last executing test programs: 17.910859721s ago: executing program 2 (id=1004): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x7) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_open_dev$sg(0x0, 0x0, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000b4321f00000000000a00631818000000", @ANYRES32, @ANYBLOB="0000000000000100b706000014020100b7030000000600186200000008000000bf0900000000000055090100000000007b00000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000001e40)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) move_pages(r4, 0x3, &(0x7f0000000140)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000300)=[0x6b, 0x1, 0x3, 0x7, 0xa04b022, 0x8, 0xd3ee, 0xffffffff, 0x9], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) sendfile(r3, r2, 0x0, 0x20000023893) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x1000000000000003, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rt6_stats\x00') pread64(r7, &(0x7f0000000000)=""/158, 0x9e, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) capget(&(0x7f0000000100)={0x19980330, r4}, &(0x7f0000000280)={0x80000001, 0xfffffff7, 0x2, 0x4, 0x2, 0x22c}) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r8, 0xc0505405, &(0x7f00000001c0)={{0x3, 0x0, 0x8, 0x0, 0xff70}, 0x0, 0x3bcb, 0x5}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000400)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) socket$inet6_tcp(0xa, 0x1, 0x0) 13.868280945s ago: executing program 2 (id=1014): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_connect(0x5, 0xa93, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x8e, 0xe8, 0x87, 0x20, 0x421, 0x492, 0x73fa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa81, 0x4, 0x8, 0x80, 0xd0, 0x6, [{{0x9, 0x4, 0xea, 0x2, 0x4, 0xd4, 0xf0, 0x3e, 0x7, [@hid_hid={0x9, 0x21, 0x2b, 0xe1, 0x1, {0x22, 0x933}}, @generic={0x8e, 0x5, "34252f49660a47cd3632a38e576d8a31e8516d0fa2b186026f749ff08cdd8928b58c06b2d5682cdc19886205ff12291fe30bbe36ba66aecc5000ca61b2fdc6ee50fe5baa1599941b9cd4c161535b3bdfa72cc8352bf0a8bb1a9551f962e6ed09ec358098707eebeae9e0c157339688be0378200a094fa11e65e6d11bff85f2971a8493d8c390295e68575c29"}], [{{0x9, 0x5, 0x5, 0x2, 0x8, 0xbc, 0x2f, 0x7}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x53, 0x7, 0x3b, [@generic={0x3f, 0xd, "8c7ad97a60df1e0bee1f0e2db6221f420db51bcebdef116635c98666761ce9abbdf1a5d0de9f1d5db65286e78e9cdf84b503fcae1a63be4467da37b64d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x1, 0xa6, 0xff, [@generic={0xc8, 0xc, "1ae860ce667fddb2f47a35654096ad7b56050d3f2a0c87a31b60a2af42f853fd2c240bcfa853eeb8698561878087abdd2d9f515d42ca82d5f2c130dcc2add345440f5b14e2c61f723a11b373e2bd11237d4d92ee95624fb1a103706d01dbe667264f7110a8cf87cbd66a50d7eaa554fe0172608a7d34495bf02416fa2c4bd45e8316ba49d3877ac4cfe077cada71231e987b17a2b861ea6cba6c4fefcc420d4d054e69e75cec199564d96c8dfa501b48855bc1c49476b7520262b2bac00537ed6378a66107d7"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xc8, 0x8}]}}, {{0x9, 0x5, 0xb, 0x3, 0x40, 0x3, 0x59, 0x5}}]}}, {{0x9, 0x4, 0x39, 0x0, 0x8, 0xc8, 0x22, 0xd1, 0x7, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '#'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x4, 0x4, 0x7f}, [@mdlm={0x15, 0x24, 0x12, 0xae}]}], [{{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x3, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5}]}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0x5, 0x5, 0x2}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x2, 0x70, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x4}, @generic={0xf8, 0xf, "cd3d692157e819b8f89e6b605be125f27037723cf659cf8bd51f5c4e171f6e423d9cc616f68bb63d9911c5a6fca1f6064fd485d126831b86553dd529263c386843dbe02b87b870554212e56e379528f204f56743d25c2a6cd5e9502221b3fb32c35a756a0f7812468afdc5a3e45c697308eb0524602c33c81021f3b7a2a9702846c4705be3d6a3cdcb3ccec8ad2d34f3bf7c9e012ed8b8af2049ab4afbd2790e84d1c69e78892f719ac975950ba6ded78eef5ba9e9a5fbfc60b9f22fb3057ed9f2d0755d577f197a94b1a7c3250948f028e44d43fa62df834900b3bddd30200d5ea3dce60e04edf0cd1d14ae48a1691380ee3759a5fc"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x70, 0x3, 0x2, [@generic={0x75, 0x5, "9c6dd3bc6ba327ba9362600c54fbd7a97edf65d26941cab86095f66d5591aebd2f5e221343af6739413f3d7573e8c8628bdb78902495545c714404f4466aa55e5a6bc9f859bd68bb4769a58417eb720cd7b49ac71402098ff95b2f588798ce272c1f505c724e246a51f3b36ca8f63d5b2a2401"}, @generic={0xec, 0x24, "83fde7f64a62fcbad5aac2e3e664506eaa08d120a34d018fdb10ecf55201bafbbb187e1cdbef8d97a577138f510133cdad416a84c59da029476a2b8e2f406ae7c6c479438f74198f3aa1f422a58792b33299cf31adc5194e83818f794809bd9706ef306148415abeb9af7abc365ea8ef61c6e311d01a1e8c87ee2c0b1a05f4330f42cc4eec45c6f5f2022fcd98c909978e6916d9ed8a7b309d508caa1a0867728f2c9eca41e3c333968b3907e94da9f8afa8b0947f48a553c78a02148e0d7740e0eed0491fbd48040780f2d2be7dc82d1eac3e0911bfb54cefebcaf4daf73dc27410ec0ace5beed30909"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x9, 0x8, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0xc, 0x1, 0x8}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x0, 0x2, 0x4}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x7, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfe}, @generic={0x4c, 0x10, "903d6917df484eea5d279c0400ce230b61e0fd81775c744c89d67df5af6acf3ee32a131adcc46b7711b2178cab68ac50abaf308600176b5f80fabbdeef2b649daa0c283f42f2a6cf4aa0"}]}}]}}, {{0x9, 0x4, 0xdc, 0xf3, 0x6, 0xff, 0xff, 0xff, 0x3, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xcb78, 0x8, 0x7}, {0x6, 0x24, 0x1a, 0x76c, 0x25}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x2, 0x5, 0x3}, @acm={0x4, 0x24, 0x2, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x8f, 0x4, 0x10, 0xd, 0xdd}]}, @hid_hid={0x9, 0x21, 0x101, 0x4, 0x1, {0x22, 0x6e8}}], [{{0x9, 0x5, 0xc, 0xc, 0x400, 0x10, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xc0, 0x1dc0}]}}, {{0x9, 0x5, 0x5, 0x2, 0x400, 0x6, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x1}, @generic={0xb6, 0xd, "e41418664286e832546db25b7037da59a89c640d7e171f8af3617ad33059d8915a786c0cd811e59697db03fbf81521af30c2453d2d8defaee676b53b28794ce1574c7753bd57a95e4c05ed0bc4277f45b6c7060a5809dc2959dbb900db1d07f3056178a268fc33a49d5325a18f5d0994727db69509623d7644cbb18d584680f86a401c2ce70930add200dc4f6397d2c116921d72e824c7fef8c1042bc63207fdb9824ab1f47bce86777e7d6b6693b1a0f5bea03e"}]}}, {{0x9, 0x5, 0x8ccb5471d91a1361, 0x8, 0x8, 0x8, 0x1, 0x7, [@generic={0x7d, 0x11, "b504ccaaad6ce2e159687aefc2854027ef9a612be9b8c87bdfbe135502d3d2a4c8765018fcd8be601f579d91c27c344164dfbb8c5f96e589b71f493a4a7452827e22cf371cb2944f607005fe65097c628ef57493d77d37f7c9dfc4a7cf3ea38027b4d5500ea88e1a88a37dcd00db7275c32ea55b0e6670711918a4"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x7}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xb5, 0x3, 0xa8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x11}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x7fff}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x0, 0x9, 0x9, [@generic={0xc6, 0x0, "98830d5e9fc1333cb603dee7950ecc6b77b4eda9c44be1ff3d2d9bb2a41f8f97f5e7a7187a474143d5e307695b42a293eed00a4688e51a7adb8bb18c39da1ac8fdde3a8d77038ca55ec1f7eba42b4a731b943cb2fa94e1edc9cec5c772948089059a1b8d9cfa8c9f795498cc9d4b9eead81e69180244721bd444cc5555ebedf72e9d69fbe1006bae08c6c3b69e47b26e53c689c597689c267c329fbde0f11641a2eaf0c9e1c6a92f553be15c51b14f26ea08e0f69d517ad263fe9c8096bb56c668be213e"}, @generic={0x2b, 0x23, "43f0dbc163e85e8ead0ad17fd5abf293d75409e2a79a3ed7cb17b522b3fbf690a2af5882f3a9354afc"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x2, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9b, 0x7}]}}]}}, {{0x9, 0x4, 0xc1, 0x7, 0x10, 0x32, 0x2a, 0xd8, 0x3, [], [{{0x9, 0x5, 0xc, 0x0, 0x10, 0x78, 0x9, 0x8, [@generic={0x45, 0x1, "f0e45d73f4a3198bb136ee66a22f31680949a9a94ae5ba747b31a953ede904f45da0cdc4e92601a53e5094192a5cfd2e213ceba70de96ced41a413b50b4595c060e52f"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xfe00}]}}, {{0x9, 0x5, 0x7, 0xc, 0x20, 0x6, 0x1, 0x8}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x9, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x2}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x8, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x182, 0x1c, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x101}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x5, 0x7, 0x4}}, {{0x9, 0x5, 0x9, 0xc, 0x1c7, 0x6, 0x4, 0xc3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd, 0x3}, @generic={0xe1, 0x4, "f4d2e3cef33cb6b0aa3233534d54aadb630c384d7474086131fca87197ad32a0fe1cb60eb1321da14f21225dbaefdafec98473190469e2ba7a4f22be851a9ef9bdac13a3a1f10b2486ff96acd8e96877ca658f0dfa687639137d0a62598d8323cf0e485433c700582a233f3747e9dc74ae3322cda1d68e25732c61b5622a25caef9203c1009a0bc784349ead4526d17354eaf29ab951505a1c0e7e509bd34b5e84af5e7fda53e45626829ec877adf96a5c4fcf1e0f7cd5362cb71f1053af9fda03c89070c439b3ddef37fa8ad570d56f0424cb181b648ff6613c6df3a8f1d1"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0x2, 0x1, 0x4}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x4, 0x33, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x300}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x10}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x4, 0xf0, 0x74, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x7}]}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0x5, 0x7, 0x3, [@generic={0x98, 0xa, "d36fbb374604a71f1fa0bc30ffe5bd8f5da9779e15a9e9942c619dddccee8482ef8e2bd5fbe229153e515b0d5544b3185d9bf9b53a7f0a5e51877bbb11cd34ecea0e8ef9aad4ec114c9a2b9c4ecd839fe3ce11fae894b87dc44c894c75b65ff8a4156e7469b32ac889a55a3dfc8807d9c204dd290241faeb963dd3735e65f2164c283c5c00b58c695856ec09b79d03ed83cc1f8278ee"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x200, 0x0, 0x3, 0xff}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x6, 0x6, 0x36, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0xfea}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0x1, 0xc, 0x9}}, {{0x9, 0x5, 0xc, 0x8, 0x400, 0x4, 0x2, 0x5}}, {{0x9, 0x5, 0xe, 0x4, 0x10, 0xa7, 0x7, 0x7}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0xf, 0xb, 0x8e}}]}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x100, 0x2, 0x9, 0x9, 0x40, 0x1}, 0xc6, &(0x7f0000000d40)={0x5, 0xf, 0xc6, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x74, "89162e4ddc17070edd65b3b1df7bc12b"}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x208, 0xf000, 0x787, [0x0, 0xc030, 0x3fc0, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "eeb70186817793a26d83097c9c8319c3"}, @generic={0x5f, 0x10, 0x2, "a7ec93ae21ba0db0f01f7a6e4e561c67f8e950318e99892baeb8f6cde6d48a81146cf8101c014b7b06a5dcdc581bf155ed66ba7fd85db5744b941b1661ea6d8a9eeda17a5d56acc9b405d244a23fb3e9dac63f7639b39fefeefb4c78"}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "65ff9d272f77804108d037d33d48692a"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x13, 0x2, 0x4, 0x4}]}, 0x1, [{0xe6, &(0x7f0000000e40)=@string={0xe6, 0x3, "8e7417f1a8e85bfa959efecc8d45802c76834619de7a69201b6817e385453b35f6bcd37db01e8408e086e9c4bcf4d4004bc72c284fcac8cdbc922a84b3f2d83ea011a8c01d0ecd03191bb436703580ee5c2f146329dc7ad70d4a08172982a9218a3307d7ded9a5730504e12659c07a75af12c1cbe4603be3c2c4d1d15f6eb1b351ee0a4d66261a1c0598f93ec1a1984fb40b13dd7cf5dbd58b9c5cea50c6b6303981847f3850a68471fda9b19f71ec97c483b4ec3947a3d134808b959fd7c19b356eb8cda3d0fecf1ec2aefadb727d7c3b5c8677cdd8e5ad1e1124be487bfac8fa57e56a"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000c80)={0x10, &(0x7f0000000bc0)={0x40, 0x9, 0x2, "35e0"}, 0x0, 0x0}) 12.302992868s ago: executing program 0 (id=1020): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="85952b177328da2f8757c9343d6559eb7a", 0x11, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, 0x0, r4}, &(0x7f00000000c0)=""/80, 0x50, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) sendto$inet(r1, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x12, 0x4}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x300, 0x0, 0x0, 0x54}, 0x9c) 11.231192598s ago: executing program 2 (id=1022): socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1b, 0x3e, 0xbd, 0x40, 0x4d8, 0x83, 0x839c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x0, 0x0, 0x2, 0x2, 0x1, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) eventfd2(0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x0, 0xb7, &(0x7f0000000440), 0x0, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=r2, @ANYRES8, @ANYRESOCT=r3, @ANYRES32=r4, @ANYBLOB="ffffffff00"/19, @ANYRES64, @ANYRESDEC=r1, @ANYRESOCT], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014729500b7030000000000008500000005000000bf09000000000000650901000000000066000000ffffff802c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ff, @void, @value}, 0x94) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x10000) readv(r5, &(0x7f00000021c0)=[{&(0x7f0000002180)=""/23, 0x17}], 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x321000, 0x0) syz_usbip_server_init(0x0) clock_gettime(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 10.527432603s ago: executing program 3 (id=1024): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r4, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r4, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r3, 0xff08, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$caif_stream(0x25, 0x1, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}]]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x1f584, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000240)="2294a696"}) r12 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000000280)={{'fd', 0x3d, r12}}, 0x0, 0x0, 0x0) 9.88243895s ago: executing program 0 (id=1025): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aa"], 0x0) r3 = add_key$user(&(0x7f00000002c0), &(0x7f00000023c0)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000380)={&(0x7f0000000000)=""/59, 0x300000, 0x800, 0x800, 0x1}, 0x1c) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000e920e88817000000000200000000000000000000000000000000000000000000000100010000000000005f9ca518cbacf711000000000000007f0000000000000000002200000000000000000000000000ffffffff0dfffffffeffffffffffffff000000000000001e6eca56341055e517a42ef5787177e1f6386ad0b5e845fedbad13ced341e69111786c3e8ef3f7cd0f040000000c519d65c402fb0e462ec3f7bab3c0b1c7603cc3b160b7467d08c0c36af4ab6708fea14b234669287ccab4"], 0xb8}, 0x1, 0x0, 0x0, 0x20028000}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r5], 0x30}, 0x1, 0x0, 0x0, 0x4004001}, 0x4004894) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 9.473538841s ago: executing program 1 (id=1026): socket$inet_tcp(0x2, 0x1, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x7, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc04c5609, &(0x7f0000000400)=@userptr={0x6, 0x1, 0x4, 0x40, 0xf1, {}, {0x3, 0xc, 0x80, 0x4, 0x6, 0x2, "ab438f99"}, 0x3, 0x2, {0x0}, 0x800}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40080d0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)={{}, {}, [{}]}, 0x2c, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2c0, 0x30, 0x300, 0x71bd2a, 0x25dfdbff, {}, [{0x2ac, 0x1, [@m_gact={0x278, 0x110, 0x0, 0x0, {{0x9}, {0x4}, {0x24b, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x2c0}}, 0x20040800) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @local}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/ram8', 0x80400, 0x0) close(r5) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000180)={0x0, 0xf00, &(0x7f0000000140)={&(0x7f0000000040)={0x30, 0x1411, 0x1, 0x70bd2d, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x24040800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000780)={'ip_vti0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x80, 0x7, 0x10000, 0x6, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010100, @local}}}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000200)=""/1, 0x1) 7.656366075s ago: executing program 1 (id=1027): syz_emit_ethernet(0x6e, &(0x7f0000000740)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0xc2, 0x4, 0x0, 0x9, {[@md5sig={0x1d, 0x12, "fb6b9acd8f4e1c92833a2f1e90339d18"}, @eol, @fastopen={0x22, 0xe, "5c16d4efb150d11afe315f9d"}]}}}}}}}}, 0x0) (async) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 7.472261905s ago: executing program 1 (id=1028): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r4, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r4, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r3, 0xff08, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$caif_stream(0x25, 0x1, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x40, r8, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}]]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, 0x1f584, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000240)="2294a696"}) r11 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000000280)={{'fd', 0x3d, r11}}, 0x0, 0x0, 0x0) 7.448819665s ago: executing program 0 (id=1029): r0 = syz_usb_connect(0x0, 0x29c, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000841b7420da040d39bb2d0102030109028a020100000000090408f80af179fa020f24020205000d000cf67df8e6988f0724014004000009050c0340000e0408090502010002"], 0x0) r1 = socket(0x2b, 0x80801, 0x8) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0xc, &(0x7f0000000000)={0x40, 0xd, 0xa5, {0xa5, 0xc, "5557cbdea44519f1895e8a569afaccbac832b023e206f65c0b5c03f3fe0bb952d20955e26af258b05f1e1eb5aaca27a6595592f4f412f2eec9db25cce889112cfe5a29d390c9e5e86f36538e637c8ebc383f2939f4e29710ed5fe6a5e8020bea6fe0b90e383137cd05efd28d715fb7e59af44ed61fe6c07c8428571f35f43088295ddb7d5bfb9e072fe1f37068928ae851c0144965c5df51dacdec121a49949c99b076"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x24, &(0x7f0000000200)={0x20, 0xc, 0xb1, "01f339fd3c9285e6e14376d3f502af6d3ad3f93685c84103883a79be5ecdebc0e0bf1f1ee3b1ab79fb77fa730b5b9282a2d7506fd8b47a87e1d7ccd55ffab345cadc2e923bbbfb1a913be91156ae487022c0c6b43114d50ac29db477f4ce6a3d0efdb04089c02680c9335a2173d8ba26b048dff8139fd408f8b775e77d09359718b2bf6aab7b7f04ce8a3977a756b62f649ce80023aecd38f631381b2a3e3f088d44fb36a7c1677ee699b652c66400810e"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x9, 0xff, 0x6, 0x1, 0x3, 0x3, 0x400, 0x40, 0x9, 0x0, 0x3, 0x2}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x58b}, &(0x7f00000003c0)={0x20, 0x89, 0x2, 0x1}}) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x11, 0x0, 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002840)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x0, 0x1e8, 0xffffffff, 0xf4, 0x1e8, 0x3ac, 0x3ac, 0xffffffff, 0x3ac, 0x3ac, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x10, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x19, @empty, @multicast2, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x4, @broadcast, @multicast2, @icmp_id=0x64, @gre_key=0x5}}}}, {{@ip={@multicast1, @multicast1, 0xff, 0xffffffff, 'ipvlan1\x00', 'caif0\x00', {0xff}, {0xff}, 0x21, 0x6, 0x1}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x3, @broadcast, @remote, @icmp_id=0x67, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 7.277810134s ago: executing program 2 (id=1031): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r2, 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4f21, @local}, 