last executing test programs: 13.329070102s ago: executing program 0 (id=344): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000200)="00a69c6c03", 0x5}, {&(0x7f0000000780)="58607d12c1b506e0030100924997397b3ea055b2d82a8a5338b213610cbd94", 0x1f}, {&(0x7f00000003c0)="56f44dbc6318309799b03fa97297bde0d7aa3f20bbcaf3ca777e575b238c092801421dc0936a3029dc464f5f63ecb7f430008b52e43f423a929a04d4f98045cdc64432dcda905349dc709a5c3d95237b91f3134dc4cbaf439140653cf157b450e9d06f88076c939654b5303974d6c917d036085bb4ae288879438bbc727b12875771a8bdea28bde63493744393c56e5a8b3c3b890fa9a5caa769aca863c7289d6c0ddc04961660b21ce73b7c6a8a4a03ba3bc9bdd00891431268858755d05950c520ecfbecaf1990dba68a6187ade7cf43b65c2e78c1", 0xd6}], 0x4}}], 0x1, 0x4400c804) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 13.147154976s ago: executing program 0 (id=346): timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb7, 0x9e, 0x69, 0x8, 0x2040, 0xd300, 0x16b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf6, 0x0, 0x0, 0x65, 0x80, 0xca}}]}}]}}, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x2f126000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) cachestat(r2, &(0x7f0000000180)={0xe6af, 0x300000000000000}, &(0x7f0000002280), 0x0) 10.456489616s ago: executing program 1 (id=354): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="2000000076000d0b0040000000000000030000000ec0000008000a000200000020c336de326803e0da629473859989822f63b71a8581db941f74d38457e90c2c42260d93c50ba0"], 0x20}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 10.248374039s ago: executing program 1 (id=356): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x5}]}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read$snddsp(r1, &(0x7f0000000440)=""/217, 0xd9) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000200)={&(0x7f0000000240)=[{0x3137, 0x1801, 0x3, &(0x7f00000003c0)="9f9eb2"}, {0x8, 0x200, 0x0, 0x0}], 0x2}) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000002b00), 0x2, 0x0) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000400)=0x3) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r4], 0x6) preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/103, 0x67}, {&(0x7f0000000140)=""/173, 0xad}, {&(0x7f0000000200)=""/13, 0xd}, {&(0x7f0000000240)=""/215, 0xd7}], 0x4, 0xfffffffd, 0xe1ad, 0x5) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000000840)={0x7, &(0x7f0000002a00)=[{0x7, 0x1000, &(0x7f0000000900)="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", 0x1, 0x1}, {0xb, 0xc7, &(0x7f0000000540)="eddebf2d67615cd702832e128ce3d09140574bb8b0fcf422df95a0b9e4ce4bd78fc6648fc436c1a71e23772f8709c8289bc4c058198788df5ca81d3ea36947bed7f5c6fd94947abe5e1068b29951cd7dd126d6b7529facce817b9a095c836fd78c02321425515768fe123024ca9c120373dbe6248051fbe76d711773e6b48b9c60a6569f846b05f3ac8a628e3c8d5f37b0d5c6ae42d26eff2c537c54285fca83366b6c5d184c9e69485fb6a12c6606061d23c331c2e5d460dfe679a62852a7bfbf9dd5de9bb526"}, {0xfff, 0x98, &(0x7f0000000640)="35fd49d2f9a0bf96c517f0ddfd5b5166a87e47af564b0798fa16a0c52230d505b41511054d4aece96914e47c2e45de86bd84c9c676f4a36101b472790e3d4275f276a97afdf4916003960bc15d682b97e3424436ae8bf91a02421c556f830a330733bb813fef56ca30f9310a68fe85fc593a93132c2ec5ef45f392f5aeab264cfa03756dcd9175562b5c5298cfa770bc4641d41dfeff5751", 0x1}, {0x0, 0xd9, &(0x7f0000000700)="63662c0a9c95b9ba763ba3a38b5e1a8d271fcff4105d65d230efe121ffa47699850ec816c692aa7d38daac173ef260271de97a3bddce320df020a812ef88cfce24964116113ba22ac92c605347ce060bdded6f81872cc1ad3419a0e0815cc9db0760bde457a3f9bcdbae33ecfe6271b1896ff0482c976b42d4da71433e69a905a87f07752ba2f70a8dd6bda20273cc203a08520322f62f77b41a6dcc7487a3924be28b605c823854eb8024a42ed937fd490ba66b20ba3e261a60e33245137de502c7968bb81c5d61ca616f941758427385ddbcdc019ba955d1", 0x1}, {0x36fa, 0x39, &(0x7f0000000800)="3614ebb5ed86b3651ac06a6b301560c85dfd5aa8748f86d9cf42b99e419dc13ffe723e594216007dd71966df902d8e42505ae09528317c5363"}, {0xf, 0xca, &(0x7f0000001900)="0685645c5afe13265fd23e91cf2ec6792fd96390a41418e2345a31b2d3cf7549ec78f0786f32c147fb59883215cf4c0a632d199132ed7feba42891a88d24eb5dc01d7f0c7118c05e42572b309743efeb570818b37626696568bc7cba594b743ece8aa7a626878e20fe4908a547d749e9e61df55154606d3794f16787e866f746a8d089e8caf69dce98cec261fb83687c0ba5ce99a89388911b16e019675baee8f16315df7274e262442bdc99c2390a477a2f12557ed0ad7bd96dc51a1ca2d01a0fb465018539362ba54b", 0x0, 0x1}, {0x0, 0x1000, &(0x7f0000001a00)="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", 0x1}]}) ioctl$I2C_SLAVE(r0, 0x703, 0x30c) ioperm(0x0, 0x7ffe, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x5}]}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async) read$snddsp(r1, &(0x7f0000000440)=""/217, 0xd9) (async) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000200)={&(0x7f0000000240)=[{0x3137, 0x1801, 0x3, &(0x7f00000003c0)="9f9eb2"}, {0x8, 0x200, 0x0, 0x0}], 0x2}) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000002b00), 0x2, 0x0) (async) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000400)=0x3) (async) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r4], 0x6) (async) preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/103, 0x67}, {&(0x7f0000000140)=""/173, 0xad}, {&(0x7f0000000200)=""/13, 0xd}, {&(0x7f0000000240)=""/215, 0xd7}], 0x4, 0xfffffffd, 0xe1ad, 0x5) (async) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000000840)={0x7, &(0x7f0000002a00)=[{0x7, 0x1000, &(0x7f0000000900)="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", 0x1, 0x1}, {0xb, 0xc7, &(0x7f0000000540)="eddebf2d67615cd702832e128ce3d09140574bb8b0fcf422df95a0b9e4ce4bd78fc6648fc436c1a71e23772f8709c8289bc4c058198788df5ca81d3ea36947bed7f5c6fd94947abe5e1068b29951cd7dd126d6b7529facce817b9a095c836fd78c02321425515768fe123024ca9c120373dbe6248051fbe76d711773e6b48b9c60a6569f846b05f3ac8a628e3c8d5f37b0d5c6ae42d26eff2c537c54285fca83366b6c5d184c9e69485fb6a12c6606061d23c331c2e5d460dfe679a62852a7bfbf9dd5de9bb526"}, {0xfff, 0x98, &(0x7f0000000640)="35fd49d2f9a0bf96c517f0ddfd5b5166a87e47af564b0798fa16a0c52230d505b41511054d4aece96914e47c2e45de86bd84c9c676f4a36101b472790e3d4275f276a97afdf4916003960bc15d682b97e3424436ae8bf91a02421c556f830a330733bb813fef56ca30f9310a68fe85fc593a93132c2ec5ef45f392f5aeab264cfa03756dcd9175562b5c5298cfa770bc4641d41dfeff5751", 0x1}, {0x0, 0xd9, &(0x7f0000000700)="63662c0a9c95b9ba763ba3a38b5e1a8d271fcff4105d65d230efe121ffa47699850ec816c692aa7d38daac173ef260271de97a3bddce320df020a812ef88cfce24964116113ba22ac92c605347ce060bdded6f81872cc1ad3419a0e0815cc9db0760bde457a3f9bcdbae33ecfe6271b1896ff0482c976b42d4da71433e69a905a87f07752ba2f70a8dd6bda20273cc203a08520322f62f77b41a6dcc7487a3924be28b605c823854eb8024a42ed937fd490ba66b20ba3e261a60e33245137de502c7968bb81c5d61ca616f941758427385ddbcdc019ba955d1", 0x1}, {0x36fa, 0x39, &(0x7f0000000800)="3614ebb5ed86b3651ac06a6b301560c85dfd5aa8748f86d9cf42b99e419dc13ffe723e594216007dd71966df902d8e42505ae09528317c5363"}, {0xf, 0xca, &(0x7f0000001900)="0685645c5afe13265fd23e91cf2ec6792fd96390a41418e2345a31b2d3cf7549ec78f0786f32c147fb59883215cf4c0a632d199132ed7feba42891a88d24eb5dc01d7f0c7118c05e42572b309743efeb570818b37626696568bc7cba594b743ece8aa7a626878e20fe4908a547d749e9e61df55154606d3794f16787e866f746a8d089e8caf69dce98cec261fb83687c0ba5ce99a89388911b16e019675baee8f16315df7274e262442bdc99c2390a477a2f12557ed0ad7bd96dc51a1ca2d01a0fb465018539362ba54b", 0x0, 0x1}, {0x0, 0x1000, &(0x7f0000001a00)="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", 0x1}]}) (async) ioctl$I2C_SLAVE(r0, 0x703, 0x30c) (async) ioperm(0x0, 0x7ffe, 0x0) (async) 9.933761149s ago: executing program 0 (id=358): syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fcntl$getown(r1, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(r5, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x9, "1dc632374ed6a9fed5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unlinkat(r4, &(0x7f00000000c0)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1f, &(0x7f0000000000)={0x1, 'ip6tnl0\x00', 0x3}, 0x18) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r4) fanotify_init(0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 8.616833715s ago: executing program 3 (id=362): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) io_uring_setup(0x7f05, &(0x7f0000000280)={0x0, 0xbec7, 0x4b, 0x3, 0x7f, 0x0, r0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x696, @loopback, 0x6}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000001c0)={r4, 0x519, 0x1, 0x2, 0xe}, &(0x7f0000000300)=0x14) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000340)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) bind$can_raw(r5, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x15, 0x0, 0x0) socketpair(0x2b, 0x3, 0x7, &(0x7f0000000000)) r7 = syz_open_dev$media(&(0x7f0000000040), 0xcfa, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) r9 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r8, 0x4004af07, &(0x7f0000000240)=r9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000040)={0x1, r9}) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$MEDIA_IOC_SETUP_LINK(r7, 0xc0287c02, &(0x7f0000000080)={{0x80000000, 0x0, 0x0, [0x5, 0x8]}, {0x80000000, 0x0, 0x0, [0x404, 0x10000000]}, 0x1, [0x1, 0x200000]}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='net_cls.classid\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="6a0000002f000000d4000000200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) 7.483599734s ago: executing program 1 (id=363): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x800) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@multicast2, @local}, &(0x7f00000000c0)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) epoll_create1(0x0) r2 = syz_io_uring_setup(0x5e48, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x20, 0xfffffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x4}, 0x8) write$UHID_CREATE2(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x53800, 0x55007}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x94, 0x1, r1}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20008054) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mq_timedsend(r5, &(0x7f0000000400)="72503d1a7f13afdefff83b472fce5c5d0315fa93a93dee7e97da2cbba068cadab33af4d4a963aad00c2bbee6ad813c228c2863a506027b961d41f38d0d471aa7c8039745ced15a4e7c833a79daef443445c115d9fa097956bf5f0af3ff391044378f262d42cd08bafda93a75b002354161b6a2fc76b5e2e5e1a68e7cb41dcf27964fdaa9a14b528d390c0d9fb2b5a36ccc3e211898caf7d9d68539e57e2ad9ee4d1a771fc6c1c3c0017613b78ec5c521465694e1553d03c02cf69ab5c0ce13506d579f99d4ff5e4416", 0xc9, 0x9, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 5.943971664s ago: executing program 3 (id=364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010002000000070000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c0001800800014000000003240001800800014000000007080001400c3b"], 0x140}}, 0x0) 5.70859158s ago: executing program 1 (id=366): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="bb7cef45839c", 0x0, 0x80000100, 0x0, 0xfb, 0x0}) 5.51627993s ago: executing program 3 (id=367): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, 0x0) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xb, 0x4, 0x1, 0x200, 0x68304, 0x1, 0x9, '\x00', r5, r4, 0x4, 0x0, 0x3, 0x0, @value=r4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x200, &(0x7f0000000340)) lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) 5.38178013s ago: executing program 0 (id=368): timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb7, 0x9e, 0x69, 0x8, 0x2040, 0xd300, 0x16b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf6, 0x0, 0x0, 0x65, 0x80, 0xca}}]}}]}}, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x2f126000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) cachestat(r2, &(0x7f0000000180)={0xe6af, 0x300000000000000}, &(0x7f0000002280), 0x0) 5.248706905s ago: executing program 1 (id=369): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8), 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040800) socket$unix(0x1, 0x1, 0x0) r4 = io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x5f41, 0x400}) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff}, 0x80) r6 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) keyctl$revoke(0x3, r6) syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r7 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r7, 0x207a98, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[], 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0xb7) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 3.612548142s ago: executing program 2 (id=374): r0 = timerfd_create(0x7, 0x800) fchdir(r0) (async) timerfd_gettime(r0, &(0x7f0000000180)) 3.273424979s ago: executing program 2 (id=375): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10"], 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) (fail_nth: 11) 3.27266243s ago: executing program 3 (id=376): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_usb_connect(0x1, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xc3, 0xfe, 0x5d, 0x8, 0x16c0, 0x5df, 0x6b16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7, 0x20, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc07}}, {0x0, 0x0}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xb03137cc5c403bd1}}, {0x0, 0x0}]}) 3.25124559s ago: executing program 4 (id=377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 2) 2.580698556s ago: executing program 4 (id=378): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x22020400) fallocate(0xffffffffffffffff, 0x28, 0x2, 0x5) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000005c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x0, 0x0, 0x0, 0x1, 0x5, 0xf}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0xfffffffffffffff0, 0x0, 0x4, 0x68ab, 0xfffffffffffffffe}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x4, 0x8, 0xc, 0x1, 0xff}}]}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r5, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x4008000) fcntl$lock(r4, 0x24, 0x0) (async) fcntl$lock(r4, 0x24, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000380)={{r2}, 0x0, 0x4, @unused=[0x2, 0x0, 0x7], @subvolid=0x9}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r3, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000080060001000a00000014000200fe80000000000000000000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac141416050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e08000100", @ANYRES32=r9, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 2.170325471s ago: executing program 0 (id=379): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = open(&(0x7f00000021c0)='./file0\x00', 0x48442, 0x182) ftruncate(r1, 0x200002) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x7}, 0x0, 0x6e6bb9, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r3, r2, 0x0, 0x80001d00c0d0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x10d4, 0x14, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x71, 0x1, "dd418acb4b387d53680cda4e02eb571a6f701c7075644e565be52674eee25ca20bebddd09b379e03e1080a2473fcd18768a97b15ab903d2d56eb07dc729f321e2061e8bdf4c633690f35489858a2b764f66aeb89edd60b50243f9935ac57d2a290ccfeaf0e520c1acff09bc194"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x48, 0x1, "71780054ffe33b74f3d5450c05191b596103ad131ba99891b035ab5ac4f7c414aa0291e7438b157e257e0020c70d814c74a190060752aef15a2dce49cfc5c31c30861667"}]}, 0x10d4}, 0x1, 0x0, 0x0, 0x800}, 0x4000) syz_usb_connect(0x2, 0x1b, &(0x7f0000000480)=ANY=[@ANYBLOB="12011001aa20ae40a5040a30575f01020301090200b222"], 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x8100, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'sit0\x00', 0x3}, 0x18) 1.054318804s ago: executing program 4 (id=380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/115, 0x73, 0x1, &(0x7f0000000540)=""/187, 0xbb}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000900)={0x40, 0x4}, 0xfffffffffffffe42) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000003c0)={0xd, 0x23, 0xfffffffb}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/reserved_size', 0x230100, 0x40) io_submit(r6, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r5, &(0x7f0000000340)="896102aecdfcc44f", 0x8, 0x2, 0x0, 0xf400}]) syz_io_uring_setup(0x7b16, &(0x7f0000000140)={0x0, 0x9912, 0x80, 0x805, 0x2d4}, &(0x7f00000001c0), &(0x7f0000000380)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x1, 0x587fa938, 0x0}) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x1}, 0x10) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4) ioctl$KVM_SET_SIGNAL_MASK(r10, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00\x00^']) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x5, &(0x7f0000000080)={0x0, 0x11, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000000)) connect$vsock_stream(r5, &(0x7f0000000600)={0x28, 0x0, 0x0, @my=0x1}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r9, 0x4068aea3, &(0x7f00000000c0)={0x80, 0x0, 0x6}) 772.889133ms ago: executing program 3 (id=381): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd28, 0x2001, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff4}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500010008010000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@newqdisc={0x21c, 0x24, 0x8, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x9}, {0x9, 0x7}, {0x6, 0xa}}, [@TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x27, 0xc, 0x7, 0x7, 0x2, 0x9, 0x789b, 0x5}}, {0xe, 0x2, [0x3, 0xb1, 0xfd9a, 0x9, 0xd7]}}]}, @TCA_RATE={0x6, 0x5, {0x1, 