last executing test programs: 10.310073625s ago: executing program 3 (id=1056): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x3c}}, 0x240448d2) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000440)={0x300, 0x2, 0x802, 0xfffffffffffffffa}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000940)="6079a1e1227eac6f0cbd3ed304ee59a668552125a08862c85e4a6c7d2808c6627026cd1ad5fcd2969a", 0x29, 0x8814, &(0x7f0000000140)={0x11, 0x6559, r6, 0x1, 0x2, 0x6, @local}, 0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000021c0)={&(0x7f0000000080), 0xc, &(0x7f0000002180)={&(0x7f0000002380)={0xb4, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4a}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2f}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x7fff}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x82}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40084}, 0x74b21ac0eea1e4a4) r7 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002200)={0x50, 0x0, r8, {0x7, 0x27, 0x0, 0x1dd880}}, 0x50) read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r3, &(0x7f0000002140)={0x20, 0x0, r9, {0x403, 0x4, 0x80003ff, 0xffe}}, 0x20) syz_fuse_handle_req(r3, &(0x7f0000004340)="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", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0x0, 0x0, {0xfffffffffffffffd, 0x4, 0x3, 0x19, 0x2, 0x0, 0x800, 0x4000000, 0x0, 0x4000, 0xbca4, 0x0, 0x0, 0xc}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000008380)="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", 0x2000, 0x0) getdents64(r7, 0x0, 0x302) 9.174579263s ago: executing program 3 (id=1058): syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x4, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000380)=0x3) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @time={0x24}, {}, {}, @raw32={[0x9, 0x8, 0x5a7]}}, {0x6, 0x0, 0x1, 0x81, @time={0xffff, 0x80000001}, {0x8, 0x30}, {0x2}, @time=@tick=0x1}], 0x38) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0xffffffff, 0x0, 'queue1\x00', 0x4}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r3 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 8.542672824s ago: executing program 3 (id=1060): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2e4100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3cc, 0x0, 0x10c, 0x1f0, 0x2ec, 0x2ec, 0x2ec, 0x4, &(0x7f0000000140), {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast1, 0x1}}}, {{@arp={@broadcast, @broadcast, 0xff, 0x800000ff, 0xa, 0xc, {@mac=@remote, {[0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x9, 0x6, 0x81, 0x1, 0x2, 'lo\x00', 'veth1_to_team\x00', {}, {0xff}}, 0xbc, 0xe4}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xb1a0, 0x7}}}, {{@uncond, 0xbc, 0xfc}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x9, 0x1, {0xea92}}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x418) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x8000) (async, rerun: 32) openat$cgroup_freezer_state(r3, &(0x7f0000000600), 0x2, 0x0) (rerun: 32) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f00000020c0)={&(0x7f0000000640)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_cswp={0x58, 0x118, 0x9, {{0x7f, 0x4}, 0x0, 0x0, 0x100000007, 0x4, 0x3ff, 0xffffffffffffffff, 0xc, 0x7}}], 0x58, 0x20000810}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[0x3, 0x100000000, 0x3, 0x0, 0x3, 0x7fff, 0x3c52, 0x8000000, 0xca, 0x0, 0x25e, 0x0, 0xfffffffffffffffc, 0x4, 0x6, 0x200000000000000], 0x8000000, 0x201641}) (async, rerun: 32) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.986713457s ago: executing program 1 (id=1062): syz_emit_ethernet(0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x400) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r2 = getuid() setfsuid(r2) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000000140)={0x1ff, 0x6, {r1}, {r3}, 0x9, 0x5}) 7.698625899s ago: executing program 3 (id=1063): mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000180)={0x0, &(0x7f0000000340)}) epoll_create(0xfff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000009c0)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0xc) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="020004000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c081}, 0x400c800) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x80000}, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f00000000c0)='%.,:', 0x0) socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0xe4, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x48000, {0x0, 0x0, 0x0, r8, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 7.343721794s ago: executing program 1 (id=1064): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0x40080c1) shutdown(r1, 0x1) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005e05b14021040203e8450000000109025100010000000009040900000202ff00052406000105240000000d24b8fe3f9ea3a0e8ca0800ff06241a05002a052401010305240600010524"], 0x0) r2 = socket(0x10, 0x803, 0x40000008) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r5) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000100)={0x30, r6, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) openat$fuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = syz_io_uring_setup(0x7b1, &(0x7f0000000200)={0x0, 0x200086f7, 0x80, 0xffffffff, 0x3b6, 0x0, r0}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r0, 0xffffffffffffffff, 0x5, 0x2020, 0xffffffffffffffff, @void, @void, @value=0xffffffffffffffff}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="0a01000005af9e08d2106528c9a4000000010902120001000000000904"], 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r10, 0x401, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xfffffffffffffdeb, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91524fc60", 0x14}], 0x1}, 0x0) io_uring_enter(r7, 0x48e9, 0x0, 0x3, 0x0, 0x0) 6.22664962s ago: executing program 4 (id=1067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000001440)={0x16, 0x0, 0x0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x7}, {0x0, [0x0, 0x2e, 0x2e, 0x0, 0x0]}}, 0x0, 0x1f, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0xfffffff7, 0x0, 'queue0\x00', 0x4}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getresuid(0x0, 0x0, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'bridge_slave_1\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x4d, 0xe1, 0x2a, 0x6, 0x7, 0xd2, 0xff, 0x9, 0x7, 0x2, [0xf, 0x80, 0x800, 0x400, 0x0, 0x6, 0x9, 0x1], [0x7, 0x0, 0x1, 0x85, 0x1c6, 0x3, 0x800, 0x200]}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) socket$packet(0x11, 0xa, 0x300) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_open_dev$sndctrl(0x0, 0x0, 0x80800) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000500)={0x317, @time={0x65757100, 0x9}}) 4.830521198s ago: executing program 4 (id=1070): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x242}], 0x1, 0xffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) setsockopt$packet_int(r0, 0x107, 0x10, &(0x7f0000000100)=0xffffffff, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000440)=@ethtool_test={0x1a, 0x4, 0x9, 0x2, [0x2c9, 0x6]}}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000400)=0x4000000) r3 = syz_open_dev$video4linux(&(0x7f0000000140), 0x4, 0x101004) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0245629, &(0x7f0000000240)={0x0, 0x10001, 0xb, '\x00', &(0x7f0000000200)=0x4}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x7, 0x3, 0x2, 0x85800}) r4 = syz_open_dev$vivid(&(0x7f0000000200), 0x2, 0x2) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f0000000240)={0x5, 0x3}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=r7, @ANYBLOB="00f2000000000000240012800b0001006272696467650000140002800800080088a8ffff05000700"], 0x44}, 0x1, 0x0, 0x0, 0x4011}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0xb55cbc099b415d1, 0x34, &(0x7f00000003c0)=""/52}]}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f0000000dc0)={0x0, 0x0, 0x0, r9, 0xbbbbbbbb}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af04, &(0x7f0000000200)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r10) openat(r0, &(0x7f0000000180)='./file0/file0\x00', 0x20ce80, 0x8) 4.685266463s ago: executing program 4 (id=1071): syz_emit_ethernet(0xa2, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@generic={0x3, "8444a3c97c8b824b6ee9c67869d4fae8a05ea9c01f6ec9b901743509139c4ae434f66ee9395d2e23a15763e43ba313c4160241ee92119bd8e4f63cc0bae9fedac1d43a06fa7d258b763733eaf9d36372c7ac7bdd63a36b8746924aa47dd2212189fb0d6bd3cfbdb7143ce468fdb5e0ec10636494fdd374cf17bbefdd51d4009b2fa55d6e6f5f9bd0b024b9137943c20cf3f720e2"}}}, &(0x7f00000000c0)={0x0, 0x1, [0xcbf, 0xd7f, 0x50b, 0x6f5]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="680000001000010028bd7000000000000000f100", @ANYRES32=0x0, @ANYBLOB="1000000000000000140003006e657464657673696d3000000000000034001680300001802c000c8014000100080000001700000001000000810000001400"], 0x68}, 0x1, 0x0, 0x0, 0x24000110}, 0x4c950) 4.608694755s ago: executing program 2 (id=1072): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000003c0)) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000001c0)=[0x4, 0x3]) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = io_uring_setup(0x29f6, &(0x7f0000000540)={0x0, 0xf6f4, 0x400, 0x2, 0x134}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r3, 0x19, &(0x7f0000000040)={0x6, 0xfffffffb, 0x1971}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000000000000c0000000c00038008000200ffffff7f180001801400010076657468305f746f5f626f6e64000000b9a441b66cb5094fd0a4ed4b01464550c83816046b89bb319d94ce285def27ac12a2cf758a1f9917312997330cc7a208a7eb418b6a5ff06205d5face3ae2b408dc6eca6d8b8a72b3f34a8e64bb40d35069eeafd5c99da48a94c3e72b6264504716735610968844f1f9382eef650000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000180)={0x6, 0x400c, 0x405, 0x4, 0xd, "5ef863f1a0973cf65a7917895c30acd61b3d2b"}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x6, &(0x7f0000000340)=[{0xf89d, 0x7, 0x4, 0x8}, {0xf, 0x60, 0x8, 0xccc3}, {0x0, 0x8, 0xb, 0x5}, {0x4f2b, 0x53, 0xf7, 0x8}, {0x6, 0x6, 0x0, 0x8}, {0xbd, 0x9, 0x54, 0x7fff}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') write(0xffffffffffffffff, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972", 0x2d) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4, @local}, 0x10) socket$tipc(0x1e, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r6], 0x70}}], 0x0, 0x2000c044) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r11], 0x20}}, 0x0) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) 4.450569124s ago: executing program 4 (id=1073): socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000005c0)=0x3, 0x4) getrandom(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000300)="d73beec7dec0a8f013bf4596f22132de44e7f867eb6d01551eb872b22b2ccbaf924560d3979eb36db01b26a9252bab95c92ac8751bae753898cda0a33e07551c7a201cae822e05f2399fd416c4a6da4eaab4bb6ac14c8bc111dad626eb3a1b14c26c963ffbdaa3ea6e176d4e330d2393adff0c83d3d6b5b840e71b5c7a922fefdf39d36cd4bb24e9f66124a637c10c859a83c69ec1ab6fe76cf73cf4e5f85c4bbf8ec578044b34f05df0ce210d9f85d412bbc611164ad0c92694e4dc4e66b5b094e1847444ef160b83c82e5153d34ef669dace2d0d0ef088b04de9a1b0d2", 0xde}, {&(0x7f0000000400)="39910839d2f5e002feabe60e5a1a78855ab994489edcd2fca530d2b18c1492b4598fb80fec5e702d964a88d7756316aa1ba649b9b4eefbda6c83cfb36bc1f213799831dd6a2e6169b14330ac7a2061dd2bb3b4955eb73489620e8e5284d6a45c50b8d24a27b203459904185546a09e69a8c583dc3cf1e7d11407074cf5a5ea9491c6cba11eaa5bf43e60fec07a029dd9f3b663604a9819fbda41045b94a5fd3471", 0xa1}, {&(0x7f00000004c0)="0e25fb4d40ba9cbb7aa548fe996b7c6321bb55a579f34f8fe40b4be0e81416a0f56d11a9af89a5bac1c86c1523f2d05ec0fcd3b8fc8aee149e099d57a1fa312f252b5664b92a60c2e006dbf9c44fe059835e6b5515bcca96163af84c10e70ccef220a1839a05010db09f941686505489584e578b7037a731aae16e322eb8c3889c28b14bd8e16708e01050464d9ed11362da48bd2a6b8b8efe98580f52e17c52da265f93259d94cf8b62ca0f0ef824bea1e8f0ec9042a490a895c12659c1d368b77572646d533ebb8b869c1e5dd1ecb9fe0fbeb90394", 0xd6}, {&(0x7f0000000140)="2478d95770a444852d05a717aafa297fd3ead28df9b139a374c81466f08b2b8b2995e339c64d0114b848342184662f06296e27fde7daff4b47bdc8ede4f8a311961f691b48edab6813f4f4798fb7f66a32b5009c53d6622cb77fec7fd674e0d6d68b", 0x62}, {&(0x7f00000019c0)="edab01aa6aea254bbefc3831b69c641137c854dd6c3e7f15a4f3f2cfe615cd30249c7d6c54cd79bbf48ca39bd47c13f96afb5f23dcff54a0be49ab4759924546b77ef42af83fcf0d58674e462fb52fcdbd91a432cbc2e2c0a57d78a1e2ae5fe838001086f6dc0a2d854edb2c0e3ba425962c9e24a652e560b793b5f430f7138cc37674eb4472e888a51ab7584319bbed1ac53e6d79b3d9957bd4d6e4030c74d77f27d3f7da0f450664e28d344c33e4b9a99300"/188, 0xbc}, {&(0x7f0000000640)="11ec7cbe5fddf50233de80ef8a4262d7ad7dc64d661bab0303a01631f7b481ebee977750ffab201a1ce0ed097245897217943f04cad01e3bf5ad16e1d9176f3d54048b6ba1b979cf9380a12958338007712be65d65ea72e6636abfd61b68", 0x5e}, {&(0x7f00000006c0)="57969d064bed07c097ee5cabb84842ab42afd6eb06ab86bfe0d03102b24f8c57cc05393f43af00c72f9f242a9d50e508fc81dcac9b55c747c667f4f40c87abbd4c7e96efe274af7e8f0fc338431ba5452b2aa653a13665285bb5fbdd2de12aacf81bd11e983acd7f804a934657d311cdc0c94bd897ef7cbd90294f9d254e833c226549adc2d7118215ac5e149c9101a8d248a7e34f54d69624296ff438aeca077090770fd4998a6882ab1b661f95c373cdb712d599d641121aea4ee1aae3e572b27ed4fd06afc28a53f5a08a450b0c5b263fa8fbe11a5348d5a375a59af6d44af8fb47e5da206488947f2943b35f2d68c08f196a3912892174fcf3037f92142d0ebfb6e9c8b481f45b8f7d770458f06ebcfc27469b0c1460826b5613212bacafff816b6271a3c9e490cc893012700990ebf85b9b63bb895738d3e3a957a2f8fdb2f7aa5b808628554178a19769d59c12aed8a922197857e845dd10d7f18c4fc7ca925aad7c105d620f35b54624eaa91891f1bfe2b5b7a4e9c86ef5fc5a4cc78b5c78bfb50b4def1810668b7b55a43a021297461f834eb0bde5025760bf077c26f39145e01406f13abbf33154d1a4ec491d158369debaae5899a64799d273623c2fc143b6706e5254c1c2a28cbb377da6019d783ef966d39e89a8955ed3f15366ee6b856079d5444b88a4b0ce0be93c04ff28c905767f532f4b764053b2127019e47feff75f3b4567a164863666563f91f35b26d194cbb7220b8d8631f9ef4688e50dfbd267b529f44d8bdd9b9d934241ef044b3b80ad9877fa72a5a09f4fc50d1b56991515334e09f9622c172a5f1423e4105c95cd67e992141794099c474ff3a84bdef40f2038efd7a189c92033389177a07d615803cf3d3241386796b142761eca300291b57fd489ec99934d3f54c40d39255b0bd294b680055b980301618781a986299433cc40cca93b9b7b654da8519ae4e6167a2e4cefb6d05e36fc51e565ee341ba4ac3a2fa22dec9f6ce44123067a9adaa5ed2ce27d1060c8db3e739f0c4b4a3b160be9e84be7bd32efd49925af964fd5b4506b6975f799e97cd5f1ad9477379e9f01e8d5db66dc5fe975863ed1f75488cda04e6052f04531194bc9f20fc8592d8156550b17ab17cb3d064b6cc88e08dcecbafefe97c331789272de3b3d37e9265ce5362df624b65900ccb8869d35c0d3279e54c306ed65aba93e8c22e39af9244a4f5c4521918f98618db50cf0cf9179012380ba5a2db5aaf4cce23712e203ef0422e8600abc714ad89f412d6e7a6694be1a0db8a76c96f035453d07bcb894a6e13328d52e219dc46e9f130f5f2acb9fa1eb1b121ddc812c27ca2d173aab4761f673dc3d82a5fdf449df15e2d724d0ead34996039e982946eb34709e9cc630a52894063c49098cb56c15418636526bce89c6c8ceeba2487d3a6cfb8db6f47663dba68a265ca74c6b8d691f0ec317e116594e59817c2300afd34cb2b50014adc5f71ff41022f57c006897f2ca908806539354f4dfb3ad09eabc906c3ad84eee82b2310686a348913c61cf77dd63063c60a6af1481a33677686b70e69c068c2d200f6c05f6278c23cb02e9cf807e0a6b8ef0027167d2a8c38988a8169b1aeca1f82f2b18ce4638c9533d360ed23b5e1e839c9d9ae2d2af5c109a9ead5d84088f7bc80d24071ad384c04f49692118194e620dcbc63cedc22b390cbe93bb5b3d1fdbbfdadaf3b4a6a5a1605f5ca4b8b70da064c6b10f7fba0d93a58b5534ad0727629f521d1fef372b778640f97dd7c1213c78bc4a8641a4a290b7ce9dc230bc7bff0156069578273ec3e287144c279adb8cde0af27add2c058268df4f85fcf73386c3937efcaf68c26c94146fb8309aef52b32302722083bd573fdc36fe16dbc31d5e7c3d3fc771e0f9bf56b61bd02723a2d21d9a7c7d3c310e12527c0b559ba5dc618e84f0e8809661def1aeb7945a15fac05dcd58e66dbe3d17cbdcdf48d737ece4460d8912ea74018fd414de2923c98eb32d29b09277b05bc61b724b0925857a69d2ca900688095ddc52244a9345dcb6191cd12af4807f2dffdc6c4dbc123e98b16910e8ce7d5b8cc6c2cb848becb720ff3f9435206950996e43966f87bba611c24c26bbccf005e533e6b9c4ae139ce57cad0bc58c852861bdc447b5366c67036fa09279a8de69102fcadefcedfb5b1deb1d682471f953658d0f9f4ef86ffcd200bb48751fda214f617dc226a9cde106cf59961c94d8afaea004b20c7e603f17e7b9604b7cad39296d80636c5081aa4de4274b29e20fee1a66bae36d0f468bff495d44f723caa8bf783160402336b2fe2abb100013e82f69ad90a7afcb41200d19b56eef4d626e27d409966d684f2bcb41d926c1371cd53191fb0eed2c17a67bbfb9b4cdf823b4112a3df9d65246852b297e546ec77ef075cdc2ee2ad7c065eb231f13f8b7174c8117ce5cea5727a02e9b23d0e3909206e434dc5de6702ce5e74b170edb6de9bd8ed07c15d2cda53f43af5c2ff86b29019f84e0443ecd3e8e64f3a0b42598104677ab26e660ce84ce75cf35dd7f3cd31876cfc386393a0cd71bf7c6101cca179ab4c4eab45806050f6098b2cbc7302c6ec7dbb7b16f2ed12f8159ed788654c05036ee99828acda09cb7d43140a1f01e3df0f80a439329cc81aba3ebbdc45020d3d0a27a060a08ebd36a093cd72124294c109ec8b65d3756bd7592a8b8bf69d655c37d1d49d749bb94d3301b288e720bbaad030a08ac482c6c8a477e19ed32171695874817de154fba79995a35320a2a32c663a7484e72f722e7b9ae6e3cee5edfcf677c798385ecba2649f077f9667554634cf4aea4c28e148575a8ace3ce049395b849ba860939bb981575c7a0531d4583a943c71ef7521fa81579ed36807586ddf1a82bd784a9f4a881c4cba9a5173e45541773a2720c1d80dee01dacfc9860de389a471126f22dd65b8cfb31861bb108f75b593b13ad16d2adbe6d97b83512a1ae957c6082cbb7ac2f64b2040c7c210dfa364fb8f635a40c5866abe980592f6dbad606308f85e96cc90c0f2ebda48660e042c9ff7904bdd32552b1f6fc4578ae8d60ee602a195c8dce29c54d981984f5c83029c73888d27b8d9067a43cab34272e6777582ef27950b193a7fbfd20327c4f6ab52725a14f03d6dd5159fcb2e9abf8c4e76c8524f54da2caaf81251ec78d5f0e2b45c4a6f9d4dcb7e0c55cd49c296de26116f3ed5a565e9b6ae4ffa4362591c736e79eb0b47b52c943c0c4082f70c0a31a1a647c7d49266ae7b5b571eb53a0e0d30297ea9418c794bd82c0f1995514b001cbca133bb8a3afc3ae3e037c94bb9580b83e0bd978ee6967691a43a982850c2d26e153f0c52fddb6d9c0b9d49682f2d3499e1130aa4de3894b1453f4cc34e1961d3dc4ab734235e5e7bd98d0fe30400f413c66a0e032d929d94658584b4b959acf0489655585f019e2236a0d54663fcf1d31599bb57a47af190de84f738f4bbbf768d540a7adce3257c3799b2c3272faa125b09e1d3c6e57f81cd0f1d5f65675bd12f80b593faeff758249c28873ae211fc2439a87f65b8918587ae245aaa9e6740059792af0044653d01782a033768fa9436077a1d577899cfb1539bd6da8a54c37592a4dd587fb4eeaf7ce931809f28c11876337f895a6d613954152d01a6359ef5210de093f8e23f71555e549c355c45adf98b061509292b3d29835dd761c8af1f9a4eeeeb50abb8660c753c54d2b247900fc063f1c13374f4697c63fadc958f393bab16e188d2f63539948e3a883092a5a45895360e1e27f1d770898785236336a3dfc6c2e0ab0f4f7614fa6a4d0ae7d1a5b1213f387d118360cbbe9e29f52e8e906ca1a2d4bbc952ef64aaade03b12c0ce1980d59b7b3b1f3e6560339a289260e1c672a4b9d159ca231d217c055efc1cfcc30abf1a4fbbbfbf750e8620e4c391fd069b0bba82232dd70aa76d3711efdd3d507bb58a982fe053eb108abcebd9cbcb029357d7386bd2e91882723d0caed865c002b26e0f701d4a2c757ff7578b107d50601a717ccf4db22a061fb5f28ffe927ed95ea05ebf8943ec3c7aada48b1b435f64ccb349136e9f82afc145dba3aa674f6b83275cfc3b5d088f6df6790a1f74a237026d2c9a93a9a37a613af614288ab81462c9a4d21fca8adf8e5734d1c6513e838170e20e5fcb1329d193090420ce32b65d49725f49e7ae65cd4cbb1016de08af0cacd488bedcd8eadbd2c3d64189353aea479600f89fb2a2b40fc4176d78023cef340744b81f11797127adff0c7ef4f415325e46df4ed7c67b28f597826245120c5d4c866c84f5d8fb87f40a5d4d54bb060d5b50b8250fff531cad9f33e7a82d5edaf6dfb9a327123024cf46d3bdaec988d759057af0388df9de0e2c3f8e09caf2a9c6341c45c1675791f38bb4b8fcb618bc06f46d620cc4a48706081791317f2dc3dd6027a35723957541da829560a6dd56730a76fa665d3a261941364f44a7eb38060c69249e891e86c7917042e43b817fce55eea8c6b520a6c9fb35366b5c1d54f926376e2f2714ea9cd2db4167439caa9c2f27e318fa9baa3228ae6fbd1e1708f1e86bbf13f3387f944b2fe741fa704021c8f22b30c3b77161fd01eca026b3bd3dcb3a9d2ded2af4a269cbb61d483afd5c092c2898a90e948ad492dc35b7e4c041adcce43942038600c74d4393845a897ecfe728339402f0b6829ac9eef78fc1d6be401cdfaddf9e3f7e6d5d788db8da16060e2f135aac68c73028aa3043836a2113388811b48358ca2b18f298c8e5426575e3814447884c558578bb4408709aef34cb68096a0bb666e345680ce6f9b5e3bdb412c3d1e0814f1d959538b87e15c255e39f8ce88a36c4e1b70651f705fab81346859a0e807601d81ec0a30ebcfe3f1c1808bee66b1336b88da40fc9fc6c04826a23aa99d4b965b8262ab633f6d5cdfabeaa92da40675ddc8feddb304573f52d45743e71f9b179a3cfd21e54679cdab562a5a5a20ebd858a77ca0102e0689f4d95c56cbc446fd668cafa49aeb92d0bbbc43f527a3c07a8aba2c5928301672f8b856b49f68ecea627a555f290212f122d9cb0131f76c6c6f81bdff4c93f15d2df5df2cf93bda3b59cf66f8a67b1c02ece252f9884824a57d3af2dae5575d1a0f052105e9cdd88f05c8d5e14a52621c8c20ae96a4fdf8c56b2d2dd665a15cbfb9759db676c86b945aadafd956bc1f095ad60db2503f6bfc822db346ec18fc71b3d462c1d86b69853047fc0d144a0dc2ec45907fce1a08401b6910b86cbcab3f2ac7e14dd536d712b4e49bf232d8dc9dc2c35b157300f2683f85d86d1838a69d044f52507ccf069b8942bc495b6684b705e41d40d5d08b142f9f6b40d9fc435f2b96e395ac658c8a8bab0d3161e67e98ed6bbb4fc8196e132a1ba324dd659554c23aedd39ee247e30471b5fe3a99bf34f9b4a996e82761309c60ee74062e042f80458cd83da80d8b3d8d4bc06b8867ce11d6c7befea88500d715303b7c5651dc94af6cdd8a7291d2efabfd4e59315b78f6dd48b526212de503da020d26f3e94e1bffa4e8d6d30860ef17cb1c4f61bec7a3bb42979370ab627a2f8537b5e45d806a3dc7435c16ccdeff0dd0b87f22bb0ea43c567d0a0df80b36bf71889c68706521255ad5f753df6197a71d503f766a9e8be04878ee909d46470b656a62ce37187804ef99347c15e44299d964f5fa95ccfc3d4721d91f3c54b6faa8dcb9ba1206eb6e3dbe29dc31a9961ba99b2ba9e03420ac22d1fc5e98f813", 