0x42) sendmmsg(r4, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561f18c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7228c040c757e6ce437d7853ac2cca9605a2e18bf6553fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d", 0x90}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66828f43a4f66e274175218e8e3f", 0x7f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002880)="13d0dc432d3d3391fafe26160c215d30a476f4ac80d634079b6b579bb04ade2653f8c0f6b1a55451ddad18f6d9a81e8bc2121377f7a87a5e076ea2c1e4b0094d472684241faf30ebff5e58a61ba1c2ce470b99036209", 0x56}], 0x1}}, {{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x3, 0x4, 0x0, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}, 0x5}}}, 0x80, 0x0}}], 0x3, 0x4000) 6.507739586s ago: executing program 3 (id=1032): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r0, 0x0, 0x3a99c56f) r1 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000003"], 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1a08030001"], 0x18}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000170000004c0006"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r7, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000140)={0x80, 0x5, 0xfffffffe, 0x4, 0x400, 0x7ff}) 6.052198382s ago: executing program 3 (id=1034): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r4, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x0) (fail_nth: 7) 5.075860048s ago: executing program 4 (id=1035): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000006c0)="30ab1621e0a1c6336453dd896d2a80182b28691e4265fdac6d721081399acda6ac4478736ff137e7eb54e2afee0d1d7f348582cfbd1d2bb1fb98ecd2029b47f93949db12921e2f416fcd4d52bc5adb89bfcb4a166dd36a4da31718891f7ff956d6aaac50b293661fc161a3120384f48a5d6bd114109cd4173771e719233558257c6f43479be42508338b9dd6854d9ce47ab38cd20a5261cd934c4d30369fbdd2c08c923d926880be42cf37263a424014ee2e4427bef3a8039115fc4c4686e1bb189ef0e732a88672b48216", 0xcb}, {&(0x7f0000001400)="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", 0x5d7}], 0x4, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[], 0x6f4}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) 4.527259803s ago: executing program 3 (id=1036): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="85952b177328da2f8757c9343d6559eb7a", 0x11, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/80, 0x50, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) sendto$inet(r1, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x12, 0x4}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x300, 0x0, 0x0, 0x54}, 0x9c) 4.478017639s ago: executing program 4 (id=1037): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc04c560f, &(0x7f00000000c0)=@userptr={0x8, 0x2, 0x4, 0x10000, 0x3, {}, {0x4, 0x8, 0x81, 0x4, 0x9, 0x5f, "6ccc95e1"}, 0x5, 0x2, {&(0x7f0000000040)}, 0x5, 0x0, r3}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) recvfrom$inet6(r0, &(0x7f00000004c0)=""/209, 0xd1, 0x100, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) fcntl$getflags(r0, 0x408) 3.431751631s ago: executing program 4 (id=1038): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) getpeername(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) readv(r4, &(0x7f0000001900)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1) syz_emit_ethernet(0x1a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @val={@void}, {@llc_tr={0x11, {@snap={0xaa, 0x0, "93", "5f8b31", 0x9100}}}}}, 0x0) r6 = dup(r3) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.179312762s ago: executing program 2 (id=1039): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="d800000014000100010000000000b9040a1d080211000000040000a118000200ff05000100060e1208000f01008104015f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c010000000000ff07cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt(r3, 0x9, 0x10, &(0x7f0000000140)=""/171, &(0x7f0000000000)=0xab) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x20}]}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404c055}, 0x8010) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000780)="817ef1fffc55914a", 0x8}, {0x0}], 0x2}, 0x48005) 3.04342071s ago: executing program 1 (id=1040): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, r0, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000100)={0x2, 0x7, 0x0, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, r0, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000100)={0x2, 0x7, 0x0, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r0, 0x5, 0x1, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)}, 0x40) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) listxattr(0x0, 0x0, 0x0) unshare(0x2a020400) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000c00300000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x5, &(0x7f0000002680)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r1, @ANYBLOB="007f76d0758fc08f1800000080000000fbe5896ce70b6331c7576dc74ee742e84b640977994a49f43dcebb3cb6fd4f8e9f331f137a0609c88a27322640930d2c916c637853cb7b1a3311d6daf86618b380b0fc7bf9929241c0f76af26a2352cc41"], &(0x7f0000000080)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) (async) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) inotify_init() (async) inotify_init() openat$sysfs(0xffffff9c, &(0x7f0000000300)='/sys/kernel/notes', 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x7) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r5 = socket(0x200000100000011, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2b, &(0x7f0000000040), 0x4) (async) setsockopt$sock_int(r5, 0x1, 0x2b, &(0x7f0000000040), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0684113, &(0x7f0000000080)={0x1, 0xfffff800, 0x1, 0xa, 0x8, 0x3, 0x0, 0xe, 0x9, 0x40, 0xffffffff, 0x2}) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0684113, &(0x7f0000000080)={0x1, 0xfffff800, 0x1, 0xa, 0x8, 0x3, 0x0, 0xe, 0x9, 0x40, 0xffffffff, 0x2}) r6 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) pread64(r6, &(0x7f0000000540)=""/142, 0x8e, 0xfff) (async) pread64(r6, &(0x7f0000000540)=""/142, 0x8e, 0xfff) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="000c06000000a9074d46a8"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) 2.706673999s ago: executing program 2 (id=1041): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0xc, &(0x7f00000005c0)={0x73472fdcd0c240a2, 0x4, 0xfb, {0xfb, 0x22, "9b1390d7e8822ebd57ebdc4d5449939dfbbb149381bb840eee3ec25e0b57e9802e7c818c9f3744c576bad43402f40b6cdc61d5035f8261c545201d5e76a57e1dc714ce9dff70ea8239ce2074ddc94b130205f46ca9f28cf194670dbce7a954ed626523d211e5aa87fbe1902dd52a689077a4cfaab1e62a1cd19cd95e5a825de8c5418888f3c94e9f423b8a23ce4f6b7ffe31f7554783af4ac49cbb33d7365ba421edc6ad3fcbab9f335bb761a619d93c0b74c79288f25253be745a5fc7d814cadcf272fbe72b0d420d5725a30f220390f70c22155b8900ab99a75e6dd2eb1fa920e4c9cbf36da1b79c551c39f0091feb5c55dbb4ee45dd21ff"}}, &(0x7f0000000200)={0x0, 0x3, 0xa7, @string={0xa7, 0x3, "c5925db0843c1603b38d30ad5819887b0dfae22e5caddee6d421f7170095e264d6e71ee2817c6d2519dcd6ef78839126fe5e5c86e81a49ffafbe6dafa2c665909c51cfe5dbfb5d5226434796602b1aadc707b22e5aee2ae6a4843ad202a2280a91d9a77a9c285f77ee48377f7820c0f8f1d69b2e9d248fea0ffde71799cfd3d69e6d5b469ea00a31f6ba585ca00840809631b17f6a3856e5c4f28ee77765d9b4ff1c9ca811"}}}, &(0x7f0000000500)={0x24, &(0x7f00000003c0)={0x0, 0x15, 0x67, "f1ae3f4f1d6bb5005b1b22c5d8f7abaee4205cab4fec1626b2dd8325a5a91419b4de3ee53db792660e2b2d589d8b0fed1b34be5b40e8d5823b7b069465e5f1b3089c13245ef8693e1f5f6af80274e4b6ef24c95f5b2671a8354fe9e8b63ed439e0ad4df9dd1879"}, &(0x7f0000000040)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000000c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000180)={0x20, 0x81, 0x2, "9442"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "47fb"}, &(0x7f0000000340)={0x20, 0x83, 0x1, "e1"}, &(0x7f0000000480)={0x20, 0x84, 0x3, "7287c0"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "82130d"}}) sendto$inet6(r1, &(0x7f0000000140)="8269b66f", 0x18, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x24, &(0x7f00000001c0)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.705534836s ago: executing program 3 (id=1042): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x280000, 0x2, &(0x7f0000000240)) brk(0xfffffffe) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x103) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xbffc, 0x10, 0xb, 0x9}, 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0xc) close(r1) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32000905", @ANYRES64], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) syz_emit_vhci(&(0x7f0000002840)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) 2.439428129s ago: executing program 0 (id=1043): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0804124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000041296a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2.384122509s ago: executing program 0 (id=1044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x44050) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010d000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000106ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r8 = dup(r3) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r10, r11, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @random="7c44a8d5ef31", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r12 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x88400) ioctl$BLKZEROOUT(r12, 0x127f, &(0x7f00000002c0)={0x5, 0x9}) io_uring_enter(r9, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000200), 0x1000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r13, 0x7, &(0x7f0000000300)=r8, 0x1) write(0xffffffffffffffff, 0x0, 0x0) 2.312230964s ago: executing program 4 (id=1045): setxattr$incfs_id(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000000c0), 0x0, 0x8c, 0x1) 2.210995136s ago: executing program 4 (id=1046): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="85952b177328da2f87", 0x9, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/80, 0x50, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x12, 0x4}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x300, 0x0, 0x0, 0x54}, 0x9c) 2.210566149s ago: executing program 1 (id=1047): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000f40)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000100)=""/224, 0xe0}, {0x0}], 0x2, 0x2000000, 0x10000ac1) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) 2.047808983s ago: executing program 1 (id=1048): r0 = open(&(0x7f0000000100)='./bus\x00', 0x20000, 0xa2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_test={0x1a, 0xe1a, 0xaf, 0x9, [0x401, 0x3, 0x2, 0x2, 0x6242, 0x3, 0x4, 0x5, 0xa4]}}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000001c0)={0x7}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000380)=[{r4, 0x120}], 0x1, 0xae6) syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0) listen(r0, 0xfffffffa) 935.528285ms ago: executing program 3 (id=1049): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000001c0)=[{0x94, 0x2200, 0x1, &(0x7f0000000200)="11"}], 0x1}) 458.350792ms ago: executing program 0 (id=1050): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r4, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r4, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r3, 0xff08, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$caif_stream(0x25, 0x1, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x40, r9, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}]]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x1f584, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000240)="2294a696"}) r12 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000000280)={{'fd', 0x3d, r12}}, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1051): r0 = openat$vim2m(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000005c0)={0x0, @win={{0xf, 0x1, 0x50424752, 0x3}, 0x6, 0x7, 0x0, 0x8, 0x0, 0x6}}) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x2, 0x5, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}}, @sadb_address={0x3, 0x5, 0x0, 0xa0, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xcd}]}, 0x60}}, 0x84) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001480)={0x18, &(0x7f0000001140)={0x20, 0x3, 0x2, {0x2, 0x7}}, &(0x7f0000001240)={0x0, 0x3, 0xee, @string={0xee, 0x3, "3ba770ca47967ecba4ebf209e972265dd637ef2a5a0508e84e2344582ed8ca23f2b9bbabbb25b6cbc810fb992c21e5db7b02e515d8dafa53d1f1f42c2cea9450ef3515c39e11d6ea15b00df8baff4917e26aa96ff0951f9a24ce8744234c7c0d72fe23e49b73936e285822d701745555651dfb5155f1a52dab495172babb8b5b5c785b359d0deb5f2bdea0b3a5347b7f73ce5e424bbb465cdb607a28bdfa6163eca8dc7597924da28d961fa8c0216921bdc85c69ee047aa214830f6b9dbd51a03653e71b340aed142825aee7bae582f6d1ac72e321be86dfdd03d3f315547aa3dd89fef289a5d9f230d5608c"}}, &(0x7f0000001340)={0x0, 0xf, 0x5f, {0x5, 0xf, 0x5f, 0x1, [@generic={0x5a, 0x10, 0x1, "d8ab231c23ef5df6dfa82d44afd430064eaab42527eb67bd2eaf112170eb9e432af6e43bad1d3a254a3818e483e34c3e7a32d1f7d5cd62bee3a454195cd7ea1ee4319eff31f33d097cac0848101c0dddea0813f2ac2948"}]}}, &(0x7f0000001400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x8, 0x3, 0xf, "b69eb0b3", "c2a56119"}}, &(0x7f0000001440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x1, 0xcf, 0x9, 0x7, 0x6, 0x9}}}, &(0x7f00000018c0)={0x44, &(0x7f00000014c0)={0x40, 0x1, 0x7, "4ece290565894d"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001580)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f00000015c0)={0x20, 0x0, 0x8, {0x100, 0x20, [0x1e]}}, &(0x7f0000001600)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000001640)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000001680)={0x40, 0xb, 0x2, "bb35"}, &(0x7f00000016c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001700)={0x40, 0x13, 0x6, @random="3eb5d9c18e4d"}, &(0x7f0000001740)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, &(0x7f0000001780)={0x40, 0x19, 0x2, "dcf4"}, &(0x7f00000017c0)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f0000001800)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000001840)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000001880)={0x40, 0x21, 0x1, 0x6}}) r2 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x3, 0x4}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc2c45513, &(0x7f0000000a00)={{0xb, 0x5, 0x2, 0x6b, 'syz0\x00', 0x4}, 0x0, [0x2, 0x7, 0x0, 0x7fff, 0x7, 0x4, 0x6, 0x7, 0x7, 0x0, 0x1, 0x3ff, 0x9, 0x3, 0x8, 0x6, 0x7f, 0x1, 0x98, 0x8, 0x6, 0x6, 0x77b6, 0x1, 0x1, 0x40008, 0x30, 0x3, 0x3, 0x4, 0x1, 0x5, 0x6, 0x800, 0x3, 0x5, 0x8, 0x6f2, 0x4, 0x80000005, 0x5, 0xfdc, 0x6, 0x1, 0x9, 0x2b08, 0x9, 0x70, 0x4, 0xfffffff6, 0xcb, 0x7, 0x5, 0x9, 0x6, 0x1, 0x0, 0xd, 0x4, 0x9, 0xd, 0x7fff, 0x7, 0x7f, 0x0, 0x101, 0x1, 0x5, 0xa, 0x1ff, 0x10, 0x9a67, 0x0, 0x7, 0xffffffff, 0xfffffffe, 0xe56, 0x7c, 0x1, 0x81, 0x3, 0x100, 0x6, 0x6, 0x6, 0x6, 0x200100, 0x6, 0x8b, 0x1, 0x8000, 0x3, 0x2, 0xd79, 0xffff, 0x50e00000, 0x103b, 0x1, 0x9, 0x80, 0x1800010, 0x5, 0x4, 0xffff, 0x5, 0x1, 0x7, 0x2, 0x3, 0x1, 0x5, 0x81, 0x4, 0x5, 0x5, 0x7, 0x6, 0x5, 0x8000, 0x20007, 0x3ff, 0xca11, 0x0, 0xbca0, 0x8, 0xff7fff80, 0x0, 0x8]}) r5 = socket(0x6, 0x1, 0xae) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r6, @ANYRES16=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000200)=0x8) syz_open_dev$media(&(0x7f00000001c0), 0x400, 0x20400) ioctl$PIO_UNIMAP(r7, 0x4b4d, 0x0) rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x3970b8090d64f40c}}) r9 = syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r9, 0xc02c5638, &(0x7f00000000c0)={0x0, 0x0, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0800000004000000040000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffff"], 0x50) r10 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r10, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x0, 0xfffff001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000290000000b0000000000000310000000290000001e953c6390f091ea"], 0x20}}], 0x1, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) kernel console output (not intermixed with test programs): gs: Mfr=1, Product=2, SerialNumber=3 [ 409.845683][ T918] usb 3-1: Product: syz [ 409.850072][ T918] usb 3-1: Manufacturer: syz [ 409.856006][ T918] usb 3-1: SerialNumber: syz [ 409.887773][ T918] usb 3-1: config 0 descriptor?? [ 409.908551][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 409.918601][ T918] smsc75xx v1.0.0 [ 409.930642][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 409.938933][ T918] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 409.958546][ T918] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 409.968289][ T24] usb 5-1: USB disconnect, device number 74 [ 410.177313][ T9513] binder: 9510:9513 ioctl c0306201 80000100 returned -11 [ 410.192294][ T9513] fuse: Invalid rootmode [ 410.286639][ T9519] FAULT_INJECTION: forcing a failure. [ 410.286639][ T9519] name failslab, interval 1, probability 0, space 0, times 0 [ 410.316193][ T9519] CPU: 0 UID: 0 PID: 9519 Comm: syz.3.913 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 410.316229][ T9519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 410.316244][ T9519] Call Trace: [ 410.316255][ T9519] [ 410.316267][ T9519] dump_stack_lvl+0x189/0x250 [ 410.316307][ T9519] ? __pfx____ratelimit+0x10/0x10 [ 410.316336][ T9519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.316360][ T9519] ? __pfx__printk+0x10/0x10 [ 410.316385][ T9519] ? __pfx___might_resched+0x10/0x10 [ 410.316414][ T9519] ? fs_reclaim_acquire+0x7d/0x100 [ 410.316449][ T9519] should_fail_ex+0x414/0x560 [ 410.316481][ T9519] should_failslab+0xa8/0x100 [ 410.316506][ T9519] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 410.316529][ T9519] ? __alloc_skb+0x112/0x2d0 [ 410.316639][ T9519] __alloc_skb+0x112/0x2d0 [ 410.316665][ T9519] netlink_ack+0x146/0xa50 [ 410.316686][ T9519] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 410.316716][ T9519] ? ref_tracker_free+0x63a/0x7d0 [ 410.316744][ T9519] ? __copy_skb_header+0xa7/0x550 [ 410.316771][ T9519] ? __pfx_ref_tracker_free+0x10/0x10 [ 410.316805][ T9519] ? __skb_clone+0x63/0x7a0 [ 410.316838][ T9519] netlink_rcv_skb+0x28c/0x470 [ 410.316864][ T9519] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 410.316898][ T9519] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 410.316934][ T9519] ? netlink_deliver_tap+0x2e/0x1b0 [ 410.316954][ T9519] ? netlink_deliver_tap+0x2e/0x1b0 [ 410.316980][ T9519] netlink_unicast+0x758/0x8d0 [ 410.317023][ T9519] netlink_sendmsg+0x805/0xb30 [ 410.317055][ T9519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.317082][ T9519] ? __import_iovec+0x5d4/0x7f0 [ 410.317104][ T9519] ? aa_sock_msg_perm+0x94/0x160 [ 410.317136][ T9519] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 410.317166][ T9519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.317191][ T9519] __sock_sendmsg+0x219/0x270 [ 410.317224][ T9519] ____sys_sendmsg+0x505/0x830 [ 410.317255][ T9519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.317285][ T9519] ___sys_sendmsg+0x21f/0x2a0 [ 410.317310][ T9519] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.317373][ T9519] ? __fget_files+0x2a/0x420 [ 410.317399][ T9519] ? __fget_files+0x3a0/0x420 [ 410.317429][ T9519] __sys_sendmsg+0x164/0x220 [ 410.317448][ T9519] ? __pfx___sys_sendmsg+0x10/0x10 [ 410.317499][ T9519] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 410.317533][ T9519] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.317564][ T9519] __do_fast_syscall_32+0xb6/0x2b0 [ 410.317589][ T9519] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.317613][ T9519] do_fast_syscall_32+0x34/0x80 [ 410.317646][ T9519] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 410.317674][ T9519] RIP: 0023:0xf70ee539 [ 410.317696][ T9519] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 410.317717][ T9519] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 410.317737][ T9519] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080006040 [ 410.317748][ T9519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 410.317757][ T9519] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 410.317766][ T9519] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 410.317779][ T9519] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 410.317809][ T9519] [ 410.547043][ T918] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 410.840678][ T918] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 410.894539][ T918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 411.004767][ T918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 411.040836][ T918] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 411.050946][ T918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.062697][ T918] usb 2-1: Product: syz [ 411.067472][ T918] usb 2-1: Manufacturer: syz [ 411.075666][ T918] usb 2-1: SerialNumber: syz [ 411.093969][ T918] usb 2-1: config 0 descriptor?? [ 411.134362][ T9517] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 411.224258][ T9526] FAULT_INJECTION: forcing a failure. [ 411.224258][ T9526] name failslab, interval 1, probability 0, space 0, times 0 [ 411.237949][ T9526] CPU: 0 UID: 0 PID: 9526 Comm: syz.4.916 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 411.237979][ T9526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 411.237994][ T9526] Call Trace: [ 411.238001][ T9526] [ 411.238008][ T9526] dump_stack_lvl+0x189/0x250 [ 411.238039][ T9526] ? __pfx____ratelimit+0x10/0x10 [ 411.238072][ T9526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.238106][ T9526] ? __pfx__printk+0x10/0x10 [ 411.238134][ T9526] ? __pfx___might_resched+0x10/0x10 [ 411.238160][ T9526] should_fail_ex+0x414/0x560 [ 411.238185][ T9526] should_failslab+0xa8/0x100 [ 411.238213][ T9526] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 411.238239][ T9526] ? __get_vm_area_node+0x13f/0x300 [ 411.238266][ T9526] __get_vm_area_node+0x13f/0x300 [ 411.238293][ T9526] __vmalloc_node_range_noprof+0x301/0x12f0 [ 411.238315][ T9526] ? copy_process+0x54b/0x3c00 [ 411.238344][ T9526] ? percpu_ref_get_many+0x19/0x140 [ 411.238371][ T9526] ? percpu_ref_get_many+0x19/0x140 [ 411.238412][ T9526] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 411.238439][ T9526] ? memcpy_and_pad+0x48/0x80 [ 411.238468][ T9526] __vmalloc_node_noprof+0xc2/0x110 [ 411.238484][ T9526] ? copy_process+0x54b/0x3c00 [ 411.238497][ T9526] ? copy_process+0x54b/0x3c00 [ 411.238520][ T9526] dup_task_struct+0x3e7/0x860 [ 411.238548][ T9526] copy_process+0x54b/0x3c00 [ 411.238598][ T9526] ? __pfx_copy_process+0x10/0x10 [ 411.238627][ T9526] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 411.238649][ T9526] vhost_task_create+0x1c4/0x290 [ 411.238674][ T9526] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 411.238706][ T9526] ? __pfx_vhost_task_create+0x10/0x10 [ 411.238726][ T9526] ? is_bpf_text_address+0x26/0x2b0 [ 411.238754][ T9526] ? __pfx_vhost_task_fn+0x10/0x10 [ 411.238789][ T9526] kvm_mmu_post_init_vm+0x147/0x2b0 [ 411.238819][ T9526] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 411.238854][ T9526] ? __mutex_trylock_common+0x153/0x260 [ 411.238880][ T9526] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 411.238900][ T9526] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 411.238928][ T9526] ? rcu_is_watching+0x15/0xb0 [ 411.238942][ T9526] ? look_up_lock_class+0x74/0x170 [ 411.238965][ T9526] ? register_lock_class+0x51/0x320 [ 411.239003][ T9526] ? __lock_acquire+0xab9/0xd20 [ 411.239063][ T9526] kvm_vcpu_ioctl+0x95c/0xe90 [ 411.239088][ T9526] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 411.239104][ T9526] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 411.239148][ T9526] ? __lock_acquire+0xab9/0xd20 [ 411.239198][ T9526] kvm_vcpu_compat_ioctl+0x203/0x390 [ 411.239224][ T9526] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 411.239241][ T9526] ? __fget_files+0x3a0/0x420 [ 411.239258][ T9526] ? __fget_files+0x2a/0x420 [ 411.239282][ T9526] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 411.239329][ T9526] __ia32_compat_sys_ioctl+0x540/0x840 [ 411.239366][ T9526] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 411.239394][ T9526] ? __fget_files+0x3a0/0x420 [ 411.239416][ T9526] ? fput+0xa0/0xd0 [ 411.239443][ T9526] ? ksys_write+0x22a/0x250 [ 411.239474][ T9526] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 411.239502][ T9526] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.239532][ T9526] __do_fast_syscall_32+0xb6/0x2b0 [ 411.239555][ T9526] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.239577][ T9526] do_fast_syscall_32+0x34/0x80 [ 411.239608][ T9526] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 411.239635][ T9526] RIP: 0023:0xf70ee539 [ 411.239653][ T9526] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 411.239671][ T9526] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 411.239693][ T9526] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 411.239703][ T9526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 411.239712][ T9526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 411.239721][ T9526] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 411.239730][ T9526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 411.239762][ T9526] [ 411.239776][ T9526] syz.4.916: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 411.401695][ T918] powermate: unknown product id 0240 [ 411.406831][ T10] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 411.681016][ T9526] ,cpuset=/,mems_allowed=0-1 [ 411.684691][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 411.685923][ T9526] CPU: 1 UID: 0 PID: 9526 Comm: syz.4.916 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 411.685949][ T9526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 411.685964][ T9526] Call Trace: [ 411.685978][ T9526] [ 411.685990][ T9526] dump_stack_lvl+0x189/0x250 [ 411.686062][ T9526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.686100][ T9526] ? __pfx__printk+0x10/0x10 [ 411.686127][ T9526] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 411.686157][ T9526] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 411.686186][ T9526] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 411.686217][ T9526] warn_alloc+0x214/0x310 [ 411.686253][ T9526] ? __pfx_warn_alloc+0x10/0x10 [ 411.686284][ T9526] ? __get_vm_area_node+0x13f/0x300 [ 411.686317][ T9526] ? __get_vm_area_node+0x2b5/0x300 [ 411.686350][ T9526] __vmalloc_node_range_noprof+0x326/0x12f0 [ 411.686393][ T9526] ? percpu_ref_get_many+0x19/0x140 [ 411.686423][ T9526] ? percpu_ref_get_many+0x19/0x140 [ 411.686472][ T9526] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 411.686505][ T9526] ? memcpy_and_pad+0x48/0x80 [ 411.686541][ T9526] __vmalloc_node_noprof+0xc2/0x110 [ 411.686571][ T9526] ? copy_process+0x54b/0x3c00 [ 411.686592][ T9526] ? copy_process+0x54b/0x3c00 [ 411.686619][ T9526] dup_task_struct+0x3e7/0x860 [ 411.686649][ T9526] copy_process+0x54b/0x3c00 [ 411.686710][ T9526] ? __pfx_copy_process+0x10/0x10 [ 411.686748][ T9526] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 411.686783][ T9526] vhost_task_create+0x1c4/0x290 [ 411.686811][ T9526] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 411.686847][ T9526] ? __pfx_vhost_task_create+0x10/0x10 [ 411.686869][ T9526] ? is_bpf_text_address+0x26/0x2b0 [ 411.686904][ T9526] ? __pfx_vhost_task_fn+0x10/0x10 [ 411.686953][ T9526] kvm_mmu_post_init_vm+0x147/0x2b0 [ 411.686996][ T9526] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 411.687041][ T9526] ? __mutex_trylock_common+0x153/0x260 [ 411.687072][ T9526] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 411.687097][ T9526] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 411.687131][ T9526] ? rcu_is_watching+0x15/0xb0 [ 411.687154][ T9526] ? look_up_lock_class+0x74/0x170 [ 411.687190][ T9526] ? register_lock_class+0x51/0x320 [ 411.687230][ T9526] ? __lock_acquire+0xab9/0xd20 [ 411.687299][ T9526] kvm_vcpu_ioctl+0x95c/0xe90 [ 411.687333][ T9526] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 411.687358][ T9526] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 411.687413][ T9526] ? __lock_acquire+0xab9/0xd20 [ 411.687470][ T9526] kvm_vcpu_compat_ioctl+0x203/0x390 [ 411.687501][ T9526] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 411.687528][ T9526] ? __fget_files+0x3a0/0x420 [ 411.687556][ T9526] ? __fget_files+0x2a/0x420 [ 411.687588][ T9526] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 411.687628][ T9526] __ia32_compat_sys_ioctl+0x540/0x840 [ 411.687671][ T9526] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 411.687709][ T9526] ? __fget_files+0x3a0/0x420 [ 411.687745][ T9526] ? fput+0xa0/0xd0 [ 411.687774][ T9526] ? ksys_write+0x22a/0x250 [ 411.687808][ T9526] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 411.687840][ T9526] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.687875][ T9526] __do_fast_syscall_32+0xb6/0x2b0 [ 411.687909][ T9526] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.687944][ T9526] do_fast_syscall_32+0x34/0x80 [ 411.687976][ T9526] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 411.688013][ T9526] RIP: 0023:0xf70ee539 [ 411.688035][ T9526] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 411.688056][ T9526] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 411.688080][ T9526] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 411.688096][ T9526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 411.688110][ T9526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 411.688125][ T9526] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 411.688139][ T9526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 411.688174][ T9526] [ 411.688862][ T9526] Mem-Info: [ 411.744897][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.019786][ T918] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 412.048677][ T9526] active_anon:14046 inactive_anon:0 isolated_anon:0 [ 412.048677][ T9526] active_file:15418 inactive_file:39951 isolated_file:0 [ 412.048677][ T9526] unevictable:768 dirty:214 writeback:0 [ 412.048677][ T9526] slab_reclaimable:10350 slab_unreclaimable:115328 [ 412.048677][ T9526] mapped:30725 shmem:9201 pagetables:1227 [ 412.048677][ T9526] sec_pagetables:0 bounce:0 [ 412.048677][ T9526] kernel_misc_reclaimable:0 [ 412.048677][ T9526] free:1277156 free_pcp:17116 free_cma:0 [ 412.048748][ T9526] Node 0 active_anon:56184kB inactive_anon:0kB active_file:61636kB inactive_file:159604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122864kB dirty:856kB writeback:0kB shmem:35268kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11956kB pagetables:4748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 412.048807][ T9526] Node 1 active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 412.089954][ T918] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input54 [ 412.269224][ T9526] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 412.331940][ T9526] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 412.347090][ T9526] Node 0 DMA32 free:1200860kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54096kB inactive_anon:0kB active_file:61636kB inactive_file:157776kB unevictable:1536kB writepending:868kB present:3129332kB managed:2561080kB mlocked:0kB bounce:0kB free_pcp:41780kB local_pcp:21092kB free_cma:0kB [ 412.383758][ T1215] usb 3-1: USB disconnect, device number 71 [ 412.394299][ T9526] lowmem_reserve[]: 0 0 1 1 1 [ 412.404766][ T9526] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 412.476048][ T9526] lowmem_reserve[]: 0 0 0 0 0 [ 412.494729][ T9526] Node 1 Normal free:3895888kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:25664kB local_pcp:17600kB free_cma:0kB [ 412.509122][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 412.530112][ T5907] gspca_sonixj: reg_w1 err -110 [ 412.543473][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 412.556178][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 412.566588][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 412.568638][ C1] powermate: config urb returned -71 [ 412.583112][ T9526] lowmem_reserve[]: 0 0 0 0 0 [ 412.585899][ C1] powermate: config urb returned -71 [ 412.595840][ C1] powermate: config urb returned -71 [ 412.601791][ C1] powermate: config urb returned -71 [ 412.655497][ T918] usb 2-1: USB disconnect, device number 62 [ 412.655587][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 412.660570][ T9526] Node 0 [ 412.666934][ T5907] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 412.683890][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 412.716782][ T9526] DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 412.725970][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 412.733659][ T9526] Node 0 DMA32: 2116*4kB (UME) 1153*8kB (UME) 420*16kB (UM) 742*32kB (UME) 218*64kB (UME) 90*128kB (UM) 42*256kB (UME) 18*512kB (UME) 4*1024kB (UM) 3*2048kB (UM) 268*4096kB (UM) = 1201560kB [ 412.811968][ T9526] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 412.817462][ T10] usb 4-1: Manufacturer: syz [ 412.838511][ T9526] Node 1 Normal: 212*4kB (UME) 48*8kB (UME) 38*16kB (UE) 81*32kB (UE) 26*64kB (UME) 9*128kB (UME) 4*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3895888kB [ 412.858693][ T10] usb 4-1: config 0 descriptor?? [ 412.871163][ T9526] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 412.882574][ T9526] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 412.892537][ T9526] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 412.902392][ T9526] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 412.927961][ T9526] 65266 total pagecache pages [ 412.935670][ T9526] 0 pages in swap cache [ 412.942987][ T9526] Free swap = 124996kB [ 412.954845][ T9526] Total swap = 124996kB [ 412.960966][ T9526] 2097051 pages RAM [ 412.965057][ T9526] 0 pages HighMem/MovableOnly [ 412.970222][ T9526] 424675 pages reserved [ 412.974538][ T9526] 0 pages cma reserved [ 413.001844][ T9] usb 1-1: USB disconnect, device number 68 [ 413.010553][ T1215] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 413.147068][ T10] rc_core: IR keymap rc-hauppauge not found [ 413.153610][ T10] Registered IR keymap rc-empty [ 413.163300][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.190483][ T1215] usb 3-1: config 1 interface 0 altsetting 84 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.202093][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.209784][ T1215] usb 3-1: config 1 interface 0 has no altsetting 0 [ 413.239273][ T1215] usb 3-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.40 [ 413.249892][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 413.266561][ T1215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.289870][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input55 [ 413.304586][ T1215] usb 3-1: Product: syz [ 413.312792][ T1215] usb 3-1: Manufacturer: syz [ 413.329505][ T1215] usb 3-1: SerialNumber: syz [ 413.359903][ T9536] netlink: 'syz.4.920': attribute type 1 has an invalid length. [ 413.371795][ T9536] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.920'. [ 413.382304][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.406839][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.448488][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.487044][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.536764][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.566667][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.598444][ T9530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.606754][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.630640][ T9530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.657066][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.676843][ T5907] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 413.696723][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.723275][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.750933][ T1215] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input56 [ 413.761936][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.809388][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 413.826329][ T5191] bcm5974 3-1:1.0: could not read from device [ 413.843597][ T5191] bcm5974 3-1:1.0: could not read from device [ 413.854261][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 413.877481][ T1215] usb 3-1: USB disconnect, device number 72 [ 413.885280][ T5191] bcm5974 3-1:1.0: could not read from device [ 413.895720][ T5191] bcm5974 3-1:1.0: could not read from device [ 413.947223][ T5907] usb 1-1: config 0 has no interfaces? [ 413.954337][ T10] usb 4-1: USB disconnect, device number 64 [ 413.964708][ T5907] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 413.976671][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.010245][ T5907] usb 1-1: Product: syz [ 414.038817][ T5907] usb 1-1: Manufacturer: syz [ 414.053766][ T5907] usb 1-1: SerialNumber: syz [ 414.096329][ T5907] usb 1-1: config 0 descriptor?? [ 414.676337][ T10] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 414.710789][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.923'. [ 414.729536][ T9552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.925'. [ 414.856942][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 414.868048][ T10] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 414.879947][ T10] usb 4-1: config 0 has no interface number 0 [ 414.886131][ T10] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 415.009388][ T10] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 415.077635][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.093380][ T10] usb 4-1: Product: syz [ 415.112997][ T10] usb 4-1: Manufacturer: syz [ 415.149301][ T10] usb 4-1: SerialNumber: syz [ 415.236237][ T10] usb 4-1: config 0 descriptor?? [ 415.237976][ T5907] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 415.357343][ T10] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 415.370050][ T10] em28xx 4-1:0.132: Video interface 132 found: [ 415.407530][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 415.441108][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 415.482012][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 415.646732][ T9] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 415.738511][ T5907] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 