0x7f}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x72d}}, @TCA_STAB={0x16c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x5, 0x6, 0x2, 0x2, 0x822a, 0x5}}, {0xe, 0x2, [0x7, 0x9, 0x4, 0x7, 0x40]}}, {{0x1c, 0x1, {0x5, 0x0, 0x1, 0x4, 0x0, 0x2, 0x8, 0x6}}, {0x10, 0x2, [0x38, 0xfff, 0x1000, 0x7f, 0x8001, 0x7]}}, {{0x1c, 0x1, {0x9, 0x68, 0x52af, 0x40, 0x2, 0x685, 0x6, 0x2}}, {0x8, 0x2, [0x5f, 0x15f]}}, {{0x1c, 0x1, {0x6d, 0x2, 0x7, 0x4, 0x0, 0x7, 0x1, 0x7}}, {0x12, 0x2, [0x0, 0x1, 0x690, 0x4, 0x12, 0x4, 0x2]}}, {{0x1c, 0x1, {0x2, 0xf8, 0x0, 0x401, 0x1, 0x7d10, 0x9, 0x4}}, {0xc, 0x2, [0xfc, 0x1f0d, 0xde, 0x4]}}, {{0x1c, 0x1, {0xe, 0x0, 0x100, 0xfffffff7, 0x1, 0x10000, 0x8, 0x6}}, {0x10, 0x2, [0x0, 0x7, 0x8, 0x7ff, 0x10, 0xffa7]}}, {{0x1c, 0x1, {0x3, 0x7, 0x81, 0xaca, 0x0, 0x2, 0x0, 0x2}}, {0x8, 0x2, [0xa0eb, 0x7f14]}}, {{0x1c, 0x1, {0x2, 0x2, 0x8, 0xffffffff, 0x0, 0x3, 0x7fff, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x0, 0x7, 0x5f, 0xb42, 0x2, 0x8, 0xa}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @qdisc_kind_options=@q_ingress={0xc}, @qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x3}, @TCA_HHF_HH_FLOWS_LIMIT={0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x21c}, 0x1, 0x0, 0x0, 0x55}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000002000400a00308000100000001010000", @ANYRES8=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r5], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r6}, 0x38) r7 = syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x2) ioctl$EVIOCREVOKE(r7, 0x40044591, &(0x7f00000001c0)) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r8, &(0x7f0000000040)=ANY=[@ANYBLOB='lock m'], 0xc) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r6, &(0x7f0000000080), 0x0}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, [], [], 'wg1\x00', 'gre0\x00', {0xff}}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) ioctl$KVM_RUN(r10, 0xae80, 0x0) setsockopt$packet_rx_ring(r10, 0x107, 0xd, &(0x7f00000000c0)=@req={0x19b, 0xb4f, 0x300, 0xda}, 0x10) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000580), 0x4) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r11, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x28}}, 0x802) 752.075492ms ago: executing program 1 (id=382): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, 0x0, 0x400c000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0585605, &(0x7f0000000540)={0x0, 0x1, @stop_pts=0x6f}) r6 = fsopen(&(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x1000}, {0x6, 0x60, 0x0, 0x8}]}) write$ppp(r8, &(0x7f0000000300)="5af9", 0x2) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r9 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r9, &(0x7f00000028c0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x7f, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x3}, 0x1c, &(0x7f00000011c0)=[{&(0x7f0000001340)="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", 0xfffffd98}], 0x1}}, {{0x0, 0x0, &(0x7f0000002500)}}, {{0x0, 0x0, &(0x7f00000027c0)=[{0x0}], 0x1}}], 0x3, 0x20004804) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000029c0)={{0x1, 0x1, 0x18, r9, {0x5}}, './file0\x00'}) 670.361182ms ago: executing program 2 (id=383): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x40d, 0x700, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x12100}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r2}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 669.724146ms ago: executing program 4 (id=384): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x8000100, 0x0, 0x0, &(0x7f00000010c0), 0x0, &(0x7f0000001140)="8c7d6ce015a250438cbc1d52041b77f25ad358917121e78fd98d") bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000400000000008000200ac1414aa"], 0x24}}, 0x8050) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) 392.913386ms ago: executing program 2 (id=385): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@bridge_delneigh={0x24, 0x1c, 0xc07, 0x0, 0x0, {0x2, 0x0, 0x0, r1, 0xd0, 0x44, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x20024090) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newneigh={0x28, 0x1c, 0x401, 0x0, 0xfffffffc, {0x2, 0x0, 0x0, r4, 0x20, 0x66, 0x8}, [@NDA_DST_MAC={0xa}]}, 0x28}, 0x1, 0xfffffffffffffff0, 0x0, 0x1804}, 0x4) 299.921196ms ago: executing program 3 (id=386): r0 = syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880)) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x8, r2, 0x0, 0x4, 0x0, 0x0, 0x2}) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00') io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_io_uring_setup(0x7955, &(0x7f0000000500)={0x0, 0x8007ffd, 0x1, 0x0, 0xf5fffffd}, &(0x7f0000000040), &(0x7f0000000000)) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000240), 0x4) socket(0x11, 0x800000003, 0x0) (async) socket(0x11, 0x800000003, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xa8, 0xff}) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xa8, 0xff}) r4 = socket$kcm(0x10, 0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_uring_setup(0x2e34, &(0x7f0000000180)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x10020) (async) recvmsg(r4, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x10020) io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f0000000180)={0x200000000000001f, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000080)=[0x4, 0x9]}, 0x20) (async) io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f0000000180)={0x200000000000001f, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000080)=[0x4, 0x9]}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x124}}, 0x0) signalfd4(r0, &(0x7f0000000000)={[0x8]}, 0x8, 0x80800) 220.538707ms ago: executing program 2 (id=387): pipe(&(0x7f0000000180)) io_setup(0x6, &(0x7f0000001380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000100)={0x400000000000000, 0x0, 0x0, 0x8, 0x0, r1, 0x0, 0x0, 0x4, 0x0, 0x0, r1}]) 179.587472ms ago: executing program 4 (id=388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000007a00)={0x0, 0x0, &(0x7f00000079c0)={&(0x7f0000000e40)={{0x14, 0x10, 0x1, 0x0, 0x900, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x20000100) 13.056968ms ago: executing program 4 (id=389): timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb7, 0x9e, 0x69, 0x8, 0x2040, 0xd300, 0x16b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf6, 0x0, 0x0, 0x65, 0x80, 0xca}}]}}]}}, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x2f126000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) cachestat(r2, &(0x7f0000000180)={0xe6af, 0x300000000000000}, &(0x7f0000002280), 0x0) 12.647228ms ago: executing program 2 (id=390): socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x180, 0x65, 0x300, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0xf, 0x2}, {0x0, 0x1}, {0xfff3, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x144, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x134, 0x1, [@m_simple={0xe0, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0xb1, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959e47bf0fe515b70ea5a3584d9cdba83a705d3257305f931866cf9f1faa34fce0e8a7ee76e20f05d4e1adbee4ba00ddd7b896197ea2a0391ef62c651d59ed7e0e8964192a2c1c29308d03650349840a4d759fc9421e3569c90"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x50, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x8, 0x1, 0xfffffff7, 0x9}, 0x1ca}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) socket(0x10, 0x803, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0xf8, 0x10, 0x1, 0x0, 0x3, {{@in=@empty, @in=@broadcast, 0x0, 0x5a1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0xee00}, {@in=@local, 0x0, 0x2b}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0xfffffffe}, 0x70bd25, 0x0, 0x2, 0x0, 0x40, 0x82}, [@tfcpad={0x8, 0x16, 0x925}]}, 0xf8}}, 0x8080) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000040)={0x2, {0x4, 0x5, 0xfffffffe, 0x400800}}) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000002580)={&(0x7f0000000180)=[{0xd0, 0x1801, 0x0, 0x0}, {0x9b, 0x0, 0x0, 0x0}, {0x6, 0x2000, 0x0, 0x0}], 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) r9 = syz_open_dev$sg(&(0x7f00000000c0), 0x7, 0x80000) ioctl$SG_BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000180)={'\x00', 0x4, 0xe3b, 0x9, 0x0, 0x3, r0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000010004b0400000000000000007a000000", @ANYRES32=r7, @ANYBLOB="00000000000000000a000100aaaaaaaaaa000000e2f2"], 0x2c}}, 0x0) 0s ago: executing program 0 (id=391): syz_usb_connect(0x7, 0x53, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x2000000000004}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f00000000c0)=0xffffffff) ioctl$USBDEVFS_CONNECTINFO(r4, 0x8108551b, &(0x7f0000002a40)) ioctl$USBDEVFS_RESET(r4, 0x5514) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, '\b\x00\x00\t\x00', "278aa3520f3a0ff8cef6713fa6b703a6", "610cde48", "dbb0e9ddc00c20ee"}, 0x28) setsockopt$inet_int(r5, 0x0, 0x18, &(0x7f0000000100)=0x1008001, 0x4) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x4008840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x1) fchdir(r6) read$FUSE(r6, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002440)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@l2={0x1f, 0xfff8, @any, 0x4, 0x2}, 0x0, 0x0, 0x1}) syz_open_procfs(r7, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r8, 0x0, 0x0) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) kernel console output (not intermixed with test programs): T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.284431][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.361581][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.373283][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.385170][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.406541][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.441999][ T5835] Bluetooth: hci1: command tx timeout [ 77.474315][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.538755][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.564172][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.571453][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.596956][ T5835] Bluetooth: hci4: command tx timeout [ 77.596976][ T5828] Bluetooth: hci3: command tx timeout [ 77.602346][ T5149] Bluetooth: hci2: command tx timeout [ 77.629495][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.648075][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.658336][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.665470][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.676766][ T5835] Bluetooth: hci0: command tx timeout [ 77.735668][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.762741][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.769911][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.783022][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.809712][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.835189][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.842316][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.855318][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.862421][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.875175][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.902769][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.909962][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.925148][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.932251][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.001620][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.008824][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.053462][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.082446][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.132434][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.162699][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.185654][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.211390][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.218569][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.259700][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.292560][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.300089][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.351847][ T5844] veth0_vlan: entered promiscuous mode [ 78.392841][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.420196][ T5844] veth1_vlan: entered promiscuous mode [ 78.431738][ T5847] veth0_vlan: entered promiscuous mode [ 78.488994][ T5847] veth1_vlan: entered promiscuous mode [ 78.528732][ T5845] veth0_vlan: entered promiscuous mode [ 78.563902][ T5844] veth0_macvtap: entered promiscuous mode [ 78.573686][ T5845] veth1_vlan: entered promiscuous mode [ 78.600017][ T5844] veth1_macvtap: entered promiscuous mode [ 78.630965][ T5841] veth0_vlan: entered promiscuous mode [ 78.668580][ T5847] veth0_macvtap: entered promiscuous mode [ 78.681004][ T5847] veth1_macvtap: entered promiscuous mode [ 78.691616][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.707342][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.730295][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.742750][ T5841] veth1_vlan: entered promiscuous mode [ 78.764466][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.774017][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.783368][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.793462][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.809614][ T5845] veth0_macvtap: entered promiscuous mode [ 78.822514][ T5845] veth1_macvtap: entered promiscuous mode [ 78.867009][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.925338][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.949538][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.991909][ T5847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.001150][ T5847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.010790][ T5847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.019633][ T5847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.034554][ T5846] veth0_vlan: entered promiscuous mode [ 79.038556][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.048926][ T5841] veth0_macvtap: entered promiscuous mode [ 79.055908][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.065366][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.097650][ T5841] veth1_macvtap: entered promiscuous mode [ 79.112293][ T5845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.121807][ T5845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.133093][ T5845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.142194][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.179594][ T5846] veth1_vlan: entered promiscuous mode [ 79.214948][ T3490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.224114][ T3490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.317461][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.320784][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.331550][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.366037][ T3490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.375180][ T5846] veth0_macvtap: entered promiscuous mode [ 79.386454][ T3490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.411180][ T5841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.441913][ T5925] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.442276][ T5841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.480212][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.491894][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.522690][ T5835] Bluetooth: hci1: command tx timeout [ 79.532176][ T5846] veth1_macvtap: entered promiscuous mode [ 79.633568][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.643488][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.658837][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.677176][ T5835] Bluetooth: hci4: command tx timeout [ 79.682624][ T5835] Bluetooth: hci2: command tx timeout [ 79.688414][ T5149] Bluetooth: hci3: command tx timeout [ 79.693799][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.734156][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.746182][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.755684][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.764996][ T5835] Bluetooth: hci0: command tx timeout [ 79.771410][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.784126][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.797568][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.960619][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.997325][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.112284][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.138465][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.195525][ T3456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.217817][ T3456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.278425][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.332455][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.376835][ T5939] netlink: 324 bytes leftover after parsing attributes in process `syz.3.4'. [ 80.389525][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.417098][ T5940] process 'syz.2.3' launched './file1' with NULL argv: empty string added [ 80.544460][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.588503][ T5940] overlayfs: missing 'lowerdir' [ 80.677100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.800280][ T5948] syz.3.9 uses obsolete (PF_INET,SOCK_PACKET) [ 