.875153][ T5939] usb 3-1: USB disconnect, device number 23 [ 206.915858][ T7724] netlink: 'syz.2.517': attribute type 10 has an invalid length. [ 206.935683][ T7724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.946386][ T7724] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 207.530172][ T5939] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 207.740155][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 207.906569][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.918939][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 207.928685][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.962942][ T9] usb 4-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 207.989965][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.998141][ T7738] loop4: detected capacity change from 0 to 524255232 [ 208.023209][ T9] usb 4-1: config 0 descriptor?? [ 208.040660][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.522'. [ 208.061875][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 208.089131][ T5939] usb 3-1: config 0 has no interfaces? [ 208.108143][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 208.137207][ T5939] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 208.238160][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.347370][ T5939] usb 3-1: Product: syz [ 208.368209][ T5939] usb 3-1: Manufacturer: syz [ 208.416688][ T5939] usb 3-1: SerialNumber: syz [ 208.543218][ T5939] usb 3-1: config 0 descriptor?? [ 208.804167][ T7733] netlink: 'syz.2.518': attribute type 12 has an invalid length. [ 208.812223][ T7733] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.518'. [ 209.168397][ T7757] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.290066][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 209.550037][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 209.563460][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 209.657238][ T9] usb 1-1: config 0 has no interface number 0 [ 209.762372][ T9] usb 1-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.846137][ T9] usb 1-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.038487][ T9] usb 1-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.072706][ T9] usb 1-1: config 0 interface 2 has no altsetting 0 [ 210.102465][ T9] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 210.223988][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.331934][ T5901] usb 4-1: USB disconnect, device number 18 [ 210.393949][ T9] usb 1-1: config 0 descriptor?? [ 210.630541][ T5939] usb 3-1: USB disconnect, device number 24 [ 210.651032][ T7769] FAULT_INJECTION: forcing a failure. [ 210.651032][ T7769] name failslab, interval 1, probability 0, space 0, times 0 [ 210.700682][ T7769] CPU: 0 UID: 0 PID: 7769 Comm: syz.3.534 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 210.700722][ T7769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.700734][ T7769] Call Trace: [ 210.700741][ T7769] [ 210.700749][ T7769] dump_stack_lvl+0x189/0x250 [ 210.700783][ T7769] ? __pfx____ratelimit+0x10/0x10 [ 210.700813][ T7769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.700842][ T7769] ? __pfx__printk+0x10/0x10 [ 210.700866][ T7769] ? __pfx___might_resched+0x10/0x10 [ 210.700895][ T7769] ? fs_reclaim_acquire+0x7d/0x100 [ 210.700924][ T7769] should_fail_ex+0x414/0x560 [ 210.700953][ T7769] should_failslab+0xa8/0x100 [ 210.700975][ T7769] __kmalloc_noprof+0xcb/0x4f0 [ 210.700992][ T7769] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 210.701019][ T7769] ? sock_kmalloc+0xd6/0x160 [ 210.701047][ T7769] sock_kmalloc+0xd6/0x160 [ 210.701074][ T7769] hash_recvmsg+0x1d4/0x840 [ 210.701104][ T7769] ? __pfx_hash_recvmsg+0x10/0x10 [ 210.701129][ T7769] sock_recvmsg_nosec+0x183/0x1c0 [ 210.701163][ T7769] ____sys_recvmsg+0x3aa/0x460 [ 210.701196][ T7769] ? __pfx_____sys_recvmsg+0x10/0x10 [ 210.701236][ T7769] ? import_iovec+0x74/0xa0 [ 210.701258][ T7769] ___sys_recvmsg+0x1b5/0x510 [ 210.701288][ T7769] ? __pfx____sys_recvmsg+0x10/0x10 [ 210.701343][ T7769] ? __might_fault+0xb0/0x130 [ 210.701366][ T7769] do_recvmmsg+0x307/0x770 [ 210.701398][ T7769] ? __pfx_do_recvmmsg+0x10/0x10 [ 210.701436][ T7769] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 210.701484][ T7769] __x64_sys_recvmmsg+0x190/0x240 [ 210.701512][ T7769] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 210.701535][ T7769] ? rcu_is_watching+0x15/0xb0 [ 210.701571][ T7769] ? do_syscall_64+0xbe/0x3b0 [ 210.701603][ T7769] do_syscall_64+0xfa/0x3b0 [ 210.701631][ T7769] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.701675][ T7769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.701708][ T7769] ? clear_bhb_loop+0x60/0xb0 [ 210.701733][ T7769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.701754][ T7769] RIP: 0033:0x7f28ffd8e929 [ 210.701773][ T7769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.701791][ T7769] RSP: 002b:00007f2900b96038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 210.701814][ T7769] RAX: ffffffffffffffda RBX: 00007f28fffb5fa0 RCX: 00007f28ffd8e929 [ 210.701829][ T7769] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000008 [ 210.701841][ T7769] RBP: 00007f2900b96090 R08: 0000000000000000 R09: 0000000000000000 [ 210.701853][ T7769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 210.701865][ T7769] R13: 0000000000000000 R14: 00007f28fffb5fa0 R15: 00007f29000dfa28 [ 210.701897][ T7769] [ 211.116378][ T9] uclogic 0003:5543:0781.0008: unknown main item tag 0x0 [ 211.123777][ T9] uclogic 0003:5543:0781.0008: unknown main item tag 0x0 [ 211.130915][ T9] uclogic 0003:5543:0781.0008: unknown main item tag 0x0 [ 211.137981][ T9] uclogic 0003:5543:0781.0008: unknown main item tag 0x0 [ 211.145082][ T9] uclogic 0003:5543:0781.0008: unknown main item tag 0x0 [ 211.152194][ T9] uclogic 0003:5543:0781.0008: unknown main item tag 0x0 [ 211.159262][ T9] uclogic 0003:5543:0781.0008: unknown main item tag 0x0 [ 211.211846][ T9] uclogic 0003:5543:0781.0008: hidraw0: USB HID v0.07 Device [HID 5543:0781] on usb-dummy_hcd.0-1/input2 [ 211.233400][ T5939] usb 1-1: USB disconnect, device number 20 [ 211.525462][ T7784] fido_id[7784]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 211.850975][ T7800] loop4: detected capacity change from 0 to 524255232 [ 211.950592][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.543'. [ 212.885828][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 212.916175][ T7822] mmap: syz.1.549 (7822) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 212.967677][ T7822] pim6reg: entered allmulticast mode [ 213.181226][ T9] usb 4-1: config 0 has no interfaces? [ 213.196774][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 213.207921][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.242950][ T9] usb 4-1: Product: syz [ 213.258486][ T9] usb 4-1: Manufacturer: syz [ 213.271382][ T9] usb 4-1: SerialNumber: syz [ 213.308027][ T9] usb 4-1: config 0 descriptor?? [ 213.546212][ T7816] pim6reg: left allmulticast mode [ 213.616950][ T7827] FAULT_INJECTION: forcing a failure. [ 213.616950][ T7827] name failslab, interval 1, probability 0, space 0, times 0 [ 213.642604][ T7814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.661799][ T7814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.690291][ T7827] CPU: 0 UID: 0 PID: 7827 Comm: syz.0.551 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 213.690316][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.690327][ T7827] Call Trace: [ 213.690334][ T7827] [ 213.690342][ T7827] dump_stack_lvl+0x189/0x250 [ 213.690372][ T7827] ? __pfx____ratelimit+0x10/0x10 [ 213.690398][ T7827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.690426][ T7827] ? __pfx__printk+0x10/0x10 [ 213.690458][ T7827] ? __pfx___might_resched+0x10/0x10 [ 213.690490][ T7827] should_fail_ex+0x414/0x560 [ 213.690517][ T7827] should_failslab+0xa8/0x100 [ 213.690538][ T7827] __kmalloc_cache_noprof+0x70/0x3d0 [ 213.690556][ T7827] ? mpi_alloc+0x52/0x140 [ 213.690581][ T7827] mpi_alloc+0x52/0x140 [ 213.690603][ T7827] mpi_read_raw_data+0x139/0x970 [ 213.690632][ T7827] dh_set_secret+0x1c0/0x310 [ 213.690648][ T7827] ? crypto_create_tfm_node+0x83/0x3f0 [ 213.690663][ T7827] ? __pfx_dh_set_secret+0x10/0x10 [ 213.690682][ T7827] ? crypto_alloc_tfm_node+0x3c1/0x3f0 [ 213.690700][ T7827] __keyctl_dh_compute+0x50a/0xca0 [ 213.690725][ T7827] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 213.690743][ T7827] ? __lock_acquire+0xab9/0xd20 [ 213.690767][ T7827] ? __might_fault+0xb0/0x130 [ 213.690793][ T7827] keyctl_dh_compute+0x109/0x160 [ 213.690812][ T7827] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 213.690840][ T7827] __se_sys_keyctl+0x423/0x910 [ 213.690856][ T7827] ? __pfx___se_sys_keyctl+0x10/0x10 [ 213.690872][ T7827] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 213.690895][ T7827] ? __fget_files+0x3a0/0x420 [ 213.690913][ T7827] ? fput+0xa0/0xd0 [ 213.690929][ T7827] ? ksys_write+0x22a/0x250 [ 213.690941][ T7827] ? __pfx_ksys_write+0x10/0x10 [ 213.690951][ T7827] ? rcu_is_watching+0x15/0xb0 [ 213.690974][ T7827] ? do_syscall_64+0xbe/0x3b0 [ 213.690992][ T7827] ? __x64_sys_keyctl+0x20/0xc0 [ 213.691007][ T7827] do_syscall_64+0xfa/0x3b0 [ 213.691025][ T7827] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.691042][ T7827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.691055][ T7827] ? clear_bhb_loop+0x60/0xb0 [ 213.691070][ T7827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.691082][ T7827] RIP: 0033:0x7f4ab218e929 [ 213.691094][ T7827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.691105][ T7827] RSP: 002b:00007f4ab305e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 213.691119][ T7827] RAX: ffffffffffffffda RBX: 00007f4ab23b5fa0 RCX: 00007f4ab218e929 [ 213.691128][ T7827] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000017 [ 213.691136][ T7827] RBP: 00007f4ab305e090 R08: 0000200000000180 R09: 0000000000000000 [ 213.691144][ T7827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 213.691152][ T7827] R13: 0000000000000000 R14: 00007f4ab23b5fa0 R15: 00007f4ab24dfa28 [ 213.691170][ T7827] [ 214.490088][ T5939] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 