415.756647][ T10] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 415.796534][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 415.809229][ T9] usb 3-1: config 0 has no interfaces? [ 415.818656][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 415.828236][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.836264][ T9] usb 3-1: Product: syz [ 415.862554][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 415.914216][ T5907] usb 5-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 415.944557][ T9] usb 3-1: Manufacturer: syz [ 415.950994][ T9] usb 3-1: SerialNumber: syz [ 415.968745][ T10] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 415.986526][ T10] em28xx 4-1:0.132: board has no eeprom [ 416.005364][ T9] usb 3-1: config 0 descriptor?? [ 416.016585][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.086698][ T10] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 416.094677][ T10] em28xx 4-1:0.132: analog set to bulk mode. [ 416.105556][ T9] em28xx 4-1:0.132: Registering V4L2 extension [ 416.126560][ T5907] usb 5-1: Product: syz [ 416.144656][ T5907] usb 5-1: Manufacturer: syz [ 416.161718][ T10] usb 4-1: USB disconnect, device number 65 [ 416.173895][ T10] em28xx 4-1:0.132: Disconnecting em28xx [ 416.339194][ T5907] usb 5-1: SerialNumber: syz [ 416.392497][ T9559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.404132][ T9559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.440781][ T5907] usb 5-1: config 0 descriptor?? [ 416.499444][ T5907] redrat3 5-1:0.0: Couldn't find all endpoints [ 416.608768][ T5907] usb 1-1: USB disconnect, device number 69 [ 417.415452][ T9] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 417.445673][ T9] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 417.461965][ T9] em28xx 4-1:0.132: No AC97 audio processor [ 417.493824][ T9] usb 4-1: Decoder not found [ 417.498809][ T9] em28xx 4-1:0.132: failed to create media graph [ 417.514080][ T9] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 417.553807][ T9] em28xx 4-1:0.132: Remote control support is not available for this card. [ 417.611476][ T10] em28xx 4-1:0.132: Closing input extension [ 417.745289][ T10] em28xx 4-1:0.132: Freeing device [ 417.766618][ T918] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 417.986001][ T918] usb 1-1: Using ep0 maxpacket: 16 [ 418.063782][ T918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 418.077146][ T10] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 418.125955][ T918] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 418.160511][ T918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.196662][ T918] usb 1-1: Product: syz [ 418.200935][ T918] usb 1-1: Manufacturer: syz [ 418.248263][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 418.256712][ T918] usb 1-1: SerialNumber: syz [ 418.278783][ T9] usb 5-1: USB disconnect, device number 75 [ 418.279430][ T918] usb 1-1: config 0 descriptor?? [ 418.340037][ T9569] FAULT_INJECTION: forcing a failure. [ 418.340037][ T9569] name failslab, interval 1, probability 0, space 0, times 0 [ 418.356740][ T9569] CPU: 1 UID: 0 PID: 9569 Comm: syz.3.929 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 418.356773][ T9569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 418.356788][ T9569] Call Trace: [ 418.356797][ T9569] [ 418.356807][ T9569] dump_stack_lvl+0x189/0x250 [ 418.356852][ T9569] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.356886][ T9569] ? __pfx__printk+0x10/0x10 [ 418.356924][ T9569] should_fail_ex+0x414/0x560 [ 418.356960][ T9569] should_failslab+0xa8/0x100 [ 418.356988][ T9569] kmem_cache_alloc_noprof+0x73/0x3c0 [ 418.357009][ T9569] ? xfrm_state_alloc+0x24/0x2f0 [ 418.357044][ T9569] xfrm_state_alloc+0x24/0x2f0 [ 418.357073][ T9569] xfrm_add_sa+0x17d1/0x4050 [ 418.357107][ T9569] ? __pfx_xfrm_add_sa+0x10/0x10 [ 418.357144][ T9569] xfrm_user_rcv_msg+0x7a3/0xab0 [ 418.357173][ T9569] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 418.357239][ T9569] ? __mutex_trylock_common+0x153/0x260 [ 418.357268][ T9569] ? __pfx___mutex_trylock_common+0x10/0x10 [ 418.357295][ T9569] ? rcu_is_watching+0x15/0xb0 [ 418.357317][ T9569] ? trace_contention_end+0x39/0x120 [ 418.357347][ T9569] netlink_rcv_skb+0x205/0x470 [ 418.357372][ T9569] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 418.357395][ T9569] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 418.357434][ T9569] ? netlink_deliver_tap+0x2e/0x1b0 [ 418.357461][ T9569] xfrm_netlink_rcv+0x79/0x90 [ 418.357482][ T9569] netlink_unicast+0x758/0x8d0 [ 418.357526][ T9569] netlink_sendmsg+0x805/0xb30 [ 418.357559][ T9569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.357585][ T9569] ? __import_iovec+0x5d4/0x7f0 [ 418.357611][ T9569] ? aa_sock_msg_perm+0x94/0x160 [ 418.357641][ T9569] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 418.357670][ T9569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.357693][ T9569] __sock_sendmsg+0x219/0x270 [ 418.357725][ T9569] ____sys_sendmsg+0x505/0x830 [ 418.357757][ T9569] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.357798][ T9569] ___sys_sendmsg+0x21f/0x2a0 [ 418.357825][ T9569] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.357888][ T9569] ? __fget_files+0x2a/0x420 [ 418.357912][ T9569] ? __fget_files+0x3a0/0x420 [ 418.357947][ T9569] __sys_sendmsg+0x164/0x220 [ 418.357973][ T9569] ? __pfx___sys_sendmsg+0x10/0x10 [ 418.358013][ T9569] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 418.358044][ T9569] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.358072][ T9569] __do_fast_syscall_32+0xb6/0x2b0 [ 418.358110][ T9569] do_fast_syscall_32+0x34/0x80 [ 418.358140][ T9569] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 418.358166][ T9569] RIP: 0023:0xf70ee539 [ 418.358187][ T9569] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 418.358206][ T9569] RSP: 002b:00000000f509c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 418.358236][ T9569] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000180 [ 418.358251][ T9569] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 418.358264][ T9569] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 418.358276][ T9569] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 418.358288][ T9569] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 418.358320][ T9569] [ 418.683703][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.849392][ T5909] usb 3-1: USB disconnect, device number 73 [ 419.058609][ T918] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 419.060621][ T9575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.927'. [ 419.086759][ T9575] FAULT_INJECTION: forcing a failure. [ 419.086759][ T9575] name failslab, interval 1, probability 0, space 0, times 0 [ 419.178836][ T9575] CPU: 1 UID: 0 PID: 9575 Comm: syz.1.927 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 419.178873][ T9575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 419.178887][ T9575] Call Trace: [ 419.178897][ T9575] [ 419.178907][ T9575] dump_stack_lvl+0x189/0x250 [ 419.178948][ T9575] ? __pfx____ratelimit+0x10/0x10 [ 419.178978][ T9575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.179012][ T9575] ? __pfx__printk+0x10/0x10 [ 419.179041][ T9575] ? __pfx___might_resched+0x10/0x10 [ 419.179061][ T9575] ? fs_reclaim_acquire+0x7d/0x100 [ 419.179093][ T9575] should_fail_ex+0x414/0x560 [ 419.179129][ T9575] should_failslab+0xa8/0x100 [ 419.179157][ T9575] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 419.179181][ T9575] ? __alloc_skb+0x112/0x2d0 [ 419.179207][ T9575] __alloc_skb+0x112/0x2d0 [ 419.179232][ T9575] netlink_ack+0x146/0xa50 [ 419.179269][ T9575] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.179294][ T9575] ? ref_tracker_free+0x63a/0x7d0 [ 419.179323][ T9575] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 419.179349][ T9575] ? __pfx_nl80211_post_doit+0x10/0x10 [ 419.179375][ T9575] ? __pfx_ref_tracker_free+0x10/0x10 [ 419.179417][ T9575] netlink_rcv_skb+0x28c/0x470 [ 419.179446][ T9575] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.179475][ T9575] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.179514][ T9575] ? down_read+0x1ad/0x2e0 [ 419.179550][ T9575] genl_rcv+0x28/0x40 [ 419.179575][ T9575] netlink_unicast+0x758/0x8d0 [ 419.179619][ T9575] netlink_sendmsg+0x805/0xb30 [ 419.179652][ T9575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.179677][ T9575] ? __import_iovec+0x5d4/0x7f0 [ 419.179698][ T9575] ? aa_sock_msg_perm+0x94/0x160 [ 419.179727][ T9575] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.179756][ T9575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.179779][ T9575] __sock_sendmsg+0x219/0x270 [ 419.179812][ T9575] ____sys_sendmsg+0x505/0x830 [ 419.179845][ T9575] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.179886][ T9575] ___sys_sendmsg+0x21f/0x2a0 [ 419.179912][ T9575] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.179976][ T9575] ? __fget_files+0x2a/0x420 [ 419.180027][ T9575] ? __fget_files+0x3a0/0x420 [ 419.180063][ T9575] __sys_sendmsg+0x164/0x220 [ 419.180088][ T9575] ? __pfx___sys_sendmsg+0x10/0x10 [ 419.180129][ T9575] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 419.180159][ T9575] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.180188][ T9575] __do_fast_syscall_32+0xb6/0x2b0 [ 419.180219][ T9575] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.180252][ T9575] do_fast_syscall_32+0x34/0x80 [ 419.180281][ T9575] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 419.180308][ T9575] RIP: 0023:0xf7fc8539 [ 419.180327][ T9575] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 419.180347][ T9575] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 419.180371][ T9575] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 419.180387][ T9575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 419.180400][ T9575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 419.180413][ T9575] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 419.180426][ T9575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 419.180464][ T9575] [ 419.511331][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.053723][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 420.112502][ T1215] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 420.135849][ T36] usb 1-1: Failed to submit usb control message: -110 [ 420.202431][ T36] usb 1-1: unable to send the bmi data to the device: -110 [ 420.231817][ T36] usb 1-1: unable to get target info from device [ 420.252252][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 420.271038][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.281147][ T9] usb 3-1: Product: syz [ 420.285633][ T9] usb 3-1: Manufacturer: syz [ 420.291376][ T36] usb 1-1: could not get target info (-110) [ 420.291524][ T9] usb 3-1: SerialNumber: syz [ 420.333490][ T36] usb 1-1: could not probe fw (-110) [ 420.337843][ T1215] usb 5-1: Using ep0 maxpacket: 32 [ 420.345994][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 420.386209][ T5922] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 420.397900][ T1215] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 420.446240][ T1215] usb 5-1: config 0 has no interface number 0 [ 420.470778][ T1215] usb 5-1: config 0 interface 184 has no altsetting 0 [ 420.501688][ T1215] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 420.524066][ T1215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.544437][ T1215] usb 5-1: Product: syz [ 420.563580][ T1215] usb 5-1: Manufacturer: syz [ 420.582851][ T9] usb 1-1: USB disconnect, device number 70 [ 420.607378][ T5909] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 420.626377][ T1215] usb 5-1: SerialNumber: syz [ 420.714525][ T1215] usb 5-1: config 0 descriptor?? [ 420.746732][ T1215] smsc75xx v1.0.0 [ 420.756361][ T1215] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 420.776078][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 420.798451][ T1215] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 420.802202][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.879610][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 420.879658][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 420.879684][ T5909] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 420.879711][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.881084][ T5909] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 420.881118][ T5909] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 420.881141][ T5909] usb 2-1: Manufacturer: syz [ 420.884502][ T5909] usb 2-1: config 0 descriptor?? [ 421.106776][ T9585] binder: 9581:9585 ioctl c0306201 80000100 returned -11 [ 421.108631][ T9585] fuse: Invalid rootmode [ 421.151219][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 421.155051][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 421.155101][ T10] usb 4-1: can't read configurations, error -71 [ 421.366208][ T1215] usb 3-1: USB disconnect, device number 74 [ 421.482037][ T5922] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 421.486608][ T5922] ath9k_htc: Failed to initialize the device [ 421.512298][ T5909] rc_core: IR keymap rc-hauppauge not found [ 421.512332][ T5909] Registered IR keymap rc-empty [ 421.512557][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 421.526734][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 421.532360][ T1215] usb 3-1: ath9k_htc: USB layer deinitialized [ 421.577970][ T5909] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 421.581675][ T5909] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input57 [ 421.622091][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.936'. [ 421.654420][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 421.668695][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 421.687017][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 421.706783][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 421.726782][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 421.746669][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 421.766947][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 421.866782][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 421.897918][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 421.939711][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 421.989953][ T5909] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 422.072895][ T5909] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 422.117562][ T5909] usb 2-1: USB disconnect, device number 63 [ 422.733927][ T1215] usb 5-1: USB disconnect, device number 76 [ 422.915551][ T918] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 422.925778][ T5909] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 423.018451][ T30] audit: type=1326 audit(1749241281.243:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.3.941" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 423.068100][ T9613] netlink: 43 bytes leftover after parsing attributes in process `syz.3.941'. [ 423.091122][ T5909] usb 2-1: Using ep0 maxpacket: 8 [ 423.104593][ T918] usb 1-1: config 0 has no interfaces? [ 423.109391][ T9613] tipc: Started in network mode [ 423.116872][ T5909] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 423.117972][ T30] audit: type=1326 audit(1749241281.243:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.3.941" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 423.164493][ T5909] usb 2-1: config 179 has no interface number 0 [ 423.171853][ T918] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 423.171948][ T9613] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 423.198343][ T9613] tipc: Enabled bearer , priority 10 [ 423.209752][ T5909] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 423.224405][ T918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.225484][ T30] audit: type=1326 audit(1749241281.243:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.3.941" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 423.277609][ T918] usb 1-1: Product: syz [ 423.281893][ T918] usb 1-1: Manufacturer: syz [ 423.288274][ T5909] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 423.320107][ T9618] ªªªªªª: renamed from vlan0 (while UP) [ 423.337493][ T918] usb 1-1: SerialNumber: syz [ 423.381649][ T5909] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 423.382450][ T30] audit: type=1326 audit(1749241281.243:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.3.941" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 423.396974][ T918] usb 1-1: config 0 descriptor?? [ 423.445672][ T9618] tipc: Disabling bearer [ 423.486686][ T30] audit: type=1326 audit(1749241281.243:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.3.941" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 423.566655][ T30] audit: type=1326 audit(1749241281.243:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.3.941" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 423.632470][ T5909] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 423.669553][ T5909] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 423.679710][ T30] audit: type=1326 audit(1749241281.243:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.3.941" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 423.696713][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.775231][ T9610] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 423.808950][ T30] audit: type=1326 audit(1749241281.243:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.3.941" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 423.867946][ T5824] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 424.020143][ T30] audit: type=1326 audit(1749241281.243:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.3.941" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 424.081975][ T5824] usb 5-1: config 1 interface 0 altsetting 84 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.119394][ T5824] usb 5-1: config 1 interface 0 has no altsetting 0 [ 424.132230][ T5824] usb 5-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.40 [ 424.142037][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.156959][ T5824] usb 5-1: Product: syz [ 424.175174][ T5824] usb 5-1: Manufacturer: syz [ 424.191354][ T5824] usb 5-1: SerialNumber: syz [ 424.323474][ T30] audit: type=1326 audit(1749241281.243:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.3.941" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 424.522124][ T9621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.537545][ T9621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.599746][ T5824] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input58 [ 424.621519][ T5191] bcm5974 5-1:1.0: could not read from device [ 424.702006][ T5824] usb 5-1: USB disconnect, device number 77 [ 424.721205][ T5191] bcm5974 5-1:1.0: could not read from device [ 425.058093][ T9628] support for cryptoloop has been removed. Use dm-crypt instead. [ 425.536692][ T5909] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 425.591428][ T1215] usb 2-1: USB disconnect, device number 64 [ 425.632493][ T5922] usb 1-1: USB disconnect, device number 71 [ 425.874410][ T5909] usb 3-1: config 0 has no interfaces? [ 