last executing test programs: 3m38.618490404s ago: executing program 3 (id=1031): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x200000000000000}, 0x44080) 3m38.482436365s ago: executing program 3 (id=1032): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$unix(0x1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) r3 = inotify_init1(0x80000) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc219, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x30, 0x2, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0xa0, 0x82}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, &(0x7f0000000e80)={0x40, 0x31, 0x21, {0x21, 0x1, "832cf0d0c96cbccd855e4191044fed5e4c697cd613d4b735d18274b4032679"}}, 0x0}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x42000665) bind$unix(r2, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r2, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000005c00), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005c40)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f0000005c80)={0x1c, r5, 0x711, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0xf0ffff, 0x0, 0x4000084}, 0x10) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r8, &(0x7f0000000500), 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)=""/216, 0xd8}], 0x1, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 3m34.4570431s ago: executing program 3 (id=1044): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 3m34.051119458s ago: executing program 3 (id=1047): add_key(0x0, 0x0, &(0x7f00000001c0)="c8941b7394716f5ddb8a956ecfc8bbf680974f5a363b6e0180e6c70457c89d6f2d531d69a44eb097ff39310c4293a440636fbf99f28e5c5b2046e39ab3b37b18ac9116193f4fcd566ca1cccdcce925631ae3d0786cf6aae09ae25e05693951ac5f8a97250c4321934fb081dfcffb34", 0x6f, 0xfffffffffffffff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x9, 0x82003) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000400)={0x0, 0xffffffffffffff80, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x2) fchdir(r5) unshare(0x2c020400) unshare(0x2c020400) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 3m30.835778021s ago: executing program 3 (id=1061): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x1800}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 3m29.908779994s ago: executing program 3 (id=1068): openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRESHEX=r3], 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) r4 = syz_io_uring_setup(0x64c4, &(0x7f0000000640)={0x0, 0x5865, 0x0, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x100847c0, 0x0, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) sendmsg$nl_route(r7, &(0x7f0000000000)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="a00100006d0000800f0000000000000700000000", @ANYRES32=0x0, @ANYBLOB="48d206000080000008001b000100000008002c000200000054011880b40001800800010007000000140005001ae66074dde30f3c37ec0e70434b6bda14000400da4b451625dc3b7a544abb093f3495f105000200000000000800010005000000140004005aeffe7db46031b5e7d09c0d2d6f210c140005000a47d3f068000000000000000000000008000100d1000000080001000300000014000400f0d52f7db16fdc124afc1e994abd0678080001000500000014000500f425c54651ef93083f60717439e7564f080001000700000028000180050006000100000014000500e7881a31c4b0c04defa208b43b77d70e08000100faffffff5c00018014000500ed829132f034ce8a6ab6cb8979ecd3ff14000500f9fd7dcae155ae9aae1a78d440aae7ce140005006bbb3213483a22ee969975f008a784ed14000400a8de04f5bbf3fa1ad0c71b334e8417be05000600060000001800018014000500bead58bae8c2e92d08946a27f3af867108001b0002000000140014006e723000"/392], 0x1a0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x9, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 3m14.634372592s ago: executing program 32 (id=1068): openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x6, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRESHEX=r3], 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) r4 = syz_io_uring_setup(0x64c4, &(0x7f0000000640)={0x0, 0x5865, 0x0, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x100847c0, 0x0, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) sendmsg$nl_route(r7, &(0x7f0000000000)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="a00100006d0000800f0000000000000700000000", @ANYRES32=0x0, @ANYBLOB="48d206000080000008001b000100000008002c000200000054011880b40001800800010007000000140005001ae66074dde30f3c37ec0e70434b6bda14000400da4b451625dc3b7a544abb093f3495f105000200000000000800010005000000140004005aeffe7db46031b5e7d09c0d2d6f210c140005000a47d3f068000000000000000000000008000100d1000000080001000300000014000400f0d52f7db16fdc124afc1e994abd0678080001000500000014000500f425c54651ef93083f60717439e7564f080001000700000028000180050006000100000014000500e7881a31c4b0c04defa208b43b77d70e08000100faffffff5c00018014000500ed829132f034ce8a6ab6cb8979ecd3ff14000500f9fd7dcae155ae9aae1a78d440aae7ce140005006bbb3213483a22ee969975f008a784ed14000400a8de04f5bbf3fa1ad0c71b334e8417be05000600060000001800018014000500bead58bae8c2e92d08946a27f3af867108001b0002000000140014006e723000"/392], 0x1a0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x9, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 10.474692691s ago: executing program 1 (id=1983): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b2", 0x1}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x42}, 0x94) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340009100000109022400010000b00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d80)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) socket$rds(0x15, 0x5, 0x0) io_uring_enter(r1, 0x47bc, 0x20, 0x0, 0x0, 0x0) 8.760621269s ago: executing program 2 (id=1996): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x30, 0x4, [{{0x9, 0x4, 0x0, 0x9b, 0x1, 0x7, 0x1, 0x3, 0xd, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x8, 0x7, 0x8}}}}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x81, 0x3, 0xf, 0x20, 0x7}, 0xfa, &(0x7f0000000340)={0x5, 0xf, 0xfa, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0xa1, 0x6, 0x9, 0x8, 0x8}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x22, 0x5, 0x80, 0x0, 0x81}, @generic={0xd1, 0x10, 0x4, "6c251449e6a9631e559121274fd7bf299643fccf244bd723431adc181837dcc7f015a9c1dfe7e87e545fa9eb42dd04fa45bd3a419aaac849654a7bc48fb80f00cd606255ca74fc064cf6ab058ef5f174f6e474a42ad11fd79886922f718819e27b4cdd0c6a7684f509a0e400cd2840bcb3c68547a91223cb6e9b9a72ae26a5543a9daebdd30d513088327db91c35030363fda32d3a46d733dd6f512d7522026a5d3408a9a28e603f396be4b6d777ecf7f32f09e23b7c52abe4b2a5b83614731319a11c6c65c4b5bc1da18c171b67"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x1, 0x40, 0x7, 0xc}]}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r4, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="640ff055597e8a84a48d3992e3974f87b2d89479f0e1ffe80b43e8531e", 0x1d}], 0x1}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0xc, &(0x7f0000000140)=@gcm_128={{0xcf05a145b37f58f3}, "2034b251822b3a46", "fa6b72def4acb1a6c86918c638857983", "34b3adec", "6745ac421772258f"}, 0x28) r5 = dup(r3) write$UHID_INPUT(r5, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) 7.351987496s ago: executing program 1 (id=2001): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x4b, 0x1b, "4372070000001000476fb2940acfbe4c0e24fa98ddf306e50000b6"}}) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) (async) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10) (async) syz_io_uring_setup(0x239, &(0x7f00000000c0)={0x0, 0x1c2a, 0x400, 0xfffffffc, 0xfffffff9}, &(0x7f0000000180), &(0x7f00000001c0)) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000000)=0x8) (async) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000080)=0x31, 0x4) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000040)=ANY=[]) 7.119946684s ago: executing program 1 (id=2004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4c) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000040)="45929284bf7a0e7e72fca94e6f0e91cfbbf89363ee4b685ee0ad5487575e6f704f4d832263cabc6b16887a0d24d9a7c33b78ede30c79d4270660f358d02f84aa34c878f086d7eafb8d0656e56e080e4437703022c7d5ee34c56702c159d87aa17ea1b28d18ddbb59ed944daa11c46742a9613e569a8de3796e562b67d509d7ae460014bcb31a8bdf6456eadf20d2190cd03bfec9a97d4ee1c948ddb7d8205b4a3822abedaa05db29763527e906391492", 0xb0, r1) openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r2, r2}, &(0x7f00000001c0)=""/166, 0xa6, &(0x7f0000000140)={&(0x7f0000000300)={'crc32c\x00'}}) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000180)={0x2c, &(0x7f0000000e00)={0x0, 0xc, 0x5, {0x5, 0x4, "6d4c90"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.496022388s ago: executing program 2 (id=2011): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xfff5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x5}}]}, 0x38}}, 0x20000800) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c00000014"], 0x30}}, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd70008a42dc3c5200000008000300", @ANYRES32=0x0, @ANYBLOB="060048004a0000000800cb00ffff0000050089000e0000000800cb00070000000800cb000f0000000600480052000000"], 0x4c}}, 0x14) write(r3, 0x0, 0x0) 5.495505405s ago: executing program 0 (id=2012): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0180c200000308060001080006040002aaaaaaaaaabbac1414bbaaaaaaaaaafbac"], 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000280), &(0x7f00000002c0)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0xfffc, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x100, 0x0, 0x0, r1}, {0x0, 0x1000000000, 0x0, 0x800c252, 0x800000000, 0x0, 0xffffffffffffffff}, {}, 0x20, 0xffffffff}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}}, 0xe8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r2, r2, 0x0, 0x40008) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x810, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000000514050000000008000100000000040800030000000000"], 0x20}}, 0x24008000) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x80) write$dsp(r6, &(0x7f0000000240)=' ', 0x1) close(r6) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) setfsgid(0x0) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x200) r8 = fanotify_init(0x40, 0x400) fanotify_mark(r8, 0x4, 0x8000008, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') 5.239198025s ago: executing program 5 (id=2013): fsopen(0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x35, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r5 = socket(0x28, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000001c0)=0x3) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1040409, &(0x7f0000000140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r10}}, 0x0, 0x0, 0x0) syz_fuse_handle_req(r7, &(0x7f0000006380)="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", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0x7, {0x2, 0x2, 0x194, 0x9, 0x5, 0xa, {0x1, 0x8, 0xe, 0x9, 0x7, 0x0, 0x1, 0x401, 0x0, 0x1000, 0xfffffffd, r9, r10, 0x1, 0x7ff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x20010, &(0x7f0000000940)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize}], [{@obj_role={'obj_role', 0x3d, '#'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, r9}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}}) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000100)=0x10000) ioctl$TCSETS(r6, 0x5402, &(0x7f00000000c0)={0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, "0400"}) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000000)) socket$xdp(0x2c, 0x3, 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 5.122460703s ago: executing program 1 (id=2014): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 4.937763336s ago: executing program 5 (id=2015): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000065c0)=0x29) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000016c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x1660, 0x1a0, 0x1430, 0x1430, 0x12f8, 0x1590, 0x1590, 0x1590, 0x1590, 0x1590, 0x1590, 0x6, 0x0, {[{{@ipv6={@loopback, @local, [0x100fffe00, 0xffffff00, 0x0, 0xffffffff], [0xff, 0xff, 0xff, 0xffffff00], 'netpci0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x4, 0x8, 0x3, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6f}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0x1130, 0x1158, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0x7, {0x5}}}, @common=@inet=@hashlimit1={{0x58}, {'veth1_virt_wifi\x00', {0x61, 0x10000, 0x9, 0x2, 0x6, 0x5, 0x91, 0x20, 0x78}, {0x4}}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x10, @ipv4=@remote, 0x4e20}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0x9, 0xb, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x16c0) 4.632497068s ago: executing program 0 (id=2016): r0 = socket(0x1d, 0x2, 0x6) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x0, 0x4b, 0x2, 0x10000, 0x72, @ipv4={'\x00', '\xff\xff', @local}, @local, 0x8000, 0x7, 0x7, 0xb2}}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x5, '\x00', r2, r3, 0x1, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r4, 0x8000000000000003}, 0x18) sendto$inet(r0, &(0x7f0000000300)="4c7a1f237626d8ca", 0x8, 0x40804, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x6c20, 0x4000804, 0x0, 0x0) 4.587244519s ago: executing program 2 (id=2017): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0xfc, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000400000000", @ANYBLOB="000000002f47c439a7000000003436b702000014000000b70300000000000085000000bf090000630000006206000000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r1 = socket$kcm(0x11, 0x200000000000003, 0x300) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x1}, 0x2) 4.491144702s ago: executing program 0 (id=2019): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$netlink(0x10, 0x3, 0xf) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x2}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000140), &(0x7f00000002c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0x28, 0x1, 0x0, "732283ef1acb5aa7abe50000000009be908100"}) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x2c, 0x11, 0x1, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [{0x8, 0xb, 0x200}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x8, 0xfff3}, {0xe, 0x2}, {0x7, 0xfffd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x8040000) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x89c3, 0x4}, 0x8) 4.319972786s ago: executing program 4 (id=2021): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x30, 0x4, [{{0x9, 0x4, 0x0, 0x9b, 0x1, 0x7, 0x1, 0x3, 0xd, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x8, 0x7, 0x8}}}}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x81, 0x3, 0xf, 0x20, 0x7}, 0xfa, &(0x7f0000000340)={0x5, 0xf, 0xfa, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0xa1, 0x6, 0x9, 0x8, 0x8}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x22, 0x5, 0x80, 0x0, 0x81}, @generic={0xd1, 0x10, 0x4, "6c251449e6a9631e559121274fd7bf299643fccf244bd723431adc181837dcc7f015a9c1dfe7e87e545fa9eb42dd04fa45bd3a419aaac849654a7bc48fb80f00cd606255ca74fc064cf6ab058ef5f174f6e474a42ad11fd79886922f718819e27b4cdd0c6a7684f509a0e400cd2840bcb3c68547a91223cb6e9b9a72ae26a5543a9daebdd30d513088327db91c35030363fda32d3a46d733dd6f512d7522026a5d3408a9a28e603f396be4b6d777ecf7f32f09e23b7c52abe4b2a5b83614731319a11c6c65c4b5bc1da18c171b67"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x1, 0x40, 0x7, 0xc}]}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r4, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="640ff055597e8a84a48d3992e3974f87b2d89479f0e1ffe80b43e8531e", 0x1d}], 0x1}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0xc, &(0x7f0000000140)=@gcm_128={{0xcf05a145b37f58f3}, "2034b251822b3a46", "fa6b72def4acb1a6c86918c638857983", "34b3adec", "6745ac421772258f"}, 0x28) r5 = dup(r3) write$UHID_INPUT(r5, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) 4.222461122s ago: executing program 1 (id=2022): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x2a, 0x2, 0xfffffffc) mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0x0, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000000)={0x1, 0x1}) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000009e920500"/23], 0x48) unshare(0x600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0x9, &(0x7f00000003c0)=ANY=[@ANYBLOB="18060000000000000000000000000000181200e4", @ANYBLOB="470e2ace0852037dd883195fb9c591772388decd1ecc579391d34a455f986c891bd61327800141478a95a8ab5f55d4f55bf155609ba40590ab2e921b0c7dad730353f0d412a9b5f7022dd05982dfbcfb6b8ec3492c5e09347d32fc967801ef7e94a817341b08a8766237f99b1f1275d2a77da1520f3b2d651c5f2dc10e6ae7d001baf3028d9acdea616355c1091b589aad1990e016796b8f7ca15e331bb4255bb7e5", @ANYBLOB="0000000000000000b7030000000000008500000005000000b70000000000000085000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @tracing=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040800}, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x25) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x882c, &(0x7f0000000180)=ANY=[], 0x6, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0xa, 0x2, 0x50, @local, @dev={0xfe, 0x80, '\x00', 0x24}, 0x7800, 0x0, 0x3, 0x7fffffff}}) 4.173296203s ago: executing program 5 (id=2023): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getsa={0x3c, 0x12, 0x10, 0x70bd28, 0x25dfdbfe, {@in=@loopback, 0x4d4, 0x2, 0x3c}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4000040) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000240)=@n={0x2, 0xf, @SEQ_NOTEON=@note=0x75, 0x5b}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.047871746s ago: executing program 5 (id=2024): fsopen(&(0x7f0000000300)='jfs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040800) r2 = semget$private(0x0, 0x1, 0x200) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000140)={0xffffffff, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014976ab94c1fb10628c46d2e681cdb9e5c1a31965c61e0df52c5e", r4}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000600)={0x8, {"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", 0x1000}}, 0x1006) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x20044400) semctl$SEM_STAT_ANY(r2, 0x3, 0x14, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') preadv(r6, 0x0, 0x0, 0xc002a0, 0x0) r7 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x6, 0x44a200) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x50, r7, 0x3ea22000) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$MON_IOCX_GET(r6, 0x40189206, &(0x7f0000000300)={&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000009c0)=""/165, 0xa5}) fsopen(0x0, 0x0) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x7fff, 0x0, 0x1, 0x2, 0x6, 0x0, 0x8, 0x9, 0x5, 0x8000fef6, 0xffffff01, 0x0, 0xa594, 0x0, 0x0, 0x0, {0x7, 0x4}, 0x6, 0x3}}) socket(0x10, 0x803, 0x0) 3.682157572s ago: executing program 0 (id=2025): syz_usb_connect(0x0, 0x2d4, &(0x7f0000000500)=ANY=[@ANYBLOB="120100002ad90d40790927024d6d000000010902c20201000010000904"], 0x0) r0 = epoll_create1(0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000010c0), 0x60901, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000001100)={0x2005}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000000c0)={r8, 