0x1000}, {&(0x7f0000000080)="d128a6c6be8fa565ed13", 0xa}, {&(0x7f00000016c0)="8cc606634ac17500ade31b78a55725ac034e680291d8110850f791b5833efc6d9a81d4bb80fbb085aa9fe7f828806633b92d5cee71115ba76e2d928245a5ec8c87b9ca270e260c98d8a594804aed1b8c1c04267e6fa454304d92e81e120b905f58392c1039e40c28e600d5df434077e2ac1718b040beecbc82e73cd36eab0531e1282bb3d1e64a62bc37508b81bc4918f1e8b50fdc", 0x95}], 0x9, &(0x7f0000001800)=ANY=[@ANYBLOB="0d000000000000000100000007000000b8000000000000004e07000000891b6c0a010102e00000027f000001ffffffffac1414bbac1414bb01442cb951e000000200000003ac1414aa00000003e000000100000001e0000002000000010a010101000000064434e353e034c88e6cc8aa085cbc00000100000001e000000200000005d800000200000007ac1414aa0000e2f13263962aa10009e0000001000000066401010200000005940ae067684caacf864944249261ffffffff00000766e000000100000fff7f00000100007fffac1414aa00010000000054000000000000000700000044446e21ac1414bb00000400e0000001000000c8ac1414bb00000006ac1e010100000000ac1414bb00000001ac1414aa0000000d0a010101000000ffac1414aa00000e59010000000d00000000000000010000005e000000140000"], 0x140}}], 0x1, 0x4008801) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r2}, 0x8) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x250543, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 4.15783288s ago: executing program 4 (id=1074): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x899, 0xca3, &(0x7f0000000040)=0x1) pselect6(0x40, &(0x7f0000000080)={0x8, 0x401, 0x5, 0xffffffffffffff81, 0x1, 0x7, 0x3, 0x100}, &(0x7f00000000c0)={0x4, 0x9, 0x100000002, 0x31, 0x0, 0xffffffffffffffff, 0x1000}, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5b6, 0x5, &(0x7f0000000000)) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) 3.700986468s ago: executing program 1 (id=1075): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x2b}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = io_uring_setup(0x70fb, &(0x7f0000000140)={0x0, 0xffe, 0x400, 0x4800004, 0x3b7}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="f8ff"]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet6_tcp_int(r5, 0x6, 0xc, &(0x7f0000000200), &(0x7f0000000280)=0x4) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xf0}, 0x18) 3.502503432s ago: executing program 3 (id=1076): socket$netlink(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x27) r6 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r3, 0xffffffff) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r7) 3.380202306s ago: executing program 2 (id=1077): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) (async, rerun: 64) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async, rerun: 64) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async, rerun: 64) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/../file0\x00', 0x89901) (rerun: 64) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) close_range(r3, 0xffffffffffffffff, 0x0) (async) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f0000000080)={0x24, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$uac1(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (rerun: 64) 3.204749913s ago: executing program 1 (id=1079): socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mlock2(&(0x7f00005c2000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x27) r4 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r2, 0xffffffff) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) 2.814703486s ago: executing program 2 (id=1080): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x1100}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xfffffffe}]}}}}}}}, 0x0) 2.594272773s ago: executing program 2 (id=1081): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x2, 0x0, 0x0, &(0x7f00000001c0)=""/46, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_create(0x3, &(0x7f0000000080)={0x0, 0x11, 0x0, @tid=r2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000300)=0x1000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x10) getuid() ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000002c0)=0x8000000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000640)={0x1, 0x0, [{0xeeef0000, 0x34, &(0x7f00000003c0)=""/52}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af04, &(0x7f0000000200)) 2.254673189s ago: executing program 0 (id=1082): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x10000, 0x8, 0xd, 0x7, 0x0, [{0x7, 0x9, 0x8, '\x00', 0x2}, {0x9, 0x2c, 0x4, '\x00', 0x5e}, {0x6, 0xf8, 0x5c, '\x00', 0x3}, {0x6, 0x4, 0xc8, '\x00', 0x7}, {0x9a, 0xa, 0xf9, '\x00', 0x3}, {0x40, 0x6, 0xe, '\x00', 0x1}, {0x40, 0x5d, 0x7}, {0xf8, 0x1, 0x2, '\x00', 0x3}, {0x0, 0x5, 0xa, '\x00', 0xf9}, {0xe, 0x7, 0x66, '\x00', 0x32}, {0x0, 0x5, 0x3, '\x00', 0xd4}, {0x4, 0x3, 0x0, '\x00', 0x7}, {0x73, 0x9, 0x8, '\x00', 0x1}, {0xf, 0x5a, 0xfd, '\x00', 0x8}, {0xb8, 0x8, 0x7, '\x00', 0x2}, {0x4, 0x5, 0xc0, '\x00', 0xc}, {0x52, 0xd7, 0x7, '\x00', 0x8}, {0x9, 0x0, 0x1, '\x00', 0x5}, {0x7, 0x8, 0x77, '\x00', 0x8}, {0x8a, 0x10, 0x9, '\x00', 0x4}, {0x6f, 0xbe, 0x0, '\x00', 0x7}, {0x3, 0x1, 0x4, '\x00', 0x96}, {0x7, 0xf9, 0x4, '\x00', 0xc}, {0x2, 0xf3, 0x6, '\x00', 0x1}]}}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000000c0)={0xeb4e, 0x1, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x2, 0x10}) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x7fffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40186417, &(0x7f0000000140)={0x0, 0x5, 0x1, 0x8, 0x6, 0xffff}) write$cgroup_int(r4, &(0x7f0000000200)=0x140000000001, 0x12) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40046607, &(0x7f0000000080)=0x80000001) 1.714635866s ago: executing program 0 (id=1083): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310428bd7000feffffff1600f8ff17300000000000000500040001000000050003000000000000000000000000f065b2a401f4c4c3c0aaab3e22ebc74b1aa11cb48a37e8c0edf6bf4b9ff6d907c243d5f904a1aeb3059677ca57d9c671e6324c5e28290572412db5242332c20df246d515b0aedf6f1a7e3b410b8947ebf1c9362e8300"/146], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.580181675s ago: executing program 3 (id=1084): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000980)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18}], 0x18}], 0x1, 0x20008000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @stepwise={0x0, 0x400}}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc20000000000010902240001"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) getresgid(0x0, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc512, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x36, 0xa0, 0x9, [{{0x9, 0x4, 0x0, 0xf5, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x71, 0x2c, 0x1, {0x22, 0xcc3}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x6}}}}}]}}]}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) close_range(r1, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) 1.550910861s ago: executing program 0 (id=1085): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x5a30, &(0x7f0000000240)={0x0, 0xc280, 0x400, 0x1}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x20000040, 0x0, 0x0) r1 = mq_open(&(0x7f00000004c0)=' \x01 \x00\x00\x00\x00\x0f\x00\x00\x00\x00\xd0\xe3\xac\x88\xc1s\xc5\xec\xa5O\xa2\xf3\"\x88p\"k/K\x99\x147~H\x0f,\x86\xad\xa3\xc0J\v\x1a&\xf0\\\xb8\xcf\xad\xae\x93J\xe7\xcd,\xeb\xef\xee\x93\a\xc51\xd6\x98\x13\xf2\xe8\xe8hY\xd7\x03.\xac\x16H\xcb[,0\x8b\xa0\x83\x84\xb66\xff\xdc\xfe\xb9%\xf7\xdeQ\v\xbe$\xa1\xc8\x97\x9b\xba\n\xd1\x14*\xac\x84\t\xe93qE\x8f_\xcb\xeap\x0f\\;\xb7\x1c\x03\x03\xbc\xa3\xcc\xbe\x03\xb3$\x95\xb4\xd9\xca$%_\x1b{\xfa~y\xba\xf5I\xbar)\n\x93\xbe\a6\xf8&\xbe-\xb2\xf2\xa5|Jh\x15,\\(=t\xa8\xe3\xe3\xf8!B[\xa8\x1bz\x83i\xa2\x1e\xb4V\xc7\xc0\x00P,\x81x\x7f\xc6\x05~\x9e\xa9\x97<2C\x13\xc9\x01N\xfa\x97\\<\xbc\xb6<\xb5\xc4.\xcaX4%fn|\x00'/237, 0x40, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000380), 0x25, 0x102000) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000140)={0x80f0f000, 0x101, "9a555c14c966e134d198b9aaaa7da80f8e4fa088dece6ffdb507a3c83e130028", 0x0, 0x7ffffffffffffffb, 0x100000, 0x3, 0x1, 0x9, 0x0, 0x0, [0x0, 0x0, 0xfff]}) mmap(&(0x7f000074f000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x11, r1, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) bind$qrtr(r4, &(0x7f0000000240)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xfffffebc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0x40, 0x3, 0xbdf8, 0x48, @rand_addr=' \x01\x00', @private1, 0x8, 0x10, 0x57, 0xfffffffa}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x72, 0x6, 0xffffffec, 0x31, @remote, @loopback, 0x700, 0x1, 0xdd6, 0x10}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000b40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000600)={0x500, r6, 0x10c, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x194, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x128, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/v4l-subdev#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, 'memory.numa_stat\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ')x@\\&&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/\x93[:::!,%\\/Q/}..\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, 'memory.numa_stat\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9c}]}]}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x104, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x35, 0x5, "4ac6a46fec728e006367bb31fe88900194a1886859546eef1393f5c03e97337fa5f119e01440bb772ce0deff75b3f6315a"}, @ETHTOOL_A_BITSET_MASK={0xb9, 0x5, "ecb02a6972e6c4fede16227e43ac017ef5383e29f80e89161b4ad482acc5ceb8d769d60f656dc0967740b8c2e07d41a45fcd4ff464a5da85841ce9d18d4cba398ba46c717add230e8667721d98252a6ccd3e8c1e280b4986fca8e5341192448216dbf0e707440c29409c66daee436e184f49616655c0b682cd87cf9532e2bf2c7d257c13a9239417550b630e8253838953574578f149377e2b1e090da22c8f10aa7a7280a500ea38b35443d2eae2801fb1b4a11d30"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x1e0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xb, 0x5, "094f697204548a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}, @ETHTOOL_A_BITSET_VALUE={0xcf, 0x4, "62f8c5cb2abac9b0d2369f53d19037504fa7f8d5169140a5351b1db6aee18622f30e24313400c27ce7f31f38ef62ceffbe7ecacd661bfd4a4b5a20652d4d39d316eb0e99f84a96b6e8d4fb20f53ae0436e88a38bbaee6ab7df1b8ce5c048bf00f7d1b851a36a03916243f35b4007a4b8b389f1d756577d58136130a6dc4379bad6da9a386350d14147fdaf1fede4a069a4d44887aa6bc797bdf2ab069d055cd5e5b440fa8d23c6ae8e5b6136dcdc5a5858dfacee1273a5887e708e80c96475eb925025d1e73d5b85f992c5"}, @ETHTOOL_A_BITSET_MASK={0xf2, 0x5, "543bb4030aca8cbc23f02b8355e23ae741a919b3de85cf5ad54f63cdfdb9a8641cccd01efa128f11889480565e55f07e24d97fadf9048cb786513edd86b609205ffe530a59dbc62873715315bc53abb44d3b7e2deb0a13866643de549d1871e9c9f634238c307daf7e85c2e7d260f36e414334a5eda588602f495237fa10569eb4f8b5121697bb27ca075911b3a5496fcdcc5d1e3b51a9dd2fc11b349e9961d9107caf0a1aa9dc293c6ebcc2bfb566b924a45beb5e0b4d821300a03dd6c08ebb1ed66d8a6101936fb88b99b7f1a9e8b28ea27abb3c5582c4eae89dc840763a513951392fbcdc8afbcd6e79a0f89d"}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x500}, 0x1, 0x0, 0x0, 0x804}, 0xd0) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0186405, &(0x7f0000000b80)={0x8, 0xc, {0x0}, {0xee01}, 0x990, 0x10000}) move_pages(r13, 0x3, &(0x7f0000000bc0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000004000/0x3000)=nil], &(0x7f0000000c00)=[0x5, 0x3, 0x400, 0x9, 0x9, 0x8], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000e00)=@phonet={0x23, 0x0, 0x0, 0x1f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27050200590200000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0xfffe}], 0x2}, 0x0) 854.816542ms ago: executing program 2 (id=1086): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x59cc, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) 782.871416ms ago: executing program 0 (id=1087): syz_emit_ethernet(0xbe, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x34, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xf, "f7d11634eea239467089c40ced"}, {0x0, 0x2}]}, @timestamp={0x44, 0xc, 0x56, 0x0, 0x0, [0x0, 0x0]}]}}}}}}}, 0x0) 625.929478ms ago: executing program 4 (id=1088): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x183141) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000280)={0x80, 0x4, 0xca, 0x81, 0x0, 0x9}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) 570.829699ms ago: executing program 0 (id=1089): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x50, 0x0, 0x40}, {0x6, 0x0, 0x6c, 0xfffffffe}]}, 0x8) 419.179254ms ago: executing program 2 (id=1090): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$nl_route(0x10, 0x3, 0x0) map_shadow_stack(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0xfffffffe) socket$kcm(0x29, 0x2, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400)={[0x6, 0x3]}, &(0x7f00000001c0), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_newvlan={0x18, 0x76, 0x1, 0x70bd2d, 0x0, {0x7, 0x2}}, 0x18}, 0x1, 0x5502000000000000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) clock_gettime(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat6\x00') mmap$IORING_OFF_SQ_RING(&(0x7f00007fd000/0x800000)=nil, 0x800000, 0x1000008, 0x12, r6, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) syslog(0x3, &(0x7f0000000a00)=""/4096, 0x1000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0xc, 0x0, 0x0, 0xfffffffffffffffe, 0xb, 0x8, 0x5e9e, 0x3}, 0x0) 409.186755ms ago: executing program 1 (id=1091): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xb0000004}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) connect$unix(r0, 0x0, 0x0) 244.711116ms ago: executing program 0 (id=1092): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x6, {0x1, 0x0, 0xc, 0x0, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffff, 0x7, 0x0, 0xc000, 0x0, 0x0, r1, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000080)=""/149, 0x95) 0s ago: executing program 1 (id=1093): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x246, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0xc17a) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20040600) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071100b0000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@o_path={0x0, r6, 0x4000, r6}, 0x14) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "0000b0"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000009c0)=0x7, 0x3, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x24d, 0xa, 0x0, 0x280, 0x3e, 0x180, 0x8, 0x0, {}, {}, {0x6, 0x0, 0x4}, {}, 0x0, 0x10, 0x0, 0x3ed6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8}) mremap(&(0x7f0000440000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f00000000c0)={"00000000000000000000010000007ea261dd00ff000000000000000000170020"}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000380)={&(0x7f0000000300)=""/109, 0x24000, 0x800, 0x3, 0x3}, 0x1c) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x80, 0xff, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x0, 0x8, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x8, 0x1}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x0, 0xa8, 0x2, 0x20, 0xf0}, 0x12, &(0x7f0000000080)={0x5, 0xf, 0x12, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x6, 0x5}, @ptm_cap={0x3}]}, 0x4, [{0x13, &(0x7f00000000c0)=@string={0x13, 0x3, "b47c46a2ad44d2080b05474317f0e385dd"}}, {0x7d, &(0x7f0000000100)=@string={0x7d, 0x3, "a63a34a313e5e06323b6dc81ff9dfb99939fda056725d64d108e7a9b9c2eccc48c62603ab684fa40efc3e26280306ef5a7d9530189ffd4d57fab8353f89b2bce9b903f11c7053c6078d56da4706aa591912d9eb809e193fdeb5efef0a0d0a5fce08c1e02e72e2859c55332e8ddc6f7649ce2b9b50e9470b0dbdcaf"}}, {0x41, &(0x7f0000000180)=@string={0x41, 0x3, "1e2fb20bbf0bfe60b14e5d9fc3871b1bff3fe6a2149adf1ca78e0ee5e7313ba8a87cd2e21c08dc129816b566e981199d420f3b29bb63e1d520eeaaba5244b4"}}, {0xae, &(0x7f0000000200)=@string={0xae, 0x3, "f82e61e554fc969ed5e0a7d072bb93a10e052965afbd84db1cf9f6e6cee5b088f099f26c2750acf77a97dd5181eff50179f9738288d17e5838aa3fb1f0fef05b1b0ea3ce2baa66653aad3be685fc16976d092601e7baadf80a9f1bef2b4616138a7fad1c756c2488f18954034e87fd7e37f163da13f4fc3923df0fb17883f421c383f899ae57486ae7624fc8af8466775e798e9b426f40f07948bcb676dc8b939e4a0d96b52f78624ed46e45"}}]}) kernel console output (not intermixed with test programs): 3][ T8312] batadv0: left allmulticast mode [ 315.826540][ T8312] batadv0: left promiscuous mode [ 315.833674][ T8312] bond0 (unregistering): Released all slaves [ 316.237810][ T8325] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 316.438017][ T30] audit: type=1326 audit(1747402907.273:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 316.545934][ T30] audit: type=1326 audit(1747402907.293:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 316.569355][ T5889] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 316.702616][ T8337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.768160][ T5889] usb 2-1: unable to get BOS descriptor or descriptor too short [ 316.789232][ T8337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.824968][ T5889] usb 2-1: config 13 has an invalid interface number: 50 but max is 3 [ 316.847324][ T5889] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 316.878211][ T5889] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 316.952433][ T5889] usb 2-1: config 13 has no interface number 0 [ 316.981608][ T5889] usb 2-1: config 13 interface 50 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 317.013311][ T5889] usb 2-1: config 13 interface 50 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 317.035473][ T5889] usb 2-1: config 13 interface 50 has no altsetting 0 [ 317.047925][ T5889] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 317.057439][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.065588][ T5889] usb 2-1: Product: syz [ 317.069915][ T30] audit: type=1326 audit(1747402907.933:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 317.093068][ T5889] usb 2-1: Manufacturer: syz [ 317.113660][ T5889] usb 2-1: SerialNumber: syz [ 317.151141][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.157658][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.245371][ T30] audit: type=1326 audit(1747402907.933:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 317.444466][ T8325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.464227][ T30] audit: type=1326 audit(1747402908.323:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 317.526866][ T8325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.617585][ T30] audit: type=1326 audit(1747402908.323:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 317.642389][ T5889] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 317.645049][ T1163] usb 2-1: Failed to submit usb control message: -71 [ 317.679122][ T1163] usb 2-1: unable to send the bmi data to the device: -71 [ 317.686831][ T1163] usb 2-1: unable to get target