last executing test programs: 7m32.832966957s ago: executing program 2 (id=1721): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000440)=ANY=[@ANYBLOB="20170016a200bf4cf87e8c1ff3feffffffffffffff138aa954333323763ba07ff686b873fefb6fb7023cf55b9e6f2242dc553919f55bc75cbbe94d00871cd5716a89824f261a1ddddd534b4cc4b4217ad16ac0448e108309d1aae5ad6143cceecdac306b217811280e811920e1800e408281"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="f36db9d90800000f322e6764260f350f79330f8267333a99c4e17ff057ee66baf80cb8ace60d8aef66bafc0c66ed670f01c8f365f0812109000000f3260fa520", 0x40}], 0x1, 0x51, 0x0, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@random="371598b631a7", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) ioctl$FS_IOC_GETVERSION(r4, 0xc0105b08, &(0x7f0000000040)) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000102050000000000000000000a0000003c0001800c00028005000500000000002c00018014000300fc010000000000000000000000000000140004"], 0x50}}, 0x0) mmap(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x6, 0x2010, r4, 0xe6cff000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@ipv4_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}]}, 0x3c}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100153a48e08f00a71729188010203010902240001060000000904000002ffffff0009050b0000000000000905ec"], 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589ccd75d0275367048f46e1d1833f0b225d71e6aeeafac6b1195e3a2a07b7e7608b3a26ff", 0x30) r9 = accept4(r8, 0x0, 0x0, 0x80000) recvmsg$can_raw(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1}, 0x40010022) openat$ppp(0xffffff9c, &(0x7f0000000080), 0x801, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0xda0a, 0x4, 0x7, 0x5, 0x66c, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x2, 0x1c00, 0x6, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x7, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0xfff, 0x2, 0x180000, 0x7, 0x8b, 0x5, 0x5, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xba27, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x7, 0x0, 0x3a4, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x3, 0x8, 0x8, 0x1, 0x1fc, 0xc5d, 0xffffffff]}}) 7m31.176882991s ago: executing program 2 (id=1735): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x9, 0x8, 0xfffff034}, {0x40, 0x0, 0x0, 0xfffffa4b}, {0x6, 0x0, 0x6c, 0xfffffffe}]}, 0x8) 7m30.982157758s ago: executing program 2 (id=1737): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) openat$binfmt_register(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0xa, 0x2, 0x7, 0x7fff1000}]}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x4, 0x7ba, 0x9, 0xc07b}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000100)={0x2, 0x0, 0x42, 0x0, &(0x7f0000000040)=[{}, {}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x5}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000200)=0x200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000008}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m30.746880552s ago: executing program 2 (id=1742): mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030a08205a3a8f5622da345", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x244) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x160, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002140000001100010000400000000000000000000a"], 0x60}}, 0x0) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_ON(r7, 0x7001) 7m29.64711054s ago: executing program 2 (id=1753): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="201549000000719c9bff0000002920602a773c08d7e33fe8bbcd5e902e57453e303293777a3d6836af78c2fbb763b8be8070b3c14aaa9cdfaa46975c86c72d20e6189a295afb31"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x71, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x40000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7}, 0x10, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7m29.214525484s ago: executing program 2 (id=1755): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) pipe(&(0x7f00000002c0)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x819, &(0x7f0000000180)={0x0, 0x69b5, 0x10100, 0xfffffffe}, &(0x7f0000000100)=0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x28) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 7m27.784756048s ago: executing program 32 (id=1755): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) pipe(&(0x7f00000002c0)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x819, &(0x7f0000000180)={0x0, 0x69b5, 0x10100, 0xfffffffe}, &(0x7f0000000100)=0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x28) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 8.953714098s ago: executing program 5 (id=4001): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={r3, 0x5}, &(0x7f00000001c0)=0x8) 8.768992251s ago: executing program 5 (id=4004): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_vhci(0x0, 0x7) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$l2tp6(0xa, 0x2, 0x73) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4020054) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40043d14, &(0x7f0000000080)={{0xffffffffffffffff, 0x4}, {0x6, 0x571}}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000028c0)=ANY=[@ANYBLOB="30000000120009162dbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="20a004001000000008001f000200008008001d0061"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000004) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="900000006d439dc15962b6a4cd3b5c8485c02723f73f77c0ce422337bcdbb6ec806d9f3d80ffbee03833651300f1957252db5f954847df8452047e5981ef1c4a6e5e2b68a0c30e5f5bc3410bb7157cdff0ecbdfb36e34f14f3062cedd33806a8af2e5f867a1c1979844ef5f24994f47e718c60956f29", @ANYRES16=0x0, @ANYBLOB="10002dbd7000ffdbdf25050000007c000280040004001c00038008000200040000000800020007000000080002000600000008000100330f0000080001000900000008000100b2000000140003800800020017b0b952080001000900000008000100faffffff2400038008000200ff07000008000100ffffffff08000200070000000800010004000000"], 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000001c0)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000080)=@arm64={0x9, 0x3, 0x1, '\x00', 0x1}) 6.606556908s ago: executing program 5 (id=4017): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xec}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4:.:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xec}}, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4:.:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) (async) 6.368539069s ago: executing program 5 (id=4018): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x10010, r0, 0xad4a4000) ptrace(0x10, r1) ptrace(0x8, r1) syz_pidfd_open(r1, 0x0) fcntl$setown(r0, 0x8, r1) r2 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@multicast1, @in=@local, 0x0, 0xfffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x5, 0x0, 0x0, 0x5}, 0x4, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in6=@local, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket(0x10, 0x3, 0xfffffffc) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x21104}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c860}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x80000}}, 0x4, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r6 = socket$rxrpc(0x21, 0x2, 0xa) write(r6, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r6, 0x110, 0x2, 0x0, 0x0) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r7, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) setsockopt$sock_linger(r4, 0x1, 0xd, 0x0, 0x0) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) write$sndseq(r10, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x0) 6.246441558s ago: executing program 3 (id=4019): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3ff, 0x202000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000040)={0x34, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40086436, &(0x7f0000000080)={r1, 0x630}) r2 = syz_open_dev$vbi(&(0x7f0000000540), 0x2, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000240)={0x0, @reserved}) syz_open_dev$vim2m(&(0x7f0000000000), 0x204d5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) r5 = syz_io_uring_setup(0x54b6, &(0x7f0000000640)={0x0, 0xf5b7, 0x10100, 0x200, 0x15b}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, 0x0, 0x26}, 0x0, 0x80840, 0x1}) io_uring_enter(r5, 0x1d2d, 0x0, 0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x1fdffe, 0x4000, 0x80, 0x20, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r8, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ptrace(0x10, r11) r12 = syz_open_dev$loop(&(0x7f0000000100), 0x1000001, 0x6100) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r13, &(0x7f0000000440)="c7a36ab09d1ebf1c230e8400b6bb2705e439ef7b226b4e10d3c01320bbce4cc2890f49517bcf75fe7d9f94d83c70005fe8f7ac40bb72770b4a2712332121b5c24fbc234095d27d51a26dec705234ea348d57928b59d43d78e55535288a4e0c2213d5558675255bb0ae94be774d585b38bd251dcccfdb3583d643ac2066151415addd7f26930b3b4808440b8dbb6ef9ac63b848272a72234bb1939fe2efdb1abd", 0xa0) ioctl$LOOP_CONFIGURE(r12, 0x4c0a, &(0x7f00000002c0)={r13, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000001]}}) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r14) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010000000000000000000600000008000300", @ANYRES32=r16, @ANYBLOB="080005000b0000000a001810030303b75da57569"], 0x30}, 0x1, 0x0, 0x0, 0x24004084}, 0x40c0) socket$qrtr(0x2a, 0x2, 0x0) waitid(0x0, r11, 0x0, 0x8, 0x0) waitid(0x1, r11, 0x0, 0x4, 0x0) 5.866549066s ago: executing program 4 (id=4020): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x22000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) close(r2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=""/87, &(0x7f0000000180)=""/35, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x220080) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80082) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000140)={0x9}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f0000000240)={&(0x7f0000000200)=[r6], 0x100000000, 0x1, 0x1}) socket$packet(0x11, 0x3, 0x300) prctl$PR_CAPBSET_DROP(0x18, 0x10009) socketpair(0x26, 0x3, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') 5.61324006s ago: executing program 4 (id=4021): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20104, 0x52895}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x44}}, 0x44000000) 5.40216615s ago: executing program 4 (id=4024): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc2c45513, &(0x7f0000000340)={{0xa, 0x2, 0x9, 0xa, 'syz1\x00', 0x5}, 0x0, [0x7f, 0x410, 0x9e84, 0x8001, 0x5, 0x1, 0x3, 0x40, 0x0, 0xc2da, 0x4, 0xe, 0x1, 0xbf2, 0xf, 0x2, 0xfffffffa, 0x8, 0x80000001, 0x5, 0x3, 0x7, 0x80000000, 0x400, 0x2, 0x8, 0x9, 0x60, 0xffffffff, 0x7, 0x7, 0xbee, 0x4, 0x5b9, 0x4, 0x3, 0x6000000, 0x65000000, 0x1975b0f2, 0x5, 0x54, 0x5, 0x8, 0x2, 0xd, 0x0, 0x780, 0x5, 0x81d9, 0x7, 0x10000, 0x152a, 0x8, 0x4, 0xfffffff9, 0x101, 0x1, 0x4, 0x83, 0x9, 0x3, 0x40, 0x400, 0x1, 0x3, 0x9, 0x3, 0x9, 0x9, 0x8, 0x5, 0xc, 0xe, 0x71b, 0x2, 0x800, 0x4, 0x6, 0x401, 0x401, 0x4, 0x4, 0x3, 0x9c8, 0x2, 0x4, 0x3ff, 0x3ee0, 0xfff, 0x0, 0x0, 0x0, 0xf46, 0x8000, 0x3, 0x7ff, 0x0, 0x9, 0x0, 0x7519, 0x3, 0x8, 0x7fff, 0x10, 0x8, 0x9, 0x694, 0xd, 0x81, 0x9, 0x2, 0x1, 0x2, 0x9777, 0x71, 0xffffffff, 0xf, 0x8, 0x7f, 0x10001, 0x1, 0xffffa421, 0x1, 0x4, 0x8, 0x4a, 0xfffffff9, 0x5]}) (fail_nth: 5) 5.252167695s ago: executing program 3 (id=4027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000008}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x2, 0x7, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) move_mount(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x2, 0x3, 0x801, 0x0, 0x0, {0x2}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x2c}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x9}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x22}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x400c095) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x3, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24004000) socket$packet(0x11, 0x3, 0x300) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000440)) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000004c0)={r2, r3, 0x4}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r5, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) socket$igmp6(0xa, 0x3, 0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={0x0, 0xe, 0x30, 0x6, 0x8c}, &(0x7f0000000680)=0x18) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000006c0)=@assoc_id=r7, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r4) openat$loop_ctrl(0xffffff9c, &(0x7f0000000740), 0x0, 0x0) r8 = openat$adsp1(0xffffff9c, &(0x7f0000000780), 0x10400, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r8, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r9 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0x11f8, &(0x7f0000000880)={[{0x88, 0x4e00, "dc7d5d26fc3b31533c565c622290c0ed70b2cb20ea771e9cdd3d4018c7f4541ced6db1e46bd81530761949e0d57c1a4731b101649b262582e4fcf4fa1ba0f469beb9ee1e3b32acfed8803aa0070885445a4105e2ed772dafaf26afef6d1e694574ecca762891cc58c7ab0169b56bcf1d002f50f3d701656022cdd6eb1d06ed04ceb5a2d13e51e505"}, {0x51, 0x4e00, "06d38faf222da5c07e3635bf08022f635a7946b333a80f114c3ad0da708d7852e24e0ab1319743bf5e1f0f873a023512402f02c525a6c70e56b1e19819a9dcb2d483b0e0e92fc94db292c8e51ec161fe94"}, {0x1000, 0x4e00, "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"}, {0x18, 0x4e00, "609b2fcb11961dbaa761f6ed01949ecffd5dcd286a35a6fa"}, {0x91, 0x4e00, "9f725169a148c529f01356362d7babb366cec77f195786c2bc90df657bd7d4de541e6ffe5f3ec7aee7649ff1e308b5973f0a5fd16488bf60f2fb944acbbcbe36fb3a0e19d0f5ecc4578de4e3fec719f77d4cd016531da2c42b49483969af8b9f0cfd330f6cf66dc6c95ea8aff43c1299cd348b28c75580ea848c7c4d75ec6d991625dd505c49bb0e8486c43d5888c9f9c4"}, {0xc, 0x4e00, "9bdd3a972d0335997e3a90b5"}, {0x1, 0x4e00, "97"}, {0x40, 0x4e00, "5a03de84eaeb8d8c91c96f13a22463fb8ab78a923a7f5f1bbede323c014fbd26021ba6e73822dde6ba52307e5121d25f2e236829f6fd34a7d3cc430caf8785a3"}]}) syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0x174, &(0x7f0000001a80)={[{0x8c, 0x4e00, "e0fd3b912353d53c93d47fe1def48e5186ee750f1d4265f7f692ce13335390e84217ff98b8ba1e53ed78c5eb6e84bd663dc4f3289b791583fec2703ddcd2618bd770ecdc723dbc08ac11957fa36ca5d98137d839f045d58c10e960fcc01a06d4570f71f8315a9c53b909190fd8f076b01309723ba6d83a0f1e4db4915c43011d0d473e5a5a975ced10beddf7"}, {0xdf, 0x4e00, "486df2097c1b71bb06e355d53aa2e331f362c7a03d678a94ebef1ca8dd5db23f3ba7850dc74ddee5859a8ca6f95b239d5912c3b548c943e7fc26532c24435054cf33e7ecc02b1d6d226070bb2f9d4fe0f303ced7bd2ff384369f1d6dfb291a00825003169619fca2f7cff85f86999da6890073c84d5e28968d9aa721dc2c1b8bdafe49ba9d7c1bf1cd467a9d3125f832a20f299481ae51461a85c99d12b2cf4ff57d0eb3b740187d8abb6dac33ab2d72798c9d2ddd6d1b89d2660217220c6da7e4f8a992184dd35f3e51a77b0ff34ccbd7db7f7bbd69d962973f2d58af8aec"}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001c40)={0x3, &(0x7f0000001c00)=[{0x9283, 0xb, 0x3, 0xe}, {0x9, 0x9, 0xf, 0x81}, {0x4, 0xc, 0xa, 0xffffffff}]}) mknod(&(0x7f0000001c80)='\x00', 0x20, 0xfffffffb) accept4(r1, &(0x7f0000001cc0)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000001d40)=0x80, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001d80)) 4.822334788s ago: executing program 4 (id=4029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x44) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='stack :'], 0x11) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, 0x0) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) openat$vimc0(0xffffffffffffff9c, &(0x7f0000002440), 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, &(0x7f0000000300)='\x00\xf9P=*bT\b\x1e%!m\xea?&\xba\x18\xc2)\xa5\bny\xca!\xad\xa8y\x8ajA\xf5\x1f*$\x1a\xfc\x88\x81\x94\'>\x9f\x99\xc40\xa9\x98\xee\x95\xe6Di\xb5\x1f\xa9x\x92<=!CAg. D\xa0E\x06\xcd\xcaF\xa3\x80\xd4\x19\x9f\r\xb3\x00\x00\x00\x00\x00\x00\x00\n\xd9X-\x037\x95\xdc\x89Q sy') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c000200070000f1ffffffff0b000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r6 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x40000000, 0x0) syz_clone(0x180, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c000000060601020000000000000000070000090900020073797a32000000000900020073797a32000000000900020073797a32000000000900020073797a32000000000900030073797a310000000005000100070000000573797a31000000002282a1f51fce4123e4954a5a847df2a1fff77a082e21d8354e21b0e439679c795410145add771d4eae0bf7d5b2ca26d76ff6603f25ddfe90110ec0187364a9dd06d6c8f568f0a6a6ff9ae866a6f3b3"], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x801) 4.514605821s ago: executing program 0 (id=4032): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0xffffffff, 0x7, 0x2, {0x9, @pix={0x5, 0x0, 0x3447504d, 0x9, 0x4aeb, 0x1000, 0x2, 0x3, 0x1, 0x4, 0x0, 0x6}}, 0x4}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x4004000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001a00010000000000000000008114"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$audio(0xffffff9c, &(0x7f0000000000), 0x220000, 0x0) 4.373841536s ago: executing program 0 (id=4033): r0 = open(&(0x7f0000000400)='./bus\x00', 0x52ae84cc1dff85e0, 0x51) fcntl$notify(r0, 0x402, 0x8000003d) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000100)={0x20, 0xfffffffffffffffe}, 0x20) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e22, 0x4, @local, 0x8001}}}, &(0x7f0000000040)=0x84) r6 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) splice(r1, 0x0, r6, 0x0, 0xffffffe1, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000a00), 0x2, 0x20000004) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffd}]}, &(0x7f0000000180)=0xc) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x414, 0x4000000, 0x0, 0xffffff6a, 0x284, 0x0, 0x34c, 0x258, 0x258, 0x34c, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x23c, 0x284, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_virt_wifi\x00', {0x5, 0x1, 0x9, 0x8, 0x40, 0x9, 0x200, 0x6, 0x40, 0x80}, {0x4}}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0x0, 0x1000, 'netbios-ns\x00', {0x8001}}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xff], [0x0, 0x0, 0xff], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x0, 0x9, 0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8, 0x3d6}, {0x24}}}}, 0x470) r10 = socket$inet_sctp(0x2, 0x1, 0x84) r11 = openat$vsock(0xffffff9c, &(0x7f0000000100), 0x412000, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r11, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="38010000000b01020000002001000000000000f0ff0000000000020500010000000000080023030000000100"/56], 0x38}, 0x1, 0x0, 0x0, 0xc800}, 0x4008000) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 4.070277726s ago: executing program 5 (id=4036): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x22020400) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) openat$sw_sync_info(0xffffff9c, 0x0, 0x40, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x14000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 3.425837124s ago: executing program 0 (id=4038): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req={0x5, 0x8, 0x1000, 0x4}, 0x10) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="b5053e", 0x3}, {0x0}, {&(0x7f00000001c0)="c7920734f9f7e668a97bffecd89966dcdf1b719215bd9cb4bf480e0dc975c6e01cbd9ba6b6cc3ee508b5a43783341f24b786ae484384d198f60943e69ecca7d90fc47c01b026f3280d8795cf75c5a7d593297215dbe91576aa2045eb0b2d6b314b02ee1781bd07265986806e290021c3f91406d53b64551504f842ed85a8162cc49205bfa845abedd9cb3f57673cd1df03f247f593cb3204f7872a5aea60e7bff4e471d93e3f63389fd6df0f74b6e64f093e62c5090440a7eb5399c8a8cd0c5c8535c1d2866d6ab8dde66f6a5a21066d93bcc6869ebd978699b9db48d30ef7be18eecd96cb32e47835616a14dadaaa", 0xef}, {&(0x7f0000000000)="574821b9b0dc243081a9876617413fbd92fa489ee1c82a26ffab7a04bbf4fd4c520116b32de9fbcba2f7d4593833", 0x2e}], 0x4) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x20) 2.762625964s ago: executing program 3 (id=4039): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8042, 0x0) fcntl$setlease(r2, 0x400, 0x1) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) quotactl_fd$Q_GETINFO(r3, 0xffffffff80000502, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0x1d, 0xa, 0x3) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000540)=""/199, 0xc7}], 0x1, 0x1a, 0x0) r7 = socket(0x2a, 0x2, 0x0) r8 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x2b94, 0x80, 0x4, 0x3cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r7, 0x0, 0x0}) io_uring_enter(r8, 0x3516, 0xd66e, 0x0, 0x0, 0x0) 2.666441037s ago: executing program 5 (id=4040): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f0000000880)='\x02\x01\x00l\x00x\x80\x00\xdf\x9b\xb4\xc9\xb1\xe2\x00\x00\x00\xb2a\x872\xe0\xeb\xef\xe1y\xfa\x03U\xd0NH\x91\xd0?ujsS\xca\x89\x8a.q|U\xad\xcc\x1a\xf3N\xe2\xdb\xcd\xc9\xba\xca\xbc\x82\xb3S\xec\xf0j\xfc\x9d') (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async) write(r3, &(0x7f00000000c0)="832a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[], 