0x800, {0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a7ddf8a69ea917ded5ba193b3e7772fd29f35239d2", "530bf65043114b2e53000006000000000010e200", [0x1000000000]}}) r10 = dup(r9) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x80045515, 0x0) write$UHID_INPUT(r10, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) getsockopt$inet_tcp_int(r5, 0x6, 0x6, 0x0, &(0x7f0000000040)) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000040)={0x1f, "dadc262f89740b26809b1d68411a7b12fd9ecfe656f797eaa89bcaf740c243"}) syz_usb_connect(0x3, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="120101023253262024040899382e0102030109022d0001813c20000904f9f7038803d90109050802000206080709058102200009060709050a7aa4"], &(0x7f0000000340)={0xfdcb, 0x0, 0x0, 0x0, 0x0, [{0x0, &(0x7f0000000100)=@string={0x0, 0x3, "81ae8321ba573106a514b9fcb5ded2d9318a6ddac75c290fac9e0cc8db551cb1ae127a6d29eab7e13f7bb0d81b8a5f9d574c1885cf095cdd6256b647efa28bdfdae28c1318b5eeebeefd345b3f6d7917798781"}}, {0x0, &(0x7f0000000080)=@string={0x0, 0x3, "7b417d622791b47d72b0cdf55d4458d1a7a4240834e057af"}}, {0x0, &(0x7f0000000180)=@lang_id={0x0, 0x3, 0x200a}}, {0x0, &(0x7f00000001c0)=@lang_id={0x0, 0x3, 0x200a}}, {0x0, &(0x7f0000000200)=@string={0x0, 0x3, "9ce376b56a46c8f6a413871b6170175e46de56c57742811ed8eb36c7bc3d962f350429770488fc33df0f2c71fbc398cb8a238ee83c4da2f977228e53637a338318ba8115b579824a4f92d693a18e9135ebcbc428ba91f789e4a5b6baefa92849ee0cbf7cd832ef23de9ce5ad8d1f39826c5b1316a9d31459fa9ce919cd666fc604fcd0c68f1c4fbeb8c305430ebd4c4cf4eb030fc90a54254e66a277ca1b98cf77c5e67bc9cd87ff9113947ca8b012a1ec1f3f1bd2bb3ded9238cf6efae6bfe5cf45872eb177ae9fb7f6ba85a99472455e0cf38051b767bb42dd4f53c4e264a6fdfe2f6cc01ae9863acf3bcc3929b6dd40e70819b97e5381bc9ce9"}}, {0x0, &(0x7f0000000300)=@lang_id={0x0, 0x3, 0x408}}]}) 2.978193521s ago: executing program 2 (id=2026): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmmsg$alg(r1, &(0x7f0000000fc0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="317461c66692666e7fb94cf00d482485f8c399720e2f23f66f5e96cc143de4805f259a1905dc7343b38ba949", 0x2c}], 0x1, 0x0, 0x0, 0x4000051}, {0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="d8f83450ef3026997c90a16b7eb746b8e3b4795c26d70c28d316e384a677386ee77d7df3a66aaa74afa21246e7ed13879f9fbafb5e5458ca1089032d0902e1d227ab12c369ec0018c16d6db74e03b6a72403c23fca0148cbaff4bd3ccda2d7aad392fd2350c1536baec4a47eb716ba82c7c185543b8acbfbf220f299a0d960e3fa290c8215ddab6477fd019df3ed2e16c398ec4571e3135e59033cd2bfa8c570455d78", 0xa3}, {&(0x7f0000000380)="1ed53e4e150cd664834a5386d6b7db721aaa90762c73c8e696ec8fb97466812fc3ffcaf476701286228d3fdbc0635177c8358ef28a089f70f96be8f39ce6a577b804dcd756c3a9ef116bff5e0a3a10cffa9537817492d6d776be2a24e50f68abb8c07c71837c626deaf912eadd9fb854c46a37d3f74c75a766cb9ed5206e9e4b5eb1e6e501ae4c3647a2e12a2974143988197462a845f89b68b12851259fb2438f96a84dd389adeec40d35a994e398f4744c9f20ec41e87c872ec01bdf71f2494d91cb30e6205ea9e4fbac9e7b606d48d84b6d99355bfd69da98a4dc82547762954e466dc479f86e52308befb8", 0xed}, {&(0x7f0000000080)="b739a80a42a2b8c26eed9148aef8a6c78c99399a925599a5a64a595a", 0x1c}], 0x3, &(0x7f0000001080)=[@iv={0x160, 0x117, 0x2, 0x149, "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"}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x178, 0x200088f4}, {0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000005c0)="39770648ff7221a8aeb58c989717cc79299222cb18bd87ed7fdf1c4911f179375fd8e1a8d02ca6d7499bce7cd9407adc9db32268113479a616c290a66e6a93f0538778f9ee933c8ef6d760f8714f7add567d16515d797f539233f658a53ed71a3f98024ab93c2a07a47d92b2baf0e9623f5e3c0e551709e03e83c93f2cd6aa90de34f6fe86050b979fc5ee4a703bd094650c06527fb7d39c297a5f2a613e92eba5a25de6e5ed2f6bf851e050f799eb5d33bc56933ececc3c351947afb792ca0fbb94fffe8f23e45198602d7e4961d28cd82844f8e49fc0ef12916847483649cf5ba5c2", 0xe3}, {&(0x7f00000006c0)="60c724cc065d91c3c47e3e362ed3992ea5b5ef56adc64c59a488e20ab2d7d929c5c4d38d01125ffbd34003a71652a7b05906a95d01c3df39f9f7a29ea75b533231ea96c4d7b8b2c21aca5dff8b243866d5f4abd349bd40e7762370814c16dd5ed49a9357aa0d2d9d2aaed0c57ac247805e6c7416350add6cfc1958b7eb5f2aa8e61888ee3060323de2b39c930f64e0088398cc1e760004ea7cd91abc6f58c68ec01423e03b8cae1a68f33ed6dabe8a203ea62af45e94f0bb952b5af51514240da588dc6c651b3abaf8d6b1", 0xcb}, {&(0x7f0000000880)="1fcd9f135cd1aced402fcdc78464660924210bb21387170796af84b995d608a5b02487d7813a0bf8097f4f545c3c89268d32b32e79d9705c86ac063351cf71054720983edf8e2db3b935821a53a1b1fed5e1ed4eea18ecb2518054d53569d1a12d37371d52e1dcf7fcf83715df84d3b136bf6c27c50294cc0c508a64a97bcfdd8599e26b1a1ce0dc520c1a419185dff94e7cd2af3e0435a94fdeece01df3", 0x9e}, {&(0x7f0000000a00)="9b1998acd5aeb656f2768b9090bfdf244da592b5d7aa34efcca11e226831c8a3441c901069346760c51289cf7d7f602559ce850f3d247cb751f6af7fb92e49dc035620e5096c24faa9e6610637207a729f178a5878c0587927f431c206eccb8102f366cfead0cb6f356a930ea22810b0d615d9840c3c29b62a8e6ed16b24c48e061ca088c452d7d6364e9c2d2ad05de9046b77d34117a27445657b8ba07e58db37b7a2379ada5402df61dac82e81c1b44821f0db81f5791749b133244bb396ca3bdf84f1a494d1701c73bce926eb32f748", 0xd1}, {&(0x7f00000007c0)="cb7e1892515ee2a16207ef88515b03acc9951a384be142252a7169765e47357e39c84a5fafea63e71bfa037537ca056fa97677b21583e8ab480ff43e8c93ef4912654dd5249289e8623cad1f531a6c171a3db45911d75431aa7f395f53c8d525e671da18844ce90a0988786aa5a823e14c", 0x71}, {&(0x7f0000000240)="ea04252858298ad08809", 0xa}, {&(0x7f0000000b00)="7a716b1b4125409465d434a82132defa29be2d5a15421bdbf29e1d0257c89b38bb71f9a76d87e6f07e200da90d2ab908dfed607597b534d3fff0d0de90804a0494305c7018b9b7490aacb0f61ead08582110f0f11815ba90d527a7b92397bf2b31e6f8d0197600c67f5b034ec88515b3906fae7f71be5625fa80b97421052f6c2698ee22b2d9b48f5e2d83a4bd7e52f0085ea919312b173cfd573007187491e9ed16a77880b718d9b11c60b76903b03508919c265f", 0xb5}, {&(0x7f0000000bc0)="08c9e7e0cfb7aee0f0ea055676bba37d0d194d5061cb5efdc4ae281ff9d61ad7e6a38c4ae42792d88df9d5871321890e71c318a1932bc3b1bb0085d54173867a8d04ad45ba5d8444dbce286abae1cf015cfb26e921b55f206bd164e2a6d2b500738921da3ad709882f198acf7937aa4da396", 0x72}, {&(0x7f0000000c40)="6832d0a01c370b303c046650a479dc2e1d68dd85973e5625176f621ddbf427fe7589b7288fd942d11ef1d7c47d4bc7817725c8b09a38e422db1ba65b572a9a1ff2828ff6a01c6364271828d72f3219274c9151dd469a3cee432a7ae98886d514aaca8243fdcf3cbfdf0384ed4731ef1b90c069927da40f94bccb9594d88fe7a94f0f6b3eeff6095249e5999b656481a74585a6", 0x93}], 0x9, &(0x7f0000000dc0)=[@iv={0x98, 0x117, 0x2, 0x83, "6b9509d305c764c05b43b26106791360e18fb005618a16d397dc1656ff86029a3921c76ff5e74d91f027f2c544b7c9394bfb77e7215fd612648cfb1bb06f39288f807e023b784b2907fbbc8ee4ab53652adff59b87bad86ac8c46d41f5f66b8e34f2ae93dc3c4652f2463d892b6223aae2298702eaab0fb84ea3aab9a184f53b468cde"}, @assoc={0x18}, @assoc={0x18}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x48, 0x117, 0x2, 0x2d, "07bdf815165e9f4c0cb1a96515c24727cd942d81dca084b952c8f03fbc33a91f0968c39f3abf7030b219d73679"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x1a0, 0xc001}], 0x3, 0x20040810) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}, 0x2) 2.841754704s ago: executing program 2 (id=2027): mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000040)=0x7, 0x9, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01) r0 = syz_io_uring_setup(0x5181, &(0x7f0000000180)={0x0, 0x74b5, 0x8, 0x1, 0x193}, &(0x7f0000000040), &(0x7f0000000200)) r1 = syz_io_uring_setup(0x1333, &(0x7f0000000080)={0x0, 0x7b43, 0x4, 0x3, 0x17d, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="8d376f7b8644126747cb39ecdb9209fb5823ddad01338a2a28a8d11229c8d306d167a92f", 0x24}], 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0) 2.703873814s ago: executing program 2 (id=2028): openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, &(0x7f0000000400)=@udp6=r0}, 0x20) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x4048096) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x3fffffffffffec6, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000c645a7080a0402007bde000000010902120001020000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = dup(r5) r7 = open(&(0x7f0000000040)='./file1\x00', 0x84042, 0x4c) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d1) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x1c) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c5de1cb501e56f055e74242728a76634f000000a2bfebf0334a9364c67ec9df0e1c1bc7e6342a5c12a065eceedba32a031b00"/64, @ANYRES16=r8, @ANYBLOB="20002abd7000fedbdf25040000000900010073797a30000000000900010073797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 2.411703749s ago: executing program 4 (id=2029): r0 = socket(0x1d, 0x2, 0x6) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x0, 0x4b, 0x2, 0x10000, 0x72, @ipv4={'\x00', '\xff\xff', @local}, @local, 0x8000, 0x7, 0x7, 0xb2}}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x5, '\x00', r2, r3, 0x1, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r4, 0x8000000000000003}, 0x18) sendto$inet(r0, &(0x7f0000000300)="4c7a1f237626d8ca", 0x8, 0x40804, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x6c20, 0x4000804, 0x0, 0x0) 1.90181419s ago: executing program 5 (id=2030): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800414901", 0x53}], 0x1) 1.771517537s ago: executing program 5 (id=2031): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x5, 0x577, {0x763039aa, 0x114}, 0x10, 0x5}) io_setup(0x8, &(0x7f00000001c0)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000300)="87992d800d80", 0x6, 0x4}]) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f8008000240000000050800024000000b8608000340000047510800034000000003080001"], 0xdc}}, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) r6 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x0, 0x200, 0x2, 0x7, 0xa, 0x0, 0x5, 0x9, 0x2, 0xca1, 0x8, 0x9, 0x6, 0xff, 0x8, 0x3, 0x7, 0x7, 0xb, 0x64, 0x1000, 0xc}}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x78, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x200}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x401}]}, @CTA_MARK_MASK={0x8}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}]}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}, @CTA_ID={0x8}, @CTA_ID={0x8}]}, 0x78}}, 0x24040080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r6) setsockopt$inet_mreqsrc(r6, 0x0, 0x0, &(0x7f0000000080)={@rand_addr=0x64010102, @local, @remote}, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.447987897s ago: executing program 4 (id=2032): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x28000600) ftruncate(0xffffffffffffffff, 0xee72) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f040, 0x2000}) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local, {[@end]}}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) 1.327709665s ago: executing program 4 (id=2033): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYRESDEC=r1], 0x14}, 0x1, 0x0, 0x0, 0x2400c850}, 0x800) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xed43, 0xf8, 0x6, 0x9, 0x151}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x48, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x880) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0)={0x3}, 0x10}, 0x94) syz_emit_ethernet(0x1b2, &(0x7f0000000080)=ANY=[@ANYBLOB="c16d473d990caaaaaaaaaaaa0800440301a400640000000190787f0000017f000001940400004418236000010001000000090000000a000000040000000644089b50000000088906dda41d4e890ffcac1414aaac1414bbac1414bb78050800004305000900670007071d00000a0101017f00000186180000000306020710f36d3f67914159c50bf03e21f7bb440c36907fffffff000000048917de000000007f0000017f000001ac1414aa64010102863300000002000861a9fdda80c000073103c1d0ca00030e0103d3001027b40de87b76bf2c094e1cad000c010cac717343f07b4463cad289270fe00000020a010101ffffffff7f00000100000000ac1414bbac1e0101ac141419ffffffff94040100445423637f05000000000001ffffffff000000037f000001000000056401010200000400e000000100000009e000000100000008ac1e000100000006ac1e000100010000ac1414aa00000008ac14141100000000830b6664010100ffffffff8927967f000001ac1414aaac1414aa6401010000000000e00000017f000001ac1414bbffffffff441403a1ffffffff00000007ac1e00010000000500"], 0x0) 1.186192213s ago: executing program 4 (id=2034): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x3, 0x4) socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x3f00, 0xc8c9, 0x4002, 0x5e51, 0xfffffffffffffffe, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x2, 0x0, 0x5, 0x5}, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='K', 0xffffffffffffffd8, 0x20000004, &(0x7f0000000700)={0xa, 0x2, 0x0, @rand_addr, 0x2}, 0x1c) 959.981073ms ago: executing program 1 (id=2035): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000001c0)={{0xffff, 0x3, 0x1, 0xe1a4}, 'syz1\x00', 0x12}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x15) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) timerfd_create(0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10) syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x400000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="98000200e180000008001b"], 0x28}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r5, &(0x7f0000001fc0)={0x2, 0x0, @remote}, 0x10) 551.401786ms ago: executing program 0 (id=2036): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @dev={0xfe, 0x80, '\x00', 0x35}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000280)='.\x00', 0xecf86c37d53049cc) (async) pselect6(0x40, &(0x7f0000000040)={0x0, 0x3, 0xffffffffffffffff}, &(0x7f0000000080)={0x4, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffff55b}, 0x0, 0x0, 0x0) r2 = syz_clone(0x18000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace$setsig(0x4203, r2, 0x2, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x440c, &(0x7f00000003c0)=ANY=[@ANYBLOB="66443d31ee28c3eb916fd7272504e3fe8429feecff8860b9bdfb260348c22179e929ead2ad8c8126e78940bb2e5874f96026d7fac849ea7883197352dd293c016d9334d8ad74f2cc48856c028009efa419d27618e445048435aacbce6d3ca389c18e253b618e9494423162ff0bc71e7f59075ddf94cfd700b55316feed05df818e2e0b981df57833557b8acb65b1670cbdc904d99efc1e328623ff44bc79aa06e7844b19eedb9580a93e6be4682b39ede5618c1106b9d2ffd7d799f150334c399c3106452c6c68", @ANYRES16=r1, @ANYRES8=r2, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES16=r3]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000001c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10000, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x1, 0x4}}, 0x50) (async) syz_fuse_handle_req(r3, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x857f}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) chmod(&(0x7f0000000080)='./file0\x00', 0x1) (async) truncate(&(0x7f0000000040)='./file0\x00', 0x80) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002c23b740c71b4010b1b501020301090224000100000000090400"], 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r5, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) (rerun: 32) r7 = socket(0xa, 0x6, 0xffffffff) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000001640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00@', @ANYRES16=r9, @ANYBLOB="0100bf7000fddbdf256700000008001f00", @ANYRES32=r10, @ANYBLOB="0800c30038740000"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0xd0) (async) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 112.952961ms ago: executing program 4 (id=2037): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r1, &(0x7f0000000000)={0x10}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x1000}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='attr\x00') fstat(r0, &(0x7f0000000400)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r7, @ANYRES8=r5, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r7, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x50) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfd, 0x0, 0x0, 0x0, 0x3}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002540)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0d0000042000000000000000", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r10, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000180)={0xa8, 0x7, r10, 0x0, 0x0, 0x0, 0x1, 0x5dec8, 0x800000003d3b4e}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r10, 0x0, 0x10001, 0x0, 0x6, 0xa9613, 0x17e5e9}) r11 = syz_io_uring_setup(0x7a47, &(0x7f0000000c00)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, r6}, &(0x7f0000001080), &(0x7f0000000600)) io_uring_enter(r11, 0x6bba, 0x10a5, 0x3, &(0x7f0000000040)={[0xce]}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) syz_usb_connect(0x4, 0x84, &(0x7f0000000e40)=ANY=[@ANYBLOB="12010000124c2520cc172010bfb401020301090a1240000000d94500"], 0x0) 0s ago: executing program 0 (id=2038): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x4, @mcast1, 0xfffffff9}, 0x1c, 0x0}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4090) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x2000) kernel console output (not intermixed with test programs): for 'user_id' [ 436.843529][ T5881] gspca_sq930x: Unknown sensor [ 436.848530][ T5881] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 436.913537][ T1069] usb 5-1: SerialNumber: syz [ 437.170769][ T1069] usb 5-1: unknown interface protocol 0x55, assuming v1 [ 437.186334][ T1069] usb 5-1: cannot find UAC_HEADER [ 437.315023][ T1069] snd-usb-audio 5-1:1.74: probe with driver snd-usb-audio failed with error -22 [ 437.364619][ T1069] usb 5-1: USB disconnect, device number 76 [ 437.407187][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 437.569995][T11860] syz.1.1578 (11860): drop_caches: 2 [ 438.166581][ T5881] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 438.262846][ T30] audit: type=1326 audit(1750806381.506:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 438.347829][ T30] audit: type=1326 audit(1750806381.506:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 438.415962][ T5881] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.426275][ T30] audit: type=1326 audit(1750806381.576:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 438.448881][ T5901] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 438.465977][ T5881] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 438.492153][ T5881] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 438.509901][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 438.539101][ T5881] usb 5-1: SerialNumber: syz [ 438.547154][ T30] audit: type=1326 audit(1750806381.576:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 438.593823][ T9] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 438.653864][ T5901] usb 6-1: Using ep0 maxpacket: 16 [ 438.706897][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.712533][ T30] audit: type=1326 audit(1750806381.576:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 438.769766][ T5901] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 438.783407][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 438.802503][ T5881] usb 5-1: 0:2 : does not exist [ 438.809478][ T9] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 438.831356][ T30] audit: type=1326 audit(1750806381.586:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 438.862870][ T9] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 438.886038][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.895209][ T5881] usb 5-1: USB disconnect, device