last executing test programs: 30.168596771s ago: executing program 2 (id=1597): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000002540)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "83d47d83"}]}}, 0x0}, 0x0) 29.358472214s ago: executing program 2 (id=1599): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x200) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4a, 0x9, 0x8, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="2e0000002e008f866b29924a6f130000005a14060800000000000080a71802dd0000000000000000", 0x28}, {&(0x7f00000000c0)="018d4561b667", 0x6}], 0x2}, 0x0) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0xfffffffd) r6 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001000), 0x581, 0x4000001f, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x81, 0x0, 0x2, 0x20}, 0xe) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000}) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e26, 0x1001ffe, @private0}, 0x1c) socket$netlink(0x10, 0x3, 0x0) 26.901946757s ago: executing program 2 (id=1606): syz_usb_connect(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0xffff, @private0, 0x8}}, 0xfff7, 0x9}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x7f510100) 25.824360396s ago: executing program 0 (id=1611): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1) close(r1) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) getpgrp(0xffffffffffffffff) 25.823655639s ago: executing program 1 (id=1612): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x7, 0x0, 0x1, 0xbca6, 0x3}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r8) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r11, {0xc, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x2c, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0xff4}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x1}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x40000000}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x58}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffe6, 0xb}, {0xffe0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f00000001c0)={'veth1_to_hsr\x00', {0x2, 0x0, @local}}) 25.264758339s ago: executing program 0 (id=1613): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000008c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x4004800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000007100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000002140)={0x50, 0x0, r6, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r4, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) process_vm_writev(r7, &(0x7f0000000680)=[{&(0x7f0000000180)}, {&(0x7f00000002c0)=""/187, 0xbb}, {&(0x7f00000001c0)=""/118, 0x76}, {&(0x7f0000000380)=""/157, 0x9d}, {&(0x7f0000009140)=""/4096, 0x1000}, {&(0x7f0000000440)=""/39, 0x27}, {&(0x7f0000000480)=""/48, 0x30}, {&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f00000005c0)=""/137, 0x89}, {&(0x7f000000a140)=""/4096, 0x1000}], 0xa, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/125, 0x7d}, {&(0x7f00000007c0)=""/26, 0x1a}, {&(0x7f0000000900)=""/247, 0xf7}, {&(0x7f0000000800)=""/158, 0x9e}], 0x4, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r8}, 0x10) ioctl$FS_IOC_RESVSP(r5, 0x40086602, &(0x7f0000002740)) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0200010203010902120001000000400904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="00001100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) 25.258682131s ago: executing program 4 (id=1614): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x200) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4a, 0x9, 0x8, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="2e0000002e008f866b29924a6f130000005a14060800000000000080a71802dd0000000000000000", 0x28}, {&(0x7f00000000c0)="018d4561b667", 0x6}], 0x2}, 0x0) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0xfffffffd) r6 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001000), 0x581, 0x4000001f, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x81, 0x0, 0x2, 0x20}, 0xe) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000}) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e26, 0x1001ffe, @private0}, 0x1c) socket$netlink(0x10, 0x3, 0x0) 23.407898014s ago: executing program 1 (id=1615): r0 = syz_open_procfs(0x0, &(0x7f0000019080)='net/ip6_mr_cache\x00') r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000300)={0x17, 0xa, 0x2, "ba2000fc0000000000ffff00", 0x3247504d}) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 23.260976495s ago: executing program 1 (id=1616): r0 = syz_open_procfs(0x0, &(0x7f0000019080)='net/ip6_mr_cache\x00') r1 = socket$netlink(0x10, 0x3, 0x10) unshare(0x66000080) r2 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) r4 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, 0xfffffffffffffffe, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x38, r7, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x300, 0x0, @l2={'eth', 0x3a, 'macvlan0\x00'}}}}}, 0x38}}, 0x40000) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xd6) 23.13005193s ago: executing program 3 (id=1617): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@util={0x25, "b69ae7291245bfba3d2d2886db17a845"}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000880)="27050200340f14000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b000000000000002143ce554b6df654cb0173677c4e2eaa2eb5035d135958831197684b763f499a2fafc724413afe7af5b53e61532895bae8d3f0f02cc4e729883f078a2552275a1486218834476323059f91a91c500e035c5c70afee9d16b5acd7cd4b94e3600c9c69aeb79e259488e089b1c59bc6fca826d38a7b3229ccd5b1bde01e63f1edd3c0f933e5c02936de55f2a4ee254bbe8aed1d2260c97783b615850d488b7f0c4a80715bed3cf1adb2dafbb7672328e2300fa2623704da7b9889a57e231be318f5eb6d294a302e753e75b741b63e898748f228e6752d15bf99e02c3d366fa091326029d899c493df701ad6c37c55598f3a19e748f58475398fda5f6153cb11a4ffde399dc21f96bed56d31", 0x155}, {&(0x7f0000001280)="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", 0xdeb}]}, 0x800) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x0, 0x6}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0093\x00'/42], 0x2a, 0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r7, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) 23.117380654s ago: executing program 4 (id=1618): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x200) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4a, 0x9, 0x8, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="2e0000002e008f866b29924a6f130000005a14060800000000000080a71802dd0000000000000000", 0x28}, {&(0x7f00000000c0)="018d4561b667", 0x6}], 0x2}, 0x0) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0xfffffffd) r6 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001000), 0x581, 0x4000001f, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x81, 0x0, 0x2, 0x20}, 0xe) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000}) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e26, 0x1001ffe, @private0}, 0x1c) socket$netlink(0x10, 0x3, 0x0) 23.028918274s ago: executing program 2 (id=1619): r0 = socket$inet(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x59455247, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) write$vga_arbiter(r3, &(0x7f0000000000)=@target={'target ', {'PCI:', 'e', ':', '1c', ':', '1a', '.', '1d'}}, 0x16) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000240)={0x80001a, 0x1, 0x1, "3a8e07ca5de21f00713c8fa98601acc620004b0000002100", 0x3231564e}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xe]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000000}]}]}]}}]}, 0xa8}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rpc\x00') fstat(r8, &(0x7f0000002f00)) ioctl$TIOCPKT(r7, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r7, 0x0, r6, 0x0, 0x7ffff000, 0x1) 21.25397229s ago: executing program 2 (id=1620): r0 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5cffa60014006b03000000d86e6c1d0002847ea622e4dc49c2004e23e3f58e76110165f450e71b0075e3002500028d0f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) 20.990151073s ago: executing program 2 (id=1621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb701) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, 0x0) socket$kcm(0x11, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000080)={0x5, 0x802}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x2}) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="580000001400192340024b80040d8c560aff820fffff5bab003a0000002058000b4835ca945f010ebc000000000000008000f0fffeffe809005300fff5dd00000010400100030c100000000000224e0000d9af4c4ccf6c01", 0x58}], 0x1) 20.940301665s ago: executing program 3 (id=1622): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004940)="4f50356c9e70ce6dcbe3d22a41991ada3384a3cc61e92a72df663226dcad115a3308ae59bd26134ca5b1d27458f3aebf34acb004e78edccd1c3d66ebfda95d8369a12684acfd2a04e36c20ef64cbf1b5bbc16a9783fcf708a9b8b981d1439e1a70c847592b26218c9a35c8cbf385a246ac35fb857113366f18ebf2038f6f5fe538f19afed142f05dfa55e8e5ec4234f6bd050a4d3033bb36ec207606c74bdbb57dc854f6df4c8c9baa253c94555881384fe2f47514f5b07ec99616b751cfb680bc45603bd053c910f9cd9f7d954178f2385becf76f2acacd3a5f570f9ec36203fdd74b03259ce7df7c4c833708d24e1da50717cf88499739f009f6a0d0f9cfeee33134e807ff90cd8984a2f377c22595be32493ade61f85925cb5803dad77b642a067d357d05fd01e6af9a0b3c1d8e2f871bf2e5d082fb410ca5b5a8b67471a2024d8d8a8f54bb82fc7a858223aed1a741e89cd539823ff5417f0bdd5963502c243a126d3a9bbf66adf1631148a90693467a4d255260760389a5717c9b3c79a0057061c4cfe3ca8d9d5d179526090dad4ea4816f291bb8649ed07de9128e6881f581a7989c9533c7bb6186c1c4266f813ad201d0ac241d9dc7990092b0f59d11bd5d457f722ededd6a147bc22e11d28c48d80f5ed97b66eed8f974ad611c03c76420332deb2bdccf260c7182b5ce9aaef10bfad7241d285bf4beea9d3ffd4e5933c4048ca9a041dac8a712836fafe4988ec3849330c6e929f5a0520bfd21079f603b990986202c08f589c3017c10b087f8fdec4fc56d0f89c2b00bcd5d931daa4219e6efc054f60d0988a3ac98f81324d22b5909bfc1f4d1b7172b30e0ec3b21f776553a4507ef0bd813a94d76733e84b0c7067457650e9fcde01840bf5a04399cf4d40b4c66ac1bb55b1aca704afbae4db5744953acb0e6cb0448153f848c774f74282e6c541f9bd1bec0e1b5044423425f182b95949edc8074e257056241df49812c2cf7ceb0b8d28f65f317523b4a47b9e2b693a89ef7c95d180b318ef70b7ee2d6e0a0cad96043c1df61f09613c1cd6f6d6461a761c8ef9c1338cd918318774502da24b0b9d38030533ff6c0359d3b273a18815a1f0a71df5e6452252fa0ddeefe55e6f9d6e3f7941ee84d76143ffb4d32093351ed67674c9862c5df14ae5f430012ebad4d8bd546e8149facb0c2b15ae86f38588ee617ff2874a668e7f755061460094f8e7e56590ba3f30582fa5341b0339b3d6115d631178424f2d8698a2efd847a5567f54e67eb555d4d8a8b548edaa48d47a7b9c06b04d03ee1ecfdfbda40049d0e2eac6150866bc3102bcd5feb4a62b0ac49601adc9c19450530685d54cd53c654fa4bcee4862b010cf6875a97a77e8c6dd1395d440c003091f241baa97eb2995e363b54e1f23f143e3c45af005100fc582e7730c0abf1ef58170942740709f9946f1d29765ed85f3d13bdeb7816afff414d806d80c2033493d2f3fa80a7ad476037891feca18d7625b27779ec4cd8d14de8afdc6c428005513e795f2e7a1e3410201474d9cf4e315f8e05ba591b242f14094149bfe42812ee05e387b5e791107a32578e2a8297238a0075bbda9a4427f379841ea86508c5fba5e235ed4a3754c846569e9a329494d579d066777ec2f189de2aa55a3549e87bf7cda53b7e9af98355b04264189cc95205bf2955e4ffc692e0e6c48d816758ff322244b4268f69a0b72274c429128d8489e13064c925b9d5f3c82be62445860545927b2ea2f3e439888795780e7c4a2b3f3ff62ff2d25e4a44013f9df631c3a0b68bbad82ebe551bf4ff36f1a260f6347c59685ba09d9d9871ef910cce643ba01c5d3f17a50d7daffa2010d274da5570dd19acdd373b55e55701e638f8d31c6d31315a50cdeda2aaad2b71bccd321619120be8cc92dbc696d810b188119ddfb578054bbd343fd5e9e889719dffdae9488c410bc2ce68ec2f85a337ec8fd5bd522bde64b930813efdd670193d91b37fd93aa02f68f67e884130ada337fcf873a984d91467896a703e15b3718e6fd5f6993da9288dabb6f3876a6db06bd8be05b14a5bc63db5ee4f55103640cf30746cdafa8563f5e8c1cccbb58e538b484e0565ed140f2de8437a20ca422f173c829311919a2156d22f3b8bf349f299494c5e37283b1a373390e08df6a551c608ba42ee6e1577043adf6b9e7c0edbd20be866279cd9ae36af67f198e43fd31737cf70312776f4e695327b4fe957641cd3a46b48b198c32a8fd1998b20ace3d9780d1258b3e131ac51c946d022ddec1daebd8b2d225580efd68c7035b301860f6070daf273637e626c3380226a550a33a0346ebb3b87c2b26f15c923b9a490d97a05fb6fcaa5cab19101ce26adb3dc5bbd9604bd5299ceaa872a8ea956a48772852d5702ae3f322f8bb97e79805f7355b781c4fb7dc55e0f1fbc3125def8973302fb48052605366082dce1c8d92fdfa5d8f56f12bd2f73ae2c3c8a12215428861fdd247f36538c8ef0dacd594a709c656124fd8bdf36d69ff1cbb3903c35ae0a36129f64f65190fe37fa22c173ba32d22d61ba7411b3ca9d94a48022c0f0d305e5986cf008cc3e775b683ce5600f25f85dbed4b6c4a3a596da796b03d67ed072991ecfab88a8c7b5fced1bdd8c6049da0b3caec8e46eb9606ba6e53ad058cf8f7da4f107878ab0208c7324e125440d54749b10f64fb27b236feae37a427b287e0ef6a54cd5e864faedc4fb2125a0dd88ac96732ca025f5989e33ab7b521e6fa98ed3af16c83a6661864dc067b9072c980f64e2d008fafc676e60a26703f1fc7330a0c9503d88872d780bebb6c815e52608c04e74e48bbe66e1c0dab838f36c705957cfaab2ed98692db57ebac0c48b257e9386a8584aba15f86019e20cbcfe0b3b57be3b3407c48256e4531efdeca186c93bc3e9bfbc8f45ec864f32f7b38a63479a3bb4fa75a8b25f606f35b1147c1b53ebfd590418f926bad68807279027617af0d06651e5f977c615055f4dc91819bff755f8e6a2e0fb46dd7b1283de2652944d2b1cde5c72f43fd6456149ab2bda78e4cb8de135c160877e0b0820f95c4524e4cd386d44991055ea3accd2a698fb23793e57e49913f3cb86501bce08795695bfef260dd2d14761e404ce593e3b1e661a01d16b492a3cedf683736840178d08ea575534865c699bef830dbd0d259da79e5c05d7003af642412fa55b59ee5f2c032f1919af3c5067afe6876b154e29065d14224481971f94bc5ed45e48371053d69635e78b7a46cf76d999418011b58cff533c009316e33e87093117951fa4821241eaeef61d1122cd4e2962d6596259b7acf9e46d23d4efe9739189d99a9cf8776a34ad90a6e901872fd377c4f58886787baf9c2785ea437aa54195fbd34f2c5f5b4c4a76a018f5689feeccb6b153b34fc23cd0a8fa0699bff806521cb11172e4d4d45a1fad1cc8c4646b1846f1ba04f99a91db12da738ac1ee104ba3193119f325c600ab4f10e1e664dd7c17e285924487d394c7323ced471fd42728ceb9c25822885c1c6ab6b012d7a9b876958b2819e1a708afaacc537e6ac588e58c33934cea32ed3bfa27bb3d63554539e19bf69f30d03e0f47db84132a39a6dbbfddfdb673dd5cabe21d6d552317db8be0477536a69e2fe4f2e9a772dedc8a3ef34256565090c488c08fef2a3dd247fcbc2864d1862676ad5cfed2fd86871cce47b2ba28625ee67dd7518a6da3345614ff18307f20c27f68a69e4a1a6a3c8f76cf31df45b3b0b660aadbcf9698a32d36829c8aef481b09dabc8c9e449b96a2571af8eeef04bcb1785b596709f5aa1ace3804fc703ed9ec544667f350cb8bfb40a86caad45feb77d58aa1888f203cd963bcd9296feb0b68e0a695ed5cf8e7bca26a77d2bd61662f07bc721233a868805202469d8ee504be1d7cf135bc1bf7a215bbb96ff5514eeba1c0ffb68e4b3d6c20e1afadd2a3cecb002fc5ae0c59315dbf8f775ae5c63da31056a9c088e18477e2f925f7ff88df2786e8d014f0c98c58f218e931cd8cdb258c4d8ed82b7f9beab0db9ae0b35b2790ff7e02d11fcf992b365ce82b94eaa0d5b2fec4aeb984f29c6af84e10ce4aa6df7e9c6b0ee842027c8d2552efc6b4084ef9af751524b3acbca12c5c313381b443cd44e862d8c8b0394dda05aeccda371226ebdf5aed6efd6dfcba73b09ae8e92ad54d4b43db9b7f84b46b307c66a4ec69933e47ef22244250f1c82fe42683fc13fcbfcd1c2ed1b537adb2e83885bb368209f89cfe8d4bc59e6df61ec794fa310f290e56320b39fb843163752a726240236b3a45b59927333e94d0c0b30a862d61c6144ac0a59f96e08651fba2d299a37a1a1010ac12ead549404421bce2b95a05d54d44f0df5d08ac469cbc7e1988e4fc913d98e3eb9a8102ed7d40021274948acf58a10c43f1078076e36ee7cbe548638b273a40347415d20dd153885b6429af1c8e82d8d9f22bcd5b48f60484aca751c29c0ac031001e8d5dd49a889665e4ec41e257e8f3013eeab0e382b281c3463c035d3412a0ab0fadf5753ed735f250e56f24bedce1748accb4af749b12f8cf660127d7b9e710f19483cd9bb09d292355103188625a5fb4b81f22a87498d63a5dbdd78e64b4d2feecba4a3dd881a1c4103f9697e09a23ed1db866e40dcb51aba96b83766028b653cabc365fe5694b4f946ad32d9681252373e6017a9413f5fd02ec689dd9e1e179fa9d607b6a8ede028420b0fe6da5f9a678b3b717df1d48e862c2485f789947dd5baf8c3a4a641e460279827354fee33d97bea7ed36546160354bce0f2f58815e28622590418b99b1499250d5469a66d1d461852b384e99073906c64e0aba5d6a0dc7813ff58c63d32e3992b0fb89be5811a646056714718a7039cfbb82678eebeec54bc4350ea85446ba062e53e239d74509dea0d2c1d5c803e333d37761d311f5c402bf43e6b8d84d036d35c0fbe98d7eb9d5bc6165a5771d048647ad16061c55e57c53dbf64c1a08a2a639672d650b4cc6c0f90ab3b8b3ebfc1ff1844e9791ead72b167ef6b57b81f7b6c751fba73a0835edb2c68a55b5e2d2b2c350bac375153c15e6a1180f09f9c2b984ccab971926ad85980026c4610b7dbcae8bb86b98136ed27facd94e571270187a6bb194cc0ebf24b7acada441b23dbe380c7c3221d1677e5af7bc81c3264a958fb5ceee61e4795dc863da2f13cc59a2fce73070af121983410df1a99fdd864bb62d67c30ab0a98300597d7160646bd2759b950bc0468fe74918dca8fc59c9dbdcff736f0f61d234328f1b560bdf6df54663c7f80be5175d67fc37eb85e491650cac6a8da06d3dbb0743ef8d0a9ae90d2d67c11a77ea52545d53c64991b9005b6e3aae54f1cc39672ed59f3d881d65d6b9da133c1201c105972efd039d2210bafbd2f9d964459a4bc72877c51b7ca9ce6fae62ec3bbdd6d09e4fefaeaac5145b141eb06e7c9537e58a7e78526dc7d0511e399ea983d471eb5e19a1ebd5a0a1149d48afa688507952df4afd85f8c296e678a221055e89451e0920f7fd38ac866a54b932a0a608d3e2126dedba84af8fe86f719647e9fe44f4c85641dcb3347c580fa2e1d6e863ca30625f56da0b6125e6c35075451eb93ce3ce6478c474dae7df27737fd2a37fed7c1d9d793cde4728d80a3480d19771876375be29cc9f9d30433be1c999cc6d6b4295b5963f248baae070c609d49a68ef7db094a7c3bb442c9908b7251a2b1d3058bc71c450bacb88bbded6c99943b618fe9d3c7df4834323942a9b13ea821ce062d85904c5078156e3325da50bce2848598eade14f121ee9de8f6b98ef6bf592933103f567cbaf4b5b082b24ccc461118bc081ca925a0f6d0ab84b9eaaf64a956af511d254d6d1c09299ece040905f7c8fd1d6007907ef795d38744a5b0d9476f7e59476addf0b5f4abb0f7da7b5e21eb9842a7df6b4466913b41a08b06e9684ddf5ef1ba3e730f12be4c80d79ea573549dd3badaded7b7a9f5274e44154ddddf3907c08b977b19820eba4a5a0a40bfd4773d91f3c6329ddb88dd923e2b611cf4fc64fed3c98f9402d2a6c5179ace6f0ac50875e361cabd6610dd789138444ebefd72d0608272716a2359dc3e660ba047970991ac1aa83a665bb5245d9fb16eb4a8db99389d3f1386af7f2931fd09979475f0f4489aa99e6628f9cea46790be34f9d7e3aeceafc2b174650850fdabd4af0e6f84c8620cb0bba96b67f1599fec9406060be53b0c0e626e5cc88b0abb74f2c99f3157076e68cbc6593c544862aaa43b8489c1bf6b0bee80c9a608619e4641447d5422172f46774686b7efa3cedc8a837fc7debbe8598874c52c48c85df82e2f796daf04489458e74936e95ca63aa1594dac0a6708462f342747a43ca99fce71488794166fd1cedda1d444ca877ee10b56194a3ebf2114c2924210de0fb0698a6082ba171145150cf0c433adc7617520ca7626a9842929ab1831da8ccc128ba534ff27ae20f063d16b46f67654e372217e9d5f908d35cb1993b23dd4a83796009b68533270434744bc18b608c3bdc0ffcf64f691455795628987185ae688994e34541f630179533cf6b6ab12d0a150761aa490652a987e9906050c3ccb1fc677dde544296d35410c2f8b70bcc8b1927869db81cf1cdcabf190a9e946dce8439f09a98ae39e08f4d54a489cb7bab7795173c3c0dd0be506f9f8d38425b4e78882a028fd8fb2b9051d3eafcbad61a4a78f4caeab1c2041cdf7b55d3fff546f37beb9454c795e9e19a678cd087d74191e27c8a35584dc548d8fc57c5f92ec630723b335848ea5405c56631d58fa365d9fb88c2ab13d262403518dd862e9111bff48db9554fe512e2e40f96c47186aab5b9365c09692c7b2ff2e1bc5514726396abfc36263922e58be98abd1ddaef1ad23fb0f6f31e2c67315fe19d3a38477ce82d965b2c6c14ebb6872eb2acf6ca9a5860c2ea4d691d46b9cbd19352cb6b328486a07c6bf38af80e423cd6394bd9b7fc892011672833ce3d4c02561887a546d27837ca2662b5d72f595c035018a0511e22b72b8682ab65f8d59edab36389c69b5d8e64c35dd9dc78e6261fa3d141258ed9e9e8553f98e152751d5c9ba8712647e46b093a61984fc08172419a5a2aa08aacc487af4a7854d2ed34c812e96c3c56d8b7beaca74db439b1447b5102e6f66f686fb91e16cd82dc52182bbe5a6f2648d09163b3ef9c17f1b4c9867351913b2653cf4e60c5d44706245989da8f0a8392c941af9d7067496809102608fe8b60734b0c90da122c3432b40eaccafed5f5b37948dc9764337eb7016c24d717ae5ecff4d4f8c5c4aea686680a4b5a79b7f254acb0b46530782484cf8041fab719a3549c70767574c7e6aaa87e60b384ce53180540a6448e2c6743890d8eb6a5c38255cf6f86343bb82e2e57f2cd89ff8029e60267f821b7994199c741098be16e9fcdfd08d76a150761c6094776e270833d8d0cb83d2aeb13ecf2146dd46768338b4ecd8124252c2e620fd98b11d50728aed97a475c36e92b07a12792be948e95e3d26d15f4cc7c669d23d93f7cbead515f7f996afe9119415ed3b03d15e59474ba9e3c9a7c1476f3b8f66c099d85689785b712e82316f5afb6e16db12911b2d19b650e547608ea35af216561d61f36c5bcd3af7f64d9c56732f999e6e33c6e63aef13b3cf3ef69c773b4d0def25269296d535dae2948abd7918b95ffcfbce0236dac8b08b91d91aba716668bd5556d1aaf4e50d296af985a52cf35669b3aa29ea192c9fb34c471f65ec7242648c6fe22abafeb2b9bf349276eb55d0a9ec35399d98aa8ecb5613ffe530c6a5b93d4f713f3256e7a74cbf40e15a402df80c2bc287fc7ad1d1f665dba5139f56a865c0dae06048698a886da045ebb6bdddc29755947d090a6cddfe14f23dc400245211d55314160d2d852a659de834af8e24effd2e0396982c03e29fb94d3f10cd8bd57bbbb9e0945d5deacc5b33969aea3f7af0821327b9a976e8e4a82a41635c4137dee27741ccd001e559f6f6165e0b2d8062d352442689e7aa747438412c4a43dab94ac7f839eefe38c81b8277e565143e4a550c122ab0eef1cf3ddb6e41fd95ec763b636ed3aa62a85da14b1278d93d4e0ce8efb5ae1ada9dccc8c07dee130991098521bdba59399f7f0ad5f3349fe60745cf19f84e4f060a1efadd7c0a864177b46ee853a5d51e6da6382228cab564aee9a688f96e4f0e992dbb9be22629204910f4185085461ae92c5fdda4683212b1f8f03d6730dcce43f0932b6ad3866dbaa9e40493889c7857822e8ea1d498e2690bd232e4a383dee59071fe7cbc0db53d23d60ecf1a7adab5116eda840c57440f1e20989202d6b010d0fd58dc57a83ab1f5ee19c79d7d0819995ebaa36d4c952a861c0958911997d84f2c249a0e29f602966adce8f41f9b8bc051bf4c127aa39b26632e81a00b365d6447725311bdcb9db6a5d62aa46c2049fd2d54b670e308c2f62c9c58a6343905f34fb7a12fdadca999ca13e7bbfba72100ec625eec11d9ffdbf898d57ce95fd606aa57e3d259c6889e2af4e4ead2d9c38327b42d68f65453be8f2798df47ae392817ae9ae6200c3659ee9b8622c948943e5aaee24be9d35a333a20a803c18d3a4f18c22018f4a1f4dca3fef010f00150badbf90c04bfcba748329e835eeeb0783cc2f5246b01e853a84e391a9bf0332fd6fac22c64b83987b51040d09110d0b66a24fe213c72281eef8e79021c9b445056bca406ba1a4f805672f724247b7b2d0bc712cac7bf6e7a8d9a3206762633fd663760c4183309e3209a017514f7f23b350d80c009ae501f46e053b2eefde5f2b8a7ee1d3d4128cc1fd9cd8fc42b5504e2176eb802b21ae7a57d6e6928b82982fcf96615bc4d5b3f8cec1e4a6193961ba5493d9e992ffc933aa3e0d2c47b1217e199223d48e69800ed9a4d2fa5d9d4a8f16e86062b0ee2ca9f11fdfb4331effbda733a1764136e192f49a439910d67056cfed89d05558adcdf54e7eb014d510c35250bf6bffefbf7c3f6ac3d4f26fa205b8857f38256378006209644587d4c56a06eebbfe9cfb0d20a214797699a8960db62dcf84595014a8bcd60d626bbfa0d0647d966635f24111f2ce5a9dedadf34f38217879d27c4e9745b068fb0acc30d4b9a78f753aa286a4cb08ee58a451bc47f64b41cd1cd602db92f691befefbd139a1f919d275dad6e4fef7266999f1ec6f0018435b578032eba39a15b0cdc34ee53acbacbf4a7eca103bec5ff72b08068bf2183643fa24ff1aa69d5125a0d1f666d648550193ccb22f6692590ddfac8866f63fc33eb14844ea6b3b4e18bc613c1d6561506f933d1e8f72b7aa43f7c47e34b921459e230ccf7e333215025482e67f1df4db4aedf4566d5783a64c4511367b69d08ee5076878a22c8db871018ea8d581fb5c0f9e6a9e61f2dc9758c06a6647e4f09c1eff6061ab095b76a60a22ec7cb8a5528d218ef3484ac7574a7b3f63915d867e26b155400b50e1cf6a9d03b8a10ec8e2c4768cf1d2c02de656e7114ffc030ced3f94c0dd0b875cb1ad5cd64e2cf318118d50b45254e0a000a2cb09627489840ce0f4f7c9cecb8e19f01ddff7573a4183e4ff4f85991a15dd5c677f940b57667728b53126a4b45b53c25b6bdf6902ff5ab974995709babdeea1a5c484463fe349efe694c02035a2c149eb3fd813e4d71398503d0a4286443891cd0caf5d9450e27c9142b77565594935c590f44eca1a7d0a74d7059e4017d92e3cb53d3a13f6de6d4ab62800ab64afedfe678f500d8ca51c4e88765247fe88160e4c1ebebee15d0dfdcb138f81d290cb77c0270d7a8666de54e0f255454df5877c7b78bc694175a7e6cf5ce997c9776c208b03b6e11df17d1570d17f7614b5c1da400871268e010727ee8c54db25736d2bac7c56eabf0a8a3aa1e1801f00d24b56f2e30559c39d6bdd655c0e2bed036b616bdac6f11feb41d33608bb9d262c069e102e3079b2ba55614ee7ca498311e72897544db3e6dcb2cb3cd6f1ada2b4f71318b2d5b443cc76907774eaff4c7bed9c77fe264058b5becabc79bf185c0b5a3ad7aed92c28326a188328aedc9cf405541cf2ea2941102cfa5b52f261c550753ecc1ce767015e782f74f2ab3b913d7aff321c138368f77239fce68e9205718f9a87cd8590d1ca56659373e18d951744774b69831f0e51f04a1c5a86462b168890f6f5e12fc0248aeb245f26885a504a0962fb95b1448c629c3c3cb36d3d15bd7d56076c867002f9e58e12fe0d2f86b7508215896c839ea071c5507f30737e34d791f4614687dd0aea9c4debdc95a7dd6d436e9baaac51bffad1ada7d683387eabc5fd384c70469c971342599c6c90c90a57b23df95c7730e25220a8f830d9f9f978945859a1267072a8475d4e5e5011ce6144a6eec6d01d2be2cc558bffee47f7feeb87aa4c38aab5938b444e314c2939322fe81aaf0d32ba9d1c43c4b9f85c84e9284a50a169c65e2100064eb587ace01e361ee6c1bad211867dac692932e23e84795bf6cc58dd06fa1c1c31544e5dce729bb25ca3691b9470d5fa26c627e55127a9fdd4028ae2320192c0df9061db198445c0fcadca9862f0c29f3e62898c00479d0e8c8fb1d619c53ce8181d2b14240da714f82c8c50815ce059fc954595036e41d36bca909b6c8555d152c13ef5f4ff9f6fe7ac6632ebdcf19238d11c2359e6ffd7dd2053378e57ba44704eef580aae7cdf553eed5b0c6892b86e522e6a0912c8d9ccfb639e1f6ea7fccd6c9d04a676ce7e17642b61125329665e21aaa704b2679d698b32ae8388f1f7438e6b50b3d1c5dda7958e0be0be4e286a7a37ea3a6863a99bd4056e80a16866c6d6a121f4d936db302d5335033412ada903ad9bc492f3eb61b3384a4a86717df9e517cf593caab9b4ac8b229a80b934783cae88357c4cc7da8f0d819ebd1eb2961acb7b014411d23ee42e853e85f4f3863005a0a8356cacc15a26f90c549cfd307bdc88bf1c5a21778301ebd20054cfed89acc59cf29237e6c382f2e4f43e6eef14dabce06df261e2bcbadab8c60b9bfc684aceece9e1cf2f0b3751564a037aed891c2686547cb01c6982f073cb0b2882860b6daf111a034f5738d3ea1f67a0e7f4097eec1f9c355c6a9cd5646feed86f4ba075969ad71406f56e16fd5f3e05fc05fe18ea724d114aba4a2d7f312fc77b7b0d1616b00a124ded31251f2218eb95fb444241eca65c051205e7c1a04a6096a0cf9b9a8831907d569ec6de4a92610cf9147bfc0838e1b232d1642d16dcfd7de72c0ecd45c45506ec5641b526c40866c465e8bb64656677e8c1c81fbb00e26b8f775065298e6274a8ab8ca63e8c43a90edce5bede53526e7c2d37808a010627635e1b0d397850edcf6108e5ef1d85233be77b3838a4efda50de1662b9ee643416f92be4896bc6636c9eeddc4a87eb2b5e44635331aadd7cf9a49a4218e941dc76151c6d2363083fcd3f9cb5afb32345ad9b307a5625122fdca8b930cb7864362d890ded2df208ffec06085ab9404199ae419475360abec16d28", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, &(0x7f0000001240)={0x130, 