last executing test programs: 10.607041105s ago: executing program 4 (id=725): creat(0x0, 0x6) timer_delete(0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2000, 0x0, 0x0, 0x4, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x2, 0x0, 0x800000000000000) 10.215384908s ago: executing program 4 (id=726): pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xffffffffffffffff) syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) 9.934103562s ago: executing program 3 (id=730): rseq(&(0x7f0000000340), 0x20, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x18, &(0x7f00000008c0)=ANY=[@ANYBLOB="18290000", @ANYRES32, @ANYBLOB="000000000002000018190000", @ANYRES32=0x1, @ANYBLOB="0000000000000000cc2b0400fcffffffb7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES64, @ANYBLOB="0000000000000000b70500000800000085000000a500000018130000", @ANYRES32=0x1, @ANYBLOB="00000000000000f891304b7a", @ANYRES32], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x7a, &(0x7f0000000240)=""/122, 0x41100, 0x5a, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x7, 0x1bc, 0x367607f2}, 0x10, 0x1a035, 0xffffffffffffffff, 0x8, 0x0, &(0x7f00000006c0)=[{0x0, 0x2, 0x8}, {0x5, 0x4, 0xc, 0x5}, {0x5, 0x3, 0x9, 0xa}, {0x4, 0x2, 0xd, 0xb}, {0x1, 0x4, 0x2}, {0x5, 0x5, 0xc, 0x2}, {0x0, 0x9, 0x10, 0xb}, {0x2, 0x4, 0xe, 0xb}], 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x80b8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x56, 0xf4, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000180)={0x8, 0xffffffffffffffff, 0x1}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32=0x1, @ANYRES32], 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44008) futex(&(0x7f0000000140)=0xfffffffc, 0x5, 0x0, 0x0, &(0x7f00000001c0), 0xfffdffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) r3 = memfd_create(&(0x7f0000002180)='\xa3\xcb\x04=\x827\xe7\x81S\bD\xd8K| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xa5\x9e\x1f`\x05q5\xee\xde\xdf\xba\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x4) ftruncate(r3, 0x200000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0xff, 0x10, 0x9, 0x20, 0x5}, 0x20) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) 7.79552s ago: executing program 1 (id=737): socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x38) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000040)=0x2eb4, 0x2000007ff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x8260c480, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11894000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='\b') madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000f609010203000000000001000010"], 0x14}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000280), 0x40000000, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 7.606012643s ago: executing program 0 (id=738): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3a366d1c952a243b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2003, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x2000000, 0x0, 0x5, 0x1002, 0x7, 0x3, 0x9, 0x7}, 0x0, &(0x7f0000000100)={0x9, 0x1ff, 0x56, 0x0, 0x14000000000, 0x5, 0x5, 0x8}, &(0x7f0000000140), 0x0) 7.58054913s ago: executing program 4 (id=739): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}}, 0x40080) r4 = socket(0x3d, 0x5, 0xcbdd) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'bond0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newtfilter={0xaa4, 0x2c, 0x0, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff3}, {0xf, 0xa}, {0xfff2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x604, 0x2, [@TCA_CGROUP_POLICE={0x458, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x4ff, 0x1, 0x6, 0xffffffff, 0x4, 0xffff, 0x1, 0x8, 0x7fff, 0x7, 0x9, 0x2, 0x6, 0x9, 0x1, 0x9, 0xfffffff7, 0x9, 0x10001, 0x8, 0x8, 0x1, 0x9, 0xa4, 0xff, 0x0, 0x40000000, 0x26f, 0x2, 0x9df1, 0x9, 0x6, 0x96, 0x9, 0x6, 0x4, 0x1000, 0x6, 0x903c, 0x0, 0xf81, 0x1000, 0x7, 0x8, 0x4, 0x2, 0xc2, 0x1, 0x9, 0x7, 0x7, 0x101, 0x0, 0x5aa, 0x6, 0x6, 0x401, 0x0, 0x2cc3, 0x4, 0xf, 0x7, 0xb, 0xc, 0x614a2cb5, 0x80000001, 0x6, 0x7, 0x7, 0x4, 0x400, 0x2, 0xfffffff3, 0x5, 0x4, 0x2, 0x5, 0x4, 0x2, 0x70adb9d6, 0x0, 0x1000, 0x7, 0x9, 0x3b, 0x5, 0xfffffbff, 0xf9, 0x2, 0x7, 0x9, 0x5, 0x2, 0x80, 0x8, 0x6, 0x7f, 0xb, 0xe, 0x0, 0x5, 0x8, 0xb4b5a6f3, 0x10001, 0x3f, 0x639, 0x5, 0xb71a, 0x96, 0xbd, 0xff, 0x7, 0xff, 0x401, 0x3799b308, 0x5, 0x6, 0x2, 0x5, 0x8, 0x9, 0xa, 0xd, 0x5, 0x8e, 0xb, 0x5, 0x4, 0x1, 0x4, 0x3, 0x9, 0x1ff, 0x347, 0x1ff, 0xfdf0, 0x81a, 0xffff8000, 0x0, 0x8, 0x3, 0x7, 0x4, 0x5, 0x800, 0xc8, 0x1ff, 0x8, 0x88, 0x800, 0xd, 0x6, 0x4, 0x0, 0x0, 0x1, 0x5fc1, 0x3ff, 0x6, 0x2, 0x5f, 0x7fff, 0x800, 0x3, 0x8, 0x9, 0x2, 0x81, 0x5, 0x1ee, 0x31, 0x7fff, 0x3, 0x2, 0x40, 0x4, 0x353, 0xcf9c6b64, 0x8, 0x5b00, 0x8924, 0x8, 0x6, 0x6, 0x2, 0xd, 0x3, 0x80000001, 0xa44, 0x0, 0x6, 0x2000000, 0x7, 0x8, 0x5, 0x4e, 0xc, 0x7, 0xffff0001, 0x0, 0x592, 0x2, 0x5, 0x40, 0x3, 0x16, 0xfffffffc, 0x7, 0x1ff, 0x9, 0x8, 0x6, 0x7bb, 0x4, 0x5, 0x7, 0x3, 0x8, 0x5, 0x3, 0x9, 0x0, 0x80000000, 0x3, 0x2, 0x7fffffff, 0x80000000, 0x5, 0xe45, 0x2, 0x3, 0x7, 0xf, 0xfffffffe, 0x12000000, 0x2, 0x3, 0xec, 0x40, 0x7, 0xee2a, 0x4, 0x8, 0x5, 0x193, 0x2, 0x7, 0x2, 0x2af, 0x1, 0x1000, 0x4, 0xfff, 0x3, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xae}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x5, 0x0, 0x7, 0x7ff, {0x3, 0x2, 0xbef, 0x3, 0x0, 0x7c240cb}, {0x69, 0x0, 0xf801, 0x1, 0x4, 0x4}, 0x50, 0x56, 0x1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}]}, @TCA_CGROUP_ACT={0x1a4, 0x1, [@m_csum={0x118, 0x1d, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x8, 0x4, 0x73c, 0x20000000}, 0x60}}]}, {0xce, 0x6, "460fd62c0ba2a59cf4c4910180b939c18c0843ba6755273ac73d4c9c4339a9289fd85aa7b463895ebb04928e4ad17bdc84bf77a0f30d111f0e2e6de358eb3de963a66b8daada562b997a26d3f14d41f6487ad7d1155d79b22af6de001fb03abaf5902cf41b11d51ac510b84dc8d991113ad472c161a8a16f994d729cdd042471d0774f7635d405962a886b9e84623c074688449293992f0fb023782a641d18f46d23ffd7821fe5611fd34f2a0041addcdb7c29ed4f198bc204537ea3bf17bb80fdbad8a5a4ebbedc7eee"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x88, 0x1f, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, @TCA_IFE_DMAC={0xa}]}, {0x39, 0x6, "94a6d228d614616aec77cdc055535afc3fe8a1e0d3eeff4d0284d00d4903d0300ad546197652d9c826af696a3f06a2e7a3b02321ab"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x6, 0xe}}, @TCA_RATE={0x6, 0x5, {0x1, 0xfb}}, @TCA_CHAIN={0x8, 0xb, 0x200}, @TCA_RATE={0x6, 0x5, {0xd8, 0x7}}, @filter_kind_options=@f_fw={{0x7}, {0x438, 0x2, [@TCA_FW_POLICE={0x434, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000000}, @TCA_POLICE_RATE={0x404, 0x2, [0xd56b, 0x0, 0x8, 0x8, 0x7, 0x3, 0x5, 0x3, 0x8, 0x836, 0x3, 0xe82, 0x8, 0x7, 0xffffff00, 0xf, 0x800, 0x0, 0x101, 0xb83, 0x6, 0x6, 0x7, 0x4, 0x7, 0x8, 0x9, 0x7, 0x0, 0x1, 0x7, 0xf56e, 0x5c20, 0xd00, 0x6, 0x401, 0x4, 0x1, 0x10, 0x1000, 0x8, 0x27, 0x2, 0x7, 0xfff, 0x10a, 0x100, 0x9, 0x7, 0x5, 0x0, 0x4, 0x7, 0x2, 0x3, 0xb3d9, 0x101, 0xd0, 0x4, 0x3, 0x2, 0x1ff, 0x4d54, 0x2, 0x4, 0xf, 0x6839, 0x4, 0x8, 0x0, 0x2, 0x11, 0x1, 0x7, 0x0, 0x40, 0x7, 0x8, 0x6, 0x79f, 0xffffffff, 0x80000001, 0x9, 0x1, 0x1, 0x3ff, 0x2, 0xab, 0x0, 0xfff, 0x8, 0x2, 0x10, 0x0, 0x4, 0x3bc, 0x1000, 0x40, 0x7ff, 0x80, 0x4fb0a4ce, 0x31, 0x52, 0x8, 0x3b61, 0xfffffffe, 0x2, 0x2, 0x4, 0x7646, 0x99, 0x40, 0x27ea, 0x0, 0x0, 0xf, 0x1, 0x3, 0x800, 0xfffffc00, 0x6, 0x9, 0x5, 0x101, 0xa, 0x5, 0x5, 0x1387c489, 0xfffeffff, 0x80000001, 0x8, 0x2, 0x3, 0x9, 0xfffffff7, 0x48, 0x6, 0x7fc00, 0x0, 0x5, 0x5, 0x7ff, 0x7, 0x71, 0x10, 0xe53d, 0x4, 0x4, 0x5, 0x1, 0x2, 0x4126, 0xe, 0x6, 0x4, 0x7, 0x6, 0x3, 0x1975, 0x7fff, 0x0, 0x40, 0x80, 0xf2cb83f, 0xa, 0x13f, 0x6, 0x76, 0xfff, 0x42ff434, 0x150eb9f6, 0x80000001, 0x8d04, 0x6, 0x0, 0x7, 0x3ff, 0x401, 0x761f57a3, 0x7, 0x6, 0x6, 0x0, 0x8, 0x2, 0xd8, 0x2, 0x101, 0xc26, 0xfffffffc, 0x8, 0x8, 0x7, 0x8, 0xb, 0x1, 0x10001, 0x3ff, 0x4, 0x101, 0x2, 0x2, 0x7, 0x9, 0x8, 0x4f, 0x4, 0x9, 0x6, 0x800, 0x1, 0x6, 0x1, 0x10001, 0x2, 0x90, 0xd87, 0xd, 0x2, 0x0, 0x2, 0x8000, 0x6, 0x4, 0xde, 0x5, 0x5, 0x6, 0x312, 0x10, 0x7, 0xb2, 0xc71, 0x3, 0x2, 0x10, 0xfffffffd, 0x5, 0xffff8001, 0x1, 0x6, 0x40, 0x2, 0x6, 0x200, 0x37a, 0x0, 0x200, 0x2dc, 0x8, 0xe87d, 0xcc92, 0x3, 0xc0dd, 0x430, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7d0}, @TCA_POLICE_RATE64={0xc, 0x8, 0x47}]}]}}, @TCA_RATE={0x6, 0x5, {0xd}}]}, 0xaa4}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x4000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0xffeb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x38, 0x1, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x2}, {0x4}, {0xc, 0x3f}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4884) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x40, 0x700, 0x0, 0xfce, {{0x17, 0x4, 0x0, 0x23, 0x5c, 0x64, 0x0, 0x3, 0x4, 0x0, @multicast1, @remote, {[@cipso={0x86, 0xa, 0xffffffffffffffff, [{0x2, 0x4, 'oW'}]}, @cipso={0x86, 0x2d, 0x0, [{0x2, 0x6, "6994d433"}, {0x4, 0x9, "da0704a312204f"}, {0x5, 0x5, "1df61f"}, {0x6, 0x8, "e1f67fb166eb"}, {0x1, 0xb, "6d3b91a25ae004feb4"}]}, @timestamp_prespec={0x44, 0xc, 0xef, 0x3, 0x4, [{@remote, 0x6}]}, @generic={0x86, 0x3, ';'}, @end]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000400)={&(0x7f0000000100), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd7000fcdbdf251500000048000180080003000700000008000100", @ANYRES32=r7, @ANYBLOB="1400020076657468315f766c616e000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080001008567e7718ea35a7331986990952ae9f086b42584792f48bb125149a87ec0508b73ee4da71f99e0ccccebf8afe4e02829645b1c956dac0a05341242bb6cf57fb264c0baa94f348d8c", @ANYRES32=r9, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4008801}, 0x4000810) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="010f060000000000000010"], 0x14}, 0x1, 0x0, 0x0, 0x1021}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) syz_open_dev$vcsa(&(0x7f0000000340), 0xfff, 0x86000) io_setup(0x8, &(0x7f0000004200)=0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x3d, 0x2, 0x0, "c8010000000a0001000012e25c2299230500", 0x38414262}) r12 = io_uring_setup(0xf05, &(0x7f000000c480)={0x0, 0x4e43, 0x10000, 0x1, 0x2}) io_uring_register$IORING_REGISTER_FILES(r12, 0x1e, &(0x7f0000000000)=[r12], 0x1) r13 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r11, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r13, 0x0}]) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r13, 0x7a5, &(0x7f0000000180)={{@host, 0xffffffff}, 0x0, 0x1, 0x9}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@local}, 0x1}) syz_usb_connect(0x2, 0xc9f8bb7d, &(0x7f0000000500)=ANY=[@ANYBLOB="12b7507dcde84940c71b7512b967000000012b02120001040020060904fb0800ff68ee00869c61965c773c50c3bf289e2e8ebc7144333f898f63ce2f07b6d45561265becdf397f14fe39495d4ea00dffb5f59c1e"], 0x0) 7.167212418s ago: executing program 0 (id=740): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="120141014813442024040075ee690102030109022400010000899b6c994b5f64d60905060200020d000609058202000200011000"/62], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e4, 0x10c, 0x111, 0x4b4, 0x10c, 0xd4feffff, 0x21c, 0x20a, 0x278, 0x21c, 0x278, 0x3, 0x0, {[{{@ipv6={@private0, @remote, [0x0, 0x0, 0xff000000], [], 'pimreg0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x0, 0x3f0e5f57291f411b}, 0x0, 0xec, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @mcast1, [0x0, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'vcan0\x00', {}, {}, 0x67, 0x0, 0x7, 0x38}, 0x0, 0xdc, 0x110, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0xfffffffd, 0x0, 0x0, {0x2}}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3}, {0x3, 0x4, 0x4}, {0x2, 0x0, 0x5}, 0xa, 0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x340) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10, 0x0, 0x2003, 0x80, 0x9, 0x6, 0x0, 0x3}, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) syz_io_uring_setup(0x2619, &(0x7f0000010280)={0x0, 0x2d4a, 0x2, 0x4000003}, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000080)) io_setup(0x8, &(0x7f0000004200)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r6, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) r8 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) 7.09620363s ago: executing program 3 (id=741): r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfc, 0x0, 0x6}]}, 0x8) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r3 = dup(r1) write$UHID_INPUT(r3, &(0x7f0000003140)={0xe, {"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", 0x1000}}, 0x1006) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xffff5401, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) landlock_create_ruleset(0x0, 0x0, 0x2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={&(0x7f0000000080)="d1735ae6a7ad798f35770985bdb77b7ad68637ec1671d27a291ce166ef6697be5f03cc67ef4e09c654aaf10f8e7dab3060b1bff2d6066d0617d75dfdf05dbdd0e92f97ac681ebe43b63452e7d36588346faeb2005c3b39552a322685689ee870a5280768ff25cb098c24a388f034a768d9ac9ca713ea422804d6637cbd3bc8ada6b939bf4236a0a9b9c4763a97076979585809c8bf07006d5163b05640ed1d1f6422e3853151882dabaf19233893c55ad8ebdbfcd780951fd81a575130081be595e764b58138ca5d2122db30e9", &(0x7f0000001280)=""/242, &(0x7f0000000000)="58fd6ced57f184c06fdea1e56eccb26b20d1b6a7e19db0ed261c4e4fbe686b97d43cbe5c964150e4c9979b337a", &(0x7f0000001380)="42e79589040d9db32e5d38ef43c9a082d97f3b97a75ccc3d681384a4d0f59ec35d0f3fe79f1fec6c0a98d248f8bd23c46d29d6aa3f3e873c90592a8b2f916b4343047c5ea30e40f89971bf0016c71929eeac87af8dacab12e8f8f973c7b3460580504113bbcb92e3532258bdcfe1c8455df391a2d8a0fbd0c919c0583250f68fd4b657b77c5c2bb90976debd8887f712a328472af9457ec35b9cb695ccd54c5f9fb5b0dbe600fc77246f3cea72476d1e43fef7920d2da616829fa329bf94fcf42ca0b1aa12f439e049d4647a866b347a8738332844a2c3fc5cedef8ffafd2540e31911695344f334c61f159b3904ad3ef27260b91421ae", 0x4, r3}, 0x38) r4 = openat$cgroup_ro(r3, &(0x7f0000001680)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r5 = eventfd(0xd14) write$UHID_INPUT(r4, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0xf47) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001480)={r3, 0x0, {0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x5, 0x1b, 0x0, "4ac8372c53d0a425c456f38c2475d98ceeac2df43abd4951ea46891250e0cc37e09f33694af014aaa5195b452b1af929bd9edf5065fffab4452b7752dfaf8ee5", "dc19ebee9e98bec774308a3b7b32062fc05ec5ea84f0dfbba4cab45a1c1db3c611ba587b23981b0316944415611b06c7ac4e506a21b977f1310151a4d48a2ea5", "86cf572c4454ceb9808b67c75b8397ff7c4d2a81876ecb5a7e4dfb5033ae97b3", [0xffffffffffffffff, 0x2e3]}}) getsockopt$inet_int(r0, 0x10d, 0xdb, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = gettid() fstat(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400, 0x7ff, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000140)={r7, r8, r9}, 0xc) fstat(r5, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000200)=0x0) write$P9_RSTATu(r3, &(0x7f0000001700)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYRES32=r10, @ANYRES32=r11], 0x83) 5.416931787s ago: executing program 1 (id=743): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9a0902, 0x0, '\x00', @string=&(0x7f0000000200)=0x7}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x70, 0x7, 0x0, 0xb49, 0x9, 0x8, 0xfffffffc, 0x3}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x3, &(0x7f0000000280)=[{0x1ff, 0x84, 0x0, 0x8}, {0x1, 0x6, 0x1, 0x7}, {0xa, 0x1, 0x8, 0x7}]}) open(&(0x7f0000000040)='./bus\x00', 0x6c4e42, 0x0) (async) r2 = open(&(0x7f0000000040)='./bus\x00', 0x6c4e42, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x3fec00}], 0x2, 0x1400, 0x0, 0x3) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, {0xe, 0x1, 0x4, 0x1}}) (async) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, {0xe, 0x1, 0x4, 0x1}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x3f}) (async) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x3f}) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r4, 0x5501) (async) ioctl$UI_DEV_CREATE(r4, 0x5501) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) (async) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0) (async) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x2, 0x414d80) 5.103212976s ago: executing program 2 (id=744): socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x38) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000040)=0x2eb4, 0x2000007ff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x8260c480, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11894000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='\b') madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000f609010203000000000001000010"], 0x14}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000280), 0x40000000, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 4.931340769s ago: executing program 3 (id=745): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x781, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7, 0x84, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x51, 0x5}}}}}]}}]}}, 0x0) syz_usb_connect$uac1(0x4, 0xa4, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x3, 0x60, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xc6}, [@mixer_unit={0x9, 0x24, 0x4, 0x2, 0xc, "b58721a3"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x100, 0x2, 0x2, 0x3, 0x3, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xc, 0x4, 0x7, 0xe4, "b885", "9d5b"}, @as_header={0x7, 0x24, 0x1, 0x9, 0xf7, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x5, 0x1, {0x7, 0x25, 0x1, 0x1, 0xf7, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x33, 0x0, 0x33, "f2ba"}]}, {{0x9, 0x5, 0x82, 0x9, 0x197, 0x8, 0x2, 0x31, {0x7, 0x25, 0x1, 0x81, 0x4, 0x5}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x6, 0x7, 0x5, 0x40, 0xd1}, 0x1a, &(0x7f00000001c0)={0x5, 0xf, 0x1a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x2, 0xa}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x41, 0x33, 0x8, 0x1, 0x2b}]}, 0xa, [{0x8f, &(0x7f0000000200)=@string={0x8f, 0x3, "f2bf17efc8239e0c396ace1cee6b2037208adbcec8b724d05a172a4ac4ebfbdddd53e1d948c2c8e2587f1015a356a9450b1a2281b178d2e3cdddfa4b7f353988436594c32781f0a34e9a183714b384d0ac5e3d3523053190074187c71e391f5f22bfeefb42cb6dbb3eb812d300dac55c231e5289ce4dd0cb984e770bb25b225b980e76275c6f7fc24ad1e83c33"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x100c}}, {0xf6, &(0x7f0000000380)=@string={0xf6, 0x3, "9000d3cc4245481256eb8998bcde32f5bb488ba065778497b6732fb9c0c959be028a9db3eb9d9b35d54845c77961e66303b86856efa7d6df324f2dc5ad16c26aa0b1927ea4d7f131fba1509c380b5f7bef9ae465da09291e8e190934a8de141c1b020bf367f1e20af584108ab4a08a7ae1ba39ee9720ff91b58a514d89a6e72c81d5c03bfda57a86e7e49d0b05096ab2b62d905c73c6e96b0e5746c860e20489fcdd7aab8620401ba050f46146c3a7165f79db255e8e1b0d9e8aa3b98b76f664e44b2a71a38cfdb1ce0a48640840e3442d6c82908100d410358dace5d6634ae6f507c196bb388977a0138213b1cb7fcbb2b9c442"}}, {0xa9, &(0x7f0000000480)=@string={0xa9, 0x3, "d0630ea365622fe6b1bbdb50a47535fb9f5f5734bc00817fbb6847228fe3c2e14ede4327112fc630f7b66cc1c45071a113eb0a53743da281c1353b22e64ad0643f448549c2ae7c45dd09e2e07fe0d76f5efe87936950d0f65048c0be78a58a85094259e202128c297a1e22f66253010277811f5be5b375fd8a424e1b5ac736d4dd94f472cd69feacb8cfa8cbdb6c60ef3a4ec33e30baf87ec50cf223b862f1d2c4faaf29d5e5cb"}}, {0x19, &(0x7f0000000540)=@string={0x19, 0x3, "1cbc09aa5cdec340ef8e264be05683a94e6d2730d3e81a"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x280a}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0xa}, @local=@item_012={0x2, 0x2, 0x2, "d967"}, @global=@item_012={0x2, 0x1, 0x5, '\x00\x00'}]}}, 0x0}, 0x0) 4.481487881s ago: executing program 1 (id=746): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x40a0, 0x3}, 0x18, 0x2) landlock_restrict_self(r0, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0x8, 0x4) r2 = openat$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x20) name_to_handle_at(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0x6, 0x2, 0x6, 0x7}}, &(0x7f0000000140), 0x0) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '\x00'}) r3 = add_key$keyring(&(0x7f0000001280), &(0x7f00000012c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="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", 0x1000, r3) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) r4 = add_key$keyring(&(0x7f0000001300), &(0x7f0000001340)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$reject(0x13, r3, 0xd, 0x0, r4) r5 = dup(r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001380)={'vxcan1\x00'}) r6 = openat$cgroup_subtree(r5, &(0x7f00000013c0), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000001400)={[{0x2d, 'blkio'}]}, 0x7) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001440), r1) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000001500)={0xffffffffffffffff, 