number 77 [ 438.909523][ T9] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 438.974111][ T9] usb 2-1: config 250 has no interface number 0 [ 438.980420][ T9] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 439.006225][ T5901] usb 6-1: config 0 descriptor?? [ 439.008162][ T30] audit: type=1326 audit(1750806381.586:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 439.060067][T11877] SET target dimension over the limit! [ 439.075947][ T9] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 439.158791][ T9] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 439.170634][ T30] audit: type=1326 audit(1750806381.586:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 439.248108][ T9] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 439.276635][ T9] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 439.303262][ T30] audit: type=1326 audit(1750806381.586:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 439.386236][ T9] usb 2-1: config 250 interface 228 has no altsetting 0 [ 439.422878][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 439.426779][ T5901] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 439.443481][ T30] audit: type=1326 audit(1750806381.586:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 439.482777][ T9] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 439.500103][ T9] usb 2-1: Product: syz [ 439.513268][ T9] usb 2-1: SerialNumber: syz [ 439.526992][ T5901] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 439.563303][ T5901] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 439.567905][ T9] hub 2-1:250.228: bad descriptor, ignoring hub [ 439.620379][ T9] hub 2-1:250.228: probe with driver hub failed with error -5 [ 439.626284][ T5901] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 439.674320][ T5901] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 439.712802][ T5901] mcp2221 0003:04D8:00DD.001A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 439.788872][ T9] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 73 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 439.829544][ T5901] usb 6-1: USB disconnect, device number 18 [ 439.927170][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.933818][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.403546][ T9] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 440.566077][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 440.583527][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 440.596692][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 440.663661][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 440.672347][T11875] usb 2-1: reset high-speed USB device number 73 using dummy_hcd [ 440.749615][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 440.759967][ T9] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 440.783125][ T9] usb 5-1: Product: syz [ 440.800110][ T9] usb 5-1: Manufacturer: syz [ 440.812984][ T9] usb 5-1: SerialNumber: syz [ 440.859644][ T9] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input47 [ 440.890525][ T5901] usb 3-1: USB disconnect, device number 73 [ 440.913934][T11875] usb 2-1: device descriptor read/64, error -71 [ 441.060750][T11889] netlink: 'syz.4.1587': attribute type 64 has an invalid length. [ 441.073693][T11889] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1587'. [ 441.122181][ T10] usb 5-1: USB disconnect, device number 78 [ 441.128298][ C0] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 441.144460][T11901] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 441.203304][T11875] usb 2-1: reset high-speed USB device number 73 using dummy_hcd [ 441.224352][ T10] appletouch 5-1:1.0: input: appletouch disconnected [ 441.343417][T11875] usb 2-1: device descriptor read/64, error -71 [ 441.644042][T11875] usb 2-1: reset high-speed USB device number 73 using dummy_hcd [ 442.120539][T11914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.257005][T11914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.374718][T11920] xt_CT: You must specify a L4 protocol and not use inversions on it [ 442.861514][T11923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1598'. [ 443.173385][ T5881] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 443.357786][ T5881] usb 6-1: Using ep0 maxpacket: 32 [ 443.383448][ T5881] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 443.401195][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.410223][ T5881] usb 6-1: Product: syz [ 443.417361][ T5881] usb 6-1: Manufacturer: syz [ 443.425428][ T5881] usb 6-1: SerialNumber: syz [ 443.438614][ T5881] usb 6-1: config 0 descriptor?? [ 443.460236][ T5881] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 443.553276][ T24] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 443.666037][ T5881] gspca_stk1135: reg_w 0x2 err -71 [ 443.692555][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 443.717049][ T5881] gspca_stk1135: Sensor write failed [ 443.723292][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 443.742760][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 443.746198][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 443.775784][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 443.784958][ T5881] gspca_stk1135: Sensor write failed [ 443.785012][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 443.785025][ T5881] gspca_stk1135: Sensor read failed [ 443.785050][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 443.785060][ T5881] gspca_stk1135: Sensor read failed [ 443.785069][ T5881] gspca_stk1135: Detected sensor type unknown (0x0) [ 443.785109][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 443.785140][ T5881] gspca_stk1135: Sensor read failed [ 443.785165][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 443.785176][ T5881] gspca_stk1135: Sensor read failed [ 443.785201][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 443.785212][ T5881] gspca_stk1135: Sensor write failed [ 443.785236][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 443.785246][ T5881] gspca_stk1135: Sensor write failed [ 443.785347][ T5881] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 443.792699][ T5881] usb 6-1: USB disconnect, device number 19 [ 443.916226][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.945987][T11923] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1598'. [ 443.963428][ T24] usb 3-1: Product: syz [ 443.972907][ T24] usb 3-1: Manufacturer: syz [ 443.986499][ T24] usb 3-1: SerialNumber: syz [ 444.221757][ T24] usb 3-1: config 0 descriptor?? [ 444.451149][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 445.272176][T11954] syzkaller1: entered promiscuous mode [ 445.284037][T11954] syzkaller1: entered allmulticast mode [ 445.457852][ T24] gspca_zc3xx: reg_w_i err -71 [ 446.066972][ T24] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 446.084422][ T24] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 446.123984][ T24] usb 3-1: USB disconnect, device number 74 [ 446.323524][ T5834] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 446.475147][ T5834] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 446.485538][ T5834] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 446.513285][ T24] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 446.529750][ T5834] usb 6-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 446.555690][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.664545][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 446.682471][ T5834] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 446.716069][ T24] usb 3-1: config 0 has an invalid interface number: 216 but max is 0 [ 446.727215][ T24] usb 3-1: config 0 has no interface number 0 [ 446.737766][T11875] usb 2-1: device descriptor read/8, error -110 [ 446.774313][ T24] usb 3-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 446.813316][ T24] usb 3-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 446.849334][ T24] usb 3-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=df.d7 [ 446.858791][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.887109][ T24] usb 3-1: Product: syz [ 446.891299][ T24] usb 3-1: Manufacturer: syz [ 446.915255][ T24] usb 3-1: SerialNumber: syz [ 446.951741][ T24] usb 3-1: config 0 descriptor?? [ 446.965410][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 447.017716][ T24] snd-usb-audio 3-1:0.216: probe with driver snd-usb-audio failed with error -2 [ 447.033452][T11875] usb 2-1: reset high-speed USB device number 73 using dummy_hcd [ 447.086637][ T5888] usb 6-1: USB disconnect, device number 20 [ 447.092636][T11875] usb 2-1: device descriptor read/8, error -32 [ 447.142930][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.216/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.186606][ T5834] usb 3-1: USB disconnect, device number 75 [ 447.245881][ T1069] usb 2-1: USB disconnect, device number 73 [ 447.261129][ T1069] usblp0: removed [ 447.455287][T11976] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 447.651300][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 447.651316][ T30] audit: type=1326 audit(1750806390.896:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 447.670685][T11982] syzkaller1: entered promiscuous mode [ 447.729075][T11982] syzkaller1: entered allmulticast mode [ 447.891373][ T30] audit: type=1326 audit(1750806390.896:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 447.967760][ T30] audit: type=1326 audit(1750806390.896:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 448.382690][ T30] audit: type=1326 audit(1750806390.916:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 448.602062][T12008] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 448.648422][ T30] audit: type=1326 audit(1750806390.936:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 448.818880][ T30] audit: type=1326 audit(1750806391.176:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 448.832046][T12008] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 448.863730][ T5881] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 448.917554][ T30] audit: type=1326 audit(1750806391.176:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 449.195990][ T5881] usb 2-1: too many endpoints for config 0 interface 0 altsetting 235: 255, using maximum allowed: 30 [ 449.228247][ T5881] usb 2-1: config 0 interface 0 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 449.302207][ T30] audit: type=1326 audit(1750806391.296:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 449.372162][ T5881] usb 2-1: config 0 interface 0 has no altsetting 0 [ 449.405972][ T5881] usb 2-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 449.439933][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.448178][ T30] audit: type=1326 audit(1750806391.296:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 449.517439][ T5881] usb 2-1: config 0 descriptor?? [ 449.583275][ T30] audit: type=1326 audit(1750806391.296:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 449.628551][ T5881] usb 2-1: selecting invalid altsetting 0 [ 449.720278][ T5881] usb 2-1: can't set first interface for hiFace device. [ 449.782772][ T5881] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 449.889178][T12009] delete_channel: no stack [ 449.909899][ T5881] usb 2-1: USB disconnect, device number 75 [ 449.915430][ T1069] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 450.105267][ T1069] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.126568][ T1069] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 450.143637][ T1069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.157035][ T1069] usb 6-1: config 0 descriptor?? [ 450.247238][T12035] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1632'. [ 450.396780][ T1069] usbhid 6-1:0.0: can't add hid device: -71 [ 450.443869][T12037] syzkaller1: entered promiscuous mode [ 450.443896][ T1069] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 450.491275][T12037] syzkaller1: entered allmulticast mode [ 450.497204][ T1069] usb 6-1: USB disconnect, device number 21 [ 450.883527][ T1069] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 451.046703][ T1069] usb 6-1: Using ep0 maxpacket: 32 [ 451.061902][T12048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1638'. [ 451.071549][ T1069] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.113350][ T1069] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 451.132939][ T1069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.182110][ T1069] usb 6-1: config 0 descriptor?? [ 451.216078][ T1069] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 451.240276][T12035] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 451.254242][T12054] FAULT_INJECTION: forcing a failure. [ 451.254242][T12054] name failslab, interval 1, probability 0, space 0, times 0 [ 451.268885][ T1069] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 451.285258][ T10] usb 4-1: USB disconnect, device number 46 [ 451.311570][T12035] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1632'. [ 451.334436][T12054] CPU: 0 UID: 0 PID: 12054 Comm: syz.2.1639 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 451.334461][T12054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 451.334472][T12054] Call Trace: [ 451.334480][T12054] [ 451.334488][T12054] dump_stack_lvl+0x189/0x250 [ 451.334518][T12054] ? __pfx____ratelimit+0x10/0x10 [ 451.334543][T12054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.334568][T12054] ? __pfx__printk+0x10/0x10 [ 451.334592][T12054] ? __pfx___might_resched+0x10/0x10 [ 451.334616][T12054] ? fs_reclaim_acquire+0x7d/0x100 [ 451.334644][T12054] should_fail_ex+0x414/0x560 [ 451.334670][T12054] should_failslab+0xa8/0x100 [ 451.334690][T12054] __kmalloc_noprof+0xcb/0x4f0 [ 451.334705][T12054] ? kfree+0x4d/0x440 [ 451.334740][T12054] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 451.334768][T12054] tomoyo_realpath_from_path+0xe3/0x5d0 [ 451.334802][T12054] ? tomoyo_domain+0xd9/0x130 [ 451.334840][T12054] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 451.334859][T12054] tomoyo_path_number_perm+0x1e8/0x5a0 [ 451.334885][T12054] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 451.334922][T12054] ? __lock_acquire+0xab9/0xd20 [ 451.334969][T12054] ? __fget_files+0x2a/0x420 [ 451.334991][T12054] ? __fget_files+0x2a/0x420 [ 451.335007][T12054] ? __fget_files+0x3a0/0x420 [ 451.335023][T12054] ? __fget_files+0x2a/0x420 [ 451.335050][T12054] security_file_ioctl+0xcb/0x2d0 [ 451.335071][T12054] __se_sys_ioctl+0x47/0x170 [ 451.335097][T12054] do_syscall_64+0xfa/0x3b0 [ 451.335111][T12054] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.335133][T12054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.335149][T12054] ? clear_bhb_loop+0x60/0xb0 [ 451.335169][T12054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.335186][T12054] RIP: 0033:0x7f1fafd8e929 [ 451.335202][T12054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.335216][T12054] RSP: 002b:00007f1fb0cd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 451.335235][T12054] RAX: ffffffffffffffda RBX: 00007f1faffb5fa0 RCX: 00007f1fafd8e929 [ 451.335247][T12054] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 451.335259][T12054] RBP: 00007f1fb0cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 451.335270][T12054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.335280][T12054] R13: 0000000000000000 R14: 00007f1faffb5fa0 R15: 00007f1fb00dfa28 [ 451.335307][T12054] [ 451.340643][T12054] ERROR: Out of memory at tomoyo_realpath_from_path. [ 451.393957][T12053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.563999][ T10] usb 6-1: USB disconnect, device number 22 [ 451.564785][ C0] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 451.569733][T12035] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 451.620628][ T10] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 451.681274][T12053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.082748][T12068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1642'. [ 452.128083][ T7699] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.150741][ T7699] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.203891][ T5888] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 452.269156][ T10] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 452.361128][ T7699] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.393366][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 452.442288][ T7699] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.463856][ T5888] usb 5-1: config 0 has no interfaces? [ 452.471587][ T5888] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 452.514067][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.525695][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 452.660457][ T10] usb 6-1: config 1 interface 0 altsetting 9 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 452.869912][ T5888] usb 5-1: config 0 descriptor?? [ 452.875020][ T10] usb 6-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 452.888642][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 452.901243][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 452.910677][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.918847][ T10] usb 6-1: Product: ꋀ裧촭鴦܆ٴ⻟訋彮沐ꄧ汍띐咂ꕲ鼷삙謺섴䃗⇘㸀鴗ᾢ஬跐ώ倎Ƀ᥅랋썙㍗녤䳬ࡔ뭆伊⃜㽒ꢧ箝숧頋뢋履䲗ꙍ혮 [ 452.938637][ C0] vkms_vblank_simulate: vblank timer overrun [ 452.945312][ T10] usb 6-1: Manufacturer: 悃䖤鱽․ꍓ엸䋡窸픉閝螼쓎覐Dꅪ⯥荠䩸ﻚ般ɖ퍚惗邍響ﻑ캄胂嵕ႆ훟䌈疿ﯲථ鑅ཾ럁쳮Ė屵貑狸 [ 452.969080][ T10] usb 6-1: SerialNumber: ᠖ [ 453.120086][T12062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.131283][T12062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.183704][ T10] usb 6-1: can't set config #1, error -71 [ 453.218409][ T10] usb 6-1: USB disconnect, device number 23 [ 453.459880][ T7699] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.491334][ T7699] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.676505][T12083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1647'. [ 453.700415][T12085] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 453.839364][ T7699] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.888375][ T7699] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.938171][T12092] syzkaller1: entered promiscuous mode [ 453.948089][T12092] syzkaller1: entered allmulticast mode [ 454.030274][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1652'. [ 454.441637][T12106] ERROR: Out of memory at tomoyo_memory_ok. [ 454.456403][T12106] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/syz-executor /root/syz-executor /newroot/359/file1' not defined. [ 454.759624][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1656'. [ 454.797579][T12114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.821800][ T43] usb 5-1: USB disconnect, device number 79 [ 454.840719][ T5881] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 454.848801][T12115] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 454.855319][T12115] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 454.863620][T12114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.992760][T12115] vhci_hcd vhci_hcd.0: Device attached [ 455.020202][T12123] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8) [ 