0x0, 0x1, {0x0, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x5}}}}) ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000002740)) 20.768726045s ago: executing program 3 (id=1623): r0 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000000)={0x2, 0x4, 0x1, 0x0, 'syz1\x00', 0x109a7}) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x57, 0xc2}}}}}}, 0x0) unshare(0x2c020400) lseek(0xffffffffffffffff, 0xfffffffffffffff9, 0x1) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003400)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000023c0)={0x0, 'veth0_vlan\x00', {0xffe}, 0x2b1}) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000000500)={'syz1\x00', {0xb710, 0xe, 0x3}, 0x34, [0xa, 0x1ff, 0x8, 0x3, 0x2, 0x8, 0x69, 0x2, 0x0, 0x874, 0x9, 0xd4a1, 0x3, 0x3, 0x3, 0x5b8, 0x2, 0x6, 0xc, 0x7, 0x51, 0xbe4, 0x100, 0x1, 0xa, 0x8, 0xfff, 0x8, 0xb, 0x80, 0x9ad, 0x29, 0x3, 0x5, 0x1, 0x1, 0x905e, 0xf87, 0xe2ee, 0x0, 0x6, 0x5, 0x1, 0x80000000, 0x1000, 0x1d7, 0x2, 0x6, 0xff, 0x8001, 0x10, 0x2, 0xc3bb, 0x1, 0x1, 0x5, 0x1, 0x4, 0x2, 0x339, 0xbbf, 0xfffff000, 0x800, 0x8], [0x2, 0x100, 0x7af, 0x2006, 0x5, 0x0, 0x5, 0x80000, 0x2, 0x6, 0xa, 0x10000, 0x2, 0x17, 0x20, 0x2, 0x5, 0x5, 0xa, 0x65, 0x9, 0x9, 0x8, 0x4, 0x7fff, 0x3ff, 0xffffff01, 0x8, 0x3, 0x9, 0xb6, 0x7cb4cb2c, 0x0, 0x2, 0x81, 0xffff, 0x9, 0xc5d3, 0xa, 0xc2e, 0x7, 0x9, 0x9, 0x8, 0x2, 0xfffffffe, 0x7c, 0x9, 0x5, 0x5, 0xa, 0x5, 0xc98, 0x9, 0xffffcbb6, 0xd0, 0x1, 0x5, 0x6, 0x1, 0x7, 0x5, 0x1, 0x6], [0x4, 0x5, 0xffffffff, 0x200, 0x5e4, 0x6, 0x6, 0x3, 0x1ff, 0x6, 0x9, 0x3, 0x0, 0x10000, 0x9, 0x3, 0x2, 0x89a, 0x100, 0x2, 0x2, 0x1, 0x3, 0xfffffffb, 0x7, 0x6, 0x20000007, 0x9, 0x4, 0x0, 0x3, 0x9, 0x0, 0x2, 0x80000000, 0x0, 0xfffffff8, 0x5, 0x0, 0x40a, 0x6, 0x0, 0x5, 0x3, 0x9bd, 0xa, 0x0, 0x4, 0x7, 0x3ff, 0x0, 0xe5c, 0x1, 0x5, 0x9, 0x7, 0x80000000, 0x8, 0x1, 0xffff6139, 0x42c0, 0x76, 0xe339], [0x248, 0x1, 0x9, 0xb, 0x4, 0x7f, 0x6, 0x2, 0x0, 0x7ff, 0x2, 0x10000, 0x8, 0x8001, 0x80, 0xfb, 0xe68f, 0xdaba, 0xfffffffe, 0x52b, 0x8000, 0x9, 0xff, 0x80000000, 0x8, 0x8, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x7, 0xd2c7, 0x2, 0x94, 0x80000000, 0x8, 0x0, 0x5, 0x0, 0x8, 0x6, 0x3, 0x7, 0x0, 0x7, 0x961a, 0x1, 0x7, 0x49, 0x7, 0x255d, 0x1, 0x0, 0x9, 0x5, 0x10, 0x7, 0x0, 0xff, 0x66, 0x90000000, 0x7, 0x81]}, 0x45c) socket$netlink(0x10, 0x3, 0x15) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 20.567033317s ago: executing program 0 (id=1624): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) socket(0xf, 0xd3b8a883b9ece55d, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r5 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r1}) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r6 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x4, 0x20}, 0xc) syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8000, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7c, 0x5}, 0x9c) write$cgroup_devices(r6, 0x0, 0x9) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, 0x0) 19.804892759s ago: executing program 1 (id=1625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x10) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 19.493350478s ago: executing program 4 (id=1626): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="ba2c0066b80f6f000066efbaf80c66b856790d8e66efbafc0cecf3663e3e67f082b58e00c0fe8b2665d2810100653666f30fc7b509003edea60000f20f2378f26d660f3a40ce0a66b856d3403f0f23d00f21f866350000000e0f23f8", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) 18.564622175s ago: executing program 1 (id=1627): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x29c, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000841b7420da040d39bb2d0102030109028a020100000000090408f80af179fa020f24020205000d000cf67df8e6988f0724014004000009050c0340000e040809050201000208066c7c0f15bf333a2cfa4b5988a994c5a0a791e7c152e54cf4a7365652fbca61e1134d5344b757ffb0b23324a6f46d44bc198b8fef8717c0cdb48f2468368cce7eb19d9b12148ac290d78d5eb28c52d853c2d68a7990979177a5e8ed511a5d4486e988aa026863bc5422790acfb184f36bbf57848a8380c981450720e4580725018076ffff09050d100004"], 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x8, 0x4) syz_usb_connect$uac1(0x0, 0x114, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x102, 0x3, 0x1, 0x2, 0x20, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb5, 0x8}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x202, 0x4, 0xa0, 0x9, 0xa, 0x3}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0x5000, 0x3, "d5"}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x0, 0x5, "f65b7602"}, @selector_unit={0xb, 0x24, 0x5, 0x2, 0x6, "b24e8e57a612"}, @extension_unit={0x9, 0x24, 0x8, 0x3, 0x9, 0xb, "ca44"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0xfffa, 0xe0, "809f63afef674a"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x3, 0x7f, 0x1, "7608c554655d1db169"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x3, 0x65, 0x7, "c8f4"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x9d8, 0x1, 0xdc, "c9a1217bfea1e6d7b3"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x38, 0x4, 0x1, 0xba, "", "7806"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xb, 0x2, 0x2, 0x0, "85"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xa, 0x8, 0x6, {0x7, 0x25, 0x1, 0x0, 0x7, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xb2, 0x3, 0x2, 0x0, "60c1"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0xff, 0x94, "8f", "a0"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xc, 0xb2b, 0xe4, "9c0770"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xb, 0x9, {0x7, 0x25, 0x1, 0x1, 0x92, 0x800}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x0, 0x0, 0x5, 0x10, 0xad}, 0x5e, &(0x7f0000000200)={0x5, 0xf, 0x5e, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "888900a4f4a45d50511a959db17aac62"}, @ssp_cap={0x14, 0x10, 0xa, 0xa0, 0x2, 0x40, 0xf, 0xd, [0x3f00, 0xf0]}, @ssp_cap={0xc, 0x10, 0xa, 0xff, 0x0, 0x5, 0xf, 0x81}, @ss_container_id={0x14, 0x10, 0x4, 0x4e, "09fb63d51f70686aadb5b635a95c50b3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x10, 0xfc, 0x2}]}, 0x2, [{0xd0, &(0x7f0000000280)=@string={0xd0, 0x3, "d8fb01201af8b4d0cdaa1b5e05e0b3c421ac84268d7fd6389069cfa83946f93f8fd9222a488f9f297bc3ce63f223a6515966e8edd89e8170641efd51bce0b67e6fa8454392f003142e1d253f9308f4b2f70774ceecc0740a9535787916b8a9f4748a19c5cf4284a5aab7ea56f936b9cfd508c83604d94a9cc31ca4f47a02fa06ee52225747762f74f046b7cbc915951f4cf50b2ae42bfe6ea2eb4137af009fc15e908edbabbf6cc169aa29123ed2345d5a7179f6f5aa53d7d2d2c060e0c9ac26a97c6c0bb21cc10366c41cad58ef"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3406}}]}) getsockopt$sock_int(r1, 0x1, 0x12, 0x0, &(0x7f00000003c0)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 18.51757449s ago: executing program 4 (id=1628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e25f01403767010066de0102030109026800020002000009044a00037d998b07052406000005240000000d240f0100000000000000000009050e0300040200010905000000000000000905feff"], 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_setup(0x5, &(0x7f0000000000)) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfffffffffffffffe, 0x101001) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x2, 0x10, 0x2025, 0x9, 0x6, 0x0, 0x1, 0xdd2fcb245114ab72}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x164, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xfffd}, [@NFTA_FLOWTABLE_HOOK={0xf0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'ipvlan1\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x3c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18.04916438s ago: executing program 3 (id=1629): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) landlock_create_ruleset(0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) close(r1) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 17.844661626s ago: executing program 3 (id=1630): socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0xc01) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="046c284da400fa"], 0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001780)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[{}, {}], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x7, 0x4}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r7, {0x10, 0xc}, {0xffff, 0xffff}, {0x2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x40440c0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002"], 0x1874}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_emit_vhci(0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x9c, 0x4) 17.011512023s ago: executing program 0 (id=1631): syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5b, 0x200, 0x1, 0x88}, &(0x7f00000001c0), &(0x7f0000000280)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000880)="22cff5", 0x3, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x121000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000040)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2a, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) r4 = socket$packet(0x11, 0x2, 0x300) socket(0x1000000010, 0x80000, 0x0) getsockname(r3, &(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)=[{{&(0x7f0000000200)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000004c0)="a57d55e2a1ddf8cba458c8f8a54c8a9834d58dfb143bbd63ec3811240b114236d9c99e0da69fde8f642a737fa6d7c4122fd2b95fbfc57a9cf3ac8d4488d75b56097b977ac7ef900936bb7710758a116360fa41e7a7fe173e42ae41badb082f72906ed271a9db18077c700f80410f1d3d9a90291a9c87e3dbf9b30efa4022d160f30e522941b577147e2593a1612bc7b27c7f88f5563d2189b4480de8d2bfc5921b5db60a6a6d7b740031a6bf0ee8a017c7ebc27258854a1b15722b1d58", 0xbd}, {&(0x7f0000000580)="4b0cbb4303cf5d702d637da0ee976966e35986a3ae8f8f1393acc7499a9e2514bd2942f182e569bfc9e9afc74181d23e1078826020504a1b0b73316c49e70243d27cf5b0ac4bdd4f6a2fa481fe85558b1a1eb0530c4f2c61393c19d8002d8768df5e520c2c277886334f4170bd13857c2340870ec065830d25f937bd46593ec3a41cbbca161f393854059ea4e99651f9d6b77b54e1f34a00210f8c82d58474b8", 0xa0}, {&(0x7f0000000640)="d194bc59761ddd8692cfc3b67474a43c833e9227b363b5970bd33e4ffd744dbed562e5ad732869176f9c069eb915e908ca2ca70353ace40b525bacbf3ddeda155b8ccf4214ea2799f58e1352fcd957577b95e9481a08a26f7c1e75ac8410171c5b", 0x61}, {&(0x7f00000006c0)="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", 0xff}, {&(0x7f00000007c0)="1822b18c3bb347153a31b8e3efb5f86eb64e947df95fc94b7186aed1a603899c786639870b61760281066711766d71787bade9fb81ba2d67a18945d5a8c03f844c98b6e1542b51df0323cf6a3735875ec1d4b4873abc9a75e16b2fd66f974573245481a7fde99c409c36998c5a7a50a3ecc86534645f01a8af92453b964c6f296e720ab723c453a624b0", 0x8a}], 0x5, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010102, @multicast2}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000000940)="4b737924111bb7c71b3883beb098fd10e47632296828b1bbe4f75950a867d8818dd9bc3178c845749a665947c1a471073d8587a0c51d4b1c57256b156e67ba83b7a59e1215676b8426fa320a6f15068fec1966d557ce3e24bfd056c90a633f1a9aeed8e1ed6ddef15223342644f7df8d95efd564542738a74d6d47f933307da7c14f2f308562c5bec1a02362d049b71ed241a91371ba282ec5f64d388d270be707fe7985552ddb5c1e3015b852a3395925c9d8eb1d036b063c19e2a437b861bb8305e118be162798862109d025d131c0746415b9ad5dbe326d67a5ec62d86739c7ec61236235817fda3ca996429986af5776b289a7", 0xf5}, {&(0x7f0000000a40)="d03a4ec968e78a77445b146fd26a91a7e5beee7a20c7b0e4ba2ea7f45b697810380592e65dc375c37b4da4db47824c3f9a3da6e1ac8ca533421205cc749046fc0f202440b2ff9597beef66239e21db8f2b24e9de21e704c3d2f3132117ba938b1a1562fe100e38c7a28275728be3b7258863d453c23a91d08bee0baa0580802b128b22273dab8f2ece58780d7565d6b676e745693e35ed", 0x97}, {&(0x7f0000000b00)="2f10c428b34a587082825200b0dfddd6724ad95c43cc20e5c7cfc787e0739543fc89099502ebb09e33ee5b388fd570927656dbf50d53e3dc536488e04266beec820158a0e207ff58da95b5d9d110fb330b7d0dfb287973040a7f80d7b79493d0d943566f1ea9e6953b677f238a346aec7c9473ef0717630e3bc2149cf4256b35d7fd2ceb3fba33c6a9aff210e920b94cc30b37b6cce4172893ba2c27464d51e5d118c8a97dfbd07507d9fbcd120d06d9c96e3ad1beb6e85551d16b0f48ba0f275e89e47633f211e2c5267545dd4f364b17253dcf81afc39dd313970e1f1d3dd4abdd9b3d", 0xe4}, {&(0x7f0000000c00)="e2b37dbb9abb1faa481f83734bf51b916bd3e4cbaeb3cdb355f93d2bc0", 0x1d}, {&(0x7f0000000c40)="e1fcb4d1f9b9a50077f645782fadd9448b7bf298598f9cf943acca191780039d77afd23307a17b626d25e9f7e886550ee5c477e53bc525c546f6cb7e149c5bc12ad68694058703b6ed1d07631d5ea4a823bbaadf6df7a351a5467c373629ed6fc13d97a68cbfbf920d562f7132cc3ddafc4d8d0ab97caffe43d79a98def6433045b3727a7657772a4d4d95135483c5dc3c96cf8124d05e84cf057168f5e93a4cbc14f59393600e39b308334d4a2958387a0b4973817d6984b863705d30698ef1371eb9b8f6868c15239630f3751d18b0ff5de6ee2629977ede40738f", 0xdc}, {&(0x7f0000000d40)="b4558431d60dd29b6ae2b0f360e87c39d9c4c45f0a61cefe32b0159314b947043cb5ac85e3614571bc1978975e0750ad52c5c01e9cd5bd8b9914980eff0bbac7efa78a8c01d020321e6eb638add03d096672cb710dc5d72d696d182a6a771398e1310d02237569947d3e546c3155cb1342069414bb82605fe7e6fee1301767b7152ba60dab8f4cd47ac4f01fd97b034ad23791041f87ff54038f965fc4741d7ddc0deaa8c59a8eed41759ab38fa532d92084a93b52bddd1564ad", 0xba}], 0x7, &(0x7f0000000e80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x90, 0x0, 0x7, {[@timestamp_addr={0x44, 0x44, 0x67, 0x1, 0x0, [{@loopback, 0x7fff}, {@broadcast, 0x10}, {@private=0xa010102, 0x84}, {@multicast2, 0xbab}, {@rand_addr=0x64010101, 0xfffffffd}, {@loopback, 0x7f}, {@remote, 0x4}, {@remote, 0xffff0001}]}, @ssrr={0x89, 0x13, 0x8a, [@local, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x27}]}, @ssrr={0x89, 0x23, 0x78, [@local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1, @broadcast, @multicast2, @empty]}, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @private=0xa010100}}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x130}}], 0x2, 0x4040010) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000002c0)=0xfffffffe) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x3}, 0x8) close(r4) unshare(0x42000000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="050000000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68a"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) 16.452795304s ago: executing program 4 (id=1632): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000003340)=0x9, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000300), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r3, 0x400454cd, 0x1) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x89}], 0x1, 0x0, 0xfffffe7b}, 0x0) 16.429478857s ago: executing program 1 (id=1633): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1, 0x0, 0x18}, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r4 = timerfd_create(0x7, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x3938700}}, 0x0) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000040)=""/52, 0x34}, {0x0}], 0x2) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f0000009308405af30b00000040026fe695"], 0x0}, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x2, 0x0, &(0x7f0000048000), 0x0) write$vga_arbiter(r5, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='unlock io+m\x00\x00\x00'], 0xe) syz_open_dev$sndpcmp(&(0x7f0000000000), 0xb, 0x80800) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000a40)={{0x2, 0x0, 0x2, 0x5, 'syz0\x00'}, 0x0, [0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100007, 0xfffffffffffffffc, 0xffffffffffffff4e, 0xfffffffffffffff8, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x4000000000000, 0x0, 0xfffffffffffffff7, 0x0, 0x200000000000000, 0xe, 0x0, 0x0, 0x0, 0x2, 0xc5a, 0x2, 0x1, 0x0, 0x85, 0x0, 0x4, 0x9, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffff0, 0x1, 0x6, 0x0, 0x4000000000000000, 0x20000000000, 0x5e, 0x1, 0x100000000000000, 0x0, 0x4, 0x1000000000, 0x3, 0x200000000000, 0x3, 0x20000200, 0xfffffffffffffffe, 0x0, 0x4000000000000001, 0x3, 0xfffffffffffffffc, 0x4, 0x800, 0x6, 0x0, 0xcb, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, 0x10001, 0xebf, 0x6, 0x0, 0x751, 0x0, 0x0, 0x6b, 0x7, 0xfffffffffffffffd, 0x101, 0xb, 0x0, 0x0, 0x800, 0x0, 0x10008001, 0x3, 0x8, 0x80000000000000, 0x0, 0x0, 0xf31, 0x11, 0x2, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x3, 0x4000b, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x2c80000000000000, 0x0, 0x20000000, 0x1, 0x1553, 0x6, 0x0, 0x3]}) 15.91063307s ago: executing program 4 (id=1634): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000008c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x4004800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000007100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000002140)={0x50, 0x0, r6, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r4, &(0x7f0000002900)={0x2020}, 0x2020) process_vm_writev(r7, &(0x7f0000000680)=[{&(0x7f0000000180)}, {&(0x7f00000002c0)=""/187, 0xbb}, {&(0x7f00000001c0)=""/118, 0x76}, {&(0x7f0000000380)=""/157, 0x9d}, {&(0x7f0000009140)=""/4096, 0x1000}, {&(0x7f0000000440)=""/39, 0x27}, {&(0x7f0000000480)=""/48, 0x30}, {&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f00000005c0)=""/137, 0x89}, {&(0x7f000000a140)=""/4096, 0x1000}], 0xa, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/125, 0x7d}, {&(0x7f00000007c0)=""/26, 0x1a}, {&(0x7f0000000900)=""/247, 0xf7}, {&(0x7f0000000800)=""/158, 0x9e}], 0x4, 0x0) syz_fuse_handle_req(r4, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, &(0x7f0000001240)={0x130, 0x0, 0x1, {0x0, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x5}}}}) ioctl$FS_IOC_RESVSP(r5, 0x40086602, &(0x7f0000002740)) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0200010203010902120001000000400904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="00001100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) 15.668334123s ago: executing program 0 (id=1635): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="ba2c0066b80f6f000066efbaf80c66b856790d8e66efbafc0cecf3663e3e67f082b58e00c0fe8b2665d2810100653666f30fc7b509003edea60000f20f2378f26d660f3a40ce0a66b856d3403f0f23d00f21f866350000000e0f23f8", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 15.663608975s ago: executing program 3 (id=1636): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/mem_sleep', 0x880, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f000000d67980b5a40bf85edaca8300000000"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000000)={0x2, 0xffffffff, 0x3ff}) socket$packet(0x11, 0xa, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f00000004c0)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') setns(r3, 0x20000) syz_usb_connect(0x3, 0x10e, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e67e350e010000062404", @ANYRESHEX], 0x0) 15.181542749s ago: executing program 0 (id=1637): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) r6 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r6, 0x520}, {0xffffffffffffffff, 0x1001}], 0x2, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r8 = syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1064, 0x80, 0x0, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r8, 0x47f8, 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000100)=ANY=[], 0x4}, 0x1, 0x0, 0x0, 0x4c85c}, 0x20040080) sendfile(r7, r3, 0x0, 0x100000002) 5.617780982s ago: executing program 32 (id=1621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb701) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, 0x0) socket$kcm(0x11, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000080)={0x5, 0x802}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x2}) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="580000001400192340024b80040d8c560aff820fffff5bab003a0000002058000b4835ca945f010ebc000000000000008000f0fffeffe809005300fff5dd00000010400100030c100000000000224e0000d9af4c4ccf6c01", 0x58}], 0x1) 1.11249213s ago: executing program 33 (id=1633): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1, 0x0, 0x18}, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r4 = timerfd_create(0x7, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x3938700}}, 0x0) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000040)=""/52, 0x34}, {0x0}], 0x2) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f0000009308405af30b00000040026fe695"], 0x0}, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x2, 0x0, &(0x7f0000048000), 0x0) write$vga_arbiter(r5, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='unlock io+m\x00\x00\x00'], 0xe) syz_open_dev$sndpcmp(&(0x7f0000000000), 0xb, 0x80800) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000a40)={{0x2, 0x0, 0x2, 0x5, 'syz0\x00'}, 0x0, [0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100007, 0xfffffffffffffffc, 0xffffffffffffff4e, 0xfffffffffffffff8, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x4000000000000, 0x0, 0xfffffffffffffff7, 0x0, 0x200000000000000, 0xe, 0x0, 0x0, 0x0, 0x2, 0xc5a, 0x2, 0x1, 0x0, 0x85, 0x0, 0x4, 0x9, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffff0, 0x1, 0x6, 0x0, 0x4000000000000000, 0x20000000000, 0x5e, 0x1, 0x100000000000000, 0x0, 0x4, 0x1000000000, 0x3, 0x200000000000, 0x3, 0x20000200, 0xfffffffffffffffe, 0x0, 0x4000000000000001, 0x3, 0xfffffffffffffffc, 0x4, 0x800, 0x6, 0x0, 0xcb, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, 0x10001, 0xebf, 0x6, 0x0, 0x751, 0x0, 0x0, 0x6b, 0x7, 0xfffffffffffffffd, 0x101, 0xb, 0x0, 0x0, 0x800, 0x0, 0x10008001, 0x3, 0x8, 0x80000000000000, 0x0, 0x0, 0xf31, 0x11, 0x2, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x3, 0x4000b, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x2c80000000000000, 0x0, 0x20000000, 0x1, 0x1553, 0x6, 0x0, 0x3]}) 111.478975ms ago: executing program 34 (id=1637): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) r6 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r6, 0x520}, {0xffffffffffffffff, 0x1001}], 0x2, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r8 = syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1064, 0x80, 0x0, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r8, 0x47f8, 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000100)=ANY=[], 0x4}, 0x1, 0x0, 0x0, 0x4c85c}, 0x20040080) sendfile(r7, r3, 0x0, 0x100000002) 70.222766ms ago: executing program 35 (id=1636): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/mem_sleep', 0x880, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f000000d67980b5a40bf85edaca8300000000"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000000)={0x2, 0xffffffff, 0x3ff}) socket$packet(0x11, 0xa, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f00000004c0)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') setns(r3, 0x20000) syz_usb_connect(0x3, 0x10e, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e67e350e010000062404", @ANYRESHEX], 0x0) 0s ago: executing program 36 (id=1634): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000008c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x4004800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000007100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000002140)={0x50, 0x0, r6, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r4, &(0x7f0000002900)={0x2020}, 0x2020) process_vm_writev(r7, &(0x7f0000000680)=[{&(0x7f0000000180)}, {&(0x7f00000002c0)=""/187, 0xbb}, {&(0x7f00000001c0)=""/118, 0x76}, {&(0x7f0000000380)=""/157, 0x9d}, {&(0x7f0000009140)=""/4096, 0x1000}, {&(0x7f0000000440)=""/39, 0x27}, {&(0x7f0000000480)=""/48, 0x30}, {&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f00000005c0)=""/137, 