0x0, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r7, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x8010) pidfd_getfd(r5, r1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001540)) getresuid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640)=0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000001580)=@nullb, r8, &(0x7f0000001680)={0x8000, 0x3, 0x0, 0x5}) clock_gettime(0x0, &(0x7f0000006180)={0x0, 0x0}) recvmmsg$unix(r5, &(0x7f0000006040)=[{{&(0x7f00000016c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001740)=""/108, 0x6c}], 0x1, &(0x7f0000001800)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x2c}}, {{&(0x7f0000001840)=@abs, 0x6e, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/246, 0xf6}, {&(0x7f00000019c0)=""/25, 0x19}, {&(0x7f0000001a00)=""/14, 0xe}], 0x3, &(0x7f0000001a80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x14}}, {{&(0x7f0000001ac0)=@abs, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000001b40)=""/54, 0x36}, {&(0x7f0000001b80)=""/62, 0x3e}, {&(0x7f0000001bc0)=""/226, 0xe2}], 0x3, &(0x7f0000001d00)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x48}}, {{&(0x7f0000001d80), 0x6e, &(0x7f00000020c0)=[{&(0x7f0000001e00)=""/159, 0x9f}, {&(0x7f0000001ec0)=""/188, 0xbc}, {&(0x7f0000001f80)=""/75, 0x4b}, {&(0x7f0000002000)=""/145, 0x91}], 0x4, &(0x7f0000002100)=[@cred={{0x18}}, @cred={{0x18}}], 0x30}}, {{&(0x7f0000002140)=@abs, 0x6e, &(0x7f00000033c0)=[{&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/51, 0x33}, {&(0x7f0000003200)=""/234, 0xea}, {&(0x7f0000003300)=""/150, 0x96}], 0x4, &(0x7f0000003400)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x3c}}, {{&(0x7f0000003440), 0x6e, &(0x7f0000003640)=[{&(0x7f00000034c0)=""/247, 0xf7}, {&(0x7f00000035c0)=""/43, 0x2b}, {&(0x7f0000003600)=""/60, 0x3c}], 0x3, &(0x7f0000003680)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x70}}, {{&(0x7f0000003700)=@abs, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000003780)=""/175, 0xaf}, {&(0x7f0000003840)=""/136, 0x88}, {&(0x7f0000003900)=""/28, 0x1c}, {&(0x7f0000003940)=""/222, 0xde}, {&(0x7f0000003a40)=""/176, 0xb0}, {&(0x7f0000003b00)=""/3, 0x3}, {&(0x7f0000003b40)=""/238, 0xee}], 0x7}}, {{&(0x7f0000003c80), 0x6e, &(0x7f0000004e80)=[{&(0x7f0000003d00)=""/75, 0x4b}, {&(0x7f0000003d80)=""/214, 0xd6}, {&(0x7f0000003e80)=""/4096, 0x1000}], 0x3, &(0x7f0000004ec0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000005f80)=[{&(0x7f0000004f00)=""/80, 0x50}, {&(0x7f0000004f80)=""/4096, 0x1000}], 0x2, &(0x7f0000005fc0)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}], 0x9, 0x13100, &(0x7f00000061c0)={r9, r10+60000000}) syz_usb_connect$cdc_ncm(0x3, 0x14e, &(0x7f0000006200)={{0x12, 0x1, 0x150, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13c, 0x2, 0x1, 0x8, 0x0, 0xb, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "4ba87e6447"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x8001, 0x40, 0x84, 0x9}, {0x6, 0x24, 0x1a, 0x4, 0x2e}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x1, 0xe8, 0x9}, @mdlm_detail={0x5b, 0x24, 0x13, 0x2, "0c173e6f28ebffb958a54deab663e893f148ce3f98a9f3027f8beee78cae0737b8c0dc16aa6d45ee4a373a6abb6ac01abd0d87f08ffafc2e8f59dd614738401aa725e922959d25d3ccedad77016c7d05418fe7870be849"}, @mdlm_detail={0x72, 0x24, 0x13, 0x0, "1a207659abc3ec47eeaf95bb61c1d8ee32cf3100260b5739a1bbf30e38caf2594f0a215249e2943a6fdc929ef3ce61c01bc1764df921cfdc48368a9137d5986ce0ba2c62c336bcf519c4e72624bcb978d661fc576b77e6b408e95b0e76025b8ec99d79ec71d11a6e10409a8d70e6"}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x34, 0x2, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x410, 0x81, 0x8, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0xd, 0x7, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x15, 0x80, 0x1}}}}}}}]}}, &(0x7f0000006880)={0xa, &(0x7f0000006380)={0xa, 0x6, 0x250, 0xd, 0x6, 0x2, 0x10, 0x6}, 0xf5, &(0x7f00000063c0)={0x5, 0xf, 0xf5, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "1b900d1763efc7c83d947d661b3a2be5"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x1, 0x2}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x1000, 0xf000, 0xaf, [0xff0000, 0xc0c0]}, @generic={0xb4, 0x10, 0x2, "10650d6a94a3a2143b5aace90e574b69a86404ccdf35f5abfc30c41a1ae9b3875891b868b05ad67abb8d946596cd2b072177a85fcaafe57921b3bff65e94b986bb7abe90dbde076eb9707d3809e4a74c03067ee1cf07ceb0b9e7d1fa3b2df30b7169b225b054ffc9746fd741bb85a4d21b64916ac51565fb37bbd4a0d26c2700381321f7a866600cf7fe9aa16102faebf4b746721b3b0f628b942b246916bf9c6c65943a42340b7cf799299a43ada46f76"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x9, 0x4e, 0x7}]}, 0xa, [{0x5e, &(0x7f00000064c0)=@string={0x5e, 0x3, "4a5fb10b3527820f23051e0a370ad68aef11eca90b63f1e3aad71d5c1b4182f04a2fe14ad5e690570e03951cc07b1434434b4b333bfdacfb19295f04d61448dfb83f587274ff9ea588d3442d76ef8914243c3cfc69eccc284542f9c9"}}, {0x4, &(0x7f0000006540)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000006580)=@lang_id={0x4}}, {0xe3, &(0x7f00000065c0)=@string={0xe3, 0x3, "1c4eba209fb18bf77dbc786fd855c3042b2b73e95399053c12c3eaba87ca2b1645b315769b97b51a64dc8cd8c3664ae270b0b2f21ca15aa52888ae4ec9751434d34aaf9dae0bca8a068bf2bfc83559a50cb95317df42550c870c8651b286350ab7e8dd51f5d0de6c9838867067ab116405fd9e79e0488776443f77ff3acd473bf183e569dde0397212e5dd7a61588011e12c8b9a541aadc4764fd30c52121c19703db81bf25435ab018da79d69bc48f21c1dd6426cf1ef6075f09abda79ac3e21b65435c12fe6192d1129e2325d4751ecf48a58c4a66ec58d6f85c26bc87d27121"}}, {0x6c, &(0x7f00000066c0)=@string={0x6c, 0x3, "d4e585f855934ae730c215c3e6377617abb202c979cab7982a5dcece3425edaae9d8196cb1c43bf7bae99de569ddf691390308e2c9e2047bf7d74086d75cf7abe56ee477c7b69abcbfd61275772f91844a3d73f695f5891e3cc59dfd441789eacd61c79f310d19795a8d"}}, {0x19, &(0x7f0000006740)=@string={0x19, 0x3, "43c550458049829aa63dc75f7d368c21c4e9a1108e8a67"}}, {0x17, &(0x7f0000006780)=@string={0x17, 0x3, "9eb9d78d23c4e9dd02ebab21bcaadbd975d5e03465"}}, {0x4, &(0x7f00000067c0)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000006800)=@lang_id={0x4, 0x3, 0x41a}}, {0x5, &(0x7f0000006840)=@string={0x5, 0x3, "3aab25"}}]}) syz_clone(0x147ef7b8c1bc591d, &(0x7f0000006900)="2dfc571498b92d9645278d217ea40569dd840814d1176722e2df9ec8c5eab64771861a955ed6ea36e26f03a0c6a47d56ff69ebdbb88e6acc68e04540c3c5b87cc2564075ab0fcd036c9a044df5744f3aeeecfbbae01aac7b64b74f053bf9209a7027870455be65bb5c758eb687791050256f1c8b34adfffd08d33e8dd7a919fa9d2041dd6c3f058ec5fb2ddafcae54ceb615370457e3e3166d3e6d01ed4d02ff8c54cec047a660c3bd3bcb17060fba4bf43e9606f28ab7f222a36ebb76dc10a8a858883b420dbd", 0xc7, &(0x7f0000006a00), &(0x7f0000006a40), &(0x7f0000006a80)="69f2d2678a262600fc64fa4811324ccf9b99d915556f423d29c66adbae116c9e1a8b8b68f2828f0b15e33ff79b57d984068d234a079106d40ec59de5d00a7c6ec5465cf7a66f51639ca43f7f48cc5d97d86682565ead6274ad0a9ed78a8df102cdc3892f27b90d91da9e4eea70b0b63e914a89e734e0a25ded9e6be52ec1615722f05152d1dc0305ebfbe2d9567eb61ebe322c6a2d4221a7bb6dc149e520ff412259d062076116e7794558") sendmsg$IPSET_CMD_RENAME(r11, &(0x7f0000006c00)={&(0x7f0000006b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000006bc0)={&(0x7f0000006b80)={0x30, 0x5, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40840}, 0x8000) openat$uinput(0xffffff9c, &(0x7f0000006c40), 0x2, 0x0) ioctl$UI_SET_RELBIT(r12, 0x40045566, 0x3) timer_settime(0x0, 0x1, &(0x7f0000006ec0)={{}, {0x77359400}}, &(0x7f0000006f00)) 4.288488579s ago: executing program 4 (id=747): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getitimer(0x0, &(0x7f0000000040)) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000004c0)={'vlan1\x00', &(0x7f0000000480)=@ethtool_eee={0x17, 0x2}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="31032fbd74000000f0ff0700000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x8814}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040014}, 0x4040090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x54, r8, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "dba06c8914"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}]}, 0x54}}, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newae={0x40, 0x1e, 0x400, 0x70bd25, 0x25dfdbfc, {{@in6=@empty, 0x4d4, 0xa, 0x3c}, @in=@multicast1, 0x7, 0xffffffff}}, 0x40}, 0x1, 0x0, 0x0, 0x40000000}, 0x91) mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x9000, &(0x7f00000000c0)={0x87, 0x100004}, 0x48) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r6, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x9}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x400c001}, 0x8000) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) write$binfmt_script(r13, &(0x7f0000000740)={'#! ', './file0', [{0x20, ')-:\''}], 0xa, "17c2b7cbbbf3080627c32fff9dc53c1be6daca42e6810731ad19cd0b19bdfe407b0da4178535c0be3680a7340d448d1878ffd658b10e9b3b444afb92bc96c9ce3b7487fc5aaa593aba0ebd51ff1cd65d764de4f6b9c0bd91c6a6b461ac6c9b53b56255b674a10fcd5ed50bb3ba1c5e99ea93f688bad69335f137db256ef603abaa07bc0b42e1796f38d76151ab3d55e2f2cbdad726"}, 0xa5) ioctl$KDGETLED(r12, 0x4b31, &(0x7f0000000280)) getitimer(0x0, &(0x7f0000000240)) ioctl$FBIOPUTCMAP(r11, 0x4605, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000380)=[0x0], &(0x7f00000000c0), 0x0, 0x0}) 3.890817179s ago: executing program 4 (id=748): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r2, &(0x7f0000000300)=""/79, 0x4f) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000000002"], 0x40c4}}, 0x8080) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000f00)=0x957) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3d, 0x0, 0x1}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) r5 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r5, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000140)={0xb}) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x2000)=nil) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) syz_usb_connect(0x2, 0x734, &(0x7f0000000500)={{0x12, 0x1, 0x300, 0xd, 0x2b, 0xd2, 0x20, 0x7ca, 0x4835, 0xad92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x722, 0x4, 0x0, 0x5, 0xd0, 0x7, [{{0x9, 0x4, 0xe8, 0x9, 0xb, 0xb1, 0x3d, 0xcc, 0x0, [], [{{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x42, 0x9, 0x2, [@generic={0x59, 0x11, "f504e522a8c0346678ddad9429fdfb5cf204f8791733685b19a66a90df61678ae84814e9e95815d41df353ea2fa74d970203ff38313e0f66a66ef24d67b75757b0349f70a016c0928e59b985fa98a824574527f005b78f"}, @generic={0x21, 0x0, "9c40d61090f3641d5de7231e1a468181d17a8a0687419f7a7a8728ac55c508"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x7, 0x5, 0x50, [@generic={0x40, 0x0, "67313501ed388eb3edcd271b09adbf949f149d72c15c67b93ddf680d279e2d6bda734f16de8d30ce769d251e2bc5f0f046430534be6e6cc1afe0a0ce4efb"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x40, 0x3, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xfc64}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x0, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xde, 0x5}, @generic={0x2d, 0x8, "d807adaa891a6d3c5dc9563a2b347a810262da6524f7f30ddacba1b672a08de1ff72c42d810f5e99871850"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x40, 0xc, 0x3, [@generic={0xfb, 0x11, "8d8e2d1dcc0686f5e6fd3ddb4e0ba12a619955669cf013c21fb912df6616b44b2826b6ec29f770eb4d03d0e6000555330e6b44c47be955cbfd93bc4c0b4697edcf6441e9db89944e78fd668bc7949ece66800ced78c3b7b949bfc56ec923223882311a6a1b60c4b88224ce2aeee9222dfb16941f61db9adb96eae3b0a0756ee3f1c8a014b53e1cce75f04c94e3e54077f029be3c6ea01d2e707d7ec9b20c342c268e396cb797719461adf23484c2f10bdcb94267bfbeb64686c18127b4c11d2556ae0f1501f9fce2d6c78421cfa96353760747fc0ee52b5a86b77936e0709bead4046a3e45b577bab32d83e1bc88465563098e10b42a51f71e"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0xfd, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x91, 0x0, 0x2, [@generic={0x1b, 0x24, "d180e03a96ade43ef6707e775259c5f45fc7155ced8e50672f"}, @generic={0x5c, 0xf, "d660b03a435a61bc9fae5ad6f617b23084896ab73207a2aa14b185aa40d8d8ad7ec2429988557cc894d7bafef70a4ecde1485740de7ea2e50d936b9a0e7759d4d586bbf65e7cabdb62cd0f104ccdc4a94958e4dd232862ba6a83"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x8, 0xd9, 0x2, [@generic={0x20, 0x22, "1fac36d1efafd2081dde43d7830df37fb31f2d0321c4f28d6c376db9609d"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x8, 0x42, 0x0, 0x1}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x7, 0x4, 0x9}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x0, 0x40, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x2}]}}]}}, {{0x9, 0x4, 0x23, 0x3, 0x3, 0x46, 0xa3, 0x74, 0x80, [@generic={0x17, 0xb, "2de18c2e865e043fd194916b764b0251e6bbb0ad99"}], [{{0x9, 0x5, 0x4, 0x10, 0x200, 0x2, 0x81, 0x4, [@generic={0x2f, 0x4, "4e9eb8a28519f7cd84a03472774b87a2c4e02193943817a924a682da992a6f0248b80c67836567c872b5a3d7d3"}, @generic={0xad, 0x6, "c93e1d06a8ffe9d63afb6b4bdfdfbb4d0c33cb4ac47040e9585f85f1d766cb3cade2dda6a0c9fea8f9125e0d1c23db6b9dfbaf500be4c53b3f6219fb189e3be992e9e16d0a0e557d0908e35854764b224593df12ef8183ec324674714d82bb06e9ea9cd8f898e899ee70ba157b1a2bc985283961365a23a6a5d9c833a61512c2183a789a26db156aee40dfe30fcfa7e71e1cf29a1089e72ad133d99a04836481fd7524b979dbee7cd14aa7"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x40, 0x9, 0x7, 0x5}}, {{0x9, 0x5, 0x6, 0x1c, 0x8, 0x5, 0x5f, 0x3, [@generic={0x3c, 0x2, "3f011ad9acda8c5afe33df52a09f093f2f295c547fc2dada4026bf7b2fbfebcdf5123a9dc41f8326b4fea3d620d2395afe3e45c7dc9ef65bebb7"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x81}]}}]}}, {{0x9, 0x4, 0xa2, 0x1, 0x7, 0x9b, 0xa1, 0xca, 0x6, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "2b6eba129e7b"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0xf, 0x6f, 0xd}, {0x6, 0x24, 0x1a, 0x2, 0x21}, [@acm={0x4, 0x24, 0x2, 0x14}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x3be4}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0xfe01, 0x7a4, 0x5}, [@mdlm_detail={0xce, 0x24, 0x13, 0x0, "228dbd5434bf3772c40aba7a48c7ba71abe9bef4c767767e7f937453e6ae2df5a38301f55869bad280691aa3e297b2e9b9ad4060de12f2f93722b03e25e98a254a7195e7cc21765f8088a6184a29cbab39eb62d726accef5705bc007abd14ac6e78bbcc08aef23ce3d0011178e16a577af4f8f2e98e26dad81b433a6d85ea8656954118672cc72d55d86b59f8af4ad639fdb45fb0ea8235e3905d60ebb459040a08a9987edaad3fae3a220c78cf8233bd62a6e6a1e6d162bb8a7c8af92e8e4891187ac171c29d2b5acbb"}]}], [{{0x9, 0x5, 0xb, 0x8, 0x3ff, 0x29, 0xff, 0x3, [@generic={0xd3, 0x2, "2ec0a5d4b6507f82b46144c2ad89d495d32a059d8dfc1bde53655e1a43617298ee4a45ed42584864eba3390c50416380779cbf8497fa8c50089894dd84ecf31f90b5c32634855db4d38ba598c16566b0c309563be2deae177fa05f7361492b9394c4ec592f92eaf6da7aa917cdf57de5ac1cd6792dce5e9ed12402439c578f307f2389dbea2dccc1bf4d21bd72d502bbfce42b2eebc6988cee041c7283959d2e4b28bf5e6cb00c4bfa7e0b3e310dfa8a571c3f81f573a53eaf6478569d4293a42a12f85ccd72642658a9baa852cd18ad0a"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x4}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x9, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x2}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xa, 0xf9, 0x8}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x3, 0x3, 0x10}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0x3, 0x9, 0xf}}, {{0x9, 0x5, 0x8, 0x1, 0x200, 0xe, 0xbb}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x6, 0x5, 0x7, [@generic={0x69, 0x24, "26f5afdf11a80ddd6081b1757d175e1c05991c3388c6d978ece78b2c4c49759e72a03bccbfa1b9fbb4ca41e8cb8c5f9f373b7d21f0f2522f6c1628f8af2127e3249c6ed244fe22118b31970613c07a6f50a33dc8d3f68d9c6cef2fb967a7bbefd7256e3b8c49f5"}]}}]}}, {{0x9, 0x4, 0x7, 0xf, 0x0, 0xfe, 0x32, 0xf9, 0x4, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "1a"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7, 0x100, 0xb3}, {0x6, 0x24, 0x1a, 0x9, 0x28}}, @uac_as]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x9, 0x5, 0xfe, 0xff, 0x7}, 0xb5, &(0x7f0000001240)=ANY=[@ANYRES16=r4], 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42a}}, {0x9b, &(0x7f00000002c0)=@string={0x9b, 0x3, "f1991a08c7c7b56efb9e704931ac0b23ce75bfdd57c76847a625c841350f77d84adb75d7d8d4339fada35d9a11897b7e1ccc0ea8033fad40e36d93f231d680669192a47ad0aca6823c0c6a43d684049a212481b1bc54bf02a26ff0215d3feed79c1a9fbb14fd89a6a34ee22c87c9a1c68ce00da8f61c249eaf0c4cbefb2ab442144ae6de2b898e1cd59395ff36a38e7ef301d3c423246e5706"}}, {0xfe, &(0x7f0000000f40)=@string={0xfe, 0x3, "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"}}]}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001040)={@cgroup, 0xffffffffffffffff, 0x2c, 0xc, 0x0, @void, @value}, 0x20) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x6, [@restrict={0x2, 0x0, 0x0, 0xb, 0x5}, @union={0x1, 0x5, 0x0, 0x5, 0x0, 0xff, [{0x8, 0x4, 0x8}, {0x3, 0x3, 0x7a52b364}, {0x8, 0x1, 0x1}, {0xd, 0x4, 0x8}, {0xc, 0x4, 0xf5}]}]}, {0x0, [0x30, 0x2e, 0x72, 0x0]}}, &(0x7f0000000240)=""/44, 0x72, 0x2c, 0x0, 0x9, 0x0, @void, @value}, 0x28) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000d80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r6}}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r12 = dup(r11) write$6lowpan_enable(r12, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x20, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0xfffffffa}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x0, 0x2, 0x7, 0x7, 0x0, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x71, &(0x7f0000000440)=""/113, 0x41100, 0x4, '\x00', 0x0, @fallback=0x21, r8, 0x8, &(0x7f0000000d00)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000d40)={0x2, 0x9, 0x3, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000e00)=[r9, r10, r12, r3], 0x0, 0x10, 0x8, @void, @value}, 0x94) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) 3.874318681s ago: executing program 0 (id=749): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x7}]}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) (fail_nth: 8) 3.703400722s ago: executing program 0 (id=750): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x57, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0xc0, 0x5, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x3, 0xa2, {0x9, 0x21, 0x8000, 0x65, 0x1, {0x22, 0xe6e}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x4, 0x21}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x1, 0xe}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0xd8, 0x6, 0x7, 0x40, 0xfa}, 0x30, &(0x7f0000000180)={0x5, 0xf, 0x30, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "2accbd62c1c462109be2de023c747a04"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "6705bbc4eb9347c43d8bb5f0b28eef67"}]}, 0x7, [{0xc0, &(0x7f00000001c0)=@string={0xc0, 0x3, "02223c99017b11955b8d24c1d545163363ea203cf62581fc375204f35e8f5244ef904db988ca9e2df227d8d19852d58c2a7e1d2aab37083e054c5bd9327e512248a08883e36a5ab474bdd69c0e5481bbbcd0495bae3d90499c3897cad4f270ebd5806a9bb44d4d981a7a20c2f1fda29a15254297c75925be25961f473d4024950828e2929548a32b57181820cf16681e20fcae4cd97da8462954dda19810d696f297db981c10e2c7d32b42ec1a1a5b12ab2a06ede3b770adaeaa7792b816"}}, {0x3c, &(0x7f0000000280)=@string={0x3c, 0x3, "94e3bc6b42df7bfb1b1e5dec6ce690ddf0962c6db6cef4c77bbd07ebad578e065e07a6589bda0cdff1a3312a6f5c97c58eb78eb3e0fa34e3a5a7"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x50ab}}, {0x8, &(0x7f0000000340)=@string={0x8, 0x3, "a48c8c9f5abc"}}, {0xb0, &(0x7f0000000480)=@string={0xb0, 0x3, "08783ef48e82525496747915d4cd1ebcd8f1d3ae447f38ec85c867bb07155eae2e4a4e8786f83d6107eeeaf5e09cf9bf25e996b2a2195948c454975ed75d6fd9519a7f65246eada500621cf7082e3e595d6307ed9cf9a7a01bf7919eaa92f0151226f5adbcaa8325e55101554b8669d91176bd682d01dc3078c0c06e58ac15fb0bdd017c2942df32374bdafb5aed8fc8174422f7bb31e9c28734c7e66203f0cfde6f409f5cd63d80fc59adee6079"}}, {0xf7, &(0x7f0000000540)=@string={0xf7, 0x3, "fd9acdfe9e9a033aea695dbfa78bde83f1311022adbe682d9f8e57172f740d4bf99c2e5363d82037b5a8c43a02b6b5ea62e0163ac9d9ca6cedcf6b54c5e65d6513511addd49953c11b430d5a422a6b838287195f637585206fcea3e02e79d6d535a0b553e562ef78537b524948230fed726549b29915538b842ba69a5c23ecbaff3e3914e7a550af30a131e2bf36582664a847fea67d099a9aae923b488f1548c000615bc1b1985ff26f3bf8bf8b12e52da51b8f217f71b349662bd4100e40be5dfdebc1f6deff17d052779427f15cf5e1171ca1bfb2cd8614412a147d5e56b91b92c6c57a76fd0b3e4ae72f6efa64cc92708fd5ac"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000900)={0x14, &(0x7f00000006c0)={0x0, 0x11, 0xfa, {0xfa, 0x21, "399ad18368a229273009a0c52417b6bbd25052887ebb55d8b80099783a778b5f013d762449af0a0c2a5cdb63017ea6c53b5111bb6f6409a499a2d38dc5e4416b82828234678e59c919d0553195d9f0b7b1ae88299d3833c097f038550d27df328c0c1c2632e78d817d2dd17ac132d60520a2c2d7e90ed6db9ea0525f7e953fbc5aebe2ae5ea3322350bd858f999116bd4e6bbc231338c2bbb083b460ec8a331d635611ad26e75108543c4f83b4af57261174c63d5ab4977ce6947225537ba648d96f507b8a823e588e45e4f62923fecdea0db0ef71534cdaf3a7843175e9840665e5ec9f9aedcef9d61e3f00736a7bd91a0347792588cb5e"}}, &(0x7f00000007c0)={0x0, 0x3, 0xcd, @string={0xcd, 0x3, "75c7011617dbfd718e3b595b538510e0a752aec98ee558ed42b4a0e49836a2a1548f767b41a8ff9d79c632da352adc576caed63afc9764b412c64f2f22170d4dc406da8d21b414ab3f4379e439ffaacb45e09b1871e2fb7bfc281ac7b39d54cf30dc2aa21b0b47d02917b7b2c9005b03cb900cd21a643455a6f5d97a195b25de9a520dbbc967fddaa0c4c13d7eb78c29575faba92956367444009736a2d8636432e5d7d9917917663da4463e379c13c4610f548d32faf1dca0be263ef4f1a268179fd0798dc710857dc384"}}, &(0x7f00000003c0)={0x0, 