81.386679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 81.597109][ T5835] Bluetooth: hci1: command tx timeout [ 81.694736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.784055][ T5962] overlayfs: missing 'lowerdir' [ 81.792324][ T5835] Bluetooth: hci4: command tx timeout [ 81.799311][ T5835] Bluetooth: hci2: command tx timeout [ 81.805330][ T5149] Bluetooth: hci3: command tx timeout [ 81.836529][ T5828] Bluetooth: hci0: command tx timeout [ 82.234063][ T5825] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 82.306708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.408258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.417659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 82.426157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 82.490599][ T5825] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 82.506422][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.555828][ T5825] usb 4-1: Product: syz [ 82.583725][ T5825] usb 4-1: Manufacturer: syz [ 82.639289][ T5825] usb 4-1: SerialNumber: syz [ 82.709794][ T5825] usb 4-1: config 0 descriptor?? [ 82.820281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.881484][ T5979] overlayfs: missing 'lowerdir' [ 83.054751][ T5984] netlink: 324 bytes leftover after parsing attributes in process `syz.2.17'. [ 83.232535][ T5825] airspy 4-1:0.0: Board ID: 00 [ 83.240249][ T5825] airspy 4-1:0.0: Firmware version: [ 83.254065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.421637][ T5993] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20'. [ 83.537092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.688485][ T5998] overlayfs: missing 'lowerdir' [ 83.878730][ T5993] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20'. [ 83.960108][ T5966] netlink: 'syz.3.13': attribute type 1 has an invalid length. [ 84.023050][ T5999] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13'. [ 84.404928][ T5825] airspy 4-1:0.0: usb_control_msg() failed -110 request 11 [ 84.438560][ T5825] airspy 4-1:0.0: Registered as swradio24 [ 84.475985][ T5825] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 84.832705][ T6006] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.928086][ T6006] 8021q: VLANs not supported on wg0 [ 84.988022][ T6008] fuse: Unknown parameter 'fowner>00000000000000000000' [ 85.842319][ T6020] fuse: Unknown parameter '' [ 85.958014][ T6022] overlayfs: missing 'lowerdir' [ 85.977802][ T6024] netlink: 20 bytes leftover after parsing attributes in process `syz.1.27'. [ 86.094831][ T24] usb 4-1: USB disconnect, device number 2 [ 86.246604][ T5909] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 86.424009][ T5909] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 86.450808][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.514333][ T5909] usb 1-1: config 0 descriptor?? [ 86.528149][ T5909] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 86.727738][ T5909] gp8psk: usb in 128 operation failed. [ 86.800404][ T977] cfg80211: failed to load regulatory.db [ 86.935386][ T6026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.949811][ T6026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.968700][ T5909] gp8psk: usb in 146 operation failed. [ 86.974442][ T5909] gp8psk: failed to get FW version [ 86.982174][ T5909] gp8psk: FPGA Version = 173 [ 87.236471][ T5909] gp8psk: usb in 138 operation failed. [ 87.262882][ T5909] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 87.337016][ T5909] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 87.412542][ T5909] usb 1-1: USB disconnect, device number 2 [ 88.296932][ T6054] netlink: 196 bytes leftover after parsing attributes in process `syz.2.36'. [ 88.555392][ T6066] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.573399][ T6066] xt_nfacct: accounting object `syz0' does not exists [ 88.683874][ T6072] bridge1: entered promiscuous mode [ 88.889631][ T5909] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.081833][ T5909] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 89.256806][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.274994][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.390598][ T5909] usb 1-1: config 0 descriptor?? [ 89.486475][ T977] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.564643][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 89.593249][ T24] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 89.722829][ T24] usb 4-1: config 0 has no interface number 0 [ 89.732942][ T24] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 89.769087][ T24] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 89.778829][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.788391][ T24] usb 4-1: Product: syz [ 89.792868][ T24] usb 4-1: Manufacturer: syz [ 89.798514][ T24] usb 4-1: SerialNumber: syz [ 89.807962][ T977] usb 5-1: config 0 has no interfaces? [ 89.830856][ T977] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 89.943500][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.964440][ T24] usb 4-1: config 0 descriptor?? [ 89.981409][ T977] usb 5-1: Product: syz [ 89.990232][ T6089] overlayfs: missing 'lowerdir' [ 90.069230][ T977] usb 5-1: Manufacturer: syz [ 90.373828][ T977] usb 5-1: SerialNumber: syz [ 90.456709][ T24] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 90.472799][ T977] usb 5-1: config 0 descriptor?? [ 90.478233][ T24] em28xx 4-1:0.132: Video interface 132 found: [ 90.773948][ T24] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 91.460140][ T5909] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 91.469171][ T5909] [drm:udl_init] *ERROR* Selecting channel failed [ 91.843806][ T5909] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 91.856811][ T5909] [drm] Initialized udl on minor 2 [ 91.863913][ T5909] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 91.883119][ T5909] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 91.897348][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 91.905702][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 91.919430][ T24] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 91.926709][ T5909] usb 1-1: USB disconnect, device number 3 [ 91.998242][ T24] em28xx 4-1:0.132: board has no eeprom [ 92.076505][ T24] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 92.106465][ T24] em28xx 4-1:0.132: analog set to bulk mode. [ 92.140028][ T5901] em28xx 4-1:0.132: Registering V4L2 extension [ 92.161991][ T10] usb 5-1: USB disconnect, device number 2 [ 92.214584][ T5901] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 92.246222][ T5901] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 92.277415][ T1068] usb 4-1: USB disconnect, device number 3 [ 92.285958][ T5901] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 92.313802][ T1068] em28xx 4-1:0.132: Disconnecting em28xx [ 92.396825][ T6107] fuse: Unknown parameter '' [ 92.456454][ T5909] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 92.650658][ T5909] usb 1-1: Using ep0 maxpacket: 32 [ 92.677533][ T5909] usb 1-1: unable to get BOS descriptor or descriptor too short [ 92.680714][ T6115] netlink: 4860 bytes leftover after parsing attributes in process `syz.1.51'. [ 92.711456][ T5909] usb 1-1: config 255 has an invalid interface number: 81 but max is 0 [ 92.738097][ T5901] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 92.753731][ T5909] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 92.754876][ T5901] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 92.791127][ T5909] usb 1-1: config 255 has no interface number 0 [ 92.806790][ T5909] usb 1-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 92.835770][ T5909] usb 1-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 92.847228][ T5901] em28xx 4-1:0.132: No AC97 audio processor [ 92.882844][ T5909] usb 1-1: config 255 interface 81 has no altsetting 0 [ 92.893689][ T5909] usb 1-1: string descriptor 0 read error: -22 [ 92.904754][ T5909] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 92.916780][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.930795][ T5909] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:255.81/input/input5 [ 92.976498][ T5901] usb 4-1: Decoder not found [ 93.018941][ T6121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.52'. [ 93.065004][ T5901] em28xx 4-1:0.132: failed to create media graph [ 93.164567][ T5901] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 93.235240][ T5916] usb 1-1: USB disconnect, device number 4 [ 93.329182][ T5901] em28xx 4-1:0.132: Remote control support is not available for this card. [ 93.479166][ T1068] em28xx 4-1:0.132: Closing input extension [ 93.580018][ T6132] FAULT_INJECTION: forcing a failure. [ 93.580018][ T6132] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.631175][ T1068] em28xx 4-1:0.132: Freeing device [ 93.650165][ T6132] CPU: 1 UID: 0 PID: 6132 Comm: syz.3.54 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 93.650190][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 93.650207][ T6132] Call Trace: [ 93.650214][ T6132] [ 93.650222][ T6132] dump_stack_lvl+0x189/0x250 [ 93.650250][ T6132] ? __pfx____ratelimit+0x10/0x10 [ 93.650274][ T6132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.650297][ T6132] ? __pfx__printk+0x10/0x10 [ 93.650315][ T6132] ? __might_fault+0xb0/0x130 [ 93.650342][ T6132] should_fail_ex+0x414/0x560 [ 93.650367][ T6132] _copy_from_user+0x2d/0xb0 [ 93.650384][ T6132] ___sys_sendmsg+0x158/0x2a0 [ 93.650406][ T6132] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.650467][ T6132] ? __might_fault+0xb0/0x130 [ 93.650486][ T6132] __sys_sendmmsg+0x227/0x430 [ 93.650511][ T6132] ? __pfx___sys_sendmmsg+0x10/0x10 [ 93.650527][ T6132] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 93.650577][ T6132] ? ksys_write+0x22a/0x250 [ 93.650594][ T6132] ? __pfx_ksys_write+0x10/0x10 [ 93.650605][ T6132] ? rcu_is_watching+0x15/0xb0 [ 93.650632][ T6132] __x64_sys_sendmmsg+0xa0/0xc0 [ 93.650649][ T6132] do_syscall_64+0xfa/0x3b0 [ 93.650668][ T6132] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.650687][ T6132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.650701][ T6132] ? clear_bhb_loop+0x60/0xb0 [ 93.650720][ T6132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.650735][ T6132] RIP: 0033:0x7f3b5098e929 [ 93.650755][ T6132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.650768][ T6132] RSP: 002b:00007f3b5186b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 93.650785][ T6132] RAX: ffffffffffffffda RBX: 00007f3b50bb5fa0 RCX: 00007f3b5098e929 [ 93.650797][ T6132] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 93.650807][ T6132] RBP: 00007f3b5186b090 R08: 0000000000000000 R09: 0000000000000000 [ 93.650816][ T6132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.650823][ T6132] R13: 0000000000000000 R14: 00007f3b50bb5fa0 R15: 00007f3b50cdfa28 [ 93.650844][ T6132] [ 94.101429][ T6134] netlink: 40 bytes leftover after parsing attributes in process `syz.1.53'. [ 94.201583][ T6141] netlink: 'syz.0.55': attribute type 1 has an invalid length. [ 94.203135][ T6143] Zero length message leads to an empty skb [ 94.926221][ T5909] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 94.946464][ T5885] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.357583][ T5885] usb 3-1: config 0 has no interfaces? [ 95.375412][ T5909] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 95.385530][ T5909] usb 4-1: config 0 has no interface number 0 [ 95.392015][ T5909] usb 4-1: config 0 interface 29 has no altsetting 0 [ 95.401703][ T5885] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 95.416904][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.426700][ T5885] usb 3-1: Product: syz [ 95.436581][ T5909] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 95.445976][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.454411][ T5909] usb 4-1: Product: syz [ 95.485753][ T5885] usb 3-1: Manufacturer: syz [ 95.494090][ T5909] usb 4-1: Manufacturer: syz [ 95.502340][ T5885] usb 3-1: SerialNumber: syz [ 95.515937][ T5909] usb 4-1: SerialNumber: syz [ 95.626809][ T5885] usb 3-1: config 0 descriptor?? [ 95.634101][ T5909] usb 4-1: config 0 descriptor?? [ 95.869345][ T5909] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v213 fw v0.0.0 (2 channels) [ 96.122542][ T5901] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 96.317324][ T5901] usb 1-1: Using ep0 maxpacket: 8 [ 96.334087][ T5901] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 96.347186][ T5901] usb 1-1: config 0 has no interface number 0 [ 96.379588][ T5901] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 96.423404][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.450769][ T5901] usb 1-1: Product: syz [ 96.483103][ T5901] usb 1-1: Manufacturer: syz [ 96.564993][ T5901] usb 1-1: SerialNumber: syz [ 96.601006][ T5901] usb 1-1: config 0 descriptor?? [ 96.818568][ T24] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 96.843613][ T6185] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 97.123276][ T5901] msi2500 1-1:0.246: Registered as swradio24 [ 97.140719][ T5901] msi2500 1-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 97.406602][ T24] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 97.421462][ T24] usb 5-1: config 0 has an invalid interface number: 255 but max is 2 [ 97.494904][ T24] usb 5-1: config 0 has no interface number 0 [ 97.561497][ T24] usb 5-1: config 0 has no interface number 1 [ 97.623537][ T24] usb 5-1: config 0 interface 255 has no altsetting 0 [ 97.905832][ T24] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 97.959842][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.011910][ T5909] peak_usb 4-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 98.168410][ T5825] usb 3-1: USB disconnect, device number 2 [ 98.187053][ T5909] peak_usb 4-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 98.215689][ T24] usb 5-1: config 0 descriptor?? [ 98.327444][ T5909] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -71 [ 98.413326][ T5909] usb 4-1: USB disconnect, device number 4 [ 98.506713][ T24] usb 5-1: Could not set interface, error -71 [ 98.668704][ T24] usb 5-1: USB disconnect, device number 3 [ 98.808068][ T6201] sctp: [Deprecated]: syz.2.69 (pid 6201) Use of int in max_burst socket option. [ 98.808068][ T6201] Use struct sctp_assoc_value instead [ 98.876580][ T5909] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 99.066882][ T5909] usb 4-1: config 0 has no interfaces? [ 99.115801][ T5909] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 99.125891][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.151549][ T5909] usb 4-1: Product: syz [ 99.446593][ T30] audit: type=1326 audit(1751582215.290:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f7f8e929 code=0x7ffc0000 [ 99.472217][ T5909] usb 4-1: Manufacturer: syz [ 99.499095][ T5909] usb 4-1: SerialNumber: syz [ 99.543627][ T30] audit: type=1326 audit(1751582215.290:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f7f8e929 code=0x7ffc0000 [ 99.736425][ T5909] usb 4-1: config 0 descriptor?? [ 99.869761][ T6209] mmap: syz.2.70 (6209) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.044420][ T30] audit: type=1326 audit(1751582215.290:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f38f7f8e929 code=0x7ffc0000 [ 100.123943][ T30] audit: type=1326 audit(1751582215.290:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f7f8e929 code=0x7ffc0000 [ 100.799141][ T5825] hid (null): report_id 0 is invalid [ 100.816522][ T5825] hid (null): global environment stack underflow [ 100.851571][ T30] audit: type=1326 audit(1751582215.290:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38f7f8e929 code=0x7ffc0000 [ 100.873582][ T5825] hid (null): unknown global tag 0xe [ 100.886661][ T5825] hid (null): unknown global tag 0x2d [ 100.902978][ T5825] hid (null): invalid report_count -669363439 [ 100.915342][ T5825] hid (null): unknown global tag 0xe [ 100.926445][ T30] audit: type=1326 audit(1751582215.290:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f7f8e929 code=0x7ffc0000 [ 100.948731][ T5825] hid (null): unknown global tag 0x2b [ 101.416536][ T5825] hid (null): unknown global tag 0xe [ 101.421932][ T5825] hid (null): unknown global tag 0xe [ 101.428668][ T5825] hid (null): unknown global tag 0xc [ 101.434348][ T5825] hid (null): global environment stack overflow [ 101.440770][ T5825] hid (null): global environment stack overflow [ 101.447055][ T5825] hid (null): unknown global tag 0xd [ 101.483127][ T5825] hid (null): unknown global tag 0x85 [ 101.488769][ T5825] hid (null): unknown global tag 0xe7 [ 101.494389][ T5825] hid (null): unknown global tag 0xd [ 101.499898][ T5825] hid (null): report_id 54392 is invalid [ 101.505685][ T5825] hid (null): unknown global tag 0xd [ 101.511197][ T5825] hid (null): unknown global tag 0x78 [ 101.512108][ T30] audit: type=1326 audit(1751582215.290:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f38f7f8e929 code=0x7ffc0000 [ 101.516763][ T5825] hid (null): invalid report_count 61289 [ 101.516818][ T5825] hid (null): report_id 0 is invalid [ 101.516831][ T5825] hid (null): bogus close delimiter [ 101.516861][ T5825] hid (null): report_id 0 is invalid [ 101.516883][ T5825] hid (null): unknown global tag 0xe [ 101.516895][ T5825] hid (null): unknown global tag 0xe [ 101.516917][ T5825] hid (null): unknown global tag 0xd [ 101.516930][ T5825] hid (null): nested delimiters [ 101.516951][ T5825] hid (null): report_id 2856469718 is invalid [ 101.516986][ T5825] hid (null): report_id 1318575790 is invalid [ 