455.026754][T12123] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 455.083557][T12115] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 455.093840][ T5881] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 455.114574][ T5888] vhci_hcd: vhci_device speed not set [ 455.122259][T12123] vhci_hcd vhci_hcd.0: Device attached [ 455.122257][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.134259][ T5881] usb 6-1: config 0 descriptor?? [ 455.188968][T12115] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(14) [ 455.195622][T12115] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 455.225893][ T5888] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 455.226930][T12115] vhci_hcd vhci_hcd.0: Device attached [ 455.294759][T12123] sg_write: data in/out 37998/14 bytes for SCSI command 0x0-- guessing data in; [ 455.294759][T12123] program syz.1.1656 not setting count and/or reply_len properly [ 455.350253][ T5881] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 455.547864][T12124] vhci_hcd: connection closed [ 455.548516][T12116] vhci_hcd: connection reset by peer [ 455.562922][ T13] vhci_hcd: stop threads [ 455.567339][T12128] vhci_hcd: connection closed [ 455.570436][ T13] vhci_hcd: release socket [ 455.593432][ T5881] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 455.597811][ T13] vhci_hcd: disconnect device [ 455.611682][ T13] vhci_hcd: stop threads [ 455.621922][ T13] vhci_hcd: release socket [ 455.627193][ T5881] [drm] Initialized udl on minor 2 [ 455.646988][ T13] vhci_hcd: disconnect device [ 455.682844][ T13] vhci_hcd: stop threads [ 455.704194][T12136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.709134][ T13] vhci_hcd: release socket [ 455.727589][ T13] vhci_hcd: disconnect device [ 455.744952][T12136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.000505][ T5881] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 456.031791][ T5881] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 456.053019][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 456.094482][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 456.113628][ T5881] usb 6-1: USB disconnect, device number 24 [ 456.125261][ T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 456.394273][ T7699] bond0 (unregistering): left promiscuous mode [ 456.401012][ T7699] bond_slave_0: left promiscuous mode [ 456.413151][ T7699] bond_slave_1: left promiscuous mode [ 456.448215][ T7699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.457749][ T7699] bond_slave_0: left allmulticast mode [ 456.466436][ T7699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.478471][ T7699] bond_slave_1: left allmulticast mode [ 456.485852][ T7699] bond0 (unregistering): Released all slaves [ 456.599725][ T7699] bond1 (unregistering): Released all slaves [ 456.741324][T12112] hsr_slave_0 (unregistering): left promiscuous mode [ 456.809350][T12127] vlan2: entered promiscuous mode [ 456.814590][T12127] bridge0: entered promiscuous mode [ 456.839895][T12141] syzkaller1: entered promiscuous mode [ 456.848843][T12141] syzkaller1: entered allmulticast mode [ 456.999402][ T7699] : left promiscuous mode [ 457.104927][ T5881] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 457.323304][ T5881] usb 6-1: Using ep0 maxpacket: 16 [ 457.373535][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 457.591518][T12158] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 457.912165][T12171] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1672'. [ 458.021984][ T7699] hsr_slave_0: left promiscuous mode [ 458.044510][ T7699] hsr_slave_1: left promiscuous mode [ 458.061451][ T7699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.096195][ T7699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.131974][ T7699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.171569][ T7699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.545531][ T7699] veth1_macvtap: left promiscuous mode [ 458.551605][ T7699] veth0_macvtap: left promiscuous mode [ 459.813596][ T5881] usb 6-1: unable to get BOS descriptor or descriptor too short [ 459.924159][ T5881] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 459.965126][ T5881] usb 6-1: can't read configurations, error -71 [ 460.273959][ T1069] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 460.398404][ T5888] vhci_hcd: vhci_device speed not set [ 460.457817][ T1069] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 460.468814][ T1069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 460.489038][ T1069] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 460.504325][ T1069] usb 3-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 460.513875][ T1069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.541916][ T1069] usb 3-1: config 0 descriptor?? [ 460.655792][ T5881] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 460.787181][T12230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.794478][ T1069] a4tech 0003:09DA:001A.001B: unknown main item tag 0x0 [ 460.799064][T12230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.836116][ T1069] a4tech 0003:09DA:001A.001B: unknown main item tag 0x0 [ 460.837787][ T5881] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 460.860625][ T1069] a4tech 0003:09DA:001A.001B: unknown main item tag 0x0 [ 460.871755][ T1069] a4tech 0003:09DA:001A.001B: unknown main item tag 0x0 [ 460.878252][ T5881] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 460.882571][ T1069] a4tech 0003:09DA:001A.001B: unknown main item tag 0x0 [ 460.895340][ T1069] a4tech 0003:09DA:001A.001B: unknown main item tag 0x0 [ 460.896369][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.902311][ T1069] a4tech 0003:09DA:001A.001B: unknown main item tag 0x0 [ 460.914053][ T1069] a4tech 0003:09DA:001A.001B: hidraw0: USB HID v80.04 Device [HID 09da:001a] on usb-dummy_hcd.2-1/input0 [ 460.945867][ T5881] usb 6-1: Product: syz [ 460.968177][ T5881] usb 6-1: Manufacturer: syz [ 460.989764][ T5881] usb 6-1: SerialNumber: syz [ 461.000100][ T5842] usb 3-1: USB disconnect, device number 76 [ 461.041854][ T5881] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 461.048462][T12232] fido_id[12232]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 461.134425][T12194] workqueue: Failed to create a rescuer kthread for wq "all": -EINTR [ 461.431343][ T5881] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 461.662747][ T5834] usb 6-1: USB disconnect, device number 26 [ 461.863536][ T5888] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 461.882093][T12258] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1692'. [ 462.033257][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 462.040291][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.085782][ T5888] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 462.103933][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.130275][ T5888] usb 3-1: config 0 descriptor?? [ 462.381085][T12274] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 462.655334][ T9] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 462.796515][ T5888] usbhid 3-1:0.0: can't add hid device: -71 [ 462.809036][ T5888] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 462.849949][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 462.860969][ T5888] usb 3-1: USB disconnect, device number 77 [ 462.897517][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 462.972168][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 463.011922][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.246057][ T9] usb 5-1: usb_control_msg returned -32 [ 463.261910][ T9] usbtmc 5-1:16.0: can't read capabilities [ 463.293404][ T43] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 463.432595][T12305] all (unregistering): Released all slaves [ 463.469027][ T43] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 463.478720][ T43] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 463.488410][ T43] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 463.500008][ T43] usb 6-1: config 220 has no interface number 2 [ 463.509135][ T43] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 463.522746][ T43] usb 6-1: config 220 interface 0 has no altsetting 0 [ 463.534332][ T43] usb 6-1: config 220 interface 76 has no altsetting 0 [ 463.542615][ T43] usb 6-1: config 220 interface 1 has no altsetting 0 [ 463.552854][ T43] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 463.562408][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.594393][ T43] usb 6-1: Product: syz [ 463.599355][ T43] usb 6-1: Manufacturer: syz [ 463.613043][ T43] usb 6-1: SerialNumber: syz [ 463.639595][ T1069] usb 5-1: USB disconnect, device number 80 [ 463.758577][T12317] veth1_to_batadv: entered promiscuous mode [ 463.765660][ T9] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 463.864776][T12297] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1703'. [ 463.875781][T12297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.887714][T12297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.903753][T12321] binder: 12318:12321 ioctl c0306201 0 returned -14 [ 463.931116][T12325] netlink: 'syz.4.1710': attribute type 11 has an invalid length. [ 463.948690][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 463.955879][ T43] usb 6-1: selecting invalid altsetting 0 [ 463.966311][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.978587][T12321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1708'. [ 463.993795][ T43] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 464.000161][ T43] usb 6-1: No valid video chain found. [ 464.019321][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.037206][ T9] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 464.047605][ T43] usb 6-1: selecting invalid altsetting 0 [ 464.066422][ T43] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 464.099281][ T43] usb 6-1: USB disconnect, device number 27 [ 464.114044][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.171959][ T9] usb 3-1: config 0 descriptor?? [ 464.260950][T12335] FAULT_INJECTION: forcing a failure. [ 464.260950][T12335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.300657][T12335] CPU: 0 UID: 0 PID: 12335 Comm: syz.0.1712 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 464.300681][T12335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 464.300696][T12335] Call Trace: [ 464.300704][T12335] [ 464.300712][T12335] dump_stack_lvl+0x189/0x250 [ 464.300743][T12335] ? __pfx____ratelimit+0x10/0x10 [ 464.300767][T12335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.300792][T12335] ? __pfx__printk+0x10/0x10 [ 464.300811][T12335] ? __might_fault+0xb0/0x130 [ 464.300839][T12335] should_fail_ex+0x414/0x560 [ 464.300865][T12335] _copy_from_user+0x2d/0xb0 [ 464.300883][T12335] ____sys_sendmsg+0x2fe/0x830 [ 464.300910][T12335] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.300939][T12335] ? import_iovec+0x74/0xa0 [ 464.300959][T12335] ___sys_sendmsg+0x21f/0x2a0 [ 464.300982][T12335] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.301037][T12335] ? __fget_files+0x2a/0x420 [ 464.301055][T12335] ? __fget_files+0x3a0/0x420 [ 464.301083][T12335] __sys_sendmmsg+0x227/0x430 [ 464.301109][T12335] ? __pfx___sys_sendmmsg+0x10/0x10 [ 464.301127][T12335] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 464.301176][T12335] ? ksys_write+0x22a/0x250 [ 464.301195][T12335] ? __pfx_ksys_write+0x10/0x10 [ 464.301209][T12335] ? rcu_is_watching+0x15/0xb0 [ 464.301240][T12335] __x64_sys_sendmmsg+0xa0/0xc0 [ 464.301268][T12335] do_syscall_64+0xfa/0x3b0 [ 464.301283][T12335] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.301306][T12335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.301322][T12335] ? clear_bhb_loop+0x60/0xb0 [ 464.301342][T12335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.301359][T12335] RIP: 0033:0x7ff316f8e929 [ 464.301375][T12335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.301389][T12335] RSP: 002b:00007ff317d1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 464.301407][T12335] RAX: ffffffffffffffda RBX: 00007ff3171b5fa0 RCX: 00007ff316f8e929 [ 464.301420][T12335] RDX: 0000000000000001 RSI: 000020000000a6c0 RDI: 0000000000000003 [ 464.301431][T12335] RBP: 00007ff317d1f090 R08: 0000000000000000 R09: 0000000000000000 [ 464.301442][T12335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.301452][T12335] R13: 0000000000000000 R14: 00007ff3171b5fa0 R15: 00007ff3172dfa28 [ 464.301479][T12335] [ 464.594649][T12333] netlink: 'syz.4.1711': attribute type 1 has an invalid length. [ 464.678501][T12336] bond3: entered allmulticast mode [ 464.734186][T12336] 8021q: adding VLAN 0 to HW filter on device bond3 [ 465.577905][ T5888] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 465.588340][ T9] letsketch 0003:6161:4D15.001C: Device info: ఁ [ 465.782549][ T5888] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 465.794852][T12369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.806646][T12369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.883422][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.902852][ T9] usb 3-1: Max retries (5) exceeded reading string descriptor 201 [ 465.917858][ T9] letsketch 0003:6161:4D15.001C: probe with driver letsketch failed with error -71 [ 465.930046][ T5888] usb 5-1: Product: syz [ 465.958636][ T5888] usb 5-1: Manufacturer: syz [ 465.978018][ T5888] usb 5-1: SerialNumber: syz [ 465.995083][ T9] usb 3-1: USB disconnect, device number 78 [ 466.037065][ T5888] usb 5-1: config 0 descriptor?? [ 466.503380][ T9] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 466.669160][ T5888] usb 5-1: USB disconnect, device number 81 [ 466.676706][ T9] usb 3-1: config index 0 descriptor too short (expected 2084, got 36) [ 466.696483][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.710798][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.737536][ T9] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 466.809266][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.848921][ T9] usb 3-1: config 0 descriptor?? [ 467.296034][T12392] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1721'. [ 467.305968][T12392] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1721'. [ 467.345548][ T9] dragonrise 0003:0079:0006.001D: unknown main item tag 0x0 [ 467.352885][ T9] dragonrise 0003:0079:0006.001D: unknown main item tag 0x0 [ 467.398373][ T9] dragonrise 0003:0079:0006.001D: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.2-1/input0 [ 467.427571][ T9] dragonrise 0003:0079:0006.001D: no inputs found [ 467.441687][T12395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.471353][ T9] dragonrise 0003:0079:0006.001D: force feedback init failed [ 467.510557][T12395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.542370][T12395] sctp: [Deprecated]: syz.0.1722 (pid 12395) Use of struct sctp_assoc_value in delayed_ack socket option. [ 467.542370][T12395] Use struct sctp_sack_info instead [ 467.592772][T12395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.622672][T12395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.803983][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 467.977630][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 468.051733][ T9] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 468.077313][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.102896][ T9] usb 6-1: Product: syz [ 468.148443][ T9] usb 6-1: Manufacturer: syz [ 468.165119][ T9] usb 6-1: SerialNumber: syz [ 468.189073][ T9] usb 6-1: config 0 descriptor?? [ 468.207035][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 468.219390][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 468.229719][ T9] f81232 6-1:0.0: f81534a converter detected [ 468.373078][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1726'. [ 468.403135][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1726'. [ 468.430438][T12414] netlink: 'syz.1.1726': attribute type 3 has an invalid length. [ 468.439225][T12414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1726'. [ 469.858747][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 469.858788][ T30] audit: type=1326 audit(1750806413.106:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 469.947168][ T30] audit: type=1326 audit(1750806413.146:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 470.080454][ T30] audit: type=1326 audit(1750806413.146:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 470.780396][ T9] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 470.811249][ T9] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 470.845174][ T5834] usb 3-1: USB disconnect, device number 79 [ 470.884348][ T30] audit: type=1326 audit(1750806413.146:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 470.933622][ T9] usb 6-1: USB disconnect, device number 28 [ 470.967917][ T30] audit: type=1326 audit(1750806413.146:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 470.990454][ T30] audit: type=1326 audit(1750806413.146:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 471.044311][ T30] audit: type=1326 audit(1750806413.146:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 471.100463][ T9] f81232 6-1:0.0: device disconnected [ 471.173387][ T30] audit: type=1326 audit(1750806413.146:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 471.303429][ T30] audit: type=1326 audit(1750806413.146:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 471.501316][ T30] audit: type=1326 audit(1750806413.146:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9f0938e929 code=0x7ffc0000 [ 471.693370][ T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 471.831798][T12465] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 471.863448][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 471.878142][ T9] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 471.943030][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.985010][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 472.033381][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 472.063106][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.095416][ T9] usb 6-1: Product: syz [ 472.111844][ T9] usb 6-1: Manufacturer: syz [ 472.127111][ T9] usb 6-1: SerialNumber: syz [ 472.446241][T12481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.470991][T12481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.496603][T12481] fuse: Unknown parameter '000000000000000000100xffffffffffffffff׫-<@b\Bxa]uKY°ǁRw׼ȰE|(f*q0P' [ 472.539734][T12483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.550731][T12481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.552567][T12483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.559749][T12481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.743028][ T9] usb 6-1: 0:2 : does not exist [ 472.909213][T12490] tipc: Failed to remove unknown binding: 66,1,1/0:3732855936/3732855938 [ 472.909297][T12490] tipc: Failed to remove unknown binding: 66,1,1/0:3732855936/3732855938 [ 474.753272][ T5834] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 474.756647][ T9] usb 6-1: USB disconnect, device number 29 [ 474.997389][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 475.029227][ T5834] usb 3-1: config 0 has no interfaces? [ 475.051628][ T5834] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 475.098336][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.132603][ T5834] usb 3-1: Product: syz [ 475.219765][T12545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1754'. [ 475.241246][ T5834] usb 3-1: Manufacturer: syz [ 475.338573][ T5834] usb 3-1: SerialNumber: syz [ 475.453113][ T5834] usb 3-1: config 0 descriptor?? [ 476.293512][ T43] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 476.499844][T12587] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1764'. [ 476.588403][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 476.621455][ T43] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 476.663011][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.985196][ T43] usb 2-1: config 0 descriptor?? [ 477.010639][T12571] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 477.573391][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 477.580548][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 477.965401][ T43] usb 2-1: USB disconnect, device number 76 [ 478.202177][ T43] usb 3-1: USB disconnect, device number 80 [ 478.590475][T12611] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1767'. [ 478.608908][T12610] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1768'. [ 478.903568][ T5842] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 479.056826][ T5842] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.084937][ T5842] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 479.105050][ T5842] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 479.124086][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 479.141057][ T5842] usb 6-1: SerialNumber: syz [ 479.321778][T12630] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1773'. [ 479.362188][T12634] FAULT_INJECTION: forcing a failure. [ 479.362188][T12634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.390035][T12630] netlink: 'syz.1.1773': attribute type 29 has an invalid length. [ 479.422462][ T5842] usb 6-1: 0:2 : does not exist [ 479.443364][T12634] CPU: 1 UID: 0 PID: 12634 Comm: syz.2.1774 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 479.443388][T12634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 479.443399][T12634] Call Trace: [ 479.443407][T12634] [ 479.443415][T12634] dump_stack_lvl+0x189/0x250 [ 479.443445][T12634] ? __pfx____ratelimit+0x10/0x10 [ 479.443469][T12634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.443493][T12634] ? __pfx__printk+0x10/0x10 [ 479.443510][T12634] ? __might_fault+0xb0/0x130 [ 479.443538][T12634] should_fail_ex+0x414/0x560 [ 479.443562][T12634] _copy_from_user+0x2d/0xb0 [ 479.443579][T12634] snd_seq_write+0x300/0x810 [ 479.443616][T12634] ? __pfx_snd_seq_write+0x10/0x10 [ 479.443642][T12634] ? bpf_lsm_file_permission+0x9/0x20 [ 479.443664][T12634] ? security_file_permission+0x75/0x290 [ 479.443684][T12634] ? rw_verify_area+0x258/0x650 [ 479.443708][T12634] ? __pfx_snd_seq_write+0x10/0x10 [ 479.443734][T12634] vfs_write+0x27e/0xa90 [ 479.443766][T12634] ? __pfx_vfs_write+0x10/0x10 [ 479.443791][T12634] ? __fget_files+0x2a/0x420 [ 479.443812][T12634] ? __fget_files+0x2a/0x420 [ 479.443827][T12634] ? __fget_files+0x3a0/0x420 [ 479.443844][T12634] ? __fget_files+0x2a/0x420 [ 479.443872][T12634] ksys_write+0x145/0x250 [ 479.443891][T12634] ? __pfx_ksys_write+0x10/0x10 [ 479.443913][T12634] ? do_syscall_64+0xbe/0x3b0 [ 479.443933][T12634] do_syscall_64+0xfa/0x3b0 [ 479.443949][T12634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.443966][T12634] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 479.443983][T12634] ? clear_bhb_loop+0x60/0xb0 [ 479.444005][T12634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.444022][T12634] RIP: 0033:0x7f1fafd8e929 [ 479.444037][T12634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.444053][T12634] RSP: 002b:00007f1fb0cd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 479.444072][T12634] RAX: ffffffffffffffda RBX: 00007f1faffb5fa0 RCX: 00007f1fafd8e929 [ 479.444084][T12634] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000004 [ 479.444094][T12634] RBP: 00007f1fb0cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 479.444105][T12634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.444114][T12634] R13: 0000000000000000 R14: 00007f1faffb5fa0 R15: 00007f1fb00dfa28 [ 479.444145][T12634] [ 479.458927][ T5842] usb 6-1: USB disconnect, device number 30 [ 479.720293][ T43] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 479.908706][ T43] usb 2-1: config 1 interface 0 altsetting 155 bulk endpoint 0x1 has invalid maxpacket 1023 [ 479.929611][ T43] usb 2-1: config 1 interface 0 has no altsetting 0 [ 479.959366][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 480.001376][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.063286][ T43] usb 2-1: Product: syz [ 480.067507][ T43] usb 2-1: Manufacturer: syz [ 480.072108][ T43] usb 2-1: SerialNumber: syz [ 480.121217][T12630] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 480.763490][T12658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1780'. [ 480.929995][T12672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1785'. [ 480.948273][T12672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1785'. [ 481.199740][T12676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1787'. [ 482.279839][ T43] usb 2-1: USB disconnect, device number 77 [ 482.680086][T12709] loop4: detected capacity change from 0 to 7 [ 482.752273][T12698] syz.0.1790 (12698): drop_caches: 2 [ 482.767439][ T5846] Dev loop4: unable to read RDB block 7 [ 482.781647][ T5846] loop4: unable to read partition table [ 482.788418][ T5846] loop4: partition table beyond EOD, truncated [ 482.811527][T12709] Dev loop4: unable to read RDB block 7 [ 482.844956][T12709] loop4: unable to read partition table [ 482.865533][T12717] netlink: 14212 bytes leftover after parsing attributes in process `syz.0.1796'. [ 482.868962][T12709] loop4: partition table beyond EOD, truncated [ 482.891665][T12709] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 483.586199][T12732] FAULT_INJECTION: forcing a failure. [ 483.586199][T12732] name failslab, interval 1, probability 0, space 0, times 0 [ 483.599857][T12732] CPU: 1 UID: 0 PID: 12732 Comm: syz.0.1798 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 483.599881][T12732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 483.599892][T12732] Call Trace: [ 483.599900][T12732] [ 483.599907][T12732] dump_stack_lvl+0x189/0x250 [ 483.599937][T12732] ? __pfx____ratelimit+0x10/0x10 [ 483.599963][T12732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.599986][T12732] ? __pfx__printk+0x10/0x10 [ 483.600010][T12732] ? __pfx___might_resched+0x10/0x10 [ 483.600033][T12732] ? fs_reclaim_acquire+0x7d/0x100 [ 483.600057][T12732] should_fail_ex+0x414/0x560 [ 483.600082][T12732] should_failslab+0xa8/0x100 [ 483.600102][T12732] kmem_cache_alloc_noprof+0x73/0x3c0 [ 483.600127][T12732] ? alloc_empty_file+0x55/0x1d0 [ 483.600151][T12732] alloc_empty_file+0x55/0x1d0 [ 483.600173][T12732] path_openat+0x107/0x3830 [ 483.600194][T12732] ? arch_stack_walk+0xfc/0x150 [ 483.600240][T12732] ? kasan_save_track+0x4f/0x80 [ 483.600262][T12732] ? kasan_save_track+0x3e/0x80 [ 483.600283][T12732] ? __kasan_slab_alloc+0x6c/0x80 [ 483.600298][T12732] ? getname_flags+0xb8/0x540 [ 483.600317][T12732] ? __pfx_path_openat+0x10/0x10 [ 483.600337][T12732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.600373][T12732] do_filp_open+0x1fa/0x410 [ 483.600394][T12732] ? __lock_acquire+0xab9/0xd20 [ 483.600418][T12732] ? __pfx_do_filp_open+0x10/0x10 [ 483.600462][T12732] ? _raw_spin_unlock+0x28/0x50 [ 483.600482][T12732] ? alloc_fd+0x64c/0x6c0 [ 483.600510][T12732] do_sys_openat2+0x121/0x1c0 [ 483.600535][T12732] ? __pfx_do_sys_openat2+0x10/0x10 [ 483.600556][T12732] ? ksys_write+0x22a/0x250 [ 483.600574][T12732] ? __pfx_ksys_write+0x10/0x10 [ 483.600588][T12732] ? rcu_is_watching+0x15/0xb0 [ 483.600615][T12732] __x64_sys_openat+0x138/0x170 [ 483.600641][T12732] do_syscall_64+0xfa/0x3b0 [ 483.600656][T12732] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.600679][T12732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.600695][T12732] ? clear_bhb_loop+0x60/0xb0 [ 483.600715][T12732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.600737][T12732] RIP: 0033:0x7ff316f8e929 [ 483.600752][T12732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.600767][T12732] RSP: 002b:00007ff314dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 483.600785][T12732] RAX: ffffffffffffffda RBX: 00007ff3171b6160 RCX: 00007ff316f8e929 [ 483.600804][T12732] RDX: 000000000018557f RSI: 0000200000000140 RDI: ffffffffffffff9c [ 483.600816][T12732] RBP: 00007ff314dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 483.600827][T12732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.600837][T12732] R13: 0000000000000000 R14: 00007ff3171b6160 R15: 00007ff3172dfa28 [ 483.600864][T12732] [ 483.993460][ T5842] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 484.293475][ T5842] usb 5-1: Using ep0 maxpacket: 16 [ 484.305345][ T5842] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 484.314706][ T5842] usb 5-1: config 0 has no interface number 0 [ 484.467513][ T5842] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0xA has invalid maxpacket 1032, setting to 1024 [ 484.491155][ T5842] usb 5-1: config 0 interface 35 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 484.503456][ T5842] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 484.516759][ T5842] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 484.529850][ T5842] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=a7.5c [ 484.543997][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 484.561404][ T5842] usb 5-1: Product: syz [ 484.566626][ T5842] usb 5-1: Manufacturer: syz [ 484.571245][ T5842] usb 5-1: SerialNumber: syz [ 484.588667][ T5842] usb 5-1: config 0 descriptor?? [ 484.602034][T12730] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 484.619061][ T5842] cypress_m8 5-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 484.745410][T12746] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1801'. [ 484.816212][T12748] support for cryptoloop has been removed. Use dm-crypt instead. [ 484.842640][ T30] audit: type=1326 audit(1750806428.086:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12747 comm="syz.2.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fafd8e929 code=0x7ffc0000 [ 485.084381][ T30] audit: type=1326 audit(1750806428.306:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12747 comm="syz.2.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1fafd8e929 code=0x7ffc0000 [ 485.151646][ T30] audit: type=1326 audit(1750806428.306:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12747 comm="syz.2.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fafd8e929 code=0x7ffc0000 [ 485.221651][ T30] audit: type=1326 audit(1750806428.306:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12747 comm="syz.2.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1fafd8e929 code=0x7ffc0000 [ 485.252673][ T30] audit: type=1326 audit(1750806428.306:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12747 comm="syz.2.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fafd8e929 code=0x7ffc0000 [ 485.276473][ T30] audit: type=1326 audit(1750806428.306:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12747 comm="syz.2.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1fafd8e929 code=0x7ffc0000 [ 485.300199][ T30] audit: type=1326 audit(1750806428.306:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12747 comm="syz.2.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fafd8e929 code=0x7ffc0000 [ 485.384657][ T30] audit: type=1326 audit(1750806428.306:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12747 comm="syz.2.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1fafd8e929 code=0x7ffc0000 [ 485.410257][ T30] audit: type=1326 audit(1750806428.306:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12747 comm="syz.2.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fafd8e929 code=0x7ffc0000 [ 485.436081][ T30] audit: type=1326 audit(1750806428.306:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12747 comm="syz.2.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f1fafd8e929 code=0x7ffc0000 [ 485.532748][T12756] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 485.557584][T12756] PKCS7: Only support pkcs7_signedData type [ 486.248519][ T5888] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 486.409470][ T5842] usb 5-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 486.454850][ T5888] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 486.502805][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.529099][ T5842] usb 5-1: USB disconnect, device number 82 [ 486.550023][ T5888] usb 3-1: config 0 descriptor?? [ 486.586359][ T5888] cp210x 3-1:0.0: cp210x converter detected [ 486.612764][ T5842] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 486.644017][ T5842] cypress_m8 5-1:0.35: device disconnected [ 487.021724][ T5888] usb 3-1: cp210x converter now attached to ttyUSB0 [ 487.039055][ T5888] usb 3-1: USB disconnect, device number 81 [ 487.061970][ T5888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 487.122496][ T5888] cp210x 3-1:0.0: device disconnected [ 487.214812][T12792] binder: 12781:12792 ioctl c00c6211 ffffffffffffffff returned -14 [ 489.013354][ T5842] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 489.100295][T12831] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1820'. [ 489.173306][ T5842] usb 6-1: Using ep0 maxpacket: 32 [ 489.221050][ T5842] usb 6-1: config 0 has an invalid interface number: 167 but max is 0 [ 489.318011][ T5842] usb 6-1: config 0 has no interface number 0 [ 489.377537][ T5842] usb 6-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 489.413465][ T5842] usb 6-1: config 0 interface 167 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 32 [ 489.465127][ T5842] usb 6-1: config 0 interface 167 has no altsetting 0 [ 489.474936][T12840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.504399][ T5842] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 489.514158][T12840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.527022][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.545767][ T5842] usb 6-1: Product: syz [ 489.576441][ T5842] usb 6-1: Manufacturer: syz [ 489.582118][ T5842] usb 6-1: SerialNumber: syz [ 489.609137][ T5842] usb 6-1: config 0 descriptor?? [ 489.628579][T12823] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 489.649901][T12823] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 489.848873][T12842] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1822'. [ 489.853514][ T30] kauditd_printk_skb: 1275 callbacks suppressed [ 489.853528][ T30] audit: type=1326 audit(1750806433.106:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f035672ab19 code=0x7ffc0000 [ 489.936382][ T5842] usbtest 6-1:0.167: couldn't get endpoints, -22 [ 489.952986][ T5842] usbtest 6-1:0.167: probe with driver usbtest failed with error -22 [ 489.972380][ T30] audit: type=1326 audit(1750806433.146:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f035672ab19 code=0x7ffc0000 [ 490.010484][ T5842] usb 6-1: USB disconnect, device number 31 [ 490.073280][ T30] audit: type=1326 audit(1750806433.146:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f035672ab19 code=0x7ffc0000 [ 490.095640][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.173778][ T30] audit: type=1326 audit(1750806433.146:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f035672ab19 code=0x7ffc0000 [ 490.196125][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.260131][ T30] audit: type=1326 audit(1750806433.146:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f035672ab19 code=0x7ffc0000 [ 490.282479][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.390006][ T30] audit: type=1326 audit(1750806433.146:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f035672ab19 code=0x7ffc0000 [ 490.446842][ T30] audit: type=1326 audit(1750806433.146:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f035672ab19 code=0x7ffc0000 [ 490.498017][T12865] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1825'. [ 490.560869][ T30] audit: type=1326 audit(1750806433.146:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f035672ab19 code=0x7ffc0000 [ 490.627906][ T30] audit: type=1326 audit(1750806433.146:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f035672ab19 code=0x7ffc0000 [ 490.676357][ T30] audit: type=1326 audit(1750806433.146:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f035672ab19 code=0x7ffc0000 [ 490.821868][T12877] FAULT_INJECTION: forcing a failure. [ 490.821868][T12877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.883477][T12877] CPU: 0 UID: 0 PID: 12877 Comm: syz.4.1831 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 490.883503][T12877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 490.883514][T12877] Call Trace: [ 490.883521][T12877] [ 490.883529][T12877] dump_stack_lvl+0x189/0x250 [ 490.883558][T12877] ? __pfx____ratelimit+0x10/0x10 [ 490.883581][T12877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.883605][T12877] ? __pfx__printk+0x10/0x10 [ 490.883624][T12877] ? __might_fault+0xb0/0x130 [ 490.883649][T12877] should_fail_ex+0x414/0x560 [ 490.883675][T12877] _copy_from_user+0x2d/0xb0 [ 490.883693][T12877] io_submit_one+0xc2/0x1310 [ 490.883726][T12877] ? __pfx_io_submit_one+0x10/0x10 [ 490.883745][T12877] ? __might_fault+0xb0/0x130 [ 490.883773][T12877] ? __might_fault+0xb0/0x130 [ 490.883792][T12877] __se_sys_io_submit+0x185/0x2f0 [ 490.883811][T12877] ? __pfx___se_sys_io_submit+0x10/0x10 [ 490.883825][T12877] ? ksys_write+0x22a/0x250 [ 490.883851][T12877] ? do_syscall_64+0xbe/0x3b0 [ 490.883869][T12877] do_syscall_64+0xfa/0x3b0 [ 490.883883][T12877] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.883904][T12877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.883921][T12877] ? clear_bhb_loop+0x60/0xb0 [ 490.883940][T12877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.883955][T12877] RIP: 0033:0x7f035678e929 [ 490.883971][T12877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.883985][T12877] RSP: 002b:00007f035755a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 490.884003][T12877] RAX: ffffffffffffffda RBX: 00007f03569b5fa0 RCX: 00007f035678e929 [ 490.884015][T12877] RDX: 0000200000000380 RSI: 0000000000000001 RDI: 00007f0357539000 [ 490.884026][T12877] RBP: 00007f035755a090 R08: 0000000000000000 R09: 0000000000000000 [ 490.884036][T12877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.884045][T12877] R13: 0000000000000000 R14: 00007f03569b5fa0 R15: 00007f0356adfa28 [ 490.884072][T12877] [ 491.094661][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.110389][T12864] loop4: detected capacity change from 0 to 7 [ 491.364864][T12864] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 491.378555][T12864] loop4: p1 start 16843009 is beyond EOD, truncated [ 491.473294][T12864] loop4: p2 start 