214.634581][ T5939] usb 2-1: device descriptor read/64, error -71 [ 214.880011][ T5939] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 215.030172][ T5939] usb 2-1: device descriptor read/64, error -71 [ 215.140766][ T5939] usb usb2-port1: attempt power cycle [ 215.500219][ T5939] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 215.531065][ T5939] usb 2-1: device descriptor read/8, error -71 [ 215.610307][ T5919] usb 4-1: USB disconnect, device number 19 [ 215.851459][ T5939] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 216.113919][ T5939] usb 2-1: device descriptor read/8, error -71 [ 216.290648][ T5939] usb usb2-port1: unable to enumerate USB device [ 216.730042][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 216.915118][ T7864] netlink: 'syz.3.562': attribute type 10 has an invalid length. [ 216.966859][ T7864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.996324][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 217.002452][ T7864] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 217.005624][ T9] usb 5-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice= d.2d [ 217.025883][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.025913][ T9] usb 5-1: Product: syz [ 217.025929][ T9] usb 5-1: Manufacturer: syz [ 217.025943][ T9] usb 5-1: SerialNumber: syz [ 217.027077][ T7869] netlink: 60 bytes leftover after parsing attributes in process `syz.2.556'. [ 217.603505][ T9] aqc111 5-1:1.0: probe with driver aqc111 failed with error -22 [ 217.655248][ T9] usb 5-1: USB disconnect, device number 18 [ 218.032061][ T7882] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 218.038756][ T7882] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 218.822128][ T5917] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 219.066061][ T5917] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 219.171118][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.185671][ T5917] usb 2-1: config 0 has no interface number 0 [ 219.192045][ T5917] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 219.203034][ T5917] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.218664][ T5917] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 219.228763][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.237054][ T5917] usb 2-1: Product: syz [ 219.243552][ T5917] usb 2-1: Manufacturer: syz [ 219.250376][ T5917] usb 2-1: SerialNumber: syz [ 219.262074][ T5917] usb 2-1: config 0 descriptor?? [ 219.439838][ T7907] fuse: Bad value for 'group_id' [ 219.461768][ T7907] fuse: Bad value for 'group_id' [ 219.763731][ T7910] netlink: 'syz.3.578': attribute type 10 has an invalid length. [ 219.785849][ T7910] team0: Device dummy0 is up. Set it down before adding it as a team port [ 219.914543][ T5917] usb 2-1: USB disconnect, device number 31 [ 220.068094][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'. [ 220.538414][ T7948] fuse: Bad value for 'user_id' [ 220.543451][ T7948] fuse: Bad value for 'user_id' [ 221.089171][ T7957] loop4: detected capacity change from 0 to 524255232 [ 221.244708][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.592'. [ 221.655831][ T7960] team0 (unregistering): Port device team_slave_0 removed [ 221.666358][ T7960] team0 (unregistering): Port device team_slave_1 removed [ 222.170067][ T5939] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 222.320092][ T5939] usb 4-1: device descriptor read/64, error -71 [ 222.601081][ T5939] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 222.660188][ T5917] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 222.670040][ T5901] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 222.690054][ T5888] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 222.730061][ T5939] usb 4-1: device descriptor read/64, error -71 [ 222.800933][ T5917] usb 5-1: device descriptor read/64, error -71 [ 222.834888][ T5901] usb 2-1: config 0 has an invalid interface number: 184 but max is 2 [ 222.843737][ T5939] usb usb4-port1: attempt power cycle [ 222.846714][ T5888] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.849166][ T5901] usb 2-1: config 0 has an invalid interface number: 196 but max is 2 [ 222.859584][ T5888] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.875184][ T5901] usb 2-1: config 0 has an invalid interface number: 61 but max is 2 [ 222.882375][ T5888] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 222.885124][ T5901] usb 2-1: config 0 has an invalid descriptor of length 164, skipping remainder of the config [ 222.894183][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 222.914841][ T5888] usb 1-1: SerialNumber: syz [ 222.916739][ T5901] usb 2-1: config 0 has no interface number 0 [ 222.927780][ T5901] usb 2-1: config 0 has no interface number 1 [ 222.937543][ T5901] usb 2-1: config 0 has no interface number 2 [ 222.944885][ T5901] usb 2-1: config 0 interface 184 altsetting 14 endpoint 0x9 has invalid maxpacket 32, setting to 8 [ 222.955947][ T5901] usb 2-1: config 0 interface 184 altsetting 14 endpoint 0x8 has invalid maxpacket 1024, setting to 8 [ 222.967013][ T5901] usb 2-1: config 0 interface 184 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 222.978086][ T5901] usb 2-1: config 0 interface 196 altsetting 16 endpoint 0x5 has invalid maxpacket 16, setting to 8 [ 222.988927][ T5901] usb 2-1: config 0 interface 196 altsetting 16 endpoint 0xE is Bulk; changing to Interrupt [ 222.999899][ T5901] usb 2-1: config 0 interface 196 altsetting 16 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 223.010839][ T5901] usb 2-1: config 0 interface 196 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 223.024926][ T5901] usb 2-1: config 0 interface 196 altsetting 16 has a duplicate endpoint with address 0xA, skipping [ 223.037365][ T5901] usb 2-1: config 0 interface 196 altsetting 16 has a duplicate endpoint with address 0xA, skipping [ 223.050015][ T5917] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 223.061776][ T5901] usb 2-1: config 0 interface 196 altsetting 16 has a duplicate endpoint with address 0xA, skipping [ 223.073965][ T5901] usb 2-1: config 0 interface 196 altsetting 16 endpoint 0x87 has invalid maxpacket 32, setting to 8 [ 223.084977][ T5901] usb 2-1: config 0 interface 196 altsetting 16 has a duplicate endpoint with address 0x8, skipping [ 223.095906][ T5901] usb 2-1: config 0 interface 196 altsetting 16 endpoint 0x1 has invalid maxpacket 2046, setting to 8 [ 223.106955][ T5901] usb 2-1: config 0 interface 196 altsetting 16 has a duplicate endpoint with address 0x8, skipping [ 223.117798][ T5901] usb 2-1: config 0 interface 196 altsetting 16 endpoint 0xF has invalid maxpacket 64, setting to 8 [ 223.128659][ T5901] usb 2-1: config 0 interface 196 altsetting 16 has a duplicate endpoint with address 0xE, skipping [ 223.133040][ T5888] usb 1-1: 0:2 : does not exist [ 223.140876][ T5901] usb 2-1: config 0 interface 196 altsetting 16 has a duplicate endpoint with address 0xA, skipping [ 223.155254][ T5901] usb 2-1: config 0 interface 196 altsetting 16 has a duplicate endpoint with address 0x1, skipping [ 223.167138][ T5888] usb 1-1: unit 5: unexpected type 0x03 [ 223.175774][ T5901] usb 2-1: config 0 interface 196 altsetting 16 has a duplicate endpoint with address 0x9, skipping [ 223.186796][ T5901] usb 2-1: config 0 interface 196 altsetting 16 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 223.200970][ T5939] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 223.208704][ T5917] usb 5-1: device descriptor read/64, error -71 [ 223.214559][ T5888] usb 1-1: USB disconnect, device number 21 [ 223.215691][ T5901] usb 2-1: config 0 interface 61 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 223.237514][ T5901] usb 2-1: config 0 interface 184 has no altsetting 0 [ 223.244989][ T5939] usb 4-1: device descriptor read/8, error -71 [ 223.254824][ T5901] usb 2-1: config 0 interface 196 has no altsetting 0 [ 223.259066][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.266708][ T5901] usb 2-1: config 0 interface 61 has no altsetting 0 [ 223.287951][ T5901] usb 2-1: New USB device found, idVendor=0df6, idProduct=0057, bcdDevice=ad.c1 [ 223.298451][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.322474][ T5917] usb usb5-port1: attempt power cycle [ 223.331950][ T5901] usb 2-1: config 0 descriptor?? [ 223.490043][ T5939] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 223.510723][ T5939] usb 4-1: device descriptor read/8, error -71 [ 223.542567][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 223.551745][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 223.563214][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 223.572394][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 223.620864][ T5939] usb usb4-port1: unable to enumerate USB device [ 223.690073][ T5917] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 223.715701][ T5917] usb 5-1: device descriptor read/8, error -71 [ 223.980262][ T5917] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 224.021688][ T5917] usb 5-1: device descriptor read/8, error -71 [ 224.150246][ T5917] usb usb5-port1: unable to enumerate USB device [ 224.487290][ T5901] usb 2-1: string descriptor 0 read error: -71 [ 224.560953][ T5917] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 224.580618][ T5901] usb 2-1: USB disconnect, device number 32 [ 224.775114][ T5917] usb 1-1: config 0 has no interfaces? [ 224.812371][ T5917] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 224.822147][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.832219][ T5917] usb 1-1: Product: syz [ 224.837006][ T5917] usb 1-1: Manufacturer: syz [ 224.842097][ T5917] usb 1-1: SerialNumber: syz [ 224.864866][ T5917] usb 1-1: config 0 descriptor?? [ 225.902020][ T8017] fuse: Bad value for 'user_id' [ 225.907891][ T8017] fuse: Bad value for 'user_id' [ 225.943513][ T8016] netlink: 'syz.4.608': attribute type 10 has an invalid length. [ 227.809767][ T8035] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.613'. [ 228.079295][ T5901] usb 1-1: USB disconnect, device number 22 [ 229.650317][ T5901] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 229.721183][ T8059] xt_CT: You must specify a L4 