0x0) (async, rerun: 32) r4 = syz_open_dev$ndb(&(0x7f0000000540), 0x0, 0x0) (rerun: 32) ioctl$FS_IOC_SETFLAGS(r4, 0x40046602, &(0x7f00000001c0)=0x1) (async) socket$inet6_udplite(0xa, 0x2, 0x88) 2.346890199s ago: executing program 3 (id=4041): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09840c00", 0x33fe0}], 0x1}, 0x0) 2.166626396s ago: executing program 1 (id=4042): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006240), 0x42, 0x0) r2 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) close_range(r2, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 2.166128327s ago: executing program 3 (id=4043): r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0xa02c2) dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000b40)="b2", 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$video4linux(&(0x7f0000001380), 0x2, 0x501) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000025c4008000"/25, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYRESDEC=r4, @ANYRES32=r5], &(0x7f00000000c0)='syzkaller\x00', 0xd, 0xff7, &(0x7f0000002e00)=""/4087, 0x0, 0xa9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) r6 = getpid() socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x9e721f2789b51274) sched_setscheduler(r6, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) 2.077494294s ago: executing program 0 (id=4044): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={r3, 0x5}, &(0x7f00000001c0)=0x8) 1.316793448s ago: executing program 1 (id=4045): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x301, 0x0, 0x0, 0x0, 0x0, 0x20000000}}, &(0x7f0000000040)='GPL\x00', 0x8, 0xff5, &(0x7f0000001840)=""/4085, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.242315673s ago: executing program 4 (id=4046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x7, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xcc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xb}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xed}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x10001}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c0}, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x8, 0x0, 0x7fffffffffffffff, 0x0, 0xffffffff}, {0x0, 0x0, 0x1}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3507, 0x0, 0x0, 0x0, 0xfffffffe, 0x4000000}}, 0xe8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400084d0fa0f393580e040000000000020000001650a014035cdc4e97a78e76cdaad29f295909d556c4ef24cbd36a30000000000000000000"], 0x14}}, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x3, 0x4006, 0x5, 0x0, [{0x80, 0x9, 0x0, '\x00', 0xd7}, {0x0, 0xff, 0x0, '\x00', 0x2}, {0x4, 0x2, 0x8, '\x00', 0x7}, {0xf4, 0x2, 0xa2, '\x00', 0x5}, {0xd, 0x8, 0x5, '\x00', 0xd}, {0x4, 0x0, 0x20, '\x00', 0x4}, {0x3, 0x65, 0x10, '\x00', 0x4}, {0x5, 0xe8, 0x9, '\x00', 0xfd}, {0x7, 0xd, 0x8, '\x00', 0xb9}, {0xb0, 0x8, 0x6b, '\x00', 0xa}, {0x8, 0x59, 0x5, '\x00', 0x8}, {0x5, 0x4, 0xb, '\x00', 0x2}, {0x81, 0x0, 0x1, '\x00', 0xe8}, {0x4, 0xb, 0x1, '\x00', 0x8}, {0x8, 0xf0, 0x40, '\x00', 0xd}, {0x8, 0x8, 0xf7, '\x00', 0x8}, {0xbb, 0xd, 0x9, '\x00', 0x4}, {0x6, 0x5, 0x81, '\x00', 0x1}, {0x6, 0x3, 0x4, '\x00', 0x8}, {0x4, 0x7, 0x5, '\x00', 0x71}, {0x50, 0x3, 0x4, '\x00', 0x9}, {0x51, 0x0, 0x1, '\x00', 0x6}, {0xc0, 0x6, 0x9}, {0x1, 0x4, 0x2, '\x00', 0xd5}]}}) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) move_pages(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000540)=[0x1, 0x1], &(0x7f0000000540), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb76}, 0x18) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x31, &(0x7f0000001600), 0x4) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x140c, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc8081}, 0x40) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f00000003c0)={{@my=0x0, 0xd}, @any, 0x5, 0xffffffff80000001, 0x9, 0x1, 0x7fffffff, 0x9, 0x5}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.214644307s ago: executing program 1 (id=4047): getxattr(0x0, &(0x7f0000002540)=ANY=[@ANYBLOB='`'], 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r2, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x16, {{0x3, 0x0, 0x4, 0x0, 0xfffffffb, 0x3, {0x0, 0x7fff, 0x6, 0xffff, 0x4, 0x1, 0x1ff, 0x9, 0x0, 0x8000, 0x0, r2, 0xee01, 0xfffffff9, 0x1}}, {0x0, 0x2}}}, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) 1.142050322s ago: executing program 4 (id=4048): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="0301"], 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="fb01"], 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) socket$unix(0x1, 0x6, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000240001032abd700000800000010000000c0031800500ed000000000079a78d5903420d6a3f73abc5efef69b868d4d9f6b21deec613b0df82c48f2e2f872dcbfe9c8b709b74196e5810f02e259ca4847a473e48d78b53347f0a74f1bc9c1aefbd044a029790ad"], 0x20}, 0x1, 0x0, 0x0, 0x8083}, 0x2000c0c0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x20009200}]}}]}, 0x3c}}, 0x20000000) 1.034467112s ago: executing program 0 (id=4049): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000340), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902240001"], 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x20000000, 0x0, 0x5}, 0x2}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x20000000, 0x0, 0x5}, 0x2}) syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x5423, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x5d, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES64=r3, @ANYRES32=0x0, @ANYRES32=0x0], 0x40}, 0x1, 0x0, 0x0, 0x20008005}, 0x82) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x5d, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES64=r3, @ANYRES32=0x0, @ANYRES32=0x0], 0x40}, 0x1, 0x0, 0x0, 0x20008005}, 0x82) socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @private=0xa010100}}) (async) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @private=0xa010100}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @local}}, 0x20000005, 0x12}, 0x9c) syz_io_uring_setup(0x61bc, &(0x7f0000000840)={0x0, 0xf48d, 0x10100, 0x0, 0x10000004}, &(0x7f0000000900), &(0x7f0000000140)) 1.034245492s ago: executing program 1 (id=4050): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_virt_wifi\x00', 0x0}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r3 = openat$autofs(0xffffff9c, &(0x7f0000000180), 0x109200, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {0x1, 0x1}, 0x1, 0xa0, 0x0, 0x0, 0xa7c0, 0x6, 0x0, 0x8497811, 0x1, 0x0}) bind$packet(r0, &(0x7f00000002c0)={0x11, 0x19, r1, 0x1, 0x8, 0x6, @random="5e2c68b8907d"}, 0x14) r4 = openat$full(0xffffff9c, &(0x7f0000000000), 0x2c0081, 0x0) r5 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f00000000c0)=r5) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) 878.140167ms ago: executing program 1 (id=4051): r0 = semget$private(0x0, 0x1, 0x206) io_setup(0x6, &(0x7f0000001380)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = syz_io_uring_setup(0x507c, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x3, 0xbfdffffc, 0x0, r2}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20, 0x400}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) semctl$GETPID(r0, 0x684c567683234986, 0xb, 0x0) 869.086572ms ago: executing program 3 (id=4052): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="48000000100005002bbd70000000020000000000", @ANYRES32=0x0, @ANYBLOB="a021040001000500142023006970008076746930000000000000000014001680040001800c0072259c554ac60900010021fc7891b660bf1f1a7fb042b96f7227fa78a76f9278d2d00caa19430c77dc12d72135ff63f8"], 0x48}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) ioprio_set$pid(0x1, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_usb_connect(0x3, 0x70, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0x4, 0xa1, 0x32, 0x10, 0xc45, 0x60ec, 0x2251, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x1, 0x87, 0x7f, 0x30, 0x0, [{{0x9, 0x4, 0xaa, 0x80, 0x2, 0xbd, 0x75, 0x51, 0x4, [@hid_hid={0x9, 0x21, 0x91, 0xfd, 0x1, {0x22, 0x3}}, @uac_as={[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x9, 0xffff, 0x2, "f2e195a8848b90"}, @as_header={0x7, 0x24, 0x1, 0x2c, 0x2, 0x1001}, @as_header={0x7, 0x24, 0x1, 0xec, 0x7, 0x1001}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x2, 0x2, 0x2, "af39b9fd"}]}], [{{0x9, 0x5, 0x7, 0x2, 0x20, 0x6, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x40}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x4a, 0x9, 0x7f}}]}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x230, 0x8, 0xa3, 0x15, 0x10, 0x2}, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="050f0c0001071002026140006153bb6fbfb17ee15916a0635a6b52e50b423d1cb48545e7a7bca6de0ebf302eb8a5f15ebcda7b5d10f36900f60e6a020042acb0bf44ed8bd028469934aaaa627cdf0873327f98141290381622e3ea209ca4723134d6c1a133bebf1e89c96779de37cefdd835d36629a2581c3870bd405881878f182ea38641ca3909b138857934691709efcf56afaf8316810b53a7cc"], 0x2, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x82c}}, {0xc0, &(0x7f00000007c0)=@string={0xc0, 0x3, "028669ab441e92feac304ea5b20c7695928e3bf553d594b65527fbc71e507157c1dea0319677acced2b6f8a88e14b43ed1ec586a0de2df0e5aa6c6d5469c00c8d7a41dbeeb529aa8c3f21886cc9ac7df29aae591efd33112dad677fe47fd71d1c19d9aa86fa42102886f247f42246f5b448bed08098e8e692b50185b14ad93fcf89bea277c43383c0c322c69998fadb282ffa3558019059f7e7aa46dfe80e522c63782356ac5f6d0e121b66e480d00e0b309dea6510e4956c46ad022b204"}}]}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400420, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r2) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa4, r6, 0x200, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5b4d}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004040}, 0x804) r7 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000008c0)="cedeb0c39666780cbf03c60a8b9895783d99ba249ecfa8df3f120cbcdde99ba618c1fb12d4be283176188a88bb49262085e3c43c61d3b5e06d743740bdc40273df7dcc590bb89ac5fce41a5488e3494163495ca8096690d595c60340624d0c40cf647574fd150d15f1438a74508e6617f554f8ccc5d78dfbec944ab08d06c0853b4782f07c43012c5374", 0x8a}, {&(0x7f0000000300)="49277464adbc8fb9f65ae9f9213573bce2a3936a35db0a045d948ca7691ab8eb8fd06f7db520ac59146ca166200ad0a6c33549feb511b391048e80ba321eb4f5fca7a2fa2eb23940f48c190d2a4d4027600e281b2bb87d09128b681098721d46a932f2bd28a25f1e613edce8cb2e19f0f03a31ca61e9200bac92b905f435e5c3db2d5bc8fc6737e812f11f9fa519bd144a82e9e775ef9a31848534918b4d5f6208e0ccdb27c3e5907a68eb1bd4", 0xad}, {&(0x7f0000000040)="66e394d4c82ac099f55aee738819028380deffafe8bed5815f424fd85f73b521d4c39fd4e143080bd110a420863cbc246044dc320db01dfbbd", 0x39}], 0x3}}], 0x1, 0x20004800) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000002d00090027bd70000000000004000000040012"], 0x18}}, 0x4084) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="1201100100000010ec13060000000000009cfe2ab307010902190001000000ed090400040403000100092100000001220300090581034000070000"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000003c0)={0x18, &(0x7f0000000000)={0x0, 0x11, 0x3, {0x3, 0xf, '2'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001020000102505a1a463000102030109026100020106300d0904000001020d00000a24060001335f2fc78c05240004000d240f010d000000080000000906241a00003809058103ff03ff09060904010000020d00000904010102020d0000090582020002050405090503021000348006"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0xffff, 0x0, 0x3, 0x6}, {0x81, 0x5, 0x0, 0x80}]}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xc8, 0x8}}]}]}]}, 0x48}}, 0x24040800) 350.493538ms ago: executing program 1 (id=4053): r0 = open(&(0x7f0000000400)='./bus\x00', 0x52ae84cc1dff85e0, 0x51) fcntl$notify(r0, 0x402, 0x8000003d) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x4) open_tree(r0, 0x0, 0x88001) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r1, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x8}}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) unshare(0x68060200) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pipe2$9p(&(0x7f00000001c0), 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup(r4) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x300, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$vim2m(0x0, 0x0, 0x2) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r6) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x1e) 0s ago: executing program 0 (id=4054): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async, rerun: 64) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001f40)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) (rerun: 64) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000640)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="b57debfa943807000000b638035c835be0cf90a8e049"], 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)) (async) r3 = socket$pptp(0x18, 0x1, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) unshare(0x20000400) (async) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0xffffffffffffff7e) syz_fuse_handle_req(r1, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150fdf0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcb05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc28afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f2724f5024a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4a7e642fdc56d11c2ec87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b09ffd42a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3da452647e342e2591be4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a00", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xa, {0x3, 0x0, 0x100000000000000, 0x7fd, 0x0, 0x0, {0x0, 0x3, 0x2, 0x0, 0x0, 0x46, 0x1, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r1, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(r0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grouP_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 7881][T12793] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 894.310797][T12793] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 894.335809][T12793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.365703][T18001] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 894.400952][T12793] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 894.652057][T12793] usb 5-1: USB disconnect, device number 44 [ 894.746314][ T5883] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 894.971828][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 895.078441][ T5883] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 895.092000][ T5883] usb 4-1: config 0 has no interface number 0 [ 895.106717][T12793] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 895.167409][ T5883] usb 4-1: too many endpoints for config 0 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 895.192014][ T5883] usb 4-1: config 0 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 895.256714][T12793] usb 5-1: Using ep0 maxpacket: 32 [ 895.266842][T12793] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 895.281236][T12793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.292744][T12793] usb 5-1: config 0 descriptor?? [ 895.315884][T12793] gspca_main: sunplus-2.14.0 probing 041e:400b [ 895.767890][ T5883] usb 4-1: config 0 interface 1 has no altsetting 0 [ 895.777460][ T5883] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 895.788247][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.796531][ T5883] usb 4-1: Product: syz [ 895.800736][ T5883] usb 4-1: Manufacturer: syz [ 895.805392][ T5883] usb 4-1: SerialNumber: syz [ 895.816214][ T5883] usb 4-1: config 0 descriptor?? [ 895.826926][T16315] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 895.853501][ T5883] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 896.020482][T16315] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 896.037705][T16315] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 896.054942][T16315] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 896.064980][T16315] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 896.076773][T16315] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 896.091824][T16315] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 896.101753][T16315] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 896.110704][T16315] usb 6-1: Product: syz [ 896.115035][T16315] usb 6-1: Manufacturer: syz [ 896.130368][T16315] cdc_wdm 6-1:1.0: skipping garbage [ 896.135634][T16315] cdc_wdm 6-1:1.0: skipping garbage [ 896.144716][T16315] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 896.150935][T16315] cdc_wdm 6-1:1.0: Unknown control protocol [ 896.186362][T16314] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 896.217566][T12793] gspca_sunplus: reg_r err -110 [ 896.222543][T12793] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 896.349037][T16314] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 896.357605][T16314] usb 1-1: config 0 has no interface number 0 [ 896.363904][T16314] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 896.375265][T16314] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 896.389901][T16314] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 896.399119][T16314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.407246][T16314] usb 1-1: Product: syz [ 896.411423][T16314] usb 1-1: Manufacturer: syz [ 896.416547][T16314] usb 1-1: SerialNumber: syz [ 896.424894][T16314] usb 1-1: config 0 descriptor?? [ 896.430868][T18037] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 896.442886][T16314] yurex 1-1:0.50: USB YUREX device now attached to Yurex #1 [ 896.585299][ C0] cdc_wdm 6-1:1.0: Unexpected error -71 [ 896.590952][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 896.597587][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 896.605238][T15697] usb 6-1: USB disconnect, device number 61 [ 896.644901][T16314] usb 1-1: USB disconnect, device number 24 [ 896.655756][T16314] yurex 1-1:0.50: USB YUREX #1 now disconnected [ 896.943881][T16314] usb 5-1: USB disconnect, device number 45 [ 897.091281][T18045] FAULT_INJECTION: forcing a failure. [ 897.091281][T18045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 897.105368][T18045] CPU: 1 UID: 0 PID: 18045 Comm: syz.4.3599 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 897.105395][T18045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 897.105408][T18045] Call Trace: [ 897.105419][T18045] [ 897.105430][T18045] dump_stack_lvl+0x189/0x250 [ 897.105462][T18045] ? __lock_acquire+0xaac/0xd20 [ 897.105492][T18045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 897.105522][T18045] ? __pfx__printk+0x10/0x10 [ 897.105542][T18045] ? __might_fault+0xb0/0x130 [ 897.105591][T18045] should_fail_ex+0x414/0x560 [ 897.105629][T18045] _copy_to_iter+0x1db/0x15a0 [ 897.105660][T18045] ? chacha_block_generic+0xad/0xda0 [ 897.105686][T18045] ? __pfx__copy_to_iter+0x10/0x10 [ 897.105769][T18045] get_random_bytes_user+0x1a0/0x380 [ 897.105800][T18045] ? __pfx_get_random_bytes_user+0x10/0x10 [ 897.105833][T18045] ? __pfx_vfs_write+0x10/0x10 [ 897.105867][T18045] ? import_ubuf+0xfb/0x1d0 [ 897.105895][T18045] __ia32_sys_getrandom+0x16d/0x260 [ 897.105925][T18045] ? __pfx___ia32_sys_getrandom+0x10/0x10 [ 897.105948][T18045] ? ksys_write+0x1e1/0x250 [ 897.105974][T18045] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 897.105997][T18045] ? lockdep_hardirqs_on+0x9c/0x150 [ 897.106018][T18045] __do_fast_syscall_32+0xb4/0x110 [ 897.106040][T18045] ? lockdep_hardirqs_on+0x9c/0x150 [ 897.106065][T18045] do_fast_syscall_32+0x34/0x80 [ 897.106091][T18045] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 897.106115][T18045] RIP: 0023:0xf707e539 [ 897.106132][T18045] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 897.106148][T18045] RSP: 002b:00000000f506e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000163 [ 897.106169][T18045] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 00000000fffffdde [ 897.106184][T18045] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 897.106195][T18045] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 897.106206][T18045] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 897.106217][T18045] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 897.106245][T18045] [ 897.323515][T18007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.332747][T18007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.360241][T18007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.386805][T18007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.553878][ T5883] gspca_spca1528: reg_w err -110 [ 897.571938][ T5883] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 897.650269][ T5883] usb 4-1: USB disconnect, device number 27 [ 897.927879][T15697] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 898.110477][T18059] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3603'. [ 