0x89}, {&(0x7f000000a140)=""/4096, 0x1000}], 0xa, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/125, 0x7d}, {&(0x7f00000007c0)=""/26, 0x1a}, {&(0x7f0000000900)=""/247, 0xf7}, {&(0x7f0000000800)=""/158, 0x9e}], 0x4, 0x0) syz_fuse_handle_req(r4, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, &(0x7f0000001240)={0x130, 0x0, 0x1, {0x0, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x5}}}}) ioctl$FS_IOC_RESVSP(r5, 0x40086602, &(0x7f0000002740)) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0200010203010902120001000000400904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="00001100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) kernel console output (not intermixed with test programs): packet: 8 [ 567.164762][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 567.174105][ T10] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 567.182387][ T10] usb 2-1: config 0 has no interface number 0 [ 567.188579][ T10] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 567.199659][ T10] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 567.211058][ T10] usb 2-1: config 0 interface 88 has no altsetting 0 [ 567.222874][ T10] usb 2-1: string descriptor 0 read error: -22 [ 567.229163][ T10] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 567.318241][ T10] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 567.391270][ T10] usb 2-1: config 0 descriptor?? [ 567.456940][ T1212] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 567.466772][ T10] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input34 [ 567.620431][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 567.665059][ T1212] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 567.689706][T10863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.709542][ T1212] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 567.735237][ T1212] usb 3-1: config 220 has no interface number 2 [ 567.752664][ T1212] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 567.766860][ T1212] usb 3-1: config 220 interface 0 has no altsetting 0 [ 567.774244][ T1212] usb 3-1: config 220 interface 76 has no altsetting 0 [ 567.783130][ T1212] usb 3-1: config 220 interface 1 has no altsetting 0 [ 567.790855][T10863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.798701][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 567.816328][ T5893] udevd[5893]: Unable to EVIOCGABS device "/dev/input/event4" [ 567.825533][T10863] PKCS7: Unknown OID: [4] 0.0 [ 567.831678][ T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 567.840044][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.843336][ T1212] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 567.858260][ T9] usb 5-1: config 0 has no interface number 0 [ 567.867148][ T9] usb 5-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 567.876044][T10863] PKCS7: Only support pkcs7_signedData type [ 567.882168][ T9] usb 5-1: config 0 interface 8 has no altsetting 0 [ 567.894805][ T5893] udevd[5893]: Unable to EVIOCGABS device "/dev/input/event4" [ 567.903479][ T1212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.947130][ T9] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 567.978201][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.988825][ T9] usb 5-1: Product: syz [ 567.989096][ T1212] usb 3-1: Product: syz [ 567.993421][ T9] usb 5-1: Manufacturer: syz [ 568.002283][ T9] usb 5-1: SerialNumber: syz [ 568.038905][ T9] usb 5-1: config 0 descriptor?? [ 568.041027][ T1212] usb 3-1: Manufacturer: syz [ 568.059723][T10882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.091756][ T1212] usb 3-1: SerialNumber: syz [ 568.119308][T10882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.300750][ T9] ath6kl: Failed to submit usb control message: -71 [ 568.308394][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 568.318521][ T9] ath6kl: Unable to send get target info: -71 [ 568.327350][ T9] ath6kl: Failed to init ath6kl core: -71 [ 568.335502][ T9] ath6kl_usb 5-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 568.359512][ T9] usb 5-1: USB disconnect, device number 65 [ 568.480393][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 568.490428][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 568.557749][ T1212] usb 3-1: selecting invalid altsetting 0 [ 568.590505][ T24] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 568.611290][ T1212] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 568.653783][ T1212] usb 3-1: No valid video chain found. [ 568.677854][ T1212] usb 3-1: selecting invalid altsetting 0 [ 568.726644][ T1212] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 568.785906][ T1212] usb 3-1: USB disconnect, device number 77 [ 568.800899][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 568.808154][ T24] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 568.834585][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.868173][ T24] usb 4-1: config 0 descriptor?? [ 569.085552][ T24] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 569.104044][ T24] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 569.219215][ T24] dib0700: firmware download failed at 7 with -22 [ 569.366809][ T24] usb 4-1: USB disconnect, device number 59 [ 569.567554][ T9] usb 2-1: USB disconnect, device number 65 [ 569.581367][ T1212] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 569.782357][ T1212] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 569.909001][ T1212] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 569.982134][ T1212] usb 5-1: config 220 interface 0 has no altsetting 0 [ 570.037512][ T1212] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 570.073504][ T1212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.106540][ T1212] usb 5-1: Product: syz [ 570.137966][ T1212] usb 5-1: Manufacturer: syz [ 570.154890][T10902] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1153'. [ 570.161105][ T1212] usb 5-1: SerialNumber: syz [ 570.294467][T10906] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 570.305446][ T24] IPVS: starting estimator thread 0... [ 570.403019][T10908] IPVS: using max 26 ests per chain, 62400 per kthread [ 570.425329][T10889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.438229][T10889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.456297][T10910] FAULT_INJECTION: forcing a failure. [ 570.456297][T10910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.472817][ T5940] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 570.545696][ T1212] usb 5-1: Found UVC 0.00 device syz (8086:0b07) [ 570.678959][T10910] CPU: 1 UID: 0 PID: 10910 Comm: syz.3.1156 Not tainted syzkaller #0 PREEMPT(full) [ 570.678986][T10910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 570.678996][T10910] Call Trace: [ 570.679011][T10910] [ 570.679019][T10910] dump_stack_lvl+0x189/0x250 [ 570.679047][T10910] ? __pfx____ratelimit+0x10/0x10 [ 570.679067][T10910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 570.679090][T10910] ? __pfx__printk+0x10/0x10 [ 570.679127][T10910] should_fail_ex+0x414/0x560 [ 570.679160][T10910] _copy_to_user+0x31/0xb0 [ 570.679187][T10910] simple_read_from_buffer+0xe1/0x170 [ 570.679220][T10910] proc_fail_nth_read+0x1b3/0x220 [ 570.679244][T10910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 570.679268][T10910] ? rw_verify_area+0x2a6/0x4d0 [ 570.679292][T10910] ? __lock_acquire+0xab9/0xd20 [ 570.679317][T10910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 570.679340][T10910] vfs_read+0x200/0xa30 [ 570.679363][T10910] ? fdget_pos+0x247/0x320 [ 570.679384][T10910] ? __pfx___mutex_lock+0x10/0x10 [ 570.679405][T10910] ? __pfx_vfs_read+0x10/0x10 [ 570.679431][T10910] ? __fget_files+0x2a/0x420 [ 570.679452][T10910] ? __fget_files+0x3a0/0x420 [ 570.679468][T10910] ? __fget_files+0x2a/0x420 [ 570.679493][T10910] ksys_read+0x145/0x250 [ 570.679520][T10910] ? __pfx_ksys_read+0x10/0x10 [ 570.679550][T10910] ? do_syscall_64+0xbe/0x3b0 [ 570.679574][T10910] do_syscall_64+0xfa/0x3b0 [ 570.679593][T10910] ? lockdep_hardirqs_on+0x9c/0x150 [ 570.679612][T10910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.679630][T10910] ? clear_bhb_loop+0x60/0xb0 [ 570.679653][T10910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.679671][T10910] RIP: 0033:0x7f6cda78d63c [ 570.679687][T10910] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 570.679704][T10910] RSP: 002b:00007f6cdb696030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 570.679724][T10910] RAX: ffffffffffffffda RBX: 00007f6cda9d5fa0 RCX: 00007f6cda78d63c [ 570.679738][T10910] RDX: 000000000000000f RSI: 00007f6cdb6960a0 RDI: 0000000000000003 [ 570.679750][T10910] RBP: 00007f6cdb696090 R08: 0000000000000000 R09: 0000000000000000 [ 570.679762][T10910] R10: 000000000000007e R11: 0000000000000246 R12: 0000000000000001 [ 570.679773][T10910] R13: 00007f6cda9d6038 R14: 00007f6cda9d5fa0 R15: 00007f6cdaaffa28 [ 570.679803][T10910] [ 570.914059][ T1212] usb 5-1: No valid video chain found. [ 570.922574][ T1212] usb 5-1: USB disconnect, device number 66 [ 571.020671][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 571.028623][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.039690][ T5940] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 571.049172][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.059646][ T5940] usb 3-1: config 0 descriptor?? [ 571.440714][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1159'. [ 571.655211][ T5940] koneplus 0003:1E7D:2D51.0020: unknown global tag 0xc [ 571.669071][ T5940] koneplus 0003:1E7D:2D51.0020: item 0 1 1 12 parsing failed [ 571.747082][T10919] tipc: MTU too low for tipc bearer [ 571.769084][ T5940] koneplus 0003:1E7D:2D51.0020: parse failed [ 571.880868][ T5940] koneplus 0003:1E7D:2D51.0020: probe with driver koneplus failed with error -22 [ 572.433471][T10936] dvmrp0: entered allmulticast mode [ 573.136769][ T5962] usb 3-1: USB disconnect, device number 78 [ 573.747498][T10959] netlink: 'syz.2.1171': attribute type 12 has an invalid length. [ 573.903258][T10959] netlink: 'syz.2.1171': attribute type 29 has an invalid length. [ 573.931520][T10959] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1171'. [ 573.955708][T10959] netlink: 'syz.2.1171': attribute type 1 has an invalid length. [ 573.997176][T10959] netlink: 'syz.2.1171': attribute type 2 has an invalid length. [ 574.039339][T10959] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1171'. [ 574.750303][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 574.937507][ T10] usb 4-1: config index 0 descriptor too short (expected 65535, got 27) [ 574.986704][ T10] usb 4-1: config 56 has too many interfaces: 49, using maximum allowed: 32 [ 575.014988][ T10] usb 4-1: config 56 has an invalid descriptor of length 55, skipping remainder of the config [ 575.120250][ T10] usb 4-1: config 56 has 0 interfaces, different from the descriptor's value: 49 [ 575.374136][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 575.470338][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.108251][ T10] usb 4-1: string descriptor 0 read error: -71 [ 576.136038][ T10] usb 4-1: USB disconnect, device number 60 [ 576.771238][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 576.771258][ T30] audit: type=1326 audit(1758297117.639:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.4.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46db98ec29 code=0x7ffc0000 [ 576.815399][ T30] audit: type=1326 audit(1758297117.639:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.4.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f46db98ec29 code=0x7ffc0000 [ 577.008510][ T30] audit: type=1326 audit(1758297117.639:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.4.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46db98ec29 code=0x7ffc0000 [ 577.073282][ T30] audit: type=1326 audit(1758297117.639:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.4.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46db98ec29 code=0x7ffc0000 [ 577.182176][ T30] audit: type=1326 audit(1758297117.659:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.4.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46db98ec29 code=0x7ffc0000 [ 577.257117][ T30] audit: type=1326 audit(1758297117.659:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.4.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46db98ec29 code=0x7ffc0000 [ 578.644727][T11010] ip6tnl1: entered promiscuous mode [ 578.651168][T11010] ip6tnl1: entered allmulticast mode [ 579.292815][T11014] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 579.851982][ T5962] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 579.956027][ T5940] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 579.986562][ T5940] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 580.033271][ T5962] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 580.044752][ T5962] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 580.086192][ T5962] usb 3-1: config 1 interface 0 has no altsetting 0 [ 580.160863][ T5962] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 580.204543][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.243015][T11025] fido_id[11025]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 580.267154][ T5962] usb 3-1: Product: syz [ 580.293492][ T5962] usb 3-1: Manufacturer: syz [ 580.307994][ T5962] usb 3-1: SerialNumber: syz [ 580.354772][T11020] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 580.449789][T11020] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 580.894936][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 580.983385][ T5962] rtl8150 3-1:1.0: couldn't reset the device [ 581.008322][ T5962] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 581.051558][ T5962] usb 3-1: USB disconnect, device number 79 [ 581.540579][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1194'. [ 581.821394][T11043] delete_channel: no stack [ 582.328479][ T5960] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 582.380614][ T9] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 582.510684][ T5960] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 582.523803][ T5960] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.535915][ T5960] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 582.548526][ T10] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 582.573573][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 582.589084][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.767985][ T5960] hub 3-1:4.0: USB hub found [ 582.852937][ T10] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 582.862012][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.932100][ T5960] hub 3-1:4.0: 13 ports detected [ 582.938922][ T5960] usb 3-1: selecting invalid altsetting 1 [ 582.951395][ T5960] hub 3-1:4.0: Using single TT (err -22) [ 582.965308][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 582.978468][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.001143][ T5960] hub 3-1:4.0: insufficient power available to use all downstream ports [ 583.073084][ T10] usb 4-1: Product: syz [ 583.134966][ T10] usb 4-1: Manufacturer: syz [ 583.139708][ T10] usb 4-1: SerialNumber: syz [ 583.314148][ T10] usb 4-1: config 0 descriptor?? [ 583.397431][ T10] ims_pcu 4-1:0.0: Missing CDC union descriptor [ 583.477765][ T10] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 583.592177][ T5960] usb 3-1: USB disconnect, device number 80 [ 583.798783][ T10] usb 4-1: USB disconnect, device number 61 [ 584.221260][ T5940] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 584.386920][ T5940] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 584.406277][ T5940] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 584.436595][ T1212] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 584.478520][ T5940] usb 5-1: config 1 interface 0 has no altsetting 0 [ 584.514788][ T5940] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 584.528538][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.553295][ T5940] usb 5-1: Product: syz [ 584.557734][ T5940] usb 5-1: Manufacturer: syz [ 584.568797][ T5940] usb 5-1: SerialNumber: syz [ 584.589543][T11074] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 584.599254][ T1212] usb 3-1: Using ep0 maxpacket: 16 [ 584.609758][T11074] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 584.620933][ T1212] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.632658][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 584.649494][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 584.667144][ T1212] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 584.679158][ T1212] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 584.715959][ T1212] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 584.727703][ T1212] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 584.756909][ T1212] usb 3-1: Manufacturer: syz [ 584.770172][ T1212] usb 3-1: config 0 descriptor?? [ 585.151925][ T5940] rtl8150 5-1:1.0: couldn't reset the device [ 585.173581][ T5940] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 585.230675][ T1212] rc_core: IR keymap rc-hauppauge not found [ 585.237027][ T5940] usb 5-1: USB disconnect, device number 67 [ 585.265477][ T1212] Registered IR keymap rc-empty [ 585.266085][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 585.300563][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 585.310292][ T9] usb 2-1: no configurations [ 585.329711][ T9] usb 2-1: can't read configurations, error -22 [ 585.365522][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 585.398955][ T1212] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 585.446697][ T1212] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input35 [ 585.497607][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 585.540613][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 585.600530][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 585.634488][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 585.651079][ T5960] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 585.678827][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 585.721295][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 585.770835][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 585.790733][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 585.811884][ T5960] usb 4-1: Using ep0 maxpacket: 16 [ 585.818263][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 585.820570][ T5960] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 585.839981][ T5960] usb 4-1: config 0 has no interface number 0 [ 585.840421][ T1212] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 585.849715][ T5960] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 585.862608][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.870672][ T5960] usb 4-1: Product: syz [ 585.875220][ T5960] usb 4-1: Manufacturer: syz [ 585.878544][ T1212] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 585.880732][ T5960] usb 4-1: SerialNumber: syz [ 585.889693][ T1212] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 585.901383][ T5960] usb 4-1: config 0 descriptor?? [ 585.919722][ T5960] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 585.924706][ T1212] usb 3-1: USB disconnect, device number 81 [ 585.958280][ T5960] snd-usb-audio 4-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 585.982461][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 586.038239][ T9604] udevd[9604]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.121858][ T5960] usb 4-1: USB disconnect, device number 62 [ 586.152206][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.163300][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 586.174237][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.186509][ T9] usb 2-1: config 0 descriptor?? [ 586.607450][ T9] logitech-djreceiver 0003:046D:C71F.0022: item fetching failed at offset 5/7 [ 586.632987][ T9] logitech-djreceiver 0003:046D:C71F.0022: logi_dj_probe: parse failed [ 586.645102][ T9] logitech-djreceiver 0003:046D:C71F.0022: probe with driver logitech-djreceiver failed with error -22 [ 586.740593][ T1212] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 586.835480][ T979] usb 2-1: USB disconnect, device number 67 [ 586.907287][ T1212] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 586.919598][ T1212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.930948][ T9] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 587.020569][ T1212] usb 3-1: Product: syz [ 587.125850][ T1212] usb 3-1: Manufacturer: syz [ 587.136808][ T1212] usb 3-1: SerialNumber: syz [ 587.173627][ T1212] usb 3-1: config 0 descriptor?? [ 587.212323][ T1212] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 587.269059][T11116] dvmrp0: entered allmulticast mode [ 587.301526][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 587.308835][ T9] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 587.318269][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.331568][ T9] usb 5-1: config 0 descriptor?? [ 587.711283][ T1212] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input36 [ 587.712565][ T9] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 587.764472][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 587.785465][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 587.808735][ T9] usb 5-1: media controller created [ 587.848488][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 587.970090][T11107] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 588.014343][ T979] usb 3-1: USB disconnect, device number 82 [ 588.105217][ T9] DVB: Unable to find symbol dib7000p_attach() [ 588.120287][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 588.322374][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 588.343656][ T9] Registered IR keymap rc-empty [ 588.348834][ T9] dvb-usb: could not initialize remote control. [ 588.360120][ T9] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 588.378685][ T9] usb 5-1: USB disconnect, device number 68 [ 588.499643][ T9] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 589.030816][ T979] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 589.213492][ T979] usb 4-1: config 0 has an invalid interface number: 197 but max is 0 [ 589.226558][ T979] usb 4-1: config 0 has no interface number 0 [ 589.235106][ T979] usb 4-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 589.277482][ T979] usb 4-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 589.371768][ T979] usb 4-1: config 0 interface 197 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 589.546696][ T979] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 589.646393][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.683682][ T979] usb 4-1: Product: syz [ 589.714609][ T979] usb 4-1: Manufacturer: syz [ 589.739635][ T979] usb 4-1: SerialNumber: syz [ 589.789455][ T979] usb 4-1: config 0 descriptor?? [ 589.850687][T11135] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 589.858310][T11135] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 590.044084][T11156] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1232'. [ 590.121843][ T979] qmi_wwan 4-1:0.197: probe with driver qmi_wwan failed with error -71 [ 590.167263][ T979] usb 4-1: USB disconnect, device number 63 [ 591.010520][ T24] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 591.170737][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 591.185018][ T24] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 591.243535][ T24] usb 5-1: config 0 has no interface number 0 [ 591.296248][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16 [ 591.349346][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.379418][ T24] usb 5-1: Product: syz [ 591.410879][ T24] usb 5-1: Manufacturer: syz [ 591.427993][ T24] usb 5-1: SerialNumber: syz [ 591.447265][ T24] usb 5-1: config 0 descriptor?? [ 591.676413][ T24] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 591.700672][ T24] usb 5-1: No valid video chain found. [ 591.710328][ T10] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 591.711370][ T24] usb 5-1: USB disconnect, device number 69 [ 591.993017][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 592.010333][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.021115][ T10] usb 3-1: Product: syz [ 592.030524][ T10] usb 3-1: Manufacturer: syz [ 592.037226][ T10] usb 3-1: SerialNumber: syz [ 592.080280][ T979] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 592.243182][ T979] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 592.267547][ T979] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.342097][ T979] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 592.384521][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.411305][ T979] usb 2-1: Product: syz [ 592.415549][ T979] usb 2-1: Manufacturer: syz [ 592.437242][ T979] usb 2-1: SerialNumber: syz [ 592.447836][ T979] usb 2-1: config 0 descriptor?? [ 592.456407][ T979] ims_pcu 2-1:0.0: Missing CDC union descriptor [ 592.462885][ T979] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 592.706401][ T5940] usb 2-1: USB disconnect, device number 68 [ 593.570398][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 593.615439][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 594.194362][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 594.215871][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 594.227476][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 594.306069][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 594.486112][ T10] usb 3-1: USB disconnect, device number 83 [ 595.434093][T11216] fuse: Unknown parameter 'fýü`{]觳~ÅuN^gÈöó¿j»‰ñKè'9¢Ç@0x0000000000000003' [ 595.670924][ T1212] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 595.742445][T11222] netdevsim netdevsim3: Direct firmware load for x failed with error -2 [ 595.760672][T11222] netdevsim netdevsim3: Falling back to sysfs fallback for: x [ 595.960542][ T1212] usb 2-1: Using ep0 maxpacket: 8 [ 595.974577][ T1212] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 595.997791][ T1212] usb 2-1: config 0 has no interface number 0 [ 596.007361][ T1212] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16 [ 596.035737][ T1212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.165647][ T1212] usb 2-1: Product: syz [ 596.181727][ T1212] usb 2-1: Manufacturer: syz [ 596.199638][ T1212] usb 2-1: SerialNumber: syz [ 596.240114][ T1212] usb 2-1: config 0 descriptor?? [ 596.510819][ T1212] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 596.524684][ T1212] usb 2-1: No valid video chain found. [ 596.554111][ T1212] usb 2-1: USB disconnect, device number 69 [ 598.010422][ T979] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 598.090585][ T10] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 598.210018][ T979] usb 3-1: config index 0 descriptor too short (expected 65535, got 27) [ 598.226190][ T979] usb 3-1: config 56 has too many interfaces: 49, using maximum allowed: 32 [ 598.246390][ T979] usb 3-1: config 56 has an invalid descriptor of length 55, skipping remainder of the config [ 598.379094][ T979] usb 3-1: config 56 has 0 interfaces, different from the descriptor's value: 49 [ 598.402249][ T10] usb 2-1: config index 0 descriptor too short (expected 65535, got 27) [ 598.410746][ T10] usb 2-1: config 56 has too many interfaces: 49, using maximum allowed: 32 [ 598.420249][ T10] usb 2-1: config 56 has an invalid descriptor of length 55, skipping remainder of the config [ 598.435173][ T979] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 598.444592][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.486896][ T10] usb 2-1: config 56 has 0 interfaces, different from the descriptor's value: 49 [ 598.499441][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 598.547500][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.824086][ T979] usb 3-1: string descriptor 0 read error: -71 [ 599.044460][ T979] usb 3-1: USB disconnect, device number 84 [ 599.054268][ T10] usb 2-1: string descriptor 0 read error: -71 [ 599.074222][ T10] usb 2-1: USB disconnect, device number 70 [ 601.290653][ T1212] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 601.428619][T11284] dvmrp0: entered allmulticast mode [ 601.626678][ T1212] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 601.636754][ T1212] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 601.647165][ T1212] usb 4-1: config 1 interface 0 has no altsetting 0 [ 601.657252][ T1212] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 601.667437][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.750696][ T1212] usb 4-1: Product: syz [ 601.754876][ T1212] usb 4-1: Manufacturer: syz [ 601.780663][ T1212] usb 4-1: SerialNumber: syz [ 601.807383][T11282] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 601.860433][T11282] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 602.473789][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 602.481868][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 602.489261][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 602.496973][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 602.692532][ T1212] rtl8150 4-1:1.0: couldn't reset the device [ 602.699138][ T1212] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 602.748546][T11295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1273'. [ 602.764120][ T1212] usb 4-1: USB disconnect, device number 64 [ 602.800349][ T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 603.052027][ T9] usb 2-1: config index 0 descriptor too short (expected 65535, got 27) [ 603.123757][ T9] usb 2-1: config 56 has too many interfaces: 49, using maximum allowed: 32 [ 603.170759][ T979] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 603.192849][ T9] usb 2-1: config 56 has an invalid descriptor of length 55, skipping remainder of the config [ 603.300741][ T9] usb 2-1: config 56 has 0 interfaces, different from the descriptor's value: 49 [ 603.390294][ T979] usb 3-1: device descriptor read/64, error -71 [ 603.396882][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 603.531097][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.670341][ T979] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 603.949865][ T979] usb 3-1: device descriptor read/64, error -71 [ 604.087273][ T979] usb usb3-port1: attempt power cycle [ 604.150697][ T9] usb 2-1: string descriptor 0 read error: -71 [ 604.223870][ T9] usb 2-1: USB disconnect, device number 71 [ 604.480281][ T979] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 604.540869][ T979] usb 3-1: device descriptor read/8, error -71 [ 605.030264][ T979] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 605.071004][ T979] usb 3-1: device descriptor read/8, error -71 [ 605.181632][ T979] usb usb3-port1: unable to enumerate USB device [ 606.470380][ T5960] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 606.884982][ T5960] usb 4-1: Using ep0 maxpacket: 32 [ 606.915292][ T5960] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 606.929734][ T5960] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 606.939790][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 606.966313][ T5960] usb 4-1: Product: syz [ 606.976959][ T5960] usb 4-1: Manufacturer: syz [ 607.020588][ T5960] usb 4-1: SerialNumber: syz [ 607.134262][ T5960] usb 4-1: config 0 descriptor?? [ 607.142830][T11322] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 607.541163][ T1212] usb 4-1: USB disconnect, device number 65 [ 608.630603][ T979] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 608.810494][ T979] usb 3-1: Using ep0 maxpacket: 16 [ 610.054795][T11366] netlink: 'syz.3.1291': attribute type 1 has an invalid length. [ 610.063902][T11366] netlink: 'syz.3.1291': attribute type 2 has an invalid length. [ 610.076065][T11366] netlink: 'syz.3.1291': attribute type 1 has an invalid length. [ 610.083896][T11366] netlink: 'syz.3.1291': attribute type 2 has an invalid length. [ 610.183467][ T5960] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 610.718615][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.742980][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.765926][ T5960] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 610.790282][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.825612][ T5960] usb 5-1: config 0 descriptor?? [ 611.256348][ T5960] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 611.275771][ T5960] cp2112 0003:10C4:EA90.0023: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 611.468935][ T5960] cp2112 0003:10C4:EA90.0023: Part Number: 0x82 Device Version: 0xFE [ 611.748419][ T979] usb 3-1: unable to get BOS descriptor or descriptor too short [ 611.846685][ T979] usb 3-1: no configurations [ 611.914930][ T979] usb 3-1: can't read configurations, error -22 [ 612.352243][ T5960] usb 5-1: USB disconnect, device number 70 [ 612.434914][ T979] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 612.600283][ T979] usb 3-1: Using ep0 maxpacket: 8 [ 612.600839][ T5940] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 612.634715][ T979] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 612.721742][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.729793][ T979] usb 3-1: Product: syz [ 612.744361][ T979] usb 3-1: Manufacturer: syz [ 612.756674][ T979] usb 3-1: SerialNumber: syz [ 612.772403][ T979] usb 3-1: config 0 descriptor?? [ 612.816219][ T979] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 612.832577][ T5940] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 612.910385][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.008123][ T5940] usb 2-1: Product: syz [ 613.041196][ T5940] usb 2-1: Manufacturer: syz [ 613.060692][ T5940] usb 2-1: SerialNumber: syz [ 613.093855][ T5940] usb 2-1: config 0 descriptor?? [ 613.255883][T11380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1296'. [ 613.351242][ T5940] hso 2-1:0.0: Failed to find BULK IN ep [ 613.453958][T11386] netlink: 'syz.0.1298': attribute type 12 has an invalid length. [ 613.988281][T11395] tipc: Enabled bearer , priority 0 [ 613.999575][ T5960] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 614.020110][ T5960] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 614.138954][T11395] tipc: Resetting bearer [ 614.539373][T11390] tipc: Disabling bearer [ 614.626325][ T979] gspca_sonixj: reg_r err -71 [ 614.631300][ T979] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 614.644142][ T979] usb 3-1: USB disconnect, device number 90 [ 614.765052][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1301'. [ 614.798424][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1301'. [ 616.078036][ T5960] usb 2-1: USB disconnect, device number 72 [ 617.316731][T11419] FAULT_INJECTION: forcing a failure. [ 617.316731][T11419] name failslab, interval 1, probability 0, space 0, times 0 [ 617.384085][T11419] CPU: 1 UID: 0 PID: 11419 Comm: syz.4.1304 Not tainted syzkaller #0 PREEMPT(full) [ 617.384113][T11419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 617.384125][T11419] Call Trace: [ 617.384133][T11419] [ 617.384142][T11419] dump_stack_lvl+0x189/0x250 [ 617.384172][T11419] ? __pfx____ratelimit+0x10/0x10 [ 617.384193][T11419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 617.384217][T11419] ? __pfx__printk+0x10/0x10 [ 617.384246][T11419] ? __pfx___might_resched+0x10/0x10 [ 617.384266][T11419] ? fs_reclaim_acquire+0x7d/0x100 [ 617.384289][T11419] should_fail_ex+0x414/0x560 [ 617.384322][T11419] should_failslab+0xa8/0x100 [ 617.384353][T11419] __kmalloc_noprof+0xcb/0x4f0 [ 617.384379][T11419] ? tomoyo_encode+0x28b/0x550 [ 617.384404][T11419] tomoyo_encode+0x28b/0x550 [ 617.384430][T11419] tomoyo_realpath_from_path+0x58d/0x5d0 [ 617.384454][T11419] ? tomoyo_domain+0xd9/0x130 [ 617.384482][T11419] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 617.384511][T11419] tomoyo_path_number_perm+0x1e8/0x5a0 [ 617.384544][T11419] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 617.384603][T11419] ? __lock_acquire+0xab9/0xd20 [ 617.384652][T11419] ? __fget_files+0x2a/0x420 [ 617.384673][T11419] ? __fget_files+0x2a/0x420 [ 617.384689][T11419] ? __fget_files+0x3a0/0x420 [ 617.384705][T11419] ? __fget_files+0x2a/0x420 [ 617.384725][T11419] security_file_ioctl+0xcb/0x2d0 [ 617.384753][T11419] __se_sys_ioctl+0x47/0x170 [ 617.384779][T11419] do_syscall_64+0xfa/0x3b0 [ 617.384800][T11419] ? lockdep_hardirqs_on+0x9c/0x150 [ 617.384829][T11419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.384849][T11419] ? clear_bhb_loop+0x60/0xb0 [ 617.384873][T11419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.384892][T11419] RIP: 0033:0x7f46db98ec29 [ 617.384909][T11419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.384927][T11419] RSP: 002b:00007f46dc87b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 617.384948][T11419] RAX: ffffffffffffffda RBX: 00007f46dbbd5fa0 RCX: 00007f46db98ec29 [ 617.384962][T11419] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000003 [ 617.384974][T11419] RBP: 00007f46dc87b090 R08: 0000000000000000 R09: 0000000000000000 [ 617.384986][T11419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.384997][T11419] R13: 00007f46dbbd6038 R14: 00007f46dbbd5fa0 R15: 00007f46dbcffa28 [ 617.385028][T11419] [ 617.385050][T11419] ERROR: Out of memory at tomoyo_realpath_from_path. [ 618.410415][ T5960] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 618.517568][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1310'. [ 618.590410][ T9] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 618.599690][ T5960] usb 4-1: Using ep0 maxpacket: 8 [ 618.641556][ T5960] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 618.657326][ T5960] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 618.689412][ T5960] usb 4-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 618.728545][ T5960] usb 4-1: config 168 interface 0 has no altsetting 0 [ 618.746155][ T5960] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 618.760626][ T5940] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 618.769271][ T5960] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 618.804947][ T9] usb 5-1: config index 0 descriptor too short (expected 65535, got 27) [ 618.823136][ T9] usb 5-1: config 56 has too many interfaces: 49, using maximum allowed: 32 [ 618.838012][ T5960] usb 4-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 618.857831][ T9] usb 5-1: config 56 has an invalid descriptor of length 55, skipping remainder of the config [ 618.874724][ T5960] usb 4-1: config 168 interface 0 has no altsetting 0 [ 618.881964][ T9] usb 5-1: config 56 has 0 interfaces, different from the descriptor's value: 49 [ 618.895589][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 618.906200][ T5960] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 618.910300][ T5940] usb 3-1: device descriptor read/64, error -71 [ 618.921681][ T5960] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 618.938470][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.951316][ T5960] usb 4-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 618.985811][ T5960] usb 4-1: config 168 interface 0 has no altsetting 0 [ 618.999085][ T5960] usb 4-1: string descriptor 0 read error: -22 [ 619.006340][ T5960] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 619.182948][ T9] usb 5-1: string descriptor 0 read error: -71 [ 619.211282][ T9] usb 5-1: USB disconnect, device number 71 [ 619.217414][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.265081][ T5940] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 619.294983][ T5960] adutux 4-1:168.0: interrupt endpoints not found [ 619.410958][ T5940] usb 3-1: device descriptor read/64, error -71 [ 619.520802][ T5940] usb usb3-port1: attempt power cycle [ 619.743690][ T9] usb 4-1: USB disconnect, device number 66 [ 619.874316][ T5940] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 619.901444][ T5940] usb 3-1: device descriptor read/8, error -71 [ 620.150299][ T5940] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 620.171257][ T5940] usb 3-1: device descriptor read/8, error -71 [ 620.280623][ T5940] usb usb3-port1: unable to enumerate USB device [ 620.920094][T11454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1314'. [ 622.130895][ T10] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 622.290724][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 622.300120][ T10] usb 3-1: config index 0 descriptor too short (expected 61219, got 36) [ 622.309181][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.337199][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.367525][ T10] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 622.429270][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.465946][ T10] usb 3-1: config 0 descriptor?? [ 623.147045][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 623.155846][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 623.193692][ T10] usb 3-1: USB disconnect, device number 95 [ 623.334302][T11483] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1319'. [ 624.230466][ T5960] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 624.376383][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.383320][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.400289][ T5960] usb 3-1: Using ep0 maxpacket: 16 [ 624.412100][ T5960] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.423857][ T5960] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 624.446904][ T5960] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 624.456618][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.473622][ T5960] usb 3-1: Product: syz [ 624.493923][ T5960] usb 3-1: Manufacturer: syz [ 624.502076][ T5960] usb 3-1: SerialNumber: syz [ 624.761405][ T5960] usb 3-1: 0:2 : does not exist [ 624.766345][ T5960] usb 3-1: unit 6 not found! [ 624.811394][T11496] netdevsim netdevsim1: Direct firmware load for x failed with error -2 [ 624.819996][T11496] netdevsim netdevsim1: Falling back to sysfs fallback for: x [ 625.050717][ T5960] usb 3-1: USB disconnect, device number 96 [ 625.277608][ T6813] udevd[6813]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 626.330435][ T5960] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 626.494735][ T5960] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 626.685690][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.740240][ T5960] usb 3-1: Product: syz [ 626.756826][ T5960] usb 3-1: Manufacturer: syz [ 626.772134][ T5960] usb 3-1: SerialNumber: syz [ 626.798274][ T5960] usb 3-1: config 0 descriptor?? [ 626.825862][T11513] netlink: 'syz.1.1328': attribute type 12 has an invalid length. [ 627.236061][ T5960] usb 3-1: Firmware version (0.0) predates our first public release. [ 627.259037][ T5960] usb 3-1: Please update to version 0.2 or newer [ 627.448056][T11510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.520665][T11510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.988650][T11534] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 628.011048][T11534] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 628.068020][T11534] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 628.132148][T11534] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 628.138450][T11534] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 628.980600][ T24] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 629.141981][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 629.169406][ T24] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 629.198070][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.259583][ T24] usb 2-1: config 0 has no interface number 0 [ 629.260690][ T5960] usb 3-1: USB disconnect, device number 97 [ 629.299348][ T24] usb 2-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 629.335944][ T24] usb 2-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 629.409144][ T24] usb 2-1: config 0 interface 8 has no altsetting 0 [ 629.428380][ T24] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 629.438458][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.900433][ T5189] Bluetooth: hci0: command 0x0406 tx timeout [ 629.997779][ T24] usb 2-1: Product: syz [ 630.032663][ T24] usb 2-1: Manufacturer: syz [ 630.097721][ T5189] Bluetooth: hci1: command 0x0406 tx timeout [ 630.130434][ T5189] Bluetooth: hci3: command 0x0406 tx timeout [ 630.136511][ T5189] Bluetooth: hci2: command 0x0406 tx timeout [ 630.136944][ T24] usb 2-1: SerialNumber: syz [ 630.206065][ T24] usb 2-1: config 0 descriptor?? [ 630.230274][ T5884] Bluetooth: hci4: command 0x0406 tx timeout [ 630.432276][ T24] ath6kl: Failed to submit usb control message: -71 [ 630.461172][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 630.600081][ T24] ath6kl: Unable to send get target info: -71 [ 630.622452][ T24] ath6kl: Failed to init ath6kl core: -71 [ 630.663348][ T24] ath6kl_usb 2-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 630.827248][ T24] usb 2-1: USB disconnect, device number 73 [ 631.510421][ T9] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 631.581150][T11579] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1342'. [ 631.893883][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 631.910341][ T9] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 631.929716][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.033084][ T24] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 632.300221][ T9] usb 5-1: Product: syz [ 632.311603][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.323474][ T9] usb 5-1: Manufacturer: syz [ 632.343366][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.353219][ T9] usb 5-1: SerialNumber: syz [ 632.359418][ T9] usb 5-1: config 0 descriptor?? [ 632.373423][ T9] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 632.425544][ T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 632.475847][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.551399][ T24] usb 3-1: config 0 descriptor?? [ 632.584663][ T9] usb 5-1: USB disconnect, device number 72 [ 632.965244][ T24] cp2112 0003:10C4:EA90.0025: unknown main item tag 0x0 [ 632.997220][ T24] cp2112 0003:10C4:EA90.0025: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 633.127826][T11598] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1348'. [ 633.214952][ T1212] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 633.247607][ T24] cp2112 0003:10C4:EA90.0025: Part Number: 0x82 Device Version: 0xFE [ 633.413034][ T1212] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 633.474804][ T1212] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 633.485604][ T1212] usb 4-1: config 1 interface 0 has no altsetting 0 [ 633.500344][ T1212] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 633.500377][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.500425][ T1212] usb 4-1: Product: syz [ 633.500443][ T1212] usb 4-1: Manufacturer: syz [ 633.500459][ T1212] usb 4-1: SerialNumber: syz [ 633.507338][T11593] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 633.507450][T11593] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 634.079213][ T1212] rtl8150 4-1:1.0: couldn't reset the device [ 634.086857][ T1212] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 634.124832][ T1212] usb 4-1: USB disconnect, device number 67 [ 634.291953][ T24] usb 3-1: reset high-speed USB device number 98 using dummy_hcd [ 634.460575][ T5940] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 634.616394][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 634.631659][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.644360][ T5940] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 634.654567][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.683252][ T5940] usb 5-1: config 0 descriptor?? [ 635.114337][ T5962] usb 3-1: USB disconnect, device number 98 [ 635.164459][ T5940] usbhid 5-1:0.0: can't add hid device: -71 [ 635.173253][ T5940] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 635.209408][ T5940] usb 5-1: USB disconnect, device number 73 [ 636.097583][T11638] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1358'. [ 637.836249][ T9] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 638.412578][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 641.003754][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 641.050355][ T9] usb 3-1: no configurations [ 641.113088][ T9] usb 3-1: can't read configurations, error -22 [ 641.183378][T11688] sctp: [Deprecated]: syz.2.1368 (pid 11688) Use of