425.922781][ T5909] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 425.948468][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.979810][ T5909] usb 3-1: Product: syz [ 425.984160][ T5909] usb 3-1: Manufacturer: syz [ 426.030578][ T5909] usb 3-1: SerialNumber: syz [ 426.045397][ T5909] usb 3-1: config 0 descriptor?? [ 426.082885][ T9643] netlink: 'syz.4.949': attribute type 1 has an invalid length. [ 426.280146][ T9632] program syz.2.945 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 426.292362][ T9632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.302550][ T9632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.336993][ T5922] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 426.510589][ T5922] usb 4-1: Using ep0 maxpacket: 16 [ 426.521785][ T5922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.536684][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 426.548176][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 426.558526][ T5922] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 426.570823][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.639598][ T5922] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 426.689144][ T5922] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 426.698594][ T5922] usb 4-1: Manufacturer: syz [ 426.713229][ T5922] usb 4-1: config 0 descriptor?? [ 427.088400][ T5909] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 427.107063][ T5922] rc_core: IR keymap rc-hauppauge not found [ 427.117880][ T5922] Registered IR keymap rc-empty [ 427.131348][ T5922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 427.166835][ T5922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 427.198904][ T5922] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 427.224205][ T5922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input59 [ 427.266859][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 427.272609][ T5909] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 427.286639][ T5922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 427.330643][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.347411][ T5922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 427.355299][ T5909] usb 1-1: Product: syz [ 427.384586][ T5909] usb 1-1: Manufacturer: syz [ 427.395088][ T5922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 427.426745][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 427.432765][ T5922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 427.435579][ T5909] usb 1-1: SerialNumber: syz [ 427.442737][ T10] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 427.453463][ T9660] Cannot find set identified by id 3 to match [ 427.464479][ T10] usb 2-1: config 0 has no interface number 0 [ 427.473046][ T10] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 427.487769][ T10] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 427.497455][ T5922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 427.505511][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.514295][ T10] usb 2-1: Product: syz [ 427.516086][ T5909] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 427.518803][ T5922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 427.534410][ T10] usb 2-1: Manufacturer: syz [ 427.546354][ T10] usb 2-1: SerialNumber: syz [ 427.565666][ T918] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 427.628994][ T5922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 427.645174][ T10] usb 2-1: config 0 descriptor?? [ 427.716505][ T5922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 427.728776][ T10] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 427.776793][ T5922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 427.846150][ T10] em28xx 2-1:0.132: Video interface 132 found: [ 427.869651][ T5922] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 427.934102][ T5922] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 427.946017][ T5922] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 427.983607][ T5922] usb 4-1: USB disconnect, device number 68 [ 428.105790][ T10] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 428.363744][ T5824] usb 1-1: USB disconnect, device number 72 [ 428.516662][ T1215] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 428.618152][ T5909] usb 3-1: USB disconnect, device number 75 [ 428.746644][ T918] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 428.756602][ T1215] usb 5-1: Using ep0 maxpacket: 32 [ 428.766125][ T918] ath9k_htc: Failed to initialize the device [ 428.796125][ T1215] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 428.819146][ T5824] usb 1-1: ath9k_htc: USB layer deinitialized [ 428.858853][ T1215] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.881576][ T9672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.956'. [ 428.895372][ T1215] usb 5-1: config 0 has no interface number 0 [ 428.930797][ T1215] usb 5-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 428.946658][ T5944] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 429.021994][ T1215] usb 5-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 429.087523][ T1215] usb 5-1: config 0 interface 8 has no altsetting 0 [ 429.136665][ T5944] usb 4-1: Using ep0 maxpacket: 16 [ 429.194786][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 429.194809][ T30] audit: type=1326 audit(1749241287.413:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 429.234198][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 429.256914][ T30] audit: type=1326 audit(1749241287.413:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 429.279865][ T30] audit: type=1326 audit(1749241287.413:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 429.285823][ T1215] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 429.302456][ T30] audit: type=1326 audit(1749241287.413:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 429.348334][ T30] audit: type=1326 audit(1749241287.413:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 429.379341][ T9655] em28xx 2-1:0.132: failed to trigger read from i2c address 0x28 (error=-5) [ 429.391742][ T10] em28xx 2-1:0.132: board has no eeprom [ 429.413037][ T30] audit: type=1326 audit(1749241287.413:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 429.438560][ T30] audit: type=1326 audit(1749241287.423:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 429.524722][ T1215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.529419][ T30] audit: type=1326 audit(1749241287.423:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 429.550610][ T9674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.957'. [ 429.564850][ T10] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 429.598269][ T30] audit: type=1326 audit(1749241287.423:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 429.598444][ T1215] usb 5-1: Product: syz [ 429.626760][ T10] em28xx 2-1:0.132: analog set to bulk mode. [ 429.663748][ T5922] em28xx 2-1:0.132: Registering V4L2 extension [ 429.678952][ T10] usb 2-1: USB disconnect, device number 65 [ 429.706976][ T1215] usb 5-1: Manufacturer: syz [ 429.714762][ T1215] usb 5-1: SerialNumber: syz [ 429.834790][ T10] em28xx 2-1:0.132: Disconnecting em28xx [ 429.852983][ T30] audit: type=1326 audit(1749241287.423:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.3.955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 429.860030][ T1215] usb 5-1: config 0 descriptor?? [ 430.076777][ T9] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 430.463181][ T9685] FAULT_INJECTION: forcing a failure. [ 430.463181][ T9685] name failslab, interval 1, probability 0, space 0, times 0 [ 430.506879][ T9685] CPU: 1 UID: 0 PID: 9685 Comm: syz.1.960 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 430.506917][ T9685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 430.506928][ T9685] Call Trace: [ 430.506935][ T9685] [ 430.506945][ T9685] dump_stack_lvl+0x189/0x250 [ 430.506977][ T9685] ? __pfx____ratelimit+0x10/0x10 [ 430.506998][ T9685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.507022][ T9685] ? __pfx__printk+0x10/0x10 [ 430.507042][ T9685] ? __pfx___might_resched+0x10/0x10 [ 430.507057][ T9685] ? fs_reclaim_acquire+0x7d/0x100 [ 430.507080][ T9685] should_fail_ex+0x414/0x560 [ 430.507106][ T9685] should_failslab+0xa8/0x100 [ 430.507130][ T9685] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 430.507147][ T9685] ? __alloc_skb+0x112/0x2d0 [ 430.507166][ T9685] __alloc_skb+0x112/0x2d0 [ 430.507183][ T9685] netlink_ack+0x146/0xa50 [ 430.507211][ T9685] netlink_rcv_skb+0x28c/0x470 [ 430.507227][ T9685] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.507248][ T9685] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 430.507275][ T9685] ? down_read+0x1ad/0x2e0 [ 430.507300][ T9685] genl_rcv+0x28/0x40 [ 430.507318][ T9685] netlink_unicast+0x758/0x8d0 [ 430.507349][ T9685] netlink_sendmsg+0x805/0xb30 [ 430.507372][ T9685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.507390][ T9685] ? __import_iovec+0x5d4/0x7f0 [ 430.507405][ T9685] ? aa_sock_msg_perm+0x94/0x160 [ 430.507428][ T9685] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 430.507450][ T9685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.507466][ T9685] __sock_sendmsg+0x219/0x270 [ 430.507490][ T9685] ____sys_sendmsg+0x505/0x830 [ 430.507512][ T9685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.507540][ T9685] ___sys_sendmsg+0x21f/0x2a0 [ 430.507559][ T9685] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.507605][ T9685] ? __fget_files+0x2a/0x420 [ 430.507622][ T9685] ? __fget_files+0x3a0/0x420 [ 430.507647][ T9685] __sys_sendmsg+0x164/0x220 [ 430.507665][ T9685] ? __pfx___sys_sendmsg+0x10/0x10 [ 430.507692][ T9685] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 430.507714][ T9685] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.507736][ T9685] __do_fast_syscall_32+0xb6/0x2b0 [ 430.507763][ T9685] do_fast_syscall_32+0x34/0x80 [ 430.507785][ T9685] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 430.507805][ T9685] RIP: 0023:0xf7fc8539 [ 430.507819][ T9685] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 430.507833][ T9685] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 430.507849][ T9685] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 430.507860][ T9685] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 430.507869][ T9685] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 430.507880][ T9685] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 430.507889][ T9685] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 430.507911][ T9685] [ 430.950513][ T5922] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 430.959651][ T9] usb 1-1: config 0 has no interfaces? [ 431.209449][ T5922] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 431.286144][ T5922] em28xx 2-1:0.132: No AC97 audio processor [ 431.339987][ T5922] usb 2-1: Decoder not found [ 431.344773][ T5922] em28xx 2-1:0.132: failed to create media graph [ 431.734045][ T5922] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 431.744071][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 431.769187][ T5922] em28xx 2-1:0.132: Remote control support is not available for this card. [ 431.864462][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.920074][ T1215] ath6kl: Failed to submit usb control message: -110 [ 431.936602][ T9] usb 1-1: Product: syz [ 431.944292][ T10] em28xx 2-1:0.132: Closing input extension [ 431.968683][ T9] usb 1-1: Manufacturer: syz [ 431.985897][ T1215] ath6kl: unable to send the bmi data to the device: -110 [ 432.009489][ T9] usb 1-1: SerialNumber: syz [ 432.051517][ T1215] ath6kl: Unable to send get target info: -110 [ 432.096690][ T10] em28xx 2-1:0.132: Freeing device [ 432.108532][ T1215] ath6kl: Failed to init ath6kl core: -110 [ 432.115801][ T1215] ath6kl_usb 5-1:0.8: probe with driver ath6kl_usb failed with error -110 [ 432.264988][ T9] usb 1-1: config 0 descriptor?? [ 432.500800][ T5944] usb 4-1: unable to get BOS descriptor or descriptor too short [ 432.515903][ T5944] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 432.546276][ T5944] usb 4-1: can't read configurations, error -71 [ 432.666651][ T10] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 432.701902][ T9702] netlink: 60 bytes leftover after parsing attributes in process `syz.3.962'. [ 432.778975][ T9700] netlink: 60 bytes leftover after parsing attributes in process `syz.3.962'. [ 432.834001][ T9700] FAULT_INJECTION: forcing a failure. [ 432.834001][ T9700] name failslab, interval 1, probability 0, space 0, times 0 [ 432.936598][ T9700] CPU: 1 UID: 0 PID: 9700 Comm: syz.3.962 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 432.936632][ T9700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 432.936643][ T9700] Call Trace: [ 432.936650][ T9700] [ 432.936658][ T9700] dump_stack_lvl+0x189/0x250 [ 432.936689][ T9700] ? __pfx____ratelimit+0x10/0x10 [ 432.936718][ T9700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.936742][ T9700] ? __pfx__printk+0x10/0x10 [ 432.936757][ T9700] ? __mutex_unlock_slowpath+0x68a/0x700 [ 432.936790][ T9700] should_fail_ex+0x414/0x560 [ 432.936816][ T9700] should_failslab+0xa8/0x100 [ 432.936840][ T9700] kmem_cache_alloc_noprof+0x73/0x3c0 [ 432.936856][ T9700] ? skb_clone+0x212/0x3a0 [ 432.936877][ T9700] skb_clone+0x212/0x3a0 [ 432.936897][ T9700] __netlink_deliver_tap+0x404/0x850 [ 432.936923][ T9700] ? netlink_deliver_tap+0x2e/0x1b0 [ 432.936939][ T9700] netlink_deliver_tap+0x19c/0x1b0 [ 432.936957][ T9700] netlink_dump+0x8e4/0xe20 [ 432.936970][ T9700] ? __skb_try_recv_from_queue+0x58f/0x730 [ 432.936999][ T9700] ? __pfx_netlink_dump+0x10/0x10 [ 432.937030][ T9700] netlink_recvmsg+0x676/0xa30 [ 432.937053][ T9700] ? __pfx_netlink_recvmsg+0x10/0x10 [ 432.937072][ T9700] ? aa_sock_msg_perm+0x94/0x160 [ 432.937096][ T9700] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 432.937117][ T9700] ? security_socket_recvmsg+0x7e/0x2e0 [ 432.937132][ T9700] ? __pfx_netlink_recvmsg+0x10/0x10 [ 432.937147][ T9700] sock_recvmsg+0x229/0x270 [ 432.937172][ T9700] ____sys_recvmsg+0x1c9/0x460 [ 432.937196][ T9700] ? __pfx_____sys_recvmsg+0x10/0x10 [ 432.937211][ T9700] ? get_compat_msghdr+0x37e/0x4a0 [ 432.937238][ T9700] ? get_pid_task+0x20/0x1f0 [ 432.937262][ T9700] ___sys_recvmsg+0x1b5/0x510 [ 432.937283][ T9700] ? __pfx____sys_recvmsg+0x10/0x10 [ 432.937318][ T9700] ? __fget_files+0x3a0/0x420 [ 432.937345][ T9700] __sys_recvmsg+0x161/0x220 [ 432.937363][ T9700] ? __pfx___sys_recvmsg+0x10/0x10 [ 432.937390][ T9700] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 432.937412][ T9700] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.937433][ T9700] __do_fast_syscall_32+0xb6/0x2b0 [ 432.937455][ T9700] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.937477][ T9700] do_fast_syscall_32+0x34/0x80 [ 432.937497][ T9700] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 432.937516][ T9700] RIP: 0023:0xf70ee539 [ 432.937530][ T9700] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 432.937543][ T9700] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 432.937559][ T9700] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 432.937571][ T9700] RDX: 0000000040012002 RSI: 0000000000000000 RDI: 0000000000000000 [ 432.937581][ T9700] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 432.937589][ T9700] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 432.937599][ T9700] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 432.937620][ T9700] [ 433.358329][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 433.472181][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 433.595865][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 433.650562][ T10] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 433.661218][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.671021][ T10] usb 2-1: Product: syz [ 433.675595][ T10] usb 2-1: Manufacturer: syz [ 433.684906][ T10] usb 2-1: SerialNumber: syz [ 433.709464][ T10] usb 2-1: config 0 descriptor?? [ 433.730160][ T9687] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 433.974428][ T10] powermate: unknown product id 0240 [ 434.017225][ T10] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 434.065746][ T10] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input60 [ 434.093693][ C0] powermate: config urb returned -71 [ 434.099461][ C0] powermate: config urb returned -71 [ 434.104928][ C0] powermate: config urb returned -71 [ 434.110588][ C0] powermate: config urb returned -71 [ 434.129833][ T10] usb 2-1: USB disconnect, device number 66 [ 434.135944][ C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 434.136647][ T918] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 434.294481][ T5944] usb 1-1: USB disconnect, device number 73 [ 434.377130][ T918] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 434.399032][ T918] usb 3-1: config 0 interface 0 has no altsetting 1 [ 434.414067][ T918] usb 3-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 434.424910][ T918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 434.434250][ T918] usb 3-1: Product: syz [ 434.442084][ T918] usb 3-1: Manufacturer: syz [ 434.455775][ T918] usb 3-1: SerialNumber: syz [ 434.556386][ T1215] usb 5-1: USB disconnect, device number 78 [ 434.580052][ T918] usb 3-1: config 0 descriptor?? [ 434.616644][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 434.686670][ T5909] usb 4-1: new low-speed USB device number 71 using dummy_hcd [ 434.805439][ T9710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.807010][ T10] usb 2-1: device descriptor read/64, error -71 [ 434.877608][ T9710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.894144][ T5909] usb 4-1: config 1 has an invalid interface descriptor of length 6, skipping [ 434.944318][ T5909] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.967579][ T5909] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 434.990522][ T5909] usb 4-1: config 1 has no interface number 1 [ 435.004757][ T5909] usb 4-1: string descriptor 0 read error: -22 [ 435.026769][ T5909] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 435.036382][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.086787][ T1215] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 435.107164][ T10] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 435.247826][ T5824] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 435.248720][ T10] usb 2-1: device descriptor read/64, error -71 [ 435.262496][ T1215] usb 5-1: Using ep0 maxpacket: 32 [ 435.270346][ T1215] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 435.283170][ T1215] usb 5-1: config 0 has no interface number 0 [ 435.283964][ T5909] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 435.290255][ T1215] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 435.305264][ T918] usb 3-1: USB disconnect, device number 76 [ 435.333947][ T5909] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 435.361392][ T6503] udevd[6503]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.379699][ T10] usb usb2-port1: attempt power cycle [ 435.390301][ T1215] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 435.404467][ T1215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.416639][ T5824] usb 1-1: Using ep0 maxpacket: 32 [ 435.425662][ T5909] usb 4-1: MIDIStreaming interface descriptor not found [ 435.425886][ T1215] usb 5-1: Product: syz [ 435.444516][ T1215] usb 5-1: Manufacturer: syz [ 435.450320][ T1215] usb 5-1: SerialNumber: syz [ 435.456157][ T5824] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 435.474838][ T1215] usb 5-1: config 0 descriptor?? [ 435.512082][ T5824] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.544195][ T5824] usb 1-1: config 0 has no interface number 0 [ 435.550873][ T1215] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 435.591860][ T5824] usb 1-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 435.591885][ T1215] em28xx 5-1:0.132: Video interface 132 found: [ 435.645954][ T5824] usb 1-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 435.659789][ T5824] usb 1-1: config 0 interface 8 has no altsetting 0 [ 435.666729][ T918] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 435.682125][ T5824] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 435.717709][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.728077][ T10] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 435.780120][ T10] usb 2-1: device descriptor read/8, error -71 [ 435.788424][ T5824] usb 1-1: Product: syz [ 435.793618][ T5824] usb 1-1: Manufacturer: syz [ 435.798932][ T5824] usb 1-1: SerialNumber: syz [ 435.808152][ T5824] usb 1-1: config 0 descriptor?? [ 435.866689][ T918] usb 3-1: Using ep0 maxpacket: 32 [ 435.879981][ T918] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 435.892219][ T918] usb 3-1: config 0 has no interface number 0 [ 435.901020][ T918] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 435.921128][ T918] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 435.930715][ T918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.938929][ T918] usb 3-1: Product: syz [ 435.944150][ T918] usb 3-1: Manufacturer: syz [ 435.949014][ T918] usb 3-1: SerialNumber: syz [ 435.955001][ T1215] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 435.960787][ T918] usb 3-1: config 0 descriptor?? [ 435.990449][ T918] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 436.008030][ T918] em28xx 3-1:0.132: Video interface 132 found: [ 436.067166][ T10] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 436.117325][ T10] usb 2-1: device descriptor read/8, error -71 [ 436.227215][ T10] usb usb2-port1: unable to enumerate USB device [ 436.505531][ T918] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 437.067000][ T5824] ath6kl: Failed to submit usb control message: -110 [ 437.085282][ T5824] ath6kl: unable to send the bmi data to the device: -110 [ 437.108195][ T5824] ath6kl: Unable to send get target info: -110 [ 437.142697][ T5824] ath6kl: Failed to init ath6kl core: -110 [ 437.172263][ T1215] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 437.186403][ T5824] ath6kl_usb 1-1:0.8: probe with driver ath6kl_usb failed with error -110 [ 437.197148][ T1215] em28xx 5-1:0.132: board has no eeprom [ 437.206397][ T9722] em28xx 5-1:0.132: failed to trigger read from i2c address 0x28 (error=-5) [ 437.241740][ T9728] em28xx 5-1:0.132: failed to trigger read from i2c address 0x28 (error=-5) [ 437.263812][ T5824] usb 1-1: USB disconnect, device number 74 [ 437.278798][ T918] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 437.279828][ T1215] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 437.302284][ T918] em28xx 3-1:0.132: board has no eeprom [ 437.327061][ T1215] em28xx 5-1:0.132: analog set to bulk mode. [ 437.333378][ T9] em28xx 5-1:0.132: Registering V4L2 extension [ 437.368188][ T918] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 437.392820][ T1215] usb 5-1: USB disconnect, device number 79 [ 437.415025][ T918] em28xx 3-1:0.132: analog set to bulk mode. [ 437.458315][ T1215] em28xx 5-1:0.132: Disconnecting em28xx [ 437.510609][ T918] usb 3-1: USB disconnect, device number 77 [ 437.535913][ T918] em28xx 3-1:0.132: Disconnecting em28xx [ 437.691944][ T9] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 437.702366][ T9] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 437.712006][ T9] em28xx 5-1:0.132: No AC97 audio processor [ 437.734870][ T9] usb 5-1: Decoder not found [ 437.752879][ T9] em28xx 5-1:0.132: failed to create media graph [ 437.774325][ T9] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 437.781853][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 437.811737][ T9] em28xx 5-1:0.132: Remote control support is not available for this card. [ 437.842305][ T5909] em28xx 3-1:0.132: Registering V4L2 extension [ 437.987484][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 438.021662][ T5824] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 438.066494][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 438.087103][ T5944] usb 4-1: USB disconnect, device number 71 [ 438.123961][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.186518][ T10] usb 2-1: Product: syz [ 438.203737][ T10] usb 2-1: Manufacturer: syz [ 438.206849][ T5824] usb 1-1: Using ep0 maxpacket: 32 [ 438.237036][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.239392][ T10] usb 2-1: SerialNumber: syz [ 438.271001][ T5909] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 438.275654][ T10] usb 2-1: config 0 descriptor?? [ 438.301303][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 438.601012][ T5909] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 438.608616][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.640801][ T5909] em28xx 3-1:0.132: No AC97 audio processor [ 438.651309][ T5824] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 438.672600][ T5909] usb 3-1: Decoder not found [ 438.678936][ T5909] em28xx 3-1:0.132: failed to create media graph [ 438.686648][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.694999][ T9759] veth0_to_bond: entered promiscuous mode [ 438.700655][ T5909] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 438.751933][ T9759] veth0_to_bond: left promiscuous mode [ 438.767811][ T5824] usb 1-1: config 0 descriptor?? [ 438.776376][ T5909] em28xx 3-1:0.132: Remote control support is not available for this card. [ 439.208759][ T918] em28xx 3-1:0.132: Closing input extension [ 439.227758][ T1215] em28xx 5-1:0.132: Closing input extension [ 439.240739][ T918] em28xx 3-1:0.132: Freeing device [ 439.255598][ T1215] em28xx 5-1:0.132: Freeing device [ 439.404194][ T5824] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 439.568469][ T9] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 439.586665][ T1215] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 439.723729][ T5824] ft260 0003:0403:6030.000F: chip code: 0000 0000 [ 439.746948][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 439.760643][ T1215] usb 5-1: Using ep0 maxpacket: 8 [ 439.798770][ T1215] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 439.818606][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.827680][ T9] usb 4-1: Product: syz [ 439.834636][ T1215] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 439.844794][ T1215] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 439.853064][ T9] usb 4-1: Manufacturer: syz [ 439.858133][ T1215] usb 5-1: Product: syz [ 439.862932][ T9] usb 4-1: SerialNumber: syz [ 439.871746][ T1215] usb 5-1: Manufacturer: syz [ 439.882112][ T1215] usb 5-1: SerialNumber: syz [ 439.913261][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 439.926828][ T5929] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 440.193043][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.200338][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.285033][ T1215] usb 5-1: Invalid connection information received from device [ 440.551543][ T918] usb 5-1: USB disconnect, device number 80 [ 440.566824][ T5824] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 440.658200][ T9] usb 4-1: USB disconnect, device number 72 [ 440.781879][ T5824] usb 3-1: config 0 has no interfaces? [ 440.793859][ T5824] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 440.803412][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.814036][ T5824] usb 3-1: Product: syz [ 440.818444][ T5824] usb 3-1: Manufacturer: syz [ 440.823835][ T5824] usb 3-1: SerialNumber: syz [ 440.832428][ T5824] usb 3-1: config 0 descriptor?? [ 441.070239][ T5929] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 441.078469][ T5929] ath9k_htc: Failed to initialize the device [ 441.085842][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 441.425689][ T9] usb 1-1: USB disconnect, device number 75 [ 441.456790][ T5824] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 441.620387][ T5824] usb 5-1: config 1 interface 0 altsetting 84 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.670196][ T918] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 441.727302][ T10] gspca_sonixj: reg_w1 err -110 [ 441.746487][ T5824] usb 5-1: config 1 interface 0 has no altsetting 0 [ 441.760457][ T5824] usb 5-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.40 [ 441.766728][ T10] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 441.803045][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.819018][ T5824] usb 5-1: Product: syz [ 441.823517][ T5824] usb 5-1: Manufacturer: syz [ 441.832303][ T5824] usb 5-1: SerialNumber: syz [ 441.894251][ T918] usb 4-1: config 1 interface 0 altsetting 84 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.956568][ T918] usb 4-1: config 1 interface 0 has no altsetting 0 [ 441.994887][ T918] usb 4-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.40 [ 442.004317][ T918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.015169][ T918] usb 4-1: Product: syz [ 442.022819][ T918] usb 4-1: Manufacturer: syz [ 442.031626][ T918] usb 4-1: SerialNumber: syz [ 442.116609][ T5909] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 442.178073][ T9781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.200905][ T9781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.258938][ T5824] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input61 [ 442.269025][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 442.316805][ T10] usb 2-1: USB disconnect, device number 71 [ 442.324490][ T5191] bcm5974 5-1:1.0: could not read from device [ 442.334821][ T5191] bcm5974 5-1:1.0: could not read from device [ 442.364138][ T5824] usb 5-1: USB disconnect, device number 81 [ 442.384076][ T5191] bcm5974 5-1:1.0: could not read from device [ 442.563302][ T918] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input62 [ 442.678020][ T5191] bcm5974 4-1:1.0: could not read from device [ 442.691392][ T5191] bcm5974 4-1:1.0: could not read from device [ 442.713849][ T5191] bcm5974 4-1:1.0: could not read from device [ 442.753172][ T918] usb 4-1: USB disconnect, device number 73 [ 442.787347][ T5191] bcm5974 4-1:1.0: could not read from device [ 443.034681][ T5979] udevd[5979]: Error opening device "/dev/input/event4": No such file or directory [ 443.059812][ T5979] udevd[5979]: Unable to EVIOCGABS device "/dev/input/event4" [ 443.072835][ T5979] udevd[5979]: Unable to EVIOCGABS device "/dev/input/event4" [ 443.081296][ T5979] udevd[5979]: Unable to EVIOCGABS device "/dev/input/event4" [ 443.093889][ T5979] udevd[5979]: Unable to EVIOCGABS device "/dev/input/event4" [ 443.170883][ T5824] usb 3-1: USB disconnect, device number 78 [ 443.236699][ T10] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 443.472643][ T10] usb 2-1: config 0 has no interfaces? [ 443.537058][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 443.579833][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.616219][ T10] usb 2-1: Product: syz [ 443.641978][ T10] usb 2-1: Manufacturer: syz [ 443.761612][ T10] usb 2-1: SerialNumber: syz [ 443.878337][ T5824] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 443.891132][ T10] usb 2-1: config 0 descriptor?? [ 444.204572][ T9787] program syz.1.982 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 444.224262][ T9787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.238071][ T9787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.389276][ T5824] usb 5-1: Using ep0 maxpacket: 8 [ 444.400335][ T9799] veth0_to_bond: entered promiscuous mode [ 444.422461][ T9799] veth0_to_bond: left promiscuous mode [ 444.458891][ T5824] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 444.512853][ T5824] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 444.580609][ T5824] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 444.676252][ T5824] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 444.717411][ T5824] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 444.917748][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.036723][ T918] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 445.133984][ T5909] usb 1-1: unable to get BOS descriptor or descriptor too short [ 445.159896][ T5909] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 445.172461][ T5824] usb 5-1: GET_CAPABILITIES returned 0 [ 445.189795][ T918] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 445.204568][ T5824] usbtmc 5-1:16.0: can't read capabilities [ 445.223844][ T5909] usb 1-1: can't read configurations, error -71 [ 445.276610][ T918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 445.353223][ T918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 445.392339][ T918] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 445.402791][ T918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.415785][ T918] usb 4-1: Product: syz [ 445.430094][ T9803] veth0_to_bond: entered promiscuous mode [ 445.436183][ T918] usb 4-1: Manufacturer: syz [ 445.451667][ T918] usb 4-1: SerialNumber: syz [ 445.456899][ T9803] veth0_to_bond: left promiscuous mode [ 445.472520][ T918] usb 4-1: config 0 descriptor?? [ 445.486142][ T9801] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 445.704322][ T918] powermate: unknown product id 0240 [ 445.715484][ T918] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 445.757162][ T918] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input63 [ 445.924299][ C1] powermate: config urb returned -71 [ 445.931534][ C1] powermate: config urb returned -71 [ 445.939032][ C1] powermate: config urb returned -71 [ 445.944581][ C1] powermate: config urb returned -71 [ 445.950683][ T918] usb 4-1: USB disconnect, device number 74 [ 445.956710][ C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 446.257649][ T10] usb 2-1: USB disconnect, device number 72 [ 446.620735][ T1215] usb 5-1: USB disconnect, device number 82 [ 447.125363][ T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 447.186573][ T1215] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 447.301717][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 447.333713][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.342290][ T1215] usb 5-1: Using ep0 maxpacket: 8 [ 447.365712][ T1215] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 447.390872][ T10] usb 2-1: Product: syz [ 447.414133][ T10] usb 2-1: Manufacturer: syz [ 447.419114][ T1215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.436614][ T10] usb 2-1: SerialNumber: syz [ 447.475463][ T1215] usb 5-1: Product: syz [ 447.501469][ T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 447.533447][ T1215] usb 5-1: Manufacturer: syz [ 447.538410][ T5929] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 447.554900][ T1215] usb 5-1: SerialNumber: syz [ 447.625039][ T1215] usb 5-1: config 0 descriptor?? [ 447.698627][ T1215] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 448.846503][ T5929] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 448.854272][ T5929] ath9k_htc: Failed to initialize the device [ 448.918717][ T5929] usb 2-1: ath9k_htc: USB layer deinitialized [ 449.156330][ T10] usb 2-1: USB disconnect, device number 73 [ 449.571577][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.996'. [ 449.628853][ T10] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 449.800580][ T10] usb 4-1: config 1 interface 0 altsetting 84 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.812031][ T1215] gspca_sonixj: reg_r err -32 [ 449.845556][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 449.860305][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.40 [ 449.869735][ T1215] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 449.907128][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.915571][ T10] usb 4-1: Product: syz [ 449.927736][ T10] usb 4-1: Manufacturer: syz [ 449.932438][ T10] usb 4-1: SerialNumber: syz [ 450.157137][ T918] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 450.193909][ T9834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.202932][ T9834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.239714][ T10] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input64 [ 450.252551][ T5191] bcm5974 4-1:1.0: could not read from device [ 450.264798][ T5191] bcm5974 4-1:1.0: could not read from device [ 450.275478][ T10] usb 4-1: USB disconnect, device number 75 [ 450.290457][ T5191] bcm5974 4-1:1.0: could not read from device [ 450.318031][ T918] usb 1-1: Using ep0 maxpacket: 32 [ 450.337829][ T918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 450.359788][ T918] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 450.372933][ T5979] udevd[5979]: Error opening device "/dev/input/event4": No such file or directory [ 450.383246][ T918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.395822][ T5979] udevd[5979]: Unable to EVIOCGABS device "/dev/input/event4" [ 450.403645][ T918] usb 1-1: Product: syz [ 450.410352][ T918] usb 1-1: Manufacturer: syz [ 450.415714][ T5979] udevd[5979]: Unable to EVIOCGABS device "/dev/input/event4" [ 450.423325][ T918] usb 1-1: SerialNumber: syz [ 450.428318][ T5979] udevd[5979]: Unable to EVIOCGABS device "/dev/input/event4" [ 450.438404][ T5979] udevd[5979]: Unable to EVIOCGABS device "/dev/input/event4" [ 450.447085][ T918] usb 1-1: config 0 descriptor?? [ 450.458686][ T918] hub 1-1:0.0: bad descriptor, ignoring hub [ 450.465881][ T5979] udevd[5979]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 450.473962][ T9] usb 5-1: USB disconnect, device number 83 [ 450.478190][ T918] hub 1-1:0.0: probe with driver hub failed with error -5 [ 450.560935][ T918] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input65 [ 450.598154][ T918] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 450.612025][ T5206] udevd[5206]: worker [5979] terminated by signal 6 (Aborted) [ 450.625463][ T5206] udevd[5206]: worker [5979] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input64/event4' [ 450.655370][ T918] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 450.708394][ T918] usb 1-1: USB disconnect, device number 78 [ 450.748581][ T9848] FAULT_INJECTION: forcing a failure. [ 450.748581][ T9848] name failslab, interval 1, probability 0, space 0, times 0 [ 450.768024][ T9848] CPU: 0 UID: 0 PID: 9848 Comm: syz.4.1001 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 450.768059][ T9848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 450.768074][ T9848] Call Trace: [ 450.768083][ T9848] [ 