0x22, 0xc, {[@main=@item_012={0x2, 0x0, 0xa, "ebd8"}, @local=@item_012={0x0, 0x2, 0x3}, @global=@item_4={0x3, 0x1, 0xb, "723f9bef"}, @main=@item_012={0x1, 0x0, 0xc, "17"}, @local=@item_012={0x0, 0x2, 0x9}]}}, &(0x7f00000008c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0xaa7}}}}, &(0x7f0000000b40)={0x18, &(0x7f0000000940)={0x40, 0x7, 0x98, "697e1b067a7fdf9fa981fcb4d8615421168abd6bbc7cfcd0804e6cfbef56ce6aba1585e3c7d2ae7792e19fb1ecb957497f0cf7a22d3ddfa5ea424b968117280d1936eaf54b9ea52358236779c26b85ebae7af4a389032601cfb84b423ad28e2b914a493fade35fb21f35567d5da4845f8e5fcc85d762e3445e64100c7c706bc3e22d2c5ebdc4ce0e19688cd36e3c54ea978561bb175099fe"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a80)={0x20, 0x1, 0x5a, "69223c530f6fb3d53f1dc0733c64b11f5b58612442ac5cb9fe25291dafb2738e0ad0bfb6de5d188af48cc119baae51cc71635cf6f3fcdb0c0b105675b1c19e0f39325753095a344b194a154f92c798f4cf2d8246fe37283a3100"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0x3}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x36, &(0x7f0000002d00)={{0x12, 0x1, 0x201, 0xf, 0x4f, 0x7, 0x40, 0x67b, 0x2303, 0x53f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0x4, 0xe0, 0x3, [{{0x9, 0x4, 0x13, 0x9, 0x2, 0xba, 0x95, 0xd2, 0x3, [], [{{0x9, 0x5, 0x8e, 0x2, 0x20, 0xc, 0x8, 0xff}}, {{0x9, 0x5, 0xc, 0x12, 0x40, 0x0, 0x9, 0x9}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028a600000000000003000000080009"], 0x1c}}, 0x40) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x7, 0xa7c, @vifc_lcl_addr=@loopback, @remote}, 0x10) 3.035908657s ago: executing program 2 (id=751): rseq(&(0x7f0000000340), 0x20, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x18, &(0x7f00000008c0)=ANY=[@ANYBLOB="18290000", @ANYRES32, @ANYBLOB="000000000002000018190000", @ANYRES32=0x1, @ANYBLOB="0000000000000000cc2b0400fcffffffb7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES64, @ANYBLOB="0000000000000000b70500000800000085000000a500000018130000", @ANYRES32=0x1, @ANYBLOB="00000000000000f891304b7a", @ANYRES32, @ANYBLOB], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x7a, &(0x7f0000000240)=""/122, 0x41100, 0x5a, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x7, 0x1bc, 0x367607f2}, 0x10, 0x1a035, 0xffffffffffffffff, 0x8, 0x0, &(0x7f00000006c0)=[{0x0, 0x2, 0x8}, {0x5, 0x4, 0xc, 0x5}, {0x5, 0x3, 0x9, 0xa}, {0x4, 0x2, 0xd, 0xb}, {0x1, 0x4, 0x2}, {0x5, 0x5, 0xc, 0x2}, {0x0, 0x9, 0x10, 0xb}, {0x2, 0x4, 0xe, 0xb}], 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x80b8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x56, 0xf4, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000180)={0x8, 0xffffffffffffffff, 0x1}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32=0x1, @ANYRES32], 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44008) futex(&(0x7f0000000140)=0xfffffffc, 0x5, 0x0, 0x0, &(0x7f00000001c0), 0xfffdffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) r3 = memfd_create(&(0x7f0000002180)='\xa3\xcb\x04=\x827\xe7\x81S\bD\xd8K| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xa5\x9e\x1f`\x05q5\xee\xde\xdf\xba\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x4) ftruncate(r3, 0x200000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0xff, 0x10, 0x9, 0x20, 0x5}, 0x20) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) 2.983397375s ago: executing program 3 (id=752): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') (async) syz_usb_control_io(r0, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000040)={0x0, 0x3, 0xd0, @string={0xd0, 0x3, "df34efcb9e30d672dbd08f05cc231ee68344a2e2661177b8cd1e5598e582d1a26b915c9f399faef5b55022576d3be5fc9af28e9b875d6e911e6db79d7e531fda8bf5cbe487191d72fb691c5f71f1470a3f06a33d0753a0296c44a45216051d829b744dbda7ad4414f0289ea741664efe10747b5e028ae285332aee766febb713c9e54aa0c35093265194d8c3f9e7b5e104bf02f45564180a85b81d2a2770ff1d209358f8b8548e4b4310d778719a00313e19599ea8d4e21c14e1ed7185a2ba54c581d5e3b2a31607d718a9df9bf0"}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000001c0)={0x40, 0x12, 0xc, "13494798d4f9d8e6236ca0d9"}, 0x0, 0x0}) (async) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.589140232s ago: executing program 1 (id=753): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x1, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1c, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000d4}, 0x44000) 2.045133114s ago: executing program 1 (id=754): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002c40), r3) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf2508000000100004800900010073797a3100000080240007800800020006000000080001000600000008000228fd00000008000200001000008c0004803c000780080001000600000008000400080000000800040000080000080004000200000008000300fbffffff080001001f000000080003006525000009000100"], 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x4004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xb, &(0x7f0000000280)=@raw=[@map_fd={0x18, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], 0x0, 0x10001, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x29f6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1e2e81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r5, 0x40bc5311, 0x0) r6 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x84000, 0x0) write$sndseq(r5, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) sendto$inet6(r1, &(0x7f00000002c0)='\x00', 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000940)={{0x12, 0x1, 0x0, 0x7f, 0x10, 0x72, 0x40, 0xc45, 0x6280, 0xd5fc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfc, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0xfb, 0x0, 0x0, 0x27, 0x30, 0x47}}]}}]}}, 0x0) sendto$inet6(r6, &(0x7f0000000980)="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", 0x1000, 0x80, 0x0, 0x0) 858.442547ms ago: executing program 2 (id=755): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x500, 0x0, 0x0) 735.404982ms ago: executing program 2 (id=756): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="effdffff1400192340834b80040d8c560a067fbc45ff8105000000b1900058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 682.339763ms ago: executing program 2 (id=757): r0 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000001, 0x50, r0, 0x5b2df000) 667.701112ms ago: executing program 3 (id=758): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) (fail_nth: 2) 503.289346ms ago: executing program 2 (id=759): timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_create(0x1, &(0x7f0000000000)={0x0, 0x5, 0x2, @thr={&(0x7f0000000540), 0x0}}, &(0x7f0000000080)) 305.398947ms ago: executing program 4 (id=760): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES8=r0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008"], 0x94}}, 0x8084) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000240)={{r2, r3+10000000}, {0x0, 0x3938700}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/image_size', 0x20040, 0x48) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80, 0x0) copy_file_range(r4, 0x0, r5, 0xffffffffffffffff, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x24, 0x0, 0x0) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x714, 0x0, 0xfffffffffffffd25) timer_create(0x1, &(0x7f0000000000)={0x0, 0x5, 0x2, @thr={&(0x7f0000000540), 0x0}}, &(0x7f0000000080)) unshare(0x20000400) socket(0x2b, 0x80801, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a302) timer_create(0x7, &(0x7f0000000440)={0x0, 0x1b, 0x0, @thr={&(0x7f0000000280)="10d6bafa792252f76416025413a0e998c464f46ad2910b7da403435eba98022636db8b3eb09ab11992e138c280a9cefd5bc6c9bf0976d99ffa4ada2ec9c920503c8cc48281ce1259c77e4274664cde1b500501b7f1124e4f980b7758ecee4530d4cc04edacca6ba1a0940f255192fb81cc6b0a634eca9251c429fb6c8131552e989952755ee85f63e56078aa45d50c2d558a6fc265eea9b8b353cc13f5fb0cb8144dbd863d955871c511a56b34f3b53850e6efbf5cf965611f2da601aa6d0e0ac3", &(0x7f0000000640)="01bcbbb8f80aed0a918c28681b83d1b3e7959c93f0c04ef88619a53524b35822b563ee99bd1a8c749804765aa8d9215648dc7bb95c24733f9eb8e4a3869e2074df4a89d126e3d65c6ba142c7f0b13adfb57bc0480b7098b7b60b4585250e8735650044d374eea9f759f39807b365337e8d8d71895136dc5c4ee8e368a57f64ae03b9323d2a5f7ef9c2f8adad5d8294db08327382e51c09462fd6a1d9557673cd8dd62ae2ce"}}, &(0x7f0000000500)=0x0) timer_delete(r9) 297.3285ms ago: executing program 0 (id=761): r0 = creat(&(0x7f0000000140)='./bus\x00', 0x4e) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback={0xff00000000000000}}, 0x62) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000014"], 0x6c}}, 0x0) 184.050869ms ago: executing program 1 (id=762): socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/107) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x40, 0x0, 0x33a}, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xdc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x30, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xc50, 0xe0, 0x5, 0x7fffffff}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x40050) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x2, 0x0, 0xfffff034}, {0x80000006}]}, 0x8) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60922ff50010210009000000000000000000fffffffffffffe8000000000000000000000000000aa00000000040190290b4b5f1cb03eab7800114f84008e269c032a18e1e29b1df02f3dd353ec174b2ef8ce4ea07e0396c207c819d3aba45c6fab94e35bec990af38f7994a1a7697fee6cb6f50d326b129e5db97ff9"], 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r8], &(0x7f0000000600)=[0x7], &(0x7f0000000300)=[r9], &(0x7f0000000340)}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x40, 0x0, 0x0) 15.232537ms ago: executing program 3 (id=763): unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x20000}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x1, 0x100) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback, 0x7}, 0x1c) sendmmsg$inet6(r4, &(0x7f000000ff00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)='r', 0x1}], 0x1}}], 0x1, 0x4000800) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in6=@loopback, 0x100, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x2c}, {0x6, 0x0, 0x1, 0x5}, {0x0, 0x0, 0xfffffffffffffffd, 0x2}, 0x4, 0x0, 0x1, 0x0, 0x5}, {{@in=@rand_addr=0x64010102, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x3500, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}}, 0xe4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, 0x0, 0x0, 0x8910, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x10, &(0x7f00000001c0), 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0xfe}]}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x4000) 0s ago: executing program 0 (id=764): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000040)="cb", 0xfffffdef) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000000)=0x1, 0x4) kernel console output (not intermixed with test programs): 7 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 242.469125][ T7712] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000129 [ 242.469145][ T7712] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 242.469159][ T7712] RDX: 00000000000081c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 242.469171][ T7712] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 242.469182][ T7712] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 242.469194][ T7712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.469220][ T7712] [ 242.474238][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 242.654377][ T5935] usb 1-1: SerialNumber: syz [ 242.712947][ T5935] usb 1-1: config 0 descriptor?? [ 242.722823][ T5935] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 242.749228][ T5935] em28xx 1-1:0.132: Video interface 132 found: [ 242.929190][ T9] usb 4-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 242.938537][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.946626][ T9] usb 4-1: Product: syz [ 242.951132][ T9] usb 4-1: Manufacturer: syz [ 242.955902][ T9] usb 4-1: SerialNumber: syz [ 242.964665][ T9] usb 4-1: config 0 descriptor?? [ 242.973185][ T9] rndis_host 4-1:0.0: skipping garbage [ 242.978823][ T9] rndis_host 4-1:0.0: More than one union descriptor, skipping ... [ 242.990958][ T9] usb 4-1: bad CDC descriptors [ 242.997986][ T9] cdc_acm 4-1:0.0: skipping garbage [ 243.003399][ T9] cdc_acm 4-1:0.0: More than one union descriptor, skipping ... [ 243.187785][ T7705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.196799][ T5935] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 243.211545][ T7705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.222966][ T52] usb 4-1: USB disconnect, device number 28 [ 243.638230][ T5935] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 243.665817][ T5935] em28xx 1-1:0.132: board has no eeprom [ 243.735393][ T9] usb 2-1: USB disconnect, device number 31 [ 243.816675][ T52] usb 5-1: USB disconnect, device number 34 [ 243.905853][ T5935] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 243.930701][ T5935] em28xx 1-1:0.132: analog set to bulk mode. [ 243.960332][ T5894] em28xx 1-1:0.132: Registering V4L2 extension [ 244.001438][ T5935] usb 1-1: USB disconnect, device number 34 [ 244.014928][ T7727] netlink: 60 bytes leftover after parsing attributes in process `syz.4.491'. [ 244.015364][ T5935] em28xx 1-1:0.132: Disconnecting em28xx [ 244.074907][ T7723] netlink: 60 bytes leftover after parsing attributes in process `syz.4.491'. [ 244.205230][ T5892] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 244.222051][ T5894] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 244.240216][ T5894] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 244.251069][ T5894] em28xx 1-1:0.132: No AC97 audio processor [ 244.273353][ T7735] syz.3.503: attempt to access beyond end of device [ 244.273353][ T7735] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 244.287699][ T7735] openvswitch: netlink: Duplicate key (type 0). [ 244.307936][ T5894] usb 1-1: Decoder not found [ 244.322960][ T5894] em28xx 1-1:0.132: failed to create media graph [ 244.329998][ T5894] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 244.342125][ T5894] em28xx 1-1:0.132: Remote control support is not available for this card. [ 244.352163][ T5935] em28xx 1-1:0.132: Closing input extension [ 244.367143][ T5935] em28xx 1-1:0.132: Freeing device [ 244.395531][ T5892] usb 3-1: config 0 has an invalid interface number: 207 but max is 0 [ 244.423165][ T5892] usb 3-1: config 0 has no interface number 0 [ 244.457171][ T5892] usb 3-1: config 0 interface 207 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 244.519246][ T5892] usb 3-1: config 0 interface 207 has no altsetting 0 [ 244.587665][ T5892] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 244.618056][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.659027][ T5892] usb 3-1: config 0 descriptor?? [ 244.673874][ T7725] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 244.693700][ T5892] keyspan 3-1:0.207: Keyspan 2 port adapter converter detected [ 244.752484][ T5892] keyspan 3-1:0.207: found no endpoint descriptor for endpoint 81 [ 244.783996][ T5892] keyspan 3-1:0.207: found no endpoint descriptor for endpoint 82 [ 244.831082][ T5892] keyspan 3-1:0.207: found no endpoint descriptor for endpoint 1 [ 244.875504][ T5892] keyspan 3-1:0.207: found no endpoint descriptor for endpoint 2 [ 245.093694][ T5935] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 245.143865][ T5892] keyspan 3-1:0.207: found no endpoint descriptor for endpoint 85 [ 245.151870][ T5892] keyspan 3-1:0.207: found no endpoint descriptor for endpoint 5 [ 245.176271][ T7725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.224176][ T7725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.265218][ T5892] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 245.292677][ T5892] keyspan 3-1:0.207: found no endpoint descriptor for endpoint 83 [ 245.297134][ T5935] usb 1-1: Using ep0 maxpacket: 16 [ 245.310504][ T5892] keyspan 3-1:0.207: found no endpoint descriptor for endpoint 84 [ 245.319770][ T5892] keyspan 3-1:0.207: found no endpoint descriptor for endpoint 3 [ 245.331122][ T5935] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 245.332938][ T5892] keyspan 3-1:0.207: found no endpoint descriptor for endpoint 4 [ 245.339985][ T7725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.352397][ T5892] keyspan 3-1:0.207: found no endpoint descriptor for endpoint 86 [ 245.364637][ T5935] usb 1-1: config 0 has no interface number 0 [ 245.372566][ T5935] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 245.395976][ T7725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.414046][ T5935] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 245.418338][ T5892] keyspan 3-1:0.207: found no endpoint descriptor for endpoint 6 [ 245.457864][ T5935] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 245.462220][ T5892] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 245.483717][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 245.504043][ T5935] usb 1-1: Product: syz [ 245.508274][ T5935] usb 1-1: SerialNumber: syz [ 245.878226][ T5935] usb 1-1: config 0 descriptor?? [ 245.898678][ T7741] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 245.938256][ T7751] futex_wake_op: syz.4.493 tries to shift op by -33; fix this program [ 246.230156][ T7752] netdevsim netdevsim4: Direct firmware load for . [ 246.230156][ T7752] failed with error -2 [ 246.366110][ T979] usb 3-1: USB disconnect, device number 30 [ 246.408643][ T5935] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 246.427283][ T979] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 246.447049][ T5935] usb 1-1: invalid MIDI in EP 0 [ 246.454137][ T7752] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 246.454137][ T7752] [ 246.471066][ T979] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 246.665290][ T979] keyspan 3-1:0.207: device disconnected [ 247.035591][ T5935] snd-usb-audio 1-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 247.104112][ T5935] usb 1-1: USB disconnect, device number 35 [ 247.323842][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.225216][ T5935] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 248.511706][ T5935] usb 5-1: config 0 has no interfaces? [ 248.526161][ T5935] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 248.535744][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.621340][ T5935] usb 5-1: Product: syz [ 248.841783][ T5935] usb 5-1: Manufacturer: syz [ 248.853770][ T5935] usb 5-1: SerialNumber: syz [ 248.878839][ T5935] usb 5-1: config 0 descriptor?? [ 249.376676][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 249.560339][ T7778] futex_wake_op: syz.3.504 tries to shift op by -33; fix this program [ 249.984731][ T7797] capability: warning: `syz.1.508' uses deprecated v2 capabilities in a way that may be insecure [ 250.065686][ T5892] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 250.088595][ T7794] netdevsim netdevsim3: Direct firmware load for . [ 250.088595][ T7794] failed with error -2 [ 250.233632][ T7794] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 250.233632][ T7794] [ 250.244010][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 250.264453][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.283979][ T5892] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 250.322518][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.981463][ T5892] usb 1-1: config 0 descriptor?? [ 251.224639][ T5935] usb 1-1: USB disconnect, device number 36 [ 251.308083][ T5894] usb 5-1: USB disconnect, device number 35 [ 252.099154][ T7821] FAULT_INJECTION: forcing a failure. [ 252.099154][ T7821] name failslab, interval 1, probability 0, space 0, times 0 [ 252.117151][ T7821] CPU: 1 UID: 0 PID: 7821 Comm: syz.3.519 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 252.117180][ T7821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 252.117191][ T7821] Call Trace: [ 252.117198][ T7821] [ 252.117206][ T7821] dump_stack_lvl+0x241/0x360 [ 252.117241][ T7821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.117269][ T7821] ? __pfx__printk+0x10/0x10 [ 252.117309][ T7821] ? ref_tracker_alloc+0x316/0x4c0 [ 252.117333][ T7821] should_fail_ex+0x424/0x570 [ 252.117357][ T7821] should_failslab+0xac/0x100 [ 252.117386][ T7821] kmem_cache_alloc_noprof+0x78/0x390 [ 252.117412][ T7821] ? skb_clone+0x20c/0x390 [ 252.117438][ T7821] skb_clone+0x20c/0x390 [ 252.117463][ T7821] __netlink_deliver_tap+0x3c4/0x7f0 [ 252.117502][ T7821] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.117528][ T7821] netlink_deliver_tap+0x19d/0x1b0 [ 252.117556][ T7821] netlink_sendskb+0x68/0x140 [ 252.117582][ T7821] netlink_unicast+0x39f/0x9a0 [ 252.117603][ T7821] ? __asan_memcpy+0x40/0x70 [ 252.117631][ T7821] ? __pfx_netlink_unicast+0x10/0x10 [ 252.117665][ T7821] netlink_rcv_skb+0x296/0x480 [ 252.117692][ T7821] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 