info from device [ 317.693401][ T1163] usb 2-1: could not get target info (-71) [ 317.707049][ T1163] usb 2-1: could not probe fw (-71) [ 317.732216][ T5889] usb 2-1: USB disconnect, device number 37 [ 317.744488][ T30] audit: type=1326 audit(1747402908.323:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 317.772296][ T30] audit: type=1326 audit(1747402908.353:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 317.794812][ T30] audit: type=1326 audit(1747402908.473:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 318.113315][ T30] audit: type=1326 audit(1747402908.473:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 318.982332][ T8367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.671'. [ 319.043531][ T8367] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.052669][ T8367] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.061696][ T8367] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.070541][ T8367] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.163010][ T8367] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.172118][ T8367] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.181157][ T8367] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.190117][ T8367] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.422356][ T8370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.672'. [ 319.585876][ T8372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.603740][ T8372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.217875][ T979] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 320.545371][ T979] usb 3-1: Using ep0 maxpacket: 32 [ 320.608863][ T979] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 320.681802][ T979] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 320.729787][ T979] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 320.783509][ T979] usb 3-1: config 1 has no interface number 0 [ 320.828821][ T979] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 320.913815][ T979] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 321.011887][ T979] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 321.021122][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.040704][ T979] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 321.165476][ T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 321.238742][ T979] snd_usb_pod 3-1:1.1: invalid control EP [ 321.259588][ T979] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 321.288896][ T979] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 321.318313][ T979] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 321.340424][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.362079][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 321.438118][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.468110][ T5886] usb 3-1: USB disconnect, device number 32 [ 321.522664][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 321.532125][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.549996][ T24] usb 5-1: Product: syz [ 321.574399][ T24] usb 5-1: Manufacturer: syz [ 321.590273][ T24] usb 5-1: SerialNumber: syz [ 321.628643][ T24] cdc_ncm 5-1:1.0: skipping garbage [ 321.651388][ T24] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 321.675009][ T24] cdc_ncm 5-1:1.0: bind() failure [ 321.826762][ T24] usb 5-1: USB disconnect, device number 39 [ 321.900689][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 321.900708][ T30] audit: type=1326 audit(1747402912.763:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8395 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 321.955298][ T30] audit: type=1326 audit(1747402912.793:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8395 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 322.072982][ T30] audit: type=1326 audit(1747402912.933:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8395 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 322.099168][ T30] audit: type=1326 audit(1747402912.963:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8395 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 322.375425][ T5888] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 322.554522][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 322.590999][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 322.617134][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 322.690213][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 322.842994][ T5888] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 322.895558][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.029852][ T5888] usb 1-1: config 0 descriptor?? [ 323.048767][ T8401] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 323.232868][ T30] audit: type=1326 audit(1747402914.093:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.4.689" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x0 [ 323.802614][ T30] audit: type=1326 audit(1747402914.663:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8395 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 323.871459][ T30] audit: type=1326 audit(1747402914.663:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8395 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 323.932971][ T30] audit: type=1326 audit(1747402914.663:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8395 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 324.010002][ T5888] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 324.022003][ T30] audit: type=1326 audit(1747402914.863:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8395 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 324.100288][ T5888] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 324.123214][ T30] audit: type=1326 audit(1747402914.863:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8395 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 324.188947][ T8426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.266392][ T8426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.393764][ T8429] veth1_to_team: entered promiscuous mode [ 324.510607][ T5888] usb 1-1: USB disconnect, device number 34 [ 324.683359][ T8429] team0: Port device team_slave_1 removed [ 324.805561][ T8431] netlink: 'syz.1.691': attribute type 3 has an invalid length. [ 325.143350][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 325.168783][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 325.177958][ T8443] netlink: 'syz.0.698': attribute type 12 has an invalid length. [ 325.186443][ T8443] netlink: 'syz.0.698': attribute type 11 has an invalid length. [ 325.197769][ T8447] FAULT_INJECTION: forcing a failure. [ 325.197769][ T8447] name failslab, interval 1, probability 0, space 0, times 0 [ 325.205485][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.695'. [ 325.218082][ T8447] CPU: 1 UID: 0 PID: 8447 Comm: syz.4.697 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 325.218116][ T8447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.218130][ T8447] Call Trace: [ 325.218139][ T8447] [ 325.218148][ T8447] dump_stack_lvl+0x189/0x250 [ 325.218191][ T8447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.218225][ T8447] ? __pfx__printk+0x10/0x10 [ 325.218250][ T8447] ? __pfx___might_resched+0x10/0x10 [ 325.218273][ T8447] ? fs_reclaim_acquire+0x7d/0x100 [ 325.218313][ T8447] should_fail_ex+0x414/0x560 [ 325.218345][ T8447] should_failslab+0xa8/0x100 [ 325.218379][ T8447] kmem_cache_alloc_noprof+0x73/0x3c0 [ 325.218408][ T8447] ? vm_area_dup+0x2b/0x5c0 [ 325.218450][ T8447] vm_area_dup+0x2b/0x5c0 [ 325.218491][ T8447] __split_vma+0x1a0/0x9b0 [ 325.218538][ T8447] ? __pfx___split_vma+0x10/0x10 [ 325.218585][ T8447] vma_modify+0x327/0x460 [ 325.218614][ T8447] vma_modify_flags+0x1e8/0x230 [ 325.218644][ T8447] ? __pfx_vma_modify_flags+0x10/0x10 [ 325.218697][ T8447] mlock_fixup+0x22a/0x360 [ 325.218731][ T8447] apply_vma_lock_flags+0x2aa/0x3c0 [ 325.218758][ T8447] ? vfs_write+0x8d8/0xa90 [ 325.218794][ T8447] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 325.218830][ T8447] ? __pfx_down_write_killable+0x10/0x10 [ 325.218868][ T8447] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 325.218899][ T8447] ? __pfx_vfs_write+0x10/0x10 [ 325.218931][ T8447] do_mlock+0x528/0x740 [ 325.218966][ T8447] ? __pfx_do_mlock+0x10/0x10 [ 325.218991][ T8447] ? fput+0xa0/0xd0 [ 325.219027][ T8447] ? ksys_write+0x1f0/0x250 [ 325.219075][ T8447] __ia32_sys_mlock+0x5f/0x70 [ 325.219100][ T8447] __do_fast_syscall_32+0xb4/0x110 [ 325.219133][ T8447] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.219168][ T8447] do_fast_syscall_32+0x34/0x80 [ 325.219200][ T8447] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 325.219229][ T8447] RIP: 0023:0xf7f53539 [ 325.219248][ T8447] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 325.219269][ T8447] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000096 [ 325.219293][ T8447] RAX: ffffffffffffffda RBX: 000000008071b000 RCX: 0000000000004000 [ 325.219309][ T8447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 325.219322][ T8447] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 325.219335][ T8447] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 325.219349][ T8447] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 325.219382][ T8447] [ 325.494045][ T8441] netlink: 32 bytes leftover after parsing attributes in process `syz.3.695'. [ 325.532592][ T8441] gtp0: entered promiscuous mode [ 325.537849][ T8441] gtp0: entered allmulticast mode [ 325.665264][ T24] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 325.785281][ T5886] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 325.822014][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 325.845642][ T8460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.888643][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.903457][ T8460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.917745][ T24] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 325.934498][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.962119][ T24] usb 5-1: config 0 descriptor?? [ 325.967718][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 325.992287][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.049688][ T5886] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 326.078406][ T5886] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 326.120505][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.160339][ T5886] usb 2-1: config 0 descriptor?? [ 326.393124][ T24] zydacron 0003:13EC:0006.000F: unknown main item tag 0x0 [ 326.408551][ T24] zydacron 0003:13EC:0006.000F: unknown main item tag 0x0 [ 326.434636][ T24] zydacron 0003:13EC:0006.000F: unknown main item tag 0x0 [ 326.466604][ T24] zydacron 0003:13EC:0006.000F: unknown main item tag 0x0 [ 326.502399][ T24] zydacron 0003:13EC:0006.000F: unknown main item tag 0x0 [ 326.536328][ T8452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.547136][ T8452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.563779][ T5886] usb 2-1: USB disconnect, device number 38 [ 326.585734][ T24] zydacron 0003:13EC:0006.000F: unknown main item tag 0x0 [ 326.700987][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 326.714409][ T24] zydacron 0003:13EC:0006.000F: unknown main item tag 0x0 [ 326.722119][ T8472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.707'. [ 326.781622][ T24] zydacron 0003:13EC:0006.000F: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.4-1/input0 [ 326.858993][ T24] usb 5-1: USB disconnect, device number 40 [ 326.920195][ T8476] fido_id[8476]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:13EC:0006.000F/report_descriptor': No such file or directory [ 328.859607][ T8498] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 328.884981][ T8503] netlink: 27 bytes leftover after parsing attributes in process `syz.0.717'. [ 328.900981][ T8498] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 328.912470][ T8498] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 328.922585][ T8498] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 329.176271][ T5888] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 329.325240][ T5888] usb 2-1: device descriptor read/64, error -71 [ 329.576570][ T5888] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 329.725706][ T5888] usb 2-1: device descriptor read/64, error -71 [ 329.845706][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 329.867084][ T5888] usb usb2-port1: attempt power cycle [ 330.090062][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.101439][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.116628][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 330.134544][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.156818][ T24] usb 3-1: config 0 descriptor?? [ 330.215277][ T5888] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 330.244819][ T8530] netlink: 'syz.4.728': attribute type 10 has an invalid length. [ 330.255749][ T5888] usb 2-1: device descriptor read/8, error -71 [ 330.358341][ T8530] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.402516][ T8530] bond0: (slave team0): Enslaving as an active interface with an up link [ 330.505696][ T5888] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 330.704668][ T5888] usb 2-1: device descriptor read/8, error -71 [ 330.705854][ T8523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.725853][ T8523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.995674][ T8523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.996980][ T5886] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 331.025760][ T5888] usb usb2-port1: unable to enumerate USB device [ 331.032838][ T8523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.238186][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 331.264161][ T5886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.291817][ T24] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 331.301663][ T5886] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 331.311205][ T24] pyra 0003:1E7D:2CF6.0010: item fetching failed at offset 6/7 [ 331.322074][ T5886] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 331.339084][ T24] pyra 0003:1E7D:2CF6.0010: parse failed [ 331.357628][ T24] pyra 0003:1E7D:2CF6.0010: probe with driver pyra failed with error -22 [ 331.375430][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.434892][ T5886] usb 1-1: config 0 descriptor?? [ 331.494279][ T5886] usb 3-1: USB disconnect, device number 33 [ 331.694165][ T8535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.707736][ T8535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.738818][ T5886] usb 1-1: USB disconnect, device number 35 [ 334.275539][ T5888] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 334.442878][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 334.511466][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.598176][ T5888] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.637618][ T5888] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 334.665240][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.695079][ T5888] usb 1-1: config 0 descriptor?? [ 334.773479][ T8582] netlink: 'syz.2.743': attribute type 1 has an invalid length. [ 335.073026][ T8594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.083132][ T8594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.115680][ T5886] usb 1-1: USB disconnect, device number 36 [ 335.284207][ T8597] netlink: 88 bytes leftover after parsing attributes in process `syz.2.747'. [ 335.567560][ T8603] netlink: 44 bytes leftover after parsing attributes in process `syz.2.750'. [ 335.751456][ T5888] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 335.783256][ T8608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.792446][ T8608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.868888][ T8611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.879292][ T8611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.920938][ T5888] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 335.930652][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.947884][ T5888] usb 5-1: Product: syz [ 335.955004][ T5888] usb 5-1: Manufacturer: syz [ 335.967753][ T5888] usb 5-1: SerialNumber: syz [ 336.051464][ T5888] usb 5-1: config 0 descriptor?? [ 336.477060][ T5888] usb 5-1: USB disconnect, device number 41 [ 336.780927][ T7259] udevd[7259]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.365356][ T5891] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 337.525269][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 337.535728][ T5888] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 337.550287][ T8626] xt_CT: No such helper "netbios-ns" [ 337.559517][ T5891] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 337.597085][ T5891] usb 3-1: config 0 has no interface number 0 [ 337.638207][ T5891] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 337.694904][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.707985][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 337.725407][ T5891] usb 3-1: Product: syz [ 337.730735][ T5891] usb 3-1: Manufacturer: syz [ 337.734133][ T5888] usb 5-1: unable to get BOS descriptor or descriptor too short [ 337.758422][ T5891] usb 3-1: SerialNumber: syz [ 337.778066][ T5891] usb 3-1: config 0 descriptor?? [ 337.783584][ T5888] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 337.798384][ T5891] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 337.865271][ T5888] usb 5-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 337.875270][ T5888] usb 5-1: config 128 has an invalid interface number: 6 but max is 3 [ 337.904924][ T5888] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 337.996275][ T5888] usb 5-1: config 128 has 5 interfaces, different from the descriptor's value: 4 [ 338.000113][ T8620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.030395][ T5888] usb 5-1: config 128 has no interface number 3 [ 338.037583][ T8620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.071450][ T5888] usb 5-1: config 128 has no interface number 4 [ 338.109394][ T5888] usb 5-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 338.218017][ T5888] usb 5-1: too many endpoints for config 128 interface 6 altsetting 15: 96, using maximum allowed: 30 [ 338.254661][ T5888] usb 5-1: config 128 interface 6 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 338.272661][ T5888] usb 5-1: config 128 interface 127 has no altsetting 0 [ 338.332046][ T5888] usb 5-1: config 128 interface 6 has no altsetting 0 [ 338.400126][ T5888] usb 5-1: config 128 interface 1 has no altsetting 0 [ 338.428765][ T5888] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 338.443808][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.503520][ T5888] usb 5-1: Product: syz [ 338.522791][ T5888] usb 5-1: Manufacturer: syz [ 338.538081][ T5888] usb 5-1: SerialNumber: syz [ 338.800773][ T5888] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 338.993849][ T5888] usb 5-1: USB disconnect, device number 42 [ 339.179146][ T7259] udevd[7259]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.423062][ T8645] netlink: 88 bytes leftover after parsing attributes in process `syz.3.764'. [ 340.175684][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 340.207258][ T5891] gspca_spca1528: reg_r err -110 [ 340.212362][ T5891] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 341.038552][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 341.038570][ T30] audit: type=1800 audit(1747402931.903:166): pid=8620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.754" name="bus" dev="ramfs" ino=17909 res=0 errno=0 [ 341.173469][ T5889] usb 3-1: USB disconnect, device number 34 [ 341.219643][ T8676] netlink: 'syz.1.773': attribute type 21 has an invalid length. [ 341.296202][ T8676] netlink: 156 bytes leftover after parsing attributes in process `syz.1.773'. [ 341.640769][ T8680] loop6: detected capacity change from 0 to 7 [ 341.760017][ T8642] Dev loop6: unable to read RDB block 7 [ 341.774927][ T8642] loop6: unable to read partition table [ 341.805474][ T8642] loop6: partition table beyond EOD, truncated [ 341.838055][ T8680] Dev loop6: unable to read RDB block 7 [ 341.852307][ T8680] loop6: unable to read partition table [ 341.871144][ T8680] loop6: partition table beyond EOD, truncated [ 341.947936][ T8680] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 342.614885][ T8684] fuse: Bad value for 'group_id' [ 342.655785][ T8684] fuse: Bad value for 'group_id' [ 342.948726][ T8693] netlink: 'syz.2.779': attribute type 7 has an invalid length. [ 342.967900][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.779'. [ 344.735303][ T5892] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 344.982975][ T5892] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 345.081779][ T5892] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 345.091014][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.103096][ T5892] usb 5-1: Product: syz [ 345.109514][ T5892] usb 5-1: Manufacturer: syz [ 345.129876][ T5892] usb 5-1: SerialNumber: syz [ 345.166745][ T5892] usb 5-1: config 0 descriptor?? [ 346.129079][ T8730] FAULT_INJECTION: forcing a failure. [ 346.129079][ T8730] name failslab, interval 1, probability 0, space 0, times 0 [ 346.175015][ T8730] CPU: 0 UID: 0 PID: 8730 Comm: syz.0.789 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 346.175047][ T8730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 346.175060][ T8730] Call Trace: [ 346.175068][ T8730] [ 346.175076][ T8730] dump_stack_lvl+0x189/0x250 [ 346.175121][ T8730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.175152][ T8730] ? __pfx__printk+0x10/0x10 [ 346.175177][ T8730] ? __pfx___might_resched+0x10/0x10 [ 346.175196][ T8730] ? fs_reclaim_acquire+0x7d/0x100 [ 346.175232][ T8730] should_fail_ex+0x414/0x560 [ 346.175260][ T8730] should_failslab+0xa8/0x100 [ 346.175289][ T8730] __kmalloc_noprof+0xcb/0x4f0 [ 346.175316][ T8730] ? sock_kmalloc+0xd6/0x160 [ 346.175344][ T8730] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 346.175368][ T8730] sock_kmalloc+0xd6/0x160 [ 346.175408][ T8730] hash_recvmsg+0x1c8/0x750 [ 346.175438][ T8730] ? __pfx_hash_recvmsg+0x10/0x10 [ 346.175459][ T8730] sock_recvmsg_nosec+0x186/0x1c0 [ 346.175486][ T8730] ____sys_recvmsg+0x3aa/0x460 [ 346.175514][ T8730] ? __pfx_____sys_recvmsg+0x10/0x10 [ 346.175534][ T8730] ? get_compat_msghdr+0x37e/0x4a0 [ 346.175576][ T8730] ? rcu_is_watching+0x15/0xb0 [ 346.175594][ T8730] ? ___sys_recvmsg+0x1c4/0x510 [ 346.175630][ T8730] ___sys_recvmsg+0x1b5/0x510 [ 346.175656][ T8730] ? __pfx____sys_recvmsg+0x10/0x10 [ 346.175703][ T8730] ? __fget_files+0x3a0/0x420 [ 346.175743][ T8730] do_recvmmsg+0x36a/0x760 [ 346.175783][ T8730] ? __pfx_do_recvmmsg+0x10/0x10 [ 346.175813][ T8730] ? __pfx_vfs_write+0x10/0x10 [ 346.175846][ T8730] __sys_recvmmsg+0x19d/0x280 [ 346.175881][ T8730] ? __pfx___sys_recvmmsg+0x10/0x10 [ 346.175907][ T8730] ? ksys_write+0x1f0/0x250 [ 346.175940][ T8730] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 346.175965][ T8730] __do_fast_syscall_32+0xb4/0x110 [ 346.176011][ T8730] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.176044][ T8730] do_fast_syscall_32+0x34/0x80 [ 346.176072][ T8730] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 346.176097][ T8730] RIP: 0023:0xf705e539 [ 346.176111][ T8730] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 346.176124][ T8730] RSP: 002b:00000000f504e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 346.176141][ T8730] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080003700 [ 346.176156][ T8730] RDX: 0000000000000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 346.176169][ T8730] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 346.176181][ T8730] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 346.176193][ T8730] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 346.176222][ T8730] [ 346.760299][ T5888] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 346.928209][ T5888] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 346.969861][ T5888] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.029800][ T5888] usb 3-1: config 0 interface 0 has no altsetting 0 [ 347.051232][ T5888] usb 3-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 347.080366][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.109820][ T979] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 347.119510][ T5888] usb 3-1: config 0 descriptor?? [ 347.461766][ T979] usb 2-1: Using ep0 maxpacket: 16 [ 347.538351][ T979] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 347.559384][ T5892] usb 5-1: USB disconnect, device number 43 [ 347.575387][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.583506][ T979] usb 2-1: Product: syz [ 347.636138][ T979] usb 2-1: Manufacturer: syz [ 347.657786][ T979] usb 2-1: SerialNumber: syz [ 347.701127][ T979] r8152-cfgselector 2-1: Unknown version 0x0000 [ 347.707762][ T979] r8152-cfgselector 2-1: config 0 descriptor?? [ 347.801588][ T8723] fuse: Bad value for 'user_id' [ 347.807386][ T8723] fuse: Bad value for 'user_id' [ 348.374611][ T979] r8152-cfgselector 2-1: Unknown version 0x0000 [ 348.381420][ T979] r8152-cfgselector 2-1: bad CDC descriptors [ 348.391321][ T979] r8152-cfgselector 2-1: USB disconnect, device number 43 [ 348.406495][ T5891] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 348.718330][ T5891] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 348.733003][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.759140][ T5891] usb 1-1: Product: syz [ 348.774811][ T5891] usb 1-1: Manufacturer: syz [ 348.784973][ T5891] usb 1-1: SerialNumber: syz [ 348.815497][ T5888] usbhid 3-1:0.0: can't add hid device: -71 [ 348.825210][ T5891] usb 1-1: config 0 descriptor?? [ 348.871951][ T5888] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 348.900861][ T5888] usb 3-1: USB disconnect, device number 35 [ 348.910402][ T5891] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 349.120541][ T5891] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 349.138802][ T5891] sq905c 1-1:0.0: Get version command failed [ 349.211652][ T5891] sq905c 1-1:0.0: probe with driver sq905c failed with error -71 [ 349.250583][ T5891] usb 1-1: USB disconnect, device number 37 [ 349.276853][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.797'. [ 349.306001][ T8766] FAULT_INJECTION: forcing a failure. [ 349.306001][ T8766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.327108][ T8764] FAULT_INJECTION: forcing a failure. [ 349.327108][ T8764] name failslab, interval 1, probability 0, space 0, times 0 [ 349.360761][ T8766] CPU: 0 UID: 0 PID: 8766 Comm: syz.1.798 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 349.360793][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 349.360806][ T8766] Call Trace: [ 349.360816][ T8766] [ 349.360825][ T8766] dump_stack_lvl+0x189/0x250 [ 349.360869][ T8766] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.360900][ T8766] ? __pfx__printk+0x10/0x10 [ 349.360935][ T8766] should_fail_ex+0x414/0x560 [ 349.360963][ T8766] strncpy_from_user+0x36/0x290 [ 349.360989][ T8766] getname_flags+0xf3/0x540 [ 349.361024][ T8766] path_setxattrat+0x2ac/0x3a0 [ 349.361056][ T8766] ? __pfx_path_setxattrat+0x10/0x10 [ 349.361074][ T8766] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 349.361138][ T8766] ? ksys_write+0x1f0/0x250 [ 349.361174][ T8766] __ia32_sys_lsetxattr+0xbf/0xe0 [ 349.361208][ T8766] __do_fast_syscall_32+0xb4/0x110 [ 349.361239][ T8766] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.361270][ T8766] do_fast_syscall_32+0x34/0x80 [ 349.361299][ T8766] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 349.361325][ T8766] RIP: 0023:0xf70be539 [ 349.361344][ T8766] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 349.361362][ T8766] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 00000000000000e3 [ 349.361383][ T8766] RAX: ffffffffffffffda RBX: 0000000080000280 RCX: 0000000080000440 [ 349.361399][ T8766] RDX: 0000000080000580 RSI: 0000000000000004 RDI: 0000000000000000 [ 349.361411][ T8766] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 349.361423][ T8766] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 349.361435][ T8766] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 349.361465][ T8766] [ 349.543520][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.554774][ T8764] CPU: 1 UID: 0 PID: 8764 Comm: syz.2.797 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 349.554807][ T8764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 349.554822][ T8764] Call Trace: [ 349.554831][ T8764] [ 349.554841][ T8764] dump_stack_lvl+0x189/0x250 [ 349.554882][ T8764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.554914][ T8764] ? __pfx__printk+0x10/0x10 [ 349.554952][ T8764] should_fail_ex+0x414/0x560 [ 349.554982][ T8764] should_failslab+0xa8/0x100 [ 349.555014][ T8764] __kmalloc_cache_noprof+0x70/0x3d0 [ 349.555042][ T8764] ? sctp_add_bind_addr+0x8c/0x370 [ 349.555085][ T8764] sctp_add_bind_addr+0x8c/0x370 [ 349.555123][ T8764] sctp_copy_local_addr_list+0x30b/0x4e0 [ 349.555159][ T8764] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 349.555190][ T8764] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 349.555223][ T8764] ? sctp_v6_is_any+0x64/0x80 [ 349.555244][ T8764] ? sctp_copy_one_addr+0x93/0x360 [ 349.555279][ T8764] sctp_bind_addr_copy+0xb3/0x3c0 [ 349.555312][ T8764] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 349.555342][ T8764] sctp_connect_new_asoc+0x2e0/0x690 [ 349.555370][ T8764] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 349.555391][ T8764] ? __local_bh_enable_ip+0x12d/0x1c0 [ 349.555420][ T8764] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 349.555448][ T8764] ? security_sctp_bind_connect+0x7e/0x2e0 [ 349.555487][ T8764] sctp_sendmsg+0x155c/0x2810 [ 349.555523][ T8764] ? __pfx_sctp_sendmsg+0x10/0x10 [ 349.555548][ T8764] ? aa_sk_perm+0x81e/0x950 [ 349.555578][ T8764] ? __pfx_aa_sk_perm+0x10/0x10 [ 349.555605][ T8764] ? sock_rps_record_flow+0x19/0x400 [ 349.555642][ T8764] ? inet_sendmsg+0x2f4/0x370 [ 349.555679][ T8764] __sock_sendmsg+0x19c/0x270 [ 349.555706][ T8764] __sys_sendto+0x3bd/0x520 [ 349.555738][ T8764] ? __pfx___sys_sendto+0x10/0x10 [ 349.555763][ T8764] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 349.555806][ T8764] ? __fget_files+0x3a0/0x420 [ 349.555849][ T8764] ? ksys_write+0x1f0/0x250 [ 349.555886][ T8764] __ia32_sys_sendto+0xdd/0x100 [ 349.555918][ T8764] __do_fast_syscall_32+0xb4/0x110 [ 349.555950][ T8764] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.555983][ T8764] do_fast_syscall_32+0x34/0x80 [ 349.556013][ T8764] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 349.556039][ T8764] RIP: 0023:0xf702e539 [ 349.556058][ T8764] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 349.556086][ T8764] RSP: 002b:00000000f501e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 349.556109][ T8764] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 349.556124][ T8764] RDX: 0000000000000001 RSI: 0000000000008072 RDI: 0000000080000080 [ 349.556138][ T8764] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 349.556152][ T8764] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 349.556165][ T8764] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 349.556196][ T8764] [ 350.066979][ T8776] FAULT_INJECTION: forcing a failure. [ 350.066979][ T8776] name failslab, interval 1, probability 0, space 0, times 0 [ 350.080240][ T8776] CPU: 1 UID: 0 PID: 8776 Comm: syz.1.799 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 350.080271][ T8776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 350.080286][ T8776] Call Trace: [ 350.080295][ T8776] [ 350.080303][ T8776] dump_stack_lvl+0x189/0x250 [ 350.080344][ T8776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.080376][ T8776] ? __pfx__printk+0x10/0x10 [ 350.080403][ T8776] ? __pfx___might_resched+0x10/0x10 [ 350.080430][ T8776] should_fail_ex+0x414/0x560 [ 350.080459][ T8776] should_failslab+0xa8/0x100 [ 350.080492][ T8776] __kmalloc_cache_noprof+0x70/0x3d0 [ 350.080521][ T8776] ? snd_seq_oss_readq_new+0x51/0x250 [ 350.080555][ T8776] snd_seq_oss_readq_new+0x51/0x250 [ 350.080588][ T8776] snd_seq_oss_open+0x770/0xea0 [ 350.080621][ T8776] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 350.080658][ T8776] ? __lock_acquire+0xaac/0xd20 [ 350.080712][ T8776] ? rcu_is_watching+0x15/0xb0 [ 350.080746][ T8776] ? trace_contention_end+0x39/0x120 [ 350.080792][ T8776] ? __pfx___mutex_lock+0x10/0x10 [ 350.080827][ T8776] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 350.080851][ T8776] ? __pfx_free_devinfo+0x10/0x10 [ 350.080871][ T8776] ? do_raw_spin_unlock+0x122/0x240 [ 350.080902][ T8776] ? soundcore_open+0x2da/0x490 [ 350.080928][ T8776] odev_open+0x67/0xa0 [ 350.080948][ T8776] chrdev_open+0x4cc/0x5e0 [ 350.080981][ T8776] ? __pfx_chrdev_open+0x10/0x10 [ 350.081020][ T8776] ? __pfx_chrdev_open+0x10/0x10 [ 350.081048][ T8776] do_dentry_open+0xdf0/0x1970 [ 350.081099][ T8776] vfs_open+0x3b/0x340 [ 350.081129][ T8776] ? path_openat+0x2ecd/0x3830 [ 350.081155][ T8776] path_openat+0x2ee5/0x3830 [ 350.081175][ T8776] ? arch_stack_walk+0xfc/0x150 [ 350.081241][ T8776] ? __pfx_path_openat+0x10/0x10 [ 350.081261][ T8776] ? do_fast_syscall_32+0x34/0x80 [ 350.081290][ T8776] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 350.081339][ T8776] do_filp_open+0x1fa/0x410 [ 350.081365][ T8776] ? __pfx_do_filp_open+0x10/0x10 [ 350.081412][ T8776] ? _raw_spin_unlock+0x28/0x50 [ 350.081437][ T8776] ? alloc_fd+0x64c/0x6c0 [ 350.081478][ T8776] do_sys_openat2+0x121/0x1c0 [ 350.081502][ T8776] ? __pfx_do_sys_openat2+0x10/0x10 [ 350.081526][ T8776] ? ksys_write+0x1f0/0x250 [ 350.081561][ T8776] __ia32_compat_sys_openat+0x131/0x160 [ 350.081590][ T8776] __do_fast_syscall_32+0xb4/0x110 [ 350.081620][ T8776] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.081653][ T8776] do_fast_syscall_32+0x34/0x80 [ 350.081683][ T8776] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 350.081710][ T8776] RIP: 0023:0xf70be539 [ 350.081728][ T8776] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 350.081755][ T8776] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 350.081777][ T8776] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000240 [ 350.081793][ T8776] RDX: 00000000000c2882 RSI: 0000000000000000 RDI: 0000000000000000 [ 350.081806][ T8776] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.081818][ T8776] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 350.081831][ T8776] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.081864][ T8776] [ 352.776728][ T8814] FAULT_INJECTION: forcing a failure. [ 352.776728][ T8814] name failslab, interval 1, probability 0, space 0, times 0 [ 352.797125][ T8814] CPU: 0 UID: 0 PID: 8814 Comm: syz.0.814 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 352.797157][ T8814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 352.797170][ T8814] Call Trace: [ 352.797178][ T8814] [ 352.797189][ T8814] dump_stack_lvl+0x189/0x250 [ 352.797233][ T8814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.797263][ T8814] ? __pfx__printk+0x10/0x10 [ 352.797290][ T8814] ? __pfx___might_resched+0x10/0x10 [ 352.797309][ T8814] ? fs_reclaim_acquire+0x7d/0x100 [ 352.797346][ T8814] should_fail_ex+0x414/0x560 [ 352.797374][ T8814] should_failslab+0xa8/0x100 [ 352.797404][ T8814] kmem_cache_alloc_noprof+0x73/0x3c0 [ 352.797430][ T8814] ? alloc_empty_file+0x55/0x1d0 [ 352.797466][ T8814] alloc_empty_file+0x55/0x1d0 [ 352.797498][ T8814] alloc_file_pseudo+0x13d/0x210 [ 352.797533][ T8814] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 352.797565][ T8814] ? shmem_get_inode+0xbc5/0xe90 [ 352.797615][ T8814] __shmem_file_setup+0x242/0x2d0 [ 352.797645][ T8814] big_key_preparse+0x280/0x4c0 [ 352.797680][ T8814] ? __pfx_big_key_preparse+0x10/0x10 [ 352.797720][ T8814] __key_create_or_update+0x370/0xa30 [ 352.797753][ T8814] ? __pfx___key_create_or_update+0x10/0x10 [ 352.797784][ T8814] ? irqentry_exit+0x74/0x90 [ 352.797823][ T8814] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 352.797854][ T8814] key_create_or_update+0x42/0x60 [ 352.797884][ T8814] __se_sys_add_key+0x329/0x400 [ 352.797919][ T8814] ? __pfx___se_sys_add_key+0x10/0x10 [ 352.797955][ T8814] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 352.797984][ T8814] ? __ia32_sys_add_key+0x20/0xc0 [ 352.798016][ T8814] __do_fast_syscall_32+0xb4/0x110 [ 352.798046][ T8814] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.798076][ T8814] do_fast_syscall_32+0x34/0x80 [ 352.798104][ T8814] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 352.798129][ T8814] RIP: 0023:0xf705e539 [ 352.798147][ T8814] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 352.798165][ T8814] RSP: 002b:00000000f504e55c EFLAGS: 00000206 ORIG_RAX: 000000000000011e [ 352.798186][ T8814] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080000000 [ 352.798201][ T8814] RDX: 0000000080000240 RSI: 000000000000ff51 RDI: 00000000fffffffd [ 352.798214][ T8814] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 352.798226][ T8814] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 352.798237][ T8814] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 352.798267][ T8814] [ 353.158763][ T8817] sch_tbf: peakrate 46 is lower than or equals to rate 924321995732299105 ! [ 353.611243][ T8822] netlink: 'syz.2.816': attribute type 16 has an invalid length. [ 353.624211][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.816'. [ 353.665308][ T5891] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 353.704027][ T8828] xt_TPROXY: Can be used only with -p tcp or -p udp [ 353.885261][ T5891] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 353.900718][ T5891] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 353.913392][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.965209][ T5891] usb 1-1: Product: syz [ 353.969648][ T5891] usb 1-1: Manufacturer: syz [ 353.974283][ T5891] usb 1-1: SerialNumber: syz [ 353.987317][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 354.141764][ T5891] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 354.617086][ T5891] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 354.782708][ T5891] usb 1-1: USB disconnect, device number 38 [ 355.034973][ T8849] netlink: 'syz.2.824': attribute type 6 has an invalid length. [ 356.714154][ T8856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.760621][ T8856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.820399][ T8856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.837309][ T8856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.879937][ T8856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.826'. [ 356.940092][ T8856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.963586][ T8856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.703594][ T8876] netlink: 48 bytes leftover after parsing attributes in process `syz.0.833'. [ 358.122672][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.836'. [ 358.131832][ T5891] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 358.156581][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.836'. [ 358.285361][ T5891] usb 3-1: Using ep0 maxpacket: 8 [ 358.319408][ T5891] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 358.336973][ T5891] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 358.350016][ T5891] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 358.363770][ T5891] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.385730][ T5891] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 358.408165][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.651870][ T5891] usb 3-1: GET_CAPABILITIES returned 0 [ 358.661949][ T5891] usbtmc 3-1:16.0: can't read capabilities [ 358.923487][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 358.936838][ T8890] usbtmc 3-1:16.0: Unable to send data, error -71 [ 359.445742][ T5891] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 359.647179][ T5891] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.666039][ T5891] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.705269][ T5891] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 359.714370][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 359.747613][ T5891] usb 2-1: SerialNumber: syz [ 359.755735][ T979] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 359.924912][ T5889] usb 3-1: USB disconnect, device number 36 [ 359.948118][ T979] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 359.960153][ T979] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 359.982984][ T979] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 360.032526][ T8894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.041277][ T979] usb 1-1: config 0 has no interface number 0 [ 360.049231][ T979] usb 1-1: config 0 has no interface number 1 [ 360.070639][ T979] usb 1-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 360.081493][ T8894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.099545][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.121753][ T979] usb 1-1: Product: syz [ 360.140685][ T979] usb 1-1: Manufacturer: syz [ 360.159077][ T979] usb 1-1: SerialNumber: syz [ 360.184550][ T979] usb 1-1: config 0 descriptor?? [ 360.184591][ T5891] usb 2-1: 0:2 : does not exist [ 360.210705][ T979] cdc_acm 1-1:0.51: probe with driver cdc_acm failed with error -22 [ 360.282697][ T5891] usb 2-1: USB disconnect, device number 44 [ 360.367313][ T8642] udevd[8642]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.489277][ T8907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.843'. [ 360.528456][ T8907] vlan2: entered promiscuous mode [ 360.635247][ T8907] batadv0: entered promiscuous mode [ 360.658441][ T8913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.674500][ T8913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.700632][ T8912] netlink: 52 bytes leftover after parsing attributes in process `syz.2.844'. [ 360.908587][ T979] usb 1-1: USB disconnect, device number 39 [ 361.895323][ T979] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 361.919638][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 361.929131][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 361.938531][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 361.961146][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 362.057283][ T979] usb 5-1: device descriptor read/64, error -71 [ 362.129280][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 362.168639][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 362.182620][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 362.202848][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 362.213318][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 362.229424][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 362.335236][ T979] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 362.475259][ T979] usb 5-1: device descriptor read/64, error -71 [ 362.588207][ T979] usb usb5-port1: attempt power cycle [ 362.935265][ T979] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 363.050099][ T979] usb 5-1: device descriptor read/8, error -71 [ 363.209079][ T8943] FAULT_INJECTION: forcing a failure. [ 363.209079][ T8943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.265818][ T8943] CPU: 1 UID: 0 PID: 8943 Comm: syz.0.853 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 363.265851][ T8943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 363.265871][ T8943] Call Trace: [ 363.265882][ T8943] [ 363.265891][ T8943] dump_stack_lvl+0x189/0x250 [ 363.265925][ T8943] ? __lock_acquire+0xaac/0xd20 [ 363.265949][ T8943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.265979][ T8943] ? __pfx__printk+0x10/0x10 [ 363.266002][ T8943] ? __might_fault+0xb0/0x130 [ 363.266041][ T8943] should_fail_ex+0x414/0x560 [ 363.266070][ T8943] copy_fpstate_to_sigframe+0xa65/0xcc0 [ 363.266099][ T8943] ? copy_fpstate_to_sigframe+0x180/0xcc0 [ 363.266126][ T8943] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 363.266169][ T8943] ? do_raw_spin_lock+0x121/0x290 [ 363.266193][ T8943] ? posixtimer_deliver_signal+0x2d9/0x3e0 [ 363.266218][ T8943] ? fpu__alloc_mathframe+0xa8/0x130 [ 363.266238][ T8943] get_sigframe+0x58d/0x7d0 [ 363.266256][ T8943] ? __pfx_get_sigframe+0x10/0x10 [ 363.266279][ T8943] ia32_setup_frame+0x10c/0x940 [ 363.266304][ T8943] ? _raw_spin_unlock_irq+0x29/0x50 [ 363.266331][ T8943] ? _raw_spin_unlock_irq+0x2e/0x50 [ 363.266364][ T8943] ? __pfx_ia32_setup_frame+0x10/0x10 [ 363.266392][ T8943] arch_do_signal_or_restart+0x40d/0x780 [ 363.266410][ T8943] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 363.266435][ T8943] ? local_irq_enable_exit_to_user+0x5/0x10 [ 363.266473][ T8943] syscall_exit_to_user_mode+0x8b/0x120 [ 363.266502][ T8943] __do_fast_syscall_32+0xc1/0x110 [ 363.266529][ T8943] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.266552][ T8943] do_fast_syscall_32+0x34/0x80 [ 363.266573][ T8943] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 363.266596][ T8943] RIP: 0023:0xf705e539 [ 363.266614][ T8943] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 363.266633][ T8943] RSP: 002b:00000000f504e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 363.266654][ T8943] RAX: 0000000000000001 RBX: 0000000000000003 RCX: 00000000f504e610 [ 363.266667][ T8943] RDX: 0000000000000001 RSI: 00000000f73c2ff4 RDI: 0000000000000000 [ 363.266678][ T8943] RBP: 00000000f73f4f80 R08: 0000000000000000 R09: 0000000000000000 [ 363.266686][ T8943] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 363.266695][ T8943] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.266715][ T8943] [ 363.355451][ T979] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 363.360383][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.529319][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.535336][ C1] hrtimer: interrupt took 260244328 ns [ 363.635373][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.636241][ T979] usb 5-1: device descriptor read/8, error -71 [ 364.045599][ T979] usb usb5-port1: unable to enumerate USB device [ 366.034722][ T30] audit: type=1800 audit(1747402956.883:167): pid=8987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.864" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 366.193027][ T8989] --map-set only usable from mangle table [ 367.485276][ T5889] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 367.670315][ T5889] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 367.715204][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.752416][ T5889] usb 1-1: config 0 has no interface number 0 [ 367.769099][ T5889] usb 1-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 367.812581][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.864332][ T5889] usb 1-1: config 0 descriptor?? [ 367.886842][ T5889] rndis_host 1-1:0.9: More than one union descriptor, skipping ... [ 367.926962][ T5889] usb 1-1: bad CDC descriptors [ 367.955526][ T5889] cdc_acm 1-1:0.9: More than one union descriptor, skipping ... [ 367.981687][ T9007] FAULT_INJECTION: forcing a failure. [ 367.981687][ T9007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.027537][ T9007] CPU: 1 UID: 0 PID: 9007 Comm: syz.2.872 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 368.027572][ T9007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 368.027586][ T9007] Call Trace: [ 368.027595][ T9007] [ 368.027606][ T9007] dump_stack_lvl+0x189/0x250 [ 368.027645][ T9007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.027677][ T9007] ? __pfx__printk+0x10/0x10 [ 368.027712][ T9007] should_fail_ex+0x414/0x560 [ 368.027742][ T9007] _copy_to_user+0x31/0xb0 [ 368.027775][ T9007] simple_read_from_buffer+0xe1/0x170 [ 368.027809][ T9007] proc_fail_nth_read+0x1df/0x250 [ 368.027845][ T9007] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 368.027880][ T9007] ? rw_verify_area+0x258/0x650 [ 368.027904][ T9007] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 368.027937][ T9007] vfs_read+0x1fd/0x980 [ 368.027968][ T9007] ? __pfx___mutex_lock+0x10/0x10 [ 368.027999][ T9007] ? __pfx_vfs_read+0x10/0x10 [ 368.028025][ T9007] ? __fget_files+0x2a/0x420 [ 368.028059][ T9007] ? __fget_files+0x3a0/0x420 [ 368.028103][ T9007] ? __fget_files+0x2a/0x420 [ 368.028143][ T9007] ksys_read+0x145/0x250 [ 368.028171][ T9007] ? __pfx_ksys_read+0x10/0x10 [ 368.028198][ T9007] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 368.028228][ T9007] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.028259][ T9007] __do_fast_syscall_32+0xb4/0x110 [ 368.028290][ T9007] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.028322][ T9007] do_fast_syscall_32+0x34/0x80 [ 368.028353][ T9007] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 368.028379][ T9007] RIP: 0023:0xf702e539 [ 368.028398][ T9007] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 368.028417][ T9007] RSP: 002b:00000000f501e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 368.028439][ T9007] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f501e620 [ 368.028453][ T9007] RDX: 000000000000000f RSI: 00000000f7392ff4 RDI: 0000000000000000 [ 368.028466][ T9007] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 368.028478][ T9007] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 368.028490][ T9007] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 368.028521][ T9007] [ 368.259806][ T979] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 368.471222][ T9018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.500305][ T9018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.518120][ T979] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.531373][ T979] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 368.610323][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 368.639321][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 368.651582][ T979] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 368.688296][ T979] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 368.697621][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 368.738910][ T979] usb 5-1: Product: syz [ 368.743507][ T979] usb 5-1: Manufacturer: syz [ 368.748594][ T979] usb 5-1: SerialNumber: syz [ 368.771936][ T979] usb 5-1: config 0 descriptor?? [ 369.000094][ T979] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 369.008127][ T979] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 369.201012][ T979] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 369.211295][ T979] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 369.231271][ T979] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 369.385319][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 369.412689][ T979] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 369.420892][ T9005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.455786][ T9005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.567460][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.578028][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.604327][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 369.614076][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 369.641048][ T24] usb 2-1: SerialNumber: syz [ 369.719353][ T979] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 369.734842][ T979] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 369.795431][ T979] usb 5-1: USB disconnect, device number 48 [ 369.867186][ T24] usb 2-1: 0:2 : does not exist [ 369.920763][ T24] usb 2-1: USB disconnect, device number 45 [ 370.032736][ T8642] udevd[8642]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.200072][ T9039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.212544][ T9039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.615358][ T979] usb 1-1: USB disconnect, device number 40 [ 370.644632][ T9044] __nla_validate_parse: 47 callbacks suppressed [ 370.644647][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.885'. [ 370.788683][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.885'. [ 371.276083][ T5891] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 371.435578][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 371.575004][ T5891] usb 2-1: config 0 has an invalid interface number: 129 but max is 0 [ 371.667326][ T5891] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 371.712240][ T5891] usb 2-1: config 0 has no interface number 1 [ 371.722320][ T5891] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 371.739203][ T5891] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 371.748880][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.770694][ T5891] usb 2-1: config 0 descriptor?? [ 371.818559][ T5891] hub 2-1:0.0: Invalid hub with more than one config or interface [ 371.874388][ T5891] hub 2-1:0.0: probe with driver hub failed with error -22 [ 371.898595][ T5891] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 371.929066][ T5891] hub 2-1:0.129: Invalid hub with more than one config or interface [ 371.945202][ T5891] hub 2-1:0.129: probe with driver hub failed with error -22 [ 372.053002][ T5891] usb 2-1: USB disconnect, device number 46 [ 372.385352][ T5892] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 372.695212][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 372.831904][ T5892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.842340][ T5892] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 372.858661][ T5892] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 372.869089][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.893511][ T5892] usb 5-1: config 0 descriptor?? [ 372.912545][ T979] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 373.345188][ T979] usb 3-1: Using ep0 maxpacket: 16 [ 373.846992][ T979] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.865672][ T5831] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 373.933991][ T979] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 374.009014][ T979] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 374.107096][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.128992][ T979] usb 3-1: config 0 descriptor?? [ 374.163316][ T5831] usb 2-1: config 0 has no interfaces? [ 374.172706][ T5831] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 374.190735][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.227947][ T5831] usb 2-1: Product: syz [ 374.242861][ T5831] usb 2-1: Manufacturer: syz [ 374.255162][ T5831] usb 2-1: SerialNumber: syz [ 374.290566][ T5831] usb 2-1: config 0 descriptor?? [ 374.455391][ T5889] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 374.670968][ T5889] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 374.679323][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.694878][ T5889] usb 1-1: config 0 has no interface number 0 [ 374.734342][ T5889] usb 1-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 374.745567][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.764300][ T5889] usb 1-1: config 0 descriptor?? [ 374.777093][ T5889] rndis_host 1-1:0.9: More than one union descriptor, skipping ... [ 374.802604][ T9076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.811553][ T9076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.829162][ T5889] usb 1-1: bad CDC descriptors [ 374.834883][ T5889] cdc_acm 1-1:0.9: More than one union descriptor, skipping ... [ 374.930263][ T5892] usb 3-1: USB disconnect, device number 37 [ 375.230902][ T9082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.241203][ T9082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.269344][ T5889] usb 1-1: USB disconnect, device number 41 [ 375.790702][ T5892] usb 5-1: USB disconnect, device number 49 [ 376.597700][ T5892] usb 2-1: USB disconnect, device number 47 [ 376.975050][ T9110] vivid-000: disconnect [ 377.490263][ T9114] vivid-000: reconnect [ 378.590760][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.597307][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.641317][ T5889] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 378.858132][ T5889] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 378.923750][ T5889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.941609][ T5889] usb 5-1: config 0 has no interface number 0 [ 378.952543][ T5889] usb 5-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 378.969221][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.992119][ T5889] usb 5-1: config 0 descriptor?? [ 379.019773][ T5889] rndis_host 5-1:0.9: More than one union descriptor, skipping ... [ 379.035497][ T5889] usb 5-1: bad CDC descriptors [ 379.040839][ T5889] cdc_acm 5-1:0.9: More than one union descriptor, skipping ... [ 379.278535][ T9127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.297214][ T9127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.484755][ T5889] usb 5-1: USB disconnect, device number 50 [ 380.824097][ T9159] netlink: 92 bytes leftover after parsing attributes in process `syz.0.913'. [ 380.931427][ T9166] mmap: syz.4.916 (9166): VmData 45760512 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 380.951869][ T9166] (unnamed net_device) (uninitialized): down delay (69) is not a multiple of miimon (619), value rounded to 0 ms [ 381.330856][ T9173] xt_HMARK: proto mask must be zero with L3 mode [ 381.786067][ T5889] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 381.933674][ T9180] nvme_fabrics: missing parameter 'transport=%s' [ 381.944098][ T9180] nvme_fabrics: missing parameter 'nqn=%s' [ 382.045326][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 382.061561][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 382.073658][ T5889] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 382.088175][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.110505][ T5889] usb 1-1: config 0 descriptor?? [ 382.116947][ T9175] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 382.315330][ T9186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.324504][ T9186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.424667][ T9187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.438220][ T9187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.579584][ T5889] greenasia 0003:0E8F:0012.0011: collection stack underflow [ 382.652188][ T5889] greenasia 0003:0E8F:0012.0011: item 0 4 0 12 parsing failed [ 382.697846][ T5889] greenasia 0003:0E8F:0012.0011: parse failed [ 382.749763][ T5889] greenasia 0003:0E8F:0012.0011: probe with driver greenasia failed with error -22 [ 382.820678][ T5889] usb 1-1: USB disconnect, device number 42 [ 383.075252][ T5892] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 383.366600][ T5892] usb 2-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.00 [ 383.375988][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.416195][ T5892] usb 2-1: config 0 descriptor?? [ 383.670409][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 383.676557][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 383.702687][ T5892] usb 2-1: USB disconnect, device number 48 [ 384.045344][ T24] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 385.302241][ T24] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 385.316089][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.332075][ T24] usb 1-1: config 0 has no interface number 0 [ 385.362589][ T24] usb 1-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 385.393305][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.450524][ T24] usb 1-1: config 0 descriptor?? [ 385.481775][ T24] rndis_host 1-1:0.9: More than one union descriptor, skipping ... [ 385.513170][ T24] usb 1-1: bad CDC descriptors [ 385.544144][ T24] cdc_acm 1-1:0.9: More than one union descriptor, skipping ... [ 385.692728][ T9195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.704327][ T9195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.762087][ T5831] usb 1-1: USB disconnect, device number 43 [ 385.816163][ T9206] program