16843009 is beyond EOD, truncated [ 491.490142][T12864] loop4: p3 start 16843009 is beyond EOD, truncated [ 491.533205][T12864] loop4: p4 start 16843009 is beyond EOD, truncated [ 491.560620][T12864] loop4: p5 start 16843009 is beyond EOD, truncated [ 491.569278][T12864] loop4: p6 start 16843009 is beyond EOD, truncated [ 491.623292][ T5901] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 491.634869][T12864] loop4: p7 start 16843009 is beyond EOD, truncated [ 491.641471][T12864] loop4: p8 start 16843009 is beyond EOD, truncated [ 491.648569][T12864] loop4: p9 start 16843009 is beyond EOD, truncated [ 491.658705][T12864] loop4: p10 start 16843009 is beyond EOD, truncated [ 491.707268][T12864] loop4: p11 start 16843009 is beyond EOD, truncated [ 491.764293][T12864] loop4: p12 start 16843009 is beyond EOD, truncated [ 491.960185][T12896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1834'. [ 492.054802][ T5901] usb 6-1: config 0 has no interfaces? [ 492.108876][T12895] lo: left promiscuous mode [ 492.179285][ T5901] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 492.214421][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.222451][ T5901] usb 6-1: Product: syz [ 492.279403][T12895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 492.295847][ T5901] usb 6-1: Manufacturer: syz [ 492.300466][ T5901] usb 6-1: SerialNumber: syz [ 492.314577][ T5901] usb 6-1: config 0 descriptor?? [ 492.443539][ T10] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 492.506228][T12910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.553257][T12884] netlink: 'syz.5.1832': attribute type 12 has an invalid length. [ 492.561455][T12884] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.1832'. [ 492.605173][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 492.625580][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 492.644272][T12910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.652914][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 492.685035][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 492.708018][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 492.731578][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 492.751879][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.009279][ T10] usb 3-1: usb_control_msg returned -71 [ 493.019068][ T10] usbtmc 3-1:16.0: can't read capabilities [ 493.042901][ T10] usb 3-1: USB disconnect, device number 82 [ 493.483279][T12929] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1839'. [ 494.213822][T12947] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1843'. [ 494.222965][T12947] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1843'. [ 494.223075][T12947] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1843'. [ 494.759506][T12947] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1843'. [ 494.768877][T12947] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1843'. [ 494.778287][T12947] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1843'. [ 495.027418][T12964] netlink: 'syz.1.1846': attribute type 21 has an invalid length. [ 495.181494][ T5901] usb 6-1: USB disconnect, device number 32 [ 495.306869][T12947] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1843'. [ 495.316602][T12947] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1843'. [ 495.376150][T12947] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1843'. [ 495.466120][T12961] syzkaller0: entered promiscuous mode [ 495.473225][T12961] syzkaller0: entered allmulticast mode [ 495.541436][T12976] netlink: 'syz.5.1849': attribute type 10 has an invalid length. [ 495.572677][T12976] syz_tun: entered promiscuous mode [ 495.585899][T12976] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 496.463522][ T5881] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 496.629191][ T5881] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 496.644209][ T5881] usb 3-1: config 0 has no interface number 0 [ 496.674672][ T5881] usb 3-1: too many endpoints for config 0 interface 1 altsetting 0: 253, using maximum allowed: 30 [ 496.793547][ T5881] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 496.811532][ T5881] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.821583][ T5881] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 496.845143][ T5881] usb 3-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 496.866835][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.917465][ T5881] usb 3-1: config 0 descriptor?? [ 496.928372][T13010] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1857'. [ 497.184822][T12994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.257465][T12994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.637400][ T5881] usbhid 3-1:0.1: can't add hid device: -71 [ 497.779769][ T5881] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 497.850269][ T5881] usb 3-1: USB disconnect, device number 83 [ 497.989837][T13021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.000105][T13021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.050060][T13021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.084854][T13021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.822032][T13037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.837952][T13037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.857755][T13037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.866897][T13037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.662595][T13043] netlink: 'syz.0.1866': attribute type 3 has an invalid length. [ 499.794574][T13044] netlink: 'syz.0.1866': attribute type 3 has an invalid length. [ 499.932010][T13056] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 500.049738][T13059] netlink: 'syz.4.1871': attribute type 3 has an invalid length. [ 500.384336][ T5842] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 500.542750][T13081] Invalid logical block size (510) [ 500.565578][ T5842] usb 6-1: config index 0 descriptor too short (expected 60452, got 36) [ 500.583238][ T5842] usb 6-1: config 1 has too many interfaces: 154, using maximum allowed: 32 [ 500.620550][ T5842] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 154 [ 500.643282][ T5842] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 500.674553][ T5842] usb 6-1: config 1 interface 0 has no altsetting 0 [ 500.684604][ T5842] usb 6-1: New USB device found, idVendor=2c81, idProduct=0898, bcdDevice= 0.40 [ 500.708772][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.753347][ T5842] usb 6-1: Product: syz [ 500.757575][ T5842] usb 6-1: Manufacturer: syz [ 500.762182][ T5842] usb 6-1: SerialNumber: syz [ 500.830968][T13086] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1877'. [ 500.972030][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 500.972048][ T30] audit: type=1326 audit(1750806444.216:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13091 comm="syz.2.1879" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f1fafd8e929 code=0x0 [ 501.022598][ T5842] usbhid 6-1:1.0: can't add hid device: -71 [ 501.028878][ T5888] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 501.042497][ T5842] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 501.094696][ T5842] usb 6-1: USB disconnect, device number 33 [ 501.185444][ T5888] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 501.200125][ T5888] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 501.225455][ T5888] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 501.244928][ T5888] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 501.269828][ T5888] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 501.297844][ T5888] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 501.309216][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 501.319138][ T5888] usb 5-1: Product: syz [ 501.326022][ T5888] usb 5-1: Manufacturer: syz [ 501.342129][ T5888] cdc_wdm 5-1:1.0: skipping garbage [ 501.350290][ T5888] cdc_wdm 5-1:1.0: skipping garbage [ 501.359370][ T5888] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 501.372442][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.372495][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.394794][ T5888] cdc_wdm 5-1:1.0: Unknown control protocol [ 501.395947][ T5901] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 501.599574][ T5901] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 501.625734][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.673542][ T5901] usb 3-1: Product: syz [ 501.726140][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 501.732790][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 501.733686][ T24] usb 5-1: USB disconnect, device number 83 [ 501.738857][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 501.773394][ T5901] usb 3-1: Manufacturer: syz [ 501.788472][ T5901] usb 3-1: SerialNumber: syz [ 501.853275][ T5901] usb 3-1: config 0 descriptor?? [ 501.910298][T13111] veth1: entered promiscuous mode [ 501.950340][T13111] vlan2: entered promiscuous mode [ 502.097929][T13100] binder: 13099:13100 ioctl 400c620e 200000000280 returned -22 [ 502.116307][ T24] usb 3-1: USB disconnect, device number 84 [ 502.413406][ T5901] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 502.573428][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 502.592483][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 502.616716][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 502.653335][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 502.706320][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 502.739305][ T5901] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 502.757589][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.769917][T13138] nftables ruleset with unbound chain [ 502.781721][ T5901] usb 5-1: Product: syz [ 502.788460][ T5901] usb 5-1: Manufacturer: syz [ 502.808412][ T5901] usb 5-1: SerialNumber: syz [ 502.820452][ T5901] usb 5-1: config 0 descriptor?? [ 502.836598][T13118] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 502.847263][ T5901] radioshark2 5-1:0.0: Invalid radioSHARK2 device [ 502.863289][ T5834] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 502.903357][ T5901] radioshark2 5-1:0.0: probe with driver radioshark2 failed with error -22 [ 503.028828][T13149] [U] .h0FwZ,iqgҏV2sO [ 503.037057][T13149] [U] ` w*BBOLhU [ 503.041591][T13149] [U] w$n|#%o.z\̧mРw [ 503.052788][T13149] [U] R{ꫢ S [ 503.070618][ T5834] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 503.087209][ T5901] usb 5-1: USB disconnect, device number 84 [ 503.093790][ T5834] usb 6-1: config 0 has no interface number 0 [ 503.118017][ T5834] usb 6-1: New USB device found, idVendor=0ab4, idProduct=ffee, bcdDevice=c6.7e [ 503.133244][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=4 [ 503.141263][ T5834] usb 6-1: Product: syz [ 503.153947][ T5834] usb 6-1: Manufacturer: syz [ 503.158555][ T5834] usb 6-1: SerialNumber: syz [ 503.175890][ T5834] usb 6-1: config 0 descriptor?? [ 503.224092][ T43] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 503.387437][ T43] usb 2-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 503.394793][T13130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.403320][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 503.409813][T13130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.431881][T13130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.448015][ T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 503.450218][T13130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.465481][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.476178][ T5888] usb 6-1: USB disconnect, device number 34 [ 503.479811][ T43] usb 2-1: Product: syz [ 503.493691][ T43] usb 2-1: Manufacturer: syz [ 503.508641][ T43] usb 2-1: SerialNumber: syz [ 503.525553][T13155] FAULT_INJECTION: forcing a failure. [ 503.525553][T13155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.541678][T13155] CPU: 1 UID: 0 PID: 13155 Comm: syz.2.1896 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 503.541701][T13155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 503.541711][T13155] Call Trace: [ 503.541719][T13155] [ 503.541726][T13155] dump_stack_lvl+0x189/0x250 [ 503.541755][T13155] ? __pfx____ratelimit+0x10/0x10 [ 503.541777][T13155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.541799][T13155] ? __pfx__printk+0x10/0x10 [ 503.541816][T13155] ? __might_fault+0xb0/0x130 [ 503.541841][T13155] should_fail_ex+0x414/0x560 [ 503.541866][T13155] _copy_from_user+0x2d/0xb0 [ 503.541883][T13155] snd_seq_oss_write+0x515/0x930 [ 503.541919][T13155] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 503.541942][T13155] ? common_file_perm+0x199/0x200 [ 503.541966][T13155] ? security_file_permission+0x75/0x290 [ 503.541985][T13155] odev_write+0x5a/0x80 [ 503.542004][T13155] ? __pfx_odev_write+0x10/0x10 [ 503.542022][T13155] vfs_write+0x27e/0xa90 [ 503.542054][T13155] ? __pfx_vfs_write+0x10/0x10 [ 503.542078][T13155] ? __fget_files+0x2a/0x420 [ 503.542100][T13155] ? __fget_files+0x2a/0x420 [ 503.542116][T13155] ? __fget_files+0x3a0/0x420 [ 503.542133][T13155] ? __fget_files+0x2a/0x420 [ 503.542158][T13155] ksys_write+0x145/0x250 [ 503.542176][T13155] ? __pfx_ksys_write+0x10/0x10 [ 503.542188][T13155] ? rcu_is_watching+0x15/0xb0 [ 503.542218][T13155] ? do_syscall_64+0xbe/0x3b0 [ 503.542236][T13155] do_syscall_64+0xfa/0x3b0 [ 503.542250][T13155] ? lockdep_hardirqs_on+0x9c/0x150 [ 503.542271][T13155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.542287][T13155] ? clear_bhb_loop+0x60/0xb0 [ 503.542307][T13155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.542330][T13155] RIP: 0033:0x7f1fafd8e929 [ 503.542347][T13155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.542362][T13155] RSP: 002b:00007f1fb0cd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 503.542380][T13155] RAX: ffffffffffffffda RBX: 00007f1faffb5fa0 RCX: 00007f1fafd8e929 [ 503.542392][T13155] RDX: 000000000000fd85 RSI: 0000200000000440 RDI: 0000000000000003 [ 503.542403][T13155] RBP: 00007f1fb0cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 503.542414][T13155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 503.542425][T13155] R13: 0000000000000000 R14: 00007f1faffb5fa0 R15: 00007f1fb00dfa28 [ 503.542453][T13155] [ 503.781909][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.907670][ T5888] [U] [ 504.009420][ T43] usb 2-1: 0:2 : does not exist [ 504.020440][ T43] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 504.042289][ T43] usb 2-1: USB disconnect, device number 78 [ 504.115777][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.292091][T13173] FAULT_INJECTION: forcing a failure. [ 504.292091][T13173] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 504.343080][T13173] CPU: 1 UID: 0 PID: 13173 Comm: syz.0.1905 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 504.343107][T13173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 504.343117][T13173] Call Trace: [ 504.343124][T13173] [ 504.343132][T13173] dump_stack_lvl+0x189/0x250 [ 504.343166][T13173] ? __pfx____ratelimit+0x10/0x10 [ 504.343188][T13173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.343212][T13173] ? __pfx__printk+0x10/0x10 [ 504.343230][T13173] ? fs_reclaim_acquire+0x7d/0x100 [ 504.343258][T13173] should_fail_ex+0x414/0x560 [ 504.343283][T13173] prepare_alloc_pages+0x213/0x610 [ 504.343311][T13173] __alloc_frozen_pages_noprof+0x123/0x370 [ 504.343335][T13173] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 504.343366][T13173] ? policy_nodemask+0x27c/0x720 [ 504.343380][T13173] ? __lock_acquire+0xab9/0xd20 [ 504.343408][T13173] alloc_pages_mpol+0x232/0x4a0 [ 504.343431][T13173] vma_alloc_folio_noprof+0xe4/0x200 [ 504.343448][T13173] ? page_table_check_set+0x18d/0x730 [ 504.343465][T13173] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 504.343494][T13173] folio_prealloc+0x30/0x180 [ 504.343514][T13173] __handle_mm_fault+0x2c88/0x5620 [ 504.343564][T13173] ? __pfx___handle_mm_fault+0x10/0x10 [ 504.343602][T13173] ? follow_page_pte+0x8d6/0x14b0 [ 504.343635][T13173] handle_mm_fault+0x40a/0x8e0 [ 504.343670][T13173] __get_user_pages+0x1af4/0x30b0 [ 504.343728][T13173] ? __pfx___get_user_pages+0x10/0x10 [ 504.343751][T13173] ? __gup_longterm_locked+0xbf7/0x15b0 [ 504.343774][T13173] ? down_read_killable+0x1d1/0x350 [ 504.343790][T13173] ? try_get_folio+0x633/0x660 [ 504.343810][T13173] __gup_longterm_locked+0xd66/0x15b0 [ 504.343838][T13173] ? try_grab_folio_fast+0x35b/0x4f0 [ 504.343859][T13173] ? sanity_check_pinned_pages+0x11c8/0x12c0 [ 504.343891][T13173] gup_fast_fallback+0x1cd4/0x2260 [ 504.343950][T13173] ? __pfx_gup_fast_fallback+0x10/0x10 [ 504.343981][T13173] ? rcu_is_watching+0x15/0xb0 [ 504.344004][T13173] ? is_valid_gup_args+0x11f/0x200 [ 504.344030][T13173] ? pin_user_pages_fast+0x4d/0xb0 [ 504.344057][T13173] rds_info_getsockopt+0x1fb/0x470 [ 504.344087][T13173] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 504.344113][T13173] ? __might_fault+0xb0/0x130 [ 504.344132][T13173] ? rds_getsockopt+0x2b4/0x500 [ 504.344157][T13173] do_sock_getsockopt+0x35d/0x650 [ 504.344181][T13173] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 504.344199][T13173] ? do_syscall_64+0x40/0x3b0 [ 504.344213][T13173] ? __fget_files+0x3a0/0x420 [ 504.344230][T13173] ? __fget_files+0x2a/0x420 [ 504.344254][T13173] __x64_sys_getsockopt+0x1a5/0x250 [ 504.344272][T13173] ? do_syscall_64+0x40/0x3b0 [ 504.344288][T13173] ? do_syscall_64+0x40/0x3b0 [ 504.344307][T13173] do_syscall_64+0xfa/0x3b0 [ 504.344320][T13173] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.344343][T13173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.344359][T13173] ? clear_bhb_loop+0x60/0xb0 [ 504.344380][T13173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.344396][T13173] RIP: 0033:0x7ff316f8e929 [ 504.344412][T13173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.344427][T13173] RSP: 002b:00007ff317d1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 504.344446][T13173] RAX: ffffffffffffffda RBX: 00007ff3171b5fa0 RCX: 00007ff316f8e929 [ 504.344460][T13173] RDX: 0000000000002711 RSI: 0000200000000114 RDI: 0000000000000003 [ 504.344472][T13173] RBP: 00007ff317d1f090 R08: 0000200000000040 R09: 0000000000000000 [ 504.344484][T13173] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000002 [ 504.344495][T13173] R13: 0000000000000000 R14: 00007ff3171b5fa0 R15: 00007ff3172dfa28 [ 504.344529][T13173] [ 504.702931][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.898628][T13177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.907520][T13177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.918178][T13180] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.925874][T13180] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.937659][T13177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.966768][T13180] bridge0: entered allmulticast mode [ 504.972710][T13177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.003252][ T5888] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 505.012640][T13182] bridge_slave_1: left allmulticast mode [ 505.019427][T13182] bridge_slave_1: left promiscuous mode [ 