252.117715][ T7821] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 252.117755][ T7821] ? apparmor_capable+0x13b/0x1b0 [ 252.117777][ T7821] ? bpf_lsm_capable+0x9/0x10 [ 252.117799][ T7821] ? security_capable+0x7e/0x2d0 [ 252.117832][ T7821] nfnetlink_rcv+0x296/0x28f0 [ 252.117855][ T7821] ? __dev_queue_xmit+0x2f9/0x3f60 [ 252.117877][ T7821] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 252.117901][ T7821] ? __dev_queue_xmit+0x2f9/0x3f60 [ 252.117922][ T7821] ? __dev_queue_xmit+0x2f9/0x3f60 [ 252.117946][ T7821] ? __dev_queue_xmit+0x1780/0x3f60 [ 252.117965][ T7821] ? kasan_save_track+0x3f/0x80 [ 252.117984][ T7821] ? __kasan_slab_alloc+0x66/0x80 [ 252.118012][ T7821] ? __do_fast_syscall_32+0xb4/0x110 [ 252.118040][ T7821] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 252.118060][ T7821] ? __dev_queue_xmit+0x2f9/0x3f60 [ 252.118086][ T7821] ? __pfx___dev_queue_xmit+0x10/0x10 [ 252.118122][ T7821] ? ref_tracker_free+0x63e/0x7e0 [ 252.118143][ T7821] ? __asan_memcpy+0x40/0x70 [ 252.118161][ T7821] ? __pfx_ref_tracker_free+0x10/0x10 [ 252.118198][ T7821] ? __skb_clone+0x5c/0x6d0 [ 252.118237][ T7821] ? skb_clone+0x240/0x390 [ 252.118271][ T7821] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.118308][ T7821] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.118337][ T7821] netlink_unicast+0x7f8/0x9a0 [ 252.118372][ T7821] ? __pfx_netlink_unicast+0x10/0x10 [ 252.118401][ T7821] ? skb_put+0x114/0x1f0 [ 252.118425][ T7821] netlink_sendmsg+0x8c3/0xcd0 [ 252.118464][ T7821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.118498][ T7821] ? __import_iovec+0x585/0x830 [ 252.118525][ T7821] ? aa_sock_msg_perm+0x91/0x160 [ 252.118558][ T7821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.118585][ T7821] __sock_sendmsg+0x221/0x270 [ 252.118616][ T7821] ____sys_sendmsg+0x523/0x860 [ 252.118648][ T7821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.118687][ T7821] __sys_sendmsg+0x271/0x360 [ 252.118715][ T7821] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.118790][ T7821] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 252.118816][ T7821] ? lockdep_hardirqs_on+0x9d/0x150 [ 252.118844][ T7821] __do_fast_syscall_32+0xb4/0x110 [ 252.118869][ T7821] ? exc_page_fault+0x5f8/0x920 [ 252.118897][ T7821] do_fast_syscall_32+0x34/0x80 [ 252.118923][ T7821] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.118946][ T7821] RIP: 0023:0xf7f54579 [ 252.118963][ T7821] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 252.118979][ T7821] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 252.119001][ T7821] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 252.119015][ T7821] RDX: 0000000020040040 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.119027][ T7821] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.119039][ T7821] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 252.119050][ T7821] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.119079][ T7821] [ 252.593705][ T5935] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 252.641966][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 252.757419][ T5935] usb 2-1: config index 0 descriptor too short (expected 244, got 18) [ 252.769667][ T5935] usb 2-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=61.d7 [ 252.800461][ T5935] usb 2-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 252.832906][ T5935] usb 2-1: Product: syz [ 252.840960][ T5935] usb 2-1: Manufacturer: syz [ 252.848765][ T5935] usb 2-1: SerialNumber: syz [ 252.910305][ T5935] usb 2-1: config 0 descriptor?? [ 252.923538][ T5935] ldusb 2-1:0.0: Interrupt in endpoint not found [ 253.211872][ T7843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.212167][ T7843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.479686][ T5935] usb 2-1: USB disconnect, device number 32 [ 254.274727][ T7857] netlink: 6 bytes leftover after parsing attributes in process `syz.4.525'. [ 254.689488][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'. [ 254.743784][ T5935] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 254.933973][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 254.943209][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.957458][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.978617][ T5935] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 255.002799][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.030340][ T5935] usb 2-1: config 0 descriptor?? [ 255.099976][ T7870] FAULT_INJECTION: forcing a failure. [ 255.099976][ T7870] name failslab, interval 1, probability 0, space 0, times 0 [ 255.122779][ T7870] CPU: 0 UID: 0 PID: 7870 Comm: syz.0.532 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 255.122808][ T7870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 255.122820][ T7870] Call Trace: [ 255.122829][ T7870] [ 255.122837][ T7870] dump_stack_lvl+0x241/0x360 [ 255.122876][ T7870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.122906][ T7870] ? __pfx__printk+0x10/0x10 [ 255.122938][ T7870] ? __pfx___might_resched+0x10/0x10 [ 255.122968][ T7870] should_fail_ex+0x424/0x570 [ 255.122995][ T7870] should_failslab+0xac/0x100 [ 255.123026][ T7870] ? __get_vm_area_node+0x132/0x2d0 [ 255.123055][ T7870] __kmalloc_cache_node_noprof+0x74/0x3c0 [ 255.123109][ T7870] __get_vm_area_node+0x132/0x2d0 [ 255.123144][ T7870] __vmalloc_node_range_noprof+0x349/0x1390 [ 255.123165][ T7870] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 255.123186][ T7870] ? kstrtoull+0x1d3/0x2f0 [ 255.123203][ T7870] ? __pfx_kstrtoull+0x10/0x10 [ 255.123231][ T7870] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 255.123252][ T7870] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 255.123266][ T7870] __vmalloc_noprof+0x79/0x90 [ 255.123279][ T7870] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 255.123295][ T7870] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 255.123310][ T7870] ? bpf_prog_alloc+0x28/0x1b0 [ 255.123327][ T7870] bpf_prog_alloc+0x3a/0x1b0 [ 255.123346][ T7870] bpf_prog_load+0x7f4/0x2250 [ 255.123370][ T7870] ? __pfx_bpf_prog_load+0x10/0x10 [ 255.123401][ T7870] ? bpf_lsm_bpf+0x9/0x10 [ 255.123419][ T7870] __sys_bpf+0x5dd/0x8b0 [ 255.123435][ T7870] ? __pfx___sys_bpf+0x10/0x10 [ 255.123459][ T7870] ? ksys_write+0x275/0x2d0 [ 255.123483][ T7870] __ia32_sys_bpf+0x7c/0x90 [ 255.123506][ T7870] __do_fast_syscall_32+0xb4/0x110 [ 255.123525][ T7870] ? exc_page_fault+0x5f8/0x920 [ 255.123545][ T7870] do_fast_syscall_32+0x34/0x80 [ 255.123563][ T7870] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 255.123587][ T7870] RIP: 0023:0xf704d579 [ 255.123604][ T7870] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 255.123621][ T7870] RSP: 002b:00000000f503d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 255.123638][ T7870] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000240 [ 255.123648][ T7870] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 255.123657][ T7870] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 255.123665][ T7870] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 255.123673][ T7870] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 255.123693][ T7870] [ 255.382216][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.449110][ T7870] syz.0.532: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 255.473975][ T7870] CPU: 0 UID: 0 PID: 7870 Comm: syz.0.532 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 255.474003][ T7870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 255.474015][ T7870] Call Trace: [ 255.474023][ T7870] [ 255.474031][ T7870] dump_stack_lvl+0x241/0x360 [ 255.474073][ T7870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.474102][ T7870] ? __pfx__printk+0x10/0x10 [ 255.474127][ T7870] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 255.474159][ T7870] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 255.474186][ T7870] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 255.474216][ T7870] warn_alloc+0x27c/0x410 [ 255.474240][ T7870] ? __pfx_warn_alloc+0x10/0x10 [ 255.474269][ T7870] ? __get_vm_area_node+0x280/0x2d0 [ 255.474305][ T7870] __vmalloc_node_range_noprof+0x36e/0x1390 [ 255.474327][ T7870] ? kstrtoull+0x1d3/0x2f0 [ 255.474352][ T7870] ? __pfx_kstrtoull+0x10/0x10 [ 255.474391][ T7870] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 255.474422][ T7870] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 255.474443][ T7870] __vmalloc_noprof+0x79/0x90 [ 255.474462][ T7870] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 255.474485][ T7870] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 255.474507][ T7870] ? bpf_prog_alloc+0x28/0x1b0 [ 255.474531][ T7870] bpf_prog_alloc+0x3a/0x1b0 [ 255.474556][ T7870] bpf_prog_load+0x7f4/0x2250 [ 255.474591][ T7870] ? __pfx_bpf_prog_load+0x10/0x10 [ 255.474637][ T7870] ? bpf_lsm_bpf+0x9/0x10 [ 255.474664][ T7870] __sys_bpf+0x5dd/0x8b0 [ 255.474687][ T7870] ? __pfx___sys_bpf+0x10/0x10 [ 255.474722][ T7870] ? ksys_write+0x275/0x2d0 [ 255.474757][ T7870] __ia32_sys_bpf+0x7c/0x90 [ 255.474790][ T7870] __do_fast_syscall_32+0xb4/0x110 [ 255.474816][ T7870] ? exc_page_fault+0x5f8/0x920 [ 255.474845][ T7870] do_fast_syscall_32+0x34/0x80 [ 255.474872][ T7870] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 255.474896][ T7870] RIP: 0023:0xf704d579 [ 255.474913][ T7870] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 255.474931][ T7870] RSP: 002b:00000000f503d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 255.474951][ T7870] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000240 [ 255.474965][ T7870] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 255.474977][ T7870] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 255.474988][ T7870] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 255.475000][ T7870] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 255.475028][ T7870] [ 255.475558][ T7870] Mem-Info: [ 255.682721][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.766515][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.773475][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.785304][ T5935] playstation 0003:054C:05C4.0003: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0 [ 255.863704][ T7870] active_anon:8152 inactive_anon:0 isolated_anon:0 [ 255.863704][ T7870] active_file:1828 inactive_file:38336 isolated_file:0 [ 255.863704][ T7870] unevictable:793 dirty:156 writeback:0 [ 255.863704][ T7870] slab_reclaimable:9780 slab_unreclaimable:102245 [ 255.863704][ T7870] mapped:33685 shmem:4277 pagetables:965 [ 255.863704][ T7870] sec_pagetables:0 bounce:0 [ 255.863704][ T7870] kernel_misc_reclaimable:0 [ 255.863704][ T7870] free:1332402 free_pcp:358 free_cma:0 [ 255.930629][ T5935] playstation 0003:054C:05C4.0003: Invalid byte count transferred, expected 16 got 0 [ 255.963894][ T5935] playstation 0003:054C:05C4.0003: Failed to retrieve DualShock4 pairing info: -22 [ 255.986890][ T7870] Node 0 active_anon:32724kB inactive_anon:0kB active_file:7328kB inactive_file:153272kB unevictable:1712kB isolated(anon):0kB isolated(file):0kB mapped:134832kB dirty:664kB writeback:0kB shmem:15580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11468kB pagetables:3856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 256.020553][ T5935] playstation 0003:054C:05C4.0003: Failed to get MAC address from DualShock4 [ 256.020591][ T5935] playstation 0003:054C:05C4.0003: Failed to create dualshock4. [ 256.034844][ T5935] playstation 0003:054C:05C4.0003: probe with driver playstation failed with error -22 [ 256.130714][ T7870] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 256.284896][ T7870] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 256.378066][ T5892] usb 2-1: USB disconnect, device number 33 [ 256.453650][ T7870] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 256.459508][ T7870] Node 0 DMA32 free:1412312kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:24416kB inactive_anon:0kB active_file:7328kB inactive_file:153180kB unevictable:1712kB writepending:664kB present:3129332kB managed:2547232kB mlocked:176kB bounce:0kB free_pcp:2796kB local_pcp:628kB free_cma:0kB [ 256.490040][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.593677][ T7870] lowmem_reserve[]: 0 0 0 0 0 [ 256.601127][ T7870] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 256.678678][ T7870] lowmem_reserve[]: 0 0 0 0 0 [ 256.696115][ T7870] Node 1 Normal free:3909224kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:64kB free_cma:0kB [ 256.725128][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.772393][ T7870] lowmem_reserve[]: 0 0 0 0 0 [ 256.786114][ T7870] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 256.809130][ T7870] Node 0 DMA32: 337*4kB (UME) 404*8kB (UM) 507*16kB (UM) 194*32kB (UME) 106*64kB (UME) 71*128kB (UME) 25*256kB (UME) 16*512kB (UM) 6*1024kB (UME) 2*2048kB (ME) 331*4096kB (UM) = 1415380kB [ 256.843207][ T7870] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 256.865925][ T7870] Node 1 Normal: 278*4kB (UE) 70*8kB (UME) 34*16kB (UME) 222*32kB (UME) 108*64kB (UME) 34*128kB (UME) 24*256kB (UM) 9*512kB (UME) 5*1024kB (UME) 3*2048kB (UE) 944*4096kB (M) = 3909224kB [ 256.889988][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 256.890007][ T30] audit: type=1326 audit(1744856835.383:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 256.917821][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.924622][ T30] audit: type=1326 audit(1744856835.403:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 256.947787][ T30] audit: type=1326 audit(1744856835.473:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 256.980804][ T7870] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 256.991089][ T30] audit: type=1326 audit(1744856835.473:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 256.991142][ T30] audit: type=1326 audit(1744856835.473:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 257.034666][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.108692][ T30] audit: type=1326 audit(1744856835.473:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 257.115348][ T7870] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 257.130494][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.142868][ T7891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 257.166918][ T7870] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.178894][ T30] audit: type=1326 audit(1744856835.473:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 257.200622][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.230783][ T7870] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 257.240631][ T30] audit: type=1326 audit(1744856835.473:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 257.262946][ T7870] 42823 total pagecache pages [ 257.274570][ T7870] 0 pages in swap cache [ 257.278761][ T7870] Free swap = 124996kB [ 257.287029][ T30] audit: type=1326 audit(1744856835.473:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 257.313105][ T7870] Total swap = 124996kB [ 257.317669][ T7870] 2097051 pages RAM [ 257.321504][ T7870] 0 pages HighMem/MovableOnly [ 257.330643][ T7870] 428585 pages reserved [ 257.335070][ T7870] 0 pages cma reserved [ 257.340452][ T30] audit: type=1326 audit(1744856835.473:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 257.423693][ T5846] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 257.575813][ T5846] usb 4-1: config index 0 descriptor too short (expected 244, got 18) [ 257.597123][ T5846] usb 4-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=61.d7 [ 257.615554][ T5846] usb 4-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 257.637604][ T5846] usb 4-1: Product: syz [ 257.648787][ T5846] usb 4-1: Manufacturer: syz [ 257.663834][ T5846] usb 4-1: SerialNumber: syz [ 257.680450][ T5846] usb 4-1: config 0 descriptor?? [ 257.709417][ T5846] ldusb 4-1:0.0: Interrupt in endpoint not found [ 257.992322][ T7888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.992608][ T7888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.024713][ T5846] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 258.173767][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 258.175190][ T5846] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.175211][ T5846] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 258.175229][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 258.175251][ T5846] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 258.175266][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.177341][ T5846] usb 3-1: config 0 descriptor?? [ 258.639811][ T5846] corsair-cpro 0003:1B1C:0C10.0004: item fetching failed at offset 3/5 [ 258.663190][ T5846] corsair-cpro 0003:1B1C:0C10.0004: probe with driver corsair-cpro failed with error -22 [ 258.741428][ T979] usb 4-1: USB disconnect, device number 29 [ 258.946465][ T9] usb 3-1: USB disconnect, device number 31 [ 259.011934][ T7910] netlink: 6 bytes leftover after parsing attributes in process `syz.4.542'. [ 260.211714][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.549'. [ 260.858674][ T7937] netlink: 60 bytes leftover after parsing attributes in process `syz.1.552'. [ 260.877930][ T7935] netlink: 60 bytes leftover after parsing attributes in process `syz.1.552'. [ 261.065151][ T5846] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 261.339188][ T5846] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 261.361182][ T7943] FAULT_INJECTION: forcing a failure. [ 261.361182][ T7943] name failslab, interval 1, probability 0, space 0, times 0 [ 261.398469][ T7943] CPU: 0 UID: 0 PID: 7943 Comm: syz.1.555 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 261.398500][ T7943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 261.398513][ T7943] Call Trace: [ 261.398520][ T7943] [ 261.398528][ T7943] dump_stack_lvl+0x241/0x360 [ 261.398572][ T7943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.398601][ T7943] ? __pfx__printk+0x10/0x10 [ 261.398635][ T7943] ? ref_tracker_alloc+0x316/0x4c0 [ 261.398661][ T7943] should_fail_ex+0x424/0x570 [ 261.398687][ T7943] should_failslab+0xac/0x100 [ 261.398716][ T7943] kmem_cache_alloc_noprof+0x78/0x390 [ 261.398743][ T7943] ? skb_clone+0x20c/0x390 [ 261.398772][ T7943] skb_clone+0x20c/0x390 [ 261.398798][ T7943] __netlink_deliver_tap+0x3c4/0x7f0 [ 261.398840][ T7943] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.398868][ T7943] netlink_deliver_tap+0x19d/0x1b0 [ 261.398898][ T7943] netlink_sendskb+0x68/0x140 [ 261.398926][ T7943] netlink_unicast+0x39f/0x9a0 [ 261.398949][ T7943] ? __asan_memcpy+0x40/0x70 [ 261.398979][ T7943] ? __pfx_netlink_unicast+0x10/0x10 [ 261.399015][ T7943] netlink_rcv_skb+0x296/0x480 [ 261.399044][ T7943] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 261.399076][ T7943] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 261.399124][ T7943] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.399155][ T7943] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.399187][ T7943] netlink_unicast+0x7f8/0x9a0 [ 261.399223][ T7943] ? __pfx_netlink_unicast+0x10/0x10 [ 261.399251][ T7943] ? skb_put+0x114/0x1f0 [ 261.399275][ T7943] netlink_sendmsg+0x8c3/0xcd0 [ 261.399317][ T7943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.399350][ T7943] ? __import_iovec+0x585/0x830 [ 261.399377][ T7943] ? aa_sock_msg_perm+0x91/0x160 [ 261.399411][ T7943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.399438][ T7943] __sock_sendmsg+0x221/0x270 [ 261.399469][ T7943] ____sys_sendmsg+0x523/0x860 [ 261.399504][ T7943] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.399549][ T7943] __sys_sendmsg+0x271/0x360 [ 261.399577][ T7943] ? __pfx___sys_sendmsg+0x10/0x10 [ 261.399657][ T7943] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 261.399682][ T7943] ? lockdep_hardirqs_on+0x9d/0x150 [ 261.399709][ T7943] __do_fast_syscall_32+0xb4/0x110 [ 261.399734][ T7943] ? exc_page_fault+0x5f8/0x920 [ 261.399763][ T7943] do_fast_syscall_32+0x34/0x80 [ 261.399789][ T7943] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.399812][ T7943] RIP: 0023:0xf70bd579 [ 261.399829][ T7943] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 261.399846][ T7943] RSP: 002b:00000000f50ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 261.399868][ T7943] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080004380 [ 261.399882][ T7943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.399893][ T7943] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 261.399904][ T7943] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 261.399915][ T7943] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 261.399944][ T7943] [ 261.706571][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.733674][ T5846] usb 4-1: config 179 has no interface number 0 [ 261.747379][ T5846] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 64 [ 261.993699][ T5846] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 