450.768094][ T9848] dump_stack_lvl+0x189/0x250 [ 450.768134][ T9848] ? __pfx____ratelimit+0x10/0x10 [ 450.768163][ T9848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.768194][ T9848] ? __pfx__printk+0x10/0x10 [ 450.768222][ T9848] ? __pfx___might_resched+0x10/0x10 [ 450.768247][ T9848] should_fail_ex+0x414/0x560 [ 450.768282][ T9848] should_failslab+0xa8/0x100 [ 450.768310][ T9848] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 450.768335][ T9848] ? __alloc_skb+0x112/0x2d0 [ 450.768360][ T9848] __alloc_skb+0x112/0x2d0 [ 450.768385][ T9848] netlink_sendmsg+0x5c6/0xb30 [ 450.768419][ T9848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.768443][ T9848] ? __import_iovec+0x5d4/0x7f0 [ 450.768464][ T9848] ? aa_sock_msg_perm+0x94/0x160 [ 450.768494][ T9848] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 450.768524][ T9848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.768547][ T9848] __sock_sendmsg+0x219/0x270 [ 450.768580][ T9848] ____sys_sendmsg+0x505/0x830 [ 450.768609][ T9848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.768650][ T9848] ___sys_sendmsg+0x21f/0x2a0 [ 450.768676][ T9848] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.768736][ T9848] ? __fget_files+0x2a/0x420 [ 450.768761][ T9848] ? __fget_files+0x3a0/0x420 [ 450.768796][ T9848] __sys_sendmsg+0x164/0x220 [ 450.768819][ T9848] ? __pfx___sys_sendmsg+0x10/0x10 [ 450.768854][ T9848] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 450.768885][ T9848] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.768913][ T9848] __do_fast_syscall_32+0xb6/0x2b0 [ 450.768952][ T9848] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.768979][ T9848] do_fast_syscall_32+0x34/0x80 [ 450.769004][ T9848] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.769030][ T9848] RIP: 0023:0xf70ee539 [ 450.769050][ T9848] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 450.769068][ T9848] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 450.769089][ T9848] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 450.769103][ T9848] RDX: 0000000000004054 RSI: 0000000000000000 RDI: 0000000000000000 [ 450.769116][ T9848] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 450.769129][ T9848] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 450.769142][ T9848] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 450.769171][ T9848] [ 451.546670][ T5824] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 451.609963][ T10] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 451.619692][ T9860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1006'. [ 451.629214][ T918] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 451.767289][ T5824] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 451.800099][ T5824] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.940090][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 451.940585][ T5824] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 451.955400][ T5824] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.968601][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 451.985931][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 452.007946][ T918] usb 3-1: config 0 has no interfaces? [ 452.023625][ T5824] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 452.033395][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 452.045296][ T5824] usb 5-1: Product: syz [ 452.050312][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 452.050352][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.061583][ T918] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 452.104328][ T918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.133173][ T5824] usb 5-1: Manufacturer: syz [ 452.140505][ T918] usb 3-1: Product: syz [ 452.148936][ T918] usb 3-1: Manufacturer: syz [ 452.202530][ T5824] cdc_wdm 5-1:1.0: skipping garbage [ 452.213671][ T5824] cdc_wdm 5-1:1.0: skipping garbage [ 452.220974][ T918] usb 3-1: SerialNumber: syz [ 452.236524][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 452.252039][ T918] usb 3-1: config 0 descriptor?? [ 452.262413][ T5824] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 452.311546][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.314945][ T5824] cdc_wdm 5-1:1.0: Unknown control protocol [ 452.321118][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1007'. [ 452.420363][ T9852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1003'. [ 452.559549][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 452.568664][ T10] usbtmc 4-1:16.0: can't read capabilities [ 452.672186][ T9872] capability: warning: `syz.2.1004' uses 32-bit capabilities (legacy support in use) [ 452.766133][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 4 bytes [ 452.772711][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 4 bytes [ 453.486972][ T24] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 453.664230][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 453.684328][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.703377][ T24] usb 1-1: Product: syz [ 453.711879][ T24] usb 1-1: Manufacturer: syz [ 453.721353][ T24] usb 1-1: SerialNumber: syz [ 453.762817][ T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 453.796365][ T5824] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 453.796766][ T10] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 453.986685][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 453.994845][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.006863][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.023536][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 454.038234][ T10] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 454.051628][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.065911][ T10] usb 2-1: config 0 descriptor?? [ 454.278480][ T1215] usb 4-1: USB disconnect, device number 76 [ 454.385624][ T9] usb 5-1: USB disconnect, device number 84 [ 454.608267][ T9881] tipc: Enabled bearer , priority 10 [ 454.621389][ T1215] usb 1-1: USB disconnect, device number 79 [ 454.646368][ T9881] FAULT_INJECTION: forcing a failure. [ 454.646368][ T9881] name failslab, interval 1, probability 0, space 0, times 0 [ 454.663704][ T9881] CPU: 1 UID: 0 PID: 9881 Comm: syz.3.1011 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 454.663739][ T9881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 454.663754][ T9881] Call Trace: [ 454.663764][ T9881] [ 454.663773][ T9881] dump_stack_lvl+0x189/0x250 [ 454.663814][ T9881] ? __pfx____ratelimit+0x10/0x10 [ 454.663843][ T9881] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.663874][ T9881] ? __pfx__printk+0x10/0x10 [ 454.663900][ T9881] ? __pfx___might_resched+0x10/0x10 [ 454.663920][ T9881] ? fs_reclaim_acquire+0x7d/0x100 [ 454.663952][ T9881] should_fail_ex+0x414/0x560 [ 454.663986][ T9881] should_failslab+0xa8/0x100 [ 454.664011][ T9881] __kmalloc_noprof+0xcb/0x4f0 [ 454.664031][ T9881] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 454.664066][ T9881] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 454.664104][ T9881] genl_family_rcv_msg_doit+0xb8/0x300 [ 454.664141][ T9881] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 454.664171][ T9881] ? __pfx___mutex_lock+0x10/0x10 [ 454.664202][ T9881] ? __pfx_genl_get_cmd+0x10/0x10 [ 454.664226][ T9881] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 454.664261][ T9881] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 454.664297][ T9881] genl_rcv_msg+0x60e/0x790 [ 454.664329][ T9881] ? __pfx_genl_rcv_msg+0x10/0x10 [ 454.664355][ T9881] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 454.664402][ T9881] netlink_rcv_skb+0x205/0x470 [ 454.664426][ T9881] ? __pfx_genl_rcv_msg+0x10/0x10 [ 454.664454][ T9881] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 454.664494][ T9881] ? down_read+0x1ad/0x2e0 [ 454.664526][ T9881] genl_rcv+0x28/0x40 [ 454.664559][ T9881] netlink_unicast+0x758/0x8d0 [ 454.664602][ T9881] netlink_sendmsg+0x805/0xb30 [ 454.664634][ T9881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.664656][ T9881] ? __import_iovec+0x5d4/0x7f0 [ 454.664679][ T9881] ? aa_sock_msg_perm+0x94/0x160 [ 454.664709][ T9881] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 454.664737][ T9881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.664758][ T9881] __sock_sendmsg+0x219/0x270 [ 454.664790][ T9881] ____sys_sendmsg+0x505/0x830 [ 454.664822][ T9881] ? __pfx_____sys_sendmsg+0x10/0x10 [ 454.664865][ T9881] ___sys_sendmsg+0x21f/0x2a0 [ 454.664891][ T9881] ? __pfx____sys_sendmsg+0x10/0x10 [ 454.664950][ T9881] ? __fget_files+0x2a/0x420 [ 454.664974][ T9881] ? __fget_files+0x3a0/0x420 [ 454.665008][ T9881] __sys_sendmsg+0x164/0x220 [ 454.665032][ T9881] ? __pfx___sys_sendmsg+0x10/0x10 [ 454.665070][ T9881] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 454.665100][ T9881] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.665131][ T9881] __do_fast_syscall_32+0xb6/0x2b0 [ 454.665161][ T9881] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.665190][ T9881] do_fast_syscall_32+0x34/0x80 [ 454.665212][ T9881] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 454.665231][ T9881] RIP: 0023:0xf70ee539 [ 454.665251][ T9881] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 454.665270][ T9881] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 454.665294][ T9881] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800010c0 [ 454.665309][ T9881] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 454.665321][ T9881] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 454.665333][ T9881] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 454.665346][ T9881] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 454.665368][ T9881] [ 455.017089][ T5824] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 455.024342][ T5824] ath9k_htc: Failed to initialize the device [ 455.053981][ T1215] usb 1-1: ath9k_htc: USB layer deinitialized [ 455.069079][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 455.099079][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 455.181530][ T10] usb 2-1: USB disconnect, device number 74 [ 455.290972][ T5922] usb 3-1: USB disconnect, device number 79 [ 455.476763][ T24] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 455.531906][ T9] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 455.646607][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 455.654700][ T24] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 455.666554][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.693602][ T24] usb 4-1: config 0 has no interface number 0 [ 455.695760][ T9] usb 5-1: config 1 interface 0 altsetting 84 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.716163][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 455.716597][ T24] usb 4-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 455.727654][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.40 [ 455.734639][ T5824] tipc: Node number set to 10005162 [ 455.743471][ T5922] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 455.765568][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.775188][ T9] usb 5-1: Product: syz [ 455.776922][ T24] usb 4-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 455.784680][ T9] usb 5-1: Manufacturer: syz [ 455.802351][ T9] usb 5-1: SerialNumber: syz [ 455.810401][ T24] usb 4-1: config 0 interface 8 has no altsetting 0 [ 455.851983][ T24] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 455.871882][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.892182][ T24] usb 4-1: Product: syz [ 455.896841][ T24] usb 4-1: Manufacturer: syz [ 455.901501][ T24] usb 4-1: SerialNumber: syz [ 455.937746][ T24] usb 4-1: config 0 descriptor?? [ 455.941439][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 455.958347][ T5922] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 455.972756][ T5922] usb 3-1: config 0 has no interface number 0 [ 455.984149][ T5922] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 456.004195][ T5922] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 456.016159][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.051483][ T5922] usb 3-1: Product: syz [ 456.055887][ T5922] usb 3-1: Manufacturer: syz [ 456.064937][ T9890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.079221][ T5922] usb 3-1: SerialNumber: syz [ 456.092309][ T9890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.107854][ T5922] usb 3-1: config 0 descriptor?? [ 456.120914][ T5922] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 456.152454][ T5922] em28xx 3-1:0.132: Video interface 132 found: [ 456.250647][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input66 [ 456.289862][ T5191] bcm5974 5-1:1.0: could not read from device [ 456.325972][ T9] usb 5-1: USB disconnect, device number 85 [ 456.326239][ T9892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.371669][ T9892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.437340][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1018'. [ 456.601376][ T5922] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 457.231289][ T5922] em28xx 3-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 457.240117][ T5922] em28xx 3-1:0.132: failed to read eeprom (err=-5) [ 457.281195][ T24] ath6kl: Failed to submit usb control message: -110 [ 457.300010][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1021'. [ 457.309386][ T24] ath6kl: unable to send the bmi data to the device: -110 [ 457.317848][ T24] ath6kl: Unable to send get target info: -110 [ 457.385046][ T24] ath6kl: Failed to init ath6kl core: -110 [ 457.421077][ T24] ath6kl_usb 4-1:0.8: probe with driver ath6kl_usb failed with error -110 [ 457.446688][ T5922] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 457.723412][ T5922] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 457.736575][ T5922] em28xx 3-1:0.132: analog set to bulk mode. [ 457.790342][ T9] em28xx 3-1:0.132: Registering V4L2 extension [ 457.824328][ T1215] usb 4-1: USB disconnect, device number 77 [ 457.875427][ T5922] usb 3-1: USB disconnect, device number 80 [ 457.885428][ T5922] em28xx 3-1:0.132: Disconnecting em28xx [ 458.615011][ T9] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 458.622504][ T9] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 458.693070][ T9] em28xx 3-1:0.132: No AC97 audio processor [ 458.701484][ T9] usb 3-1: Decoder not found [ 458.706175][ T9] em28xx 3-1:0.132: failed to create media graph [ 458.736094][ T9] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 458.827061][ T9] em28xx 3-1:0.132: Remote control support is not available for this card. [ 458.871385][ T5922] em28xx 3-1:0.132: Closing input extension [ 458.938310][ T5922] em28xx 3-1:0.132: Freeing device [ 459.336803][ T24] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 459.346679][ T5922] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 459.521671][ T5922] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 459.554151][ T5922] usb 3-1: config 0 has no interface number 0 [ 459.586626][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 459.611258][ T24] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 459.627503][ T5922] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 459.630048][ T24] usb 4-1: config 0 has no interface number 0 [ 459.682501][ T24] usb 4-1: config 0 interface 184 has no altsetting 0 [ 459.712548][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.755703][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 459.756053][ T5922] usb 3-1: Product: syz [ 459.768070][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.784148][ T5922] usb 3-1: Manufacturer: syz [ 459.792885][ T5922] usb 3-1: SerialNumber: syz [ 459.827888][ T24] usb 4-1: Product: syz [ 459.834471][ T5922] usb 3-1: config 0 descriptor?? [ 459.850230][ T24] usb 4-1: Manufacturer: syz [ 459.866683][ T24] usb 4-1: SerialNumber: syz [ 459.886578][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1023'. [ 459.896844][ T24] usb 4-1: config 0 descriptor?? [ 459.921979][ T24] smsc75xx v1.0.0 [ 459.925726][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 459.931621][ T5922] ims_pcu 3-1:0.41: probe with driver ims_pcu failed with error -22 [ 459.952100][ T24] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 460.259318][ T9946] binder: 9931:9946 ioctl c0306201 80000100 returned -11 [ 460.276515][ T9946] fuse: Invalid rootmode [ 460.528291][ T9949] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 460.941529][ T9930] hsr_slave_0 (unregistering): left promiscuous mode [ 460.955621][ T9941] veth0_to_bond: entered promiscuous mode [ 461.230589][ T5922] usb 3-1: USB disconnect, device number 81 [ 461.240104][ T9944] veth0_to_bond: left promiscuous mode [ 462.086475][ T5909] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 462.253420][ T5909] usb 1-1: Using ep0 maxpacket: 32 [ 462.280290][ T5909] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 462.289120][ T5824] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 462.324101][ T5909] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.350975][ T5909] usb 1-1: config 0 has no interface number 0 [ 462.372600][ T5909] usb 1-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 462.411412][ T5909] usb 1-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 462.506803][ T5909] usb 1-1: config 0 interface 8 has no altsetting 0 [ 462.516785][ T5824] usb 2-1: Using ep0 maxpacket: 32 [ 462.553519][ T5824] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 462.566795][ T24] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 462.584707][ T5824] usb 2-1: config 0 has no interface number 0 [ 462.598433][ T5909] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 462.622723][ T5922] usb 4-1: USB disconnect, device number 78 [ 462.635283][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.647406][ T5824] usb 2-1: config 0 interface 184 has no altsetting 0 [ 462.676807][ T5824] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 462.698513][ T5909] usb 1-1: Product: syz [ 462.756186][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.786953][ T5909] usb 1-1: Manufacturer: syz [ 462.816332][ T5909] usb 1-1: SerialNumber: syz [ 462.823435][ T24] usb 3-1: config 0 has no interfaces? [ 462.854128][ T5824] usb 2-1: Product: syz [ 462.874500][ T5824] usb 2-1: Manufacturer: syz [ 462.880884][ T5909] usb 1-1: config 0 descriptor?? [ 462.910113][ T5824] usb 2-1: SerialNumber: syz [ 462.988481][ T5824] usb 2-1: config 0 descriptor?? [ 463.085691][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 463.102428][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.111953][ T24] usb 3-1: Product: syz [ 463.138706][ T5824] smsc75xx v1.0.0 [ 463.142472][ T5824] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 463.164217][ T24] usb 3-1: Manufacturer: syz [ 463.170043][ T24] usb 3-1: SerialNumber: syz [ 463.176331][ T5824] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 463.198646][ T24] usb 3-1: config 0 descriptor?? [ 463.473511][ T9964] binder: 9957:9964 ioctl c0306201 80000100 returned -11 [ 463.489193][ T9964] fuse: Invalid rootmode [ 463.635422][ T9981] FAULT_INJECTION: forcing a failure. [ 463.635422][ T9981] name failslab, interval 