struct sctp_assoc_value in delayed_ack socket option. [ 641.183378][T11688] Use struct sctp_sack_info instead [ 641.363545][ T5960] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 641.383897][T11690] tipc: Enabled bearer , priority 0 [ 641.400491][ T5960] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 641.422489][T11690] tipc: Resetting bearer [ 642.291137][T11684] tipc: Disabling bearer [ 642.624361][T11705] netlink: 102 bytes leftover after parsing attributes in process `syz.0.1370'. [ 645.761552][T11746] netlink: 102 bytes leftover after parsing attributes in process `syz.0.1382'. [ 645.780657][ T9514] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 645.944346][ T9514] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.960554][ T9514] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 645.996900][ T9514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.050644][ T9514] usb 4-1: config 0 descriptor?? [ 646.396812][ T9514] usbhid 4-1:0.0: can't add hid device: -71 [ 646.405322][ T9514] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 646.454105][ T9514] usb 4-1: USB disconnect, device number 68 [ 646.566503][T11759] loop6: detected capacity change from 0 to 7 [ 646.596839][T11759] loop6: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 646.641499][T11759] loop6: p1 start 1207959560 is beyond EOD, truncated [ 646.665072][T11759] loop6: p2 start 3343437945 is beyond EOD, truncated [ 646.830275][T11759] loop6: p3 start 3801280 is beyond EOD, truncated [ 646.837343][T11759] loop6: p4 start 26648 is beyond EOD, truncated [ 646.867293][T11759] loop6: p5 start 1221622031 is beyond EOD, truncated [ 646.880276][T11759] loop6: p6 start 4294951111 is beyond EOD, truncated [ 646.920306][T11759] loop6: p7 start 4720834 is beyond EOD, truncated [ 646.944770][T11759] loop6: p8 start 3497594624 is beyond EOD, truncated [ 646.960265][T11759] loop6: p9 start 4290824008 is beyond EOD, truncated [ 646.960812][ T9514] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 646.980680][T11759] loop6: p10 start 1209189063 is beyond EOD, truncated [ 646.997895][T11759] loop6: p11 start 2031026176 is beyond EOD, truncated [ 647.028315][T11759] loop6: p12 start 3234285568 is beyond EOD, truncated [ 647.151789][ T9514] usb 4-1: Using ep0 maxpacket: 16 [ 647.182409][ T9514] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.204275][T11766] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 647.226130][ T9514] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 647.254369][ T9514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.341355][ T9514] usb 4-1: config 0 descriptor?? [ 647.856041][ T9514] kye 0003:0458:5016.0027: control desc unexpectedly large [ 647.878029][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 647.904659][ T9514] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0027/input/input38 [ 647.967673][ T9] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 648.118523][ T9514] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0027/input/input39 [ 648.330806][ T5961] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 648.570106][ T5961] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 648.630470][ T9514] kye 0003:0458:5016.0027: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 648.812362][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.943514][ T5961] usb 5-1: Product: syz [ 648.962610][ T5961] usb 5-1: Manufacturer: syz [ 648.967269][ T5961] usb 5-1: SerialNumber: syz [ 649.066470][ T5961] usb 5-1: config 0 descriptor?? [ 649.398330][ T5961] hso 5-1:0.0: Failed to find BULK IN ep [ 651.055985][ T5940] usb 4-1: USB disconnect, device number 69 [ 651.160537][ T9514] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 651.347650][ T9514] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 651.377882][ T9514] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.422887][ T9514] usb 2-1: Product: syz [ 651.427110][ T9514] usb 2-1: Manufacturer: syz [ 651.468590][ T9514] usb 2-1: SerialNumber: syz [ 651.481609][ T9514] usb 2-1: config 0 descriptor?? [ 651.514255][ T5961] usb 5-1: USB disconnect, device number 74 [ 651.532335][T11804] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1396'. [ 651.649168][T11806] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1397'. [ 651.727798][ T9514] hso 2-1:0.0: Failed to find BULK IN ep [ 652.164440][ T9514] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 652.502776][ T9514] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.514065][ T9514] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 652.524550][ T9514] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.537816][ T9514] usb 5-1: config 0 descriptor?? [ 652.832068][ T9514] usbhid 5-1:0.0: can't add hid device: -71 [ 652.877527][ T9514] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 652.935316][ T9514] usb 5-1: USB disconnect, device number 75 [ 653.186505][ T5961] usb 2-1: USB disconnect, device number 74 [ 653.607754][ T30] audit: type=1326 audit(1758297194.469:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11839 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ebb8ec29 code=0x7ffc0000 [ 653.640667][ T30] audit: type=1326 audit(1758297194.469:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11839 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ebb8ec29 code=0x7ffc0000 [ 653.735522][ T5940] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 653.748386][ T30] audit: type=1326 audit(1758297194.469:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11839 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff0ebb8ec29 code=0x7ffc0000 [ 654.194571][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 654.339845][ T30] audit: type=1326 audit(1758297194.469:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11839 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ebb8ec29 code=0x7ffc0000 [ 654.387131][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.421348][ T5940] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 654.455715][ T30] audit: type=1326 audit(1758297194.469:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11839 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff0ebb8ec29 code=0x7ffc0000 [ 654.526499][ T30] audit: type=1326 audit(1758297194.469:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11839 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ebb8ec29 code=0x7ffc0000 [ 654.548964][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.634289][ T30] audit: type=1326 audit(1758297194.469:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11839 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7ff0ebb8ec29 code=0x7ffc0000 [ 654.680999][ T5940] usb 2-1: config 0 descriptor?? [ 654.759606][ T30] audit: type=1326 audit(1758297194.469:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11839 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ebb8ec29 code=0x7ffc0000 [ 654.865285][ T30] audit: type=1326 audit(1758297194.469:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11839 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff0ebb8ec29 code=0x7ffc0000 [ 654.902399][ T30] audit: type=1326 audit(1758297194.469:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11839 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ebb8ec29 code=0x7ffc0000 [ 655.105274][ T5940] usbhid 2-1:0.0: can't add hid device: -71 [ 655.126160][ T5940] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 655.241715][ T5940] usb 2-1: USB disconnect, device number 75 [ 656.072791][T11859] sctp: [Deprecated]: syz.2.1413 (pid 11859) Use of struct sctp_assoc_value in delayed_ack socket option. [ 656.072791][T11859] Use struct sctp_sack_info instead [ 656.494593][T11877] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1417'. [ 656.737101][ T9514] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 656.997606][ T9514] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 657.089338][ T9514] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.597407][ T9514] usb 2-1: Product: syz [ 657.609532][ T9514] usb 2-1: Manufacturer: syz [ 657.638340][ T9514] usb 2-1: SerialNumber: syz [ 657.676002][ T9514] usb 2-1: config 0 descriptor?? [ 657.905205][ T9514] hso 2-1:0.0: Failed to find BULK IN ep [ 658.590363][ T5940] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 658.804988][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 658.805008][ T30] audit: type=1326 audit(1758297199.659:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11895 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c2f8ec29 code=0x7ffc0000 [ 658.884246][ T30] audit: type=1326 audit(1758297199.659:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11895 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c2f8ec29 code=0x7ffc0000 [ 658.911369][ T5940] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 658.924990][ T30] audit: type=1326 audit(1758297199.659:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11895 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f39c2f8ec29 code=0x7ffc0000 [ 658.940617][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.952087][ T30] audit: type=1326 audit(1758297199.659:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11895 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c2f8ec29 code=0x7ffc0000 [ 658.981553][ T30] audit: type=1326 audit(1758297199.669:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11895 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f39c2f8ec29 code=0x7ffc0000 [ 659.011520][ T30] audit: type=1326 audit(1758297199.669:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11895 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c2f8ec29 code=0x7ffc0000 [ 659.031385][ T5940] usb 5-1: Product: syz [ 659.038148][ T5940] usb 5-1: Manufacturer: syz [ 659.074594][ T30] audit: type=1326 audit(1758297199.669:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11895 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f39c2f8ec29 code=0x7ffc0000 [ 659.097301][ T5940] usb 5-1: SerialNumber: syz [ 659.105419][ T30] audit: type=1326 audit(1758297199.669:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11895 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c2f8ec29 code=0x7ffc0000 [ 659.197145][ T30] audit: type=1326 audit(1758297199.669:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11895 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c2f8ec29 code=0x7ffc0000 [ 659.233936][ T30] audit: type=1326 audit(1758297199.669:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11895 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f39c2f8ec29 code=0x7ffc0000 [ 659.764462][ T9514] usb 2-1: USB disconnect, device number 76 [ 660.011241][ T9] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 660.130243][T11908] ip6tnl1: entered promiscuous mode [ 660.137465][T11908] ip6tnl1: entered allmulticast mode [ 660.211621][ T9] usb 3-1: device descriptor read/64, error -71 [ 660.450606][ T9] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 660.574016][T11914] sctp: [Deprecated]: syz.0.1427 (pid 11914) Use of struct sctp_assoc_value in delayed_ack socket option. [ 660.574016][T11914] Use struct sctp_sack_info instead [ 660.576476][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 660.590577][ T9] usb 3-1: device descriptor read/64, error -71 [ 660.700826][ T9] usb usb3-port1: attempt power cycle [ 660.710588][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 660.742146][ T5940] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 660.808578][ T5940] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 661.070493][ T9] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 661.130846][ T9] usb 3-1: device descriptor read/8, error -71 [ 661.190347][ T9514] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 661.370374][ T9] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 661.388284][ T9514] usb 4-1: Using ep0 maxpacket: 8 [ 661.399201][ T9514] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 661.411402][ T9] usb 3-1: device descriptor read/8, error -71 [ 661.428934][ T9514] usb 4-1: config 0 has no interface number 0 [ 661.442198][ T9514] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16 [ 661.468201][ T9514] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.486811][ T9514] usb 4-1: Product: syz [ 661.498908][ T9514] usb 4-1: Manufacturer: syz [ 661.521011][ T9] usb usb3-port1: unable to enumerate USB device [ 661.532865][ T9514] usb 4-1: SerialNumber: syz [ 661.540717][ T9514] usb 4-1: config 0 descriptor?? [ 661.793883][ T9514] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 661.819903][ T9514] usb 4-1: No valid video chain found. [ 661.864040][ T9514] usb 4-1: USB disconnect, device number 70 [ 661.907408][ T5962] usb 5-1: USB disconnect, device number 76 [ 662.151068][T11948] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1433'. [ 662.991738][ T9] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 663.001331][ T5961] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 663.170482][ T5961] usb 3-1: Using ep0 maxpacket: 16 [ 663.175752][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 663.237026][ T5961] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 663.246050][ T5961] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 663.263346][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 663.309566][ T5961] usb 3-1: config 4 has no interface number 0 [ 663.332357][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 663.344883][ T5961] usb 3-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 663.359153][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 663.369657][ T5961] usb 3-1: config 4 interface 51 has no altsetting 0 [ 663.379149][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 663.393644][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 663.403795][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.414881][ T5961] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 663.425547][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.480902][ T5961] usb 3-1: Product: syz [ 663.496528][ T5961] usb 3-1: Manufacturer: syz [ 663.518401][ T5961] usb 3-1: SerialNumber: syz [ 663.983526][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 663.994288][ T9] usbtmc 4-1:16.0: can't read capabilities [ 664.015223][ T5961] cdc_eem 3-1:4.51: probe with driver cdc_eem failed with error -22 [ 664.770385][ T9] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 664.948725][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 664.970068][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.980789][ T9] usb 2-1: Product: syz [ 664.985020][ T9] usb 2-1: Manufacturer: syz [ 664.989851][ T9] usb 2-1: SerialNumber: syz [ 665.181326][T11997] fuse: Bad value for 'fd' [ 665.723301][ T5960] usb 4-1: USB disconnect, device number 71 [ 665.917045][ T5962] usb 3-1: USB disconnect, device number 105 [ 666.225412][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 666.260657][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 666.278221][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 666.307741][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 666.785465][T12017] netlink: 'syz.2.1455': attribute type 30 has an invalid length. [ 667.080616][T12021] netlink: 'syz.2.1455': attribute type 30 has an invalid length. [ 667.594793][ T5962] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 667.611592][ T9] usb 2-1: USB disconnect, device number 77 [ 667.658517][ T5962] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 668.200243][ T9] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 668.350862][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 668.424854][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.490223][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.567793][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 668.577343][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.673035][ T9] usb 2-1: config 0 descriptor?? [ 668.696233][ T9] hub 2-1:0.0: USB hub found [ 669.012607][ T9] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 669.081441][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 669.118199][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 669.174118][ T9] usb 2-1: USB disconnect, device number 78 [ 669.318764][T12048] fuse: Bad value for 'fd' [ 669.992832][T12056] sctp: [Deprecated]: syz.3.1465 (pid 12056) Use of struct sctp_assoc_value in delayed_ack socket option. [ 669.992832][T12056] Use struct sctp_sack_info instead [ 670.040379][ T9] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 670.280470][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 670.315485][ T9] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 670.400359][ T9] usb 2-1: config 0 has no interface number 0 [ 670.416904][T12067] FAULT_INJECTION: forcing a failure. [ 670.416904][T12067] name failslab, interval 1, probability 0, space 0, times 0 [ 670.442615][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16 [ 670.462064][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.470897][ T9] usb 2-1: Product: syz [ 670.476386][ T9] usb 2-1: Manufacturer: syz [ 670.482521][ T9] usb 2-1: SerialNumber: syz [ 670.490397][ T5962] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 670.490775][T12067] CPU: 0 UID: 0 PID: 12067 Comm: syz.0.1468 Not tainted syzkaller #0 PREEMPT(full) [ 670.490803][T12067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 670.490819][T12067] Call Trace: [ 670.490830][T12067] [ 670.490840][T12067] dump_stack_lvl+0x189/0x250 [ 670.490875][T12067] ? __pfx____ratelimit+0x10/0x10 [ 670.490900][T12067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 670.490929][T12067] ? __pfx__printk+0x10/0x10 [ 670.490978][T12067] should_fail_ex+0x414/0x560 [ 670.491021][T12067] should_failslab+0xa8/0x100 [ 670.491058][T12067] __kmalloc_cache_noprof+0x70/0x3d0 [ 670.491091][T12067] ? sctp_add_bind_addr+0x8c/0x370 [ 670.491119][T12067] sctp_add_bind_addr+0x8c/0x370 [ 670.491147][T12067] sctp_copy_local_addr_list+0x30b/0x4e0 [ 670.491190][T12067] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 670.491227][T12067] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 670.491267][T12067] ? sctp_v6_is_any+0x64/0x80 [ 670.491294][T12067] ? sctp_copy_one_addr+0x93/0x360 [ 670.491321][T12067] sctp_bind_addr_copy+0xb3/0x3c0 [ 670.491359][T12067] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 670.491396][T12067] sctp_connect_new_asoc+0x2e0/0x690 [ 670.491429][T12067] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 670.491456][T12067] ? __local_bh_enable_ip+0x12d/0x1c0 [ 670.491490][T12067] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 670.491517][T12067] ? security_sctp_bind_connect+0x7e/0x2e0 [ 670.491552][T12067] sctp_sendmsg+0x155c/0x2810 [ 670.491596][T12067] ? __pfx_sctp_sendmsg+0x10/0x10 [ 670.491628][T12067] ? aa_sk_perm+0x81e/0x950 [ 670.491669][T12067] ? __pfx_aa_sk_perm+0x10/0x10 [ 670.491719][T12067] ? sock_rps_record_flow+0x19/0x410 [ 670.491779][T12067] ? inet_sendmsg+0x2f4/0x370 [ 670.491816][T12067] __sock_sendmsg+0x19c/0x270 [ 670.491866][T12067] __sys_sendto+0x3bd/0x520 [ 670.491893][T12067] ? __pfx___sys_sendto+0x10/0x10 [ 670.491949][T12067] ? ksys_write+0x1e1/0x250 [ 670.491981][T12067] ? __pfx_ksys_write+0x10/0x10 [ 670.492008][T12067] ? rcu_is_watching+0x15/0xb0 [ 670.492035][T12067] __x64_sys_sendto+0xde/0x100 [ 670.492064][T12067] do_syscall_64+0xfa/0x3b0 [ 670.492087][T12067] ? lockdep_hardirqs_on+0x9c/0x150 [ 670.492108][T12067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.492130][T12067] ? clear_bhb_loop+0x60/0xb0 [ 670.492156][T12067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.492178][T12067] RIP: 0033:0x7f39c2f8ec29 [ 670.492197][T12067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.492216][T12067] RSP: 002b:00007f39c3d83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 670.492239][T12067] RAX: ffffffffffffffda RBX: 00007f39c31d5fa0 RCX: 00007f39c2f8ec29 [ 670.492255][T12067] RDX: 0000000000000bb7 RSI: 0000200000847fff RDI: 0000000000000005 [ 670.492270][T12067] RBP: 00007f39c3d83090 R08: 000020000005ffe4 R09: 000000000000001c [ 670.492285][T12067] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 670.492297][T12067] R13: 00007f39c31d6038 R14: 00007f39c31d5fa0 R15: 00007f39c32ffa28 [ 670.492333][T12067] [ 670.506926][ T9] usb 2-1: config 0 descriptor?? [ 670.752367][ C0] vkms_vblank_simulate: vblank timer overrun [ 670.816812][ T5960] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 670.829046][ T5962] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 670.852790][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.084034][ T5962] usb 4-1: Product: syz [ 671.088247][ T5962] usb 4-1: Manufacturer: syz [ 671.183587][ T5960] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 671.207943][ T5960] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 671.230221][ T5960] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 671.253461][ T5962] usb 4-1: SerialNumber: syz [ 671.278342][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.350374][ T9] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 671.367056][ T9] usb 2-1: No valid video chain found. [ 671.461390][T12065] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 671.473837][ T9] usb 2-1: USB disconnect, device number 79 [ 671.483662][ T5960] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 671.776826][ T5960] usb 5-1: USB disconnect, device number 77 [ 671.824537][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 671.824557][ T30] audit: type=1326 audit(1758297212.689:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12072 comm="syz.2.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ebb8ec29 code=0x7ffc0000 [ 671.853032][ C0] vkms_vblank_simulate: vblank timer overrun [ 671.941213][T12077] fuse: Bad value for 'fd' [ 671.952581][ T30] audit: type=1326 audit(1758297212.689:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12072 comm="syz.2.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff0ebb8ec29 code=0x7ffc0000 [ 672.081196][ T30] audit: type=1326 audit(1758297212.689:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12072 comm="syz.2.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ebb8ec29 code=0x7ffc0000 [ 672.103621][ C0] vkms_vblank_simulate: vblank timer overrun [ 672.199563][ T30] audit: type=1326 audit(1758297212.689:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12072 comm="syz.2.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff0ebb8ec29 code=0x7ffc0000 [ 672.221788][ C0] vkms_vblank_simulate: vblank timer overrun [ 672.336832][ T30] audit: type=1326 audit(1758297212.689:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12072 comm="syz.2.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ebb8ec29 code=0x7ffc0000 [ 672.395556][ T30] audit: type=1326 audit(1758297212.689:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12072 comm="syz.2.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ebb8ec29 code=0x7ffc0000 [ 672.418017][ C0] vkms_vblank_simulate: vblank timer overrun [ 672.426912][ T30] audit: type=1326 audit(1758297212.699:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12072 comm="syz.2.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7ff0ebb8ec29 code=0x7ffc0000 [ 672.610803][ T5962] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 672.644149][ T5962] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 672.647256][ T30] audit: type=1326 audit(1758297212.699:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12072 comm="syz.2.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ebb8ec29 code=0x7ffc0000 [ 672.665202][ T5962] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 672.691611][ T5962] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 672.803175][ T30] audit: type=1326 audit(1758297212.699:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12072 comm="syz.2.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ebb8ec29 code=0x7ffc0000 [ 673.241281][ T30] audit: type=1326 audit(1758297212.729:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12072 comm="syz.2.