262.077992][ T5846] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 255, setting to 64 [ 262.140547][ T5846] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 262.164354][ T5846] usb 4-1: config 179 interface 65 has no altsetting 0 [ 262.183762][ T5846] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 262.223681][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.265725][ T7932] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 262.273204][ T7932] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 262.372566][ T5846] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input15 [ 262.494910][ T5196] input input15: unable to receive magic message: -110 [ 262.553823][ T5894] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 262.604017][ T5846] usb 4-1: USB disconnect, device number 30 [ 262.609985][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 262.610024][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 262.738749][ T5846] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 262.784278][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 262.808693][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.824689][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.905430][ T5894] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 262.921906][ T5894] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 263.057030][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.088340][ T5894] usb 2-1: config 0 descriptor?? [ 263.152900][ T7959] netlink: 6 bytes leftover after parsing attributes in process `syz.0.556'. [ 263.455069][ T7961] FAULT_INJECTION: forcing a failure. [ 263.455069][ T7961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.502325][ T7952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.515610][ T7952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.557777][ T7961] CPU: 0 UID: 0 PID: 7961 Comm: syz.3.561 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 263.557809][ T7961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 263.557826][ T7961] Call Trace: [ 263.557834][ T7961] [ 263.557843][ T7961] dump_stack_lvl+0x241/0x360 [ 263.557880][ T7961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.557910][ T7961] ? __pfx__printk+0x10/0x10 [ 263.557950][ T7961] should_fail_ex+0x424/0x570 [ 263.557976][ T7961] _copy_to_user+0x31/0xb0 [ 263.558019][ T7961] simple_read_from_buffer+0xc4/0x170 [ 263.558051][ T7961] proc_fail_nth_read+0x1ef/0x260 [ 263.558075][ T7961] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.558098][ T7961] ? rw_verify_area+0x246/0x630 [ 263.558118][ T7961] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.558138][ T7961] vfs_read+0x21f/0xb90 [ 263.558164][ T7961] ? __pfx___mutex_lock+0x10/0x10 [ 263.558189][ T7961] ? __pfx_vfs_read+0x10/0x10 [ 263.558213][ T7961] ? __fget_files+0x2a/0x420 [ 263.558232][ T7961] ? __fget_files+0x39d/0x420 [ 263.558247][ T7961] ? __fget_files+0x2a/0x420 [ 263.558273][ T7961] ksys_read+0x19d/0x2d0 [ 263.558296][ T7961] ? __pfx_ksys_read+0x10/0x10 [ 263.558320][ T7961] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 263.558343][ T7961] ? lockdep_hardirqs_on+0x9d/0x150 [ 263.558368][ T7961] __do_fast_syscall_32+0xb4/0x110 [ 263.558392][ T7961] ? exc_page_fault+0x5f8/0x920 [ 263.558419][ T7961] do_fast_syscall_32+0x34/0x80 [ 263.558442][ T7961] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.558465][ T7961] RIP: 0023:0xf7f54579 [ 263.558481][ T7961] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 263.558497][ T7961] RSP: 002b:00000000f5076590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 263.558516][ T7961] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5076620 [ 263.558529][ T7961] RDX: 000000000000000f RSI: 00000000f73e2ff4 RDI: 0000000000000000 [ 263.558540][ T7961] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 263.558550][ T7961] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 263.558561][ T7961] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.558588][ T7961] [ 263.851640][ T5894] usbhid 2-1:0.0: can't add hid device: -71 [ 263.861839][ T5894] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 263.886708][ T5894] usb 2-1: USB disconnect, device number 34 [ 264.436040][ T7980] bridge0: port 3(syz_tun) entered blocking state [ 264.449743][ T7980] bridge0: port 3(syz_tun) entered disabled state [ 264.483092][ T7980] syz_tun: entered allmulticast mode [ 264.521577][ T7980] syz_tun: entered promiscuous mode [ 264.535642][ T7980] bridge0: port 3(syz_tun) entered blocking state [ 264.542524][ T7980] bridge0: port 3(syz_tun) entered forwarding state [ 264.576871][ T7982] loop4: detected capacity change from 0 to 524287999 [ 264.864449][ T5894] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 264.994099][ T52] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 265.025153][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.047026][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 265.129375][ T5894] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 265.161997][ T52] usb 1-1: config index 0 descriptor too short (expected 244, got 18) [ 265.180689][ T5894] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.335725][ T52] usb 1-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=61.d7 [ 265.399839][ T52] usb 1-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 265.409292][ T52] usb 1-1: Product: syz [ 265.413701][ T52] usb 1-1: Manufacturer: syz [ 265.418330][ T52] usb 1-1: SerialNumber: syz [ 265.426319][ T52] usb 1-1: config 0 descriptor?? [ 265.433652][ T52] ldusb 1-1:0.0: Interrupt in endpoint not found [ 265.444916][ T5894] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 265.498204][ T5894] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 265.534793][ T5894] usb 5-1: Manufacturer: syz [ 265.564916][ T5894] usb 5-1: config 0 descriptor?? [ 265.694975][ T7995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.695314][ T7995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.760824][ T7997] process 'syz.3.574' launched './file0' with NULL argv: empty string added [ 265.763453][ T7996] delete_channel: no stack [ 265.764165][ T7996] delete_channel: no stack [ 265.835092][ T7999] FAULT_INJECTION: forcing a failure. [ 265.835092][ T7999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.896152][ T7999] CPU: 0 UID: 0 PID: 7999 Comm: syz.2.575 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 265.896180][ T7999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 265.896192][ T7999] Call Trace: [ 265.896208][ T7999] [ 265.896215][ T7999] dump_stack_lvl+0x241/0x360 [ 265.896250][ T7999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.896277][ T7999] ? __pfx__printk+0x10/0x10 [ 265.896326][ T7999] should_fail_ex+0x424/0x570 [ 265.896350][ T7999] _copy_to_user+0x31/0xb0 [ 265.896378][ T7999] simple_read_from_buffer+0xc4/0x170 [ 265.896408][ T7999] proc_fail_nth_read+0x1ef/0x260 [ 265.896429][ T7999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.896450][ T7999] ? rw_verify_area+0x246/0x630 [ 265.896470][ T7999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.896490][ T7999] vfs_read+0x21f/0xb90 [ 265.896514][ T7999] ? __pfx___mutex_lock+0x10/0x10 [ 265.896556][ T7999] ? __pfx_vfs_read+0x10/0x10 [ 265.896581][ T7999] ? __fget_files+0x2a/0x420 [ 265.896600][ T7999] ? __fget_files+0x39d/0x420 [ 265.896616][ T7999] ? __fget_files+0x2a/0x420 [ 265.896641][ T7999] ksys_read+0x19d/0x2d0 [ 265.896665][ T7999] ? __pfx_ksys_read+0x10/0x10 [ 265.896689][ T7999] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 265.896722][ T7999] ? lockdep_hardirqs_on+0x9d/0x150 [ 265.896745][ T7999] __do_fast_syscall_32+0xb4/0x110 [ 265.896768][ T7999] ? exc_page_fault+0x5f8/0x920 [ 265.896811][ T7999] do_fast_syscall_32+0x34/0x80 [ 265.896835][ T7999] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 265.896858][ T7999] RIP: 0023:0xf7f35579 [ 265.896874][ T7999] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 265.896890][ T7999] RSP: 002b:00000000f5056590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 265.896910][ T7999] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5056620 [ 265.896923][ T7999] RDX: 000000000000000f RSI: 00000000f73c2ff4 RDI: 0000000000000000 [ 265.896935][ T7999] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 265.896945][ T7999] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 265.896956][ T7999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 265.896983][ T7999] [ 265.948535][ T7998] delete_channel: no stack [ 266.166435][ T7998] delete_channel: no stack [ 266.294037][ T9] usb 1-1: USB disconnect, device number 37 [ 266.952677][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 266.978641][ T24] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 267.119724][ T8029] FAULT_INJECTION: forcing a failure. [ 267.119724][ T8029] name failslab, interval 1, probability 0, space 0, times 0 [ 267.140257][ T8029] CPU: 0 UID: 0 PID: 8029 Comm: syz.1.588 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 267.140286][ T8029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 267.140295][ T8029] Call Trace: [ 267.140300][ T8029] [ 267.140306][ T8029] dump_stack_lvl+0x241/0x360 [ 267.140332][ T8029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.140353][ T8029] ? __pfx__printk+0x10/0x10 [ 267.140380][ T8029] should_fail_ex+0x424/0x570 [ 267.140399][ T8029] should_failslab+0xac/0x100 [ 267.140419][ T8029] __kmalloc_cache_noprof+0x73/0x370 [ 267.140437][ T8029] ? sctp_add_bind_addr+0x89/0x3a0 [ 267.140459][ T8029] sctp_add_bind_addr+0x89/0x3a0 [ 267.140479][ T8029] sctp_copy_local_addr_list+0x313/0x500 [ 267.140499][ T8029] ? sctp_copy_local_addr_list+0xad/0x500 [ 267.140518][ T8029] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 267.140538][ T8029] ? sctp_v6_is_any+0x60/0x70 [ 267.140558][ T8029] ? sctp_copy_one_addr+0x94/0x360 [ 267.140579][ T8029] sctp_bind_addr_copy+0xad/0x3b0 [ 267.140597][ T8029] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 267.140615][ T8029] sctp_connect_new_asoc+0x337/0x700 [ 267.140631][ T8029] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 267.140643][ T8029] ? sctp_sendmsg+0xf30/0x3620 [ 267.140659][ T8029] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 267.140671][ T8029] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 267.140688][ T8029] sctp_sendmsg+0x2009/0x3620 [ 267.140716][ T8029] ? __pfx_sctp_sendmsg+0x10/0x10 [ 267.140730][ T8029] ? aa_sk_perm+0x96f/0xac0 [ 267.140759][ T8029] ? inet_sendmsg+0x330/0x390 [ 267.140777][ T8029] __sock_sendmsg+0x1a6/0x270 [ 267.140799][ T8029] __sys_sendto+0x365/0x4c0 [ 267.140815][ T8029] ? __pfx___sys_sendto+0x10/0x10 [ 267.140837][ T8029] ? __fget_files+0x2a/0x420 [ 267.140855][ T8029] ? ksys_write+0x275/0x2d0 [ 267.140877][ T8029] __ia32_sys_sendto+0xdd/0x100 [ 267.140893][ T8029] __do_fast_syscall_32+0xb4/0x110 [ 267.140931][ T8029] ? exc_page_fault+0x5f8/0x920 [ 267.140960][ T8029] do_fast_syscall_32+0x34/0x80 [ 267.140985][ T8029] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.141009][ T8029] RIP: 0023:0xf70bd579 [ 267.141025][ T8029] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 267.141041][ T8029] RSP: 002b:00000000f50ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 267.141061][ T8029] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080847fff [ 267.141074][ T8029] RDX: 0000000000034000 RSI: 0000000000000000 RDI: 000000008005ffe4 [ 267.141093][ T8029] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 267.141104][ T8029] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 267.141116][ T8029] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.141139][ T8029] [ 267.419492][ T52] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 267.591888][ T9] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 267.886303][ T52] usb 4-1: config 0 has no interfaces? [ 267.968724][ T52] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 268.061515][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.072662][ T52] usb 4-1: Product: syz [ 268.075023][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 268.086667][ T9] usb 3-1: config 179 has no interface number 0 [ 268.093001][ T52] usb 4-1: Manufacturer: syz [ 268.102916][ T52] usb 4-1: SerialNumber: syz [ 268.103008][ T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 64 [ 268.123510][ T5846] usb 5-1: USB disconnect, device number 36 [ 268.136511][ T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 268.148362][ T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 255, setting to 64 [ 268.157444][ T52] usb 4-1: config 0 descriptor?? [ 268.160880][ T9] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 268.248937][ T9] usb 3-1: config 179 interface 65 has no altsetting 0 [ 268.283150][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 268.340257][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.360364][ T8023] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 268.368182][ T8023] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 268.387651][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input16 [ 268.464428][ T5196] input input16: unable to receive magic message: -110 [ 268.570402][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 268.579803][ T5196] input input16: unable to receive magic message: -32 [ 268.725075][ T5196] input input16: unable to receive magic message: -32 [ 268.830191][ T979] usb 3-1: USB disconnect, device number 32 [ 268.836251][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 268.862221][ T979] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 269.178977][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'. [ 269.188335][ T8052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.596'. [ 269.229563][ T8053] netlink: 28 bytes leftover after parsing attributes in process `syz.4.595'. [ 269.238655][ T8053] netlink: 40 bytes leftover after parsing attributes in process `syz.4.595'. [ 269.248750][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.595'. [ 269.623686][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 269.684828][ T24] usb 4-1: USB disconnect, device number 31 [ 269.808252][ T9] usb 1-1: config index 0 descriptor too short (expected 244, got 18) [ 269.856383][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=61.d7 [ 269.894972][ T979] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 269.912867][ T9] usb 1-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 269.933746][ T5894] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 269.957243][ T9] usb 1-1: Product: syz [ 269.961455][ T9] usb 1-1: Manufacturer: syz [ 269.972590][ T9] usb 1-1: SerialNumber: syz [ 269.999561][ T9] usb 1-1: config 0 descriptor?? [ 270.010478][ T9] ldusb 1-1:0.0: Interrupt in endpoint not found [ 270.085912][ T979] usb 5-1: Using ep0 maxpacket: 8 [ 270.096353][ T979] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 270.113867][ T5894] usb 3-1: device descriptor read/64, error -71 [ 270.120727][ T979] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 270.130805][ T979] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.142234][ T979] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.158292][ T979] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 270.167578][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.294154][ T8077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.294451][ T8077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.353904][ T5894] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 270.390755][ T979] usb 5-1: usb_control_msg returned -32 [ 270.390805][ T979] usbtmc 5-1:16.0: can't read capabilities [ 270.467548][ T24] usb 1-1: USB disconnect, device number 38 [ 270.483986][ T5894] usb 3-1: device descriptor read/64, error -71 [ 270.863955][ T5894] usb usb3-port1: attempt power cycle [ 270.934334][ T8081] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 271.380517][ T5894] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 271.394946][ T5894] usb 3-1: device descriptor read/8, error -71 [ 271.644720][ T5894] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 271.684718][ T5894] usb 3-1: device descriptor read/8, error -71 [ 271.794074][ T5894] usb usb3-port1: unable to enumerate USB device [ 272.634983][ T24] usb 5-1: USB disconnect, device number 37 [ 273.038285][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 273.038304][ T30] audit: type=1326 audit(1744856851.563:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 273.153217][ T30] audit: type=1326 audit(1744856851.563:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 273.193928][ T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 273.253533][ T30] audit: type=1326 audit(1744856851.603:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 273.300903][ T8105] netlink: 6 bytes leftover after parsing attributes in process `syz.1.609'. [ 273.363701][ T30] audit: type=1326 audit(1744856851.603:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 273.370607][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.391341][ T30] audit: type=1326 audit(1744856851.603:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 273.413618][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.442962][ T24] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 273.463666][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.500499][ T30] audit: type=1326 audit(1744856851.603:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 273.522246][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.533514][ T24] usb 1-1: config 0 descriptor?? [ 273.547092][ T30] audit: type=1326 audit(1744856851.603:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 273.568926][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.576248][ T30] audit: type=1326 audit(1744856851.603:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 273.603271][ T8113] FAULT_INJECTION: forcing a failure. [ 273.603271][ T8113] name failslab, interval 1, probability 0, space 0, times 0 [ 273.616085][ T8113] CPU: 1 UID: 0 PID: 8113 Comm: syz.3.614 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 273.616108][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 273.616116][ T8113] Call Trace: [ 273.616122][ T8113] [ 273.616128][ T8113] dump_stack_lvl+0x241/0x360 [ 273.616152][ T8113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.616172][ T8113] ? __pfx__printk+0x10/0x10 [ 273.616194][ T8113] ? __pfx___might_resched+0x10/0x10 [ 273.616214][ T8113] should_fail_ex+0x424/0x570 [ 273.616231][ T8113] should_failslab+0xac/0x100 [ 273.616250][ T8113] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 273.616271][ T8113] ? __alloc_skb+0x1c2/0x480 [ 273.616286][ T8113] __alloc_skb+0x1c2/0x480 [ 273.616302][ T8113] ? __pfx___alloc_skb+0x10/0x10 [ 273.616323][ T8113] ? netlink_autobind+0xd6/0x2f0 [ 273.616351][ T8113] ? netlink_autobind+0x2b0/0x2f0 [ 273.616384][ T8113] netlink_sendmsg+0x638/0xcd0 [ 273.616418][ T8113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.616440][ T8113] ? aa_sock_msg_perm+0x91/0x160 [ 273.616462][ T8113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.616481][ T8113] __sock_sendmsg+0x221/0x270 [ 273.616501][ T8113] sock_write_iter+0x2d9/0x3f0 [ 273.616520][ T8113] ? __pfx_sock_write_iter+0x10/0x10 [ 273.616553][ T8113] do_iter_readv_writev+0x71f/0x9d0 [ 273.616574][ T8113] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 273.616594][ T8113] ? bpf_lsm_file_permission+0x9/0x10 [ 273.616610][ T8113] ? rw_verify_area+0x246/0x630 [ 273.616626][ T8113] vfs_writev+0x38d/0xbc0 [ 273.616646][ T8113] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 273.616667][ T8113] ? vfs_write+0xb29/0xd10 [ 273.616683][ T8113] ? __lock_acquire+0xad5/0xd80 [ 273.616698][ T8113] ? __pfx_vfs_writev+0x10/0x10 [ 273.616729][ T8113] ? __fget_files+0x2a/0x420 [ 273.616742][ T8113] ? __fget_files+0x39d/0x420 [ 273.616753][ T8113] ? __fget_files+0x2a/0x420 [ 273.616770][ T8113] do_writev+0x1b8/0x360 [ 273.616799][ T8113] ? __pfx_do_writev+0x10/0x10 [ 273.616821][ T8113] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 273.616838][ T8113] ? lockdep_hardirqs_on+0x9d/0x150 [ 273.616856][ T8113] __do_fast_syscall_32+0xb4/0x110 [ 273.616872][ T8113] ? exc_page_fault+0x5f8/0x920 [ 273.616891][ T8113] do_fast_syscall_32+0x34/0x80 [ 273.616908][ T8113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.616924][ T8113] RIP: 0023:0xf7f54579 [ 273.616935][ T8113] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 273.616947][ T8113] RSP: 002b:00000000f505555c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 273.616960][ T8113] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800003c0 [ 273.616970][ T8113] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.616977][ T8113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 273.616985][ T8113] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 273.616993][ T8113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.617012][ T8113] [ 273.617332][ T30] audit: type=1326 audit(1744856851.603:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 273.939478][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.946285][ T30] audit: type=1326 audit(1744856851.603:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 274.525950][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 274.526106][ T5846] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 274.710212][ T5846] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 274.720791][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.750697][ T5846] usb 2-1: config 0 descriptor?? [ 274.765705][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.064754][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 275.143220][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 275.232739][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.296661][ T9] usb 5-1: config 0 descriptor?? [ 275.554816][ T8116] netlink: 83 bytes leftover after parsing attributes in process `syz.1.615'. [ 275.623943][ T5846] usbhid 2-1:0.0: can't add hid device: -71 [ 275.630157][ T5846] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 275.635075][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 275.813762][ T5846] usb 2-1: USB disconnect, device number 35 [ 275.844073][ T8117] netlink: 83 bytes leftover after parsing attributes in process `syz.4.616'. [ 275.861821][ T8132] netlink: 60 bytes leftover after parsing attributes in process `syz.3.619'. [ 275.880940][ T8130] netlink: 60 bytes leftover after parsing attributes in process `syz.3.619'. [ 275.900878][ T9] usb 5-1: USB disconnect, device number 38 [ 276.343696][ T5894] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 276.358992][ T8136] FAULT_INJECTION: forcing a failure. [ 276.358992][ T8136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.372315][ T8136] CPU: 0 UID: 0 PID: 8136 Comm: syz.2.621 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 276.372341][ T8136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 276.372352][ T8136] Call Trace: [ 276.372360][ T8136] [ 276.372367][ T8136] dump_stack_lvl+0x241/0x360 [ 276.372399][ T8136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.372443][ T8136] ? __pfx__printk+0x10/0x10 [ 276.372481][ T8136] should_fail_ex+0x424/0x570 [ 276.372506][ T8136] _copy_to_user+0x31/0xb0 [ 276.372536][ T8136] simple_read_from_buffer+0xc4/0x170 [ 276.372568][ T8136] proc_fail_nth_read+0x1ef/0x260 [ 276.372591][ T8136] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 276.372625][ T8136] ? rw_verify_area+0x246/0x630 [ 276.372644][ T8136] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 276.372664][ T8136] vfs_read+0x21f/0xb90 [ 276.372688][ T8136] ? __pfx___mutex_lock+0x10/0x10 [ 276.372712][ T8136] ? __pfx_vfs_read+0x10/0x10 [ 276.372735][ T8136] ? __fget_files+0x2a/0x420 [ 276.372753][ T8136] ? __fget_files+0x39d/0x420 [ 276.372768][ T8136] ? __fget_files+0x2a/0x420 [ 276.372792][ T8136] ksys_read+0x19d/0x2d0 [ 276.372814][ T8136] ? __pfx_ksys_read+0x10/0x10 [ 276.372837][ T8136] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 276.372859][ T8136] ? lockdep_hardirqs_on+0x9d/0x150 [ 276.372884][ T8136] __do_fast_syscall_32+0xb4/0x110 [ 276.372906][ T8136] ? exc_page_fault+0x5f8/0x920 [ 276.372931][ T8136] do_fast_syscall_32+0x34/0x80 [ 276.372954][ T8136] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 276.372994][ T8136] RIP: 0023:0xf7f35579 [ 276.373009][ T8136] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 276.373026][ T8136] RSP: 002b:00000000f5056590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 276.373046][ T8136] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5056620 [ 276.373059][ T8136] RDX: 000000000000000f RSI: 00000000f73c2ff4 RDI: 0000000000000000 [ 276.373070][ T8136] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 276.373081][ T8136] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 276.373091][ T8136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 276.373118][ T8136] [ 276.704481][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 276.711210][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.722214][ T5894] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 276.731315][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.741985][ T5894] usb 4-1: config 0 descriptor?? [ 276.923797][ T979] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 277.083992][ T979] usb 2-1: Using ep0 maxpacket: 8 [ 277.096044][ T979] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 277.113808][ T979] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 277.133931][ T979] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 277.144943][ T979] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 277.163406][ T5894] kye 0003:0458:5013.0007: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 277.175976][ T5894] kye 0003:0458:5013.0007: unknown main item tag 0x0 [ 277.184353][ T979] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 277.193507][ T5894] kye 0003:0458:5013.0007: unknown main item tag 0x0 [ 277.193550][ T24] hid-led 0003:1D34:000A.0006: probe with driver hid-led failed with error -71 [ 277.201094][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.217725][ T5894] kye 0003:0458:5013.0007: unknown main item tag 0x0 [ 277.227677][ T5894] kye 0003:0458:5013.0007: unknown main item tag 0x0 [ 277.236778][ T5894] kye 0003:0458:5013.0007: unknown main item tag 0x0 [ 277.259373][ T5894] kye 0003:0458:5013.0007: hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 277.272110][ T5894] kye 0003:0458:5013.0007: tablet-enabling feature report not found [ 277.282879][ T5894] kye 0003:0458:5013.0007: tablet enabling failed [ 277.313956][ T24] usb 1-1: USB disconnect, device number 39 [ 277.333695][ T5846] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 277.369007][ T8134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.405571][ T8134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.458444][ T979] usb 2-1: usb_control_msg returned -32 [ 277.471037][ T979] usbtmc 2-1:16.0: can't read capabilities [ 277.473832][ T5846] usb 3-1: device descriptor read/64, error -71 [ 277.479297][ T5894] usb 4-1: USB disconnect, device number 32 [ 277.572662][ T8153] FAULT_INJECTION: forcing a failure. [ 277.572662][ T8153] name failslab, interval 1, probability 0, space 0, times 0 [ 277.600545][ T8153] CPU: 0 UID: 0 PID: 8153 Comm: syz.3.627 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 277.600576][ T8153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 277.600589][ T8153] Call Trace: [ 277.600597][ T8153] [ 277.600606][ T8153] dump_stack_lvl+0x241/0x360 [ 277.600643][ T8153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.600674][ T8153] ? __pfx__printk+0x10/0x10 [ 277.600711][ T8153] ? ref_tracker_alloc+0x316/0x4c0 [ 277.600738][ T8153] should_fail_ex+0x424/0x570 [ 277.600765][ T8153] should_failslab+0xac/0x100 [ 277.600795][ T8153] kmem_cache_alloc_noprof+0x78/0x390 [ 277.600823][ T8153] ? skb_clone+0x20c/0x390 [ 277.600853][ T8153] skb_clone+0x20c/0x390 [ 277.600891][ T8153] __netlink_deliver_tap+0x3c4/0x7f0 [ 277.600930][ T8153] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.600957][ T8153] netlink_deliver_tap+0x19d/0x1b0 [ 277.600985][ T8153] netlink_sendskb+0x68/0x140 [ 277.601011][ T8153] netlink_unicast+0x39f/0x9a0 [ 277.601034][ T8153] ? __asan_memcpy+0x40/0x70 [ 277.601061][ T8153] ? __pfx_netlink_unicast+0x10/0x10 [ 277.601095][ T8153] netlink_rcv_skb+0x296/0x480 [ 277.601123][ T8153] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 277.601153][ T8153] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 277.601197][ T8153] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.601227][ T8153] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.601257][ T8153] netlink_unicast+0x7f8/0x9a0 [ 277.601290][ T8153] ? __pfx_netlink_unicast+0x10/0x10 [ 277.601315][ T8153] ? skb_put+0x114/0x1f0 [ 277.601338][ T8153] netlink_sendmsg+0x8c3/0xcd0 [ 277.601375][ T8153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.601404][ T8153] ? __import_iovec+0x585/0x830 [ 277.601427][ T8153] ? aa_sock_msg_perm+0x91/0x160 [ 277.601459][ T8153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.601494][ T8153] __sock_sendmsg+0x221/0x270 [ 277.601522][ T8153] ____sys_sendmsg+0x523/0x860 [ 277.601551][ T8153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.601586][ T8153] __sys_sendmsg+0x271/0x360 [ 277.601610][ T8153] ? __pfx___sys_sendmsg+0x10/0x10 [ 277.601678][ T8153] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 277.601701][ T8153] ? lockdep_hardirqs_on+0x9d/0x150 [ 277.601725][ T8153] __do_fast_syscall_32+0xb4/0x110 [ 277.601748][ T8153] ? exc_page_fault+0x5f8/0x920 [ 277.601774][ T8153] do_fast_syscall_32+0x34/0x80 [ 277.601797][ T8153] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 277.601818][ T8153] RIP: 0023:0xf7f54579 [ 277.601834][ T8153] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 277.601849][ T8153] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 277.601869][ T8153] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000540 [ 277.601881][ T8153] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 277.601892][ T8153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 277.601902][ T8153] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 277.601913][ T8153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 277.601939][ T8153] [ 277.907814][ T5846] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 277.966189][ T8154] usbtmc 2-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 278.046724][ T5846] usb 3-1: device descriptor read/64, error -71 [ 278.164961][ T5846] usb usb3-port1: attempt power cycle [ 278.514134][ T5846] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 278.544385][ T5846] usb 3-1: device descriptor read/8, error -71 [ 278.793819][ T5846] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 278.818616][ T5846] usb 3-1: device descriptor read/8, error -71 [ 278.863649][ T5894] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 278.934429][ T5846] usb usb3-port1: unable to enumerate USB device [ 279.034440][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 279.066073][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 279.079814][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 279.093381][ T5894] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 279.106317][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.117169][ T5894] usb 4-1: Product: syz [ 279.121424][ T5894] usb 4-1: Manufacturer: syz [ 279.133730][ T5894] usb 4-1: SerialNumber: syz [ 279.144401][ T5894] usb 4-1: config 0 descriptor?? [ 279.158009][ T5894] usb 4-1: no audio or video endpoints found [ 279.448264][ T8170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.631'. [ 279.677859][ T979] usb 2-1: USB disconnect, device number 36 [ 279.763982][ T5894] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 279.985654][ T5894] usb 1-1: config 0 has no interfaces? [ 279.985780][ T8180] netlink: 60 bytes leftover after parsing attributes in process `syz.4.635'. [ 280.030991][ T5894] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 280.032768][ T8177] netlink: 60 bytes leftover after parsing attributes in process `syz.4.635'. [ 280.061841][ T8181] netlink: 1296 bytes leftover after parsing attributes in process `syz.1.634'. [ 280.071281][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.538030][ T5894] usb 1-1: Product: syz [ 280.545458][ T5894] usb 1-1: Manufacturer: syz [ 280.569640][ T5894] usb 1-1: SerialNumber: syz [ 280.606255][ T5894] usb 1-1: config 0 descriptor?? [ 281.092487][ T8172] netlink: 72 bytes leftover after parsing attributes in process `syz.0.633'. [ 281.173736][ T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 281.270650][ T5892] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 281.333772][ T24] usb 3-1: device descriptor read/64, error -71 [ 281.431241][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.445720][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.455832][ T5892] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 281.465090][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.481710][ T5892] usb 5-1: config 0 descriptor?? [ 281.528411][ T8190] bridge0: port 3(syz_tun) entered blocking state [ 281.535329][ T8190] bridge0: port 3(syz_tun) entered disabled state [ 281.542709][ T8190] syz_tun: entered allmulticast mode [ 281.550692][ T8190] syz_tun: entered promiscuous mode [ 281.556696][ T8190] bridge0: port 3(syz_tun) entered blocking state [ 281.563224][ T8190] bridge0: port 3(syz_tun) entered forwarding state [ 281.673690][ T24] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 281.687995][ T5846] usb 4-1: USB disconnect, device number 33 [ 281.823694][ T24] usb 3-1: device descriptor read/64, error -71 [ 281.933993][ T24] usb usb3-port1: attempt power cycle [ 282.232563][ T8196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.639'. [ 282.413328][ T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 282.496256][ T24] usb 3-1: device descriptor read/8, error -71 [ 282.957169][ T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 283.080421][ T24] usb 3-1: device descriptor read/8, error -71 [ 283.177271][ T5894] usb 1-1: USB disconnect, device number 40 [ 283.224188][ T24] usb usb3-port1: unable to enumerate USB device [ 284.591703][ T52] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 285.349109][ T52] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 285.362459][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.383309][ T8214] netlink: 6 bytes leftover after parsing attributes in process `syz.1.642'. [ 285.438566][ T52] usb 3-1: config 0 descriptor?? [ 286.079204][ T5892] hid-led 0003:1D34:000A.0008: probe with driver hid-led failed with error -71 [ 286.194843][ T8219] netlink: 6 bytes leftover after parsing attributes in process `syz.3.643'. [ 286.242710][ T5892] usb 5-1: USB disconnect, device number 39 [ 286.544457][ T8231] netlink: 60 bytes leftover after parsing attributes in process `syz.4.647'. [ 286.554032][ T8230] netlink: 60 bytes leftover after parsing attributes in process `syz.4.647'. [ 286.668192][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 286.668212][ T30] audit: type=1326 audit(1744856865.194:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.4.649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 286.717215][ T8236] capability: warning: `syz.4.649' uses 32-bit capabilities (legacy support in use) [ 286.763430][ T8239] netlink: 1296 bytes leftover after parsing attributes in process `syz.0.648'. [ 287.018797][ T30] audit: type=1326 audit(1744856865.224:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.4.649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 287.042274][ T52] pegasus 3-1:0.0: can't reset MAC [ 287.048333][ T52] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 287.057843][ T8238] ucma_write: process 391 (syz.4.649) changed security contexts after opening file descriptor, this is not allowed. [ 287.071495][ T30] audit: type=1326 audit(1744856865.234:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.4.649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 287.146603][ T30] audit: type=1326 audit(1744856865.234:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.4.649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 287.183706][ T30] audit: type=1326 audit(1744856865.234:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.4.649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 287.226145][ T30] audit: type=1326 audit(1744856865.234:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.4.649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 287.322109][ T30] audit: type=1326 audit(1744856865.234:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.4.649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 287.414037][ T30] audit: type=1326 audit(1744856865.234:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.4.649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 287.511310][ T30] audit: type=1326 audit(1744856865.234:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.4.649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 287.592122][ T30] audit: type=1326 audit(1744856865.234:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.4.649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 287.614086][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.103747][ T5894] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 289.275282][ T5846] usb 3-1: USB disconnect, device number 45 [ 289.332026][ T8257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.654'. [ 289.643793][ T5892] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 289.827468][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 289.853842][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.878643][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.903720][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 289.957180][ T5892] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 289.979121][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.040797][ T5892] usb 1-1: config 0 descriptor?? [ 290.203970][ T8269] netlink: 60 bytes leftover after parsing attributes in process `syz.2.659'. [ 290.293979][ T8268] netlink: 60 bytes leftover after parsing attributes in process `syz.2.659'. [ 290.544076][ T8272] netlink: 48 bytes leftover after parsing attributes in process `syz.2.660'. [ 290.596913][ T5892] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0009/input/input17 [ 290.783352][ T5892] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 290.969406][ T8280] netlink: 120 bytes leftover after parsing attributes in process `syz.3.661'. [ 291.119103][ T8283] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.662'. [ 291.887358][ T8284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.896150][ T52] usb 1-1: reset high-speed USB device number 41 using dummy_hcd [ 291.910238][ T8284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.057307][ T8285] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.069075][ T8277] netlink: 72 bytes leftover after parsing attributes in process `syz.0.655'. [ 293.328925][ T8296] netlink: 6 bytes leftover after parsing attributes in process `syz.4.663'. [ 294.455533][ T8309] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 294.470209][ T8311] FAULT_INJECTION: forcing a failure. [ 294.470209][ T8311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.078431][ T5846] usb 1-1: USB disconnect, device number 41 [ 295.153906][ T8311] CPU: 1 UID: 0 PID: 8311 Comm: syz.4.668 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 295.153936][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 295.153948][ T8311] Call Trace: [ 295.153956][ T8311] [ 295.153964][ T8311] dump_stack_lvl+0x241/0x360 [ 295.154001][ T8311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.154029][ T8311] ? __pfx__printk+0x10/0x10 [ 295.154075][ T8311] should_fail_ex+0x424/0x570 [ 295.154101][ T8311] _copy_from_user+0x2d/0xb0 [ 295.154131][ T8311] get_compat_sigset+0x22/0x50 [ 295.154157][ T8311] __se_compat_sys_rt_sigtimedwait_time32+0x10d/0x270 [ 295.154187][ T8311] ? __pfx___se_compat_sys_rt_sigtimedwait_time32+0x10/0x10 [ 295.154216][ T8311] ? fput+0x9b/0xd0 [ 295.154233][ T8311] ? ksys_write+0x275/0x2d0 [ 295.154263][ T8311] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 295.154288][ T8311] ? lockdep_hardirqs_on+0x9d/0x150 [ 295.154314][ T8311] __do_fast_syscall_32+0xb4/0x110 [ 295.154339][ T8311] ? exc_page_fault+0x5f8/0x920 [ 295.154367][ T8311] do_fast_syscall_32+0x34/0x80 [ 295.154391][ T8311] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.154415][ T8311] RIP: 0023:0xf703d579 [ 295.154432][ T8311] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 295.154448][ T8311] RSP: 002b:00000000f502d55c EFLAGS: 00000206 ORIG_RAX: 00000000000000b1 [ 295.154469][ T8311] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000000000000 [ 295.154481][ T8311] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 295.154492][ T8311] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 295.154503][ T8311] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 295.154514][ T8311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 295.154541][ T8311] [ 295.350590][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.696677][ T8326] netlink: 60 bytes leftover after parsing attributes in process `syz.1.670'. [ 295.713980][ T8325] netlink: 60 bytes leftover after parsing attributes in process `syz.1.670'. [ 295.867297][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 295.867313][ T30] audit: type=1400 audit(1744856874.394:195): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=8327 comm="syz.4.673" [ 296.023990][ T5846] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 296.182006][ T5846] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 296.193784][ T5846] usb 1-1: config 179 has no interface number 0 [ 296.219720][ T5846] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 64 [ 296.282819][ T8335] netlink: 1296 bytes leftover after parsing attributes in process `syz.4.675'. [ 296.926197][ T5846] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 296.965127][ T52] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 297.085023][ T5846] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 255, setting to 64 [ 297.121214][ T5846] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 297.192426][ T5846] usb 1-1: config 179 interface 65 has no altsetting 0 [ 297.212019][ T5846] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 297.245124][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.275487][ T52] usb 2-1: Using ep0 maxpacket: 8 [ 297.302389][ T52] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 297.316029][ T8322] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 297.323321][ T52] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 297.335786][ T8322] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 297.348169][ T52] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.367665][ T5846] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input19 [ 297.379286][ T52] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 297.544782][ T5196] input input19: unable to receive magic message: -110 [ 297.554854][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.588553][ T5846] usb 1-1: USB disconnect, device number 42 [ 297.594541][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 297.594585][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 297.651774][ T5846] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 297.677104][ T52] usbtmc 2-1:16.0: bulk endpoints not found [ 297.937438][ T52] usb 2-1: USB disconnect, device number 37 [ 298.353680][ T30] audit: type=1326 audit(1744856876.814:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 298.483959][ T30] audit: type=1326 audit(1744856876.814:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 298.606316][ T30] audit: type=1326 audit(1744856876.814:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 298.628242][ C1] vkms_vblank_simulate: vblank timer overrun [ 298.681687][ T30] audit: type=1326 audit(1744856876.814:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 298.712868][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'. [ 298.732182][ T30] audit: type=1326 audit(1744856876.814:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=263 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 298.817363][ T8362] netlink: 60 bytes leftover after parsing attributes in process `syz.1.684'. [ 298.829019][ T8357] netlink: 60 bytes leftover after parsing attributes in process `syz.1.684'. [ 298.834864][ T30] audit: type=1326 audit(1744856876.814:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 298.906082][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.683'. [ 298.936811][ T30] audit: type=1326 audit(1744856876.814:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 299.147176][ T30] audit: type=1326 audit(1744856876.814:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 299.172386][ T30] audit: type=1326 audit(1744856876.814:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 299.194326][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.879804][ T8371] ALSA: seq fatal error: cannot create timer (-19) [ 300.086078][ T8382] netlink: 1296 bytes leftover after parsing attributes in process `syz.4.688'. [ 300.696156][ T52] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 300.978822][ T52] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 301.047058][ T52] usb 2-1: config 179 has no interface number 0 [ 301.053466][ T52] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 64 [ 301.096359][ T52] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 301.266504][ T52] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 255, setting to 64 [ 301.296838][ T8389] binfmt_misc: register: failed to install interpreter file ./file0 [ 301.343905][ T52] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 301.410108][ T52] usb 2-1: config 179 interface 65 has no altsetting 0 [ 301.433675][ T52] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 301.622632][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.644907][ T8387] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 301.652517][ T8387] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 301.695073][ T52] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input20 [ 301.883997][ T5196] input input20: unable to receive magic message: -110 [ 301.974893][ T5196] input input20: unable to receive magic message: -71 [ 302.034887][ T8398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.693'. [ 302.162766][ T5196] input input20: unable to receive magic message: -71 [ 302.205112][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 302.213564][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 302.222589][ T52] usb 2-1: USB disconnect, device number 38 [ 302.233865][ T52] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 302.774345][ T8402] Cannot find del_set index 3 as target [ 304.222058][ T8418] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 304.489912][ T8425] futex_wake_op: syz.4.698 tries to shift op by -33; fix this program [ 304.742138][ T8425] netdevsim netdevsim4: Direct firmware load for . [ 304.742138][ T8425] failed with error -2 [ 304.752858][ T8425] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 304.752858][ T8425] [ 304.946051][ T8428] fuse: Invalid rootmode [ 305.109506][ T8433] futex_wake_op: syz.0.699 tries to shift op by -33; fix this program [ 305.210110][ T8434] netdevsim netdevsim0: Direct firmware load for . [ 305.210110][ T8434] failed with error -2 [ 305.243886][ T8434] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 305.243886][ T8434] [ 305.720876][ T8421] netlink: 6 bytes leftover after parsing attributes in process `syz.1.695'. [ 306.228049][ T8445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.706'. [ 306.310737][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 306.310759][ T30] audit: type=1326 audit(1744856884.794:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8424 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 306.344604][ T30] audit: type=1326 audit(1744856884.794:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8424 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 306.451543][ T8449] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.704'. [ 306.950587][ T5846] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 307.815294][ T5846] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 307.834220][ T5846] usb 5-1: config 179 has no interface number 0 [ 307.840558][ T5846] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 64 [ 307.873183][ T5846] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 307.886349][ T5846] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 255, setting to 64 [ 307.920028][ T5846] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 307.934284][ T5846] usb 5-1: config 179 interface 65 has no altsetting 0 [ 307.945543][ T5846] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 307.955836][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.989979][ T8443] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 307.999247][ T8443] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 308.052310][ T5846] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input21 [ 308.073880][ T5895] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 308.174273][ T5196] input input21: unable to receive magic message: -110 [ 308.254612][ T5196] input input21: unable to receive magic message: -32 [ 308.267059][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 308.275763][ T5196] input input21: unable to receive magic message: -32 [ 308.295339][ T5895] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 308.307860][ T5846] usb 5-1: USB disconnect, device number 40 [ 308.307938][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 308.322831][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 308.331139][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.353818][ T5895] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.375144][ T5846] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 308.409069][ T5895] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.451001][ T5895] usb 1-1: config 0 interface 0 has no altsetting 0 [ 308.465608][ T5895] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.487300][ T5895] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.517362][ T5895] usb 1-1: config 0 interface 0 has no altsetting 0 [ 308.551254][ T5895] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.564849][ T5895] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.594395][ T5895] usb 1-1: config 0 interface 0 has no altsetting 0 [ 308.612396][ T5895] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.639996][ T5895] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.663274][ T5895] usb 1-1: config 0 interface 0 has no altsetting 0 [ 308.682760][ T5895] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.701169][ T5895] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.732168][ T5895] usb 1-1: config 0 interface 0 has no altsetting 0 [ 308.750874][ T5895] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.781771][ T5895] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.796787][ T5895] usb 1-1: config 0 interface 0 has no altsetting 0 [ 308.853137][ T5895] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.887725][ T5895] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.922141][ T5895] usb 1-1: config 0 interface 0 has no altsetting 0 [ 308.932100][ T5895] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.986802][ T8461] netlink: 232 bytes leftover after parsing attributes in process `syz.3.711'. [ 309.000239][ T5895] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.064971][ T5895] usb 1-1: config 0 interface 0 has no altsetting 0 [ 309.106598][ T5895] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 309.144506][ T5895] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 309.195336][ T5895] usb 1-1: Product: syz [ 309.199600][ T5895] usb 1-1: Manufacturer: syz [ 309.223820][ T5895] usb 1-1: SerialNumber: syz [ 309.248021][ T5895] usb 1-1: config 0 descriptor?? [ 309.295544][ T5895] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 309.563711][ T5846] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 309.571561][ T5895] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 309.716361][ T8474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.716821][ T5846] usb 5-1: config index 0 descriptor too short (expected 244, got 18) [ 309.739350][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.751607][ T8474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.779023][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 309.802117][ T5846] usb 5-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=61.d7 [ 309.802601][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 309.819874][ T5894] usb 1-1: USB disconnect, device number 43 [ 309.834188][ T5846] usb 5-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 309.835216][ T5894] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 309.842469][ T5846] usb 5-1: Product: syz [ 309.855846][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 309.876834][ T5846] usb 5-1: Manufacturer: syz [ 309.881482][ T5846] usb 5-1: SerialNumber: syz [ 309.896008][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 309.925949][ T5895] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 309.934304][ T5846] usb 5-1: config 0 descriptor?? [ 309.935653][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.964756][ T5846] ldusb 5-1:0.0: Interrupt in endpoint not found [ 309.976737][ T5895] usb 2-1: config 0 descriptor?? [ 310.154001][ T979] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 310.212556][ T8478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.212960][ T8478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.226826][ T30] audit: type=1800 audit(1744856888.754:219): pid=8466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.714" name="file1" dev="tmpfs" ino=845 res=0 errno=0 [ 310.268026][ T8479] futex_wake_op: syz.2.715 tries to shift op by -33; fix this program [ 310.310486][ T979] usb 4-1: device descriptor read/64, error -71 [ 310.444524][ T5894] usb 5-1: USB disconnect, device number 41 [ 310.565563][ T5846] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 310.573953][ T979] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 310.587669][ T5846] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 310.629464][ T8481] netdevsim netdevsim2: Direct firmware load for . [ 310.629464][ T8481] failed with error -2 [ 310.663381][ T8481] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 310.663381][ T8481] [ 310.713992][ T979] usb 4-1: device descriptor read/64, error -71 [ 310.834606][ T979] usb usb4-port1: attempt power cycle [ 311.226197][ T979] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 311.266035][ T979] usb 4-1: device descriptor read/8, error -71 [ 311.432392][ T8492] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.719'. [ 311.708049][ T979] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 311.772020][ T979] usb 4-1: device descriptor read/8, error -71 [ 311.820463][ T8494] netlink: 64 bytes leftover after parsing attributes in process `syz.2.720'. [ 311.858366][ T30] audit: type=1326 audit(1744856890.384:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 311.880192][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.908879][ T979] usb usb4-port1: unable to enumerate USB device [ 311.927187][ T30] audit: type=1326 audit(1744856890.384:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 312.248589][ T979] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 312.459123][ T979] usb 3-1: config 252 has an invalid interface number: 251 but max is 0 [ 312.477862][ T979] usb 3-1: config 252 has no interface number 0 [ 312.484582][ T979] usb 3-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 312.493940][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.517318][ T979] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 312.572271][ T5895] usbhid 2-1:0.0: can't add hid device: -71 [ 312.581470][ T5895] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 312.631525][ T5895] usb 2-1: USB disconnect, device number 39 [ 312.663812][ T5892] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 312.836124][ T5892] usb 1-1: config 64 has an invalid interface number: 155 but max is 0 [ 312.868469][ T5892] usb 1-1: config 64 has no interface number 0 [ 312.893702][ T5892] usb 1-1: config 64 interface 155 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 312.931996][ T979] gspca_sn9c20x: Write register 1001 failed -71 [ 312.936682][ T5892] usb 1-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=b6.57 [ 312.954339][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.958325][ T979] gspca_sn9c20x: Device initialization failed [ 312.996792][ T5892] usb 1-1: Product: syz [ 313.001037][ T5892] usb 1-1: Manufacturer: syz [ 313.003697][ T979] gspca_sn9c20x 3-1:252.251: probe with driver gspca_sn9c20x failed with error -71 [ 313.026042][ T5892] usb 1-1: SerialNumber: syz [ 313.038126][ T5892] rndis_host 1-1:64.155: skipping garbage [ 313.046438][ T5892] usb 1-1: bad CDC descriptors [ 313.051907][ T5892] cdc_acm 1-1:64.155: skipping garbage [ 313.070742][ T979] usb 3-1: USB disconnect, device number 46 [ 313.265662][ T8497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.275730][ T8497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.528400][ T8519] FAULT_INJECTION: forcing a failure. [ 313.528400][ T8519] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 313.544337][ T8519] CPU: 0 UID: 0 PID: 8519 Comm: syz.1.729 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 313.544369][ T8519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 313.544382][ T8519] Call Trace: [ 313.544390][ T8519] [ 313.544398][ T8519] dump_stack_lvl+0x241/0x360 [ 313.544458][ T8519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.544489][ T8519] ? __pfx__printk+0x10/0x10 [ 313.544537][ T8519] should_fail_ex+0x424/0x570 [ 313.544565][ T8519] prepare_alloc_pages+0x220/0x610 [ 313.544597][ T8519] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 313.544631][ T8519] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 313.544661][ T8519] ? stack_depot_save_flags+0x43f/0x940 [ 313.544695][ T8519] alloc_pages_mpol+0x339/0x690 [ 313.544731][ T8519] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 313.544769][ T8519] alloc_pages_noprof+0x121/0x190 [ 313.544802][ T8519] get_free_pages_noprof+0xc/0x30 [ 313.544823][ T8519] kasan_populate_vmalloc_pte+0x38/0xe0 [ 313.544848][ T8519] __apply_to_page_range+0x808/0xde0 [ 313.544883][ T8519] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 313.544911][ T8519] ? __pfx___apply_to_page_range+0x10/0x10 [ 313.544941][ T8519] ? do_raw_spin_unlock+0x13c/0x8b0 [ 313.544980][ T8519] alloc_vmap_area+0x1d48/0x2410 [ 313.545035][ T8519] ? __pfx_alloc_vmap_area+0x10/0x10 [ 313.545064][ T8519] ? __kasan_kmalloc+0x9d/0xb0 [ 313.545090][ T8519] ? __kmalloc_cache_node_noprof+0x26a/0x3c0 [ 313.545124][ T8519] ? __htab_map_lookup_and_delete_batch+0x5c1/0x1880 [ 313.545148][ T8519] __get_vm_area_node+0x1c8/0x2d0 [ 313.545181][ T8519] __vmalloc_node_range_noprof+0x349/0x1390 [ 313.545198][ T8519] ? __htab_map_lookup_and_delete_batch+0x5c1/0x1880 [ 313.545218][ T8519] ? __alloc_frozen_pages_noprof+0xbf/0x5b0 [ 313.545239][ T8519] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 313.545276][ T8519] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 313.545292][ T8519] ? __kasan_kmalloc_large+0x1a/0xa0 [ 313.545318][ T8519] ? __htab_map_lookup_and_delete_batch+0x5c1/0x1880 [ 313.545338][ T8519] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 313.545363][ T8519] ? __htab_map_lookup_and_delete_batch+0x5c1/0x1880 [ 313.545381][ T8519] ? __htab_map_lookup_and_delete_batch+0x5c1/0x1880 [ 313.545404][ T8519] __htab_map_lookup_and_delete_batch+0x5c1/0x1880 [ 313.545451][ T8519] ? __fget_files+0x2a/0x420 [ 313.545467][ T8519] ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10 [ 313.545486][ T8519] ? __fget_files+0x39d/0x420 [ 313.545506][ T8519] ? __fget_files+0x2a/0x420 [ 313.545525][ T8519] ? __pfx_htab_map_lookup_batch+0x10/0x10 [ 313.545551][ T8519] bpf_map_do_batch+0x288/0x660 [ 313.545575][ T8519] __sys_bpf+0x6b4/0x8b0 [ 313.545593][ T8519] ? __pfx___sys_bpf+0x10/0x10 [ 313.545621][ T8519] ? ksys_write+0x275/0x2d0 [ 313.545650][ T8519] __ia32_sys_bpf+0x7c/0x90 [ 313.545676][ T8519] __do_fast_syscall_32+0xb4/0x110 [ 313.545699][ T8519] ? exc_page_fault+0x5f8/0x920 [ 313.545723][ T8519] do_fast_syscall_32+0x34/0x80 [ 313.545745][ T8519] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 313.545765][ T8519] RIP: 0023:0xf70bd579 [ 313.545780][ T8519] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 313.545794][ T8519] RSP: 002b:00000000f50ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 313.545813][ T8519] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 0000000080000080 [ 313.545825][ T8519] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.545835][ T8519] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 313.545845][ T8519] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 313.545854][ T8519] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 313.545877][ T8519] [ 313.973659][ T5892] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 314.328803][ T979] usb 1-1: USB disconnect, device number 44 [ 314.350320][ T8525] trusted_key: encrypted_key: insufficient parameters specified [ 314.497989][ T8525] netlink: 'syz.1.732': attribute type 4 has an invalid length. [ 314.539787][ T5892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.550004][ T5892] usb 5-1: config 0 interface 0 has no altsetting 0 [ 314.591291][ T5892] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 314.618727][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.702075][ T5892] usb 5-1: Product: syz [ 314.772107][ T5892] usb 5-1: Manufacturer: syz [ 314.782559][ T5892] usb 5-1: SerialNumber: syz [ 314.786317][ T8533] tipc: Can't bind to reserved service type 0 [ 314.814699][ T5892] usb 5-1: config 0 descriptor?? [ 314.843007][ T5892] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 314.877246][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 314.889379][ T5892] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 314.910163][ T5892] usb 5-1: media controller created [ 314.951568][ T8536] futex_wake_op: syz.3.730 tries to shift op by -33; fix this