protocol and not use inversions on it [ 229.835817][ T5901] usb 1-1: config 0 has no interfaces? [ 229.850507][ T5901] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 229.874781][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.898423][ T5901] usb 1-1: Product: syz [ 229.908401][ T5901] usb 1-1: Manufacturer: syz [ 229.953021][ T5901] usb 1-1: SerialNumber: syz [ 230.090800][ T5901] usb 1-1: config 0 descriptor?? [ 230.182525][ T8066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.620'. [ 230.431732][ T8057] netlink: 'syz.0.616': attribute type 12 has an invalid length. [ 230.439615][ T8057] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.616'. [ 230.821342][ T8076] FAULT_INJECTION: forcing a failure. [ 230.821342][ T8076] name failslab, interval 1, probability 0, space 0, times 0 [ 230.837532][ T8076] CPU: 1 UID: 0 PID: 8076 Comm: syz.4.624 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 230.837558][ T8076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 230.837567][ T8076] Call Trace: [ 230.837572][ T8076] [ 230.837577][ T8076] dump_stack_lvl+0x189/0x250 [ 230.837601][ T8076] ? __pfx____ratelimit+0x10/0x10 [ 230.837620][ T8076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.837642][ T8076] ? __pfx__printk+0x10/0x10 [ 230.837658][ T8076] ? __pfx___might_resched+0x10/0x10 [ 230.837678][ T8076] ? fs_reclaim_acquire+0x7d/0x100 [ 230.837696][ T8076] should_fail_ex+0x414/0x560 [ 230.837715][ T8076] should_failslab+0xa8/0x100 [ 230.837730][ T8076] __kmalloc_noprof+0xcb/0x4f0 [ 230.837741][ T8076] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 230.837759][ T8076] ? sock_kmalloc+0xd6/0x160 [ 230.837778][ T8076] sock_kmalloc+0xd6/0x160 [ 230.837795][ T8076] hash_recvmsg+0x1d4/0x840 [ 230.837815][ T8076] ? __pfx_hash_recvmsg+0x10/0x10 [ 230.837831][ T8076] sock_recvmsg_nosec+0x183/0x1c0 [ 230.837852][ T8076] ____sys_recvmsg+0x3aa/0x460 [ 230.837873][ T8076] ? __pfx_____sys_recvmsg+0x10/0x10 [ 230.837904][ T8076] ? import_iovec+0x74/0xa0 [ 230.837918][ T8076] ___sys_recvmsg+0x1b5/0x510 [ 230.837937][ T8076] ? __pfx____sys_recvmsg+0x10/0x10 [ 230.837972][ T8076] ? __might_fault+0xb0/0x130 [ 230.837987][ T8076] do_recvmmsg+0x307/0x770 [ 230.838008][ T8076] ? __pfx_do_recvmmsg+0x10/0x10 [ 230.838031][ T8076] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 230.838063][ T8076] __x64_sys_recvmmsg+0x190/0x240 [ 230.838081][ T8076] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 230.838096][ T8076] ? rcu_is_watching+0x15/0xb0 [ 230.838119][ T8076] ? do_syscall_64+0xbe/0x3b0 [ 230.838140][ T8076] do_syscall_64+0xfa/0x3b0 [ 230.838160][ T8076] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.838177][ T8076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.838190][ T8076] ? clear_bhb_loop+0x60/0xb0 [ 230.838205][ T8076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.838217][ T8076] RIP: 0033:0x7fefe378e929 [ 230.838229][ T8076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.838240][ T8076] RSP: 002b:00007fefe46d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 230.838254][ T8076] RAX: ffffffffffffffda RBX: 00007fefe39b5fa0 RCX: 00007fefe378e929 [ 230.838263][ T8076] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000008 [ 230.838271][ T8076] RBP: 00007fefe46d5090 R08: 0000000000000000 R09: 0000000000000000 [ 230.838279][ T8076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.838286][ T8076] R13: 0000000000000000 R14: 00007fefe39b5fa0 R15: 00007fefe3adfa28 [ 230.838305][ T8076] [ 231.535407][ T8078] netlink: 'syz.4.625': attribute type 10 has an invalid length. [ 231.664195][ T8086] fuse: Bad value for 'user_id' [ 231.669240][ T8086] fuse: Bad value for 'user_id' [ 232.408336][ T8093] fuse: Bad value for 'rootmode' [ 232.603199][ T8100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'. [ 232.800304][ T5917] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 232.950166][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 232.967774][ T5917] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 233.002259][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.054596][ T5917] usb 2-1: Product: syz [ 233.062714][ T5917] usb 2-1: Manufacturer: syz [ 233.077062][ T5917] usb 2-1: SerialNumber: syz [ 233.103639][ T5917] usb 2-1: config 0 descriptor?? [ 233.138157][ T5917] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 233.167108][ T5917] usb 2-1: setting power ON [ 233.185752][ T5917] dvb-usb: bulk message failed: -22 (2/0) [ 233.266256][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 233.281888][ T5901] usb 1-1: USB disconnect, device number 23 [ 233.324768][ T5917] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 233.324834][ T5917] usb 2-1: media controller created [ 233.334561][ T8098] dvb-usb: bulk message failed: -22 (3/0) [ 233.334604][ T8098] dvb-usb: bulk message failed: -22 (4/0) [ 233.389789][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.406750][ T5917] usb 2-1: selecting invalid altsetting 6 [ 233.406819][ T5917] usb 2-1: digital interface selection failed (-22) [ 233.406835][ T5917] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 233.407830][ T5917] usb 2-1: setting power OFF [ 233.407925][ T5917] dvb-usb: bulk message failed: -22 (2/0) [ 233.407963][ T5917] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 233.407977][ T5917] (NULL device *): no alternate interface [ 233.930039][ T5919] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 233.989377][ T5888] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 234.097554][ T5919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.124541][ T5919] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 234.130156][ T5901] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 234.148080][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.156357][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 234.214974][ T5919] usb 1-1: Product: syz [ 234.223354][ T8133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.232219][ T5919] usb 1-1: Manufacturer: syz [ 234.236124][ T8133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.236878][ T5919] usb 1-1: SerialNumber: syz [ 234.268995][ T5919] usb 1-1: config 0 descriptor?? [ 234.290258][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 234.301030][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 234.321302][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 234.372969][ T5901] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 234.385277][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.408154][ T5901] usb 5-1: config 0 descriptor?? [ 234.568092][ T8137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.647'. [ 234.676835][ T8128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.697491][ T8128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.735471][ T5901] usbhid 5-1:0.0: can't add hid device: -71 [ 234.742723][ T5901] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 234.752632][ T8140] netlink: 20 bytes leftover after parsing attributes in process `syz.2.648'. [ 234.765384][ T5901] usb 5-1: USB disconnect, device number 23 [ 235.185343][ T8147] fuse: Bad value for 'user_id' [ 235.190517][ T8147] fuse: Bad value for 'user_id' [ 235.443518][ T8150] FAULT_INJECTION: forcing a failure. [ 235.443518][ T8150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.522339][ T8150] CPU: 0 UID: 0 PID: 8150 Comm: syz.4.651 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 235.522372][ T8150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.522386][ T8150] Call Trace: [ 235.522395][ T8150] [ 235.522402][ T8150] dump_stack_lvl+0x189/0x250 [ 235.522430][ T8150] ? __pfx____ratelimit+0x10/0x10 [ 235.522459][ T8150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.522483][ T8150] ? __pfx__printk+0x10/0x10 [ 235.522499][ T8150] ? __might_fault+0xb0/0x130 [ 235.522522][ T8150] should_fail_ex+0x414/0x560 [ 235.522544][ T8150] _copy_from_user+0x2d/0xb0 [ 235.522559][ T8150] ___sys_recvmsg+0x12e/0x510 [ 235.522583][ T8150] ? __pfx____sys_recvmsg+0x10/0x10 [ 235.522624][ T8150] ? __might_fault+0xb0/0x130 [ 235.522641][ T8150] do_recvmmsg+0x307/0x770 [ 235.522666][ T8150] ? __pfx_do_recvmmsg+0x10/0x10 [ 235.522693][ T8150] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 235.522730][ T8150] __x64_sys_recvmmsg+0x190/0x240 [ 235.522751][ T8150] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 235.522768][ T8150] ? rcu_is_watching+0x15/0xb0 [ 235.522807][ T8150] ? do_syscall_64+0xbe/0x3b0 [ 235.522830][ T8150] do_syscall_64+0xfa/0x3b0 [ 235.522865][ T8150] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.522890][ T8150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.522909][ T8150] ? clear_bhb_loop+0x60/0xb0 [ 235.522930][ T8150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.522948][ T8150] RIP: 0033:0x7fefe378e929 [ 235.522964][ T8150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.522979][ T8150] RSP: 002b:00007fefe46d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 235.522998][ T8150] RAX: ffffffffffffffda RBX: 00007fefe39b5fa0 RCX: 00007fefe378e929 [ 235.523011][ T8150] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000008 [ 235.523023][ T8150] RBP: 00007fefe46d5090 R08: 0000000000000000 R09: 0000000000000000 [ 235.523034][ T8150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 235.523044][ T8150] R13: 0000000000000000 R14: 00007fefe39b5fa0 R15: 00007fefe3adfa28 [ 235.523071][ T8150] [ 235.742836][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.839381][ T5917] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 236.101352][ T5917] usb 2-1: USB disconnect, device number 33 [ 236.419939][ C0] hrtimer: interrupt took 30464 ns [ 236.634498][ T5917] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 236.720372][ T5888] usb 4-1: unable to get BOS descriptor or descriptor too short [ 236.821766][ T5888] usb 4-1: no configurations [ 236.860257][ T5888] usb 4-1: can't read configurations, error -22 [ 236.961162][ T5917] usb 2-1: no configurations [ 236.968688][ T5917] usb 2-1: can't read configurations, error -22 [ 237.110594][ T5919] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 237.119710][ T8121] ------------[ cut here ]------------ [ 237.126068][ T8121] WARNING: CPU: 1 PID: 8121 at drivers/gpu/drm/vkms/vkms_crtc.c:97 vkms_get_vblank_timestamp+0x137/0x160 [ 237.139423][ T8121] Modules linked in: [ 237.144087][ T8121] CPU: 1 UID: 0 PID: 8121 Comm: syz.0.641 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 237.156580][ T8121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.167267][ T8121] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 237.174319][ T8121] Code: 42 80 3c 28 00 74 08 48 89 df e8 14 4b 34 fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 80 4a 7a 05 cc e8 4a c6 d0 fb 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 237.194095][ T8121] RSP: 0018:ffffc9001b73f2e8 EFLAGS: 00010293 [ 237.200237][ T8121] RAX: ffffffff85ef8826 RBX: ffffc9001b73f460 RCX: ffff88802ed33c00 [ 237.208243][ T8121] RDX: 0000000000000000 RSI: 0000003732132ad3 RDI: 0000003732132ad3 [ 237.216282][ T8121] RBP: 1ffff920036e7e8c R08: ffffc900033f9000 R09: 0000000000000000 [ 237.224329][ T8121] R10: ffffc900033f9000 R11: ffffffff85ef86f0 R12: 0000003732132ad3 [ 237.232404][ T8121] R13: dffffc0000000000 R14: ffff8880213ec028 R15: 0000003732132ad3 [ 237.240452][ T8121] FS: 0000000000000000(0000) GS:ffff888125d50000(0000) knlGS:0000000000000000 [ 237.249427][ T8121] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.256095][ T8121] CR2: 00007f54fccbbf98 CR3: 000000005ccea000 CR4: 00000000003526f0 [ 237.264137][ T8121] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 237.272205][ T8121] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 237.280308][ T8121] Call Trace: [ 237.283609][ T8121] [ 237.286569][ T8121] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 237.292829][ T8121] drm_crtc_next_vblank_start+0x223/0x470 [ 237.298602][ T8121] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 237.304924][ T8121] ? drm_gem_fb_vmap+0x230/0x8d0 [ 237.310003][ T8121] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 237.316387][ T8121] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 237.323293][ T8121] ? drm_atomic_helper_prepare_planes+0x670/0xb60 [ 237.329752][ T8121] drm_atomic_helper_commit+0x5c7/0xb10 [ 237.335387][ T8121] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 237.341543][ T8121] drm_atomic_commit+0x262/0x2c0 [ 237.346524][ T8121] ? __pfx_drm_atomic_commit+0x10/0x10 [ 237.352049][ T8121] ? __pfx___drm_printfn_info+0x10/0x10 [ 237.357641][ T8121] ? drm_client_rotation+0x47c/0x5b0 [ 237.363013][ T8121] drm_client_modeset_commit_atomic+0x620/0x760 [ 237.369317][ T8121] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 237.376154][ T8121] ? trace_contention_end+0x39/0x120 [ 237.381553][ T8121] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 237.387782][ T8121] drm_client_modeset_commit+0x4a/0x70 [ 237.393324][ T8121] drm_fb_helper_lastclose+0xa4/0x1c0 [ 237.398732][ T8121] drm_fbdev_client_restore+0x34/0x40 [ 237.404243][ T8121] drm_client_dev_restore+0x139/0x270 [ 237.409695][ T8121] drm_release+0x318/0x3f0 [ 237.414219][ T8121] ? __pfx_drm_release+0x10/0x10 [ 237.419195][ T8121] __fput+0x449/0xa70 [ 237.423272][ T8121] task_work_run+0x1d1/0x260 [ 237.427899][ T8121] ? __pfx_task_work_run+0x10/0x10 [ 237.433136][ T8121] do_exit+0x6b5/0x22e0 [ 237.437322][ T8121] ? do_raw_spin_lock+0x121/0x290 [ 237.442425][ T8121] ? __pfx_do_exit+0x10/0x10 [ 237.447085][ T8121] do_group_exit+0x21c/0x2d0 [ 237.451746][ T8121] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.457013][ T8121] get_signal+0x1286/0x1340 [ 237.461705][ T8121] arch_do_signal_or_restart+0x9a/0x750 [ 237.467303][ T8121] ? count_memcg_event_mm+0x21/0x260 [ 237.472693][ T8121] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 237.478914][ T8121] ? exit_to_user_mode_loop+0x40/0x110 [ 237.484469][ T8121] exit_to_user_mode_loop+0x75/0x110 [ 237.489802][ T8121] do_syscall_64+0x2bd/0x3b0 [ 237.494484][ T8121] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.499719][ T8121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.505870][ T8121] ? clear_bhb_loop+0x60/0xb0 [ 237.510625][ T8121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.516557][ T8121] RIP: 0033:0x7f4ab218e929 [ 237.521072][ T8121] Code: Unable to access opcode bytes at 0x7f4ab218e8ff. [ 237.528118][ T8121] RSP: 002b:00007f4ab303d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 237.536620][ T8121] RAX: 0000000000010106 RBX: 00007f4ab23b6080 RCX: 00007f4ab218e929 [ 237.544644][ T8121] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 237.552707][ T8121] RBP: 00007f4ab2210b39 R08: 0000000000000000 R09: 0000000000000000 [ 237.560749][ T8121] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 237.568735][ T8121] R13: 0000000000000001 R14: 00007f4ab23b6080 R15: 00007f4ab24dfa28 [ 237.576791][ T8121] [ 237.579845][ T8121] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 237.587131][ T8121] CPU: 1 UID: 0 PID: 8121 Comm: syz.0.641 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 237.599045][ T8121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.609130][ T8121] Call Trace: [ 237.612443][ T8121] [ 237.615402][ T8121] dump_stack_lvl+0x99/0x250 [ 237.620022][ T8121] ? __asan_memcpy+0x40/0x70 [ 237.624636][ T8121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.629855][ T8121] ? __pfx__printk+0x10/0x10 [ 237.634476][ T8121] panic+0x2db/0x790 [ 237.638388][ T8121] ? __pfx_panic+0x10/0x10 [ 237.642842][ T8121] ? show_trace_log_lvl+0x4fb/0x550 [ 237.648101][ T8121] __warn+0x31b/0x4b0 [ 237.652129][ T8121] ? vkms_get_vblank_timestamp+0x137/0x160 [ 237.657969][ T8121] ? vkms_get_vblank_timestamp+0x137/0x160 [ 237.663790][ T8121] report_bug+0x2be/0x4f0 [ 237.668139][ T8121] ? vkms_get_vblank_timestamp+0x137/0x160 [ 237.673975][ T8121] ? vkms_get_vblank_timestamp+0x137/0x160 [ 237.679825][ T8121] ? vkms_get_vblank_timestamp+0x139/0x160 [ 237.685667][ T8121] handle_bug+0x84/0x160 [ 237.689935][ T8121] exc_invalid_op+0x1a/0x50 [ 237.694455][ T8121] asm_exc_invalid_op+0x1a/0x20 [ 237.699320][ T8121] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 237.705760][ T8121] Code: 42 80 3c 28 00 74 08 48 89 df e8 14 4b 34 fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 80 4a 7a 05 cc e8 4a c6 d0 fb 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 237.725377][ T8121] RSP: 0018:ffffc9001b73f2e8 EFLAGS: 00010293 [ 237.731456][ T8121] RAX: ffffffff85ef8826 RBX: ffffc9001b73f460 RCX: ffff88802ed33c00 [ 237.739445][ T8121] RDX: 0000000000000000 RSI: 0000003732132ad3 RDI: 0000003732132ad3 [ 237.747437][ T8121] RBP: 1ffff920036e7e8c R08: ffffc900033f9000 R09: 0000000000000000 [ 237.755428][ T8121] R10: ffffc900033f9000 R11: ffffffff85ef86f0 R12: 0000003732132ad3 [ 237.763409][ T8121] R13: dffffc0000000000 R14: ffff8880213ec028 R15: 0000003732132ad3 [ 237.771406][ T8121] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 237.777598][ T8121] ? vkms_get_vblank_timestamp+0x136/0x160 [ 237.783459][ T8121] ? vkms_get_vblank_timestamp+0x136/0x160 [ 237.789293][ T8121] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 237.795479][ T8121] drm_crtc_next_vblank_start+0x223/0x470 [ 237.801225][ T8121] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 237.807498][ T8121] ? drm_gem_fb_vmap+0x230/0x8d0 [ 237.812454][ T8121] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 237.818821][ T8121] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 237.825679][ T8121] ? drm_atomic_helper_prepare_planes+0x670/0xb60 [ 237.832129][ T8121] drm_atomic_helper_commit+0x5c7/0xb10 [ 237.837696][ T8121] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 237.843779][ T8121] drm_atomic_commit+0x262/0x2c0 [ 237.848736][ T8121] ? __pfx_drm_atomic_commit+0x10/0x10 [ 237.854220][ T8121] ? __pfx___drm_printfn_info+0x10/0x10 [ 237.859788][ T8121] ? drm_client_rotation+0x47c/0x5b0 [ 237.865090][ T8121] drm_client_modeset_commit_atomic+0x620/0x760 [ 237.871367][ T8121] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 237.878160][ T8121] ? trace_contention_end+0x39/0x120 [ 237.883490][ T8121] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 237.889670][ T8121] drm_client_modeset_commit+0x4a/0x70 [ 237.895134][ T8121] drm_fb_helper_lastclose+0xa4/0x1c0 [ 237.900531][ T8121] drm_fbdev_client_restore+0x34/0x40 [ 237.905976][ T8121] drm_client_dev_restore+0x139/0x270 [ 237.911508][ T8121] drm_release+0x318/0x3f0 [ 237.915951][ T8121] ? __pfx_drm_release+0x10/0x10 [ 237.920909][ T8121] __fput+0x449/0xa70 [ 237.924911][ T8121] task_work_run+0x1d1/0x260 [ 237.929520][ T8121] ? __pfx_task_work_run+0x10/0x10 [ 237.934657][ T8121] do_exit+0x6b5/0x22e0 [ 237.938831][ T8121] ? do_raw_spin_lock+0x121/0x290 [ 237.943878][ T8121] ? __pfx_do_exit+0x10/0x10 [ 237.948499][ T8121] do_group_exit+0x21c/0x2d0 [ 237.953095][ T8121] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.958310][ T8121] get_signal+0x1286/0x1340 [ 237.962873][ T8121] arch_do_signal_or_restart+0x9a/0x750 [ 237.968444][ T8121] ? count_memcg_event_mm+0x21/0x260 [ 237.973760][ T8121] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 237.979949][ T8121] ? exit_to_user_mode_loop+0x40/0x110 [ 237.985445][ T8121] exit_to_user_mode_loop+0x75/0x110 [ 237.990750][ T8121] do_syscall_64+0x2bd/0x3b0 [ 237.995368][ T8121] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.000586][ T8121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.006659][ T8121] ? clear_bhb_loop+0x60/0xb0 [ 238.011355][ T8121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.017258][ T8121] RIP: 0033:0x7f4ab218e929 [ 238.021696][ T8121] Code: Unable to access opcode bytes at 0x7f4ab218e8ff. [ 238.028732][ T8121] RSP: 002b:00007f4ab303d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 238.037165][ T8121] RAX: 0000000000010106 RBX: 00007f4ab23b6080 RCX: 00007f4ab218e929 [ 238.045151][ T8121] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 238.053127][ T8121] RBP: 00007f4ab2210b39 R08: 0000000000000000 R09: 0000000000000000 [ 238.061109][ T8121] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 238.069091][ T8121] R13: 0000000000000001 R14: 00007f4ab23b6080 R15: 00007f4ab24dfa28 [ 238.077190][ T8121] [ 238.080569][ T8121] Kernel Offset: disabled [ 238.084927][ T8121] Rebooting in 86400 seconds..