101.517009][ T5825] hid (null): report_id 0 is invalid [ 101.517021][ T5825] hid (null): unknown global tag 0xd [ 101.518193][ T5825] hid (null): unknown global tag 0xe [ 101.518207][ T5825] hid (null): invalid report_size 48273 [ 101.518308][ T5825] hid (null): bogus close delimiter [ 101.519385][ T5825] hid (null): usage index exceeded [ 101.665170][ T30] audit: type=1326 audit(1751582215.640:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f7f8e929 code=0x7ffc0000 [ 101.762930][ T5885] usb 1-1: USB disconnect, device number 5 [ 101.843286][ T30] audit: type=1326 audit(1751582215.640:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f7f8e929 code=0x7ffc0000 [ 101.986627][ T30] audit: type=1326 audit(1751582215.710:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38f7f8e929 code=0x7ffc0000 [ 102.103615][ T5825] hid (null): bogus close delimiter [ 102.120171][ T5901] usb 4-1: USB disconnect, device number 5 [ 102.156305][ T6225] Cannot find add_set index 0 as target [ 102.232755][ T5825] hid (null): global environment stack overflow [ 102.240010][ T5825] hid (null): unknown global tag 0x38 [ 102.252225][ T5825] hid (null): global environment stack overflow [ 102.273378][ T5825] hid (null): unknown global tag 0xe [ 102.298462][ T5825] hid (null): unknown global tag 0xe [ 102.344490][ T5825] hid (null): invalid report_size -1661038393 [ 102.376493][ T5825] hid (null): unknown global tag 0xd [ 102.383272][ T5825] hid (null): invalid report_size 133060536 [ 102.410781][ T5825] hid (null): unknown global tag 0xc [ 102.445049][ T5825] hid (null): report_id 0 is invalid [ 102.461319][ T5825] hid-generic 7FFF:0004:0009.0001: unexpected long global item [ 102.477203][ T6239] FAULT_INJECTION: forcing a failure. [ 102.477203][ T6239] name failslab, interval 1, probability 0, space 0, times 1 [ 102.499036][ T5825] hid-generic 7FFF:0004:0009.0001: probe with driver hid-generic failed with error -22 [ 102.515601][ T6239] CPU: 1 UID: 0 PID: 6239 Comm: syz.2.78 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 102.515625][ T6239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.515634][ T6239] Call Trace: [ 102.515642][ T6239] [ 102.515649][ T6239] dump_stack_lvl+0x189/0x250 [ 102.515675][ T6239] ? __pfx____ratelimit+0x10/0x10 [ 102.515697][ T6239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.515784][ T6239] ? __pfx__printk+0x10/0x10 [ 102.515803][ T6239] ? __pfx___might_resched+0x10/0x10 [ 102.515822][ T6239] ? fs_reclaim_acquire+0x7d/0x100 [ 102.515841][ T6239] should_fail_ex+0x414/0x560 [ 102.515864][ T6239] should_failslab+0xa8/0x100 [ 102.515880][ T6239] __kmalloc_noprof+0xcb/0x4f0 [ 102.515893][ T6239] ? sock_kmalloc+0xd6/0x160 [ 102.515913][ T6239] sock_kmalloc+0xd6/0x160 [ 102.515933][ T6239] ____sys_sendmsg+0x1b5/0x830 [ 102.515956][ T6239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.515980][ T6239] ? import_iovec+0x74/0xa0 [ 102.515995][ T6239] ___sys_sendmsg+0x21f/0x2a0 [ 102.516013][ T6239] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.516056][ T6239] ? __fget_files+0x2a/0x420 [ 102.516073][ T6239] ? __fget_files+0x3a0/0x420 [ 102.516098][ T6239] __x64_sys_sendmsg+0x19b/0x260 [ 102.516118][ T6239] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 102.516141][ T6239] ? __pfx_ksys_write+0x10/0x10 [ 102.516152][ T6239] ? rcu_is_watching+0x15/0xb0 [ 102.516177][ T6239] ? do_syscall_64+0xbe/0x3b0 [ 102.516202][ T6239] do_syscall_64+0xfa/0x3b0 [ 102.516220][ T6239] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.516366][ T6239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.516381][ T6239] ? clear_bhb_loop+0x60/0xb0 [ 102.516399][ T6239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.516414][ T6239] RIP: 0033:0x7f38f7f8e929 [ 102.516430][ T6239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.516442][ T6239] RSP: 002b:00007f38f8e2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.516457][ T6239] RAX: ffffffffffffffda RBX: 00007f38f81b5fa0 RCX: 00007f38f7f8e929 [ 102.516468][ T6239] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 102.516477][ T6239] RBP: 00007f38f8e2c090 R08: 0000000000000000 R09: 0000000000000000 [ 102.516487][ T6239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.516496][ T6239] R13: 0000000000000000 R14: 00007f38f81b5fa0 R15: 00007f38f82dfa28 [ 102.516518][ T6239] [ 102.976240][ T6247] unsupported nla_type 52263 [ 103.136926][ T5909] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 103.304532][ T5909] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 103.323357][ T5885] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 103.435296][ T5909] usb 1-1: config 254 has no interface number 0 [ 103.581646][ T5916] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.627119][ T5909] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 103.677038][ T5885] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 103.686908][ T5909] usb 1-1: config 254 interface 235 has no altsetting 0 [ 103.693903][ T5885] usb 2-1: config 0 has no interface number 0 [ 103.718468][ T5885] usb 2-1: config 0 interface 29 has no altsetting 0 [ 103.728042][ T5909] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 103.749010][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.762529][ T5909] usb 1-1: Product: syz [ 103.772518][ T5885] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 103.783480][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.836494][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 103.980898][ T5885] usb 2-1: Product: syz [ 103.991834][ T5909] usb 1-1: Manufacturer: syz [ 103.998177][ T5885] usb 2-1: Manufacturer: syz [ 104.002781][ T5885] usb 2-1: SerialNumber: syz [ 104.012983][ T5909] usb 1-1: SerialNumber: syz [ 104.073832][ T6238] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.097156][ T5885] usb 2-1: config 0 descriptor?? [ 104.105287][ T5916] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 104.196517][ T5916] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.318755][ T6238] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.373846][ T5909] usbtest 1-1:254.235: Linux gadget zero [ 104.397338][ T5916] usb 3-1: config 0 has no interface number 0 [ 104.419015][ T5909] usbtest 1-1:254.235: full-speed {control in/out bulk-in bulk-out} tests (+alt) [ 104.429990][ T5916] usb 3-1: config 0 interface 68 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.485700][ T5916] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 104.494961][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.503064][ T5916] usb 3-1: Product: syz [ 104.509680][ T5916] usb 3-1: Manufacturer: syz [ 104.514624][ T5916] usb 3-1: SerialNumber: syz [ 104.567495][ T10] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 104.804375][ T5885] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v213 fw v0.0.0 (2 channels) [ 104.855330][ T5916] usb 3-1: config 0 descriptor?? [ 104.865802][ T10] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 104.874594][ T10] usb 5-1: config 0 has an invalid interface number: 255 but max is 2 [ 104.879377][ T5825] usb 1-1: USB disconnect, device number 6 [ 104.887224][ T10] usb 5-1: config 0 has no interface number 0 [ 104.894697][ T10] usb 5-1: config 0 has no interface number 1 [ 104.901708][ T10] usb 5-1: config 0 interface 255 has no altsetting 0 [ 104.909770][ T10] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 104.920884][ T5916] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 104.930684][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.946011][ T10] usb 5-1: config 0 descriptor?? [ 105.022935][ T6269] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 105.115171][ T13] usb 3-1: Failed to submit usb control message: -71 [ 105.115595][ T5916] usb 3-1: USB disconnect, device number 3 [ 105.198051][ T10] usb 5-1: Could not set interface, error -71 [ 105.204400][ T13] usb 3-1: unable to send the bmi data to the device: -71 [ 105.225019][ T13] usb 3-1: unable to get target info from device [ 105.326309][ T10] usb 5-1: USB disconnect, device number 4 [ 105.352781][ T13] usb 3-1: could not get target info (-71) [ 105.373770][ T13] usb 3-1: could not probe fw (-71) [ 105.796581][ T5825] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 105.944961][ T5825] usb 4-1: device descriptor read/64, error -71 [ 106.187082][ T5825] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 106.386284][ T5825] usb 4-1: device descriptor read/64, error -71 [ 106.517415][ T5825] usb usb4-port1: attempt power cycle [ 106.993729][ T5825] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 107.046563][ T6295] netlink: 40 bytes leftover after parsing attributes in process `syz.2.93'. [ 107.056649][ T5825] usb 4-1: device descriptor read/8, error -71 [ 107.124332][ T5885] peak_usb 2-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 107.140455][ T5885] peak_usb 2-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 107.275335][ T6302] overlayfs: missing 'lowerdir' [ 107.317443][ T5885] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -71 [ 107.335907][ T5885] usb 2-1: USB disconnect, device number 2 [ 107.336524][ T5825] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 107.368172][ T5825] usb 4-1: device descriptor read/8, error -71 [ 107.478428][ T5825] usb usb4-port1: unable to enumerate USB device [ 107.869768][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 107.869787][ T30] audit: type=1326 audit(1751582223.670:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.4.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 107.897907][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.906585][ T5885] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 107.960083][ T30] audit: type=1326 audit(1751582223.670:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.4.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 107.982059][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.127574][ T30] audit: type=1326 audit(1751582223.670:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.4.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 108.166965][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.186495][ T30] audit: type=1326 audit(1751582223.670:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.4.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 108.208751][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 108.220261][ T5885] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 108.228913][ T5885] usb 2-1: config 0 has no interface number 0 [ 108.388624][ T5885] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 108.398119][ T30] audit: type=1326 audit(1751582223.670:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.4.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 108.425099][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.468812][ T5885] usb 2-1: Product: syz [ 108.473023][ T5885] usb 2-1: Manufacturer: syz [ 108.507344][ T5885] usb 2-1: SerialNumber: syz [ 108.535206][ T30] audit: type=1326 audit(1751582223.670:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.4.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 108.562799][ T5885] usb 2-1: config 0 descriptor?? [ 108.580308][ T30] audit: type=1326 audit(1751582223.680:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.4.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 108.607389][ T30] audit: type=1326 audit(1751582223.810:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.4.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 108.629380][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.669840][ T30] audit: type=1326 audit(1751582223.810:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.4.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 108.714717][ T30] audit: type=1326 audit(1751582223.870:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.4.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 108.778390][ T5885] msi2500 2-1:0.246: Registered as swradio24 [ 108.813586][ T5885] msi2500 2-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 109.858396][ T5916] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 109.946456][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 110.006464][ T5916] usb 4-1: device descriptor read/64, error -71 [ 110.156492][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 110.168420][ T24] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 110.181705][ T24] usb 5-1: config 0 has no interface number 0 [ 110.235055][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 110.245827][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.254098][ T24] usb 5-1: Product: syz [ 110.256483][ T5916] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 110.266567][ T24] usb 5-1: Manufacturer: syz [ 110.271427][ T24] usb 5-1: SerialNumber: syz [ 110.281613][ T24] usb 5-1: config 0 descriptor?? [ 110.412686][ T6350] overlayfs: missing 'lowerdir' [ 110.436674][ T5916] usb 4-1: device descriptor read/64, error -71 [ 110.455263][ T24] videodev: could not get a free minor [ 110.473402][ T24] msi2500 5-1:0.246: Failed to register as video device (-23) [ 110.546940][ T5916] usb usb4-port1: attempt power cycle [ 110.561848][ T24] msi2500 5-1:0.246: probe with driver msi2500 failed with error -23 [ 111.016478][ T5916] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 111.037290][ T5916] usb 4-1: device descriptor read/8, error -71 [ 111.151891][ T5885] usb 2-1: USB disconnect, device number 3 [ 111.291846][ T5916] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 111.327081][ T5916] usb 4-1: device descriptor read/8, error -71 [ 111.436784][ T5916] usb usb4-port1: unable to enumerate USB device [ 112.366088][ T6382] fuse: Unknown parameter '' [ 112.696269][ T977] usb 5-1: USB disconnect, device number 5 [ 113.376436][ T5825] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 113.566801][ T5825] usb 5-1: Using ep0 maxpacket: 8 [ 113.854339][ T5825] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 113.871372][ T5825] usb 5-1: config 0 has no interface number 0 [ 113.896985][ T24] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 114.115147][ T24] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 114.123671][ T24] usb 3-1: config 0 has an invalid interface number: 11 but max is 2 [ 114.137546][ T24] usb 3-1: config 0 has no interface number 0 [ 114.143616][ T24] usb 3-1: config 0 has no interface number 1 [ 114.152099][ T5825] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 114.165318][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.175468][ T24] usb 3-1: too many endpoints for config 0 interface 11 altsetting 255: 255, using maximum allowed: 30 [ 114.216527][ T5825] usb 5-1: Product: syz [ 114.275704][ T5825] usb 5-1: Manufacturer: syz [ 114.282623][ T24] usb 3-1: config 0 interface 11 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 114.296745][ T5825] usb 5-1: SerialNumber: syz [ 114.328273][ T24] usb 3-1: config 0 interface 11 has no altsetting 0 [ 114.340656][ T24] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 114.359422][ T5825] usb 5-1: config 0 descriptor?? [ 114.365432][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.384787][ T24] usb 3-1: config 0 descriptor?? [ 114.556198][ T5825] msi2500 5-1:0.246: Registered as swradio24 [ 114.593768][ T5825] msi2500 5-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 114.662913][ T24] usb 3-1: Could not set interface, error -71 [ 114.693883][ T24] usb 3-1: selecting invalid altsetting 0 [ 114.729139][ T24] usb 3-1: Could not set interface, error -22 [ 114.759827][ T24] usb 3-1: USB disconnect, device number 4 [ 115.417348][ T5916] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 115.471985][ T6431] netlink: 44 bytes leftover after parsing attributes in process `syz.1.129'. [ 115.574753][ T6428] netlink: 16 bytes leftover after parsing attributes in process `syz.0.128'. [ 115.642537][ T6431] netlink: 44 bytes leftover after parsing attributes in process `syz.1.129'. [ 115.760614][ T5916] usb 4-1: config 0 has no interfaces? [ 115.803054][ T5916] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 115.836241][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.858487][ T5916] usb 4-1: Product: syz [ 115.871141][ T5916] usb 4-1: Manufacturer: syz [ 115.896622][ T5916] usb 4-1: SerialNumber: syz [ 115.921388][ T5916] usb 4-1: config 0 descriptor?? [ 116.376567][ T5916] usb 5-1: USB disconnect, device number 6 [ 116.489350][ T6440] FAULT_INJECTION: forcing a failure. [ 116.489350][ T6440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.526575][ T6440] CPU: 0 UID: 0 PID: 6440 Comm: syz.1.131 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 116.526599][ T6440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.526608][ T6440] Call Trace: [ 116.526614][ T6440] [ 116.526621][ T6440] dump_stack_lvl+0x189/0x250 [ 116.526651][ T6440] ? __pfx____ratelimit+0x10/0x10 [ 116.526673][ T6440] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.526695][ T6440] ? __pfx__printk+0x10/0x10 [ 116.526712][ T6440] ? __might_fault+0xb0/0x130 [ 116.526738][ T6440] should_fail_ex+0x414/0x560 [ 116.526762][ T6440] _copy_from_user+0x2d/0xb0 [ 116.526778][ T6440] ___sys_sendmsg+0x158/0x2a0 [ 116.526798][ T6440] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.526849][ T6440] ? __fget_files+0x2a/0x420 [ 116.526866][ T6440] ? __fget_files+0x3a0/0x420 [ 116.526891][ T6440] __x64_sys_sendmsg+0x19b/0x260 [ 116.526912][ T6440] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.526939][ T6440] ? __pfx_ksys_write+0x10/0x10 [ 116.526953][ T6440] ? rcu_is_watching+0x15/0xb0 [ 116.526980][ T6440] ? do_syscall_64+0xbe/0x3b0 [ 116.527005][ T6440] do_syscall_64+0xfa/0x3b0 [ 116.527024][ T6440] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.527044][ T6440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.527059][ T6440] ? clear_bhb_loop+0x60/0xb0 [ 116.527077][ T6440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.527092][ T6440] RIP: 0033:0x7f58b838e929 [ 116.527106][ T6440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.527119][ T6440] RSP: 002b:00007f58b91b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.527136][ T6440] RAX: ffffffffffffffda RBX: 00007f58b85b5fa0 RCX: 00007f58b838e929 [ 116.527147][ T6440] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 116.527157][ T6440] RBP: 00007f58b91b7090 R08: 0000000000000000 R09: 0000000000000000 [ 116.527167][ T6440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.527177][ T6440] R13: 0000000000000000 R14: 00007f58b85b5fa0 R15: 00007f58b86dfa28 [ 116.527203][ T6440] [ 117.571817][ T6451] netlink: 'syz.0.135': attribute type 13 has an invalid length. [ 117.697785][ T6455] syzkaller1: entered promiscuous mode [ 117.703264][ T6455] syzkaller1: entered allmulticast mode [ 118.111375][ T24] usb 4-1: USB disconnect, device number 14 [ 118.784725][ T6480] netlink: 40 bytes leftover after parsing attributes in process `syz.3.144'. [ 119.068710][ T6490] netlink: 'syz.2.147': attribute type 13 has an invalid length. [ 119.330503][ T6494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.149'. [ 119.365422][ T6496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.150'. [ 119.381325][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 120.096805][ T24] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 120.166453][ T977] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 120.335584][ T977] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 120.440427][ T977] usb 3-1: config 0 has an invalid interface number: 10 but max is 2 [ 120.571076][ T977] usb 3-1: config 0 has no interface number 0 [ 120.598774][ T977] usb 3-1: config 0 has no interface number 1 [ 120.605257][ T24] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 120.630821][ T24] usb 1-1: config 0 has an invalid interface number: 11 but max is 2 [ 120.642975][ T977] usb 3-1: too many endpoints for config 0 interface 10 altsetting 255: 255, using maximum allowed: 30 [ 120.655440][ T24] usb 1-1: config 0 has no interface number 0 [ 120.740670][ T24] usb 1-1: config 0 has no interface number 1 [ 120.755157][ T977] usb 3-1: config 0 interface 10 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 120.783749][ T24] usb 1-1: too many endpoints for config 0 interface 11 altsetting 255: 255, using maximum allowed: 30 [ 120.814465][ T977] usb 3-1: config 0 interface 10 has no altsetting 0 [ 120.847473][ T24] usb 1-1: config 0 interface 11 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 120.945883][ T977] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 120.976569][ T24] usb 1-1: config 0 interface 11 has no altsetting 0 [ 120.985716][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.046607][ T24] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 121.077021][ T977] usb 3-1: config 0 descriptor?? [ 121.082607][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.104562][ T24] usb 1-1: config 0 descriptor?? [ 121.534784][ T6526] FAULT_INJECTION: forcing a failure. [ 121.534784][ T6526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.555731][ T6526] CPU: 0 UID: 0 PID: 6526 Comm: syz.4.157 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 121.555746][ T6526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.555751][ T6526] Call Trace: [ 121.555756][ T6526] [ 121.555760][ T6526] dump_stack_lvl+0x189/0x250 [ 121.555787][ T6526] ? __pfx____ratelimit+0x10/0x10 [ 121.555809][ T6526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.555832][ T6526] ? __pfx__printk+0x10/0x10 [ 121.555849][ T6526] ? __might_fault+0xb0/0x130 [ 121.555871][ T6526] should_fail_ex+0x414/0x560 [ 121.555888][ T6526] _copy_from_user+0x2d/0xb0 [ 121.555898][ T6526] ___sys_sendmsg+0x158/0x2a0 [ 121.555910][ T6526] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.555958][ T6526] ? __fget_files+0x2a/0x420 [ 121.555975][ T6526] ? __fget_files+0x3a0/0x420 [ 121.556002][ T6526] __x64_sys_sendmsg+0x19b/0x260 [ 121.556019][ T6526] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 121.556034][ T6526] ? __pfx_ksys_write+0x10/0x10 [ 121.556041][ T6526] ? rcu_is_watching+0x15/0xb0 [ 121.556058][ T6526] ? do_syscall_64+0xbe/0x3b0 [ 121.556086][ T6526] do_syscall_64+0xfa/0x3b0 [ 121.556107][ T6526] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.556128][ T6526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.556144][ T6526] ? clear_bhb_loop+0x60/0xb0 [ 121.556162][ T6526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.556170][ T6526] RIP: 0033:0x7fd64dd8e929 [ 121.556179][ T6526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.556186][ T6526] RSP: 002b:00007fd64ebc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.556197][ T6526] RAX: ffffffffffffffda RBX: 00007fd64dfb5fa0 RCX: 00007fd64dd8e929 [ 121.556203][ T6526] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 121.556209][ T6526] RBP: 00007fd64ebc9090 R08: 0000000000000000 R09: 0000000000000000 [ 121.556215][ T6526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.556224][ T6526] R13: 0000000000000000 R14: 00007fd64dfb5fa0 R15: 00007fd64e0dfa28 [ 121.556250][ T6526] [ 121.860115][ T24] usb 1-1: Could not set interface, error -71 [ 121.875429][ T24] usb 1-1: selecting invalid altsetting 0 [ 122.066304][ T24] usb 1-1: Could not set interface, error -22 [ 122.110720][ T24] usb 1-1: USB disconnect, device number 7 [ 122.742838][ T6538] netlink: 20 bytes leftover after parsing attributes in process `syz.1.162'. [ 122.927428][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 122.927442][ T30] audit: type=1326 audit(1751582238.750:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5098e929 code=0x7ffc0000 [ 122.966732][ T30] audit: type=1326 audit(1751582238.750:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5098e929 code=0x7ffc0000 [ 123.073358][ T977] usb 3-1: Could not set interface, error -71 [ 123.112068][ T977] usb 3-1: selecting invalid altsetting 0 [ 123.162541][ T977] usb 3-1: Could not set interface, error -22 [ 123.183411][ T977] usb 3-1: USB disconnect, device number 5 [ 123.242320][ T6545] netlink: 68 bytes leftover after parsing attributes in process `syz.4.165'. [ 123.271148][ T6548] netlink: 68 bytes leftover after parsing attributes in process `syz.2.166'. [ 123.384614][ T6548] netlink: 'syz.2.166': attribute type 11 has an invalid length. [ 123.775639][ T6557] netlink: 'syz.1.168': attribute type 13 has an invalid length. [ 124.234847][ T6576] netlink: 20 bytes leftover after parsing attributes in process `syz.1.174'. [ 124.289670][ T6579] xt_nfacct: accounting object `syz0' does not exists [ 124.546169][ T6584] FAULT_INJECTION: forcing a failure. [ 124.546169][ T6584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.559513][ T5909] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 124.573406][ T6584] CPU: 0 UID: 0 PID: 6584 Comm: syz.4.176 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 124.573427][ T6584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.573436][ T6584] Call Trace: [ 124.573441][ T6584] [ 124.573447][ T6584] dump_stack_lvl+0x189/0x250 [ 124.573470][ T6584] ? __pfx____ratelimit+0x10/0x10 [ 124.573488][ T6584] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.573506][ T6584] ? __pfx__printk+0x10/0x10 [ 124.573519][ T6584] ? __might_fault+0xb0/0x130 [ 124.573540][ T6584] should_fail_ex+0x414/0x560 [ 124.573559][ T6584] _copy_from_user+0x2d/0xb0 [ 124.573571][ T6584] do_sys_poll+0x242/0x1070 [ 124.573597][ T6584] ? __pfx_do_sys_poll+0x10/0x10 [ 124.573661][ T6584] ? rcu_read_lock_any_held+0xb3/0x120 [ 124.573674][ T6584] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 124.573690][ T6584] ? vfs_write+0x8d8/0xa90 [ 124.573730][ T6584] ? set_user_sigmask+0xc7/0x1b0 [ 124.573747][ T6584] ? __pfx_set_user_sigmask+0x10/0x10 [ 124.573772][ T6584] __se_sys_ppoll+0x1ff/0x260 [ 124.573795][ T6584] ? __pfx___se_sys_ppoll+0x10/0x10 [ 124.573807][ T6584] ? __pfx_ksys_write+0x10/0x10 [ 124.573817][ T6584] ? rcu_is_watching+0x15/0xb0 [ 124.573838][ T6584] ? do_syscall_64+0xbe/0x3b0 [ 124.573854][ T6584] ? __x64_sys_ppoll+0x20/0xc0 [ 124.573868][ T6584] do_syscall_64+0xfa/0x3b0 [ 124.573884][ T6584] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.573900][ T6584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.573912][ T6584] ? clear_bhb_loop+0x60/0xb0 [ 124.573927][ T6584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.573939][ T6584] RIP: 0033:0x7fd64dd8e929 [ 124.573951][ T6584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.573961][ T6584] RSP: 002b:00007fd64ebc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 124.573976][ T6584] RAX: ffffffffffffffda RBX: 00007fd64dfb5fa0 RCX: 00007fd64dd8e929 [ 124.573985][ T6584] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 124.573994][ T6584] RBP: 00007fd64ebc9090 R08: 0000000000000000 R09: 0000000000000000 [ 124.574001][ T6584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.574008][ T6584] R13: 0000000000000000 R14: 00007fd64dfb5fa0 R15: 00007fd64e0dfa28 [ 124.574029][ T6584] [ 124.804520][ T977] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 124.890193][ T5909] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 124.899382][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.911243][ T5909] usb 1-1: config 0 descriptor?? [ 124.975776][ T977] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 124.987626][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 125.066418][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 125.148214][ T977] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 125.247982][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.308752][ T977] usb 3-1: Product: syz [ 125.341744][ T977] usb 3-1: Manufacturer: syz [ 125.350978][ T977] usb 3-1: SerialNumber: syz [ 125.358041][ T977] usb 3-1: config 0 descriptor?? [ 125.511216][ T30] audit: type=1326 audit(1751582241.350:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 125.533291][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.563144][ T30] audit: type=1326 audit(1751582241.360:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 125.640280][ T30] audit: type=1326 audit(1751582241.360:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 125.662482][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.678141][ T977] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 125.685806][ T977] powermate 3-1:0.0: probe with driver powermate failed with error -5 [ 125.726230][ T30] audit: type=1326 audit(1751582241.360:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 125.748348][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.775101][ T977] usb 3-1: USB disconnect, device number 6 [ 125.800930][ T30] audit: type=1326 audit(1751582241.360:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 125.934206][ T30] audit: type=1326 audit(1751582241.360:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 125.974931][ T30] audit: type=1326 audit(1751582241.360:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 125.997075][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.051814][ T30] audit: type=1326 audit(1751582241.360:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 126.593495][ T6608] netlink: 'syz.3.184': attribute type 13 has an invalid length. [ 126.647171][ T977] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 126.763928][ T5909] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 126.792292][ T5909] [drm:udl_init] *ERROR* Selecting channel failed [ 126.861288][ T5909] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 126.864069][ T977] usb 3-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 126.892976][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.906434][ T5909] [drm] Initialized udl on minor 2 [ 126.925092][ T977] usb 3-1: config 0 descriptor?? [ 126.928249][ T5909] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 126.956305][ T977] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 126.972494][ T5909] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 127.010960][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 127.012173][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 127.039445][ T5909] usb 1-1: USB disconnect, device number 8 [ 127.099186][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 127.389382][ T6620] overlayfs: missing 'lowerdir' [ 127.587320][ T977] gspca_sn9c20x: Write register 1000 failed -110 [ 127.593785][ T977] gspca_sn9c20x: Device initialization failed [ 127.603991][ T977] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 127.722858][ T6634] overlayfs: missing 'lowerdir' [ 127.844551][ T5825] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 128.080920][ T5825] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.091966][ T5825] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 128.104279][ T5825] usb 5-1: config 1 has no interface number 1 [ 128.139769][ T5825] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 128.203575][ T5825] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 128.233889][ T5825] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 128.244749][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.260201][ T5825] usb 5-1: Product: syz [ 128.274134][ T5825] usb 5-1: Manufacturer: syz [ 128.328360][ T5825] usb 5-1: SerialNumber: syz [ 128.379077][ T6623] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 128.615394][ T6623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.632708][ T6623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.076521][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 129.231283][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 129.239519][ T24] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 129.249530][ T24] usb 1-1: config 0 has no interface number 0 [ 129.257844][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 129.269292][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.291973][ T24] usb 1-1: Product: syz [ 129.305012][ T24] usb 1-1: Manufacturer: syz [ 129.323446][ T24] usb 1-1: SerialNumber: syz [ 129.376306][ T977] usb 3-1: USB disconnect, device number 7 [ 129.398651][ T24] usb 1-1: config 0 descriptor?? [ 129.651656][ T6650] netlink: 'syz.2.196': attribute type 13 has an invalid length. [ 129.727802][ T24] msi2500 1-1:0.246: Registered as swradio24 [ 129.777721][ T24] msi2500 1-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 130.123777][ T6653] netlink: 40 bytes leftover after parsing attributes in process `syz.3.195'. [ 130.498846][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 130.498860][ T30] audit: type=1326 audit(1751582246.340:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f7f8e929 code=0x7ffc0000 [ 130.623271][ T30] audit: type=1326 audit(1751582246.340:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f38f7f8e929 code=0x7ffc0000 [ 130.645511][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.737517][ T5825] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 130.820420][ T30] audit: type=1326 audit(1751582246.340:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f7f8e929 code=0x7ffc0000 [ 130.850221][ T5825] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 130.988544][ T30] audit: type=1326 audit(1751582246.340:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38f7f8e929 code=0x7ffc0000 [ 131.060912][ T5825] usb 5-1: USB disconnect, device number 7 [ 131.082527][ T30] audit: type=1326 audit(1751582246.340:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f7f8e929 code=0x7ffc0000 [ 131.209677][ T30] audit: type=1326 audit(1751582246.340:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f38f7f8e929 code=0x7ffc0000 [ 131.232684][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.338521][ T30] audit: type=1326 audit(1751582246.700:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f7f8e929 code=0x7ffc0000 [ 131.415452][ T30] audit: type=1326 audit(1751582246.700:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f7f8e929 code=0x7ffc0000 [ 131.561074][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.201'. [ 132.326533][ T5909] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 132.356511][ T5885] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 132.494488][ T5909] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 132.503214][ T5909] usb 2-1: config 0 has an invalid interface number: 11 but max is 2 [ 132.513194][ T5909] usb 2-1: config 0 has no interface number 0 [ 132.519923][ T5909] usb 2-1: config 0 has no interface number 1 [ 132.528335][ T5909] usb 2-1: too many endpoints for config 0 interface 11 altsetting 255: 255, using maximum allowed: 30 [ 132.540025][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 132.549492][ T5885] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 132.560592][ T5825] usb 1-1: USB disconnect, device number 9 [ 132.609159][ T5885] usb 5-1: config 1 has no interface number 0 [ 132.750632][ T5909] usb 2-1: config 0 interface 11 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 132.766095][ T5885] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 132.824718][ T6691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.872971][ T5885] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 132.892262][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.902404][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.909789][ T5909] usb 2-1: config 0 interface 11 has no altsetting 0 [ 132.942678][ T5909] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 132.962683][ T5885] usb 5-1: config 1 interface 105 has no altsetting 0 [ 133.066125][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.067157][ T5885] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 133.116322][ T5909] usb 2-1: config 0 descriptor?? [ 133.127681][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.252896][ T5885] usb 5-1: Product: syz [ 133.263219][ T6697] netlink: 'syz.3.209': attribute type 13 has an invalid length. [ 133.280374][ T5885] usb 5-1: Manufacturer: syz [ 133.295174][ T5885] usb 5-1: SerialNumber: syz [ 133.361863][ T5909] usb 2-1: Could not set interface, error -71 [ 133.382142][ T5909] usb 2-1: selecting invalid altsetting 0 [ 133.388863][ T5909] usb 2-1: Could not set interface, error -22 [ 133.421401][ T6682] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 133.430308][ T6682] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 133.442811][ T5909] usb 2-1: USB disconnect, device number 4 [ 133.970710][ T30] audit: type=1326 audit(1751582249.810:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5098e929 code=0x7ffc0000 [ 134.034534][ T30] audit: type=1326 audit(1751582249.810:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5098e929 code=0x7ffc0000 [ 134.158814][ T6682] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 134.178604][ T6682] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 134.426002][ T5885] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 134.553980][ T5885] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71 [ 134.664800][ T5885] usb 5-1: USB disconnect, device number 8 [ 134.757219][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 135.013162][ T6726] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.073554][ T6728] fuse: Unknown parameter '' [ 136.109668][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 136.288604][ T5893] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 136.581518][ T5893] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 136.639148][ T5893] usb 3-1: config 0 has an invalid interface number: 11 but max is 2 [ 136.666447][ T5893] usb 3-1: config 0 has no interface number 0 [ 136.685670][ T5893] usb 3-1: config 0 has no interface number 1 [ 136.705193][ T5893] usb 3-1: too many endpoints for config 0 interface 11 altsetting 255: 255, using maximum allowed: 30 [ 136.784744][ T5893] usb 3-1: config 0 interface 11 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 136.912605][ T5893] usb 3-1: config 0 interface 11 has no altsetting 0 [ 136.930992][ T5893] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 136.953579][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.017892][ T6791] overlayfs: missing 'lowerdir' [ 137.064851][ T5893] usb 3-1: config 0 descriptor?? [ 137.105760][ T6788] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 137.112529][ T6788] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 137.127310][ T6788] vhci_hcd vhci_hcd.0: Device attached [ 137.169121][ T6794] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 137.175761][ T6794] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 137.222704][ T6793] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 137.229260][ T6793] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 137.267374][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 137.298437][ T6794] vhci_hcd vhci_hcd.0: Device attached [ 137.303455][ T5893] usb 3-1: Could not set interface, error -71 [ 137.341410][ T5893] usb 3-1: selecting invalid altsetting 0 [ 137.355161][ T6803] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 137.361709][ T6803] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 137.368141][ T5893] usb 3-1: Could not set interface, error -22 [ 137.398580][ T5885] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 137.457273][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 137.552663][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 137.587330][ T24] usb 2-1: config 1 interface 0 altsetting 38 bulk endpoint 0x1 has invalid maxpacket 64 [ 137.606477][ T5893] usb 3-1: USB disconnect, device number 8 [ 137.653455][ T6793] vhci_hcd vhci_hcd.0: Device attached [ 137.673965][ T24] usb 2-1: config 1 interface 0 altsetting 38 bulk endpoint 0x82 has invalid maxpacket 64 [ 137.723047][ T6803] vhci_hcd vhci_hcd.0: Device attached [ 137.775120][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 137.810947][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 137.820907][ T6790] vhci_hcd: connection reset by peer [ 137.821213][ T6796] vhci_hcd: connection closed [ 137.827691][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.845906][ T6804] vhci_hcd: connection closed [ 137.851028][ T24] usb 2-1: Product: syz [ 137.871212][ T13] vhci_hcd: stop threads [ 137.905072][ T13] vhci_hcd: release socket [ 137.921118][ T6795] vhci_hcd: connection closed [ 137.923963][ T24] usb 2-1: Manufacturer: syz [ 137.960611][ T13] vhci_hcd: disconnect device [ 137.972273][ T24] usb 2-1: SerialNumber: syz [ 137.993834][ T13] vhci_hcd: stop threads [ 138.013180][ T6792] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 138.020989][ T6792] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 138.029202][ T13] vhci_hcd: release socket [ 138.071288][ T13] vhci_hcd: disconnect device [ 138.107360][ T13] vhci_hcd: stop threads [ 138.122332][ T13] vhci_hcd: release socket [ 138.128792][ T13] vhci_hcd: disconnect device [ 138.142559][ T13] vhci_hcd: stop threads [ 138.152762][ T13] vhci_hcd: release socket [ 138.171153][ T13] vhci_hcd: disconnect device [ 138.263418][ T24] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 38 proto 2 vid 0x0525 pid 0xA4A8 [ 138.463362][ T24] usb 2-1: USB disconnect, device number 5 [ 138.508523][ T24] usblp0: removed [ 138.862405][ T6820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.867272][ T6821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.967810][ T6826] netlink: 24 bytes leftover after parsing attributes in process `syz.4.237'. [ 139.105189][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 139.342497][ T6837] fuse: Unknown parameter '' [ 139.956531][ T5825] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 140.162140][ T5825] usb 2-1: Using ep0 maxpacket: 32 [ 140.177992][ T6855] netlink: 32 bytes leftover after parsing attributes in process `syz.2.245'. [ 140.206700][ T5825] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 140.206754][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 140.225618][ T5825] usb 2-1: config 0 has no interface number 0 [ 140.255431][ T5825] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.316468][ T5825] usb 2-1: config 0 interface 85 has no altsetting 0 [ 140.358189][ T5825] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 140.367559][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.375577][ T5825] usb 2-1: Product: syz [ 140.418390][ T5825] usb 2-1: Manufacturer: syz [ 140.451571][ T5825] usb 2-1: SerialNumber: syz [ 140.497391][ T5825] usb 2-1: config 0 descriptor?? [ 142.546513][ T5885] vhci_hcd: vhci_device speed not set [ 142.639480][ T6912] overlayfs: missing 'lowerdir' [ 142.771581][ T6911] overlayfs: missing 'lowerdir' [ 142.810404][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 143.845550][ T5909] usb usb34-port1: attempt power cycle [ 143.997123][ T6923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.256'. [ 144.433307][ T5909] usb usb34-port1: unable to enumerate USB device [ 145.319738][ T5825] appletouch 2-1:0.85: Failed to read mode from device. [ 145.393123][ T6956] fuse: Unknown parameter '' [ 145.421623][ T5825] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 145.500047][ T5825] usb 2-1: USB disconnect, device number 6 [ 145.720932][ T6961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.261'. [ 145.807069][ T6961] IPv6: NLM_F_CREATE should be specified when creating new route [ 145.832379][ T6961] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.839858][ T6961] IPv6: NLM_F_CREATE should be set when creating new route [ 146.504771][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'. [ 146.596578][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'. [ 146.922099][ T6975] netlink: 60 bytes leftover after parsing attributes in process `syz.1.264'. [ 146.977862][ T6977] FAULT_INJECTION: forcing a failure. [ 146.977862][ T6977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.993803][ T6977] CPU: 0 UID: 0 PID: 6977 Comm: syz.0.265 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 146.993826][ T6977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.993836][ T6977] Call Trace: [ 146.993843][ T6977] [ 146.993850][ T6977] dump_stack_lvl+0x189/0x250 [ 146.993876][ T6977] ? __pfx____ratelimit+0x10/0x10 [ 146.993899][ T6977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.993917][ T6977] ? __pfx__printk+0x10/0x10 [ 146.993928][ T6977] ? __might_fault+0xb0/0x130 [ 146.993943][ T6977] should_fail_ex+0x414/0x560 [ 146.993957][ T6977] _copy_from_user+0x2d/0xb0 [ 146.993967][ T6977] ___sys_sendmsg+0x158/0x2a0 [ 146.993980][ T6977] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.994008][ T6977] ? __fget_files+0x2a/0x420 [ 146.994018][ T6977] ? __fget_files+0x3a0/0x420 [ 146.994033][ T6977] __x64_sys_sendmsg+0x19b/0x260 [ 146.994045][ T6977] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 146.994060][ T6977] ? __pfx_ksys_write+0x10/0x10 [ 146.994068][ T6977] ? rcu_is_watching+0x15/0xb0 [ 146.994084][ T6977] ? do_syscall_64+0xbe/0x3b0 [ 146.994099][ T6977] do_syscall_64+0xfa/0x3b0 [ 146.994112][ T6977] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.994125][ T6977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.994134][ T6977] ? clear_bhb_loop+0x60/0xb0 [ 146.994145][ T6977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.994153][ T6977] RIP: 0033:0x7f9298b8e929 [ 146.994162][ T6977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.994170][ T6977] RSP: 002b:00007f92969f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.994180][ T6977] RAX: ffffffffffffffda RBX: 00007f9298db5fa0 RCX: 00007f9298b8e929 [ 146.994187][ T6977] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 146.994192][ T6977] RBP: 00007f92969f6090 R08: 0000000000000000 R09: 0000000000000000 [ 146.994198][ T6977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.994203][ T6977] R13: 0000000000000000 R14: 00007f9298db5fa0 R15: 00007f9298edfa28 [ 146.994217][ T6977] [ 147.626739][ T5893] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 147.840943][ T5893] usb 4-1: config 0 has no interfaces? [ 147.868533][ T5893] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 147.877998][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.915635][ T5893] usb 4-1: Product: syz [ 147.925601][ T5893] usb 4-1: Manufacturer: syz [ 147.935438][ T5893] usb 4-1: SerialNumber: syz [ 147.952254][ T5893] usb 4-1: config 0 descriptor?? [ 148.218058][ T6982] program syz.3.266 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.228244][ T6982] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 148.920832][ T7008] netlink: 'syz.1.275': attribute type 13 has an invalid length. [ 149.359191][ T7014] overlayfs: missing 'lowerdir' [ 149.716945][ T7020] dlm: non-version read from control device 36 [ 149.865981][ T7027] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 149.876190][ T7027] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 150.136771][ T5825] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 150.298884][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.314338][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.329610][ T5825] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 150.358240][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.454223][ T5825] usb 3-1: config 0 descriptor?? [ 150.821128][ T5893] usb 4-1: USB disconnect, device number 15 [ 151.291462][ T7039] FAULT_INJECTION: forcing a failure. [ 151.291462][ T7039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.335958][ T5825] hid-steam 0003:28DE:1142.0002: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 151.346435][ T7039] CPU: 0 UID: 0 PID: 7039 Comm: syz.0.285 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 151.346458][ T7039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.346468][ T7039] Call Trace: [ 151.346474][ T7039] [ 151.346481][ T7039] dump_stack_lvl+0x189/0x250 [ 151.346508][ T7039] ? __pfx____ratelimit+0x10/0x10 [ 151.346531][ T7039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.346553][ T7039] ? __pfx__printk+0x10/0x10 [ 151.346570][ T7039] ? __might_fault+0xb0/0x130 [ 151.346595][ T7039] should_fail_ex+0x414/0x560 [ 151.346618][ T7039] _copy_from_user+0x2d/0xb0 [ 151.346634][ T7039] kvm_arch_vm_ioctl+0x3e8/0x16f0 [ 151.346657][ T7039] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 151.346679][ T7039] ? __lock_acquire+0xab9/0xd20 [ 151.346706][ T7039] ? __lock_acquire+0xab9/0xd20 [ 151.346736][ T7039] ? __lock_acquire+0xab9/0xd20 [ 151.346766][ T7039] ? __lock_acquire+0xab9/0xd20 [ 151.346810][ T7039] ? is_bpf_text_address+0x292/0x2b0 [ 151.346830][ T7039] ? is_bpf_text_address+0x26/0x2b0 [ 151.346852][ T7039] ? kernel_text_address+0xa5/0xe0 [ 151.346868][ T7039] ? __kernel_text_address+0xd/0x40 [ 151.346882][ T7039] ? unwind_get_return_address+0x4d/0x90 [ 151.346901][ T7039] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 151.346916][ T7039] ? arch_stack_walk+0xfc/0x150 [ 151.346940][ T7039] ? stack_trace_save+0x9c/0xe0 [ 151.346957][ T7039] ? stack_depot_save_flags+0x40/0x900 [ 151.346983][ T7039] ? kasan_save_track+0x4f/0x80 [ 151.347001][ T7039] ? kasan_save_track+0x3e/0x80 [ 151.347018][ T7039] ? kasan_save_free_info+0x46/0x50 [ 151.347034][ T7039] ? __kasan_slab_free+0x62/0x70 [ 151.347046][ T7039] ? kfree+0x18e/0x440 [ 151.347064][ T7039] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 151.347079][ T7039] ? security_file_ioctl+0xcb/0x2d0 [ 151.347093][ T7039] ? __se_sys_ioctl+0x47/0x170 [ 151.347112][ T7039] ? do_syscall_64+0xfa/0x3b0 [ 151.347132][ T7039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.347158][ T7039] kvm_vm_ioctl+0x85f/0xc60 [ 151.347181][ T7039] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 151.347205][ T7039] ? do_vfs_ioctl+0x12ba/0x1990 [ 151.347234][ T7039] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 151.347261][ T7039] ? kasan_quarantine_put+0xdd/0x220 [ 151.347291][ T7039] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 151.347308][ T7039] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 151.347325][ T7039] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 151.347341][ T7039] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 151.347358][ T7039] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 151.347390][ T7039] ? __lock_acquire+0xab9/0xd20 [ 151.347428][ T7039] ? __fget_files+0x2a/0x420 [ 151.347447][ T7039] ? __fget_files+0x2a/0x420 [ 151.347462][ T7039] ? __fget_files+0x3a0/0x420 [ 151.347477][ T7039] ? __fget_files+0x2a/0x420 [ 151.347496][ T7039] ? bpf_lsm_file_ioctl+0x9/0x20 [ 151.347515][ T7039] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 151.347536][ T7039] __se_sys_ioctl+0xf9/0x170 [ 151.347559][ T7039] do_syscall_64+0xfa/0x3b0 [ 151.347579][ T7039] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.347599][ T7039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.347613][ T7039] ? clear_bhb_loop+0x60/0xb0 [ 151.347632][ T7039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.347646][ T7039] RIP: 0033:0x7f9298b8e929 [ 151.347661][ T7039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.347674][ T7039] RSP: 002b:00007f92969f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.347691][ T7039] RAX: ffffffffffffffda RBX: 00007f9298db5fa0 RCX: 00007f9298b8e929 [ 151.347701][ T7039] RDX: 0000200000000140 RSI: 000000004048aec9 RDI: 0000000000000004 [ 151.347711][ T7039] RBP: 00007f92969f6090 R08: 0000000000000000 R09: 0000000000000000 [ 151.347721][ T7039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.347729][ T7039] R13: 0000000000000000 R14: 00007f9298db5fa0 R15: 00007f9298edfa28 [ 151.347755][ T7039] [ 151.824182][ T5825] hid-steam 0003:28DE:1142.0002: Steam wireless receiver connected [ 151.890849][ T5825] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 151.973858][ T5825] usb 3-1: USB disconnect, device number 9 [ 152.031914][ T5825] hid-steam 0003:28DE:1142.0002: Steam wireless receiver disconnected [ 152.126253][ T7061] netlink: 40 bytes leftover after parsing attributes in process `syz.3.290'. [ 152.197543][ T7058] fido_id[7058]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 152.496637][ T7075] overlayfs: missing 'lowerdir' [ 153.506655][ T5825] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 153.666555][ T5825] usb 3-1: Using ep0 maxpacket: 16 [ 153.696620][ T5893] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 153.715255][ T5825] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 153.725639][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.741586][ T5825] usb 3-1: Product: syz [ 153.746319][ T5825] usb 3-1: Manufacturer: syz [ 153.756067][ T5825] usb 3-1: SerialNumber: syz [ 153.778783][ T5825] usb 3-1: config 0 descriptor?? [ 