program [ 315.157399][ T8539] netdevsim netdevsim3: Direct firmware load for . [ 315.157399][ T8539] failed with error -2 [ 315.202818][ T8539] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 315.202818][ T8539] [ 315.302606][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 315.895763][ T5892] DVB: Unable to find symbol tda10046_attach() [ 315.932608][ T5892] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 315.961782][ T5892] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 315.995530][ T5892] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 316.036339][ T5892] usb 5-1: USB disconnect, device number 42 [ 316.406466][ T5892] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 316.514102][ T979] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 316.573833][ T5892] usb 5-1: device descriptor read/64, error -71 [ 316.667006][ T979] usb 1-1: Using ep0 maxpacket: 32 [ 316.673088][ T979] usb 1-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 316.673119][ T979] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 316.675336][ T979] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 316.675367][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.675388][ T979] usb 1-1: Product: syz [ 316.675405][ T979] usb 1-1: Manufacturer: syz [ 316.675421][ T979] usb 1-1: SerialNumber: syz [ 316.678520][ T979] usb 1-1: config 0 descriptor?? [ 316.823720][ T5892] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 316.902459][ T8563] bridge0: port 3(syz_tun) entered blocking state [ 316.902596][ T8563] bridge0: port 3(syz_tun) entered disabled state [ 316.902770][ T8563] syz_tun: entered allmulticast mode [ 316.907539][ T8563] syz_tun: entered promiscuous mode [ 316.911679][ T8563] bridge0: port 3(syz_tun) entered blocking state [ 316.911812][ T8563] bridge0: port 3(syz_tun) entered forwarding state [ 316.954269][ T5892] usb 5-1: device descriptor read/64, error -71 [ 317.068439][ T5892] usb usb5-port1: attempt power cycle [ 317.208129][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.208233][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.403653][ T5892] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 317.472726][ T5892] usb 5-1: device descriptor read/8, error -71 [ 317.934456][ T5892] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 317.987369][ T5892] usb 5-1: device descriptor read/8, error -71 [ 318.114233][ T5892] usb usb5-port1: unable to enumerate USB device [ 318.833808][ T5894] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 319.023870][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 319.049578][ T5894] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.097310][ T5894] usb 4-1: config 0 interface 0 has no altsetting 0 [ 319.124742][ T5894] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 319.134043][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.163291][ T5894] usb 4-1: config 0 descriptor?? [ 319.333779][ T5846] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 319.545812][ T976] usb 1-1: USB disconnect, device number 45 [ 319.564360][ T5846] usb 2-1: Using ep0 maxpacket: 8 [ 319.588161][ T5846] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 319.614592][ T5846] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 319.642722][ T5846] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 319.673148][ T5846] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 319.676160][ T5894] uclogic 0003:5543:0781.000B: ignoring exceeding usage max [ 319.753793][ T5846] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 319.769674][ T5894] uclogic 0003:5543:0781.000B: unbalanced collection at end of report description [ 319.792815][ T5894] uclogic 0003:5543:0781.000B: parse failed [ 319.802463][ T5894] uclogic 0003:5543:0781.000B: probe with driver uclogic failed with error -22 [ 319.835290][ T5894] usb 4-1: USB disconnect, device number 40 [ 319.848017][ T5846] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 319.894854][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.935181][ T5846] usb 2-1: Manufacturer: Њ [ 319.954170][ T5846] usb 2-1: SerialNumber: 东₺놟뱽潸嗘Ӄ⬫饓㰅쌒뫪쪇ᘫ덅瘕鞛᪵曃끰ꄜꕚ蠨亮痉㐔䫓鶯ம諊謆뿲㗈ꕙ뤌ᝓ䋟ౕಇ円蚲ਵ凝탵泞㢘炆ꭧ搑ﴅ禞䣠皇㽄ｷ촺㭇菱槥爹竝塡ᆀⳡ骋ᩔ쒭佶೓ቒᤜ㵰᮸哲ꬵ贁鶧뱩ᴜ䋖惯붚骧攛屃︒鉡ዑ⎞퐥ṵ䣏貥晊壬♜螼燒 [ 319.998649][ T8585] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 320.123815][ T979] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 320.153940][ T5895] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 320.235665][ T5846] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 320.247374][ T5846] cdc_ncm 2-1:1.0: bind() failure [ 320.275048][ T5846] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 320.282051][ T5846] cdc_ncm 2-1:1.1: bind() failure [ 320.309693][ T979] usb 5-1: unable to get BOS descriptor or descriptor too short [ 320.312871][ T5846] usb 2-1: USB disconnect, device number 40 [ 320.323923][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 320.343480][ T979] usb 5-1: not running at top speed; connect to a high speed hub [ 320.373149][ T5895] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 320.388930][ T979] usb 5-1: config 0 has an invalid interface number: 232 but max is 3 [ 320.419990][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.435089][ T979] usb 5-1: config 0 has an invalid interface number: 35 but max is 3 [ 320.443214][ T979] usb 5-1: config 0 has an invalid interface number: 78 but max is 3 [ 320.465340][ T5895] usb 1-1: Product: syz [ 320.469568][ T5895] usb 1-1: Manufacturer: syz [ 320.479210][ T5895] usb 1-1: SerialNumber: syz [ 320.484711][ T979] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 320.494314][ T979] usb 5-1: config 0 has an invalid interface number: 162 but max is 3 [ 320.505685][ T5895] usb 1-1: config 0 descriptor?? [ 320.527710][ T979] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 320.538460][ T979] usb 5-1: config 0 has an invalid interface number: 7 but max is 3 [ 320.549200][ T979] usb 5-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 320.560373][ T979] usb 5-1: config 0 has no interface number 0 [ 320.573180][ T979] usb 5-1: config 0 has no interface number 1 [ 320.580968][ T979] usb 5-1: config 0 has no interface number 2 [ 320.589592][ T979] usb 5-1: config 0 has no interface number 3 [ 320.596484][ T979] usb 5-1: config 0 has no interface number 4 [ 320.603124][ T979] usb 5-1: config 0 interface 232 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 320.614922][ T979] usb 5-1: config 0 interface 232 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 320.627450][ T979] usb 5-1: config 0 interface 232 altsetting 9 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 320.641575][ T979] usb 5-1: config 0 interface 232 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 320.654007][ T979] usb 5-1: config 0 interface 232 altsetting 9 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 320.666194][ T979] usb 5-1: config 0 interface 232 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 320.683683][ T979] usb 5-1: config 0 interface 232 altsetting 9 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 320.701213][ T979] usb 5-1: config 0 interface 35 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 320.717023][ T979] usb 5-1: config 0 interface 35 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 320.732492][ T979] usb 5-1: too many endpoints for config 0 interface 78 altsetting 158: 184, using maximum allowed: 30 [ 320.754756][ T5895] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 320.761260][ T979] usb 5-1: config 0 interface 78 altsetting 158 has a duplicate endpoint with address 0x2, skipping [ 320.773812][ T5846] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 320.777253][ T979] usb 5-1: config 0 interface 78 altsetting 158 has 2 endpoint descriptors, different from the interface descriptor's value: 184 [ 320.798483][ T979] usb 5-1: config 0 interface 162 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 320.809828][ T979] usb 5-1: config 0 interface 162 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 320.821133][ T979] usb 5-1: config 0 interface 162 altsetting 1 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 320.852248][ T979] usb 5-1: config 0 interface 162 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 320.882635][ T979] usb 5-1: config 0 interface 162 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 320.926087][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.933654][ T979] usb 5-1: config 0 interface 162 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 320.957881][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.968191][ T979] usb 5-1: config 0 interface 232 has no altsetting 0 [ 320.978399][ T979] usb 5-1: config 0 interface 35 has no altsetting 0 [ 320.985488][ T979] usb 5-1: config 0 interface 78 has no altsetting 0 [ 320.996788][ T979] usb 5-1: config 0 interface 162 has no altsetting 0 [ 321.005685][ T979] usb 5-1: config 0 interface 7 has no altsetting 0 [ 321.023749][ T5846] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 321.052423][ T979] usb 5-1: New USB device found, idVendor=07ca, idProduct=4835, bcdDevice=ad.92 [ 321.071755][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.079921][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.098992][ T5846] usb 4-1: config 0 descriptor?? [ 321.118544][ T979] usb 5-1: Product: 蚖湷ᔖ藀옑䵜ࠪ⬰劯躀佾ⴅᇔ蓸漰쑷ⷿ騜Ὼӥ왑䳋ᬢ库⧙쐰㊼끀沪炢촩唌懸欆꜒㋛槫疣根줔혓㲷ˢ䶆锖ỏ⻃Ⅹ싋ᑘ㓸桸퐛꿬䆡빼笋楐泤舛⢁簺ꍭᡢ뚰܌솁敲Ւ鏑昹̢謯즞ʩ樓촓ύ陳ີ딅⡗銈㏽ឥ呭꡸ଔ╼⁓钷我襕鸌血줏鑧䰣ꦰ杛に㫮潡쬙抄੗낇弝䞩ः㥍䅞 [ 321.204979][ T979] usb 5-1: Manufacturer: 駱ࠚ쟇溵黻䥰갱⌋痎읗䝨▦䇈༵흵퓘鼳ꎭ驝褑繻찜ꠎ㼃䂭淣혱暀銑窤곐芦఼䍪蓖騄␡놁咼ʿ澢⇰㽝ퟮ᪜뮟ﴔꚉ亣Ⳣ즇욡ꠍᳶ鸤ಯ빌⫻䊴䨔褫᲎鏕ﾕꌶ纎dz쓓␣坮 [ 321.230515][ T979] usb 5-1: SerialNumber: syz [ 321.239616][ T979] usb 5-1: config 0 descriptor?? [ 321.371793][ T8609] futex_wake_op: syz.2.751 tries to shift op by -33; fix this program [ 321.659208][ T8600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.803968][ T8612] netlink: 64 bytes leftover after parsing attributes in process `syz.1.754'. [ 321.831529][ T8600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.848464][ T8609] netdevsim netdevsim2: Direct firmware load for . [ 321.848464][ T8609] failed with error -2 [ 321.859296][ T8609] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 321.859296][ T8609] [ 321.907630][ T5895] gspca_sunplus: reg_w_riv err -110 [ 321.913044][ T5895] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 322.173961][ T52] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 322.232765][ T5846] uclogic 0003:256C:006D.000C: v1 frame probing failed: -71 [ 322.257669][ T5846] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 322.293497][ T5846] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71 [ 322.343490][ T5846] usb 4-1: USB disconnect, device number 41 [ 322.362313][ T52] usb 2-1: config 252 has an invalid interface number: 251 but max is 0 [ 322.364122][ T979] usb 5-1: USB disconnect, device number 47 [ 322.376733][ T52] usb 2-1: config 252 has no interface number 0 [ 322.388360][ T52] usb 2-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 322.400523][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.477635][ T52] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 322.682684][ T52] gspca_sn9c20x: Write register 1000 failed -71 [ 322.702817][ T52] gspca_sn9c20x: Device initialization failed [ 322.709185][ T52] gspca_sn9c20x 2-1:252.251: probe with driver gspca_sn9c20x failed with error -71 [ 322.730796][ T52] usb 2-1: USB disconnect, device number 41 [ 322.830085][ T8623] FAULT_INJECTION: forcing a failure. [ 322.830085][ T8623] name failslab, interval 1, probability 0, space 0, times 0 [ 322.855328][ T8623] CPU: 0 UID: 0 PID: 8623 Comm: syz.3.758 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 322.855369][ T8623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 322.855382][ T8623] Call Trace: [ 322.855391][ T8623] [ 322.855400][ T8623] dump_stack_lvl+0x241/0x360 [ 322.855438][ T8623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.855473][ T8623] ? __pfx__printk+0x10/0x10 [ 322.855506][ T8623] ? __pfx___might_resched+0x10/0x10 [ 322.855538][ T8623] should_fail_ex+0x424/0x570 [ 322.855566][ T8623] should_failslab+0xac/0x100 [ 322.855597][ T8623] __kmalloc_noprof+0xdf/0x4d0 [ 322.855631][ T8623] ? tomoyo_encode+0x26f/0x540 [ 322.855668][ T8623] tomoyo_encode+0x26f/0x540 [ 322.855705][ T8623] tomoyo_realpath_from_path+0x59e/0x5e0 [ 322.855750][ T8623] tomoyo_path_number_perm+0x245/0x790 [ 322.855776][ T8623] ? __lock_acquire+0xad5/0xd80 [ 322.855823][ T8623] ? tomoyo_path_number_perm+0x215/0x790 [ 322.855853][ T8623] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 322.855922][ T8623] ? __fget_files+0x2a/0x420 [ 322.855940][ T8623] ? __fget_files+0x2a/0x420 [ 322.855968][ T8623] ? __fget_files+0x2a/0x420 [ 322.855993][ T8623] security_file_ioctl_compat+0xc6/0x2a0 [ 322.856022][ T8623] __se_compat_sys_ioctl+0xd8/0xc30 [ 322.856048][ T8623] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 322.856076][ T8623] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 322.856104][ T8623] ? __fget_files+0x2a/0x420 [ 322.856130][ T8623] ? fput+0x9b/0xd0 [ 322.856149][ T8623] ? ksys_write+0x275/0x2d0 [ 322.856182][ T8623] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 322.856207][ T8623] ? lockdep_hardirqs_on+0x9d/0x150 [ 322.856236][ T8623] __do_fast_syscall_32+0xb4/0x110 [ 322.856263][ T8623] ? exc_page_fault+0x5f8/0x920 [ 322.856293][ T8623] do_fast_syscall_32+0x34/0x80 [ 322.856320][ T8623] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.856345][ T8623] RIP: 0023:0xf7f54579 [ 322.856378][ T8623] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 322.856396][ T8623] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 322.856419][ T8623] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040047451 [ 322.856434][ T8623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.856445][ T8623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.856457][ T8623] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 322.856469][ T8623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.856500][ T8623] [ 322.856533][ T8623] ERROR: Out of memory at tomoyo_realpath_from_path. [ 323.121147][ T52] usb 1-1: USB disconnect, device number 46 [ 323.302136][ T8629] netlink: 116 bytes leftover after parsing attributes in process `syz.4.760'. [ 323.314494][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.761'. [ 323.870817][ T8641] [ 323.873199][ T8641] ====================================================== [ 323.880236][ T8641] WARNING: possible circular locking dependency detected [ 323.887279][ T8641] 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 Not tainted [ 323.894433][ T8641] ------------------------------------------------------ [ 323.901495][ T8641] syz.3.763/8641 is trying to acquire lock: [ 323.907390][ T8641] ffff888056e80aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_switch_to_fallback+0x35/0xda0 [ 323.918138][ T8641] [ 323.918138][ T8641] but task is already holding lock: [ 323.925503][ T8641] ffff888056e80258 (sk_lock-AF_INET6){+.+.}-{0:0}, at: smc_sendmsg+0x55/0x530 [ 323.934452][ T8641] [ 323.934452][ T8641] which lock already depends on the new lock. [ 323.934452][ T8641] [ 323.944866][ T8641] [ 323.944866][ T8641] the existing dependency chain (in reverse order) is: [ 323.953877][ T8641] [ 323.953877][ T8641] -> #2 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 323.961622][ T8641] lock_acquire+0x116/0x2f0 [ 323.966658][ T8641] lock_sock_nested+0x48/0x100 [ 323.971956][ T8641] do_ipv6_setsockopt+0xccd/0x3680 [ 323.977605][ T8641] ipv6_setsockopt+0x5d/0x170 [ 323.982817][ T8641] do_sock_setsockopt+0x3b1/0x710 [ 323.988363][ T8641] __ia32_sys_setsockopt+0x1f2/0x280 [ 323.994182][ T8641] __do_fast_syscall_32+0xb4/0x110 [ 323.999822][ T8641] do_fast_syscall_32+0x34/0x80 [ 324.005205][ T8641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.012059][ T8641] [ 324.012059][ T8641] -> #1 (rtnl_mutex){+.+.}-{4:4}: [ 324.019286][ T8641] lock_acquire+0x116/0x2f0 [ 324.024497][ T8641] __mutex_lock+0x1a5/0x10c0 [ 324.029616][ T8641] do_ip_setsockopt+0x10f0/0x39c0 [ 324.035174][ T8641] ip_setsockopt+0x63/0x100 [ 324.040207][ T8641] smc_setsockopt+0x25c/0xd50 [ 324.045423][ T8641] do_sock_setsockopt+0x3b1/0x710 [ 324.050972][ T8641] __ia32_sys_setsockopt+0x1f2/0x280 [ 324.056784][ T8641] __do_fast_syscall_32+0xb4/0x110 [ 324.062439][ T8641] do_fast_syscall_32+0x34/0x80 [ 324.067829][ T8641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.074689][ T8641] [ 324.074689][ T8641] -> #0 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 324.083313][ T8641] validate_chain+0xa69/0x24e0 [ 324.088616][ T8641] __lock_acquire+0xad5/0xd80 [ 324.093825][ T8641] lock_acquire+0x116/0x2f0 [ 324.098853][ T8641] __mutex_lock+0x1a5/0x10c0 [ 324.103974][ T8641] smc_switch_to_fallback+0x35/0xda0 [ 324.109786][ T8641] smc_sendmsg+0x11f/0x530 [ 324.114729][ T8641] __sock_sendmsg+0x221/0x270 [ 324.119940][ T8641] __sys_sendto+0x365/0x4c0 [ 324.124967][ T8641] __ia32_sys_sendto+0xdd/0x100 [ 324.130341][ T8641] __do_fast_syscall_32+0xb4/0x110 [ 324.135979][ T8641] do_fast_syscall_32+0x34/0x80 [ 324.141358][ T8641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.148212][ T8641] [ 324.148212][ T8641] other info that might help us debug this: [ 324.148212][ T8641] [ 324.158437][ T8641] Chain exists of: [ 324.158437][ T8641] &smc->clcsock_release_lock --> rtnl_mutex --> sk_lock-AF_INET6 [ 324.158437][ T8641] [ 324.172101][ T8641] Possible unsafe locking scenario: [ 324.172101][ T8641] [ 324.179562][ T8641] CPU0 CPU1 [ 324.184928][ T8641] ---- ---- [ 324.190302][ T8641] lock(sk_lock-AF_INET6); [ 324.194814][ T8641] lock(rtnl_mutex); [ 324.201324][ T8641] lock(sk_lock-AF_INET6); [ 324.208360][ T8641] lock(&smc->clcsock_release_lock); [ 324.213746][ T8641] [ 324.213746][ T8641] *** DEADLOCK *** [ 324.213746][ T8641] [ 324.221886][ T8641] 1 lock held by syz.3.763/8641: [ 324.226818][ T8641] #0: ffff888056e80258 (sk_lock-AF_INET6){+.+.}-{0:0}, at: smc_sendmsg+0x55/0x530 [ 324.236172][ T8641] [ 324.236172][ T8641] stack backtrace: [ 324.242069][ T8641] CPU: 0 UID: 0 PID: 8641 Comm: syz.3.763 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 324.242091][ T8641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 324.242102][ T8641] Call Trace: [ 324.242111][ T8641] [ 324.242119][ T8641] dump_stack_lvl+0x241/0x360 [ 324.242147][ T8641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.242171][ T8641] ? __pfx__printk+0x10/0x10 [ 324.242196][ T8641] ? print_lock+0x171/0x1a0 [ 324.242217][ T8641] print_circular_bug+0x2e1/0x300 [ 324.242241][ T8641] check_noncircular+0x142/0x160 [ 324.242266][ T8641] validate_chain+0xa69/0x24e0 [ 324.242292][ T8641] ? look_up_lock_class+0x7b/0x170 [ 324.242312][ T8641] ? register_lock_class+0x54/0x330 [ 324.242331][ T8641] __lock_acquire+0xad5/0xd80 [ 324.242351][ T8641] lock_acquire+0x116/0x2f0 [ 324.242367][ T8641] ? smc_switch_to_fallback+0x35/0xda0 [ 324.242390][ T8641] __mutex_lock+0x1a5/0x10c0 [ 324.242411][ T8641] ? smc_switch_to_fallback+0x35/0xda0 [ 324.242430][ T8641] ? futex_wait_queue+0x31/0x1f0 [ 324.242446][ T8641] ? futex_unqueue+0xcb/0xf0 [ 324.242471][ T8641] ? smc_switch_to_fallback+0x35/0xda0 [ 324.242492][ T8641] ? __pfx___mutex_lock+0x10/0x10 [ 324.242515][ T8641] ? __local_bh_enable_ip+0x168/0x200 [ 324.242531][ T8641] ? lockdep_hardirqs_on+0x9d/0x150 [ 324.242553][ T8641] ? __local_bh_enable_ip+0x168/0x200 [ 324.242572][ T8641] smc_switch_to_fallback+0x35/0xda0 [ 324.242591][ T8641] ? do_raw_spin_unlock+0x13c/0x8b0 [ 324.242619][ T8641] smc_sendmsg+0x11f/0x530 [ 324.242650][ T8641] ? __pfx_smc_sendmsg+0x10/0x10 [ 324.242668][ T8641] __sock_sendmsg+0x221/0x270 [ 324.242691][ T8641] __sys_sendto+0x365/0x4c0 [ 324.242708][ T8641] ? __pfx___sys_sendto+0x10/0x10 [ 324.242722][ T8641] ? do_futex+0x37c/0x5a0 [ 324.242764][ T8641] __ia32_sys_sendto+0xdd/0x100 [ 324.242780][ T8641] __do_fast_syscall_32+0xb4/0x110 [ 324.242801][ T8641] ? ret_from_fork_asm+0x1a/0x30 [ 324.242817][ T8641] ? lockdep_hardirqs_on+0x9d/0x150 [ 324.242837][ T8641] do_fast_syscall_32+0x34/0x80 [ 324.242858][ T8641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.242896][ T8641] RIP: 0023:0xf7f54579 [ 324.242913][ T8641] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 324.242928][ T8641] RSP: 002b:00000000f4c1155c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 324.242946][ T8641] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 324.242958][ T8641] RDX: 0000000000000000 RSI: 00000000ffff7ffe RDI: 0000000080000140 [ 324.242969][ T8641] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 324.242979][ T8641] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 324.242990][ T8641] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 324.243006][ T8641] [ 325.099409][ T30] audit: type=1326 audit(1744856903.614:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.3.763" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x0