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff0ebb8ec29 code=0x7ffc0000 [ 673.661071][ T9] usb 4-1: USB disconnect, device number 72 [ 674.010343][ T9] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 674.162868][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.175014][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.214958][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 674.241018][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.261893][ T9] usb 4-1: config 0 descriptor?? [ 674.370581][ T5961] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 674.573685][ T5961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.597812][ T5961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.730561][ T5961] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 674.732989][ T9] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0 [ 674.756565][ T5961] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 674.800228][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.811285][ T9] cp2112 0003:10C4:EA90.002A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 674.886777][ T5961] usb 5-1: config 0 descriptor?? [ 674.951383][ T9] cp2112 0003:10C4:EA90.002A: Part Number: 0x82 Device Version: 0xFE [ 675.367682][ T5961] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 675.397479][ T5961] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 675.581625][T12117] input: syz0 as /devices/virtual/input/input42 [ 675.766831][ T5961] usb 4-1: USB disconnect, device number 73 [ 676.800945][ T979] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 676.979347][ T979] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 676.998237][ T979] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.041202][ T979] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 677.056743][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.128562][ T979] usb 4-1: Product: syz [ 677.164704][ T979] usb 4-1: Manufacturer: syz [ 677.179698][ T979] usb 4-1: SerialNumber: syz [ 677.208191][ T979] usb 4-1: config 0 descriptor?? [ 677.220054][ T9514] usb 5-1: USB disconnect, device number 78 [ 677.224663][ T979] ims_pcu 4-1:0.0: Missing CDC union descriptor [ 677.238484][ T979] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 677.424086][ T979] usb 4-1: USB disconnect, device number 74 [ 677.509210][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 677.519085][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 678.030300][ T5961] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 678.192653][ T5961] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 678.216438][ T5961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 678.320447][ T5961] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 678.332150][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.340354][ T5961] usb 5-1: Product: syz [ 678.344828][ T5961] usb 5-1: Manufacturer: syz [ 678.349444][ T5961] usb 5-1: SerialNumber: syz [ 678.356989][ T5961] usb 5-1: config 0 descriptor?? [ 678.371061][ T5961] usb 5-1: no audio or video endpoints found [ 678.473226][T12162] sctp: [Deprecated]: syz.2.1491 (pid 12162) Use of struct sctp_assoc_value in delayed_ack socket option. [ 678.473226][T12162] Use struct sctp_sack_info instead [ 678.580684][ T5961] usb 5-1: USB disconnect, device number 79 [ 681.569333][T12203] sctp: [Deprecated]: syz.3.1499 (pid 12203) Use of int in maxseg socket option. [ 681.569333][T12203] Use struct sctp_assoc_value instead [ 682.660825][ T5940] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 682.850719][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 682.864452][ T5940] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 682.897631][ T5940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.928369][ T5940] usb 3-1: config 0 has no interface number 0 [ 682.973330][ T5940] usb 3-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 683.012627][ T5940] usb 3-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 683.026140][ T5940] usb 3-1: config 0 interface 8 has no altsetting 0 [ 683.035817][ T5940] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 683.045287][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.053435][ T5940] usb 3-1: Product: syz [ 683.057807][ T5940] usb 3-1: Manufacturer: syz [ 683.062923][ T5940] usb 3-1: SerialNumber: syz [ 683.072611][ T5940] usb 3-1: config 0 descriptor?? [ 683.170414][ T5961] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 683.196294][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 683.206160][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 683.330582][ T5961] usb 2-1: Using ep0 maxpacket: 32 [ 683.343474][ T5961] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 683.353177][ T5961] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.364437][ T5961] usb 2-1: config 0 has no interface number 0 [ 683.372782][ T5961] usb 2-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 683.391303][ T5961] usb 2-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 683.405166][ T5961] usb 2-1: config 0 interface 8 has no altsetting 0 [ 683.415480][ T5940] ath6kl: Failed to submit usb control message: -71 [ 683.425886][ T5961] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 683.441339][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.441429][ T5940] ath6kl: unable to send the bmi data to the device: -71 [ 683.449382][ T5961] usb 2-1: Product: syz [ 683.449402][ T5961] usb 2-1: Manufacturer: syz [ 683.449420][ T5961] usb 2-1: SerialNumber: syz [ 683.476351][ T5940] ath6kl: Unable to send get target info: -71 [ 683.501803][ T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 683.510220][ T5961] usb 2-1: config 0 descriptor?? [ 683.513091][ T5940] ath6kl: Failed to init ath6kl core: -71 [ 683.542782][ T9514] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 683.562999][ T5940] ath6kl_usb 3-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 683.571600][ T5940] usb 3-1: USB disconnect, device number 106 [ 683.670345][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 683.677915][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.689861][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 683.702640][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 683.712485][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.718057][ T9514] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 683.721434][ T9] usb 5-1: Product: syz [ 683.751069][ T5961] ath6kl: Failed to submit usb control message: -71 [ 683.757839][ T9] usb 5-1: Manufacturer: syz [ 683.762984][ T5961] ath6kl: unable to send the bmi data to the device: -71 [ 683.763349][ T9514] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.770686][ T9] usb 5-1: SerialNumber: syz [ 683.784638][ T5961] ath6kl: Unable to send get target info: -71 [ 683.793328][ T5961] ath6kl: Failed to init ath6kl core: -71 [ 683.793768][ T9514] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 683.816019][ T5961] ath6kl_usb 2-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 683.819221][ T9514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.847164][ T9514] usb 4-1: config 0 descriptor?? [ 683.861964][ T5961] usb 2-1: USB disconnect, device number 80 [ 684.031523][ T9] usb 5-1: 0:2 : does not exist [ 684.051066][ T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 684.121809][ T9] usb 5-1: USB disconnect, device number 80 [ 684.660304][ T9514] samsung 0003:0419:0001.002C: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.3-1/input0 [ 684.687078][ T6813] udevd[6813]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 684.833020][ T9514] usb 4-1: USB disconnect, device number 75 [ 684.929453][T12239] fido_id[12239]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 685.005292][T12237] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1508'. [ 685.814066][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.830778][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.188252][T12282] FAULT_INJECTION: forcing a failure. [ 688.188252][T12282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 688.204096][T12282] CPU: 0 UID: 0 PID: 12282 Comm: syz.0.1521 Not tainted syzkaller #0 PREEMPT(full) [ 688.204123][T12282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 688.204136][T12282] Call Trace: [ 688.204143][T12282] [ 688.204152][T12282] dump_stack_lvl+0x189/0x250 [ 688.204181][T12282] ? __pfx____ratelimit+0x10/0x10 [ 688.204202][T12282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 688.204226][T12282] ? __pfx__printk+0x10/0x10 [ 688.204253][T12282] ? __might_fault+0xb0/0x130 [ 688.204290][T12282] should_fail_ex+0x414/0x560 [ 688.204324][T12282] _copy_from_iter+0x1de/0x1790 [ 688.204348][T12282] ? txopt_get+0x7a/0x3f0 [ 688.204378][T12282] ? txopt_get+0x7a/0x3f0 [ 688.204397][T12282] ? txopt_get+0x7a/0x3f0 [ 688.204417][T12282] ? __pfx__copy_from_iter+0x10/0x10 [ 688.204438][T12282] ? txopt_get+0x335/0x3f0 [ 688.204459][T12282] ? txopt_get+0x7a/0x3f0 [ 688.204479][T12282] ? __pfx_txopt_get+0x10/0x10 [ 688.204508][T12282] rawv6_sendmsg+0xb4b/0x1820 [ 688.204545][T12282] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 688.204576][T12282] ? aa_file_perm+0x13a/0x1550 [ 688.204609][T12282] ? __pfx_aa_sk_perm+0x10/0x10 [ 688.204642][T12282] ? sock_rps_record_flow+0x19/0x410 [ 688.204698][T12282] ? inet_sendmsg+0x2f4/0x370 [ 688.204723][T12282] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 688.204746][T12282] __sock_sendmsg+0x19c/0x270 [ 688.204778][T12282] sock_write_iter+0x258/0x330 [ 688.204807][T12282] ? __pfx_sock_write_iter+0x10/0x10 [ 688.204863][T12282] ? bpf_lsm_file_permission+0x9/0x20 [ 688.204901][T12282] ? security_file_permission+0x75/0x290 [ 688.204934][T12282] vfs_write+0x5c9/0xb30 [ 688.204965][T12282] ? __pfx_sock_write_iter+0x10/0x10 [ 688.205010][T12282] ? __pfx_vfs_write+0x10/0x10 [ 688.205046][T12282] ? __fget_files+0x2a/0x420 [ 688.205072][T12282] ksys_write+0x145/0x250 [ 688.205101][T12282] ? __pfx_ksys_write+0x10/0x10 [ 688.205126][T12282] ? rcu_is_watching+0x15/0xb0 [ 688.205163][T12282] ? do_syscall_64+0xbe/0x3b0 [ 688.205188][T12282] do_syscall_64+0xfa/0x3b0 [ 688.205208][T12282] ? lockdep_hardirqs_on+0x9c/0x150 [ 688.205228][T12282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.205247][T12282] ? clear_bhb_loop+0x60/0xb0 [ 688.205270][T12282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.205289][T12282] RIP: 0033:0x7f39c2f8ec29 [ 688.205306][T12282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.205323][T12282] RSP: 002b:00007f39c3d83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 688.205343][T12282] RAX: ffffffffffffffda RBX: 00007f39c31d5fa0 RCX: 00007f39c2f8ec29 [ 688.205357][T12282] RDX: 00000000000005ac RSI: 00002000000000c0 RDI: 0000000000000003 [ 688.205369][T12282] RBP: 00007f39c3d83090 R08: 0000000000000000 R09: 0000000000000000 [ 688.205381][T12282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.205393][T12282] R13: 00007f39c31d6038 R14: 00007f39c31d5fa0 R15: 00007f39c32ffa28 [ 688.205441][T12282] [ 688.568283][T12288] netlink: 'syz.0.1522': attribute type 1 has an invalid length. [ 688.579217][T12289] fuse: Bad value for 'fd' [ 688.586153][T12285] ptrace attach of "./syz-executor exec"[5892] was attempted by "./syz-executor exec"[12285] [ 688.762686][T12285] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 689.116469][T12302] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1525'. [ 689.220239][ T5940] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 689.290624][ T1212] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 689.386025][ T5940] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 689.400249][ T9] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 689.414049][ T5940] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 689.429558][ T5940] usb 5-1: config 220 interface 0 has no altsetting 0 [ 689.440594][ T1212] usb 4-1: Using ep0 maxpacket: 32 [ 689.452538][ T5940] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 689.461953][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.474750][ T1212] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 689.487578][ T5940] usb 5-1: Product: syz [ 689.493059][ T1212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 689.505692][ T5940] usb 5-1: Manufacturer: syz [ 689.511790][ T5940] usb 5-1: SerialNumber: syz [ 689.529699][ T1212] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 689.539411][ T1212] usb 4-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 689.567388][ T1212] usb 4-1: Product: syz [ 689.579349][ T1212] usb 4-1: Manufacturer: syz [ 689.580382][ T9] usb 2-1: device descriptor read/64, error -71 [ 689.584914][ T1212] usb 4-1: SerialNumber: syz [ 689.606922][ T1212] usb 4-1: config 0 descriptor?? [ 689.635714][ T1212] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 689.842936][ T1212] usb 4-1: USB disconnect, device number 76 [ 689.849310][ T66] usb 4-1: Failed to submit usb control message: -71 [ 689.863599][ T66] usb 4-1: unable to send the bmi data to the device: -71 [ 689.889244][ T9] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 689.997973][ T66] usb 4-1: unable to get target info from device [ 690.046051][ T66] usb 4-1: could not get target info (-71) [ 690.060742][ T9] usb 2-1: device descriptor read/64, error -71 [ 690.073680][ T66] usb 4-1: could not probe fw (-71) [ 690.181975][ T9] usb usb2-port1: attempt power cycle [ 690.520684][ T9] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 690.551208][ T9] usb 2-1: device descriptor read/8, error -71 [ 690.812191][ T9] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 691.055211][ T9] usb 2-1: device descriptor read/8, error -71 [ 691.181104][ T9] usb usb2-port1: unable to enumerate USB device [ 691.721445][ T5940] usb 5-1: Found UVC 0.00 device syz (8086:0b07) [ 691.754942][ T5940] usb 5-1: No valid video chain found. [ 691.836849][ T5940] usb 5-1: USB disconnect, device number 81 [ 692.347609][T12334] fuse: Unknown parameter './file0' [ 693.447044][T12347] FAULT_INJECTION: forcing a failure. [ 693.447044][T12347] name failslab, interval 1, probability 0, space 0, times 0 [ 693.464709][T12347] CPU: 1 UID: 0 PID: 12347 Comm: syz.3.1536 Not tainted syzkaller #0 PREEMPT(full) [ 693.464731][T12347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 693.464741][T12347] Call Trace: [ 693.464747][T12347] [ 693.464754][T12347] dump_stack_lvl+0x189/0x250 [ 693.464777][T12347] ? __pfx____ratelimit+0x10/0x10 [ 693.464793][T12347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 693.464811][T12347] ? __pfx__printk+0x10/0x10 [ 693.464842][T12347] should_fail_ex+0x414/0x560 [ 693.464868][T12347] should_failslab+0xa8/0x100 [ 693.464892][T12347] __kmalloc_cache_noprof+0x70/0x3d0 [ 693.464912][T12347] ? sctp_add_bind_addr+0x8c/0x370 [ 693.464930][T12347] sctp_add_bind_addr+0x8c/0x370 [ 693.464948][T12347] sctp_copy_local_addr_list+0x30b/0x4e0 [ 693.464974][T12347] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 693.464998][T12347] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 693.465023][T12347] ? sctp_v6_is_any+0x64/0x80 [ 693.465039][T12347] ? sctp_copy_one_addr+0x93/0x360 [ 693.465056][T12347] sctp_bind_addr_copy+0xb3/0x3c0 [ 693.465087][T12347] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 693.465111][T12347] sctp_connect_new_asoc+0x2e0/0x690 [ 693.465133][T12347] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 693.465150][T12347] ? __local_bh_enable_ip+0x12d/0x1c0 [ 693.465171][T12347] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 693.465189][T12347] ? security_sctp_bind_connect+0x7e/0x2e0 [ 693.465212][T12347] sctp_sendmsg+0x155c/0x2810 [ 693.465238][T12347] ? __pfx_sctp_sendmsg+0x10/0x10 [ 693.465259][T12347] ? aa_sk_perm+0x81e/0x950 [ 693.465286][T12347] ? __pfx_aa_sk_perm+0x10/0x10 [ 693.465312][T12347] ? sock_rps_record_flow+0x19/0x410 [ 693.465336][T12347] ? inet_sendmsg+0x2f4/0x370 [ 693.465361][T12347] __sock_sendmsg+0x19c/0x270 [ 693.465400][T12347] __sys_sendto+0x3bd/0x520 [ 693.465418][T12347] ? __pfx___sys_sendto+0x10/0x10 [ 693.465453][T12347] ? ksys_write+0x1e1/0x250 [ 693.465474][T12347] ? __pfx_ksys_write+0x10/0x10 [ 693.465492][T12347] ? rcu_is_watching+0x15/0xb0 [ 693.465511][T12347] __x64_sys_sendto+0xde/0x100 [ 693.465530][T12347] do_syscall_64+0xfa/0x3b0 [ 693.465545][T12347] ? lockdep_hardirqs_on+0x9c/0x150 [ 693.465559][T12347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.465574][T12347] ? clear_bhb_loop+0x60/0xb0 [ 693.465591][T12347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.465605][T12347] RIP: 0033:0x7f6cda78ec29 [ 693.465618][T12347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.465631][T12347] RSP: 002b:00007f6cdb696038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 693.465647][T12347] RAX: ffffffffffffffda RBX: 00007f6cda9d5fa0 RCX: 00007f6cda78ec29 [ 693.465657][T12347] RDX: 0000000000000bb7 RSI: 0000200000847fff RDI: 0000000000000005 [ 693.465667][T12347] RBP: 00007f6cdb696090 R08: 000020000005ffe4 R09: 000000000000001c [ 693.465677][T12347] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 693.465685][T12347] R13: 00007f6cda9d6038 R14: 00007f6cda9d5fa0 R15: 00007f6cdaaffa28 [ 693.465708][T12347] [ 694.493275][T12362] kvm: pic: non byte read [ 694.498080][T12362] kvm: pic: level sensitive irq not supported [ 694.498172][T12362] kvm: pic: non byte read [ 694.573839][T12362] kvm: pic: level sensitive irq not supported [ 694.573892][T12362] kvm: pic: non byte read [ 694.688915][T12362] kvm: pic: level sensitive irq not supported [ 694.688970][T12362] kvm: pic: non byte read [ 694.734609][T12362] kvm: pic: level sensitive irq not supported [ 694.734677][T12362] kvm: pic: non byte read [ 695.144342][T12362] kvm: pic: level sensitive irq not supported [ 695.144396][T12362] kvm: pic: non byte read [ 695.216958][T12362] kvm: pic: level sensitive irq not supported [ 695.217014][T12362] kvm: pic: non byte read [ 695.383787][T12362] kvm: pic: level sensitive irq not supported [ 695.385331][T12362] kvm: pic: non byte read [ 696.060127][T12393] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1547'. [ 696.190408][ T1212] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 696.370646][ T1212] usb 2-1: Using ep0 maxpacket: 32 [ 696.387538][ T1212] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.398892][ T1212] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 696.451868][ T1212] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 696.481714][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.515447][ T1212] usb 2-1: config 0 descriptor?? [ 696.880241][ T9] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 697.052099][ T9] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 697.061468][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.121311][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 697.130903][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.144249][ T9] usb 5-1: Product: syz [ 697.152591][ T9] usb 5-1: Manufacturer: syz [ 697.165635][ T9] usb 5-1: SerialNumber: syz [ 697.196911][ T9] usb 5-1: config 0 descriptor?? [ 697.212000][ T9] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 697.218900][ T9] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 697.413380][ T9] usb 5-1: USB disconnect, device number 82 [ 698.450616][ T5940] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 698.652496][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.666122][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.843234][ T5940] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 698.853019][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.874303][ T5940] usb 5-1: config 0 descriptor?? [ 698.925989][ T1212] usb 2-1: USB disconnect, device number 85 [ 699.042389][T12425] ip6tnl1: entered promiscuous mode [ 699.049902][T12425] ip6tnl1: entered allmulticast mode [ 699.364343][ T5940] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 699.410235][ T5961] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 699.480582][ T5940] cp2112 0003:10C4:EA90.002D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 699.561998][ T5940] cp2112 0003:10C4:EA90.002D: Part Number: 0x82 Device Version: 0xFE [ 699.562679][ T5961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 699.596097][ T5961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.615569][ T5961] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 699.709299][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.753556][ T5961] usb 4-1: config 0 descriptor?? [ 700.185788][ T5961] samsung 0003:0419:0001.002E: hidraw1: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.3-1/input0 [ 700.399685][ T5961] usb 4-1: USB disconnect, device number 77 [ 700.449170][ T5962] usb 5-1: USB disconnect, device number 83 [ 700.666181][T12443] fido_id[12443]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 702.080909][T12472] mmap: syz.1.1566 (12472) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 703.719956][T12491] netdevsim netdevsim4: Direct firmware load for x failed with error -2 [ 703.732084][T12491] netdevsim netdevsim4: Falling back to sysfs fallback for: x [ 704.430475][ T5961] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 704.622936][ T5961] usb 4-1: Using ep0 maxpacket: 16 [ 704.649500][ T5961] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 704.662568][ T5961] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 704.673631][ T5961] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 704.683664][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.691912][ T5961] usb 4-1: Product: syz [ 704.704764][ T5961] usb 4-1: Manufacturer: syz [ 704.709414][ T5961] usb 4-1: SerialNumber: syz [ 704.956967][T12510] fuse: Bad value for 'fd' [ 704.965071][ T5961] usb 4-1: 0:2 : does not exist [ 705.057697][ T5961] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 705.069617][T12514] fuse: Unknown parameter './file0' [ 705.352779][ T5961] usb 4-1: USB disconnect, device number 78 [ 705.647176][ T6813] udevd[6813]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 706.142864][T12521] macvlan2: entered promiscuous mode [ 706.180385][T12521] bridge0: entered promiscuous mode [ 707.140306][ T5961] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 707.180555][ T9] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 707.201313][T12538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1586'. [ 707.303451][ T5961] usb 4-1: Using ep0 maxpacket: 8 [ 707.319201][ T5961] usb 4-1: config 1 has an invalid descriptor of length 158, skipping remainder of the config [ 707.332737][ T5961] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 707.343851][ T5961] usb 4-1: config 1 has no interface number 1 [ 707.350042][ T5961] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 707.374514][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 707.384629][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.402928][ T9] usb 3-1: Product: syz [ 707.413763][ T9] usb 3-1: Manufacturer: syz [ 707.419288][ T9] usb 3-1: SerialNumber: syz [ 707.437627][ T5961] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 707.452916][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.462717][ T5961] usb 4-1: Product: syz [ 707.470237][ T5961] usb 4-1: Manufacturer: syz [ 707.476050][ T5961] usb 4-1: SerialNumber: syz [ 707.838587][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 707.874066][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 707.895105][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 707.969313][ T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 708.343351][ T1212] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 708.513192][ T1212] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 708.524464][ T1212] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.685802][ T1212] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 708.699047][ T1212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.717759][ T1212] usb 5-1: Product: syz [ 708.727108][ T1212] usb 5-1: Manufacturer: syz [ 708.738518][ T1212] usb 5-1: SerialNumber: syz [ 708.755275][ T1212] usb 5-1: config 0 descriptor?? [ 708.774707][ T1212] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 708.805102][ T1212] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 708.979809][ T1212] usb 5-1: USB disconnect, device number 84 [ 709.195375][ T5884] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 709.639095][T12565] netlink: 'syz.0.1591': attribute type 1 has an invalid length. [ 709.818562][ T5961] usb 4-1: cannot find UAC_HEADER [ 709.999593][ T5961] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 710.039583][ T5961] usb 4-1: USB disconnect, device number 79 [ 710.067267][ T1212] usb 3-1: USB disconnect, device number 107 [ 710.129244][ T6813] udevd[6813]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 710.196229][T12568] gretap1: entered promiscuous mode [ 710.214343][T12568] bond1: (slave gretap1): making interface the new active one [ 710.224106][T12568] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 710.245555][T12575] ip6gretap1: entered promiscuous mode [ 710.251204][T12575] ip6gretap1: entered allmulticast mode [ 710.262517][T12575] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 711.111954][T12586] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1599'. [ 712.170453][ T9] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 712.380269][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 712.411872][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.457975][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.500413][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 712.530243][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 712.560211][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.589545][ T9] usb 5-1: config 0 descriptor?? [ 712.851190][ T5940] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 713.011818][ T5940] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 713.023915][ T5940] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 713.034594][ T9] apple 0003:05AC:0247.002F: unexpected long global item [ 713.048149][ T5940] usb 2-1: config 220 interface 0 has no altsetting 0 [ 713.064729][ T9] apple 0003:05AC:0247.002F: parse failed [ 713.080044][ T5940] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 713.099515][ T9] apple 0003:05AC:0247.002F: probe with driver apple failed with error -22 [ 713.134944][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.178886][ T5940] usb 2-1: Product: syz [ 713.194771][ T5940] usb 2-1: Manufacturer: syz [ 713.217665][T12592] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1601'. [ 713.356543][ T5940] usb 2-1: SerialNumber: syz [ 713.433271][ T9514] usb 5-1: USB disconnect, device number 85 [ 713.654472][ T5940] usb 2-1: Found UVC 0.00 device syz (8086:0b07) [ 713.670349][ T5940] usb 2-1: No valid video chain found. [ 713.694414][ T5940] usb 2-1: USB disconnect, device number 86 [ 714.237639][T12614] binder: 12613:12614 ioctl 400c620e 200000000280 returned -22 [ 714.285275][T12616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1607'. [ 714.835168][ T5940] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 714.915382][T12629] ip6tnl1: entered promiscuous mode [ 714.922251][T12629] ip6tnl1: entered allmulticast mode [ 714.948675][ T5940] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 715.022572][T12631] tipc: Enabled bearer , priority 0 [ 715.444807][T12630] fido_id[12630]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 715.462839][T12639] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1614'. [ 717.473036][ T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 717.683032][ T9] usb 2-1: config 0 has no interfaces? [ 717.692995][ T9] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 717.959015][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.028465][ T9] usb 2-1: Product: syz [ 718.101430][ T9] usb 2-1: Manufacturer: syz [ 718.106076][ T9] usb 2-1: SerialNumber: syz [ 718.502260][ T9] usb 2-1: config 0 descriptor?? [ 718.530534][T12660] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1618'. [ 719.173463][T12645] veth0_vlan: left promiscuous mode [ 719.198524][T12645] veth0_vlan: entered promiscuous mode [ 719.229446][T12666] tipc: Enabled bearer , priority 10 [ 720.106166][T12688] input: syz0 as /devices/virtual/input/input43 [ 720.435563][ T1212] usb 2-1: USB disconnect, device number 87 [ 722.110663][ T5940] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 722.172082][ T5960] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 722.239389][ T12] tipc: Resetting bearer [ 722.273134][ T5940] usb 5-1: config 0 has an invalid interface number: 74 but max is 1 [ 722.281772][ T5940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.355703][ T5940] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 722.372164][ T5960] usb 2-1: Using ep0 maxpacket: 32 [ 722.383156][ T5940] usb 5-1: config 0 has no interface number 0 [ 722.393743][ T12] tipc: Disabling bearer [ 722.403592][ T5960] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 722.409958][ T5940] usb 5-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 722.420373][ T5960] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.505292][ T5940] usb 5-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 722.517268][ T5960] usb 2-1: config 0 has no interface number 0 [ 722.539811][ T5960] usb 2-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 722.570276][ T5960] usb 2-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 722.584367][ T5960] usb 2-1: config 0 interface 8 has no altsetting 0 [ 722.593517][ T5960] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 722.606053][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.628677][ T5940] usb 5-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 722.640235][ T5940] usb 5-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 722.653042][ T5940] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 722.693881][ T5960] usb 2-1: Product: syz [ 722.698100][ T5960] usb 2-1: Manufacturer: syz [ 722.700512][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.720551][ T5960] usb 2-1: SerialNumber: syz [ 722.733016][ T5960] usb 2-1: config 0 descriptor?? [ 722.790458][ T5940] usb 5-1: Product: syz [ 722.794665][ T5940] usb 5-1: Manufacturer: syz [ 722.814955][ T5940] usb 5-1: SerialNumber: syz [ 722.828021][ T5940] usb 5-1: config 0 descriptor?? [ 722.944792][T12708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.970941][T12708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.092752][ T5884] Bluetooth: hci0: command 0x0406 tx timeout [ 723.116986][ T9] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 723.129027][ T5960] ath6kl: Failed to submit usb control message: -71 [ 723.138297][ T9] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 723.149289][ T5960] ath6kl: unable to send the bmi data to the device: -71 [ 723.153713][ T5940] cypress_m8 5-1:0.74: HID->COM RS232 Adapter converter detected [ 723.177528][ T5940] usb 5-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 723.189067][ T5940] usb 5-1: USB disconnect, device number 86 [ 723.206931][ T5940] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 723.229375][ T5960] ath6kl: Unable to send get target info: -71 [ 723.277308][ T5940] cypress_m8 5-1:0.74: device disconnected [ 723.318919][ T5960] ath6kl: Failed to init ath6kl core: -71 [ 723.363158][ T5960] ath6kl_usb 2-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 723.561452][ T5960] usb 2-1: USB disconnect, device number 88 [ 723.998747][T12737] netlink: 'syz.4.1632': attribute type 10 has an invalid length. [ 724.096392][T12737] team0: Port device dummy0 added [ 724.177339][T12737] pimreg: tun_chr_ioctl cmd 1074025677 [ 724.187255][T12737] pimreg: linktype set to 1 [ 724.211361][ T6008] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 724.404616][ T6008] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.437677][ T6008] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.499104][ T6008] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 724.530572][ T6008] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 724.564098][ T6008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.649043][ T6008] usb 2-1: config 0 descriptor?? [ 725.040266][ T5940] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 725.050443][ T5962] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 725.163010][ T6008] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 725.203010][ T5940] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 725.216216][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.226513][ T5940] usb 5-1: Product: syz [ 725.231091][ T5962] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 725.246631][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 725.270104][ T5940] usb 5-1: Manufacturer: syz [ 725.283575][ T5940] usb 5-1: SerialNumber: syz [ 725.288944][ T6008] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 725.298450][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 725.330305][ T9] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 725.336424][ T9] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 725.342800][ T5962] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 725.344556][ T5884] Bluetooth: hci1: command 0x0406 tx timeout [ 725.400043][ T5940] usb 5-1: config 0 descriptor?? [ 725.595710][ T5962] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 725.689445][ T5940] hso 5-1:0.0: Failed to find BULK IN ep [ 725.702076][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.748572][ T5962] usb 4-1: config 0 descriptor?? [ 726.207929][ T5962] plantronics 0003:047F:FFFF.0032: unknown global tag 0xd [ 726.217058][ T5962] plantronics 0003:047F:FFFF.0032: item 0 2 1 13 parsing failed [ 726.234511][ T5962] plantronics 0003:047F:FFFF.0032: parse failed [ 726.242532][ T5962] plantronics 0003:047F:FFFF.0032: probe with driver plantronics failed with error -22 [ 727.411523][ T5884] Bluetooth: hci2: command 0x0406 tx timeout [ 727.420958][ T9] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 727.427065][ T9] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 727.640804][ T5940] usb 2-1: reset high-speed USB device number 89 using dummy_hcd [ 728.942097][ T979] usb 5-1: USB disconnect, device number 87 [ 729.490499][ T5884] Bluetooth: hci3: command 0x0406 tx timeout [ 729.497277][ T9] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 729.503809][ T9] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 731.570471][ T9] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 731.570684][ T5884] Bluetooth: hci4: command 0x0406 tx timeout [ 731.576598][ T9] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 732.820333][ T5940] usb 2-1: device descriptor read/64, error -110 [ 733.060433][ T5940] usb 2-1: reset high-speed USB device number 89 using dummy_hcd [ 733.190364][ T5940] usb 2-1: device descriptor read/64, error -32 [ 733.430302][ T5940] usb 2-1: reset high-speed USB device number 89 using dummy_hcd [ 733.450608][ T5940] usb 2-1: device descriptor read/8, error -32 [ 733.690406][ T5940] usb 2-1: reset high-speed USB device number 89 using dummy_hcd [ 733.720686][ T5940] usb 2-1: device descriptor read/8, error -32 [ 733.832103][ T5940] raw-gadget.0 gadget.1: failed to queue suspend event [ 733.839852][ T24] usb 2-1: USB disconnect, device number 89 [ 733.860591][ T24] raw-gadget.0 gadget.1: failed to queue reset event [ 733.931405][ T24] raw-gadget.0 gadget.1: failed to queue resume event [ 733.990298][ T24] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 733.998121][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 734.005410][ T24] raw-gadget.0 gadget.1: failed to queue reset event [ 734.080322][ T24] raw-gadget.0 gadget.1: failed to queue resume event [ 734.140384][ T24] usb 2-1: device descriptor read/64, error -32 [ 734.252032][ T24] raw-gadget.0 gadget.1: failed to queue suspend event [ 734.259127][ T24] raw-gadget.0 gadget.1: failed to queue reset event [ 734.330365][ T24] raw-gadget.0 gadget.1: failed to queue resume event [ 734.390343][ T24] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 734.398171][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 734.405732][ T24] raw-gadget.0 gadget.1: failed to queue reset event [ 734.481717][ T24] raw-gadget.0 gadget.1: failed to queue resume event [ 734.541858][ T24] usb 2-1: device descriptor read/64, error -32 [ 734.650302][ T24] raw-gadget.0 gadget.1: failed to queue suspend event [ 734.660416][ T24] usb usb2-port1: attempt power cycle [ 734.665954][ T24] raw-gadget.0 gadget.1: failed to queue disconnect event [ 734.674290][ T24] raw-gadget.0 gadget.1: failed to queue reset event [ 734.760749][ T24] raw-gadget.0 gadget.1: failed to queue resume event [ 734.773434][ T24] raw-gadget.0 gadget.1: failed to queue reset event [ 734.991355][ T24] raw-gadget.0 gadget.1: failed to queue resume event [ 735.051351][ T24] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 735.070595][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 735.077779][ T24] usb 2-1: device descriptor read/8, error -32 [ 735.190499][ T24] raw-gadget.0 gadget.1: failed to queue suspend event [ 735.199042][ T24] raw-gadget.0 gadget.1: failed to queue reset event [ 735.270658][ T24] raw-gadget.0 gadget.1: failed to queue resume event [ 735.330738][ T24] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 735.350474][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 735.357756][ T24] usb 2-1: device descriptor read/8, error -32 [ 735.471294][ T24] raw-gadget.0 gadget.1: failed to queue suspend event [ 735.479379][ T24] usb usb2-port1: unable to enumerate USB device [ 739.192156][ T8926] tipc: Disabling bearer [ 747.254150][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.260902][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.692966][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.699324][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.133151][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.139559][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 883.570397][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 883.577926][ T31] Not tainted syzkaller #0 [ 883.587256][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 883.596141][ T31] task:kworker/0:0 state:D stack:20872 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 883.609286][ T31] Workqueue: events rfkill_op_handler [ 883.614950][ T31] Call Trace: [ 883.618256][ T31] [ 883.622762][ T31] __schedule+0x1798/0x4cc0 [ 883.627332][ T31] ? __pfx___schedule+0x10/0x10 [ 883.634700][ T31] ? schedule+0x91/0x360 [ 883.638991][ T31] schedule+0x165/0x360 [ 883.644786][ T31] schedule_preempt_disabled+0x13/0x30 [ 883.652548][ T31] __mutex_lock+0x7e6/0x1350 [ 883.657184][ T31] ? __mutex_lock+0x5bb/0x1350 [ 883.663612][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 883.668942][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 883.677183][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 883.682740][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 883.688728][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 883.697135][ T31] ? kobject_uevent_env+0x36b/0x8c0 [ 883.703852][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 883.709607][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 883.715874][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 883.721865][ T31] rfkill_set_block+0x1cf/0x440 [ 883.726754][ T31] rfkill_epo+0x7e/0x180 [ 883.731178][ T31] rfkill_op_handler+0x84/0x240 [ 883.736051][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 883.742075][ T31] process_scheduled_works+0xae1/0x17b0 [ 883.747677][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 883.753805][ T31] worker_thread+0x8a0/0xda0 [ 883.758451][ T31] kthread+0x70e/0x8a0 [ 883.762586][ T31] ? __pfx_worker_thread+0x10/0x10 [ 883.767712][ T31] ? __pfx_kthread+0x10/0x10 [ 883.772366][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 883.777601][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 883.784355][ T31] ? __pfx_kthread+0x10/0x10 [ 883.788982][ T31] ret_from_fork+0x439/0x7d0 [ 883.794522][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 883.799666][ T31] ? __switch_to_asm+0x39/0x70 [ 883.807745][ T31] ? __switch_to_asm+0x33/0x70 [ 883.813266][ T31] ? __pfx_kthread+0x10/0x10 [ 883.817886][ T31] ret_from_fork_asm+0x1a/0x30 [ 883.822983][ T31] [ 883.827108][ T31] INFO: task kworker/0:6:5961 blocked for more than 143 seconds. [ 883.835092][ T31] Not tainted syzkaller #0 [ 883.840053][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 883.848769][ T31] task:kworker/0:6 state:D stack:21320 pid:5961 tgid:5961 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 883.861786][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 883.868513][ T31] Call Trace: [ 883.871891][ T31] [ 883.874850][ T31] __schedule+0x1798/0x4cc0 [ 883.879404][ T31] ? __pfx___schedule+0x10/0x10 [ 883.884333][ T31] ? schedule+0x91/0x360 [ 883.888602][ T31] schedule+0x165/0x360 [ 883.892913][ T31] schedule_preempt_disabled+0x13/0x30 [ 883.898397][ T31] __mutex_lock+0x7e6/0x1350 [ 883.906727][ T31] ? __mutex_lock+0x5bb/0x1350 [ 883.911611][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 883.917886][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 883.926368][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 883.933164][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 883.938927][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 883.946144][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 883.951958][ T31] process_scheduled_works+0xae1/0x17b0 [ 883.957554][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 883.963626][ T31] worker_thread+0x8a0/0xda0 [ 883.968243][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 883.974883][ T31] ? __kthread_parkme+0x7b/0x200 [ 883.979860][ T31] kthread+0x70e/0x8a0 [ 883.984060][ T31] ? __pfx_worker_thread+0x10/0x10 [ 883.989197][ T31] ? __pfx_kthread+0x10/0x10 [ 883.993909][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 883.999157][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 884.004433][ T31] ? __pfx_kthread+0x10/0x10 [ 884.009060][ T31] ret_from_fork+0x439/0x7d0 [ 884.013708][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 884.018852][ T31] ? __switch_to_asm+0x39/0x70 [ 884.023756][ T31] ? __switch_to_asm+0x33/0x70 [ 884.028553][ T31] ? __pfx_kthread+0x10/0x10 [ 884.033243][ T31] ret_from_fork_asm+0x1a/0x30 [ 884.038052][ T31] [ 884.044328][ T31] INFO: task syz.2.1621:12670 blocked for more than 143 seconds. [ 884.052622][ T31] Not tainted syzkaller #0 [ 884.057579][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 884.066429][ T31] task:syz.2.1621 state:D stack:25096 pid:12670 tgid:12670 ppid:5891 task_flags:0x400040 flags:0x00004006 [ 884.078504][ T31] Call Trace: [ 884.082811][ T31] [ 884.085783][ T31] __schedule+0x1798/0x4cc0 [ 884.090436][ T31] ? __pfx___schedule+0x10/0x10 [ 884.095488][ T31] ? schedule+0x91/0x360 [ 884.099730][ T31] schedule+0x165/0x360 [ 884.104114][ T31] schedule_preempt_disabled+0x13/0x30 [ 884.109587][ T31] __mutex_lock+0x7e6/0x1350 [ 884.114571][ T31] ? __mutex_lock+0x5bb/0x1350 [ 884.119458][ T31] ? rfkill_unregister+0xc8/0x220 [ 884.124572][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 884.129614][ T31] ? __pfx_device_del+0x10/0x10 [ 884.134551][ T31] rfkill_unregister+0xc8/0x220 [ 884.139419][ T31] nfc_unregister_device+0x96/0x2a0 [ 884.144984][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 884.151216][ T31] virtual_ncidev_close+0x56/0x90 [ 884.156278][ T31] __fput+0x44c/0xa70 [ 884.160897][ T31] task_work_run+0x1d1/0x260 [ 884.165532][ T31] ? __pfx_task_work_run+0x10/0x10 [ 884.171020][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 884.176519][ T31] exit_to_user_mode_loop+0xec/0x110 [ 884.181948][ T31] do_syscall_64+0x2bd/0x3b0 [ 884.186682][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 884.191991][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.198081][ T31] ? clear_bhb_loop+0x60/0xb0 [ 884.202816][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.208730][ T31] RIP: 0033:0x7ff0ebb8ec29 [ 884.213197][ T31] RSP: 002b:00007ff0ebeffb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 884.221843][ T31] RAX: 0000000000000000 RBX: 00007ff0ebdd7da0 RCX: 00007ff0ebb8ec29 [ 884.229844][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 884.237940][ T31] RBP: 00007ff0ebdd7da0 R08: 0000000000016dd4 R09: 00000018ebeffe7f [ 884.245955][ T31] R10: 00007ff0ebdd7cb0 R11: 0000000000000246 R12: 00000000000afd1b [ 884.253988][ T31] R13: 00007ff0ebdd6270 R14: ffffffffffffffff R15: 00007ff0ebeffca0 [ 884.262121][ T31] [ 884.265174][ T31] INFO: task syz.1.1633:12734 blocked for more than 144 seconds. [ 884.273118][ T31] Not tainted syzkaller #0 [ 884.278062][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 884.286797][ T31] task:syz.1.1633 state:D stack:26248 pid:12734 tgid:12732 ppid:5895 task_flags:0x400040 flags:0x00004004 [ 884.298784][ T31] Call Trace: [ 884.302228][ T31] [ 884.305296][ T31] __schedule+0x1798/0x4cc0 [ 884.309832][ T31] ? kasan_save_free_info+0x46/0x50 [ 884.315174][ T31] ? __pfx___schedule+0x10/0x10 [ 884.320103][ T31] ? schedule+0x91/0x360 [ 884.324380][ T31] schedule+0x165/0x360 [ 884.328535][ T31] schedule_preempt_disabled+0x13/0x30 [ 884.334059][ T31] __mutex_lock+0x7e6/0x1350 [ 884.338675][ T31] ? __mutex_lock+0x5bb/0x1350 [ 884.343591][ T31] ? misc_open+0x51/0x330 [ 884.347951][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 884.353092][ T31] misc_open+0x51/0x330 [ 884.357301][ T31] chrdev_open+0x4c9/0x5e0 [ 884.361763][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 884.366718][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 884.373276][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 884.378289][ T31] do_dentry_open+0x950/0x13f0 [ 884.383460][ T31] vfs_open+0x3b/0x340 [ 884.387547][ T31] ? path_openat+0x2ecd/0x3830 [ 884.392396][ T31] path_openat+0x2ee5/0x3830 [ 884.397013][ T31] ? arch_stack_walk+0xfc/0x150 [ 884.401939][ T31] ? stack_depot_save_flags+0x40/0x860 [ 884.407439][ T31] ? __pfx_path_openat+0x10/0x10 [ 884.412446][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.418591][ T31] do_filp_open+0x1fa/0x410 [ 884.423312][ T31] ? __lock_acquire+0xab9/0xd20 [ 884.428208][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 884.433360][ T31] ? _raw_spin_unlock+0x28/0x50 [ 884.438261][ T31] ? alloc_fd+0x64c/0x6c0 [ 884.442683][ T31] do_sys_openat2+0x121/0x1c0 [ 884.447387][ T31] ? __se_sys_futex+0x36f/0x400 [ 884.452411][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 884.457643][ T31] ? rcu_is_watching+0x15/0xb0 [ 884.462725][ T31] __x64_sys_openat+0x138/0x170 [ 884.467600][ T31] do_syscall_64+0xfa/0x3b0 [ 884.472207][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.478301][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 884.484521][ T31] ? clear_bhb_loop+0x60/0xb0 [ 884.489233][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.495365][ T31] RIP: 0033:0x7f5490d8ec29 [ 884.499819][ T31] RSP: 002b:00007f5491bdb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 884.508390][ T31] RAX: ffffffffffffffda RBX: 00007f5490fd5fa0 RCX: 00007f5490d8ec29 [ 884.516423][ T31] RDX: 00000000001c0002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 884.524503][ T31] RBP: 00007f5490e11e41 R08: 0000000000000000 R09: 0000000000000000 [ 884.532622][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.540740][ T31] R13: 00007f5490fd6038 R14: 00007f5490fd5fa0 R15: 00007f54910ffa28 [ 884.548766][ T31] [ 884.551907][ T31] INFO: task syz.4.1634:12756 blocked for more than 144 seconds. [ 884.559654][ T31] Not tainted syzkaller #0 [ 884.564821][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 884.573540][ T31] task:syz.4.1634 state:D stack:26728 pid:12756 tgid:12745 ppid:5892 task_flags:0x400040 flags:0x00004004 [ 884.585649][ T31] Call Trace: [ 884.588942][ T31] [ 884.591937][ T31] __schedule+0x1798/0x4cc0 [ 884.596479][ T31] ? __pfx___schedule+0x10/0x10 [ 884.601613][ T31] ? schedule+0x91/0x360 [ 884.605879][ T31] schedule+0x165/0x360 [ 884.610041][ T31] schedule_preempt_disabled+0x13/0x30 [ 884.615564][ T31] __mutex_lock+0x7e6/0x1350 [ 884.620447][ T31] ? __mutex_lock+0x5bb/0x1350 [ 884.625266][ T31] ? misc_open+0x51/0x330 [ 884.629610][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 884.634685][ T31] misc_open+0x51/0x330 [ 884.638864][ T31] chrdev_open+0x4c9/0x5e0 [ 884.643334][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 