153.886619][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 153.906253][ T5893] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 153.927301][ T5893] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 153.948489][ T7101] sctp: [Deprecated]: syz.4.305 (pid 7101) Use of int in maxseg socket option. [ 153.948489][ T7101] Use struct sctp_assoc_value instead [ 153.959285][ T5893] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 154.010463][ T7091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.023287][ T7091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.032146][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.064828][ T7101] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 154.067469][ T5893] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 154.088320][ T7091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.097533][ T7091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.116474][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 154.150790][ T5893] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 154.175832][ T7101] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.305'. [ 154.208991][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.240866][ T5893] usb 1-1: config 0 descriptor?? [ 154.396280][ T7109] dlm: non-version read from control device 36 [ 154.735201][ T5893] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 155.254916][ T7123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.312'. [ 155.361757][ T7126] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.312' sets config #0 [ 155.400658][ T7126] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.312' sets config #1 [ 155.596473][ T5893] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 155.771140][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 155.779193][ T5893] usb 4-1: config 0 has no interfaces? [ 155.813588][ T5893] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 155.832524][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.880765][ T5893] usb 4-1: Product: syz [ 155.909705][ T5893] usb 4-1: Manufacturer: syz [ 155.931197][ T5893] usb 4-1: SerialNumber: syz [ 155.953671][ T5893] usb 4-1: config 0 descriptor?? [ 156.173695][ T5825] usb_8dev 3-1:0.0 can0: sending command message failed [ 156.261444][ T7125] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 7125 comm: syz.3.311) [ 156.275771][ T5825] usb_8dev 3-1:0.0 can0: can't get firmware version [ 156.408198][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 156.408215][ T30] audit: type=1800 audit(1751582272.260:96): pid=7125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.311" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=17453 res=0 errno=0 [ 156.454886][ T7138] netlink: 36 bytes leftover after parsing attributes in process `syz.2.315'. [ 156.497540][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'. [ 156.567331][ T5916] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 156.584790][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'. [ 156.594482][ T5825] usb_8dev 3-1:0.0: probe with driver usb_8dev failed with error -22 [ 156.618894][ T5825] usb 3-1: USB disconnect, device number 10 [ 156.621434][ T5885] usb 4-1: USB disconnect, device number 16 [ 156.673813][ T7138] overlayfs: missing 'lowerdir' [ 156.787242][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 156.793080][ T5893] usb 1-1: USB disconnect, device number 10 [ 156.833679][ T5893] usblp0: removed [ 156.860711][ T5916] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 156.886463][ T5916] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 156.925266][ T5916] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.955243][ T5916] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 156.987836][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.007208][ T5916] usbtmc 2-1:16.0: bulk endpoints not found [ 157.025020][ T7141] netlink: 'syz.4.317': attribute type 10 has an invalid length. [ 157.035816][ T7141] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 157.050549][ T7141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.329510][ T7147] dlm: non-version read from control device 36 [ 157.766976][ T5916] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 157.797460][ T7159] netlink: 40 bytes leftover after parsing attributes in process `syz.3.321'. [ 157.872613][ T7154] netlink: 60 bytes leftover after parsing attributes in process `syz.0.320'. [ 157.946463][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 157.953115][ T5916] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 157.962504][ T5916] usb 5-1: config 0 has no interface number 0 [ 157.982660][ T5916] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 157.992034][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.056630][ T5916] usb 5-1: Product: syz [ 158.061031][ T5916] usb 5-1: Manufacturer: syz [ 158.069151][ T5916] usb 5-1: SerialNumber: syz [ 158.173066][ T7169] overlayfs: missing 'lowerdir' [ 158.237092][ T5916] usb 5-1: config 0 descriptor?? [ 158.467471][ T5916] msi2500 5-1:0.246: Registered as swradio24 [ 158.474397][ T5916] msi2500 5-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 159.492835][ T30] audit: type=1326 audit(1751582275.310:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9298b8e929 code=0x7ffc0000 [ 159.540917][ T5893] usb 2-1: USB disconnect, device number 7 [ 159.569842][ T30] audit: type=1326 audit(1751582275.310:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f9298b8e929 code=0x7ffc0000 [ 159.664803][ T30] audit: type=1326 audit(1751582275.310:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9298b8e929 code=0x7ffc0000 [ 159.769509][ T30] audit: type=1326 audit(1751582275.310:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9298b8e929 code=0x7ffc0000 [ 159.798650][ T30] audit: type=1326 audit(1751582275.310:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9298b8e929 code=0x7ffc0000 [ 159.832433][ T30] audit: type=1326 audit(1751582275.310:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9298b8e929 code=0x7ffc0000 [ 159.860240][ T30] audit: type=1326 audit(1751582275.560:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9298b8e929 code=0x7ffc0000 [ 159.984613][ T30] audit: type=1326 audit(1751582275.560:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9298b8e929 code=0x7ffc0000 [ 160.012675][ T30] audit: type=1326 audit(1751582275.710:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9298b8e929 code=0x7ffc0000 [ 160.779717][ T7203] netlink: 148 bytes leftover after parsing attributes in process `syz.1.331'. [ 161.297232][ T7209] capability: warning: `syz.3.332' uses deprecated v2 capabilities in a way that may be insecure [ 161.376544][ T5825] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 161.500346][ T5893] usb 5-1: USB disconnect, device number 9 [ 161.537001][ T5825] usb 2-1: Using ep0 maxpacket: 32 [ 161.562262][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 161.584520][ T5825] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 161.621234][ T5825] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 161.635728][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.647258][ T5825] usb 2-1: Product: syz [ 161.651460][ T5825] usb 2-1: Manufacturer: syz [ 161.656068][ T5825] usb 2-1: SerialNumber: syz [ 161.665008][ T5825] usb 2-1: config 0 descriptor?? [ 161.688962][ T5825] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 161.733225][ T5825] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 161.737898][ T7213] fuse: Unknown parameter '' [ 161.788432][ T5825] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 161.880500][ T977] usb 2-1: USB disconnect, device number 8 [ 161.949580][ T5825] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 162.146452][ T5825] usb 1-1: Using ep0 maxpacket: 32 [ 162.158614][ T5825] usb 1-1: config 9 has an invalid interface number: 240 but max is 3 [ 162.167481][ T5825] usb 1-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 162.202163][ T5825] usb 1-1: config 9 has an invalid interface number: 90 but max is 3 [ 162.221507][ T5825] usb 1-1: config 9 has an invalid interface number: 60 but max is 3 [ 162.251718][ T5825] usb 1-1: config 9 has an invalid interface number: 108 but max is 3 [ 162.279155][ T5825] usb 1-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 162.319879][ T5825] usb 1-1: config 9 has 5 interfaces, different from the descriptor's value: 4 [ 162.334460][ T5825] usb 1-1: config 9 has no interface number 1 [ 162.353967][ T5825] usb 1-1: config 9 has no interface number 2 [ 162.370090][ T5825] usb 1-1: config 9 has no interface number 3 [ 162.380149][ T5825] usb 1-1: config 9 has no interface number 4 [ 162.391847][ T5825] usb 1-1: config 9 interface 240 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 162.452859][ T5825] usb 1-1: config 9 interface 240 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 8 [ 162.493446][ T5825] usb 1-1: config 9 interface 240 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 162.595681][ T5825] usb 1-1: config 9 interface 240 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 162.613200][ T5825] usb 1-1: config 9 interface 240 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 162.624488][ T5825] usb 1-1: config 9 interface 240 altsetting 2 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 162.638331][ T5825] usb 1-1: config 9 interface 60 altsetting 15 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 162.670020][ T5825] usb 1-1: config 9 interface 60 altsetting 15 has a duplicate endpoint with address 0xD, skipping [ 162.706648][ T5825] usb 1-1: config 9 interface 60 altsetting 15 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 162.761362][ T5825] usb 1-1: config 9 interface 60 altsetting 15 has a duplicate endpoint with address 0x4, skipping [ 162.856569][ T5825] usb 1-1: config 9 interface 60 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 162.947871][ T5825] usb 1-1: config 9 interface 60 altsetting 15 has an endpoint descriptor with address 0x18, changing to 0x8 [ 163.026423][ T5825] usb 1-1: config 9 interface 60 altsetting 15 has a duplicate endpoint with address 0x8, skipping [ 163.046440][ T5825] usb 1-1: config 9 interface 60 altsetting 15 has a duplicate endpoint with address 0x8, skipping [ 163.146421][ T5825] usb 1-1: config 9 interface 60 altsetting 15 has a duplicate endpoint with address 0x6, skipping [ 163.193557][ T5825] usb 1-1: config 9 interface 60 altsetting 15 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 163.341653][ T5825] usb 1-1: config 9 interface 108 altsetting 192 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.389385][ T5825] usb 1-1: too many endpoints for config 9 interface 0 altsetting 7: 36, using maximum allowed: 30 [ 163.416740][ T5825] usb 1-1: config 9 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 36 [ 163.453251][ T5825] usb 1-1: config 9 interface 240 has no altsetting 0 [ 163.483693][ T5825] usb 1-1: config 9 interface 90 has no altsetting 0 [ 163.506544][ T5825] usb 1-1: config 9 interface 60 has no altsetting 0 [ 163.513279][ T5825] usb 1-1: config 9 interface 108 has no altsetting 0 [ 163.545331][ T5825] usb 1-1: config 9 interface 0 has no altsetting 0 [ 163.568593][ T5825] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0130, bcdDevice=ef.de [ 163.586454][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.605808][ T5825] usb 1-1: Product: syz [ 163.610111][ T5825] usb 1-1: Manufacturer: syz [ 163.614715][ T5825] usb 1-1: SerialNumber: syz [ 163.632139][ T7214] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 163.641013][ T5825] ftdi_sio 1-1:9.240: FTDI USB Serial Device converter detected [ 163.650479][ T5825] ftdi_sio ttyUSB0: unknown device type: 0xefde [ 163.883287][ T5825] ftdi_sio 1-1:9.90: FTDI USB Serial Device converter detected [ 163.908877][ T5825] ftdi_sio ttyUSB1: unknown device type: 0xefde [ 163.928099][ T5825] ftdi_sio 1-1:9.60: FTDI USB Serial Device converter detected [ 163.948208][ T5825] ftdi_sio ttyUSB2: unknown device type: 0xefde [ 163.968676][ T5825] ftdi_sio 1-1:9.108: FTDI USB Serial Device converter detected [ 163.978470][ T5825] ftdi_sio ttyUSB3: unknown device type: 0xefde [ 163.990481][ T5825] ftdi_sio 1-1:9.0: FTDI USB Serial Device converter detected [ 164.001737][ T5825] ftdi_sio ttyUSB4: unknown device type: 0xefde [ 164.012486][ T5825] usb 1-1: USB disconnect, device number 11 [ 164.025244][ T5825] ftdi_sio 1-1:9.240: device disconnected [ 164.051069][ T5825] ftdi_sio 1-1:9.90: device disconnected [ 164.081803][ T5825] ftdi_sio 1-1:9.60: device disconnected [ 164.125186][ T5825] ftdi_sio 1-1:9.108: device disconnected [ 164.147916][ T5825] ftdi_sio 1-1:9.0: device disconnected [ 164.844706][ T7251] ip6tnl1: entered promiscuous mode [ 165.368146][ T1068] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 165.607259][ T5825] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 165.708565][ T1068] usb 1-1: Using ep0 maxpacket: 8 [ 165.717867][ T1068] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 165.726030][ T1068] usb 1-1: config 0 has no interface number 0 [ 165.767194][ T1068] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 165.776265][ T1068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.808637][ T1068] usb 1-1: Product: syz [ 165.812861][ T1068] usb 1-1: Manufacturer: syz [ 165.855419][ T1068] usb 1-1: SerialNumber: syz [ 165.911045][ T5825] usb 3-1: config 0 has no interfaces? [ 165.948948][ T1068] usb 1-1: config 0 descriptor?? [ 165.996084][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 165.996121][ T30] audit: type=1326 audit(1751582281.830:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 166.084284][ T5825] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 166.106492][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.114739][ T5825] usb 3-1: Product: syz [ 166.119124][ T5825] usb 3-1: Manufacturer: syz [ 166.123863][ T5825] usb 3-1: SerialNumber: syz [ 166.132599][ T5825] usb 3-1: config 0 descriptor?? [ 166.159947][ T30] audit: type=1326 audit(1751582281.830:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 166.200259][ T30] audit: type=1326 audit(1751582281.830:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 166.273193][ T1068] msi2500 1-1:0.246: Registered as swradio24 [ 166.279328][ T1068] msi2500 1-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 166.342023][ T30] audit: type=1326 audit(1751582281.830:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 166.418336][ T30] audit: type=1326 audit(1751582281.830:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 166.477050][ T30] audit: type=1326 audit(1751582281.830:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 166.499455][ T30] audit: type=1326 audit(1751582281.830:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 166.528892][ T30] audit: type=1326 audit(1751582281.830:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 166.597315][ T30] audit: type=1326 audit(1751582281.830:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd64dd8e929 code=0x7ffc0000 [ 167.120645][ T7264] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.894303][ T7294] bond_slave_0: entered promiscuous mode [ 167.900117][ T7294] bond_slave_1: entered promiscuous mode [ 167.906092][ T7294] macvlan2: entered allmulticast mode [ 167.911721][ T7294] bond0: entered allmulticast mode [ 167.928796][ T7294] bond_slave_0: entered allmulticast mode [ 167.955188][ T7294] bond_slave_1: entered allmulticast mode [ 167.979345][ T7294] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 167.999474][ T7294] bridge0: port 3(macvlan2) entered blocking state [ 168.021361][ T30] audit: type=1326 audit(1751582283.870:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.1.356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58b838e929 code=0x0 [ 168.044781][ T7294] bridge0: port 3(macvlan2) entered disabled state [ 168.075097][ T1068] usb 1-1: USB disconnect, device number 12 [ 168.094275][ T7294] macvlan2: entered promiscuous mode [ 168.104518][ T7294] bond0: entered promiscuous mode [ 168.171245][ T7294] bridge0: port 3(macvlan2) entered blocking state [ 168.178198][ T7294] bridge0: port 3(macvlan2) entered forwarding state [ 168.407498][ T5825] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 168.599614][ T5825] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 168.612810][ T5825] usb 2-1: config 0 has no interface number 0 [ 168.623371][ T5825] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 168.647280][ T1068] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 168.681107][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.913838][ T1068] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 168.922097][ T1068] usb 1-1: config 0 has no interface number 0 [ 168.929282][ T1068] usb 1-1: config 0 interface 29 has no altsetting 0 [ 168.945414][ T24] usb 3-1: USB disconnect, device number 11 [ 168.959380][ T5825] usb 2-1: Product: syz [ 168.986141][ T5825] usb 2-1: Manufacturer: syz [ 169.000758][ T5825] usb 2-1: SerialNumber: syz [ 169.015832][ T5825] usb 2-1: config 0 descriptor?? [ 169.112629][ T1068] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 169.138872][ T1068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.159722][ T1068] usb 1-1: Product: syz [ 169.169977][ T1068] usb 1-1: Manufacturer: syz [ 169.191781][ T1068] usb 1-1: SerialNumber: syz [ 169.229159][ T5825] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 169.241613][ T5825] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 169.388641][ T5825] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 169.420781][ T1068] usb 1-1: config 0 descriptor?? [ 169.439841][ T5825] usb 2-1: media controller created [ 169.566902][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.831752][ T1068] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v213 fw v0.0.0 (2 channels) [ 170.076520][ T977] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 170.409568][ T977] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 170.432562][ T977] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 170.508220][ T5825] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 170.521116][ T977] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 170.581005][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.650027][ T7324] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 170.712322][ T977] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 170.808027][ T5825] usb 2-1: USB disconnect, device number 9 [ 171.348450][ T5825] usb 4-1: USB disconnect, device number 17 [ 172.235250][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'. [ 172.306867][ T7346] netlink: 16 bytes leftover after parsing attributes in process `syz.3.364'. [ 172.316234][ T7346] netlink: 16 bytes leftover after parsing attributes in process `syz.3.364'. [ 172.604361][ T1068] peak_usb 1-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 172.630094][ T1068] peak_usb 1-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 172.959592][ T1068] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -71 [ 173.019920][ T1068] usb 1-1: USB disconnect, device number 13 [ 173.063857][ T7320] netlink: 'syz.2.361': attribute type 1 has an invalid length. [ 173.346427][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 173.346449][ T30] audit: type=1326 audit(1751582289.180:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5098e929 code=0x7ffc0000 [ 173.446513][ T1068] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 173.558770][ T30] audit: type=1326 audit(1751582289.180:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5098e929 code=0x7ffc0000 [ 173.656522][ T1068] usb 1-1: Using ep0 maxpacket: 8 [ 173.693833][ T1068] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 173.702297][ T1068] usb 1-1: config 0 has no interface number 0 [ 173.716439][ T30] audit: type=1326 audit(1751582289.180:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f3b5098e929 code=0x7ffc0000 [ 173.759073][ T1068] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 173.772021][ T7320] bond1: entered promiscuous mode [ 173.787470][ T1068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.846440][ T1068] usb 1-1: Product: syz [ 173.855345][ T30] audit: type=1326 audit(1751582289.180:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5098e929 code=0x7ffc0000 [ 173.877732][ T10] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 173.903148][ T1068] usb 1-1: Manufacturer: syz [ 173.946447][ T1068] usb 1-1: SerialNumber: syz [ 173.986301][ T30] audit: type=1326 audit(1751582289.180:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b5098e929 code=0x7ffc0000 [ 174.037044][ T1068] usb 1-1: config 0 descriptor?? [ 174.074841][ T7320] bond1: entered allmulticast mode [ 174.088028][ T10] usb 2-1: device descriptor read/64, error -71 [ 174.110259][ T30] audit: type=1326 audit(1751582289.180:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5098e929 code=0x7ffc0000 [ 174.202791][ T30] audit: type=1326 audit(1751582289.180:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3b5098e929 code=0x7ffc0000 [ 174.246482][ T30] audit: type=1326 audit(1751582289.560:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5098e929 code=0x7ffc0000 [ 174.337968][ T1068] msi2500 1-1:0.246: Registered as swradio24 [ 174.357787][ T1068] msi2500 1-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 174.368542][ T10] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 174.384855][ T30] audit: type=1326 audit(1751582289.560:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5098e929 code=0x7ffc0000 [ 174.485560][ T30] audit: type=1326 audit(1751582289.600:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b5098e929 code=0x7ffc0000 [ 174.566823][ T10] usb 2-1: device descriptor read/64, error -71 [ 174.679824][ T10] usb usb2-port1: attempt power cycle [ 174.962774][ T7399] FAULT_INJECTION: forcing a failure. [ 174.962774][ T7399] name failslab, interval 1, probability 0, space 0, times 0 [ 175.027527][ T7399] CPU: 1 UID: 0 PID: 7399 Comm: syz.4.377 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 175.027553][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.027564][ T7399] Call Trace: [ 175.027571][ T7399] [ 175.027578][ T7399] dump_stack_lvl+0x189/0x250 [ 175.027604][ T7399] ? __pfx____ratelimit+0x10/0x10 [ 175.027627][ T7399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.027648][ T7399] ? __pfx__printk+0x10/0x10 [ 175.027670][ T7399] ? __pfx___might_resched+0x10/0x10 [ 175.027697][ T7399] should_fail_ex+0x414/0x560 [ 175.027720][ T7399] should_failslab+0xa8/0x100 [ 175.027738][ T7399] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 175.027755][ T7399] ? __alloc_skb+0x112/0x2d0 [ 175.027774][ T7399] __alloc_skb+0x112/0x2d0 [ 175.027793][ T7399] netlink_sendmsg+0x5c6/0xb30 [ 175.027820][ T7399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.027841][ T7399] ? aa_sock_msg_perm+0x94/0x160 [ 175.027862][ T7399] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 175.027881][ T7399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.027900][ T7399] __sock_sendmsg+0x219/0x270 [ 175.027925][ T7399] ____sys_sendmsg+0x505/0x830 [ 175.027948][ T7399] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.027983][ T7399] ? import_iovec+0x74/0xa0 [ 175.028000][ T7399] ___sys_sendmsg+0x21f/0x2a0 [ 175.028021][ T7399] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.028071][ T7399] ? __fget_files+0x2a/0x420 [ 175.028088][ T7399] ? __fget_files+0x3a0/0x420 [ 175.028116][ T7399] __x64_sys_sendmsg+0x19b/0x260 [ 175.028138][ T7399] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 175.028166][ T7399] ? __pfx_ksys_write+0x10/0x10 [ 175.028178][ T7399] ? rcu_is_watching+0x15/0xb0 [ 175.028206][ T7399] ? do_syscall_64+0xbe/0x3b0 [ 175.028232][ T7399] do_syscall_64+0xfa/0x3b0 [ 175.028252][ T7399] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.028275][ T7399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.028292][ T7399] ? clear_bhb_loop+0x60/0xb0 [ 175.028311][ T7399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.028326][ T7399] RIP: 0033:0x7fd64dd8e929 [ 175.028342][ T7399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.028356][ T7399] RSP: 002b:00007fd64ebc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.028374][ T7399] RAX: ffffffffffffffda RBX: 00007fd64dfb5fa0 RCX: 00007fd64dd8e929 [ 175.028384][ T7399] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 175.028394][ T7399] RBP: 00007fd64ebc9090 R08: 0000000000000000 R09: 0000000000000000 [ 175.028404][ T7399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.028415][ T7399] R13: 0000000000000000 R14: 00007fd64dfb5fa0 R15: 00007fd64e0dfa28 [ 175.028440][ T7399] [ 175.086601][ T10] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 175.089233][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.316163][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.322505][ C1] hrtimer: interrupt took 286146115 ns [ 175.393244][ T10] usb 2-1: device descriptor read/8, error -71 [ 175.422554][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.430006][ T5893] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 175.655294][ T5825] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 175.826164][ T5825] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.840549][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 175.853532][ T1068] usb 1-1: USB disconnect, device number 14 [ 175.864784][ T10] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 175.876451][ T5825] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 175.890076][ T5893] usb 4-1: unable to get BOS descriptor or descriptor too short [ 175.907399][ T5893] usb 4-1: config 7 has an invalid interface number: 67 but max is 0 [ 175.924224][ T5893] usb 4-1: config 7 has no interface number 0 [ 175.956203][ T5825] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 175.956212][ T10] usb 2-1: device descriptor read/8, error -71 [ 176.005114][ T5893] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 176.015778][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.128800][ T10] usb usb2-port1: unable to enumerate USB device [ 176.176755][ T5825] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 176.184842][ T5893] usb 4-1: Product: 㯑 [ 176.190845][ T5825] usb 3-1: Manufacturer: syz [ 176.217611][ T5825] usb 3-1: config 0 descriptor?? [ 176.457169][ T7400] FAULT_INJECTION: forcing a failure. [ 176.457169][ T7400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.470391][ T1068] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 176.481654][ T5893] usb 4-1: USB disconnect, device number 18 [ 176.513562][ T7400] CPU: 0 UID: 0 PID: 7400 Comm: syz.2.375 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 176.513587][ T7400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.513597][ T7400] Call Trace: [ 176.513604][ T7400] [ 176.513611][ T7400] dump_stack_lvl+0x189/0x250 [ 176.513638][ T7400] ? __pfx____ratelimit+0x10/0x10 [ 176.513661][ T7400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.513684][ T7400] ? __pfx__printk+0x10/0x10 [ 176.513700][ T7400] ? __might_fault+0xb0/0x130 [ 176.513723][ T7400] should_fail_ex+0x414/0x560 [ 176.513746][ T7400] _copy_from_user+0x2d/0xb0 [ 176.513763][ T7400] restore_altstack+0x9d/0x4b0 [ 176.513781][ T7400] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 176.513805][ T7400] ? __pfx_restore_altstack+0x10/0x10 [ 176.513839][ T7400] ? _raw_spin_unlock_irq+0x23/0x50 [ 176.513856][ T7400] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.513878][ T7400] __ia32_sys_rt_sigreturn+0x1ac/0x7b0 [ 176.513901][ T7400] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.513921][ T7400] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 176.513939][ T7400] ? _raw_spin_unlock_irq+0x2e/0x50 [ 176.513956][ T7400] ? signal_setup_done+0x230/0x310 [ 176.513982][ T7400] ? __lock_acquire+0xab9/0xd20 [ 176.514020][ T7400] ? __task_pid_nr_ns+0x28/0x470 [ 176.514040][ T7400] ? do_syscall_64+0xbe/0x3b0 [ 176.514065][ T7400] do_syscall_64+0xfa/0x3b0 [ 176.514086][ T7400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.514101][ T7400] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 176.514117][ T7400] ? clear_bhb_loop+0x60/0xb0 [ 176.514136][ T7400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.514151][ T7400] RIP: 0033:0x7f38f7f2ab19 [ 176.514166][ T7400] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 176.514181][ T7400] RSP: 002b:00007f38f8e2a9c0 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 176.514198][ T7400] RAX: ffffffffffffffda RBX: 0000000000000c38 RCX: 00007f38f7f2ab19 [ 176.514209][ T7400] RDX: 00007f38f8e2a9c0 RSI: 00007f38f8e2aaf0 RDI: 0000000000000021 [ 176.514220][ T7400] RBP: 0000000000000003 R08: 00007f38f82e0320 R09: 0000000000000000 [ 176.514231][ T7400] R10: 0000000000000003 R11: 0000000000000202 R12: 00002000000000c0 [ 176.514241][ T7400] R13: 000000000000000a R14: 00007f38f81b5fa0 R15: 00007f38f82dfa28 [ 176.514268][ T7400] [ 176.998535][ T5885] usb 3-1: USB disconnect, device number 12 [ 177.089341][ T1068] usb 1-1: config index 0 descriptor too short (expected 45568, got 9) [ 177.101266][ T1068] usb 1-1: config 0 has too many interfaces: 34, using maximum allowed: 32 [ 177.141681][ T1068] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 34 [ 177.158481][ T1068] usb 1-1: New USB device found, idVendor=04a5, idProduct=300a, bcdDevice=5f.57 [ 177.179655][ T1068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.198277][ T1068] usb 1-1: Product: syz [ 177.206558][ T1068] usb 1-1: Manufacturer: syz [ 177.212702][ T1068] usb 1-1: SerialNumber: syz [ 177.230506][ T1068] usb 1-1: config 0 descriptor?? [ 177.461477][ T1068] usb 1-1: USB disconnect, device number 15 [ 177.479007][ T7421] netlink: 'syz.3.381': attribute type 13 has an invalid length. [ 177.702730][ T7427] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.384'. [ 177.712591][ T7427] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 177.736573][ T7427] openvswitch: netlink: Message has 8454 unknown bytes. [ 177.787590][ T7436] overlayfs: missing 'lowerdir' [ 178.187243][ T7453] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.391' resets device [ 178.299793][ T7439] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 178.307626][ T7439] #PF: supervisor instruction fetch in kernel mode [ 178.314470][ T7439] #PF: error_code(0x0010) - not-present page [ 178.320427][ T7439] PGD 800000007936e067 P4D 800000007936e067 PUD 0 [ 178.326442][ T977] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 178.326945][ T7439] Oops: Oops: 0010 [#1] SMP KASAN PTI [ 178.334591][ T5893] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 178.339825][ T7439] CPU: 0 UID: 0 PID: 7439 Comm: syz.3.386 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 178.339844][ T7439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.339855][ T7439] RIP: 0010:0x0 [ 178.339873][ T7439] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 178.380059][ T7439] RSP: 0018:ffffc9001d01f998 EFLAGS: 00010293 [ 178.386106][ T7439] RAX: ffffffff81f84ac4 RBX: 1ffffd400025c690 RCX: ffff88802a9f8000 [ 178.394072][ T7439] RDX: 0000000000000000 RSI: ffffea00012e3480 RDI: ffff88801beae380 [ 178.402032][ T7439] RBP: ffffc9001d01fa50 R08: ffffea00012e3487 R09: 1ffffd400025c690 [ 178.409995][ T7439] R10: dffffc0000000000 R11: 0000000000000000 R12: 0000000000000000 [ 178.417965][ T7439] R13: ffffea00012e3488 R14: ffffea00012e3480 R15: 1ffffd400025c691 [ 178.425935][ T7439] FS: 00007f3b5186b6c0(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 178.434859][ T7439] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.441957][ T7439] CR2: ffffffffffffffd6 CR3: 00000000508e2000 CR4: 00000000003526f0 [ 178.449924][ T7439] Call Trace: [ 178.453193][ T7439] [ 178.456109][ T7439] filemap_read_folio+0x117/0x380 [ 178.461129][ T7439] ? __pfx_filemap_read_folio+0x10/0x10 [ 178.466662][ T7439] ? filemap_add_folio+0x1af/0x270 [ 178.471761][ T7439] do_read_cache_folio+0x350/0x590 [ 178.476924][ T7439] freader_get_folio+0x3c4/0x830 [ 178.481854][ T7439] freader_fetch+0xa3/0x5d0 [ 178.486352][ T7439] __build_id_parse+0x133/0x7d0 [ 178.491201][ T7439] ? __pfx___build_id_parse+0x10/0x10 [ 178.496568][ T7439] ? find_vma+0xe7/0x160 [ 178.500795][ T7439] ? __pfx_find_vma+0x10/0x10 [ 178.505459][ T7439] ? query_matching_vma+0x1b2/0x1d0 [ 178.510647][ T7439] procfs_procmap_ioctl+0x7f0/0xce0 [ 178.515831][ T7439] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 178.521542][ T7439] ? __fget_files+0x2a/0x420 [ 178.526119][ T7439] ? __fget_files+0x2a/0x420 [ 178.530694][ T7439] ? __fget_files+0x3a0/0x420 [ 178.535355][ T7439] ? __fget_files+0x2a/0x420 [ 178.539930][ T7439] ? bpf_lsm_file_ioctl+0x9/0x20 [ 178.544864][ T7439] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 178.550569][ T7439] __se_sys_ioctl+0xf9/0x170 [ 178.555151][ T7439] do_syscall_64+0xfa/0x3b0 [ 178.559643][ T7439] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.564831][ T7439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.570885][ T7439] ? clear_bhb_loop+0x60/0xb0 [ 178.575550][ T7439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.581428][ T7439] RIP: 0033:0x7f3b5098e929 [ 178.585828][ T7439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.605436][ T7439] RSP: 002b:00007f3b5186b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.613861][ T7439] RAX: ffffffffffffffda RBX: 00007f3b50bb5fa0 RCX: 00007f3b5098e929 [ 178.621832][ T7439] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 000000000000000b [ 178.629803][ T7439] RBP: 00007f3b50a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 178.637766][ T7439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.645724][ T7439] R13: 0000000000000000 R14: 00007f3b50bb5fa0 R15: 00007f3b50cdfa28 [ 178.653690][ T7439] [ 178.656699][ T7439] Modules linked in: [ 178.660596][ T7439] CR2: 0000000000000000 [ 178.664735][ T7439] ---[ end trace 0000000000000000 ]--- [ 178.670243][ T7439] RIP: 0010:0x0 [ 178.673733][ T7439] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 178.681088][ T7439] RSP: 0018:ffffc9001d01f998 EFLAGS: 00010293 [ 178.687157][ T7439] RAX: ffffffff81f84ac4 RBX: 1ffffd400025c690 RCX: ffff88802a9f8000 [ 178.695120][ T7439] RDX: 0000000000000000 RSI: ffffea00012e3480 RDI: ffff88801beae380 [ 178.703076][ T7439] RBP: ffffc9001d01fa50 R08: ffffea00012e3487 R09: 1ffffd400025c690 [ 178.711034][ T7439] R10: dffffc0000000000 R11: 0000000000000000 R12: 0000000000000000 [ 178.718989][ T7439] R13: ffffea00012e3488 R14: ffffea00012e3480 R15: 1ffffd400025c691 [ 178.726947][ T7439] FS: 00007f3b5186b6c0(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 178.735862][ T7439] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.742428][ T7439] CR2: ffffffffffffffd6 CR3: 00000000508e2000 CR4: 00000000003526f0 [ 178.750399][ T7439] Kernel panic - not syncing: Fatal exception [ 178.756815][ T7439] Kernel Offset: disabled [ 178.761128][ T7439] Rebooting in 86400 seconds..