syz.2.927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 387.695730][ T9228] netlink: 68 bytes leftover after parsing attributes in process `syz.3.933'. [ 388.902416][ T9247] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 389.385537][ T979] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 389.482496][ T5831] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 389.589305][ T30] audit: type=1326 audit(1747402980.453:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.3.935" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x0 [ 389.631836][ T979] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 389.671730][ T5831] usb 2-1: device descriptor read/64, error -71 [ 389.679621][ T979] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.691375][ T979] usb 5-1: config 0 has no interface number 0 [ 389.725212][ T979] usb 5-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 389.762065][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.802458][ T979] usb 5-1: config 0 descriptor?? [ 389.829867][ T979] rndis_host 5-1:0.9: More than one union descriptor, skipping ... [ 389.869709][ T979] usb 5-1: bad CDC descriptors [ 389.898708][ T979] cdc_acm 5-1:0.9: More than one union descriptor, skipping ... [ 389.945356][ T5831] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 390.085282][ T5831] usb 2-1: device descriptor read/64, error -71 [ 390.199491][ T5831] usb usb2-port1: attempt power cycle [ 390.235156][ T9266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.245690][ T9266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.280781][ T9267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.292503][ T9267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.319096][ T5886] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 390.505559][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 390.518006][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.532129][ T5886] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 390.541782][ T5886] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 390.557197][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.668559][ T5831] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 390.682771][ T5886] usb 3-1: config 0 descriptor?? [ 390.696045][ T5831] usb 2-1: device descriptor read/8, error -71 [ 390.715392][ T5889] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 390.875862][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 390.909397][ T5889] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 390.947881][ T5831] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 390.956539][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 391.060582][ T9259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.073645][ T9259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.084302][ T5889] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 391.102757][ T5888] usb 3-1: USB disconnect, device number 38 [ 391.114364][ T5889] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.32 [ 391.143641][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.191924][ T5889] usb 1-1: Product: syz [ 391.202387][ T5889] usb 1-1: Manufacturer: syz [ 391.223064][ T5889] usb 1-1: SerialNumber: syz [ 391.249832][ T5889] usb 1-1: config 0 descriptor?? [ 391.255972][ T5831] usb 2-1: device not accepting address 52, error -71 [ 391.271339][ T9270] raw-gadget.6 gadget.0: fail, usb_ep_enable returned -22 [ 391.304218][ T5831] usb usb2-port1: unable to enumerate USB device [ 391.314546][ T5889] mceusb 1-1:0.0: mceusb_dev_probe: device setup failed! [ 391.333687][ T5889] mceusb 1-1:0.0: probe with driver mceusb failed with error -12 [ 391.452817][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.946'. [ 391.465767][ T9273] netlink: 104 bytes leftover after parsing attributes in process `syz.1.946'. [ 391.491465][ T5886] usb 1-1: USB disconnect, device number 44 [ 391.552044][ T9273] netlink: 104 bytes leftover after parsing attributes in process `syz.1.946'. [ 391.831986][ T9275] fuse: Bad value for 'fd' [ 392.199489][ T5892] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 392.237398][ T5831] usb 5-1: USB disconnect, device number 51 [ 392.474324][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 392.492391][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 392.521240][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 392.552508][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 392.684591][ T9283] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 392.687345][ T5892] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 392.710218][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.729710][ T5892] usb 2-1: config 0 descriptor?? [ 392.748934][ T9275] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 393.163650][ T5892] plantronics 0003:047F:FFFF.0012: reserved main item tag 0xd [ 393.241777][ T5892] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 393.330465][ T5892] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 393.455901][ T5892] usb 2-1: USB disconnect, device number 53 [ 393.457009][ T30] audit: type=1326 audit(1747402984.323:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9289 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 393.563193][ T9288] fido_id[9288]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 393.586313][ T30] audit: type=1326 audit(1747402984.323:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9289 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 393.709088][ T30] audit: type=1326 audit(1747402984.353:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9289 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 393.735513][ T30] audit: type=1326 audit(1747402984.353:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9289 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 393.760425][ T30] audit: type=1326 audit(1747402984.363:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9289 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 393.786374][ T30] audit: type=1326 audit(1747402984.373:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9289 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 393.808497][ T30] audit: type=1326 audit(1747402984.373:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9289 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 393.830651][ T30] audit: type=1326 audit(1747402984.373:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9289 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 394.198706][ T30] audit: type=1326 audit(1747402984.983:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9291 comm="syz.2.953" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702e539 code=0x0 [ 394.235621][ T5888] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 394.261600][ T9303] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 394.425348][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 394.452508][ T9303] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 394.508410][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.608056][ T5888] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 394.617867][ T5888] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 394.627386][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.641794][ T5888] usb 1-1: config 0 descriptor?? [ 394.829688][ T9309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.866198][ T9309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.897993][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'. [ 394.971171][ T9313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.984949][ T9313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.985689][ T9309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.052439][ T9318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.072297][ T9318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.082965][ T9309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.148121][ T5889] usb 1-1: USB disconnect, device number 45 [ 395.362718][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.961'. [ 395.830500][ T9332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.898939][ T9332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.059153][ T9334] nvme_fabrics: missing parameter 'transport=%s' [ 396.066782][ T9334] nvme_fabrics: missing parameter 'nqn=%s' [ 396.169966][ T9338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.182350][ T9338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.185563][ T5886] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 397.367015][ T5886] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 397.375974][ T5886] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.395553][ T5886] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 397.415199][ T5888] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 397.424744][ T5886] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.454600][ T5886] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 397.473096][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 397.492276][ T5886] usb 5-1: Product: syz [ 397.502475][ T5886] usb 5-1: Manufacturer: syz [ 397.531803][ T5886] cdc_wdm 5-1:1.0: skipping garbage [ 397.537515][ T5886] cdc_wdm 5-1:1.0: skipping garbage [ 397.542943][ T5886] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 397.546616][ T9347] FAULT_INJECTION: forcing a failure. [ 397.546616][ T9347] name failslab, interval 1, probability 0, space 0, times 0 [ 397.563812][ T9347] CPU: 0 UID: 0 PID: 9347 Comm: syz.2.966 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 397.563845][ T9347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 397.563858][ T9347] Call Trace: [ 397.563867][ T9347] [ 397.563877][ T9347] dump_stack_lvl+0x189/0x250 [ 397.563919][ T9347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.563950][ T9347] ? __pfx__printk+0x10/0x10 [ 397.563978][ T9347] ? __pfx___might_resched+0x10/0x10 [ 397.563998][ T9347] ? fs_reclaim_acquire+0x7d/0x100 [ 397.564036][ T9347] should_fail_ex+0x414/0x560 [ 397.564065][ T9347] should_failslab+0xa8/0x100 [ 397.564096][ T9347] __kmalloc_noprof+0xcb/0x4f0 [ 397.564123][ T9347] ? pfkey_add+0x14f7/0x2e00 [ 397.564151][ T9347] pfkey_add+0x14f7/0x2e00 [ 397.564193][ T9347] ? __pfx_pfkey_add+0x10/0x10 [ 397.564213][ T9347] ? kmem_cache_free+0x192/0x3f0 [ 397.564255][ T9347] pfkey_sendmsg+0xbfe/0x1090 [ 397.564294][ T9347] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 397.564340][ T9347] ? __asan_memset+0x22/0x50 [ 397.564362][ T9347] ? __import_iovec+0x5d4/0x7f0 [ 397.564397][ T9347] ? aa_sock_msg_perm+0x94/0x160 [ 397.564425][ T9347] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 397.564450][ T9347] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 397.564472][ T9347] __sock_sendmsg+0x219/0x270 [ 397.564499][ T9347] ____sys_sendmsg+0x505/0x830 [ 397.564536][ T9347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.564585][ T9347] ___sys_sendmsg+0x21f/0x2a0 [ 397.564617][ T9347] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.564689][ T9347] ? __fget_files+0x2a/0x420 [ 397.564717][ T9347] ? __fget_files+0x3a0/0x420 [ 397.564757][ T9347] __sys_sendmsg+0x164/0x220 [ 397.564790][ T9347] ? __pfx___sys_sendmsg+0x10/0x10 [ 397.564836][ T9347] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 397.564866][ T9347] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.564896][ T9347] __do_fast_syscall_32+0xb4/0x110 [ 397.564934][ T9347] do_fast_syscall_32+0x34/0x80 [ 397.564964][ T9347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 397.564990][ T9347] RIP: 0023:0xf702e539 [ 397.565007][ T9347] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 397.565026][ T9347] RSP: 002b:00000000f501e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 397.565047][ T9347] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000040 [ 397.565062][ T9347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 397.565074][ T9347] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 397.565085][ T9347] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 397.565097][ T9347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 397.565128][ T9347] [ 397.863166][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 397.872504][ T5886] usb 5-1: USB disconnect, device number 52 [ 398.156619][ T5888] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 398.166687][ T5888] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 398.176664][ T5888] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 398.194372][ T5888] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.251440][ T5888] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 398.275624][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.485582][ T5886] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 398.510613][ T5888] usb 1-1: usb_control_msg returned -71 [ 398.526849][ T5888] usbtmc 1-1:16.0: can't read capabilities [ 398.602644][ T5888] usb 1-1: USB disconnect, device number 46 [ 398.708237][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 398.734439][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.764043][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.795032][ T5886] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 398.804791][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.827902][ T5886] usb 3-1: config 0 descriptor?? [ 398.837323][ T5892] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 398.851248][ T5886] hub 3-1:0.0: USB hub found [ 398.993446][ T9358] FAULT_INJECTION: forcing a failure. [ 398.993446][ T9358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.010722][ T9358] CPU: 0 UID: 0 PID: 9358 Comm: syz.3.970 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 399.010755][ T9358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 399.010770][ T9358] Call Trace: [ 399.010779][ T9358] [ 399.010788][ T9358] dump_stack_lvl+0x189/0x250 [ 399.010827][ T9358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.010854][ T9358] ? __pfx__printk+0x10/0x10 [ 399.010878][ T9358] should_fail_ex+0x414/0x560 [ 399.010902][ T9358] _copy_to_user+0x31/0xb0 [ 399.010938][ T9358] simple_read_from_buffer+0xe1/0x170 [ 399.010969][ T9358] proc_fail_nth_read+0x1df/0x250 [ 399.011002][ T9358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 399.011027][ T9358] ? rw_verify_area+0x258/0x650 [ 399.011044][ T9358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 399.011080][ T9358] vfs_read+0x1fd/0x980 [ 399.011110][ T9358] ? __pfx___mutex_lock+0x10/0x10 [ 399.011138][ T9358] ? __pfx_vfs_read+0x10/0x10 [ 399.011160][ T9358] ? __fget_files+0x2a/0x420 [ 399.011183][ T9358] ? __fget_files+0x3a0/0x420 [ 399.011203][ T9358] ? __fget_files+0x2a/0x420 [ 399.011245][ T9358] ksys_read+0x145/0x250 [ 399.011272][ T9358] ? __pfx_ksys_read+0x10/0x10 [ 399.011298][ T9358] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 399.011326][ T9358] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.011347][ T9358] __do_fast_syscall_32+0xb4/0x110 [ 399.011380][ T9358] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.011411][ T9358] do_fast_syscall_32+0x34/0x80 [ 399.011439][ T9358] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 399.011461][ T9358] RIP: 0023:0xf710e539 [ 399.011474][ T9358] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 399.011487][ T9358] RSP: 002b:00000000f50fe590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 399.011503][ T9358] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50fe620 [ 399.011520][ T9358] RDX: 000000000000000f RSI: 00000000f7472ff4 RDI: 0000000000000000 [ 399.011533][ T9358] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 399.011546][ T9358] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 399.011558][ T9358] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 399.011587][ T9358] [ 399.239216][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 399.259550][ T5886] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 399.290436][ T5892] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 399.305368][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 399.319392][ T5892] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 399.329846][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.344296][ T5889] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 399.346536][ T5892] usb 2-1: config 0 descriptor?? [ 399.482672][ T5886] usbhid 3-1:0.0: can't add hid device: -71 [ 399.496064][ T5886] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 399.508704][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 399.517045][ T5889] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 399.667280][ T5886] usb 3-1: USB disconnect, device number 39 [ 399.687330][ T5889] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 399.840848][ T5889] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.863669][ T5889] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 399.873438][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 399.882904][ T5889] usb 5-1: Product: syz [ 399.888158][ T5889] usb 5-1: Manufacturer: syz [ 399.949783][ T5889] usb 5-1: SerialNumber: syz [ 399.998032][ T5889] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input16 [ 400.357969][ T5831] usb 5-1: USB disconnect, device number 53 [ 400.358013][ C1] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 400.562712][ T5831] appletouch 5-1:1.0: input: appletouch disconnected [ 401.389991][ T5890] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 401.485491][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 401.485511][ T30] audit: type=1326 audit(1747402992.353:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.4.977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 401.561001][ T5892] usb 2-1: string descriptor 0 read error: -71 [ 401.569003][ T9385] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 401.614123][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 401.635596][ T9385] audit: out of memory in audit_log_start [ 401.680128][ T30] audit: type=1326 audit(1747402992.353:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.4.977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 401.707425][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 401.745638][ T5892] usb 2-1: USB disconnect, device number 54 [ 401.778262][ T5890] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 401.824549][ T30] audit: type=1326 audit(1747402992.433:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.4.977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 401.827608][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=14 [ 401.937824][ T30] audit: type=1326 audit(1747402992.433:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.4.977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 401.951278][ T5890] usb 1-1: Manufacturer: syz [ 402.008002][ T5890] usb 1-1: SerialNumber: syz [ 402.024399][ T5890] usb 1-1: config 0 descriptor?? [ 402.050992][ T5890] em28xx 1-1:0.0: New device syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 402.070193][ T5890] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 402.091159][ T9388] netlink: 'syz.1.978': attribute type 10 has an invalid length. [ 402.119366][ T30] audit: type=1326 audit(1747402992.523:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.4.977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 402.150064][ T9388] netlink: 40 bytes leftover after parsing attributes in process `syz.1.978'. [ 402.183354][ T9388] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 402.218514][ T30] audit: type=1326 audit(1747402992.523:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.4.977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 402.245814][ T30] audit: type=1326 audit(1747402992.523:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.4.977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 402.343874][ T30] audit: type=1326 audit(1747402992.523:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.4.977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 