898.133108][T18059] dummy0: entered promiscuous mode [ 898.145562][T18059] dummy0: left promiscuous mode [ 898.286482][T16314] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 898.317370][T15697] usb 5-1: unable to get BOS descriptor or descriptor too short [ 898.329404][T15697] usb 5-1: no configurations [ 898.344460][T15697] usb 5-1: can't read configurations, error -22 [ 898.468189][T16314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.484571][T16314] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 898.504501][T16314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.581958][T16314] usb 1-1: config 0 descriptor?? [ 898.843634][T16314] usbhid 1-1:0.0: can't add hid device: -71 [ 898.872395][T16314] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 898.966676][T16314] usb 1-1: USB disconnect, device number 25 [ 899.352266][T18087] FAULT_INJECTION: forcing a failure. [ 899.352266][T18087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 899.446607][T18087] CPU: 1 UID: 0 PID: 18087 Comm: syz.4.3615 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 899.446637][T18087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 899.446651][T18087] Call Trace: [ 899.446660][T18087] [ 899.446669][T18087] dump_stack_lvl+0x189/0x250 [ 899.446703][T18087] ? __lock_acquire+0xaac/0xd20 [ 899.446734][T18087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 899.446763][T18087] ? __pfx__printk+0x10/0x10 [ 899.446785][T18087] ? __might_fault+0xb0/0x130 [ 899.446828][T18087] should_fail_ex+0x414/0x560 [ 899.446864][T18087] _copy_to_iter+0x3f5/0x15a0 [ 899.446900][T18087] ? __pfx__copy_to_iter+0x10/0x10 [ 899.446941][T18087] get_random_bytes_user+0x1a0/0x380 [ 899.446972][T18087] ? __pfx_get_random_bytes_user+0x10/0x10 [ 899.447016][T18087] ? __pfx_aa_file_perm+0x10/0x10 [ 899.447060][T18087] do_iter_readv_writev+0x56b/0x7f0 [ 899.447089][T18087] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 899.447118][T18087] ? bpf_lsm_file_permission+0x9/0x20 [ 899.447143][T18087] ? security_file_permission+0x75/0x290 [ 899.447174][T18087] ? rw_verify_area+0x258/0x650 [ 899.447199][T18087] vfs_readv+0x257/0x840 [ 899.447232][T18087] ? __pfx_vfs_readv+0x10/0x10 [ 899.447274][T18087] ? __fget_files+0x2a/0x420 [ 899.447305][T18087] ? __fget_files+0x3a0/0x420 [ 899.447329][T18087] ? __fget_files+0x2a/0x420 [ 899.447361][T18087] do_readv+0x14d/0x2d0 [ 899.447391][T18087] ? __pfx_do_readv+0x10/0x10 [ 899.447420][T18087] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 899.447443][T18087] ? lockdep_hardirqs_on+0x9c/0x150 [ 899.447464][T18087] __do_fast_syscall_32+0xb4/0x110 [ 899.447486][T18087] ? lockdep_hardirqs_on+0x9c/0x150 [ 899.447509][T18087] do_fast_syscall_32+0x34/0x80 [ 899.447532][T18087] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 899.447557][T18087] RIP: 0023:0xf707e539 [ 899.447574][T18087] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 899.447592][T18087] RSP: 002b:00000000f506e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000091 [ 899.447613][T18087] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001400 [ 899.447628][T18087] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 899.447640][T18087] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 899.447651][T18087] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 899.447663][T18087] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 899.447690][T18087] [ 899.939303][ T5142] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 899.949113][ T5142] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 899.960867][ T5142] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 899.971275][ T5142] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 899.981296][ T5142] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 899.995969][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 900.003640][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 900.011413][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 900.020784][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 900.028530][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 900.128805][ T30] audit: type=1326 audit(1745830175.906:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.1.3618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 900.253258][ T30] audit: type=1326 audit(1745830175.906:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.1.3618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 900.276630][ C0] vkms_vblank_simulate: vblank timer overrun [ 900.348986][ T30] audit: type=1326 audit(1745830176.006:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.1.3618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e558 code=0x7ffc0000 [ 900.400111][ T30] audit: type=1326 audit(1745830176.006:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.1.3618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e558 code=0x7ffc0000 [ 900.450433][ T30] audit: type=1326 audit(1745830176.006:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.1.3618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e558 code=0x7ffc0000 [ 900.576227][ T30] audit: type=1326 audit(1745830176.006:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.1.3618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e558 code=0x7ffc0000 [ 900.659075][ T30] audit: type=1326 audit(1745830176.006:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.1.3618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e558 code=0x7ffc0000 [ 900.836567][ T30] audit: type=1326 audit(1745830176.006:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.1.3618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e558 code=0x7ffc0000 [ 900.858759][ C0] vkms_vblank_simulate: vblank timer overrun [ 900.973673][ T30] audit: type=1326 audit(1745830176.006:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.1.3618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e558 code=0x7ffc0000 [ 900.998685][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.156217][ T30] audit: type=1326 audit(1745830176.006:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.1.3618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e558 code=0x7ffc0000 [ 901.179046][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.381097][T18100] chnl_net:caif_netlink_parms(): no params data found [ 901.450940][T18110] netlink: 'syz.5.3622': attribute type 11 has an invalid length. [ 902.106707][ T5142] Bluetooth: hci3: command tx timeout [ 902.431802][T18100] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.486713][T18100] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.494145][T18100] bridge_slave_0: entered allmulticast mode [ 902.506060][T18100] bridge_slave_0: entered promiscuous mode [ 902.514889][T18100] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.524756][T18100] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.533599][T18100] bridge_slave_1: entered allmulticast mode [ 902.542058][T18100] bridge_slave_1: entered promiscuous mode [ 902.624590][T18100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.644986][T18100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.819468][T18100] team0: Port device team_slave_0 added [ 902.848904][T18100] team0: Port device team_slave_1 added [ 902.982672][T18100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.010804][T18100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.047506][T18100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.065394][T18100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.081426][T18100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.121805][T18129] FAULT_INJECTION: forcing a failure. [ 903.121805][T18129] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 903.137645][T18100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.162318][T18129] CPU: 0 UID: 0 PID: 18129 Comm: syz.1.3626 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 903.162347][T18129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 903.162361][T18129] Call Trace: [ 903.162370][T18129] [ 903.162380][T18129] dump_stack_lvl+0x189/0x250 [ 903.162419][T18129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 903.162449][T18129] ? __pfx__printk+0x10/0x10 [ 903.162472][T18129] ? fs_reclaim_acquire+0x7d/0x100 [ 903.162511][T18129] should_fail_ex+0x414/0x560 [ 903.162548][T18129] prepare_alloc_pages+0x213/0x610 [ 903.162586][T18129] __alloc_frozen_pages_noprof+0x123/0x370 [ 903.162622][T18129] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 903.162672][T18129] alloc_pages_mpol+0x232/0x4a0 [ 903.162706][T18129] alloc_pages_noprof+0xa9/0x190 [ 903.162734][T18129] folio_alloc_noprof+0x1e/0x30 [ 903.162760][T18129] filemap_alloc_folio_noprof+0xdf/0x470 [ 903.162790][T18129] ? filemap_get_entry+0xad/0x2f0 [ 903.162818][T18129] ? filemap_get_entry+0xad/0x2f0 [ 903.162857][T18129] ? filemap_get_entry+0x28f/0x2f0 [ 903.162887][T18129] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 903.162922][T18129] ? folio_add_lru+0x1b3/0x3d0 [ 903.162945][T18129] ? filemap_add_folio+0x1af/0x270 [ 903.162979][T18129] __filemap_get_folio+0x3f2/0xaf0 [ 903.163020][T18129] aio_setup_ring+0x3bc/0xd50 [ 903.163059][T18129] ? __pfx_aio_setup_ring+0x10/0x10 [ 903.163094][T18129] ioctx_alloc+0x32f/0x7a0 [ 903.163126][T18129] __ia32_compat_sys_io_setup+0xc0/0x1e0 [ 903.163153][T18129] __do_fast_syscall_32+0xb4/0x110 [ 903.163184][T18129] ? lockdep_hardirqs_on+0x9c/0x150 [ 903.163209][T18129] do_fast_syscall_32+0x34/0x80 [ 903.163232][T18129] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 903.163257][T18129] RIP: 0023:0xf706e539 [ 903.163274][T18129] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 903.163291][T18129] RSP: 002b:00000000f505e55c EFLAGS: 00000206 ORIG_RAX: 00000000000000f5 [ 903.163311][T18129] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 0000000080000180 [ 903.163331][T18129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 903.163343][T18129] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 903.163355][T18129] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 903.163367][T18129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 903.163397][T18129] [ 903.409474][ C0] vkms_vblank_simulate: vblank timer overrun [ 903.832693][T18100] hsr_slave_0: entered promiscuous mode [ 903.888130][T18100] hsr_slave_1: entered promiscuous mode [ 903.917447][T18100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 903.936065][T18100] Cannot create hsr debugfs directory [ 904.085326][T18144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3630'. [ 904.106393][T18142] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3629'. [ 904.135059][T18144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3630'. [ 904.186473][ T5142] Bluetooth: hci3: command tx timeout [ 904.206245][T15695] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 904.259666][T18147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 904.376358][T15695] usb 5-1: Using ep0 maxpacket: 8 [ 904.385418][T15695] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 904.401312][T15695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.417206][T15695] usb 5-1: config 0 descriptor?? [ 904.497336][ T5883] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 904.568445][T18100] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.638617][T15695] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 904.654247][T15695] asix 5-1:0.0: probe with driver asix failed with error -32 [ 904.691260][ T5883] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.716402][ T5883] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 904.725497][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.754211][T18100] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.766543][ T5883] usb 6-1: config 0 descriptor?? [ 904.789163][ T5883] pwc: Askey VC010 type 2 USB webcam detected. [ 904.888290][T18100] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.041390][T18100] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.222794][ T5883] pwc: recv_control_msg error -32 req 02 val 2b00 [ 905.249165][ T5883] pwc: recv_control_msg error -32 req 02 val 2700 [ 905.277666][ T5883] pwc: recv_control_msg error -32 req 02 val 2c00 [ 905.297061][ T5883] pwc: recv_control_msg error -32 req 04 val 1000 [ 905.326647][ T5883] pwc: recv_control_msg error -32 req 04 val 1300 [ 905.334531][ T5883] pwc: recv_control_msg error -32 req 04 val 1400 [ 905.472447][T18100] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 905.614852][T18100] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 905.642302][T18100] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 905.705006][T18100] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 905.860638][ T5883] pwc: recv_control_msg error -71 req 02 val 2100 [ 905.888943][ T5883] pwc: recv_control_msg error -71 req 04 val 1500 [ 905.903940][ T5883] pwc: recv_control_msg error -71 req 02 val 2500 [ 905.922844][ T5883] pwc: recv_control_msg error -71 req 02 val 2400 [ 905.932077][ T5883] pwc: recv_control_msg error -71 req 02 val 2600 [ 905.946190][ T5883] pwc: recv_control_msg error -71 req 02 val 2900 [ 905.963532][ T5883] pwc: recv_control_msg error -71 req 02 val 2800 [ 905.980060][ T5883] pwc: recv_control_msg error -71 req 04 val 1100 [ 905.997919][ T5883] pwc: recv_control_msg error -71 req 04 val 1200 [ 906.021904][ T5883] pwc: Registered as video103. [ 906.090006][ T5883] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input47 [ 906.303698][ T5142] Bluetooth: hci3: command tx timeout [ 906.313511][ T5883] usb 6-1: USB disconnect, device number 62 [ 906.514176][T18100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.625353][T18100] 8021q: adding VLAN 0 to HW filter on device team0 [ 906.679463][ T7957] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.686689][ T7957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 906.795998][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.803360][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.527010][T15697] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 907.541627][T18100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.686264][T15697] usb 1-1: Using ep0 maxpacket: 32 [ 907.687058][T18100] veth0_vlan: entered promiscuous mode [ 907.711198][T15697] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 907.737456][T16315] usb 5-1: USB disconnect, device number 48 [ 907.764373][T15697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.781258][T18100] veth1_vlan: entered promiscuous mode [ 907.822620][T15697] usb 1-1: config 0 descriptor?? [ 907.917181][T18100] veth0_macvtap: entered promiscuous mode [ 907.939487][T18100] veth1_macvtap: entered promiscuous mode [ 907.967824][T18100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.981256][T18100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.002369][T18100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.019607][T18100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.033305][T18100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.037229][T15697] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 908.052022][T18100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.065299][T18100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 908.094662][T15697] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 908.095272][T18100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 908.122504][T18100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.134216][T18100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 908.148587][T18100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.161054][T18100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 908.172570][T18100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.176615][T15697] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 908.187169][T18100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 908.220600][T15697] usb 1-1: media controller created [ 908.223191][T18100] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.240025][T16315] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 908.258629][T18183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.269387][T18183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.278502][T18100] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.293662][T15697] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 908.295695][T18183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.310604][T18100] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.326221][T18100] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.340681][T18183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.352683][ T5142] Bluetooth: hci3: command tx timeout [ 908.401965][T16315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.431966][T16315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.444494][T15697] az6027: usb out operation failed. (-71) [ 908.454209][T16315] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 908.479104][T16315] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 908.492980][T16315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.493318][T15697] az6027: usb out operation failed. (-71) [ 908.510205][T16315] usb 5-1: config 0 descriptor?? [ 908.569655][T15697] stb0899_attach: Driver disabled by Kconfig [ 908.571002][T18192] IPv6: Can't replace route, no match found [ 908.575718][T15697] az6027: no front-end attached [ 908.575718][T15697] [ 908.589838][T15697] az6027: usb out operation failed. (-71) [ 908.624733][T15697] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 908.666442][T15697] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input48 [ 908.695169][T17715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.728450][T15697] dvb-usb: schedule remote query interval to 400 msecs. [ 908.744690][T17715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.754202][T15697] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 908.790233][T15697] usb 1-1: USB disconnect, device number 26 [ 908.836183][ T2978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.845425][ T2978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.924416][T16315] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 908.925095][T15697] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 908.953169][T16315] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 908.984345][T16315] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 909.113673][T18199] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20003 [ 909.219843][T18187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.229295][T18187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.282089][T12793] usb 5-1: USB disconnect, device number 49 [ 909.296584][T15697] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 909.328880][ T5884] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 909.456522][T15697] usb 1-1: Using ep0 maxpacket: 16 [ 909.490264][T15697] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 909.506549][T15697] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 909.526374][T15697] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 909.541333][ T5884] usb 4-1: config 7 has an invalid interface number: 101 but max is 0 [ 909.554582][T15697] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 909.573921][ T5884] usb 4-1: config 7 has no interface number 0 [ 909.581087][T15697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.599682][T15697] usb 1-1: Product: syz [ 909.603962][T15697] usb 1-1: Manufacturer: syz [ 909.617184][ T5884] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 909.636637][T15697] usb 1-1: SerialNumber: syz [ 909.645147][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.655033][ T5884] usb 4-1: Product: syz [ 909.686151][ T5884] usb 4-1: Manufacturer: syz [ 909.690805][ T5884] usb 4-1: SerialNumber: syz [ 910.151434][T18194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.197714][T18194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.234485][T15697] usb 1-1: 0:2 : does not exist [ 910.293069][T15697] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 910.342113][T15697] usb 1-1: USB disconnect, device number 27 [ 910.581888][T18225] program syz.4.3652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 910.776530][T18231] FAULT_INJECTION: forcing a failure. [ 910.776530][T18231] name failslab, interval 1, probability 0, space 0, times 0 [ 910.806297][T18231] CPU: 0 UID: 0 PID: 18231 Comm: syz.4.3655 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 910.806326][T18231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 910.806340][T18231] Call Trace: [ 910.806349][T18231] [ 910.806357][T18231] dump_stack_lvl+0x189/0x250 [ 910.806397][T18231] ? __pfx_dump_stack_lvl+0x10/0x10 [ 910.806426][T18231] ? __pfx__printk+0x10/0x10 [ 910.806453][T18231] ? __pfx___might_resched+0x10/0x10 [ 910.806483][T18231] ? fs_reclaim_acquire+0x7d/0x100 [ 910.806518][T18231] should_fail_ex+0x414/0x560 [ 910.806555][T18231] should_failslab+0xa8/0x100 [ 910.806584][T18231] __kmalloc_noprof+0xcb/0x4f0 [ 910.806607][T18231] ? kfree+0x4d/0x440 [ 910.806627][T18231] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 910.806657][T18231] tomoyo_realpath_from_path+0xe3/0x5d0 [ 910.806692][T18231] ? tomoyo_domain+0xda/0x130 [ 910.806723][T18231] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 910.806754][T18231] tomoyo_path_number_perm+0x1e8/0x5a0 [ 910.806789][T18231] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 910.806865][T18231] ? __fget_files+0x2a/0x420 [ 910.806895][T18231] ? __fget_files+0x3a0/0x420 [ 910.806920][T18231] ? __fget_files+0x2a/0x420 [ 910.806949][T18231] security_file_ioctl_compat+0xcb/0x2d0 [ 910.806983][T18231] __ia32_compat_sys_ioctl+0x128/0x840 [ 910.807008][T18231] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 910.807031][T18231] ? __fget_files+0x3a0/0x420 [ 910.807063][T18231] ? fput+0xa0/0xd0 [ 910.807092][T18231] ? ksys_write+0x1f0/0x250 [ 910.807123][T18231] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 910.807146][T18231] ? lockdep_hardirqs_on+0x9c/0x150 [ 910.807169][T18231] __do_fast_syscall_32+0xb4/0x110 [ 910.807190][T18231] ? lockdep_hardirqs_on+0x9c/0x150 [ 910.807215][T18231] do_fast_syscall_32+0x34/0x80 [ 910.807237][T18231] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 910.807262][T18231] RIP: 0023:0xf707e539 [ 910.807279][T18231] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 910.807297][T18231] RSP: 002b:00000000f506e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 910.807318][T18231] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004008b100 [ 910.807333][T18231] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 910.807345][T18231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 910.807358][T18231] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 910.807370][T18231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 910.807400][T18231] [ 910.807433][T18231] ERROR: Out of memory at tomoyo_realpath_from_path. [ 911.370922][T18237] sit0: entered promiscuous mode [ 911.385917][T18237] sit0: entered allmulticast mode [ 911.516295][ T5883] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 911.686493][ T5883] usb 6-1: Using ep0 maxpacket: 8 [ 911.713420][ T5883] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 911.736971][ T5883] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 911.783538][ T5883] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 911.828388][ T5883] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 911.864523][ T5883] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 911.903622][ T5883] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 911.922619][ T5883] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 911.955268][ T5883] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 911.990806][ T5883] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 912.017420][ T5883] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 912.045345][ T5883] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 912.055720][ T5883] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 912.111716][ T5884] as10x_usb: device has been detected [ 912.119889][ T5884] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 912.131052][ T5883] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 912.175179][ T5883] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 912.203962][ T5884] usb 4-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 912.218176][ T5883] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 912.250005][ T5884] as10x_usb: error during firmware upload part1 [ 912.261905][ T5883] usb 6-1: string descriptor 0 read error: -22 [ 912.269022][ T5883] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 912.279546][ T5884] Registered device Elgato EyeTV DTT Deluxe [ 912.289281][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.311383][ T5884] usb 4-1: USB disconnect, device number 28 [ 912.437943][ T5883] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 912.447161][ T5884] Unregistered device Elgato EyeTV DTT Deluxe [ 912.467754][ T5884] as10x_usb: device has been disconnected [ 912.710750][T18238] syzkaller1: entered promiscuous mode [ 912.731776][T18238] syzkaller1: entered allmulticast mode [ 912.761159][T18258] program syz.5.3657 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 912.824867][T18238] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 348 [ 912.834942][T18258] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 913.171709][T18262] netlink: zone id is out of range [ 913.180936][T18262] netlink: zone id is out of range [ 913.208368][T18262] netlink: zone id is out of range [ 913.229171][T18262] netlink: zone id is out of range [ 913.249706][T18262] netlink: zone id is out of range [ 913.265946][T18262] netlink: set zone limit has 8 unknown bytes [ 913.707066][ T5884] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 913.888932][ T5884] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 913.911862][ T5884] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 913.936220][ T5884] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 913.965731][ T5884] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 913.998465][ T5884] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 914.033776][ T5884] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 914.053399][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 914.071567][ T5884] usb 1-1: Product: syz [ 914.082227][ T5884] usb 1-1: Manufacturer: syz [ 914.111466][ T5884] cdc_wdm 1-1:1.0: skipping garbage [ 914.122482][ T5884] cdc_wdm 1-1:1.0: skipping garbage [ 914.163176][ T5884] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 914.175787][ T5884] cdc_wdm 1-1:1.0: Unknown control protocol [ 914.189718][ T5891] usb 6-1: USB disconnect, device number 63 [ 914.575223][ C0] cdc_wdm 1-1:1.0: Unexpected error -71 [ 914.578204][T12793] usb 1-1: USB disconnect, device number 28 [ 914.580910][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 914.593407][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 914.599474][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 916.632209][T18293] loop9: detected capacity change from 0 to 4 [ 916.713070][T18293] Dev loop9: unable to read RDB block 4 [ 916.749578][T18293] loop9: unable to read partition table [ 916.776371][T18293] loop9: partition table beyond EOD, truncated [ 916.807957][T18293] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿÿ ) failed (rc=-5) [ 917.249251][T18305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3678'. [ 917.556538][ T5884] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 917.738233][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 917.764854][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.798360][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 917.852608][ T5884] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 917.852643][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.873424][ T5884] usb 1-1: config 0 descriptor?? [ 917.899401][T18319] syzkaller1: entered promiscuous mode [ 917.899428][T18319] syzkaller1: entered allmulticast mode [ 917.940150][T18319] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 918.297693][ T5884] appleir 0003:05AC:8241.001E: unknown main item tag 0x0 [ 918.297738][ T5884] appleir 0003:05AC:8241.001E: unknown main item tag 0x0 [ 918.297767][ T5884] appleir 0003:05AC:8241.001E: unknown main item tag 0x0 [ 918.297794][ T5884] appleir 0003:05AC:8241.001E: unknown main item tag 0x0 [ 918.297821][ T5884] appleir 0003:05AC:8241.001E: unknown main item tag 0x0 [ 918.298868][ T5884] appleir 0003:05AC:8241.001E: No inputs registered, leaving [ 918.326717][ T5884] appleir 0003:05AC:8241.001E: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 918.709849][ T5884] usb 1-1: USB disconnect, device number 29 [ 919.463579][T18341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3688'. [ 919.684926][T18349] netlink: 'syz.4.3691': attribute type 10 has an invalid length. [ 919.700833][T18349] batman_adv: batadv0: Adding interface: wlan0 [ 919.711187][T18349] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.746286][T18349] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 919.806776][ T5891] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 919.955486][T18356] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 919.976310][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 919.984535][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.993878][T18355] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.995888][ T5891] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 920.002583][T18355] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.038670][ T5891] usb 4-1: New USB device found, idVendor=201d, idProduct=c150, bcdDevice=ce.6f [ 920.050277][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.063138][ T5891] usb 4-1: Product: syz [ 920.103860][ T5891] usb 4-1: Manufacturer: syz [ 920.119269][ T5891] usb 4-1: SerialNumber: syz [ 920.129443][ T5891] usb 4-1: config 0 descriptor?? [ 920.346984][ T5891] usb 4-1: USB disconnect, device number 29 [ 920.443589][T18360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3695'. [ 920.552774][T18362] ptrace attach of ""[18363] was attempted by "./syz-executor exec"[18362] [ 920.665049][T18355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 920.731384][T18355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 921.016217][T12793] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 921.025599][T18355] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.061906][T18355] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.112228][T18355] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.126044][T18355] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.168486][T12793] usb 5-1: config 0 has an invalid interface number: 227 but max is 0 [ 921.184901][T12793] usb 5-1: config 0 has no interface number 0 [ 921.196478][T12793] usb 5-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=ab.24 [ 921.246254][T12793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.265713][T12793] usb 5-1: config 0 descriptor?? [ 921.452386][T18373] delete_channel: no stack [ 921.501570][T18370] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3696'. [ 921.521291][T18370] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 921.530193][T18370] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 921.539334][T18370] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 921.548185][T18370] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 921.622139][T18370] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.631825][T18370] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.640853][T18370] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.649919][T18370] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.926498][ T5883] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 922.127504][ T5883] usb 4-1: config 1 interface 0 has no altsetting 0 [ 922.147612][ T5883] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 922.164030][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.185507][ T5883] usb 4-1: Product: syz [ 922.201070][ T5883] usb 4-1: Manufacturer: syz [ 922.205736][ T5883] usb 4-1: SerialNumber: syz [ 922.461033][T12793] snd-usb-audio 5-1:0.227: probe with driver snd-usb-audio failed with error -110 [ 922.776515][ T5885] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 923.405551][ T5883] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 923.879897][T12793] usb 4-1: USB disconnect, device number 30 [ 923.899804][T16315] usb 5-1: USB disconnect, device number 50 [ 923.915249][T12793] usblp0: removed [ 923.972435][T18399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.018247][T18399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.033901][T18399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.266963][T18399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.685153][T18420] input: syz0 as /devices/virtual/input/input50 [ 926.018678][T18420] hub 9-0:1.0: USB hub found [ 926.057123][T18420] hub 9-0:1.0: 1 port detected [ 926.164653][ T5885] usb 1-1: unable to get BOS descriptor or descriptor too short [ 926.272524][ T5885] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 926.290645][ T5885] usb 1-1: can't read configurations, error -71 [ 926.439462][T18424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3711'. [ 926.578460][T18424] ptrace attach of ""[18429] was attempted by "./syz-executor exec"[18424] [ 927.906787][T18445] delete_channel: no stack [ 928.047068][T18452] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 928.054059][ T5885] IPVS: starting estimator thread 0... [ 928.215317][T18456] IPVS: using max 26 ests per chain, 62400 per kthread [ 928.409893][ T5891] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 928.569234][T18459] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3722'. [ 928.715312][ T5891] usb 5-1: config 129 has an invalid interface number: 114 but max is 1 [ 928.724300][ T5891] usb 5-1: config 129 has an invalid descriptor of length 212, skipping remainder of the config [ 928.762152][ T5891] usb 5-1: config 129 has 1 interface, different from the descriptor's value: 2 [ 928.803264][ T5891] usb 5-1: config 129 has no interface number 0 [ 928.826284][ T5891] usb 5-1: config 129 interface 114 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 928.906022][ T5891] usb 5-1: config 129 interface 114 altsetting 3 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 928.966506][ T5891] usb 5-1: config 129 interface 114 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 929.053751][ T5891] usb 5-1: config 129 interface 114 altsetting 3 has 5 endpoint descriptors, different from the interface descriptor's value: 10 [ 929.133741][ T5891] usb 5-1: config 129 interface 114 has no altsetting 0 [ 929.169082][ T5891] usb 5-1: New USB device found, idVendor=19d2, idProduct=1566, bcdDevice=51.76 [ 929.184183][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.222006][ T5891] usb 5-1: Product: п [ 929.249160][ T5891] usb 5-1: Manufacturer: з [ 929.253701][ T5891] usb 5-1: SerialNumber: syz [ 929.727284][T12793] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 929.816469][T16315] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 929.982752][T12793] usb 6-1: Using ep0 maxpacket: 32 [ 930.003640][T12793] usb 6-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 930.014157][T16315] usb 1-1: Using ep0 maxpacket: 8 [ 930.023319][T16315] usb 1-1: config 0 has no interfaces? [ 930.066293][T12793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.075853][T16315] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 930.088821][T18478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3727'. [ 930.090901][T12793] usb 6-1: Product: syz [ 930.104910][T16315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.114046][T12793] usb 6-1: Manufacturer: syz [ 930.124323][T12793] usb 6-1: SerialNumber: syz [ 930.130360][T16315] usb 1-1: config 0 descriptor?? [ 930.189452][T12793] usb 6-1: config 0 descriptor?? [ 930.283949][T12793] gspca_main: 04f1:1001 too many config [ 930.412496][T18474] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3725'. [ 930.487379][T12793] usb 1-1: USB disconnect, device number 32 [ 930.495841][T18478] ptrace attach of ""[18481] was attempted by "./syz-executor exec"[18478] [ 930.990870][ T5891] option 5-1:129.114: GSM modem (1-port) converter detected [ 931.060338][ T5891] usb 5-1: USB disconnect, device number 51 [ 931.088702][ T5891] option 5-1:129.114: device disconnected [ 931.636847][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.643215][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.824144][T18493] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 932.496993][ T5891] usb 6-1: USB disconnect, device number 64 [ 932.767693][T18506] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3735'. [ 932.866618][T18505] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 933.136456][T12793] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 933.216846][T18515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3740'. [ 933.316556][T12793] usb 4-1: Using ep0 maxpacket: 8 [ 933.343688][T12793] usb 4-1: config 5 has an invalid interface number: 67 but max is 0 [ 933.483138][T12793] usb 4-1: config 5 has no interface number 0 [ 933.524919][T18515] ptrace attach of ""[18526] was attempted by "./syz-executor exec"[18515] [ 933.543381][T12793] usb 4-1: New USB device found, idVendor=061d, idProduct=c1a0, bcdDevice=37.04 [ 933.585292][T12793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.618143][T12793] quatech2 4-1:5.67: Quatech 2nd gen USB to Serial Driver converter detected [ 933.736399][ T5891] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 934.080830][ T5891] usb 5-1: config 129 has an invalid interface number: 114 but max is 1 [ 934.090298][ T5891] usb 5-1: config 129 has an invalid descriptor of length 212, skipping remainder of the config [ 934.271477][ T5891] usb 5-1: config 129 has 1 interface, different from the descriptor's value: 2 [ 934.291035][ T5891] usb 5-1: config 129 has no interface number 0 [ 934.312875][ T5891] usb 5-1: config 129 interface 114 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 934.382020][ T5891] usb 5-1: config 129 interface 114 altsetting 3 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 934.495165][ T5891] usb 5-1: config 129 interface 114 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 934.525109][ T5891] usb 5-1: config 129 interface 114 altsetting 3 has 5 endpoint descriptors, different from the interface descriptor's value: 10 [ 934.605940][ T5891] usb 5-1: config 129 interface 114 has no altsetting 0 [ 934.649970][ T5891] usb 5-1: New USB device found, idVendor=19d2, idProduct=1566, bcdDevice=51.76 [ 934.663610][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.699420][ T5891] usb 5-1: Product: п [ 934.708202][ T5891] usb 5-1: Manufacturer: з [ 934.719862][ T5891] usb 5-1: SerialNumber: syz [ 935.344213][T18537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3745'. [ 935.906226][T16315] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 936.059947][T16315] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.078509][T16315] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 936.196274][T16315] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 936.328953][ T5891] option 5-1:129.114: GSM modem (1-port) converter detected [ 936.359525][ T5891] usb 5-1: USB disconnect, device number 52 [ 936.378779][ T5891] option 5-1:129.114: device disconnected [ 936.416406][T16315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.461801][T16315] usb 6-1: config 0 descriptor?? [ 936.986809][T17715] bridge_slave_1: left allmulticast mode [ 936.992526][T17715] bridge_slave_1: left promiscuous mode [ 937.036488][T17715] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.129798][T17715] bridge_slave_0: left allmulticast mode [ 937.140746][T18550] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3747'. [ 937.161936][T17715] bridge_slave_0: left promiscuous mode [ 937.180286][T17715] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.297408][T16315] usbhid 6-1:0.0: can't add hid device: -71 [ 937.303518][T16315] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 937.320739][T12793] usb 4-1: qt2_attach - failed to power on unit: -71 [ 937.347807][T16315] usb 6-1: USB disconnect, device number 65 [ 937.354392][T12793] quatech2 4-1:5.67: probe with driver quatech2 failed with error -71 [ 937.521573][T12793] usb 4-1: USB disconnect, device number 31 [ 938.610136][T17715] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.621929][T17715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.633008][T17715] bond0 (unregistering): Released all slaves [ 938.650544][T18547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3748'. [ 938.750644][T17715] tipc: Left network mode [ 938.985973][T18573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3754'. [ 939.071823][T18576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3753'. [ 939.193980][T18581] ptrace attach of ""[18582] was attempted by "./syz-executor exec"[18581] [ 939.596051][T17715] hsr_slave_0: left promiscuous mode [ 939.678845][T17715] hsr_slave_1: left promiscuous mode [ 939.726571][T17715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 939.734081][T17715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.758224][T17715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 939.776205][T17715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.855384][T18600] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 939.913102][T18599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3761'. [ 939.970546][T17715] veth1_macvtap: left promiscuous mode [ 940.040986][T17715] veth0_macvtap: left promiscuous mode [ 940.049925][T17715] veth1_vlan: left promiscuous mode [ 940.055461][T17715] veth0_vlan: left promiscuous mode [ 941.216643][T12793] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 941.406484][T12793] usb 5-1: Using ep0 maxpacket: 16 [ 941.592410][T12793] usb 5-1: config index 0 descriptor too short (expected 1828, got 36) [ 941.938061][T12793] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 941.947064][T12793] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.957372][T12793] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 941.966334][T12793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 941.975998][T12793] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 942.108859][T12793] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 942.205450][T12793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.213606][T12793] usb 5-1: Product: syz [ 942.217951][T12793] usb 5-1: Manufacturer: syz [ 942.222982][T12793] usb 5-1: SerialNumber: syz [ 942.237811][T12793] usb 5-1: config 0 descriptor?? [ 942.265934][T12793] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 942.287393][T12793] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 942.297938][T12793] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 942.351693][T12793] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 942.596786][T12793] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 942.604536][T12793] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 942.641088][T12793] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 942.650183][T12793] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 942.684279][T12793] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 942.716588][T12793] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 942.735672][T12793] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 942.755839][T12793] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 942.764783][T12793] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 942.778738][T12793] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 942.800159][T12793] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 944.090086][T17715] team0 (unregistering): Port device team_slave_1 removed [ 944.354792][T17715] team0 (unregistering): Port device team_slave_0 removed [ 944.835652][T18599] macsec0: entered promiscuous mode [ 944.844544][T18599] macsec0: entered allmulticast mode [ 944.850295][T18599] veth1_macvtap: entered allmulticast mode [ 944.861196][T18601] veth1_macvtap: left allmulticast mode [ 944.868342][T18601] veth1_macvtap: left promiscuous mode [ 944.891879][T18604] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 944.977700][T12793] usb 5-1: USB disconnect, device number 53 [ 945.035741][T12793] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 945.077371][T12793] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 945.093027][T12793] keyspan 5-1:0.0: device disconnected [ 945.187095][T17715] IPVS: stop unused estimator thread 0... [ 946.458257][T18627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3769'. [ 946.475012][T18627] random: crng reseeded on system resumption [ 946.506451][ T5891] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 946.675195][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.701676][ T5891] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 946.716635][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.741509][ T5891] usb 1-1: config 0 descriptor?? [ 946.764987][ T5891] pwc: Askey VC010 type 2 USB webcam detected. [ 946.946262][ T5885] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 946.953939][ T5884] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 946.971668][ T5891] pwc: send_video_command error -71 [ 946.998020][ T5891] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 947.005677][ T5891] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 947.039404][ T5891] usb 1-1: USB disconnect, device number 33 [ 947.134378][ T5884] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 947.142856][ T5885] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 947.161837][ T5884] usb 6-1: config 0 has no interface number 0 [ 947.169188][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.179669][ T5884] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 947.194593][ T5885] usb 4-1: config 0 descriptor?? [ 947.205213][ T5885] cp210x 4-1:0.0: cp210x converter detected [ 947.212621][ T5884] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 947.226345][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.244892][ T5884] usb 6-1: Product: syz [ 947.250174][ T5884] usb 6-1: Manufacturer: syz [ 947.265537][ T5884] usb 6-1: SerialNumber: syz [ 947.286746][ T5884] usb 6-1: config 0 descriptor?? [ 947.299468][ T5884] yurex 6-1:0.50: Could not find endpoints [ 947.515737][ T5884] usb 6-1: USB disconnect, device number 66 [ 947.516685][ T5891] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 947.698621][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 947.709715][ T5891] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 947.719604][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.731679][ T5891] usb 1-1: config 0 descriptor?? [ 947.749836][ T5891] pwc: Askey VC010 type 2 USB webcam detected. [ 948.432726][ T5891] pwc: recv_control_msg error -32 req 02 val 2700 [ 948.452172][ T5891] pwc: recv_control_msg error -32 req 02 val 2c00 [ 948.460469][ T5891] pwc: recv_control_msg error -32 req 04 val 1000 [ 948.469392][ T5891] pwc: recv_control_msg error -32 req 04 val 1300 [ 948.994149][T18641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3772'. [ 949.106830][T18643] ptrace attach of ""[18644] was attempted by "./syz-executor exec"[18643] [ 949.741551][ T5891] pwc: recv_control_msg error -71 req 02 val 2000 [ 949.774125][ T5891] pwc: recv_control_msg error -71 req 02 val 2100 [ 949.785238][ T5891] pwc: recv_control_msg error -71 req 04 val 1500 [ 949.806849][ T5891] pwc: recv_control_msg error -71 req 02 val 2500 [ 949.813791][ T5891] pwc: recv_control_msg error -71 req 02 val 2400 [ 949.826488][ T5891] pwc: recv_control_msg error -71 req 02 val 2600 [ 949.846216][ T5891] pwc: recv_control_msg error -71 req 02 val 2900 [ 949.853181][ T5891] pwc: recv_control_msg error -71 req 02 val 2800 [ 949.861894][ T5891] pwc: recv_control_msg error -71 req 04 val 1100 [ 949.879580][ T5891] pwc: recv_control_msg error -71 req 04 val 1200 [ 949.898152][ T5891] pwc: Registered as video103. [ 949.905315][ T5891] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input51 [ 949.992745][ T5891] usb 1-1: USB disconnect, device number 34 [ 950.465014][T18668] netlink: 'syz.1.3781': attribute type 2 has an invalid length. [ 950.488223][T18668] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3781'. [ 951.396465][ T5883] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 951.519532][ T30] kauditd_printk_skb: 845 callbacks suppressed [ 951.519551][ T30] audit: type=1326 audit(1745830227.316:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.4.3792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 951.565773][T18695] FAULT_INJECTION: forcing a failure. [ 951.565773][T18695] name failslab, interval 1, probability 0, space 0, times 0 [ 951.586502][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 951.591140][ T30] audit: type=1326 audit(1745830227.316:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.4.3792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 951.619964][ T5883] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 951.620053][T18695] CPU: 1 UID: 0 PID: 18695 Comm: syz.5.3793 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 951.620080][T18695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 951.620094][T18695] Call Trace: [ 951.620104][T18695] [ 951.620115][T18695] dump_stack_lvl+0x189/0x250 [ 951.620156][T18695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 951.620188][T18695] ? __pfx__printk+0x10/0x10 [ 951.620213][T18695] ? __pfx___might_resched+0x10/0x10 [ 951.620246][T18695] ? fs_reclaim_acquire+0x7d/0x100 [ 951.620284][T18695] should_fail_ex+0x414/0x560 [ 951.620324][T18695] should_failslab+0xa8/0x100 [ 951.620355][T18695] __kmalloc_noprof+0xcb/0x4f0 [ 951.620380][T18695] ? lockdep_hardirqs_on+0x9c/0x150 [ 951.620399][T18695] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 951.620433][T18695] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 951.620470][T18695] genl_family_rcv_msg_doit+0xb8/0x300 [ 951.620504][T18695] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 951.620544][T18695] ? rcu_is_watching+0x15/0xb0 [ 951.620579][T18695] ? apparmor_capable+0x137/0x1b0 [ 951.620610][T18695] ? bpf_lsm_capable+0x9/0x20 [ 951.620638][T18695] ? security_capable+0x7e/0x2e0 [ 951.620668][T18695] genl_rcv_msg+0x60e/0x790 [ 951.620702][T18695] ? __pfx_genl_rcv_msg+0x10/0x10 [ 951.620727][T18695] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 951.620758][T18695] ? __pfx_nl80211_new_key+0x10/0x10 [ 951.620777][T18695] ? __pfx_nl80211_post_doit+0x10/0x10 [ 951.620811][T18695] ? ref_tracker_free+0x63a/0x7d0 [ 951.620831][T18695] ? __copy_skb_header+0xa7/0x550 [ 951.620867][T18695] netlink_rcv_skb+0x219/0x490 [ 951.620901][T18695] ? __pfx_genl_rcv_msg+0x10/0x10 [ 951.620929][T18695] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 951.620988][T18695] ? down_read+0x1ad/0x2e0 [ 951.621016][T18695] genl_rcv+0x28/0x40 [ 951.621040][T18695] netlink_unicast+0x758/0x8d0 [ 951.621083][T18695] netlink_sendmsg+0x805/0xb30 [ 951.621114][T18695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.621138][T18695] ? __import_iovec+0x5d4/0x7f0 [ 951.621163][T18695] ? aa_sock_msg_perm+0x94/0x160 [ 951.621188][T18695] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 951.621211][T18695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.621232][T18695] __sock_sendmsg+0x219/0x270 [ 951.621267][T18695] ____sys_sendmsg+0x505/0x830 [ 951.621298][T18695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 951.621341][T18695] ___sys_sendmsg+0x21f/0x2a0 [ 951.621369][T18695] ? __pfx____sys_sendmsg+0x10/0x10 [ 951.621435][T18695] ? __fget_files+0x2a/0x420 [ 951.621462][T18695] ? __fget_files+0x3a0/0x420 [ 951.621501][T18695] __sys_sendmsg+0x164/0x220 [ 951.621529][T18695] ? __pfx___sys_sendmsg+0x10/0x10 [ 951.621578][T18695] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 951.621603][T18695] ? lockdep_hardirqs_on+0x9c/0x150 [ 951.621626][T18695] __do_fast_syscall_32+0xb4/0x110 [ 951.621651][T18695] ? lockdep_hardirqs_on+0x9c/0x150 [ 951.621677][T18695] do_fast_syscall_32+0x34/0x80 [ 951.621700][T18695] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 951.621726][T18695] RIP: 0023:0xf7fd8539 [ 951.621744][T18695] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 951.621763][T18695] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 951.621787][T18695] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 951.621802][T18695] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 951.621815][T18695] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 951.621828][T18695] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 951.621841][T18695] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 951.621872][T18695] [ 951.622214][ T30] audit: type=1326 audit(1745830227.376:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.4.3792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 951.849396][ T5883] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 952.005498][ T30] audit: type=1326 audit(1745830227.386:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.4.3792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 952.057678][ C1] vkms_vblank_simulate: vblank timer overrun [ 952.069432][ T30] audit: type=1326 audit(1745830227.386:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.4.3792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 952.201914][ T5883] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.08 [ 952.211829][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.223680][ T5883] usb 1-1: config 0 descriptor?? [ 952.306264][ T30] audit: type=1326 audit(1745830227.416:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.4.3792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 952.351919][ T30] audit: type=1326 audit(1745830227.916:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.4.3792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 952.375783][ T30] audit: type=1326 audit(1745830227.916:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.4.3792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 952.387072][T18705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3795'. [ 952.415427][ T30] audit: type=1326 audit(1745830227.936:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.4.3792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 952.441807][T18705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3795'. [ 952.466995][T18705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3795'. [ 952.495166][T18683] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3788'. [ 952.528173][ T30] audit: type=1326 audit(1745830227.936:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.4.3792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 952.666541][ T5885] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -110 [ 952.684525][ T5885] cp210x 4-1:0.0: GPIO initialisation failed: -110 [ 952.713490][ T5885] usb 4-1: cp210x converter now attached to ttyUSB0 [ 952.732281][T18627] Unrecognized hibernate image header format! [ 952.742630][T18627] PM: hibernation: Image mismatch: architecture specific data [ 952.795698][ T5885] usb 4-1: USB disconnect, device number 32 [ 952.806590][ T5885] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 952.814711][ T5885] cp210x 4-1:0.0: device disconnected [ 952.896283][ T5883] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 953.076805][ T5883] usb 6-1: Using ep0 maxpacket: 16 [ 953.084162][ T5883] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.102036][ T5883] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.125430][ T5883] usb 6-1: config 0 interface 0 has no altsetting 0 [ 953.260016][T18724] openvswitch: netlink: IP tunnel dst address not specified [ 953.411025][ T5883] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 953.435148][T18727] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 953.444134][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.495445][ T5883] usb 6-1: config 0 descriptor?? [ 954.056305][ T5883] usbhid 6-1:0.0: can't add hid device: -71 [ 954.085105][ T5883] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 954.146439][ T5883] usb 6-1: USB disconnect, device number 67 [ 954.485753][T18744] FAULT_INJECTION: forcing a failure. [ 954.485753][T18744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 954.521463][T18744] CPU: 1 UID: 0 PID: 18744 Comm: syz.3.3808 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 954.521492][T18744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 954.521505][T18744] Call Trace: [ 954.521515][T18744] [ 954.521525][T18744] dump_stack_lvl+0x189/0x250 [ 954.521563][T18744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 954.521593][T18744] ? __pfx__printk+0x10/0x10 [ 954.521627][T18744] should_fail_ex+0x414/0x560 [ 954.521665][T18744] _copy_to_user+0x31/0xb0 [ 954.521695][T18744] simple_read_from_buffer+0xe1/0x170 [ 954.521725][T18744] proc_fail_nth_read+0x1df/0x250 [ 954.521757][T18744] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 954.521789][T18744] ? rw_verify_area+0x258/0x650 [ 954.521810][T18744] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 954.521840][T18744] vfs_read+0x1fd/0x980 [ 954.521868][T18744] ? __pfx___mutex_lock+0x10/0x10 [ 954.521892][T18744] ? __pfx_vfs_read+0x10/0x10 [ 954.521916][T18744] ? __fget_files+0x2a/0x420 [ 954.521946][T18744] ? __fget_files+0x3a0/0x420 [ 954.521971][T18744] ? __fget_files+0x2a/0x420 [ 954.522006][T18744] ksys_read+0x145/0x250 [ 954.522031][T18744] ? __pfx_ksys_read+0x10/0x10 [ 954.522056][T18744] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 954.522079][T18744] ? lockdep_hardirqs_on+0x9c/0x150 [ 954.522102][T18744] __do_fast_syscall_32+0xb4/0x110 [ 954.522126][T18744] ? lockdep_hardirqs_on+0x9c/0x150 [ 954.522150][T18744] do_fast_syscall_32+0x34/0x80 [ 954.522173][T18744] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 954.522197][T18744] RIP: 0023:0xf70be539 [ 954.522223][T18744] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 954.522242][T18744] RSP: 002b:00000000f50ae590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 954.522265][T18744] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50ae620 [ 954.522280][T18744] RDX: 000000000000000f RSI: 00000000f7422ff4 RDI: 0000000000000000 [ 954.522293][T18744] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 954.522305][T18744] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 954.522317][T18744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 954.522348][T18744] [ 954.750373][ C1] vkms_vblank_simulate: vblank timer overrun [ 954.793308][T15697] usb 1-1: USB disconnect, device number 35 [ 955.480480][ T5891] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 955.649453][ T5891] usb 1-1: unable to get BOS descriptor or descriptor too short [ 955.687918][ T5891] usb 1-1: config 6 has an invalid interface number: 95 but max is 1 [ 955.696530][ T5891] usb 1-1: config 6 has an invalid interface number: 24 but max is 1 [ 955.746498][ T5891] usb 1-1: config 6 has no interface number 0 [ 955.752675][ T5891] usb 1-1: config 6 has no interface number 1 [ 955.785679][ T5891] usb 1-1: config 6 interface 95 has no altsetting 0 [ 955.806253][ T5883] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 955.810731][ T5891] usb 1-1: config 6 interface 24 has no altsetting 0 [ 955.915318][ T5891] usb 1-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=cc.be [ 955.947767][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.968156][ T5891] usb 1-1: Product: syz [ 955.972406][ T5891] usb 1-1: Manufacturer: syz [ 955.996283][ T5891] usb 1-1: SerialNumber: syz [ 955.999356][ T5883] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 956.036190][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.051897][ T5883] usb 4-1: Product: syz [ 956.071461][ T5883] usb 4-1: Manufacturer: syz [ 956.108354][ T5883] usb 4-1: SerialNumber: syz [ 956.138280][ T5883] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 956.238432][T15697] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 956.373739][ T5891] usb 1-1: USB disconnect, device number 36 [ 956.661743][T18769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.695986][T18769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.885787][T18787] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3824'. [ 957.094266][T18793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3827'. [ 957.144083][T18791] netlink: 'syz.5.3826': attribute type 25 has an invalid length. [ 957.213430][T18795] netlink: 'syz.5.3826': attribute type 25 has an invalid length. [ 957.306328][T15697] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 957.313545][T15697] ath9k_htc: Failed to initialize the device [ 957.354140][T18801] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3829'. [ 957.391513][T15697] usb 4-1: ath9k_htc: USB layer deinitialized [ 957.927541][T18764] syz.3.3816 (18764): drop_caches: 3 [ 957.953322][T15697] usb 4-1: USB disconnect, device number 33 [ 959.202560][T18825] veth1_macvtap: left promiscuous mode [ 959.208344][T18825] macsec0: entered promiscuous mode [ 959.231219][T18825] veth1_macvtap: entered promiscuous mode [ 959.237740][T18825] macsec0: left promiscuous mode [ 959.257744][T18825] vlan3: entered allmulticast mode [ 959.262977][T18825] syz_tun: entered allmulticast mode [ 959.559180][T18835] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3838'. [ 960.386461][ T5885] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 960.601129][ T5885] usb 1-1: config 0 has no interfaces? [ 960.636879][ T5885] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 960.645994][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.670805][ T5885] usb 1-1: Product: syz [ 960.676803][ T5885] usb 1-1: Manufacturer: syz [ 960.681633][ T5885] usb 1-1: SerialNumber: syz [ 960.697083][ T5885] usb 1-1: config 0 descriptor?? [ 960.836380][T15697] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 960.884978][T18839] could not allocate digest TFM handle [ 960.936814][T18840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.984889][T18840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.062376][T18857] team0: left allmulticast mode [ 961.110664][ T5885] usb 1-1: USB disconnect, device number 37 [ 961.136298][T18857] team_slave_0: left allmulticast mode [ 961.147415][T15697] usb 4-1: config 0 has no interfaces? [ 961.155567][T18857] team_slave_1: left allmulticast mode [ 961.169624][T18857] team0: left promiscuous mode [ 961.191416][T18857] team_slave_0: left promiscuous mode [ 961.208664][T18857] team_slave_1: left promiscuous mode [ 961.224556][T18857] bridge0: port 3(team0) entered disabled state [ 961.371640][T15697] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 961.389262][T18857] bridge_slave_0: left allmulticast mode [ 961.399445][T18857] bridge_slave_0: left promiscuous mode [ 961.406426][T18857] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.419437][T15697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.436319][T15697] usb 4-1: Product: syz [ 961.443577][T15697] usb 4-1: Manufacturer: syz [ 961.452854][T15697] usb 4-1: SerialNumber: syz [ 961.471697][T15697] usb 4-1: config 0 descriptor?? [ 961.504627][T18857] bridge_slave_1: left allmulticast mode [ 961.522623][T18857] bridge_slave_1: left promiscuous mode [ 961.533646][T18857] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.581262][T18857] bond0: (slave bond_slave_0): Releasing backup interface [ 961.640819][T18857] bond0: (slave bond_slave_1): Releasing backup interface [ 961.895213][T18863] GUP no longer grows the stack in syz.3.3843 (18863): 80009000-8000a000 (80005000) [ 961.907415][T18863] CPU: 0 UID: 0 PID: 18863 Comm: syz.3.3843 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 961.907446][T18863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 961.907461][T18863] Call Trace: [ 961.907470][T18863] [ 961.907481][T18863] dump_stack_lvl+0x189/0x250 [ 961.907523][T18863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 961.907554][T18863] ? __pfx__printk+0x10/0x10 [ 961.907573][T18863] ? find_vma+0xe7/0x160 [ 961.907613][T18863] __get_user_pages+0x24e4/0x2a40 [ 961.907673][T18863] ? __pfx___get_user_pages+0x10/0x10 [ 961.907697][T18863] ? __gup_longterm_locked+0xbf7/0x15b0 [ 961.907722][T18863] ? down_read_killable+0x1d1/0x350 [ 961.907746][T18863] ? try_get_folio+0x633/0x660 [ 961.907783][T18863] __gup_longterm_locked+0xd66/0x15b0 [ 961.907815][T18863] ? try_grab_folio_fast+0x19a/0x4d0 [ 961.907854][T18863] ? gup_fast_fallback+0x1672/0x1d60 [ 961.907883][T18863] gup_fast_fallback+0x1843/0x1d60 [ 961.907941][T18863] ? __pfx_gup_fast_fallback+0x10/0x10 [ 961.907964][T18863] ? __mutex_lock+0x330/0xe80 [ 961.907994][T18863] ? is_valid_gup_args+0x11f/0x200 [ 961.908017][T18863] ? get_user_pages_fast+0x4d/0xb0 [ 961.908039][T18863] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 961.908070][T18863] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 961.908091][T18863] ? wait_for_space+0x24d/0x2d0 [ 961.908113][T18863] iov_iter_get_pages2+0x5e/0xa0 [ 961.908145][T18863] __se_sys_vmsplice+0x548/0x10e0 [ 961.908182][T18863] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 961.908204][T18863] ? __pfx_futex_wait+0x10/0x10 [ 961.908235][T18863] ? __lock_acquire+0xaac/0xd20 [ 961.908291][T18863] ? rcu_is_watching+0x15/0xb0 [ 961.908323][T18863] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 961.908344][T18863] ? lockdep_hardirqs_on+0x9c/0x150 [ 961.908366][T18863] __do_fast_syscall_32+0xb4/0x110 [ 961.908385][T18863] ? lockdep_hardirqs_on+0x9c/0x150 [ 961.908404][T18863] do_fast_syscall_32+0x34/0x80 [ 961.908423][T18863] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 961.908443][T18863] RIP: 0023:0xf70be539 [ 961.908458][T18863] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 961.908473][T18863] RSP: 002b:00000000f4c4955c EFLAGS: 00000206 ORIG_RAX: 000000000000013c [ 961.908492][T18863] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000080000280 [ 961.908504][T18863] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 961.908516][T18863] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 961.908526][T18863] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 961.908536][T18863] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 961.908562][T18863] [ 962.240165][T18857] team0: Port device team_slave_0 removed [ 962.294049][T18857] team0: Port device team_slave_1 removed [ 962.318979][T18857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 962.345651][T18857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.365214][T18857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 962.386831][T18857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.433876][T18857] macvlan1: left allmulticast mode [ 962.480409][T18857] veth1_vlan: left allmulticast mode [ 962.565193][T18857] macvlan1: left promiscuous mode [ 962.574621][T18857] bridge0: port 4(macvlan1) entered disabled state [ 962.599211][T18874] sctp: [Deprecated]: syz.1.3851 (pid 18874) Use of struct sctp_assoc_value in delayed_ack socket option. [ 962.599211][T18874] Use struct sctp_sack_info instead [ 962.813367][T18877] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3852'. [ 962.873009][T18877] FAULT_INJECTION: forcing a failure. [ 962.873009][T18877] name failslab, interval 1, probability 0, space 0, times 0 [ 962.905266][T18877] CPU: 1 UID: 0 PID: 18877 Comm: syz.4.3852 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 962.905297][T18877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 962.905311][T18877] Call Trace: [ 962.905321][T18877] [ 962.905331][T18877] dump_stack_lvl+0x189/0x250 [ 962.905369][T18877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 962.905400][T18877] ? __pfx__printk+0x10/0x10 [ 962.905427][T18877] ? __pfx___might_resched+0x10/0x10 [ 962.905458][T18877] ? fs_reclaim_acquire+0x7d/0x100 [ 962.905493][T18877] should_fail_ex+0x414/0x560 [ 962.905532][T18877] should_failslab+0xa8/0x100 [ 962.905561][T18877] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 962.905589][T18877] ? __alloc_skb+0x112/0x2d0 [ 962.905614][T18877] __alloc_skb+0x112/0x2d0 [ 962.905639][T18877] netlink_ack+0x146/0xa50 [ 962.905667][T18877] ? __pfx_genl_rcv_msg+0x10/0x10 [ 962.905690][T18877] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 962.905727][T18877] ? __pfx_nl80211_post_doit+0x10/0x10 [ 962.905774][T18877] netlink_rcv_skb+0x2a0/0x490 [ 962.905806][T18877] ? __pfx_genl_rcv_msg+0x10/0x10 [ 962.905838][T18877] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 962.905895][T18877] ? down_read+0x1ad/0x2e0 [ 962.905921][T18877] genl_rcv+0x28/0x40 [ 962.905943][T18877] netlink_unicast+0x758/0x8d0 [ 962.905984][T18877] netlink_sendmsg+0x805/0xb30 [ 962.906014][T18877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 962.906037][T18877] ? __import_iovec+0x5d4/0x7f0 [ 962.906064][T18877] ? aa_sock_msg_perm+0x94/0x160 [ 962.906087][T18877] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 962.906109][T18877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 962.906129][T18877] __sock_sendmsg+0x219/0x270 [ 962.906160][T18877] ____sys_sendmsg+0x505/0x830 [ 962.906190][T18877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 962.906231][T18877] ___sys_sendmsg+0x21f/0x2a0 [ 962.906256][T18877] ? __pfx____sys_sendmsg+0x10/0x10 [ 962.906316][T18877] ? __fget_files+0x2a/0x420 [ 962.906340][T18877] ? __fget_files+0x3a0/0x420 [ 962.906377][T18877] __sys_sendmsg+0x164/0x220 [ 962.906403][T18877] ? __pfx___sys_sendmsg+0x10/0x10 [ 962.906440][T18877] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 962.906461][T18877] ? lockdep_hardirqs_on+0x9c/0x150 [ 962.906478][T18877] __do_fast_syscall_32+0xb4/0x110 [ 962.906495][T18877] ? lockdep_hardirqs_on+0x9c/0x150 [ 962.906512][T18877] do_fast_syscall_32+0x34/0x80 [ 962.906528][T18877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 962.906546][T18877] RIP: 0023:0xf707e539 [ 962.906566][T18877] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 962.906583][T18877] RSP: 002b:00000000f506e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 962.906605][T18877] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 962.906620][T18877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 962.906632][T18877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 962.906644][T18877] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 962.906656][T18877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 962.906684][T18877] [ 963.471868][ T5891] usb 4-1: USB disconnect, device number 34 [ 963.983924][T18907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3863'. [ 964.177235][T12793] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 965.069818][T18926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3871'. [ 965.096497][T16315] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 965.246516][T16315] usb 5-1: Using ep0 maxpacket: 8 [ 965.254207][T16315] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 965.273027][T16315] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 965.285015][T16315] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 965.295616][T18933] FAULT_INJECTION: forcing a failure. [ 965.295616][T18933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 965.296943][T16315] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 965.319798][T18933] CPU: 0 UID: 0 PID: 18933 Comm: syz.5.3874 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 965.319827][T18933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 965.319840][T18933] Call Trace: [ 965.319849][T18933] [ 965.319859][T18933] dump_stack_lvl+0x189/0x250 [ 965.319891][T18933] ? __lock_acquire+0xaac/0xd20 [ 965.319923][T18933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 965.319952][T18933] ? __pfx__printk+0x10/0x10 [ 965.319972][T18933] ? __might_fault+0xb0/0x130 [ 965.320009][T18933] should_fail_ex+0x414/0x560 [ 965.320046][T18933] _copy_from_user+0x2d/0xb0 [ 965.320073][T18933] get_compat_msghdr+0xad/0x4a0 [ 965.320101][T18933] ? __pfx_get_compat_msghdr+0x10/0x10 [ 965.320136][T18933] ___sys_sendmsg+0x193/0x2a0 [ 965.320162][T18933] ? __pfx____sys_sendmsg+0x10/0x10 [ 965.320222][T18933] ? __fget_files+0x2a/0x420 [ 965.320248][T18933] ? __fget_files+0x3a0/0x420 [ 965.320284][T18933] __sys_sendmmsg+0x28e/0x430 [ 965.320314][T18933] ? __pfx___sys_sendmmsg+0x10/0x10 [ 965.320346][T18933] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 965.320387][T18933] ? ksys_write+0x1f0/0x250 [ 965.320421][T18933] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 965.320446][T18933] __do_fast_syscall_32+0xb4/0x110 [ 965.320469][T18933] ? lockdep_hardirqs_on+0x9c/0x150 [ 965.320503][T18933] do_fast_syscall_32+0x34/0x80 [ 965.320525][T18933] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 965.320550][T18933] RIP: 0023:0xf7fd8539 [ 965.320567][T18933] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 965.320584][T18933] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 965.320605][T18933] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f40 [ 965.320619][T18933] RDX: 000000000000020b RSI: 0000000020000000 RDI: 0000000000000000 [ 965.320632][T18933] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 965.320643][T18933] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 965.320655][T18933] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 965.320684][T18933] [ 965.344597][T16315] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 965.569730][T16315] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 965.578894][T16315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.686280][T15697] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 965.793867][T16315] usb 5-1: GET_CAPABILITIES returned 0 [ 965.805998][T16315] usbtmc 5-1:16.0: can't read capabilities [ 965.850829][T15697] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 965.876143][T15697] usb 1-1: config 0 has no interface number 0 [ 965.882540][T15697] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 965.917950][T15697] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 965.929416][T15697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.937979][T15697] usb 1-1: Product: syz [ 965.942206][T15697] usb 1-1: Manufacturer: syz [ 965.950133][T15697] usb 1-1: SerialNumber: syz [ 965.958970][T15697] usb 1-1: config 0 descriptor?? [ 965.964727][T18931] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 965.982186][T15697] usb-storage 1-1:0.20: USB Mass Storage device detected [ 966.007521][T15697] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 966.036704][T16315] usb 5-1: USB disconnect, device number 54 [ 966.186392][T15697] scsi host1: usb-storage 1-1:0.20 [ 966.196599][T12793] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 966.217907][T15697] usb 1-1: USB disconnect, device number 38 [ 966.368263][T12793] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 966.378052][T12793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.394165][T12793] usb 6-1: config 0 descriptor?? [ 966.439718][T18948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3878'. [ 967.718076][T12793] pegasus 6-1:0.0: probe with driver pegasus failed with error -32 [ 967.885515][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 967.885533][ T30] audit: type=1326 audit(1745830243.676:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18962 comm="syz.4.3884" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707e539 code=0x0 [ 968.311189][T18971] random: crng reseeded on system resumption [ 969.252237][ T5883] usb 6-1: USB disconnect, device number 69 [ 969.727731][T18997] netlink: 'syz.5.3897': attribute type 10 has an invalid length. [ 969.785040][T18997] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 969.824514][T19001] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3899'. [ 969.839301][T19002] netlink: 'syz.5.3897': attribute type 10 has an invalid length. [ 969.852728][T19001] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3899'. [ 969.874137][T19002] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 969.915545][T18997] xt_recent: Unsupported userspace flags (000000fe) [ 970.011540][T19004] ALSA: mixer_oss: invalid OSS volume 'A1é4' [ 970.195681][ T30] audit: type=1400 audit(1745830245.966:2394): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=19010 comm="syz.0.3892" [ 970.216173][T15697] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 970.298045][T19013] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 970.391653][T15697] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 970.403274][T15697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.435042][T15697] usb 5-1: Product: syz [ 970.446542][T15697] usb 5-1: Manufacturer: syz [ 970.451219][T15697] usb 5-1: SerialNumber: syz [ 970.489669][T15697] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 970.559962][T19025] netlink: 'syz.0.3906': attribute type 1 has an invalid length. [ 970.568199][T19025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3906'. [ 970.586627][ T5883] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 970.609353][ T5885] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 970.646173][T12793] usb 6-1: new low-speed USB device number 70 using dummy_hcd [ 970.726383][ T5883] usb 4-1: device descriptor read/64, error -71 [ 970.776248][T12793] usb 6-1: device descriptor read/64, error -71 [ 970.837316][T19005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.860263][T19005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.888713][T16315] usb 5-1: USB disconnect, device number 55 [ 970.991859][ T5883] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 971.016258][T12793] usb 6-1: new low-speed USB device number 71 using dummy_hcd [ 971.116412][ T5883] usb 4-1: device descriptor read/64, error -71 [ 971.146571][T12793] usb 6-1: device descriptor read/64, error -71 [ 971.230087][ T5883] usb usb4-port1: attempt power cycle [ 971.267430][T12793] usb usb6-port1: attempt power cycle [ 971.575965][ T30] audit: type=1326 audit(1745830247.366:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19055 comm="syz.1.3917" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x0 [ 971.608018][ T5883] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 971.626499][T12793] usb 6-1: new low-speed USB device number 72 using dummy_hcd [ 971.637519][ T5883] usb 4-1: device descriptor read/8, error -71 [ 971.647156][T12793] usb 6-1: device descriptor read/8, error -71 [ 971.706570][ T5885] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 971.723661][ T5885] ath9k_htc: Failed to initialize the device [ 971.738962][T16315] usb 5-1: ath9k_htc: USB layer deinitialized [ 971.746563][T19059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3914'. [ 972.002580][ T5883] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 972.020285][T12793] usb 6-1: new low-speed USB device number 73 using dummy_hcd [ 972.049485][T12793] usb 6-1: device descriptor read/8, error -71 [ 972.138290][ T5883] usb 4-1: device descriptor read/8, error -71 [ 972.174841][T12793] usb usb6-port1: unable to enumerate USB device [ 972.266718][ T5883] usb usb4-port1: unable to enumerate USB device [ 973.108459][ T5883] IPVS: starting estimator thread 0... [ 973.194566][T19083] netlink: 'syz.0.3923': attribute type 1 has an invalid length. [ 973.206229][T19081] IPVS: using max 29 ests per chain, 69600 per kthread [ 973.342284][T19083] 8021q: adding VLAN 0 to HW filter on device bond1 [ 973.606294][T12793] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 973.882022][T12793] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 973.955391][T12793] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 973.968927][T12793] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 973.978673][T12793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.681932][T19080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3923'. [ 974.765145][T19083] dummy0: entered promiscuous mode [ 974.821192][T19083] bond1: (slave dummy0): making interface the new active one [ 974.976562][T19083] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 975.173367][T19080] vlan2: entered promiscuous mode [ 975.360533][T19080] bond1: entered promiscuous mode [ 975.544631][T12793] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 975.655957][T12793] usb 1-1: USB disconnect, device number 39 [ 976.066184][ T5883] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 976.226258][ T5883] usb 4-1: device descriptor read/64, error -71 [ 976.461214][T19113] xt_socket: unknown flags 0x4 [ 976.496493][ T5883] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 976.584134][T19117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3937'. [ 976.648145][ T5883] usb 4-1: device descriptor read/64, error -71 [ 976.731977][T19119] ptrace attach of ""[19120] was attempted by "./syz-executor exec"[19119] [ 976.772711][ T5883] usb usb4-port1: attempt power cycle [ 977.127161][ T5883] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 977.176405][ T5883] usb 4-1: device descriptor read/8, error -71 [ 977.416419][ T5883] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 977.437256][ T5883] usb 4-1: device descriptor read/8, error -71 [ 977.549213][ T5883] usb usb4-port1: unable to enumerate USB device [ 977.624251][T19139] overlayfs: missing 'lowerdir' [ 977.936370][ T5891] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 978.118388][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.238281][ T5891] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 978.251706][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.281033][ T5891] usb 6-1: config 0 descriptor?? [ 978.793501][T19141] fuse: Unknown parameter 'no' [ 978.898106][T19155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3947'. [ 979.051062][T19161] fuse: Bad value for 'fd' [ 979.073115][T19161] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3949'. [ 979.201395][ T5891] usbhid 6-1:0.0: can't add hid device: -71 [ 979.325451][ T5891] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 979.420303][ T5891] usb 6-1: USB disconnect, device number 74 [ 979.936489][T12793] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 980.066341][T12793] usb 5-1: device descriptor read/64, error -71 [ 980.690139][T12793] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 980.754975][T19190] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3959'. [ 980.846381][T12793] usb 5-1: device descriptor read/64, error -71 [ 980.957707][T12793] usb usb5-port1: attempt power cycle [ 981.274657][T19207] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3965'. [ 981.316447][T12793] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 981.352780][T12793] usb 5-1: device descriptor read/8, error -71 [ 981.461913][T19216] FAULT_INJECTION: forcing a failure. [ 981.461913][T19216] name failslab, interval 1, probability 0, space 0, times 0 [ 981.576701][T19216] CPU: 1 UID: 0 PID: 19216 Comm: syz.0.3968 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 981.576731][T19216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 981.576744][T19216] Call Trace: [ 981.576753][T19216] [ 981.576763][T19216] dump_stack_lvl+0x189/0x250 [ 981.576802][T19216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 981.576851][T19216] ? __pfx__printk+0x10/0x10 [ 981.576885][T19216] ? __pfx___might_resched+0x10/0x10 [ 981.576922][T19216] should_fail_ex+0x414/0x560 [ 981.576960][T19216] should_failslab+0xa8/0x100 [ 981.576989][T19216] kmem_cache_alloc_noprof+0x73/0x3c0 [ 981.577013][T19216] ? mas_alloc_nodes+0x2e9/0x8e0 [ 981.577038][T19216] mas_alloc_nodes+0x2e9/0x8e0 [ 981.577068][T19216] mas_preallocate+0x542/0x8b0 [ 981.577106][T19216] ? __pfx_mas_preallocate+0x10/0x10 [ 981.577149][T19216] ? __mas_set_range+0x12f/0x3c0 [ 981.577179][T19216] __split_vma+0x315/0x9b0 [ 981.577212][T19216] ? __pfx___split_vma+0x10/0x10 [ 981.577254][T19216] vms_gather_munmap_vmas+0x2de/0x12b0 [ 981.577291][T19216] ? mtree_range_walk+0x6a7/0x840 [ 981.577324][T19216] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 981.577367][T19216] mmap_region+0x5f5/0x1e50 [ 981.577399][T19216] ? is_bpf_text_address+0x26/0x2b0 [ 981.577430][T19216] ? __pfx_mmap_region+0x10/0x10 [ 981.577459][T19216] ? kernel_text_address+0xa5/0xe0 [ 981.577539][T19216] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 981.577583][T19216] ? rcu_is_watching+0x15/0xb0 [ 981.577614][T19216] ? cap_capable+0x11f/0x460 [ 981.577648][T19216] ? security_capable+0xbd/0x2e0 [ 981.577668][T19216] ? shmem_mapping+0xd/0x50 [ 981.577686][T19216] ? memfd_check_seals_mmap+0x165/0x200 [ 981.577720][T19216] do_mmap+0xc68/0x1100 [ 981.577758][T19216] ? __pfx_do_mmap+0x10/0x10 [ 981.577779][T19216] ? down_write_killable+0x178/0x230 [ 981.577804][T19216] ? end_current_label_crit_section+0x152/0x180 [ 981.577826][T19216] ? __pfx_down_write_killable+0x10/0x10 [ 981.577860][T19216] vm_mmap_pgoff+0x31b/0x4c0 [ 981.577897][T19216] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 981.577931][T19216] ? hugetlb_file_setup+0x429/0x630 [ 981.577964][T19216] ksys_mmap_pgoff+0x587/0x760 [ 981.577998][T19216] __do_fast_syscall_32+0xb4/0x110 [ 981.578021][T19216] ? lockdep_hardirqs_on+0x9c/0x150 [ 981.578046][T19216] do_fast_syscall_32+0x34/0x80 [ 981.578068][T19216] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 981.578093][T19216] RIP: 0023:0xf704e539 [ 981.578111][T19216] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 981.578129][T19216] RSP: 002b:00000000f503e55c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 981.578150][T19216] RAX: ffffffffffffffda RBX: 0000000080800000 RCX: 0000000000800000 [ 981.578165][T19216] RDX: 0000000000000002 RSI: 0000000000042031 RDI: 00000000ffffffff [ 981.578178][T19216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 981.578190][T19216] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 981.578204][T19216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 981.578234][T19216] [ 981.909957][T12793] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 981.946682][T19223] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3970'. [ 981.991685][T19223] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3970'. [ 982.012188][T12793] usb 5-1: device descriptor read/8, error -71 [ 982.126762][T12793] usb usb5-port1: unable to enumerate USB device [ 983.272813][ T5891] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 983.588734][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 983.640594][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.658836][ T5891] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 983.717500][ T5891] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 983.755097][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.855107][ T5891] usb 4-1: config 0 descriptor?? [ 983.910417][T19267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3978'. [ 984.297377][T19273] fuse: Unknown parameter 'r000000000000040000' [ 984.342917][T19273] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3979'. [ 984.406669][T19275] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3980'. [ 984.568735][T19280] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3982'. [ 984.605201][T19283] FAULT_INJECTION: forcing a failure. [ 984.605201][T19283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 984.620637][T19283] CPU: 0 UID: 0 PID: 19283 Comm: syz.4.3983 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 984.620665][T19283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 984.620676][T19283] Call Trace: [ 984.620684][T19283] [ 984.620692][T19283] dump_stack_lvl+0x189/0x250 [ 984.620724][T19283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 984.620748][T19283] ? __pfx__printk+0x10/0x10 [ 984.620774][T19283] should_fail_ex+0x414/0x560 [ 984.620805][T19283] _copy_to_user+0x31/0xb0 [ 984.620828][T19283] simple_read_from_buffer+0xe1/0x170 [ 984.620853][T19283] proc_fail_nth_read+0x1df/0x250 [ 984.620878][T19283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 984.620904][T19283] ? rw_verify_area+0x258/0x650 [ 984.620921][T19283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 984.620944][T19283] vfs_read+0x1fd/0x980 [ 984.620966][T19283] ? __pfx___mutex_lock+0x10/0x10 [ 984.620984][T19283] ? __pfx_vfs_read+0x10/0x10 [ 984.621003][T19283] ? __fget_files+0x2a/0x420 [ 984.621027][T19283] ? __fget_files+0x3a0/0x420 [ 984.621047][T19283] ? __fget_files+0x2a/0x420 [ 984.621075][T19283] ksys_read+0x145/0x250 [ 984.621095][T19283] ? __pfx_ksys_read+0x10/0x10 [ 984.621114][T19283] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 984.621133][T19283] ? lockdep_hardirqs_on+0x9c/0x150 [ 984.621151][T19283] __do_fast_syscall_32+0xb4/0x110 [ 984.621170][T19283] ? lockdep_hardirqs_on+0x9c/0x150 [ 984.621189][T19283] do_fast_syscall_32+0x34/0x80 [ 984.621207][T19283] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 984.621227][T19283] RIP: 0023:0xf707e539 [ 984.621241][T19283] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 984.621255][T19283] RSP: 002b:00000000f506e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 984.621272][T19283] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f506e620 [ 984.621284][T19283] RDX: 000000000000000f RSI: 00000000f73e2ff4 RDI: 0000000000000000 [ 984.621294][T19283] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 984.621304][T19283] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 984.621314][T19283] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 984.621337][T19283] [ 984.952545][T19288] vlan3: entered promiscuous mode [ 984.959319][T19288] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode [ 984.967458][T19288] vlan3: entered allmulticast mode [ 984.972638][T19288] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 984.996415][ T5885] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 985.156194][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 985.163768][ T5885] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 985.172491][ T5885] usb 1-1: config 0 has no interface number 0 [ 985.181046][ T5885] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 985.191140][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.199246][ T5885] usb 1-1: Product: syz [ 985.203629][ T5885] usb 1-1: Manufacturer: syz [ 985.208411][ T5885] usb 1-1: SerialNumber: syz [ 985.216471][ T5891] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 985.218204][ T5885] usb 1-1: config 0 descriptor?? [ 985.237171][ T5885] smsc95xx v2.0.0 [ 985.366723][ T5891] usb 5-1: device descriptor read/64, error -71 [ 985.428701][T19289] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20003 [ 985.617302][ T5891] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 985.726523][ T5883] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 985.766726][ T5891] usb 5-1: device descriptor read/64, error -71 [ 985.877092][ T5891] usb usb5-port1: attempt power cycle [ 985.896349][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 985.907716][ T5883] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 985.915370][ T5883] usb 6-1: can't read configurations, error -61 [ 986.042048][ T5885] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 986.052479][ T5883] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 986.216363][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 986.216532][ T5891] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 986.231982][ T5883] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 986.240348][ T5883] usb 6-1: can't read configurations, error -61 [ 986.247217][ T5885] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 986.257272][ T5891] usb 5-1: device descriptor read/8, error -71 [ 986.260591][ T5883] usb usb6-port1: attempt power cycle [ 986.271246][ T5885] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 986.285807][ T5885] usb 1-1: USB disconnect, device number 40 [ 986.478644][T12793] usb 4-1: USB disconnect, device number 43 [ 986.508751][ T5891] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 986.537292][ T5891] usb 5-1: device descriptor read/8, error -71 [ 986.556931][T19294] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3986'. [ 986.606779][ T5883] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 986.639506][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 986.646764][ T5891] usb usb5-port1: unable to enumerate USB device [ 986.665425][ T5883] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 986.684268][ T5883] usb 6-1: can't read configurations, error -61 [ 986.696836][ T5885] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 986.718677][ T5885] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 986.830623][ T5883] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 986.870129][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 986.878465][ T5883] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 986.889189][ T5883] usb 6-1: can't read configurations, error -61 [ 986.895740][ T5883] usb usb6-port1: unable to enumerate USB device [ 986.962925][ T30] audit: type=1326 audit(1745830262.756:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19302 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 986.985227][ C1] vkms_vblank_simulate: vblank timer overrun [ 986.994609][ T30] audit: type=1326 audit(1745830262.756:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19302 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 987.016744][ C1] vkms_vblank_simulate: vblank timer overrun [ 987.023921][T12793] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 987.031887][ T30] audit: type=1326 audit(1745830262.786:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19302 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 987.054165][ C1] vkms_vblank_simulate: vblank timer overrun [ 987.067293][ T30] audit: type=1326 audit(1745830262.786:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19302 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 987.089906][ T30] audit: type=1326 audit(1745830262.786:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19302 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 987.114481][ T30] audit: type=1326 audit(1745830262.786:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19302 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=257 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 987.136632][ C1] vkms_vblank_simulate: vblank timer overrun [ 987.144420][ T30] audit: type=1326 audit(1745830262.836:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19302 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 987.166648][ C1] vkms_vblank_simulate: vblank timer overrun [ 987.184251][ T30] audit: type=1326 audit(1745830262.836:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19302 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 987.207790][ T30] audit: type=1326 audit(1745830262.856:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19302 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 987.237844][ T30] audit: type=1326 audit(1745830262.866:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19302 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 987.247937][T12793] usb 4-1: config 1 interface 0 has no altsetting 0 [ 987.287675][T12793] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 987.303683][T12793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.312547][T12793] usb 4-1: Product: syz [ 987.320530][T12793] usb 4-1: Manufacturer: syz [ 987.325182][T12793] usb 4-1: SerialNumber: syz [ 987.408007][T19310] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3992'. [ 987.469036][T19312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3993'. [ 987.487724][T19312] gretap0: entered promiscuous mode [ 987.495871][T19312] gretap0: left promiscuous mode [ 987.965392][T12793] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 988.253682][T19322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3995'. [ 988.438197][ C0] usblp0: nonzero write bulk status received: -71 [ 988.447663][ C0] usblp0: nonzero write bulk status received: -71 [ 988.454589][ T5885] usb 4-1: USB disconnect, device number 44 [ 988.456491][ T5891] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 988.772851][ T5891] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 988.863175][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.876390][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.886206][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 988.899536][ T5891] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 988.908777][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.333414][ T5891] usb 5-1: config 0 descriptor?? [ 989.692882][T19349] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4003'. [ 989.888479][T19357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.923722][T19357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.008130][T19328] usblp0: removed [ 990.136580][ T5891] usbhid 5-1:0.0: can't add hid device: -71 [ 990.143551][ T5891] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 990.168060][ T5891] usb 5-1: USB disconnect, device number 64 [ 990.191125][T19364] xt_socket: unknown flags 0x4 [ 991.963940][T19388] libceph: resolve '4' (ret=-3): failed [ 991.976503][T19390] libceph: resolve '4' (ret=-3): failed [ 993.076834][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.089151][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.213975][T19415] FAULT_INJECTION: forcing a failure. [ 993.213975][T19415] name failslab, interval 1, probability 0, space 0, times 0 [ 993.280076][T19415] CPU: 1 UID: 0 PID: 19415 Comm: syz.4.4024 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 993.280107][T19415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 993.280120][T19415] Call Trace: [ 993.280128][T19415] [ 993.280137][T19415] dump_stack_lvl+0x189/0x250 [ 993.280174][T19415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 993.280202][T19415] ? __pfx__printk+0x10/0x10 [ 993.280227][T19415] ? __pfx___might_resched+0x10/0x10 [ 993.280265][T19415] should_fail_ex+0x414/0x560 [ 993.280302][T19415] should_failslab+0xa8/0x100 [ 993.280331][T19415] __kmalloc_cache_noprof+0x70/0x3d0 [ 993.280355][T19415] ? copy_ctl_value_from_user+0x147/0x5b0 [ 993.280388][T19415] copy_ctl_value_from_user+0x147/0x5b0 [ 993.280423][T19415] snd_ctl_ioctl_compat+0x56c/0xdd0 [ 993.280455][T19415] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 993.280479][T19415] ? __fget_files+0x2a/0x420 [ 993.280510][T19415] ? __fget_files+0x3a0/0x420 [ 993.280533][T19415] ? __fget_files+0x2a/0x420 [ 993.280563][T19415] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 993.280593][T19415] __ia32_compat_sys_ioctl+0x551/0x840 [ 993.280619][T19415] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 993.280640][T19415] ? __fget_files+0x3a0/0x420 [ 993.280673][T19415] ? fput+0xa0/0xd0 [ 993.280701][T19415] ? ksys_write+0x1f0/0x250 [ 993.280731][T19415] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 993.280754][T19415] ? lockdep_hardirqs_on+0x9c/0x150 [ 993.280776][T19415] __do_fast_syscall_32+0xb4/0x110 [ 993.280807][T19415] ? lockdep_hardirqs_on+0x9c/0x150 [ 993.280831][T19415] do_fast_syscall_32+0x34/0x80 [ 993.280853][T19415] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 993.280877][T19415] RIP: 0023:0xf707e539 [ 993.280894][T19415] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 993.280911][T19415] RSP: 002b:00000000f506e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 993.280932][T19415] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c2c45513 [ 993.280947][T19415] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 993.280959][T19415] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 993.280971][T19415] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 993.280983][T19415] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 993.281013][T19415] [ 993.333455][T19419] sctp: [Deprecated]: syz.3.4027 (pid 19419) Use of int in maxseg socket option. [ 993.333455][T19419] Use struct sctp_assoc_value instead [ 993.746295][ T5891] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 993.900837][ T5891] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 993.917797][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.940551][ T5891] usb 4-1: Product: syz [ 993.950742][ T5891] usb 4-1: Manufacturer: syz [ 993.962650][ T5891] usb 4-1: SerialNumber: syz [ 993.977059][ T5883] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 993.982793][ T5891] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 994.006773][T16315] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 994.187836][ T5883] usb 5-1: config 0 has no interfaces? [ 994.196927][ T5883] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 994.217765][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.237564][ T5883] usb 5-1: Product: syz [ 994.244071][ T5883] usb 5-1: Manufacturer: syz [ 994.267258][ T5883] usb 5-1: SerialNumber: syz [ 994.275679][ T5883] usb 5-1: config 0 descriptor?? [ 994.506293][T19429] openvswitch: netlink: Message has -1 unknown bytes. [ 994.661879][ T5883] usb 4-1: USB disconnect, device number 45 [ 995.066472][T16315] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 995.140117][T16315] ath9k_htc: Failed to initialize the device [ 995.758692][ T5883] usb 4-1: ath9k_htc: USB layer deinitialized [ 996.024206][T19460] can: request_module (can-proto-3) failed. [ 996.183752][T19469] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4041'. [ 996.246339][T15697] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 996.386225][T15697] usb 6-1: device descriptor read/64, error -71 [ 996.666228][T15697] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 997.122542][ T5885] usb 5-1: USB disconnect, device number 65 [ 997.224101][T19485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4046'. [ 997.236467][T15697] usb 6-1: device descriptor read/64, error -71 [ 997.255298][T19485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4046'. [ 997.356728][T15697] usb usb6-port1: attempt power cycle [ 997.636427][T19498] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4052'. [ 997.659310][ T5891] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 997.736251][T15697] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 997.746196][T16315] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 997.766848][T15697] usb 6-1: device descriptor read/8, error -71 [ 997.817198][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 997.824665][ T5891] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 997.837933][ T5891] usb 5-1: config 179 has no interface number 0 [ 997.845219][ T5891] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 997.862049][ T5891] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 997.881323][ T5891] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 997.893588][ T5891] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 997.913389][ T5891] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 997.931245][T16315] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 997.941672][ T5891] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 997.946703][ T5885] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 997.951292][T16315] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 997.971229][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.982844][T16315] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 997.995839][T19489] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 998.011082][T16315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.026543][T15697] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 998.059927][T15697] usb 6-1: device descriptor read/8, error -71 [ 998.074879][T16315] usb 1-1: config 0 descriptor?? [ 998.136506][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 998.176816][T15697] usb usb6-port1: unable to enumerate USB device [ 998.188063][ T5885] usb 4-1: config 135 has an invalid interface number: 170 but max is 0 [ 998.222701][ T5885] usb 4-1: config 135 has no interface number 0 [ 998.236139][ T5885] usb 4-1: config 135 interface 170 altsetting 128 bulk endpoint 0x7 has invalid maxpacket 32 [ 998.266916][ T5885] usb 4-1: config 135 interface 170 altsetting 128 has a duplicate endpoint with address 0x7, skipping [ 998.284336][T16315] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input53 [ 998.307527][ T5885] usb 4-1: config 135 interface 170 has no altsetting 0 [ 998.398764][T15697] usb 1-1: USB disconnect, device number 41 [ 998.485592][T19489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.836699][T19489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.078850][ C1] [ 999.081243][ C1] ======================================================== [ 999.089069][ C1] WARNING: possible irq lock inversion dependency detected [ 999.096407][ C1] 6.15.0-rc4-syzkaller #0 Not tainted [ 999.096435][T15697] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 999.101960][ C1] -------------------------------------------------------- [ 999.101973][ C1] kworker/1:1H/12302 just changed the state of lock: [ 999.101987][ C1] ffff88807d155230 (&dev->event_lock#2){..