1, probability 0, space 0, times 0 [ 463.656296][ T9981] CPU: 1 UID: 0 PID: 9981 Comm: syz.3.1034 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 463.656333][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 463.656347][ T9981] Call Trace: [ 463.656357][ T9981] [ 463.656371][ T9981] dump_stack_lvl+0x189/0x250 [ 463.656413][ T9981] ? __pfx____ratelimit+0x10/0x10 [ 463.656443][ T9981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.656473][ T9981] ? __pfx__printk+0x10/0x10 [ 463.656510][ T9981] ? __pfx___might_resched+0x10/0x10 [ 463.656534][ T9981] should_fail_ex+0x414/0x560 [ 463.656571][ T9981] should_failslab+0xa8/0x100 [ 463.656598][ T9981] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 463.656623][ T9981] ? mptcp_pm_nl_add_addr_doit+0x37c/0x1460 [ 463.656658][ T9981] kmemdup_noprof+0x2b/0x70 [ 463.656682][ T9981] mptcp_pm_nl_add_addr_doit+0x37c/0x1460 [ 463.656703][ T9981] ? __nla_validate_parse+0x2400/0x2d40 [ 463.656725][ T9981] ? __sock_sendmsg+0x219/0x270 [ 463.656746][ T9981] ? ____sys_sendmsg+0x505/0x830 [ 463.656768][ T9981] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 463.656793][ T9981] ? __pfx___nla_validate_parse+0x10/0x10 [ 463.656844][ T9981] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 463.656872][ T9981] genl_family_rcv_msg_doit+0x215/0x300 [ 463.656897][ T9981] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 463.656927][ T9981] ? bpf_lsm_capable+0x9/0x20 [ 463.656942][ T9981] ? security_capable+0x7e/0x2e0 [ 463.656967][ T9981] genl_rcv_msg+0x60e/0x790 [ 463.656991][ T9981] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.657008][ T9981] ? ref_tracker_free+0x63a/0x7d0 [ 463.657029][ T9981] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 463.657049][ T9981] ? __pfx_ref_tracker_free+0x10/0x10 [ 463.657079][ T9981] netlink_rcv_skb+0x205/0x470 [ 463.657094][ T9981] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.657115][ T9981] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.657142][ T9981] ? down_read+0x1ad/0x2e0 [ 463.657168][ T9981] genl_rcv+0x28/0x40 [ 463.657185][ T9981] netlink_unicast+0x758/0x8d0 [ 463.657216][ T9981] netlink_sendmsg+0x805/0xb30 [ 463.657239][ T9981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.657259][ T9981] ? __import_iovec+0x5d4/0x7f0 [ 463.657274][ T9981] ? aa_sock_msg_perm+0x94/0x160 [ 463.657297][ T9981] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 463.657318][ T9981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.657333][ T9981] __sock_sendmsg+0x219/0x270 [ 463.657356][ T9981] ____sys_sendmsg+0x505/0x830 [ 463.657377][ T9981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.657407][ T9981] ___sys_sendmsg+0x21f/0x2a0 [ 463.657425][ T9981] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.657469][ T9981] ? __fget_files+0x2a/0x420 [ 463.657487][ T9981] ? __fget_files+0x3a0/0x420 [ 463.657520][ T9981] __sys_sendmsg+0x164/0x220 [ 463.657538][ T9981] ? __pfx___sys_sendmsg+0x10/0x10 [ 463.657566][ T9981] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 463.657588][ T9981] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.657610][ T9981] __do_fast_syscall_32+0xb6/0x2b0 [ 463.657632][ T9981] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.657655][ T9981] do_fast_syscall_32+0x34/0x80 [ 463.657676][ T9981] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 463.657695][ T9981] RIP: 0023:0xf70ee539 [ 463.657710][ T9981] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 463.657724][ T9981] RSP: 002b:00000000f50bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 463.657741][ T9981] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000180 [ 463.657752][ T9981] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 463.657761][ T9981] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 463.657770][ T9981] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 463.657779][ T9981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 463.657801][ T9981] [ 464.256926][ T5909] ath6kl: Failed to submit usb control message: -110 [ 464.264486][ T5909] ath6kl: unable to send the bmi data to the device: -110 [ 464.271993][ T5909] ath6kl: Unable to send get target info: -110 [ 464.534938][ T5909] ath6kl: Failed to init ath6kl core: -110 [ 464.542179][ T5909] ath6kl_usb 1-1:0.8: probe with driver ath6kl_usb failed with error -110 [ 465.006192][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1037'. [ 465.236583][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1037'. [ 465.982748][ T9] usb 3-1: USB disconnect, device number 82 [ 465.995822][ T9997] netlink: 'syz.4.1038': attribute type 1 has an invalid length. [ 466.004185][ T9997] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1038'. [ 466.094021][ T9999] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1039'. [ 466.097864][ T5909] usb 2-1: USB disconnect, device number 75 [ 466.203964][T10000] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 466.207980][ T30] audit: type=1326 audit(1749241324.443:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 466.243683][ T30] audit: type=1326 audit(1749241324.473:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 466.334203][ T30] audit: type=1326 audit(1749241324.523:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 466.357352][ T30] audit: type=1326 audit(1749241324.523:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 466.384015][ T30] audit: type=1326 audit(1749241324.523:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 466.407376][ T30] audit: type=1326 audit(1749241324.523:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=232 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 466.432451][ T30] audit: type=1326 audit(1749241324.523:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 466.485437][ T30] audit: type=1326 audit(1749241324.523:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 466.572655][ T30] audit: type=1326 audit(1749241324.523:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 466.600176][ T30] audit: type=1326 audit(1749241324.523:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 466.682334][ T5922] usb 1-1: USB disconnect, device number 80 [ 466.751429][T10009] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1043'. [ 466.826625][ T9] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 466.846662][ T1215] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 466.989108][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 467.000912][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 467.012289][ T1215] usb 3-1: Using ep0 maxpacket: 16 [ 467.017763][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 467.034113][ T1215] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 467.046654][ T1215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.065405][ T1215] usb 3-1: Product: syz [ 467.072647][ T9] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 467.086512][ T1215] usb 3-1: Manufacturer: syz [ 467.091189][ T1215] usb 3-1: SerialNumber: syz [ 467.096077][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.110044][ T9] usb 4-1: Product: syz [ 467.114292][ T9] usb 4-1: Manufacturer: syz [ 467.120797][ T1215] usb 3-1: config 0 descriptor?? [ 467.129948][ T9] usb 4-1: SerialNumber: syz [ 467.159387][ T9] usb 4-1: config 0 descriptor?? [ 467.167204][ T5922] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 467.184234][T10007] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 467.399932][ T9] powermate: unknown product id 0240 [ 467.405787][ T9] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 467.416484][ T5922] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 467.425512][ T5922] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 467.441681][ T9] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input67 [ 467.452637][ T5922] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 467.465360][ T5922] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 467.485631][ T5922] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 467.517692][ T10] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 467.576175][ T1215] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 467.608333][ T5922] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 467.622629][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 467.633921][ C0] powermate: config urb returned -71 [ 467.636192][ T24] usb 4-1: USB disconnect, device number 79 [ 467.639268][ C0] powermate: usb_submit_urb(config) failed [ 467.639365][ C0] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 467.653389][ T5922] usb 1-1: Product: syz [ 467.671691][ T1215] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 467.681464][ T10] usb 2-1: device descriptor read/64, error -71 [ 467.721434][ T1215] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 467.731105][ T5922] usb 1-1: Manufacturer: syz [ 467.737042][ T1215] usb 3-1: media controller created [ 467.811688][ T5922] cdc_wdm 1-1:1.0: skipping garbage [ 467.871665][ T5922] cdc_wdm 1-1:1.0: skipping garbage [ 467.939924][ T1215] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 467.948631][ T10] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 467.957722][ T5922] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 467.967029][ T5922] cdc_wdm 1-1:1.0: Unknown control protocol [ 468.030161][ T1215] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 468.039122][ T1215] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 468.096703][ T10] usb 2-1: device descriptor read/64, error -71 [ 468.127676][ T5824] usb 1-1: USB disconnect, device number 81 [ 468.218384][ T10] usb usb2-port1: attempt power cycle [ 468.546607][ T1215] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 468.576553][ T10] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 468.597864][ T10] usb 2-1: device descriptor read/8, error -71 [ 468.707798][ T1215] usb 4-1: Using ep0 maxpacket: 32 [ 468.742011][ T1215] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 468.760873][ T1215] usb 4-1: config 0 has no interface number 0 [ 468.772038][ T1215] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 468.786610][ T1215] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 468.796258][ T1215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.804822][ T1215] usb 4-1: Product: syz [ 468.809473][ T1215] usb 4-1: Manufacturer: syz [ 468.814908][ T1215] usb 4-1: SerialNumber: syz [ 468.827654][ T1215] usb 4-1: config 0 descriptor?? [ 468.836581][ T10] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 468.857425][ T1215] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 468.868410][ T10] usb 2-1: device descriptor read/8, error -71 [ 468.876829][ T1215] em28xx 4-1:0.132: Video interface 132 found: [ 468.977261][ T10] usb usb2-port1: unable to enumerate USB device [ 469.338678][ T5922] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 469.349704][ T1215] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 469.516667][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 469.565110][ T5922] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 469.573727][ T5922] usb 1-1: config 0 has no interface number 0 [ 469.584873][ T5922] usb 1-1: config 0 interface 184 has no altsetting 0 [ 469.606961][T10031] ------------[ cut here ]------------ [ 469.607172][ T5909] usb 3-1: USB disconnect, device number 83 [ 469.612972][T10031] usb 3-1: BOGUS control dir, pipe 80005380 doesn't match bRequestType c0 [ 469.638368][T10031] WARNING: CPU: 0 PID: 10031 at drivers/usb/core/urb.c:413 usb_submit_urb+0x115d/0x1890 [ 469.648645][T10031] Modules linked in: [ 469.653166][T10031] CPU: 0 UID: 0 PID: 10031 Comm: syz.3.1049 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 469.665299][T10031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 469.675642][T10031] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 469.681844][T10031] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 80 ec 33 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 54 5d 63 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 469.701712][T10031] RSP: 0018:ffffc9000407f670 EFLAGS: 00010246 [ 469.708235][T10031] RAX: a0b5dce6a71d5900 RBX: ffff8880279cf200 RCX: 0000000000080000 [ 469.716841][T10031] RDX: ffffc9000c9cd000 RSI: 00000000000157a9 RDI: 00000000000157aa [ 469.725020][T10031] RBP: 1ffff1100ef48ba0 R08: ffffc9000407f387 R09: 1ffff9200080fe70 [ 469.733199][T10031] R10: dffffc0000000000 R11: fffff5200080fe71 R12: ffff888077a45d00 [ 469.741478][T10031] R13: dffffc0000000000 R14: 0000000080005380 R15: ffff888053eb9c20 [ 469.749605][T10031] FS: 0000000000000000(0000) GS:ffff888125c55000(0063) knlGS:00000000f50deb40 [ 469.758722][T10031] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 469.765417][T10031] CR2: 0000000030a19ffc CR3: 000000003413a000 CR4: 00000000003526f0 [ 469.773629][T10031] Call Trace: [ 469.777087][T10031] [ 469.780142][T10031] usb_start_wait_urb+0x114/0x4c0 [ 469.785552][T10031] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 469.791484][T10031] usb_control_msg+0x232/0x3e0 [ 469.796508][T10031] dtv5100_i2c_msg+0x250/0x330 [ 469.801398][T10031] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 469.806384][T10031] __i2c_transfer+0x874/0x2170 [ 469.811371][T10031] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.816799][T10031] ? __pfx___i2c_transfer+0x10/0x10 [ 469.822175][T10031] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 469.827805][T10031] ? i2c_transfer+0x11d/0x3a0 [ 469.832630][T10031] i2c_transfer+0x25b/0x3a0 [ 469.837456][T10031] ? __pfx_i2c_transfer+0x10/0x10 [ 469.842618][T10031] ? _copy_from_user+0x94/0xb0 [ 469.847653][T10031] i2cdev_ioctl_rdwr+0x460/0x740 [ 469.852703][T10031] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 469.858014][T10031] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 469.863841][T10031] ? __fget_files+0x3a0/0x420 [ 469.868776][T10031] ? __fget_files+0x2a/0x420 [ 469.873543][T10031] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 469.879499][T10031] __ia32_compat_sys_ioctl+0x540/0x840 [ 469.885157][T10031] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 469.891358][T10031] ? irqentry_exit+0x74/0x90 [ 469.896017][T10031] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.901440][T10031] __do_fast_syscall_32+0xb6/0x2b0 [ 469.906658][T10031] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.912013][T10031] do_fast_syscall_32+0x34/0x80 [ 469.916989][T10031] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 469.923359][T10031] RIP: 0023:0xf70ee539 [ 469.927637][T10031] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 469.947502][T10031] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 469.956088][T10031] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 469.964168][T10031] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 469.972337][T10031] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 469.980492][T10031] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 469.988623][T10031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.996701][T10031] [ 469.999852][T10031] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 470.007174][T10031] CPU: 0 UID: 0 PID: 10031 Comm: syz.3.1049 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 470.018926][T10031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 470.029178][T10031] Call Trace: [ 470.032473][T10031] [ 470.035416][T10031] dump_stack_lvl+0x99/0x250 [ 470.040036][T10031] ? __asan_memcpy+0x40/0x70 [ 470.044644][T10031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.049861][T10031] ? __pfx__printk+0x10/0x10 [ 470.054501][T10031] panic+0x2db/0x790 [ 470.058426][T10031] ? __pfx_panic+0x10/0x10 [ 470.062951][T10031] __warn+0x31b/0x4b0 [ 470.066969][T10031] ? usb_submit_urb+0x115d/0x1890 [ 470.072076][T10031] ? usb_submit_urb+0x115d/0x1890 [ 470.077136][T10031] report_bug+0x2be/0x4f0 [ 470.081499][T10031] ? usb_submit_urb+0x115d/0x1890 [ 470.086546][T10031] ? usb_submit_urb+0x115d/0x1890 [ 470.091610][T10031] ? usb_submit_urb+0x115f/0x1890 [ 470.096657][T10031] handle_bug+0x84/0x160 [ 470.100935][T10031] exc_invalid_op+0x1a/0x50 [ 470.105543][T10031] asm_exc_invalid_op+0x1a/0x20 [ 470.110406][T10031] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 470.116059][T10031] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 80 ec 33 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 54 5d 63 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 470.135700][T10031] RSP: 0018:ffffc9000407f670 EFLAGS: 00010246 [ 470.141828][T10031] RAX: a0b5dce6a71d5900 RBX: ffff8880279cf200 RCX: 0000000000080000 [ 470.149917][T10031] RDX: ffffc9000c9cd000 RSI: 00000000000157a9 RDI: 00000000000157aa [ 470.157993][T10031] RBP: 1ffff1100ef48ba0 R08: ffffc9000407f387 R09: 1ffff9200080fe70 [ 470.166271][T10031] R10: dffffc0000000000 R11: fffff5200080fe71 R12: ffff888077a45d00 [ 470.174358][T10031] R13: dffffc0000000000 R14: 0000000080005380 R15: ffff888053eb9c20 [ 470.182494][T10031] usb_start_wait_urb+0x114/0x4c0 [ 470.187653][T10031] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 470.193240][T10031] usb_control_msg+0x232/0x3e0 [ 470.198133][T10031] dtv5100_i2c_msg+0x250/0x330 [ 470.202938][T10031] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 470.207813][T10031] __i2c_transfer+0x874/0x2170 [ 470.212626][T10031] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.217862][T10031] ? __pfx___i2c_transfer+0x10/0x10 [ 470.223096][T10031] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 470.228504][T10031] ? i2c_transfer+0x11d/0x3a0 [ 470.233200][T10031] i2c_transfer+0x25b/0x3a0 [ 470.237721][T10031] ? __pfx_i2c_transfer+0x10/0x10 [ 470.242757][T10031] ? _copy_from_user+0x94/0xb0 [ 470.247535][T10031] i2cdev_ioctl_rdwr+0x460/0x740 [ 470.252489][T10031] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 470.257623][T10031] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 470.263270][T10031] ? __fget_files+0x3a0/0x420 [ 470.268228][T10031] ? __fget_files+0x2a/0x420 [ 470.272917][T10031] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 470.278775][T10031] __ia32_compat_sys_ioctl+0x540/0x840 [ 470.284265][T10031] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 470.290269][T10031] ? irqentry_exit+0x74/0x90 [ 470.294931][T10031] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.300173][T10031] __do_fast_syscall_32+0xb6/0x2b0 [ 470.305413][T10031] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.310657][T10031] do_fast_syscall_32+0x34/0x80 [ 470.315543][T10031] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 470.322077][T10031] RIP: 0023:0xf70ee539 [ 470.326162][T10031] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 470.345811][T10031] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 470.354247][T10031] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 470.362260][T10031] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 470.370255][T10031] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 470.378256][T10031] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 470.386326][T10031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 470.394344][T10031] [ 470.397558][T10031] Kernel Offset: disabled [ 470.401903][T10031] Rebooting in 86400 seconds..