884.648282][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 884.654648][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 884.659607][ T31] do_dentry_open+0x950/0x13f0 [ 884.664538][ T31] vfs_open+0x3b/0x340 [ 884.668646][ T31] ? path_openat+0x2ecd/0x3830 [ 884.673539][ T31] path_openat+0x2ee5/0x3830 [ 884.678188][ T31] ? __pfx___schedule+0x10/0x10 [ 884.683115][ T31] ? __pfx_path_openat+0x10/0x10 [ 884.688068][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.694230][ T31] do_filp_open+0x1fa/0x410 [ 884.698879][ T31] ? __lock_acquire+0xab9/0xd20 [ 884.703899][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 884.708968][ T31] ? _raw_spin_unlock+0x28/0x50 [ 884.714061][ T31] ? alloc_fd+0x64c/0x6c0 [ 884.718421][ T31] do_sys_openat2+0x121/0x1c0 [ 884.723140][ T31] ? __se_sys_futex+0x36f/0x400 [ 884.728015][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 884.733273][ T31] ? rcu_is_watching+0x15/0xb0 [ 884.738057][ T31] __x64_sys_openat+0x138/0x170 [ 884.743080][ T31] do_syscall_64+0xfa/0x3b0 [ 884.747606][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 884.752856][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.758986][ T31] ? clear_bhb_loop+0x60/0xb0 [ 884.763713][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.769625][ T31] RIP: 0033:0x7f46db98ec29 [ 884.774165][ T31] RSP: 002b:00007f46dc7f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 884.782738][ T31] RAX: ffffffffffffffda RBX: 00007f46dbbd6360 RCX: 00007f46db98ec29 [ 884.791054][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 884.799058][ T31] RBP: 00007f46dba11e41 R08: 0000000000000000 R09: 0000000000000000 [ 884.807300][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.815335][ T31] R13: 00007f46dbbd63f8 R14: 00007f46dbbd6360 R15: 00007f46dbcffa28 [ 884.823639][ T31] [ 884.826686][ T31] INFO: task syz.3.1636:12755 blocked for more than 144 seconds. [ 884.834981][ T31] Not tainted syzkaller #0 [ 884.839939][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 884.848743][ T31] task:syz.3.1636 state:D stack:23600 pid:12755 tgid:12753 ppid:5894 task_flags:0x400140 flags:0x00004004 [ 884.862621][ T31] Call Trace: [ 884.865975][ T31] [ 884.868924][ T31] __schedule+0x1798/0x4cc0 [ 884.875990][ T31] ? __pfx___schedule+0x10/0x10 [ 884.881313][ T31] ? schedule+0x91/0x360 [ 884.885647][ T31] schedule+0x165/0x360 [ 884.889810][ T31] schedule_preempt_disabled+0x13/0x30 [ 884.895750][ T31] __mutex_lock+0x7e6/0x1350 [ 884.900736][ T31] ? __mutex_lock+0x5bb/0x1350 [ 884.905530][ T31] ? misc_open+0x51/0x330 [ 884.909863][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 884.915042][ T31] misc_open+0x51/0x330 [ 884.919436][ T31] chrdev_open+0x4c9/0x5e0 [ 884.924485][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 884.929578][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 884.936012][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 884.941077][ T31] do_dentry_open+0x950/0x13f0 [ 884.945881][ T31] vfs_open+0x3b/0x340 [ 884.949967][ T31] ? path_openat+0x2ecd/0x3830 [ 884.955129][ T31] path_openat+0x2ee5/0x3830 [ 884.959749][ T31] ? arch_stack_walk+0xfc/0x150 [ 884.964730][ T31] ? stack_depot_save_flags+0x40/0x860 [ 884.970311][ T31] ? __pfx_path_openat+0x10/0x10 [ 884.975310][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.981556][ T31] do_filp_open+0x1fa/0x410 [ 884.986081][ T31] ? __lock_acquire+0xab9/0xd20 [ 884.991000][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 884.996064][ T31] ? _raw_spin_unlock+0x28/0x50 [ 885.001065][ T31] ? alloc_fd+0x64c/0x6c0 [ 885.005449][ T31] do_sys_openat2+0x121/0x1c0 [ 885.010346][ T31] ? __se_sys_futex+0x36f/0x400 [ 885.015229][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 885.020608][ T31] ? rcu_is_watching+0x15/0xb0 [ 885.025400][ T31] __x64_sys_openat+0x138/0x170 [ 885.030357][ T31] do_syscall_64+0xfa/0x3b0 [ 885.034892][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 885.040405][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.046523][ T31] ? clear_bhb_loop+0x60/0xb0 [ 885.051301][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.057214][ T31] RIP: 0033:0x7f6cda78d590 [ 885.061811][ T31] RSP: 002b:00007f6cdb693ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 885.070294][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6cda78d590 [ 885.078291][ T31] RDX: 0000000000000002 RSI: 00007f6cda811b1c RDI: 00000000ffffff9c [ 885.086394][ T31] RBP: 00007f6cda811b1c R08: 0000000000000000 R09: 0000000000000000 [ 885.094413][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 885.102673][ T31] R13: 000000000000010e R14: 00002000000002c0 R15: 00007f6cdaaffa28 [ 885.110719][ T31] [ 885.113794][ T31] INFO: task syz.0.1637:12762 blocked for more than 144 seconds. [ 885.121563][ T31] Not tainted syzkaller #0 [ 885.126498][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 885.135183][ T31] task:syz.0.1637 state:D stack:26728 pid:12762 tgid:12761 ppid:5896 task_flags:0x400040 flags:0x00004004 [ 885.147219][ T31] Call Trace: [ 885.150748][ T31] [ 885.153800][ T31] __schedule+0x1798/0x4cc0 [ 885.158349][ T31] ? __pfx___schedule+0x10/0x10 [ 885.163726][ T31] ? schedule+0x91/0x360 [ 885.168002][ T31] schedule+0x165/0x360 [ 885.172381][ T31] schedule_preempt_disabled+0x13/0x30 [ 885.177857][ T31] __mutex_lock+0x7e6/0x1350 [ 885.182721][ T31] ? __mutex_lock+0x5bb/0x1350 [ 885.187511][ T31] ? misc_open+0x51/0x330 [ 885.192044][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 885.197221][ T31] misc_open+0x51/0x330 [ 885.201620][ T31] chrdev_open+0x4c9/0x5e0 [ 885.206200][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 885.211528][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 885.217895][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 885.223124][ T31] do_dentry_open+0x950/0x13f0 [ 885.227924][ T31] vfs_open+0x3b/0x340 [ 885.232059][ T31] ? path_openat+0x2ecd/0x3830 [ 885.236857][ T31] path_openat+0x2ee5/0x3830 [ 885.241499][ T31] ? arch_stack_walk+0xfc/0x150 [ 885.246390][ T31] ? stack_depot_save_flags+0x40/0x860 [ 885.252070][ T31] ? __pfx_path_openat+0x10/0x10 [ 885.257030][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.263235][ T31] do_filp_open+0x1fa/0x410 [ 885.267758][ T31] ? __lock_acquire+0xab9/0xd20 [ 885.272827][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 885.277887][ T31] ? _raw_spin_unlock+0x28/0x50 [ 885.282829][ T31] ? alloc_fd+0x64c/0x6c0 [ 885.287205][ T31] do_sys_openat2+0x121/0x1c0 [ 885.291940][ T31] ? __se_sys_futex+0x36f/0x400 [ 885.296807][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 885.302117][ T31] ? rcu_is_watching+0x15/0xb0 [ 885.306907][ T31] __x64_sys_openat+0x138/0x170 [ 885.311831][ T31] do_syscall_64+0xfa/0x3b0 [ 885.316355][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 885.321603][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.327678][ T31] ? clear_bhb_loop+0x60/0xb0 [ 885.332404][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.338320][ T31] RIP: 0033:0x7f39c2f8ec29 [ 885.342842][ T31] RSP: 002b:00007f39c3d83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 885.351336][ T31] RAX: ffffffffffffffda RBX: 00007f39c31d5fa0 RCX: 00007f39c2f8ec29 [ 885.359340][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 00000000ffffff9c [ 885.367366][ T31] RBP: 00007f39c3011e41 R08: 0000000000000000 R09: 0000000000000000 [ 885.375389][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 885.383652][ T31] R13: 00007f39c31d6038 R14: 00007f39c31d5fa0 R15: 00007f39c32ffa28 [ 885.391721][ T31] [ 885.394761][ T31] INFO: task syz.0.1637:12763 blocked for more than 145 seconds. [ 885.402588][ T31] Not tainted syzkaller #0 [ 885.407542][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 885.416336][ T31] task:syz.0.1637 state:D stack:25928 pid:12763 tgid:12761 ppid:5896 task_flags:0x400140 flags:0x00004004 [ 885.428421][ T31] Call Trace: [ 885.431773][ T31] [ 885.434726][ T31] __schedule+0x1798/0x4cc0 [ 885.439252][ T31] ? __pfx___schedule+0x10/0x10 [ 885.444149][ T31] ? schedule+0x91/0x360 [ 885.448420][ T31] schedule+0x165/0x360 [ 885.452625][ T31] schedule_preempt_disabled+0x13/0x30 [ 885.458109][ T31] __mutex_lock+0x7e6/0x1350 [ 885.462986][ T31] ? __mutex_lock+0x5bb/0x1350 [ 885.467761][ T31] ? rfkill_fop_open+0x12d/0x820 [ 885.472783][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 885.477835][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 885.483273][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 885.488675][ T31] rfkill_fop_open+0x12d/0x820 [ 885.493875][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 885.499190][ T31] misc_open+0x2b9/0x330 [ 885.503562][ T31] chrdev_open+0x4c9/0x5e0 [ 885.507999][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 885.512999][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 885.519359][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 885.524364][ T31] do_dentry_open+0x950/0x13f0 [ 885.529181][ T31] vfs_open+0x3b/0x340 [ 885.533486][ T31] ? path_openat+0x2ecd/0x3830 [ 885.538295][ T31] path_openat+0x2ee5/0x3830 [ 885.543224][ T31] ? arch_stack_walk+0xfc/0x150 [ 885.548146][ T31] ? stack_depot_save_flags+0x40/0x860 [ 885.554983][ T31] ? __pfx_path_openat+0x10/0x10 [ 885.559955][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.566333][ T31] do_filp_open+0x1fa/0x410 [ 885.571114][ T31] ? __lock_acquire+0xab9/0xd20 [ 885.576003][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 885.582247][ T31] ? _raw_spin_unlock+0x28/0x50 [ 885.587137][ T31] ? alloc_fd+0x64c/0x6c0 [ 885.591740][ T31] do_sys_openat2+0x121/0x1c0 [ 885.596444][ T31] ? __se_sys_futex+0x36f/0x400 [ 885.601723][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 885.606956][ T31] ? rcu_is_watching+0x15/0xb0 [ 885.611940][ T31] __x64_sys_openat+0x138/0x170 [ 885.616816][ T31] do_syscall_64+0xfa/0x3b0 [ 885.621617][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 885.626840][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.633163][ T31] ? clear_bhb_loop+0x60/0xb0 [ 885.637890][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.646804][ T31] RIP: 0033:0x7f39c2f8ec29 [ 885.652111][ T31] RSP: 002b:00007f39c3d62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 885.663761][ T31] RAX: ffffffffffffffda RBX: 00007f39c31d6090 RCX: 00007f39c2f8ec29 [ 885.672195][ T31] RDX: 0000000000000182 RSI: 0000200000000040 RDI: 00000000ffffff9c [ 885.680702][ T31] RBP: 00007f39c3011e41 R08: 0000000000000000 R09: 0000000000000000 [ 885.688699][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 885.697898][ T31] R13: 00007f39c31d6128 R14: 00007f39c31d6090 R15: 00007f39c32ffa28 [ 885.708932][ T31] [ 885.712957][ T31] INFO: task syz-executor:12822 blocked for more than 145 seconds. [ 885.721181][ T31] Not tainted syzkaller #0 [ 885.726145][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 885.736667][ T31] task:syz-executor state:D stack:24104 pid:12822 tgid:12822 ppid:5859 task_flags:0x400000 flags:0x00004004 [ 885.748878][ T31] Call Trace: [ 885.752341][ T31] [ 885.755292][ T31] __schedule+0x1798/0x4cc0 [ 885.759815][ T31] ? kasan_save_free_info+0x46/0x50 [ 885.768921][ T31] ? __pfx___schedule+0x10/0x10 [ 885.775619][ T31] ? schedule+0x91/0x360 [ 885.780016][ T31] schedule+0x165/0x360 [ 885.788659][ T31] schedule_preempt_disabled+0x13/0x30 [ 885.794732][ T31] __mutex_lock+0x7e6/0x1350 [ 885.799368][ T31] ? __mutex_lock+0x5bb/0x1350 [ 885.807971][ T31] ? misc_open+0x51/0x330 [ 885.813751][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 885.819005][ T31] misc_open+0x51/0x330 [ 885.824565][ T31] chrdev_open+0x4c9/0x5e0 [ 885.829021][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 885.834183][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 885.840722][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 885.845678][ T31] do_dentry_open+0x950/0x13f0 [ 885.850707][ T31] vfs_open+0x3b/0x340 [ 885.854796][ T31] ? path_openat+0x2ecd/0x3830 [ 885.859578][ T31] path_openat+0x2ee5/0x3830 [ 885.864481][ T31] ? arch_stack_walk+0xfc/0x150 [ 885.869368][ T31] ? stack_depot_save_flags+0x40/0x860 [ 885.875121][ T31] ? do_syscall_64+0xfa/0x3b0 [ 885.879837][ T31] ? __pfx_path_openat+0x10/0x10 [ 885.885030][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.891919][ T31] do_filp_open+0x1fa/0x410 [ 885.896451][ T31] ? __lock_acquire+0xab9/0xd20 [ 885.902009][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 885.907092][ T31] ? _raw_spin_unlock+0x28/0x50 [ 885.912204][ T31] ? alloc_fd+0x64c/0x6c0 [ 885.916580][ T31] do_sys_openat2+0x121/0x1c0 [ 885.921489][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 885.926709][ T31] ? fd_install+0x97/0x540 [ 885.933465][ T31] ? fd_install+0x30d/0x540 [ 885.938009][ T31] __x64_sys_openat+0x138/0x170 [ 885.943157][ T31] do_syscall_64+0xfa/0x3b0 [ 885.947679][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 885.953127][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.959224][ T31] ? clear_bhb_loop+0x60/0xb0 [ 885.964157][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.973543][ T31] RIP: 0033:0x7ffb1678d511 [ 885.977980][ T31] RSP: 002b:00007ffd644b0df0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 885.986530][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ffb1678d511 [ 885.994642][ T31] RDX: 0000000000000002 RSI: 00007ffb1681284a RDI: 00000000ffffff9c [ 886.002699][ T31] RBP: 00007ffb1681284a R08: 00000000000000d7 R09: 0000000000000000 [ 886.010752][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 886.018742][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 886.026886][ T31] [ 886.029920][ T31] INFO: task syz-executor:12823 blocked for more than 145 seconds. [ 886.037865][ T31] Not tainted syzkaller #0 [ 886.044046][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 886.053272][ T31] task:syz-executor state:D stack:24104 pid:12823 tgid:12823 ppid:5859 task_flags:0x400000 flags:0x00004000 [ 886.065300][ T31] Call Trace: [ 886.068592][ T31] [ 886.071575][ T31] __schedule+0x1798/0x4cc0 [ 886.076114][ T31] ? kasan_save_free_info+0x46/0x50 [ 886.081410][ T31] ? __pfx___schedule+0x10/0x10 [ 886.086289][ T31] ? schedule+0x91/0x360 [ 886.090588][ T31] schedule+0x165/0x360 [ 886.094764][ T31] schedule_preempt_disabled+0x13/0x30 [ 886.100336][ T31] __mutex_lock+0x7e6/0x1350 [ 886.104981][ T31] ? __mutex_lock+0x5bb/0x1350 [ 886.109744][ T31] ? misc_open+0x51/0x330 [ 886.114128][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 886.119205][ T31] misc_open+0x51/0x330 [ 886.123421][ T31] chrdev_open+0x4c9/0x5e0 [ 886.127858][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 886.132923][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 886.139289][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 886.144334][ T31] do_dentry_open+0x950/0x13f0 [ 886.149135][ T31] vfs_open+0x3b/0x340 [ 886.153806][ T31] ? path_openat+0x2ecd/0x3830 [ 886.158601][ T31] path_openat+0x2ee5/0x3830 [ 886.163487][ T31] ? arch_stack_walk+0xfc/0x150 [ 886.168372][ T31] ? stack_depot_save_flags+0x40/0x860 [ 886.173867][ T31] ? do_syscall_64+0xfa/0x3b0 [ 886.178593][ T31] ? __pfx_path_openat+0x10/0x10 [ 886.183923][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.190035][ T31] do_filp_open+0x1fa/0x410 [ 886.194664][ T31] ? __lock_acquire+0xab9/0xd20 [ 886.199549][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 886.204736][ T31] ? _raw_spin_unlock+0x28/0x50 [ 886.209620][ T31] ? alloc_fd+0x64c/0x6c0 [ 886.214343][ T31] do_sys_openat2+0x121/0x1c0 [ 886.219028][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 886.224382][ T31] ? fd_install+0x97/0x540 [ 886.228872][ T31] ? fd_install+0x30d/0x540 [ 886.233470][ T31] __x64_sys_openat+0x138/0x170 [ 886.238381][ T31] do_syscall_64+0xfa/0x3b0 [ 886.243256][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 886.248471][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.254637][ T31] ? clear_bhb_loop+0x60/0xb0 [ 886.259336][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.265362][ T31] RIP: 0033:0x7f1eaa18d511 [ 886.269803][ T31] RSP: 002b:00007ffe8d4e8470 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 886.278590][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1eaa18d511 [ 886.286700][ T31] RDX: 0000000000000002 RSI: 00007f1eaa21284a RDI: 00000000ffffff9c [ 886.294750][ T31] RBP: 00007f1eaa21284a R08: 00000000000000d7 R09: 0000000000000000 [ 886.303272][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 886.311456][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 886.319457][ T31] [ 886.322604][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 886.331988][ T31] [ 886.331988][ T31] Showing all locks held in the system: [ 886.339711][ T31] 4 locks held by kworker/0:0/9: [ 886.344755][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 886.355817][ T31] #1: ffffc900000e7bc0 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 886.367117][ T31] #2: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x4c/0x180 [ 886.376678][ T31] #3: ffff88802b901100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 886.386456][ T31] 1 lock held by khungtaskd/31: [ 886.391646][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 886.401625][ T31] 2 locks held by kworker/u8:11/3576: [ 886.407019][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 886.417010][ T31] #1: ffffc9000b847bc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 886.430275][ T31] 2 locks held by getty/5634: [ 886.434988][ T31] #0: ffff88814d2bf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 886.444853][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 886.455051][ T31] 3 locks held by kworker/0:6/5961: [ 886.460621][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 886.471675][ T31] #1: ffffc9000462fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 886.485235][ T31] #2: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 886.496836][ T31] 2 locks held by syz.2.1621/12670: [ 886.502082][ T31] #0: ffff88802b901100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 886.511918][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 886.522349][ T31] 1 lock held by syz.1.1633/12734: [ 886.527456][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 886.536127][ T31] 1 lock held by syz.4.1634/12756: [ 886.541322][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 886.549829][ T31] 1 lock held by syz.3.1636/12755: [ 886.555285][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 886.563923][ T31] 1 lock held by syz.0.1637/12762: [ 886.569040][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 886.577575][ T31] 2 locks held by syz.0.1637/12763: [ 886.583051][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 886.591560][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 886.601661][ T31] 1 lock held by syz-executor/12822: [ 886.606936][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 886.615828][ T31] 1 lock held by syz-executor/12823: [ 886.621199][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 886.629698][ T31] 1 lock held by syz-executor/12824: [ 886.635010][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 886.643718][ T31] 1 lock held by syz-executor/12825: [ 886.648986][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 886.657465][ T31] 1 lock held by syz-executor/12826: [ 886.662831][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 886.671741][ T31] [ 886.674084][ T31] ============================================= [ 886.674084][ T31] [ 886.682583][ T31] NMI backtrace for cpu 1 [ 886.682599][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 886.682619][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 886.682631][ T31] Call Trace: [ 886.682638][ T31] [ 886.682646][ T31] dump_stack_lvl+0x189/0x250 [ 886.682675][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 886.682698][ T31] ? __pfx__printk+0x10/0x10 [ 886.682736][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 886.682767][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 886.682797][ T31] ? __pfx__printk+0x10/0x10 [ 886.682826][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 886.682858][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 886.682888][ T31] watchdog+0xf93/0xfe0 [ 886.682920][ T31] ? watchdog+0x1de/0xfe0 [ 886.682951][ T31] kthread+0x70e/0x8a0 [ 886.682978][ T31] ? __pfx_watchdog+0x10/0x10 [ 886.683003][ T31] ? __pfx_kthread+0x10/0x10 [ 886.683027][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 886.683055][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 886.683073][ T31] ? __pfx_kthread+0x10/0x10 [ 886.683115][ T31] ret_from_fork+0x439/0x7d0 [ 886.683140][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 886.683167][ T31] ? __switch_to_asm+0x39/0x70 [ 886.683192][ T31] ? __switch_to_asm+0x33/0x70 [ 886.683217][ T31] ? __pfx_kthread+0x10/0x10 [ 886.683243][ T31] ret_from_fork_asm+0x1a/0x30 [ 886.683284][ T31] [ 886.683298][ T31] Sending NMI from CPU 1 to CPUs 0: [ 886.829510][ C0] NMI backtrace for cpu 0 [ 886.829526][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 886.829546][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 886.829556][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 886.829578][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 e9 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 886.829593][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 886.829609][ C0] RAX: 8e39eef15388ac00 RBX: ffffffff819683f8 RCX: 8e39eef15388ac00 [ 886.829622][ C0] RDX: 0000000000000001 RSI: ffffffff8d9ba295 RDI: ffffffff8be33f00 [ 886.829634][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 886.829646][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa3a630 [ 886.829659][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 886.829671][ C0] FS: 0000000000000000(0000) GS:ffff888125c13000(0000) knlGS:0000000000000000 [ 886.829685][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 886.829697][ C0] CR2: 0000564dd3043168 CR3: 000000007ef1e000 CR4: 00000000003526f0 [ 886.829712][ C0] Call Trace: [ 886.829719][ C0] [ 886.829725][ C0] default_idle+0x13/0x20 [ 886.829745][ C0] default_idle_call+0x74/0xb0 [ 886.829765][ C0] do_idle+0x1e8/0x510 [ 886.829780][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 886.829802][ C0] ? __pfx_do_idle+0x10/0x10 [ 886.829822][ C0] ? do_idle+0x4ec/0x510 [ 886.829839][ C0] cpu_startup_entry+0x44/0x60 [ 886.829855][ C0] rest_init+0x2de/0x300 [ 886.829877][ C0] start_kernel+0x3a9/0x410 [ 886.829896][ C0] x86_64_start_reservations+0x24/0x30 [ 886.829919][ C0] x86_64_start_kernel+0x143/0x1c0 [ 886.829941][ C0] common_startup_64+0x13e/0x147 [ 886.829972][ C0] [ 886.830546][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 886.830567][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 886.830595][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 886.830609][ T31] Call Trace: [ 886.830622][ T31] [ 886.830633][ T31] dump_stack_lvl+0x99/0x250 [ 886.830667][ T31] ? __asan_memcpy+0x40/0x70 [ 886.830697][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 886.830726][ T31] ? __pfx__printk+0x10/0x10 [ 886.830776][ T31] vpanic+0x281/0x750 [ 886.830809][ T31] ? __pfx_vpanic+0x10/0x10 [ 886.830837][ T31] ? preempt_schedule+0xae/0xc0 [ 886.830861][ T31] ? preempt_schedule_common+0x83/0xd0 [ 886.830894][ T31] panic+0xb9/0xc0 [ 886.830921][ T31] ? __pfx_panic+0x10/0x10 [ 886.830952][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 886.830995][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 886.831033][ T31] watchdog+0xfd2/0xfe0 [ 886.831075][ T31] ? watchdog+0x1de/0xfe0 [ 886.831114][ T31] kthread+0x70e/0x8a0 [ 886.831165][ T31] ? __pfx_watchdog+0x10/0x10 [ 886.831206][ T31] ? __pfx_kthread+0x10/0x10 [ 886.831236][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 886.831270][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 886.831297][ T31] ? __pfx_kthread+0x10/0x10 [ 886.831326][ T31] ret_from_fork+0x439/0x7d0 [ 886.831352][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 886.831380][ T31] ? __switch_to_asm+0x39/0x70 [ 886.831407][ T31] ? __switch_to_asm+0x33/0x70 [ 886.831435][ T31] ? __pfx_kthread+0x10/0x10 [ 886.831463][ T31] ret_from_fork_asm+0x1a/0x30 [ 886.831509][ T31] [ 887.171700][ T31] Kernel Offset: disabled [ 887.176018][ T31] Rebooting in 86400 seconds..