505.027536][T13182] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.056126][T13182] bridge_slave_0: left allmulticast mode [ 505.061865][T13182] bridge_slave_0: left promiscuous mode [ 505.068079][T13182] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.174021][T13190] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 505.280964][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 505.307324][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.326145][ T5888] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 505.346278][ T5888] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 505.361960][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.413435][ T5888] usb 5-1: Product: syz [ 505.423524][ T5888] usb 5-1: Manufacturer: syz [ 505.443391][ T5888] usb 5-1: SerialNumber: syz [ 505.454588][ T5888] usb 5-1: config 0 descriptor?? [ 505.632658][T13193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1909'. [ 505.928940][T13197] binder: 13196:13197 ioctl c0189375 200000000000 returned -22 [ 506.582027][T13214] @: renamed from vlan0 (while UP) [ 506.785938][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1902'. [ 506.803955][T13219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.073305][ T5901] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 507.148100][T13235] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1925'. [ 507.255492][ T5901] usb 3-1: unable to get BOS descriptor or descriptor too short [ 507.272477][ T5901] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 507.285699][ T5901] usb 3-1: can't read configurations, error -61 [ 507.433726][ T5901] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 507.441226][T13245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.457065][T13245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.668850][ T5901] usb 3-1: unable to get BOS descriptor or descriptor too short [ 507.679409][ T5901] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 507.700550][ T5901] usb 3-1: can't read configurations, error -61 [ 507.708074][ T5901] usb usb3-port1: attempt power cycle [ 507.773716][ T5888] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 507.903657][ T5888] usb 6-1: device descriptor read/64, error -71 [ 508.053416][ T5901] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 508.097214][ T5901] usb 3-1: unable to get BOS descriptor or descriptor too short [ 508.116384][ T5901] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 508.127867][ T5901] usb 3-1: can't read configurations, error -61 [ 508.163220][ T5888] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 508.331094][ T5901] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 508.338752][ T5888] usb 6-1: device descriptor read/64, error -71 [ 508.376698][ T5901] usb 3-1: unable to get BOS descriptor or descriptor too short [ 508.386216][ T5901] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 508.394116][ T5901] usb 3-1: can't read configurations, error -61 [ 508.403220][ T5901] usb usb3-port1: unable to enumerate USB device [ 508.446906][ T5888] usb usb6-port1: attempt power cycle [ 508.449128][ T5901] usb 5-1: USB disconnect, device number 85 [ 508.804223][ T5888] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 508.846279][ T5888] usb 6-1: device descriptor read/8, error -71 [ 508.886778][T13269] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1936'. [ 509.103280][ T5888] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 509.137310][ T5888] usb 6-1: device descriptor read/8, error -71 [ 509.273753][ T5888] usb usb6-port1: unable to enumerate USB device [ 509.310879][ T5881] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 509.386681][T13282] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1940'. [ 509.774966][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 509.835018][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.846080][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.859861][ T5881] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 509.911165][ T5881] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 509.969916][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.001757][ T5881] usb 2-1: config 0 descriptor?? [ 510.460827][ T5881] input: HID 0955:7214 Haptics as /devices/virtual/input/input49 [ 510.585266][ T5881] shield 0003:0955:7214.001E: Registered Thunderstrike controller [ 510.638161][ T5881] shield 0003:0955:7214.001E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 510.748304][T13300] FAULT_INJECTION: forcing a failure. [ 510.748304][T13300] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 510.764934][ T5842] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 510.782873][T13300] CPU: 0 UID: 0 PID: 13300 Comm: syz.4.1946 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 510.782897][T13300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 510.782907][T13300] Call Trace: [ 510.782914][T13300] [ 510.782923][T13300] dump_stack_lvl+0x189/0x250 [ 510.782953][T13300] ? __pfx____ratelimit+0x10/0x10 [ 510.782978][T13300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 510.783003][T13300] ? __pfx__printk+0x10/0x10 [ 510.783024][T13300] ? fs_reclaim_acquire+0x7d/0x100 [ 510.783061][T13300] should_fail_ex+0x414/0x560 [ 510.783088][T13300] prepare_alloc_pages+0x213/0x610 [ 510.783117][T13300] __alloc_frozen_pages_noprof+0x123/0x370 [ 510.783143][T13300] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 510.783174][T13300] ? policy_nodemask+0x27c/0x720 [ 510.783196][T13300] alloc_pages_mpol+0x232/0x4a0 [ 510.783217][T13300] folio_alloc_mpol_noprof+0x39/0x70 [ 510.783236][T13300] shmem_alloc_and_add_folio+0x447/0xf60 [ 510.783262][T13300] ? filemap_get_entry+0xad/0x2f0 [ 510.783280][T13300] ? filemap_get_entry+0xad/0x2f0 [ 510.783296][T13300] ? filemap_get_entry+0xad/0x2f0 [ 510.783315][T13300] ? filemap_get_entry+0x28f/0x2f0 [ 510.783334][T13300] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 510.783361][T13300] ? shmem_allowable_huge_orders+0x1f8/0x420 [ 510.783388][T13300] shmem_get_folio_gfp+0x59d/0x1660 [ 510.783428][T13300] shmem_write_begin+0xf7/0x2b0 [ 510.783459][T13300] generic_perform_write+0x2c7/0x910 [ 510.783494][T13300] ? __pfx_generic_perform_write+0x10/0x10 [ 510.783513][T13300] ? down_write+0x162/0x1f0 [ 510.783536][T13300] ? file_update_time+0x2da/0x490 [ 510.783564][T13300] shmem_file_write_iter+0xf8/0x120 [ 510.783578][T13300] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 510.783595][T13300] __kernel_write_iter+0x390/0x860 [ 510.783620][T13300] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 510.783637][T13300] ? __pfx___kernel_write_iter+0x10/0x10 [ 510.783658][T13300] ? rcu_read_lock_any_held+0xb3/0x120 [ 510.783681][T13300] ? __asan_memset+0x22/0x50 [ 510.783703][T13300] ? iov_iter_kvec+0xb8/0x180 [ 510.783729][T13300] kernel_write+0x1ca/0x2e0 [ 510.783759][T13300] ? __pfx_kernel_write+0x10/0x10 [ 510.783784][T13300] ? shmem_get_inode+0xbc5/0xe90 [ 510.783893][T13300] ? __shmem_file_setup+0x2a6/0x300 [ 510.783929][T13300] big_key_preparse+0x397/0x4c0 [ 510.783964][T13300] ? __pfx_big_key_preparse+0x10/0x10 [ 510.784001][T13300] __key_create_or_update+0x36d/0xa30 [ 510.784034][T13300] ? __pfx___key_create_or_update+0x10/0x10 [ 510.784073][T13300] ? irqentry_exit+0x74/0x90 [ 510.784110][T13300] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 510.784141][T13300] key_create_or_update+0x42/0x60 [ 510.784168][T13300] __se_sys_add_key+0x329/0x400 [ 510.784188][T13300] ? __pfx___se_sys_add_key+0x10/0x10 [ 510.784212][T13300] ? do_syscall_64+0xbe/0x3b0 [ 510.784226][T13300] ? __x64_sys_add_key+0x20/0xc0 [ 510.784243][T13300] do_syscall_64+0xfa/0x3b0 [ 510.784257][T13300] ? lockdep_hardirqs_on+0x9c/0x150 [ 510.784280][T13300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.784298][T13300] ? clear_bhb_loop+0x60/0xb0 [ 510.784319][T13300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.784336][T13300] RIP: 0033:0x7f035678e929 [ 510.784353][T13300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.784369][T13300] RSP: 002b:00007f035755a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 510.784389][T13300] RAX: ffffffffffffffda RBX: 00007f03569b5fa0 RCX: 00007f035678e929 [ 510.784401][T13300] RDX: 0000200000000980 RSI: 0000000000000000 RDI: 0000200000000080 [ 510.784414][T13300] RBP: 00007f035755a090 R08: fffffffffffffffb R09: 0000000000000000 [ 510.784425][T13300] R10: 00000000000fffff R11: 0000000000000246 R12: 0000000000000002 [ 510.784436][T13300] R13: 0000000000000001 R14: 00007f03569b5fa0 R15: 00007f0356adfa28 [ 510.784466][T13300] [ 511.173378][ T5842] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 511.213502][ T5842] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 511.236861][ T5881] usb 2-1: USB disconnect, device number 79 [ 511.255232][ T5842] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 511.674750][T13308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1948'. [ 511.691204][T13311] netlink: 'syz.0.1949': attribute type 21 has an invalid length. [ 511.711079][T13314] netlink: 'syz.5.1951': attribute type 2 has an invalid length. [ 511.720559][T13311] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1949'. [ 511.761194][T13318] netlink: 'syz.5.1951': attribute type 2 has an invalid length. [ 511.943507][T13327] geneve1: entered promiscuous mode [ 511.958192][T13327] geneve1: entered allmulticast mode [ 512.025930][ T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 512.049830][ T10] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 512.143282][ T5881] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 512.344135][ T5881] usb 6-1: Using ep0 maxpacket: 8 [ 512.352138][ T5881] usb 6-1: config 127 has an invalid interface number: 171 but max is 1 [ 512.360897][ T5881] usb 6-1: config 127 has no interface number 1 [ 512.377822][ T5881] usb 6-1: config 127 interface 171 has no altsetting 0 [ 512.441572][ T5881] usb 6-1: config 127 interface 0 has no altsetting 0 [ 512.704965][ T5881] usb 6-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 512.717605][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.753066][ T5881] usb 6-1: Product: syz [ 512.763574][ T5881] usb 6-1: Manufacturer: syz [ 512.776222][ T5881] usb 6-1: SerialNumber: syz [ 512.957264][T13350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.983691][T13346] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 513.031978][T13350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.126623][T13325] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1953'. [ 513.409489][ T5881] xr_serial 6-1:127.171: xr_serial converter detected [ 513.536417][ T5881] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 513.564501][ T5881] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 513.612862][ T5881] usb 6-1: USB disconnect, device number 39 [ 513.634388][ T5881] xr_serial 6-1:127.171: device disconnected [ 513.784823][T13359] veth1_macvtap: left promiscuous mode [ 513.812203][T13359] macsec0: entered promiscuous mode [ 513.839464][T13359] macsec0: entered allmulticast mode [ 513.860305][T13360] FAULT_INJECTION: forcing a failure. [ 513.860305][T13360] name failslab, interval 1, probability 0, space 0, times 0 [ 514.003784][T13360] CPU: 0 UID: 0 PID: 13360 Comm: syz.1.1962 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 514.003811][T13360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 514.003821][T13360] Call Trace: [ 514.003829][T13360] [ 514.003837][T13360] dump_stack_lvl+0x189/0x250 [ 514.003867][T13360] ? __pfx____ratelimit+0x10/0x10 [ 514.003892][T13360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.003916][T13360] ? __pfx__printk+0x10/0x10 [ 514.003940][T13360] ? __pfx___might_resched+0x10/0x10 [ 514.003964][T13360] ? fs_reclaim_acquire+0x7d/0x100 [ 514.003989][T13360] should_fail_ex+0x414/0x560 [ 514.004016][T13360] should_failslab+0xa8/0x100 [ 514.004035][T13360] __kmalloc_noprof+0xcb/0x4f0 [ 514.004050][T13360] ? mpi_powm+0x1186/0x23c0 [ 514.004071][T13360] mpi_powm+0x1186/0x23c0 [ 514.004112][T13360] ? __pfx_mpi_powm+0x10/0x10 [ 514.004134][T13360] ? __kasan_kmalloc+0x93/0xb0 [ 514.004152][T13360] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 514.004172][T13360] ? __asan_memset+0x22/0x50 [ 514.004199][T13360] dh_compute_value+0x1cf/0x380 [ 514.004228][T13360] ? __pfx_dh_compute_value+0x10/0x10 [ 514.004247][T13360] ? rcu_is_watching+0x15/0xb0 [ 514.004273][T13360] ? trace_kmalloc+0x1f/0xd0 [ 514.004288][T13360] ? __keyctl_dh_compute+0x648/0xca0 [ 514.004316][T13360] __keyctl_dh_compute+0x7f1/0xca0 [ 514.004348][T13360] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 514.004380][T13360] ? __lock_acquire+0xab9/0xd20 [ 514.004429][T13360] keyctl_dh_compute+0x109/0x160 [ 514.004452][T13360] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 514.004471][T13360] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 514.004493][T13360] ? vfs_write+0x8d8/0xa90 [ 514.004530][T13360] __se_sys_keyctl+0x423/0x910 [ 514.004552][T13360] ? __pfx___se_sys_keyctl+0x10/0x10 [ 514.004598][T13360] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 514.004628][T13360] ? __fget_files+0x3a0/0x420 [ 514.004653][T13360] ? fput+0xa0/0xd0 [ 514.004673][T13360] ? ksys_write+0x22a/0x250 [ 514.004692][T13360] ? __pfx_ksys_write+0x10/0x10 [ 514.004705][T13360] ? rcu_is_watching+0x15/0xb0 [ 514.004734][T13360] ? do_syscall_64+0xbe/0x3b0 [ 514.004748][T13360] ? __x64_sys_keyctl+0x20/0xc0 [ 514.004770][T13360] do_syscall_64+0xfa/0x3b0 [ 514.004784][T13360] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.004806][T13360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.004823][T13360] ? clear_bhb_loop+0x60/0xb0 [ 514.004844][T13360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.004861][T13360] RIP: 0033:0x7f9f0938e929 [ 514.004877][T13360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.004892][T13360] RSP: 002b:00007f9f0a201038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 514.004910][T13360] RAX: ffffffffffffffda RBX: 00007f9f095b6080 RCX: 00007f9f0938e929 [ 514.004923][T13360] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 0000000000000017 [ 514.004935][T13360] RBP: 00007f9f0a201090 R08: 0000000000000000 R09: 0000000000000000 [ 514.004946][T13360] R10: 0000000000000053 R11: 0000000000000246 R12: 0000000000000002 [ 514.004957][T13360] R13: 0000000000000000 R14: 00007f9f095b6080 R15: 00007f9f096dfa28 [ 514.004985][T13360] [ 514.006606][T13359] veth1_macvtap: entered promiscuous mode [ 514.423909][T13359] veth1_macvtap: entered allmulticast mode [ 514.441044][T13359] macsec0: left promiscuous mode [ 514.458264][T13359] macsec0: left allmulticast mode [ 514.471155][T13359] veth1_macvtap: left allmulticast mode [ 514.486860][T13362] vlan2: entered promiscuous mode [ 514.925686][T13381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.935116][T13381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.063291][ T5901] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 515.243343][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 515.256488][ T5901] usb 5-1: config 0 has no interfaces? [ 515.354747][ T5901] usb 5-1: New USB device found, idVendor=5b8d, idProduct=3fea, bcdDevice=15.fe [ 515.369776][ T5901] usb 5-1: New USB device strings: Mfr=188, Product=138, SerialNumber=0 [ 515.379748][ T5901] usb 5-1: Product: syz [ 515.384322][ T5901] usb 5-1: Manufacturer: syz [ 515.400818][ T5901] usb 5-1: config 0 descriptor?? [ 515.715843][ T10] usb 5-1: USB disconnect, device number 86 [ 515.969096][T13390] pim6reg: entered allmulticast mode [ 516.293046][T13400] vlan2: entered promiscuous mode [ 516.302562][T13400] bond0: entered promiscuous mode [ 516.311067][T13400] dummy0: entered promiscuous mode [ 516.703334][ T43] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 517.034618][ T5881] usb 5-1: new low-speed USB device number 87 using dummy_hcd [ 517.047016][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.061709][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.103427][ T43] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 517.149775][T13393] delete_channel: no stack [ 517.216064][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.256026][ T5881] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 517.257738][ T43] usb 3-1: config 0 descriptor?? [ 517.273403][ T5881] usb 5-1: config 0 has no interface number 0 [ 517.290795][ T5881] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 517.332436][ T5881] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 517.353496][ T5881] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 517.391259][ T5881] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 517.455499][ T5881] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 517.482265][ T5881] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 517.505156][ T5881] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 517.516127][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.535753][ T5881] usb 5-1: config 0 descriptor?? [ 517.546521][T13409] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 517.569221][ T5881] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 517.701792][T13413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.713038][T13413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.788844][T13409] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 517.800815][T13409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.839516][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 517.855504][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 517.860081][T13409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.880100][ T5881] usb 5-1: USB disconnect, device number 87 [ 517.887290][ T43] usb 3-1: USB disconnect, device number 89 [ 517.905868][ T5881] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 518.557870][T13428] netlink: 'syz.4.1985': attribute type 39 has an invalid length. [ 518.678311][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1986'. [ 518.724133][ T5881] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 518.863585][ T5881] usb 2-1: device descriptor read/64, error -71 [ 518.906755][T13433] loop6: detected capacity change from 0 to 1 [ 518.947518][ T5941] Dev loop6: unable to read RDB block 1 [ 518.969364][ T5941] loop6: unable to read partition table [ 518.991432][ T5941] loop6: partition table beyond EOD, truncated [ 519.004760][T13433] Dev loop6: unable to read RDB block 1 [ 519.032563][T13433] loop6: unable to read partition table [ 519.043689][T13433] loop6: partition table beyond EOD, truncated [ 519.052720][T13433] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 519.143404][ T5881] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 519.283840][ T5881] usb 2-1: device descriptor read/64, error -71 [ 519.403519][ T5881] usb usb2-port1: attempt power cycle [ 519.628005][T13444] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 519.853487][ T5881] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 519.907831][ T5881] usb 2-1: device descriptor read/8, error -71 [ 519.985624][T13454] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 520.143283][ T10] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 520.163592][ T5881] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 