402.379382][ T5890] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 402.393675][ T9398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.430994][ T9398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.584326][ T5890] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 402.612284][ T5890] em28xx 1-1:0.0: board has no eeprom [ 402.738630][ T9405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.750328][ T9405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.776710][ T5890] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 402.785631][ T5890] em28xx 1-1:0.0: dvb set to bulk mode. [ 402.801524][ T5892] em28xx 1-1:0.0: Binding DVB extension [ 402.846283][ T5890] usb 1-1: USB disconnect, device number 47 [ 402.884028][ T5890] em28xx 1-1:0.0: Disconnecting em28xx [ 402.972576][ T5892] em28xx 1-1:0.0: Registering input extension [ 403.037192][ T5890] em28xx 1-1:0.0: Closing input extension [ 403.131802][ T5890] em28xx 1-1:0.0: Freeing device [ 403.612332][ T5890] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 404.412899][ T5892] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 404.438221][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 404.453337][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 404.501057][ T5890] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf [ 404.605179][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 404.617456][ T5892] usb 2-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=ba.e9 [ 404.628386][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.636575][ T5890] usb 1-1: New USB device strings: Mfr=18, Product=2, SerialNumber=3 [ 404.707486][ T5892] usb 2-1: Product: syz [ 404.714550][ T5890] usb 1-1: Product: syz [ 404.721217][ T5892] usb 2-1: Manufacturer: syz [ 404.726517][ T5890] usb 1-1: Manufacturer: syz [ 404.739816][ T5892] usb 2-1: SerialNumber: syz [ 404.745242][ T5890] usb 1-1: SerialNumber: syz [ 404.759305][ T5892] usb 2-1: config 0 descriptor?? [ 404.766626][ T5890] usb 1-1: config 0 descriptor?? [ 404.782483][ T5892] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 404.794773][ T5890] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 404.987683][ T5892] pwc: send_video_command error -71 [ 405.002798][ T5892] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 405.063802][ T5892] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 405.119932][ T9400] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 405.126776][ T9400] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 405.136762][ T5890] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 405.147458][ T5892] usb 2-1: USB disconnect, device number 55 [ 405.159952][ T9400] vhci_hcd vhci_hcd.0: Device attached [ 405.204244][ T9428] vhci_hcd: connection closed [ 405.205212][ T5890] usb 1-1: USB disconnect, device number 48 [ 405.216523][ T3530] vhci_hcd: stop threads [ 405.287902][ T3530] vhci_hcd: release socket [ 405.307224][ T3530] vhci_hcd: disconnect device [ 405.374609][ T5886] vhci_hcd: vhci_device speed not set [ 405.712478][ T9432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.989'. [ 406.235180][ T5892] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 406.385180][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 406.405010][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.431423][ T5892] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 406.457203][ T5892] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 406.482569][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.486444][ T9452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.501819][ T9452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.518696][ T5892] usb 1-1: config 0 descriptor?? [ 406.853238][ T9460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.873057][ T9460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.899731][ T5892] usb 1-1: USB disconnect, device number 49 [ 407.908484][ T9469] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.999' sets config #0 [ 407.924349][ T9469] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.999' sets config #1 [ 407.979076][ T9469] netlink: 44 bytes leftover after parsing attributes in process `syz.0.999'. [ 408.034606][ T9469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.999'. [ 408.933384][ T9481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.126234][ T9480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.169779][ T9481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.187260][ T9486] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 409.196819][ T9480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.614149][ T9494] Context (ID=0x0) not attached to queue pair (handle=0x0:0x2) [ 410.703696][ T9518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.714302][ T9518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.753178][ T9518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.774688][ T9518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.797593][ T9518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.808007][ T9518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.855265][ T9518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.879988][ T9518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.925604][ T5888] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 411.127915][ T5888] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 411.144753][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.159835][ T5888] usb 2-1: config 0 has no interface number 0 [ 411.166707][ T5888] usb 2-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 411.180457][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.214008][ T5888] usb 2-1: config 0 descriptor?? [ 411.245915][ T5888] rndis_host 2-1:0.9: More than one union descriptor, skipping ... [ 411.278028][ T5888] usb 2-1: bad CDC descriptors [ 411.295331][ T5888] cdc_acm 2-1:0.9: More than one union descriptor, skipping ... [ 411.698865][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1016'. [ 411.752295][ T5889] usb 2-1: USB disconnect, device number 56 [ 411.958778][ T9530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.025891][ T9530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.507761][ T9540] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1021'. [ 412.735272][ T5889] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 412.766375][ T9546] binder: 9544:9546 ioctl c0306201 0 returned -14 [ 412.894838][ T5889] usb 3-1: device descriptor read/64, error -71 [ 413.145249][ T5889] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 413.355256][ T5889] usb 3-1: device descriptor read/64, error -71 [ 413.465583][ T5889] usb usb3-port1: attempt power cycle [ 413.591020][ T9558] openvswitch: netlink: Flow key attr not present in new flow. [ 413.948651][ T5889] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 413.996158][ T5889] usb 3-1: device descriptor read/8, error -71 [ 414.245425][ T5889] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 414.276307][ T5889] usb 3-1: device descriptor read/8, error -71 [ 414.461090][ T5889] usb usb3-port1: unable to enumerate USB device [ 414.911890][ T9528] ALSA: mixer_oss: invalid OSS volume '' [ 415.094539][ T5889] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 415.148723][ T9577] FAULT_INJECTION: forcing a failure. [ 415.148723][ T9577] name failslab, interval 1, probability 0, space 0, times 0 [ 415.227540][ T9577] CPU: 1 UID: 0 PID: 9577 Comm: syz.3.1032 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 415.227572][ T9577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 415.227585][ T9577] Call Trace: [ 415.227594][ T9577] [ 415.227603][ T9577] dump_stack_lvl+0x189/0x250 [ 415.227643][ T9577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.227676][ T9577] ? __pfx__printk+0x10/0x10 [ 415.227700][ T9577] ? __pfx___might_resched+0x10/0x10 [ 415.227721][ T9577] ? fs_reclaim_acquire+0x7d/0x100 [ 415.227759][ T9577] should_fail_ex+0x414/0x560 [ 415.227787][ T9577] should_failslab+0xa8/0x100 [ 415.227828][ T9577] __kmalloc_noprof+0xcb/0x4f0 [ 415.227855][ T9577] ? __vb2_queue_alloc+0x29d/0x15a0 [ 415.227889][ T9577] __vb2_queue_alloc+0x29d/0x15a0 [ 415.227944][ T9577] vb2_core_create_bufs+0x765/0xde0 [ 415.227988][ T9577] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 415.228016][ T9577] ? __mutex_trylock_common+0x153/0x260 [ 415.228047][ T9577] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 415.228082][ T9577] vb2_create_bufs+0x5b9/0xae0 [ 415.228117][ T9577] ? __pfx_vb2_create_bufs+0x10/0x10 [ 415.228148][ T9577] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 415.228184][ T9577] vb2_ioctl_create_bufs+0x285/0x3f0 [ 415.228220][ T9577] v4l_create_bufs+0x190/0x2a0 [ 415.228254][ T9577] __video_do_ioctl+0xc9b/0xdb0 [ 415.228297][ T9577] ? __pfx___video_do_ioctl+0x10/0x10 [ 415.228334][ T9577] ? trace_kmalloc+0x1f/0xd0 [ 415.228370][ T9577] video_usercopy+0x86e/0x14f0 [ 415.228414][ T9577] ? __pfx___video_do_ioctl+0x10/0x10 [ 415.228446][ T9577] ? __pfx_video_usercopy+0x10/0x10 [ 415.228499][ T9577] ? __fget_files+0x2a/0x420 [ 415.228534][ T9577] v4l2_ioctl+0x18a/0x1e0 [ 415.228569][ T9577] v4l2_compat_ioctl32+0x1d7/0x260 [ 415.228599][ T9577] __ia32_compat_sys_ioctl+0x551/0x840 [ 415.228627][ T9577] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 415.228653][ T9577] ? __fget_files+0x3a0/0x420 [ 415.228691][ T9577] ? fput+0xa0/0xd0 [ 415.228724][ T9577] ? ksys_write+0x1f0/0x250 [ 415.228758][ T9577] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 415.228789][ T9577] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.228829][ T9577] __do_fast_syscall_32+0xb4/0x110 [ 415.228860][ T9577] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.228892][ T9577] do_fast_syscall_32+0x34/0x80 [ 415.228922][ T9577] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 415.228949][ T9577] RIP: 0023:0xf710e539 [ 415.228968][ T9577] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 415.228988][ T9577] RSP: 002b:00000000f50fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 415.229011][ T9577] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0f8565c [ 415.229026][ T9577] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 415.229039][ T9577] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 415.229051][ T9577] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 415.229064][ T9577] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 415.229096][ T9577] [ 415.768564][ T5889] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 415.792846][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.829760][ T5889] usb 5-1: config 0 descriptor?? [ 415.866548][ T9586] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1037'. [ 415.877913][ T5889] cp210x 5-1:0.0: cp210x converter detected [ 415.909677][ T9586] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1037'. [ 416.176203][ T5886] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 416.291237][ T5889] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 416.393286][ T9599] bond0: (slave bond_slave_0): Releasing backup interface [ 416.397797][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 416.438147][ T5886] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 416.448004][ T5886] usb 2-1: config 179 has no interface number 0 [ 416.483418][ T9599] bond0: (slave bond_slave_1): Releasing backup interface [ 416.544905][ T9599] team0: Port device team_slave_0 removed [ 416.586175][ T9599] team0: Port device team_slave_1 removed [ 416.598163][ T9599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.607378][ T9599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.625877][ T9599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.634167][ T9599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.838579][ T5889] usb 5-1: cp210x converter now attached to ttyUSB0 [ 416.935293][ T5886] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 416.968516][ T5886] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 416.995560][ T5886] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 224, changing to 11 [ 417.008273][ T5886] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 49962, setting to 1024 [ 417.023088][ T5886] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 417.068848][ T5891] usb 5-1: USB disconnect, device number 54 [ 417.087744][ T5891] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 417.172719][ T5891] cp210x 5-1:0.0: device disconnected [ 417.178521][ T5886] usb 2-1: config 179 interface 65 has no altsetting 0 [ 417.211861][ T5886] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 417.257721][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.382530][ T5886] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input18 [ 417.481803][ T5184] input input18: unable to receive magic message: -110 [ 417.568186][ T5184] input input18: unable to receive magic message: -71 [ 417.639260][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 417.688137][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 417.719744][ T5886] usb 2-1: USB disconnect, device number 57 [ 417.754678][ T5886] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 420.968837][ T9632] sctp: [Deprecated]: syz.0.1049 (pid 9632) Use of struct sctp_assoc_value in delayed_ack socket option. [ 420.968837][ T9632] Use struct sctp_sack_info instead [ 421.184033][ T9643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1051'. [ 421.228669][ T9643] netlink: 'syz.4.1051': attribute type 3 has an invalid length. [ 421.449001][ T9648] tipc: Started in network mode [ 421.454024][ T9648] tipc: Node identity 9a667d228e4a, cluster identity 4711 [ 421.462200][ T9648] tipc: Enabled bearer , priority 0 [ 421.474603][ T9648] syzkaller0: entered promiscuous mode [ 421.483232][ T9648] syzkaller0: entered allmulticast mode [ 421.501005][ T9648] tipc: Resetting bearer [ 421.587432][ T9648] tipc: Disabling bearer [ 422.354116][ T9662] netlink: 'syz.1.1057': attribute type 1 has an invalid length. [ 422.508514][ T9662] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1057'. [ 423.020225][ T9669] FAULT_INJECTION: forcing a failure. [ 423.020225][ T9669] name failslab, interval 1, probability 0, space 0, times 0 [ 423.036284][ T9669] CPU: 0 UID: 0 PID: 9669 Comm: syz.3.1058 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 423.036315][ T9669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 423.036328][ T9669] Call Trace: [ 423.036336][ T9669] [ 423.036356][ T9669] dump_stack_lvl+0x189/0x250 [ 423.036396][ T9669] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.036427][ T9669] ? __pfx__printk+0x10/0x10 [ 423.036454][ T9669] ? __pfx___might_resched+0x10/0x10 [ 423.036474][ T9669] ? fs_reclaim_acquire+0x7d/0x100 [ 423.036511][ T9669] should_fail_ex+0x414/0x560 [ 423.036537][ T9669] should_failslab+0xa8/0x100 [ 423.036567][ T9669] __kmalloc_cache_noprof+0x70/0x3d0 [ 423.036594][ T9669] ? __io_uring_add_tctx_node+0x149/0x4e0 [ 423.036633][ T9669] __io_uring_add_tctx_node+0x149/0x4e0 [ 423.036669][ T9669] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 423.036700][ T9669] ? __fget_files+0x2a/0x420 [ 423.036731][ T9669] ? __fget_files+0x2a/0x420 [ 423.036762][ T9669] __io_uring_add_tctx_node_from_submit+0x91/0x120 [ 423.036797][ T9669] __se_sys_io_uring_enter+0x2505/0x2b20 [ 423.036837][ T9669] ? ksys_write+0x1cb/0x250 [ 423.036866][ T9669] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 423.036884][ T9669] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 423.036911][ T9669] ? __pfx_vfs_write+0x10/0x10 [ 423.036938][ T9669] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 423.036970][ T9669] ? __fget_files+0x3a0/0x420 [ 423.037005][ T9669] ? fput+0xa0/0xd0 [ 423.037036][ T9669] ? ksys_write+0x1f0/0x250 [ 423.037067][ T9669] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 423.037097][ T9669] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 423.037121][ T9669] __do_fast_syscall_32+0xb4/0x110 [ 423.037151][ T9669] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.037180][ T9669] do_fast_syscall_32+0x34/0x80 [ 423.037209][ T9669] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 423.037234][ T9669] RIP: 0023:0xf710e539 [ 423.037252][ T9669] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 423.037271][ T9669] RSP: 002b:00000000f50fe55c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 423.037291][ T9669] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000567 [ 423.037301][ T9669] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 423.037309][ T9669] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 423.037318][ T9669] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 423.037326][ T9669] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 423.037353][ T9669] [ 423.301209][ C0] vkms_vblank_simulate: vblank timer overrun [ 424.681309][ T9694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.738432][ T9694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.185244][ T5889] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 425.349152][ T5889] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 425.362008][ T5889] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.423262][ T5889] usb 2-1: config 0 has no interface number 0 [ 425.443584][ T5889] usb 2-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 425.484024][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.518684][ T5889] usb 2-1: config 0 descriptor?? [ 425.536353][ T5889] rndis_host 2-1:0.9: More than one union descriptor, skipping ... [ 425.548577][ T5889] usb 2-1: bad CDC descriptors [ 425.554015][ T5889] cdc_acm 2-1:0.9: More than one union descriptor, skipping ... [ 425.641660][ T9700] sctp: [Deprecated]: syz.0.1066 (pid 9700) Use of struct sctp_assoc_value in delayed_ack socket option. [ 425.641660][ T9700] Use struct sctp_sack_info instead [ 425.680589][ T9700] FAULT_INJECTION: forcing a failure. [ 425.680589][ T9700] name failslab, interval 1, probability 0, space 0, times 0 [ 425.822545][ T9700] CPU: 1 UID: 0 PID: 9700 Comm: syz.0.1066 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 425.822577][ T9700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 425.822591][ T9700] Call Trace: [ 425.822600][ T9700] [ 425.822610][ T9700] dump_stack_lvl+0x189/0x250 [ 425.822649][ T9700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.822678][ T9700] ? __pfx__printk+0x10/0x10 [ 425.822698][ T9700] ? __pfx___might_resched+0x10/0x10 [ 425.822711][ T9700] ? fs_reclaim_acquire+0x7d/0x100 [ 425.822750][ T9700] should_fail_ex+0x414/0x560 [ 425.822779][ T9700] should_failslab+0xa8/0x100 [ 425.822809][ T9700] __kmalloc_cache_noprof+0x70/0x3d0 [ 425.822835][ T9700] ? snd_timer_instance_new+0x51/0x220 [ 425.822864][ T9700] snd_timer_instance_new+0x51/0x220 [ 425.822898][ T9700] snd_seq_timer_open+0x237/0x5f0 [ 425.822937][ T9700] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 425.822964][ T9700] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 425.822991][ T9700] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 425.823008][ T9700] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 425.823037][ T9700] snd_seq_queue_alloc+0x407/0x790 [ 425.823078][ T9700] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 425.823111][ T9700] snd_seq_oss_open+0x5e0/0xea0 [ 425.823137][ T9700] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 425.823159][ T9700] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 425.823184][ T9700] ? __lock_acquire+0xaac/0xd20 [ 425.823240][ T9700] ? rcu_is_watching+0x15/0xb0 [ 425.823259][ T9700] ? trace_contention_end+0x39/0x120 [ 425.823298][ T9700] ? __pfx___mutex_lock+0x10/0x10 [ 425.823323][ T9700] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 425.823339][ T9700] ? __pfx_free_devinfo+0x10/0x10 [ 425.823360][ T9700] ? do_raw_spin_unlock+0x122/0x240 [ 425.823391][ T9700] ? soundcore_open+0x2da/0x490 [ 425.823415][ T9700] odev_open+0x67/0xa0 [ 425.823434][ T9700] chrdev_open+0x4cc/0x5e0 [ 425.823467][ T9700] ? __pfx_chrdev_open+0x10/0x10 [ 425.823504][ T9700] ? __pfx_chrdev_open+0x10/0x10 [ 425.823532][ T9700] do_dentry_open+0xdf0/0x1970 [ 425.823584][ T9700] vfs_open+0x3b/0x340 [ 425.823615][ T9700] ? path_openat+0x2ecd/0x3830 [ 425.823639][ T9700] path_openat+0x2ee5/0x3830 [ 425.823658][ T9700] ? arch_stack_walk+0xfc/0x150 [ 425.823725][ T9700] ? __pfx_path_openat+0x10/0x10 [ 425.823745][ T9700] ? do_fast_syscall_32+0x34/0x80 [ 425.823774][ T9700] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 425.823815][ T9700] do_filp_open+0x1fa/0x410 [ 425.823835][ T9700] ? __pfx_do_filp_open+0x10/0x10 [ 425.823884][ T9700] ? _raw_spin_unlock+0x28/0x50 [ 425.823906][ T9700] ? alloc_fd+0x64c/0x6c0 [ 425.823944][ T9700] do_sys_openat2+0x121/0x1c0 [ 425.823961][ T9700] ? __pfx_do_sys_openat2+0x10/0x10 [ 425.823975][ T9700] ? ksys_write+0x1f0/0x250 [ 425.823993][ T9700] ? rcu_is_watching+0x15/0xb0 [ 425.824024][ T9700] __ia32_compat_sys_open+0x117/0x140 [ 425.824050][ T9700] __do_fast_syscall_32+0xb4/0x110 [ 425.824079][ T9700] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.824111][ T9700] do_fast_syscall_32+0x34/0x80 [ 425.824132][ T9700] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 425.824154][ T9700] RIP: 0023:0xf705e539 [ 425.824174][ T9700] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 425.824193][ T9700] RSP: 002b:00000000f504e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 425.824214][ T9700] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000000000000 [ 425.824228][ T9700] RDX: 000000000000006f RSI: 0000000000000000 RDI: 0000000000000000 [ 425.824240][ T9700] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 425.824252][ T9700] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 425.824260][ T9700] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 425.824281][ T9700] [ 426.366915][ T9709] syz.4.1067 (9709): /proc/9702/oom_adj is deprecated, please use /proc/9702/oom_score_adj instead. [ 426.562352][ T9710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.571452][ T9710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.162678][ T5886] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 427.347773][ T5886] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 427.359477][ T5886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.377737][ T5886] usb 1-1: config 0 has no interface number 0 [ 427.390044][ T5886] usb 1-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 427.454278][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.483729][ T5886] usb 1-1: config 0 descriptor?? [ 427.559603][ T5886] rndis_host 1-1:0.9: More than one union descriptor, skipping ... [ 427.575503][ T5886] usb 1-1: bad CDC descriptors [ 427.590724][ T5886] cdc_acm 1-1:0.9: More than one union descriptor, skipping ... [ 427.611194][ T9723] sctp: [Deprecated]: syz.4.1073 (pid 9723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 427.611194][ T9723] Use struct sctp_sack_info instead [ 427.726864][ T9725] netlink: 'syz.2.1072': attribute type 1 has an invalid length. [ 427.858411][ T5886] usb 1-1: USB disconnect, device number 50 [ 428.231064][ T5886] usb 2-1: USB disconnect, device number 58 [ 428.487266][ T9732] fuse: Bad value for 'group_id' [ 428.495683][ T9732] fuse: Bad value for 'group_id' [ 429.209551][ T9751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'. [ 429.283708][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'. [ 429.309112][ T9751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'. [ 430.018646][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 430.018669][ T30] audit: type=1326 audit(1747403020.863:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9757 comm="syz.2.1081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 430.105210][ T30] audit: type=1326 audit(1747403020.863:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9757 comm="syz.2.1081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 430.127139][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.235369][ T30] audit: type=1326 audit(1747403020.863:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9757 comm="syz.2.1081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 430.257308][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.283434][ T9767] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1083'. [ 430.343476][ T30] audit: type=1326 audit(1747403020.863:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9757 comm="syz.2.1081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 430.450901][ T30] audit: type=1326 audit(1747403020.873:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9757 comm="syz.2.1081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 430.474586][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.596075][ T30] audit: type=1326 audit(1747403020.883:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9757 comm="syz.2.1081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 430.680179][ T30] audit: type=1326 audit(1747403020.883:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9757 comm="syz.2.1081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 430.687288][ T9772] kernel read not supported for file /  (pid: 9772 comm: syz.0.1085) [ 430.713137][ T9774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.746942][ T9774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.769686][ T30] audit: type=1326 audit(1747403020.883:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9757 comm="syz.2.1081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 430.791613][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.841340][ T9774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.867925][ T9774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.961974][ T30] audit: type=1326 audit(1747403020.883:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9757 comm="syz.2.1081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 431.071331][ T30] audit: type=1326 audit(1747403020.883:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9757 comm="syz.2.1081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 431.093274][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.305220][ T5889] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 432.335224][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 432.343079][ T31] Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 [ 432.351460][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.363974][ T31] task:kworker/0:1 state:D stack:23016 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 432.379837][ T31] Workqueue: usb_hub_wq hub_event [ 432.386060][ T31] Call Trace: [ 432.389761][ T31] [ 432.392756][ T31] __schedule+0x16e2/0x4cd0 [ 432.397409][ T31] ? schedule+0x165/0x360 [ 432.402185][ T31] ? __pfx___schedule+0x10/0x10 [ 432.407191][ T31] ? schedule+0x91/0x360 [ 432.411524][ T31] ? schedule+0x91/0x360 [ 432.416368][ T31] schedule+0x165/0x360 [ 432.420760][ T31] schedule_timeout+0x9a/0x270 [ 432.425676][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 432.431404][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.436799][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.442410][ T31] ? wait_for_completion+0x267/0x5d0 [ 432.448080][ T31] wait_for_completion+0x2bf/0x5d0 [ 432.453837][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 432.459696][ T31] pn533_usb_send_frame+0x2d8/0x560 [ 432.465347][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 432.470789][ T31] ? __pfx_pn533_usb_send_frame+0x10/0x10 [ 432.472952][ T5889] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 432.492064][ T31] ? pn533_std_tx_frame_finish+0x303/0x3b0 [ 432.498795][ T31] __pn533_send_async+0x41f/0x5f0 [ 432.504228][ T5889] usb 2-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 432.515519][ T31] pn533_finalize_setup+0x231/0x760 [ 432.520839][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.526874][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.535436][ T31] ? __pfx_pn533_finalize_setup+0x10/0x10 [ 432.543789][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 432.556422][ T5889] usb 2-1: config 0 descriptor?? [ 432.561807][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 432.574450][ T5889] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input19 [ 432.579763][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 432.598398][ T31] ? pn53x_common_init+0x95b/0xa90 [ 432.603737][ T31] pn533_usb_probe+0xe56/0x1150 [ 432.609424][ T31] ? __pfx_pn533_usb_probe+0x10/0x10 [ 432.614912][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 432.621491][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 432.628210][ T31] ? __update_runtime_status+0x1b3/0x390 [ 432.634142][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 432.651889][ T31] usb_probe_interface+0x641/0xbc0 [ 432.657604][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 432.663426][ T31] really_probe+0x26a/0x9a0 [ 432.668498][ T31] __driver_probe_device+0x18c/0x2f0 [ 432.674042][ T31] driver_probe_device+0x4f/0x430 [ 432.679632][ T31] __device_attach_driver+0x2ce/0x530 [ 432.685521][ T31] bus_for_each_drv+0x251/0x2e0 [ 432.691354][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 432.699711][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 432.709212][ T31] __device_attach+0x2b8/0x400 [ 432.714067][ T31] ? __pfx___device_attach+0x10/0x10 [ 432.720129][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 432.728702][ T31] bus_probe_device+0x185/0x260 [ 432.733741][ T31] device_add+0x7b6/0xb50 [ 432.739317][ T31] usb_set_configuration+0x1a87/0x20e0 [ 432.744946][ T31] usb_generic_driver_probe+0x8d/0x150 [ 432.751689][ T31] usb_probe_device+0x1c4/0x390 [ 432.756714][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 432.762128][ T31] really_probe+0x26a/0x9a0 [ 432.766816][ T31] __driver_probe_device+0x18c/0x2f0 [ 432.772188][ T31] driver_probe_device+0x4f/0x430 [ 432.780649][ T31] __device_attach_driver+0x2ce/0x530 [ 432.786227][ T31] bus_for_each_drv+0x251/0x2e0 [ 432.802441][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 432.810072][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 432.815732][ T31] __device_attach+0x2b8/0x400 [ 432.822400][ T31] ? __pfx___device_attach+0x10/0x10 [ 432.828253][ T31] ? bus_probe_device+0x17c/0x260 [ 432.833520][ T31] bus_probe_device+0x185/0x260 [ 432.836229][ T9793] netlink: 'syz.1.1093': attribute type 1 has an invalid length. [ 432.838565][ T31] device_add+0x7b6/0xb50 [ 432.851997][ T31] usb_new_device+0xa39/0x16c0 [ 432.856983][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 432.862259][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.867905][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.873212][ T31] hub_event+0x2941/0x4a00 [ 432.880456][ T31] ? __pfx_hub_event+0x10/0x10 [ 432.885362][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 432.891183][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.897096][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 432.902906][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 432.913042][ T31] process_scheduled_works+0xade/0x17a0 [ 432.918815][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 432.924923][ T31] worker_thread+0x8a0/0xda0 [ 432.929687][ T31] kthread+0x711/0x8a0 [ 432.933838][ T31] ? __pfx_worker_thread+0x10/0x10 [ 432.940495][ T31] ? __pfx_kthread+0x10/0x10 [ 432.945253][ T31] ? __pfx_kthread+0x10/0x10 [ 432.949922][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.955374][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.970710][ T31] ? __pfx_kthread+0x10/0x10 [ 432.975560][ T31] ret_from_fork+0x4b/0x80 [ 432.980591][ T31] ? __pfx_kthread+0x10/0x10 [ 432.986521][ T31] ret_from_fork_asm+0x1a/0x30 [ 432.991361][ T31] [ 432.996558][ T31] [ 432.996558][ T31] Showing all locks held in the system: [ 433.004375][ T31] 6 locks held by kworker/0:1/10: [ 433.015653][ T31] #0: ffff88823be1c148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 433.028290][ T31] #1: ffffc900000f7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 433.052256][ T9798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.061514][ T9798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.069548][ T31] #2: ffff888144f10198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 433.081078][ T31] #3: ffff88805e55b198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 433.092185][ T31] #4: ffff88807d5ea160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 433.101886][ T31] #5: ffff88807d5ec438 (&priv->cmd_lock){+.+.}-{4:4}, at: __pn533_send_async+0x25a/0x5f0 [ 433.116895][ T31] 1 lock held by khungtaskd/31: [ 433.121913][ T31] #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 433.146606][ T31] 3 locks held by kworker/u8:6/1163: [ 433.152050][ T31] #0: ffff88801a089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 433.164229][ T31] #1: ffffc9000430fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 433.175878][ T31] #2: ffffffff8f2f7248 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 433.185018][ T31] 3 locks held by acpid/5184: [ 433.189839][ T31] #0: ffff88803016e160 (&mousedev->mutex#2){+.+.}-{4:4}, at: mousedev_open_device+0x27/0x150 [ 433.200741][ T31] #1: ffff88804e2d52c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_open_device+0x53/0x360 [ 433.210544][ T31] #2: ffff888031905948 (&dev->pm_mutex){+.+.}-{4:4}, at: bcm5974_open+0x8a/0x120 [ 433.220037][ T31] 2 locks held by getty/5588: [ 433.224777][ T31] #0: ffff8880324400a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 433.234800][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 433.245151][ T31] 1 lock held by syz-executor/5816: [ 433.250408][ T31] #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: release_sock+0x2f/0x1f0 [ 433.259703][ T31] 1 lock held by syz-executor/5845: [ 433.264953][ T31] #0: ffffffff8df437b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 433.276191][ T31] 4 locks held by udevd/7216: [ 433.280927][ T31] #0: ffff88807f085c30 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 433.290059][ T31] #1: ffff8880316d6c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 433.299859][ T31] #2: ffff888029081788 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 433.309582][ T31] #3: ffff88805e55b198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 433.319185][ T31] 2 locks held by udevd/8643: [ 433.323908][ T31] #0: ffff888030168118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_open+0x2cf/0x5a0 [ 433.333116][ T31] #1: ffff88804e2d52c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_open_device+0x53/0x360 [ 433.342896][ T31] 2 locks held by syz.2.1090/9783: [ 433.348352][ T31] #0: ffffffff8f2f7248 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 433.357695][ T31] #1: ffffffff8df437b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 433.368790][ T31] 2 locks held by syz.1.1093/9793: [ 433.373961][ T31] #0: ffffffff8f7f30e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 433.383915][ T31] #1: ffffffff8f2f7248 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 433.393170][ T31] 2 locks held by syz.1.1093/9797: [ 433.398592][ T31] #0: ffffffff8f80e058 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 433.408493][ T31] #1: ffffffff8f2f7248 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 433.417806][ T31] [ 433.420189][ T31] ============================================= [ 433.420189][ T31] [ 433.428736][ T31] NMI backtrace for cpu 0 [ 433.428755][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 433.428781][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 433.428794][ T31] Call Trace: [ 433.428802][ T31] [ 433.428815][ T31] dump_stack_lvl+0x189/0x250 [ 433.428850][ T31] ? __wake_up_klogd+0xd9/0x110 [ 433.428879][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.428911][ T31] ? __pfx__printk+0x10/0x10 [ 433.428946][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 433.428973][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 433.428992][ T31] ? _printk+0xcf/0x120 [ 433.429016][ T31] ? __pfx__printk+0x10/0x10 [ 433.429040][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 433.429066][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 433.429090][ T31] watchdog+0xfee/0x1030 [ 433.429118][ T31] ? watchdog+0x1de/0x1030 [ 433.429169][ T31] kthread+0x711/0x8a0 [ 433.429200][ T31] ? __pfx_watchdog+0x10/0x10 [ 433.429226][ T31] ? __pfx_kthread+0x10/0x10 [ 433.429252][ T31] ? __pfx_kthread+0x10/0x10 [ 433.429276][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 433.429300][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.429328][ T31] ? __pfx_kthread+0x10/0x10 [ 433.429353][ T31] ret_from_fork+0x4b/0x80 [ 433.429374][ T31] ? __pfx_kthread+0x10/0x10 [ 433.429400][ T31] ret_from_fork_asm+0x1a/0x30 [ 433.429437][ T31] [ 433.429468][ T31] Sending NMI from CPU 0 to CPUs 1: [ 433.579908][ C1] NMI backtrace for cpu 1 [ 433.579925][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 433.579946][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 433.579958][ C1] RIP: 0010:cpuidle_not_available+0x19/0xa0 [ 433.579996][ C1] Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 41 56 53 48 89 f3 49 89 fe e8 cd b5 5b f9 8b 2d 27 26 1b 07 <31> ff 89 ee e8 fe b9 5b f9 85 ed 74 07 e8 b5 b5 5b f9 eb 4a 48 85 [ 433.580016][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 00000093 [ 433.580032][ C1] RAX: ffffffff88643c23 RBX: 0000000000000000 RCX: ffff88801ca85a00 [ 433.580045][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 433.580055][ C1] RBP: 0000000000000000 R08: ffffffff8f7efc77 R09: 1ffffffff1efdf8e [ 433.580068][ C1] R10: dffffc0000000000 R11: fffffbfff1efdf8f R12: ffffffff8f7efc70 [ 433.580081][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 1ffff11003950b40 [ 433.580094][ C1] FS: 0000000000000000(0000) GS:ffff8881261c7000(0000) knlGS:0000000000000000 [ 433.580108][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 433.580121][ C1] CR2: 00000000f73c3230 CR3: 000000007f4ea000 CR4: 00000000003526f0 [ 433.580139][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 433.580149][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 433.580160][ C1] Call Trace: [ 433.580168][ C1] [ 433.580177][ C1] do_idle+0x1da/0x510 [ 433.580199][ C1] ? __pfx_do_idle+0x10/0x10 [ 433.580222][ C1] ? do_idle+0x4f3/0x510 [ 433.580239][ C1] cpu_startup_entry+0x44/0x60 [ 433.580257][ C1] start_secondary+0x101/0x110 [ 433.580277][ C1] common_startup_64+0x13e/0x147 [ 433.580311][ C1] [ 433.581346][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 433.761909][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 433.773727][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 433.783793][ T31] Call Trace: [ 433.787167][ T31] [ 433.790104][ T31] dump_stack_lvl+0x99/0x250 [ 433.794715][ T31] ? __asan_memcpy+0x40/0x70 [ 433.799404][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.804628][ T31] ? __pfx__printk+0x10/0x10 [ 433.809243][ T31] panic+0x2db/0x790 [ 433.813167][ T31] ? __pfx_panic+0x10/0x10 [ 433.817597][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 433.822380][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 433.828206][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 433.833596][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 433.839766][ T31] watchdog+0x102d/0x1030 [ 433.844114][ T31] ? watchdog+0x1de/0x1030 [ 433.848551][ T31] kthread+0x711/0x8a0 [ 433.852645][ T31] ? __pfx_watchdog+0x10/0x10 [ 433.857340][ T31] ? __pfx_kthread+0x10/0x10 [ 433.861943][ T31] ? __pfx_kthread+0x10/0x10 [ 433.866543][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 433.871752][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.876961][ T31] ? __pfx_kthread+0x10/0x10 [ 433.881928][ T31] ret_from_fork+0x4b/0x80 [ 433.886358][ T31] ? __pfx_kthread+0x10/0x10 [ 433.890965][ T31] ret_from_fork_asm+0x1a/0x30 [ 433.895751][ T31] [ 433.899085][ T31] Kernel Offset: disabled [ 433.903423][ T31] Rebooting in 86400 seconds..