-.}-{3:3}, at: input_event+0x7a/0xc0 [ 999.102060][ C1] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 999.102073][ C1] (tasklist_lock){.+.+}-{3:3} [ 999.102095][ C1] [ 999.102095][ C1] [ 999.102095][ C1] and interrupts could create inverse lock ordering between them. [ 999.102095][ C1] [ 999.102107][ C1] [ 999.102107][ C1] other info that might help us debug this: [ 999.102116][ C1] Chain exists of: [ 999.102116][ C1] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 999.102116][ C1] [ 999.102164][ C1] Possible interrupt unsafe locking scenario: [ 999.102164][ C1] [ 999.102173][ C1] CPU0 CPU1 [ 999.102181][ C1] ---- ---- [ 999.102189][ C1] lock(tasklist_lock); [ 999.102205][ C1] local_irq_disable(); [ 999.102215][ C1] lock(&dev->event_lock#2); [ 999.219326][ C1] lock(&client->buffer_lock); [ 999.226715][ C1] [ 999.230179][ C1] lock(&dev->event_lock#2); [ 999.235054][ C1] [ 999.235054][ C1] *** DEADLOCK *** [ 999.235054][ C1] [ 999.243215][ C1] 4 locks held by kworker/1:1H/12302: [ 999.248621][ C1] #0: ffff88801a081148 ((wq_completion)events_highpri){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 999.261245][ C1] #1: ffffc90004ee7c60 ((work_completion)(&vmidi->output_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 999.273893][ C1] #2: ffff88802f61a8f0 (&grp->list_mutex/1){.+.+}-{4:4}, at: __deliver_to_subscribers+0x100/0x670 [ 999.284876][ C1] #3: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: xpad_irq_in+0xb2e/0x2500 [ 999.294357][ C1] [ 999.294357][ C1] the shortest dependencies between 2nd lock and 1st lock: [ 999.303785][ C1] -> (tasklist_lock){.+.+}-{3:3} { [ 999.309391][ C1] HARDIRQ-ON-R at: [ 999.313737][ C1] lock_acquire+0x120/0x360 [ 999.320627][ C1] _raw_read_lock+0x36/0x50 [ 999.327503][ C1] __do_wait+0xde/0x740 [ 999.334027][ C1] do_wait+0x1f8/0x520 [ 999.340483][ C1] kernel_wait+0xab/0x170 [ 999.347182][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 999.355553][ C1] process_scheduled_works+0xadb/0x17a0 [ 999.363510][ C1] worker_thread+0x8a0/0xda0 [ 999.370481][ C1] kthread+0x70e/0x8a0 [ 999.376930][ C1] ret_from_fork+0x4b/0x80 [ 999.383719][ C1] ret_from_fork_asm+0x1a/0x30 [ 999.390855][ C1] SOFTIRQ-ON-R at: [ 999.395210][ C1] lock_acquire+0x120/0x360 [ 999.402101][ C1] _raw_read_lock+0x36/0x50 [ 999.408986][ C1] __do_wait+0xde/0x740 [ 999.415702][ C1] do_wait+0x1f8/0x520 [ 999.422151][ C1] kernel_wait+0xab/0x170 [ 999.428852][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 999.437129][ C1] process_scheduled_works+0xadb/0x17a0 [ 999.445059][ C1] worker_thread+0x8a0/0xda0 [ 999.452013][ C1] kthread+0x70e/0x8a0 [ 999.458471][ C1] ret_from_fork+0x4b/0x80 [ 999.465259][ C1] ret_from_fork_asm+0x1a/0x30 [ 999.472393][ C1] INITIAL USE at: [ 999.476650][ C1] lock_acquire+0x120/0x360 [ 999.483427][ C1] _raw_write_lock_irq+0xa2/0xf0 [ 999.490760][ C1] copy_process+0x21d5/0x3b80 [ 999.497715][ C1] kernel_clone+0x21e/0x870 [ 999.504503][ C1] user_mode_thread+0xdd/0x140 [ 999.511558][ C1] rest_init+0x23/0x300 [ 999.517994][ C1] start_kernel+0x470/0x4f0 [ 999.524861][ C1] x86_64_start_reservations+0x2a/0x30 [ 999.532597][ C1] x86_64_start_kernel+0x66/0x70 [ 999.539834][ C1] common_startup_64+0x13e/0x147 [ 999.547080][ C1] INITIAL READ USE at: [ 999.551921][ C1] lock_acquire+0x120/0x360 [ 999.559264][ C1] _raw_read_lock+0x36/0x50 [ 999.566763][ C1] __do_wait+0xde/0x740 [ 999.573848][ C1] do_wait+0x1f8/0x520 [ 999.580651][ C1] kernel_wait+0xab/0x170 [ 999.587700][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 999.596347][ C1] process_scheduled_works+0xadb/0x17a0 [ 999.604630][ C1] worker_thread+0x8a0/0xda0 [ 999.611962][ C1] kthread+0x70e/0x8a0 [ 999.618836][ C1] ret_from_fork+0x4b/0x80 [ 999.625968][ C1] ret_from_fork_asm+0x1a/0x30 [ 999.633880][ C1] } [ 999.636827][ C1] ... key at: [] tasklist_lock+0x18/0x40 [ 999.645002][ C1] ... acquired at: [ 999.649169][ C1] lock_acquire+0x120/0x360 [ 999.653973][ C1] _raw_read_lock+0x36/0x50 [ 999.658681][ C1] send_sigurg+0x12b/0x420 [ 999.663417][ C1] sk_send_sigurg+0x6c/0x2e0 [ 999.668237][ C1] queue_oob+0x3d9/0x4e0 [ 999.672667][ C1] unix_stream_sendmsg+0xa41/0xb60 [ 999.677986][ C1] __sock_sendmsg+0x219/0x270 [ 999.682852][ C1] ____sys_sendmsg+0x52d/0x830 [ 999.687799][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 999.692836][ C1] __sys_sendmmsg+0x28e/0x430 [ 999.697710][ C1] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 999.703542][ C1] __do_fast_syscall_32+0xb4/0x110 [ 999.708893][ C1] do_fast_syscall_32+0x34/0x80 [ 999.713977][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 999.720532][ C1] [ 999.722885][ C1] -> (&f_owner->lock){....}-{3:3} { [ 999.728401][ C1] INITIAL USE at: [ 999.732585][ C1] lock_acquire+0x120/0x360 [ 999.739197][ C1] _raw_write_lock_irq+0xa2/0xf0 [ 999.746244][ C1] __f_setown+0x67/0x370 [ 999.752621][ C1] do_fcntl+0x1611/0x1910 [ 999.759323][ C1] do_compat_fcntl64+0x484/0x720 [ 999.766415][ C1] __do_fast_syscall_32+0xb4/0x110 [ 999.773659][ C1] do_fast_syscall_32+0x34/0x80 [ 999.780720][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 999.789173][ C1] INITIAL READ USE at: [ 999.793797][ C1] lock_acquire+0x120/0x360 [ 999.800861][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 999.808721][ C1] send_sigio+0x38/0x370 [ 999.815532][ C1] kill_fasync+0x24d/0x4d0 [ 999.822509][ C1] lease_break_callback+0x26/0x30 [ 999.830266][ C1] __break_lease+0x6a2/0x1620 [ 999.837494][ C1] vfs_truncate+0x428/0x520 [ 999.844554][ C1] do_sys_truncate+0xdb/0x190 [ 999.851788][ C1] __ia32_compat_sys_truncate+0x5b/0x70 [ 999.859870][ C1] __do_fast_syscall_32+0xb4/0x110 [ 999.867542][ C1] do_fast_syscall_32+0x34/0x80 [ 999.874957][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 999.883933][ C1] } [ 999.886704][ C1] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 999.895826][ C1] ... acquired at: [ 999.900082][ C1] lock_acquire+0x120/0x360 [ 999.904795][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 999.910288][ C1] send_sigio+0x38/0x370 [ 999.914743][ C1] kill_fasync+0x24d/0x4d0 [ 999.919368][ C1] lease_break_callback+0x26/0x30 [ 999.924585][ C1] __break_lease+0x6a2/0x1620 [ 999.929464][ C1] vfs_truncate+0x428/0x520 [ 999.934167][ C1] do_sys_truncate+0xdb/0x190 [ 999.939127][ C1] __ia32_compat_sys_truncate+0x5b/0x70 [ 999.944939][ C1] __do_fast_syscall_32+0xb4/0x110 [ 999.950253][ C1] do_fast_syscall_32+0x34/0x80 [ 999.955432][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 999.961967][ C1] [ 999.964508][ C1] -> (&new->fa_lock){....}-{3:3} { [ 999.969874][ C1] INITIAL USE at: [ 999.973983][ C1] lock_acquire+0x120/0x360 [ 999.980528][ C1] _raw_write_lock_irq+0xa2/0xf0 [ 999.987416][ C1] fasync_remove_entry+0xf1/0x1c0 [ 999.994399][ C1] __fput+0x89f/0xa70 [ 1000.000343][ C1] task_work_run+0x1d1/0x260 [ 1000.006975][ C1] resume_user_mode_work+0x5e/0x80 [ 1000.014120][ C1] syscall_exit_to_user_mode+0x9a/0x120 [ 1000.021688][ C1] __do_fast_syscall_32+0xc1/0x110 [ 1000.028850][ C1] do_fast_syscall_32+0x34/0x80 [ 1000.035729][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1000.044367][ C1] INITIAL READ USE at: [ 1000.048902][ C1] lock_acquire+0x120/0x360 [ 1000.055795][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 1000.063515][ C1] kill_fasync+0x199/0x4d0 [ 1000.070321][ C1] evdev_pass_values+0x627/0xbd0 [ 1000.077727][ C1] evdev_events+0x1e6/0x340 [ 1000.085746][ C1] input_pass_values+0x285/0x890 [ 1000.093055][ C1] input_event_dispose+0x330/0x6b0 [ 1000.100537][ C1] input_inject_event+0x1fe/0x320 [ 1000.108193][ C1] evdev_write+0x2fc/0x480 [ 1000.114991][ C1] vfs_write+0x27b/0xa90 [ 1000.121606][ C1] ksys_write+0x145/0x250 [ 1000.128302][ C1] __do_fast_syscall_32+0xb4/0x110 [ 1000.135792][ C1] do_fast_syscall_32+0x34/0x80 [ 1000.143011][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1000.151704][ C1] } [ 1000.154406][ C1] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1000.163820][ C1] ... acquired at: [ 1000.168026][ C1] lock_acquire+0x120/0x360 [ 1000.172731][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 1000.178241][ C1] kill_fasync+0x199/0x4d0 [ 1000.182862][ C1] evdev_pass_values+0x627/0xbd0 [ 1000.188031][ C1] evdev_events+0x1e6/0x340 [ 1000.192737][ C1] input_pass_values+0x285/0x890 [ 1000.197905][ C1] input_event_dispose+0x330/0x6b0 [ 1000.203258][ C1] input_inject_event+0x1fe/0x320 [ 1000.208835][ C1] evdev_write+0x2fc/0x480 [ 1000.213482][ C1] vfs_write+0x27b/0xa90 [ 1000.217929][ C1] ksys_write+0x145/0x250 [ 1000.222581][ C1] __do_fast_syscall_32+0xb4/0x110 [ 1000.227996][ C1] do_fast_syscall_32+0x34/0x80 [ 1000.233121][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1000.240303][ C1] [ 1000.243682][ C1] -> (&client->buffer_lock){....}-{3:3} { [ 1000.250250][ C1] INITIAL USE at: [ 1000.255507][ C1] lock_acquire+0x120/0x360 [ 1000.262393][ C1] _raw_spin_lock+0x2e/0x40 [ 1000.269067][ C1] evdev_pass_values+0xb9/0xbd0 [ 1000.275860][ C1] evdev_events+0x1e6/0x340 [ 1000.282127][ C1] input_pass_values+0x285/0x890 [ 1000.288844][ C1] input_event_dispose+0x330/0x6b0 [ 1000.295810][ C1] input_inject_event+0x1fe/0x320 [ 1000.302595][ C1] evdev_write+0x2fc/0x480 [ 1000.308887][ C1] vfs_write+0x27b/0xa90 [ 1000.314901][ C1] ksys_write+0x145/0x250 [ 1000.320979][ C1] __do_fast_syscall_32+0xb4/0x110 [ 1000.328258][ C1] do_fast_syscall_32+0x34/0x80 [ 1000.334994][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1000.343346][ C1] } [ 1000.346029][ C1] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1000.354391][ C1] ... acquired at: [ 1000.358423][ C1] lock_acquire+0x120/0x360 [ 1000.363195][ C1] _raw_spin_lock+0x2e/0x40 [ 1000.367909][ C1] evdev_pass_values+0xb9/0xbd0 [ 1000.372980][ C1] evdev_events+0x1e6/0x340 [ 1000.377696][ C1] input_pass_values+0x285/0x890 [ 1000.382845][ C1] input_event_dispose+0x330/0x6b0 [ 1000.388165][ C1] input_inject_event+0x1fe/0x320 [ 1000.393386][ C1] evdev_write+0x2fc/0x480 [ 1000.398015][ C1] vfs_write+0x27b/0xa90 [ 1000.402462][ C1] ksys_write+0x145/0x250 [ 1000.407024][ C1] __do_fast_syscall_32+0xb4/0x110 [ 1000.412335][ C1] do_fast_syscall_32+0x34/0x80 [ 1000.417389][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1000.423921][ C1] [ 1000.426273][ C1] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1000.431892][ C1] IN-SOFTIRQ-W at: [ 1000.435889][ C1] lock_acquire+0x120/0x360 [ 1000.442081][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1000.449231][ C1] input_event+0x7a/0xc0 [ 1000.455153][ C1] xpad360_process_packet+0x1fe/0xb30 [ 1000.462197][ C1] xpad_irq_in+0x1523/0x2500 [ 1000.468461][ C1] __usb_hcd_giveback_urb+0x417/0x690 [ 1000.475536][ C1] dummy_timer+0x862/0x4550 [ 1000.481733][ C1] __hrtimer_run_queues+0x529/0xc60 [ 1000.488652][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1000.495465][ C1] handle_softirqs+0x283/0x870 [ 1000.501935][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1000.508201][ C1] irq_exit_rcu+0x9/0x30 [ 1000.514104][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1000.521496][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1000.529134][ C1] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1000.536542][ C1] snd_seq_timer_get_cur_tick+0x4a/0x80 [ 1000.543777][ C1] __deliver_to_subscribers+0x2db/0x670 [ 1000.551020][ C1] snd_seq_deliver_event+0x1c6/0x4c0 [ 1000.558078][ C1] snd_seq_kernel_client_dispatch+0x201/0x300 [ 1000.565828][ C1] snd_vmidi_output_work+0x24e/0x410 [ 1000.572801][ C1] process_scheduled_works+0xadb/0x17a0 [ 1000.580026][ C1] worker_thread+0x8a0/0xda0 [ 1000.586283][ C1] kthread+0x70e/0x8a0 [ 1000.592022][ C1] ret_from_fork+0x4b/0x80 [ 1000.598115][ C1] ret_from_fork_asm+0x1a/0x30 [ 1000.604560][ C1] INITIAL USE at: [ 1000.608472][ C1] lock_acquire+0x120/0x360 [ 1000.614564][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1000.621347][ C1] input_inject_event+0xab/0x320 [ 1000.627868][ C1] kbd_led_trigger_activate+0xbc/0x100 [ 1000.634919][ C1] led_trigger_set+0x52a/0x950 [ 1000.641263][ C1] led_trigger_set_default+0x215/0x250 [ 1000.648329][ C1] led_classdev_register_ext+0x73d/0x930 [ 1000.655639][ C1] input_leds_connect+0x517/0x790 [ 1000.662268][ C1] input_register_device+0xceb/0x10b0 [ 1000.669318][ C1] atkbd_connect+0x70e/0x9c0 [ 1000.675502][ C1] serio_driver_probe+0x7f/0xa0 [ 1000.681950][ C1] really_probe+0x26a/0x9a0 [ 1000.688050][ C1] __driver_probe_device+0x18c/0x2f0 [ 1000.694919][ C1] driver_probe_device+0x4f/0x430 [ 1000.701630][ C1] __driver_attach+0x452/0x700 [ 1000.708078][ C1] bus_for_each_dev+0x230/0x2b0 [ 1000.714518][ C1] serio_handle_event+0x1a2/0x860 [ 1000.721129][ C1] process_scheduled_works+0xadb/0x17a0 [ 1000.728348][ C1] worker_thread+0x8a0/0xda0 [ 1000.734528][ C1] kthread+0x70e/0x8a0 [ 1000.740198][ C1] ret_from_fork+0x4b/0x80 [ 1000.746204][ C1] ret_from_fork_asm+0x1a/0x30 [ 1000.752565][ C1] } [ 1000.755075][ C1] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 1000.764129][ C1] ... acquired at: [ 1000.767942][ C1] mark_lock+0x11b/0x190 [ 1000.772407][ C1] __lock_acquire+0x664/0xd20 [ 1000.777468][ C1] lock_acquire+0x120/0x360 [ 1000.782183][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1000.787581][ C1] input_event+0x7a/0xc0 [ 1000.792046][ C1] xpad360_process_packet+0x1fe/0xb30 [ 1000.797771][ C1] xpad_irq_in+0x1523/0x2500 [ 1000.802641][ C1] __usb_hcd_giveback_urb+0x417/0x690 [ 1000.808233][ C1] dummy_timer+0x862/0x4550 [ 1000.812973][ C1] __hrtimer_run_queues+0x529/0xc60 [ 1000.818464][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1000.823878][ C1] handle_softirqs+0x283/0x870 [ 1000.829005][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1000.833863][ C1] irq_exit_rcu+0x9/0x30 [ 1000.838300][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1000.844162][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1000.850351][ C1] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1000.856275][ C1] snd_seq_timer_get_cur_tick+0x4a/0x80 [ 1000.862038][ C1] __deliver_to_subscribers+0x2db/0x670 [ 1000.867825][ C1] snd_seq_deliver_event+0x1c6/0x4c0 [ 1000.873309][ C1] snd_seq_kernel_client_dispatch+0x201/0x300 [ 1000.879708][ C1] snd_vmidi_output_work+0x24e/0x410 [ 1000.885236][ C1] process_scheduled_works+0xadb/0x17a0 [ 1000.891009][ C1] worker_thread+0x8a0/0xda0 [ 1000.895802][ C1] kthread+0x70e/0x8a0 [ 1000.900271][ C1] ret_from_fork+0x4b/0x80 [ 1000.905044][ C1] ret_from_fork_asm+0x1a/0x30 [ 1000.910113][ C1] [ 1000.912445][ C1] [ 1000.912445][ C1] stack backtrace: [ 1000.918654][ C1] CPU: 1 UID: 0 PID: 12302 Comm: kworker/1:1H Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 1000.918686][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1000.918706][ C1] Workqueue: events_highpri snd_vmidi_output_work [ 1000.918738][ C1] Call Trace: [ 1000.918750][ C1] [ 1000.918764][ C1] dump_stack_lvl+0x189/0x250 [ 1000.918803][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1000.918833][ C1] ? __pfx__printk+0x10/0x10 [ 1000.918857][ C1] print_irq_inversion_bug+0x1d2/0x1e0 [ 1000.918886][ C1] mark_lock_irq+0x35f/0x390 [ 1000.918920][ C1] mark_lock+0x11b/0x190 [ 1000.918955][ C1] __lock_acquire+0x664/0xd20 [ 1000.919014][ C1] ? input_event+0x7a/0xc0 [ 1000.919034][ C1] lock_acquire+0x120/0x360 [ 1000.919055][ C1] ? input_event+0x7a/0xc0 [ 1000.919083][ C1] ? __queue_work+0xc80/0xfe0 [ 1000.919108][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1000.919142][ C1] ? input_event+0x7a/0xc0 [ 1000.919162][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1000.919187][ C1] ? xpad_irq_in+0xb2e/0x2500 [ 1000.919206][ C1] input_event+0x7a/0xc0 [ 1000.919233][ C1] xpad360_process_packet+0x1fe/0xb30 [ 1000.919261][ C1] ? xpad_irq_in+0xb2e/0x2500 [ 1000.919292][ C1] xpad_irq_in+0x1523/0x2500 [ 1000.919316][ C1] ? kcov_remote_start+0x97/0x7f0 [ 1000.919337][ C1] __usb_hcd_giveback_urb+0x417/0x690 [ 1000.919363][ C1] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 1000.919401][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 1000.919439][ C1] ? usb_hcd_giveback_urb+0x10e/0x420 [ 1000.919470][ C1] dummy_timer+0x862/0x4550 [ 1000.919494][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1000.919534][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1000.919572][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1000.919601][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1000.919626][ C1] __hrtimer_run_queues+0x529/0xc60 [ 1000.919661][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1000.919691][ C1] ? read_tsc+0x9/0x20 [ 1000.919707][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1000.919751][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1000.919786][ C1] handle_softirqs+0x283/0x870 [ 1000.919822][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1000.919839][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1000.919867][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1000.919899][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1000.919918][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1000.919941][ C1] irq_exit_rcu+0x9/0x30 [ 1000.919959][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1000.919991][ C1] [ 1000.919997][ C1] [ 1000.920003][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1000.920027][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 1000.920064][ C1] Code: 74 05 e8 8b 11 6f f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 73 93 38 f6 65 8b 05 5c 15 1d 07 85 c0 74 40 48 c7 04 24 0e 36 [ 1000.920084][ C1] RSP: 0018:ffffc90004ee77c0 EFLAGS: 00000206 [ 1000.920105][ C1] RAX: ef8c2bb5b0156a00 RBX: 0000000000000a02 RCX: ef8c2bb5b0156a00 [ 1000.920118][ C1] RDX: 0000000000000007 RSI: ffffffff8d748fa1 RDI: 0000000000000001 [ 1000.920129][ C1] RBP: ffffc90004ee7850 R08: ffffffff8f7ec977 R09: 1ffffffff1efd92e [ 1000.920141][ C1] R10: dffffc0000000000 R11: fffffbfff1efd92f R12: dffffc0000000000 [ 1000.920154][ C1] R13: ffff88802f61a868 R14: ffff888029fbf088 R15: 1ffff920009dcef8 [ 1000.920178][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1000.920215][ C1] ? __lock_acquire+0xaac/0xd20 [ 1000.920287][ C1] snd_seq_timer_get_cur_tick+0x4a/0x80 [ 1000.920309][ C1] __deliver_to_subscribers+0x2db/0x670 [ 1000.920363][ C1] ? __pfx___deliver_to_subscribers+0x10/0x10 [ 1000.920395][ C1] ? do_raw_read_unlock+0x3d/0x80 [ 1000.920420][ C1] ? _raw_read_unlock+0x28/0x50 [ 1000.920448][ C1] ? snd_seq_port_use_ptr+0x101/0x130 [ 1000.920468][ C1] snd_seq_deliver_event+0x1c6/0x4c0 [ 1000.920489][ C1] ? snd_seq_kernel_client_dispatch+0x17a/0x300 [ 1000.920522][ C1] snd_seq_kernel_client_dispatch+0x201/0x300 [ 1000.920552][ C1] snd_vmidi_output_work+0x24e/0x410 [ 1000.920586][ C1] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 1000.920609][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1000.920631][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 1000.920668][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 1000.920702][ C1] process_scheduled_works+0xadb/0x17a0 [ 1000.920745][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1000.920776][ C1] worker_thread+0x8a0/0xda0 [ 1000.920800][ C1] ? __kthread_parkme+0x7b/0x200 [ 1000.920827][ C1] kthread+0x70e/0x8a0 [ 1000.920852][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1000.920871][ C1] ? __pfx_kthread+0x10/0x10 [ 1000.920892][ C1] ? __pfx_kthread+0x10/0x10 [ 1000.920909][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1000.920932][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1000.921030][ C1] ? __pfx_kthread+0x10/0x10 [ 1000.921132][ C1] ret_from_fork+0x4b/0x80 [ 1000.921184][ C1] ? __pfx_kthread+0x10/0x10 [ 1000.921210][ C1] ret_from_fork_asm+0x1a/0x30 [ 1000.921240][ C1] [ 1001.646211][T15697] usb 1-1: Using ep0 maxpacket: 32 [ 1001.961456][ T5885] usb 4-1: New USB device found, idVendor=0c45, idProduct=60ec, bcdDevice=22.51 [ 1001.993269][ T5891] usb 5-1: USB disconnect, device number 66 [ 1001.993322][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1002.003245][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.007555][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1002.048229][T15697] usb 1-1: device descriptor read/all, error -71 [ 1002.193472][ T5885] usb 4-1: Product: syz [ 1002.203470][ T5885] usb 4-1: can't set config #135, error -71 [ 1002.222300][ T5885] usb 4-1: USB disconnect, device number 46