520.199969][ T5881] usb 2-1: device descriptor read/8, error -71 [ 520.201755][T13463] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1996'. [ 520.213292][ T5888] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 520.228339][T13463] netlink: 'syz.2.1996': attribute type 29 has an invalid length. [ 520.313389][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 520.321699][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 520.336737][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 520.347743][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 520.359611][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 520.370438][ T5881] usb usb2-port1: unable to enumerate USB device [ 520.382865][ T10] usb 5-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 520.392334][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.401084][ T10] usb 5-1: Product: syz [ 520.405379][ T10] usb 5-1: Manufacturer: syz [ 520.410193][ T10] usb 5-1: SerialNumber: syz [ 520.416662][ T5888] usb 6-1: config 1 interface 0 altsetting 12 bulk endpoint 0x1 has invalid maxpacket 8 [ 520.426792][ T5888] usb 6-1: config 1 interface 0 has no altsetting 0 [ 520.436803][ T5888] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 520.448923][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.459511][ T5888] usb 6-1: Product: ↸ẍ눹㏆辶人턻솁᦬᧼탍卼빅䌢窀⫶⽈饅⃫鞾텚둌뻲슟⎣⤧㝰ꍫ邛ꔛ凜醝躭᫒⇾孝Ɀꦕ당絛䣐️㐟﹗躦幦ﵪ폨뉞㝎혹ኋ䯊靀虪땿㬐㥊춛st₰ᶲᡟ茯㓚⯜큧홲禘៫揄듄乶昳䧃궐덃ᵬ㤹뤭㥃寔瀞舋让燕ᒑṽ臩ຳ닺償僲偑뺔ϕ嘠鵴 [ 520.491418][ T10] usb 5-1: config 0 descriptor?? [ 520.500608][ T10] cypress_m8 5-1:0.0: HID->COM RS232 Adapter converter detected [ 520.503247][ T43] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 520.519930][ T10] cyphidcom ttyUSB0: required endpoint is missing [ 520.532296][ T5888] usb 6-1: Manufacturer: ф [ 520.538176][ T5888] usb 6-1: SerialNumber: syz [ 520.567201][T13457] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 520.685761][ T43] usb 3-1: config 1 interface 0 altsetting 155 bulk endpoint 0x1 has invalid maxpacket 1023 [ 520.697442][ T43] usb 3-1: config 1 interface 0 has no altsetting 0 [ 520.711021][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 520.752902][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.762980][ T43] usb 3-1: Product: syz [ 520.771201][ T43] usb 3-1: Manufacturer: syz [ 520.776337][ T43] usb 3-1: SerialNumber: syz [ 520.776735][T13457] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1994'. [ 520.792911][T13463] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 520.842693][ T5888] usb 6-1: USB disconnect, device number 40 [ 522.094409][T13497] loop4: detected capacity change from 0 to 524255231 [ 522.233804][ T5834] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 522.286743][T13500] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2009'. [ 522.384907][ T5834] usb 2-1: Using ep0 maxpacket: 16 [ 522.394854][ T5834] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.406916][ T5834] usb 2-1: config 0 interface 0 has no altsetting 0 [ 522.420267][ T5834] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 522.441010][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.467497][ T5834] usb 2-1: config 0 descriptor?? [ 522.768187][ T1069] usb 5-1: USB disconnect, device number 88 [ 522.776929][ T1069] cypress_m8 5-1:0.0: device disconnected [ 523.162308][ T5834] microsoft 0003:045E:009D.0020: hidraw0: USB HID v0.07 Device [HID 045e:009d] on usb-dummy_hcd.1-1/input0 [ 523.473597][ T43] usb 3-1: USB disconnect, device number 90 [ 523.493369][ T5834] microsoft 0003:045E:009D.0020: no inputs found [ 523.501507][ T5834] microsoft 0003:045E:009D.0020: could not initialize ff, continuing anyway [ 523.523440][ T5834] usb 2-1: USB disconnect, device number 84 [ 523.600477][T13507] netlink: 147044 bytes leftover after parsing attributes in process `syz.4.2010'. [ 523.669745][T13510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2012'. [ 523.678617][T13504] fido_id[13504]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 523.816060][T13512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2013'. [ 523.850814][T13515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 524.009931][T13518] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2014'. [ 524.052210][T13518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2014'. [ 524.083455][T13518] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2014'. [ 524.096085][T13518] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2014'. [ 524.217832][T13520] xt_TPROXY: Can be used only with -p tcp or -p udp [ 524.502008][T13528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2019'. [ 524.600180][T13533] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2021'. [ 524.614393][T13533] netlink: 'syz.4.2021': attribute type 29 has an invalid length. [ 524.673322][ T5834] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 524.865146][ T24] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 524.874081][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 524.899965][T13540] usb usb8: usbfs: process 13540 (syz.1.2022) did not claim interface 0 before use [ 524.931621][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.941932][ T5834] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 524.956071][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.003845][ T5834] usb 3-1: config 0 descriptor?? [ 525.095407][ T24] usb 5-1: config 1 interface 0 altsetting 155 bulk endpoint 0x1 has invalid maxpacket 1023 [ 525.105962][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 525.135816][T13545] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2024'. [ 525.147213][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 525.156697][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.165629][ T24] usb 5-1: Product: syz [ 525.170681][ T24] usb 5-1: Manufacturer: syz [ 525.179280][ T24] usb 5-1: SerialNumber: syz [ 525.183271][ T5842] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 525.218915][ T5834] usb 3-1: string descriptor 0 read error: -32 [ 525.264857][T13533] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 525.286582][T13548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.295292][ T5834] usbhid 3-1:0.0: can't add hid device: -71 [ 525.307823][ T5834] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 525.320902][T13548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.341564][ T5834] usb 3-1: USB disconnect, device number 91 [ 525.373662][ T5842] usb 2-1: Using ep0 maxpacket: 32 [ 525.399907][ T5842] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.434979][ T5842] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 525.459111][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.482423][T13551] loop6: detected capacity change from 0 to 524287999 [ 525.484495][ T5842] usb 2-1: Product: syz [ 525.497680][ T5842] usb 2-1: Manufacturer: syz [ 525.502380][ T5842] usb 2-1: SerialNumber: syz [ 525.513088][ T5842] usb 2-1: config 0 descriptor?? [ 525.606071][ T6037] buffer_io_error: 8 callbacks suppressed [ 525.606088][ T6037] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 525.611989][T13551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.612365][T13551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.987795][ T24] usb 5-1: USB disconnect, device number 89 [ 526.609253][ T5888] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 526.793291][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 526.800878][ T5888] usb 3-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=de.7b [ 526.811994][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.837056][ T5888] gspca_main: spca501-2.14.0 probing 040a:0002 [ 527.453391][ T10] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 527.543450][ T5888] gspca_spca501: reg write: error -110 [ 527.549089][ T5888] spca501 3-1:2.0: Reg write failed for 0x00,0x02,0x01 [ 527.576627][ T5888] spca501 3-1:2.0: probe with driver spca501 failed with error -22 [ 527.605092][ T10] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 527.619909][ T10] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.651347][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 527.663656][ T10] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 527.674417][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.710251][ T10] usb 6-1: config 0 descriptor?? [ 527.719987][ T5888] usb 2-1: USB disconnect, device number 85 [ 528.340618][T13577] input: syz1 as /devices/virtual/input/input50 [ 528.550502][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 528.624332][T13578] sctp: [Deprecated]: syz.1.2035 (pid 13578) Use of int in max_burst socket option. [ 528.624332][T13578] Use struct sctp_assoc_value instead [ 528.639200][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 528.669528][ T10] usb 6-1: USB disconnect, device number 41 [ 528.692614][T13581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.763913][T13581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.102052][T13577] [ 529.104399][T13577] ====================================================== [ 529.111391][T13577] WARNING: possible circular locking dependency detected [ 529.118406][T13577] 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 Not tainted [ 529.125517][T13577] ------------------------------------------------------ [ 529.132539][T13577] syz.1.2035/13577 is trying to acquire lock: [ 529.138602][T13577] ffff888034130e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_device_event+0x182/0xa20 [ 529.148532][T13577] [ 529.148532][T13577] but task is already holding lock: [ 529.155875][T13577] ffff88807db9cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 529.165513][T13577] [ 529.165513][T13577] which lock already depends on the new lock. [ 529.165513][T13577] [ 529.175895][T13577] [ 529.175895][T13577] the existing dependency chain (in reverse order) is: [ 529.184900][T13577] [ 529.184900][T13577] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 529.193356][T13577] lock_acquire+0x120/0x360 [ 529.198387][T13577] __mutex_lock+0x182/0xe80 [ 529.203396][T13577] dev_set_mtu+0x10e/0x260 [ 529.208315][T13577] team_add_slave+0x8b8/0x2840 [ 529.213594][T13577] do_set_master+0x530/0x6d0 [ 529.218706][T13577] do_setlink+0xcf0/0x41c0 [ 529.223638][T13577] rtnl_newlink+0x160b/0x1c70 [ 529.228811][T13577] rtnetlink_rcv_msg+0x7cc/0xb70 [ 529.234249][T13577] netlink_rcv_skb+0x208/0x470 [ 529.239512][T13577] netlink_unicast+0x75b/0x8d0 [ 529.244775][T13577] netlink_sendmsg+0x805/0xb30 [ 529.250036][T13577] __sock_sendmsg+0x219/0x270 [ 529.255218][T13577] ____sys_sendmsg+0x505/0x830 [ 529.260489][T13577] ___sys_sendmsg+0x21f/0x2a0 [ 529.265668][T13577] __x64_sys_sendmsg+0x19b/0x260 [ 529.271105][T13577] do_syscall_64+0xfa/0x3b0 [ 529.276109][T13577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.282499][T13577] [ 529.282499][T13577] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 529.290649][T13577] validate_chain+0xb9b/0x2140 [ 529.295929][T13577] __lock_acquire+0xab9/0xd20 [ 529.301107][T13577] lock_acquire+0x120/0x360 [ 529.306109][T13577] __mutex_lock+0x182/0xe80 [ 529.311118][T13577] team_device_event+0x182/0xa20 [ 529.316559][T13577] notifier_call_chain+0x1b3/0x3e0 [ 529.322174][T13577] __dev_notify_flags+0x18d/0x2e0 [ 529.327699][T13577] netif_change_flags+0xe8/0x1a0 [ 529.333138][T13577] do_setlink+0xc55/0x41c0 [ 529.338070][T13577] rtnl_newlink+0x149f/0x1c70 [ 529.343247][T13577] rtnetlink_rcv_msg+0x7cc/0xb70 [ 529.348681][T13577] netlink_rcv_skb+0x208/0x470 [ 529.353953][T13577] netlink_unicast+0x75b/0x8d0 [ 529.359228][T13577] netlink_sendmsg+0x805/0xb30 [ 529.364494][T13577] __sock_sendmsg+0x219/0x270 [ 529.369675][T13577] ____sys_sendmsg+0x505/0x830 [ 529.374941][T13577] ___sys_sendmsg+0x21f/0x2a0 [ 529.380126][T13577] __x64_sys_sendmsg+0x19b/0x260 [ 529.385563][T13577] do_syscall_64+0xfa/0x3b0 [ 529.390567][T13577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.396959][T13577] [ 529.396959][T13577] other info that might help us debug this: [ 529.396959][T13577] [ 529.407167][T13577] Possible unsafe locking scenario: [ 529.407167][T13577] [ 529.414597][T13577] CPU0 CPU1 [ 529.419940][T13577] ---- ---- [ 529.425284][T13577] lock(&dev_instance_lock_key#3); [ 529.430473][T13577] lock(team->team_lock_key#2); [ 529.437913][T13577] lock(&dev_instance_lock_key#3); [ 529.445618][T13577] lock(team->team_lock_key#2); [ 529.450541][T13577] [ 529.450541][T13577] *** DEADLOCK *** [ 529.450541][T13577] [ 529.458670][T13577] 2 locks held by syz.1.2035/13577: [ 529.463855][T13577] #0: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 529.472885][T13577] #1: ffff88807db9cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 529.482961][T13577] [ 529.482961][T13577] stack backtrace: [ 529.488830][T13577] CPU: 0 UID: 0 PID: 13577 Comm: syz.1.2035 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 529.488844][T13577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 529.488851][T13577] Call Trace: [ 529.488856][T13577] [ 529.488861][T13577] dump_stack_lvl+0x189/0x250 [ 529.488879][T13577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.488893][T13577] ? __pfx__printk+0x10/0x10 [ 529.488903][T13577] ? print_lock_name+0xde/0x100 [ 529.488913][T13577] print_circular_bug+0x2ee/0x310 [ 529.488924][T13577] check_noncircular+0x134/0x160 [ 529.488934][T13577] validate_chain+0xb9b/0x2140 [ 529.488944][T13577] ? __lock_acquire+0xab9/0xd20 [ 529.488959][T13577] __lock_acquire+0xab9/0xd20 [ 529.488971][T13577] ? team_device_event+0x182/0xa20 [ 529.488982][T13577] lock_acquire+0x120/0x360 [ 529.488993][T13577] ? team_device_event+0x182/0xa20 [ 529.489004][T13577] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 529.489019][T13577] __mutex_lock+0x182/0xe80 [ 529.489035][T13577] ? team_device_event+0x182/0xa20 [ 529.489046][T13577] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 529.489058][T13577] ? team_device_event+0x182/0xa20 [ 529.489068][T13577] ? __pfx___mutex_lock+0x10/0x10 [ 529.489080][T13577] ? __timer_delete_sync+0x218/0x2d0 [ 529.489094][T13577] team_device_event+0x182/0xa20 [ 529.489104][T13577] notifier_call_chain+0x1b3/0x3e0 [ 529.489120][T13577] __dev_notify_flags+0x18d/0x2e0 [ 529.489132][T13577] ? __pfx___dev_notify_flags+0x10/0x10 [ 529.489142][T13577] ? __dev_change_flags+0x4cc/0x6d0 [ 529.489153][T13577] ? __pfx___dev_change_flags+0x10/0x10 [ 529.489163][T13577] ? netif_state_change+0x256/0x3a0 [ 529.489173][T13577] netif_change_flags+0xe8/0x1a0 [ 529.489185][T13577] do_setlink+0xc55/0x41c0 [ 529.489197][T13577] ? __kernel_text_address+0xd/0x40 [ 529.489208][T13577] ? arch_stack_walk+0xfc/0x150 [ 529.489219][T13577] ? __pfx_do_setlink+0x10/0x10 [ 529.489238][T13577] ? __lock_acquire+0xab9/0xd20 [ 529.489261][T13577] ? __mutex_trylock_common+0x153/0x260 [ 529.489279][T13577] ? __pfx___mutex_trylock_common+0x10/0x10 [ 529.489294][T13577] ? rcu_is_watching+0x15/0xb0 [ 529.489308][T13577] ? trace_contention_end+0x39/0x120 [ 529.489317][T13577] ? __mutex_lock+0x330/0xe80 [ 529.489330][T13577] ? __pfx_aa_get_newest_label+0x10/0x10 [ 529.489343][T13577] ? rtnl_newlink+0x8db/0x1c70 [ 529.489352][T13577] ? rcu_is_watching+0x15/0xb0 [ 529.489365][T13577] ? __pfx___mutex_lock+0x10/0x10 [ 529.489379][T13577] ? ns_capable+0x8a/0xf0 [ 529.489392][T13577] ? rtnl_link_get_net_capable+0x16a/0x350 [ 529.489403][T13577] rtnl_newlink+0x149f/0x1c70 [ 529.489412][T13577] ? netlink_sendmsg+0x805/0xb30 [ 529.489424][T13577] ? __pfx_rtnl_newlink+0x10/0x10 [ 529.489437][T13577] ? kasan_quarantine_put+0xdd/0x220 [ 529.489456][T13577] ? lockdep_hardirqs_on+0x9c/0x150 [ 529.489469][T13577] ? nlmon_xmit+0xb0/0x100 [ 529.489481][T13577] ? kmem_cache_free+0x18f/0x400 [ 529.489492][T13577] ? __local_bh_enable_ip+0x12d/0x1c0 [ 529.489505][T13577] ? lockdep_hardirqs_on+0x9c/0x150 [ 529.489516][T13577] ? __local_bh_enable_ip+0x12d/0x1c0 [ 529.489529][T13577] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 529.489543][T13577] ? __dev_queue_xmit+0x27e/0x3a70 [ 529.489556][T13577] ? __lock_acquire+0xab9/0xd20 [ 529.489573][T13577] ? __pfx_rtnl_newlink+0x10/0x10 [ 529.489581][T13577] rtnetlink_rcv_msg+0x7cc/0xb70 [ 529.489591][T13577] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 529.489600][T13577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 529.489608][T13577] ? ref_tracker_free+0x63a/0x7d0 [ 529.489620][T13577] ? __copy_skb_header+0xa7/0x550 [ 529.489631][T13577] ? __pfx_ref_tracker_free+0x10/0x10 [ 529.489642][T13577] ? __skb_clone+0x63/0x7a0 [ 529.489654][T13577] netlink_rcv_skb+0x208/0x470 [ 529.489664][T13577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 529.489673][T13577] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 529.489685][T13577] ? netlink_deliver_tap+0x2e/0x1b0 [ 529.489695][T13577] ? netlink_deliver_tap+0x2e/0x1b0 [ 529.489707][T13577] netlink_unicast+0x75b/0x8d0 [ 529.489717][T13577] netlink_sendmsg+0x805/0xb30 [ 529.489729][T13577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.489740][T13577] ? aa_sock_msg_perm+0x94/0x160 [ 529.489750][T13577] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 529.489762][T13577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.489772][T13577] __sock_sendmsg+0x219/0x270 [ 529.489785][T13577] ____sys_sendmsg+0x505/0x830 [ 529.489797][T13577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 529.489809][T13577] ? import_iovec+0x74/0xa0 [ 529.489818][T13577] ___sys_sendmsg+0x21f/0x2a0 [ 529.489829][T13577] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.489846][T13577] ? __fget_files+0x2a/0x420 [ 529.489855][T13577] ? __fget_files+0x3a0/0x420 [ 529.489867][T13577] __x64_sys_sendmsg+0x19b/0x260 [ 529.489878][T13577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 529.489890][T13577] ? rcu_is_watching+0x15/0xb0 [ 529.489904][T13577] ? do_syscall_64+0xbe/0x3b0 [ 529.489912][T13577] do_syscall_64+0xfa/0x3b0 [ 529.489921][T13577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.489931][T13577] ? asm_sysvec_call_function_single+0x1a/0x20 [ 529.489940][T13577] ? clear_bhb_loop+0x60/0xb0 [ 529.489950][T13577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.489959][T13577] RIP: 0033:0x7f9f0938e929 [ 529.489969][T13577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.489978][T13577] RSP: 002b:00007f9f0a222038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.489988][T13577] RAX: ffffffffffffffda RBX: 00007f9f095b5fa0 RCX: 00007f9f0938e929 [ 529.489996][T13577] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 529.490003][T13577] RBP: 00007f9f09410b39 R08: 0000000000000000 R09: 0000000000000000 [ 529.490009][T13577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.490015][T13577] R13: 0000000000000000 R14: 00007f9f095b5fa0 R15: 00007f9f096dfa28 [ 529.490025][T13577] [ 530.109415][ T1069] usb 3-1: USB disconnect, device number 92 [ 530.329494][T13577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.359667][T13577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.549876][T13577] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.561612][T13577] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.571008][T13577] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.580049][T13577] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0