last executing test programs: 2m39.328062668s ago: executing program 3 (id=88): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a", @ANYRES32=0x41424344, @ANYBLOB="5c00000090"], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a68765a6c733a8eb6df2944f6c2ef07c0", 0x1e, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e000018000280040012000500163001000000080015"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m38.848079424s ago: executing program 3 (id=90): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = userfaultfd(0x1) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='@'], 0x40}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='cgroup\x00', 0x8014, &(0x7f0000000480)='noxattr') getuid() fstat(r3, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x240) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000600)={0x2, 0x1ff, 0x7, 0x0, 0x6}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f00000020c0)={0xffffffffffffffff, 0x1, 0x8, 0x0, 0x9}) 2m38.2958364s ago: executing program 3 (id=92): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0200010203010902120001000000400904000000ff"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040), 0x14, &(0x7f00000000c0)={0x0}, 0x7}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x3, &(0x7f00000001c0)={0x9, &(0x7f0000000140)=[{0x3ff, 0x4, 0x4, 0x8}, {0x21c, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x7, 0x7}, {0x584b, 0xdf, 0x0, 0x7fffffff}, {0x8e, 0x6, 0x4, 0x10}, {0x1, 0x1, 0x1, 0x1}, {0x8001, 0x3, 0x0, 0x8}, {0x4, 0xa, 0x7, 0x7}, {0x4, 0xa3, 0x98, 0xd52}]}) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) socket$netlink(0x10, 0x3, 0x2) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x691, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}, 0x5c) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x4}, 0x1c) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000021000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e600000000000000000000000000000000000000114b8a"], 0x48) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r7 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r7, 0x84, 0x6d, &(0x7f0000002280)=""/4086, &(0x7f0000000040)=0xff6) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000080)={0xfffffffffffffc70, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00000007c9c0d224d324b9a7abb3"], 0x0}, 0x0) r8 = syz_io_uring_setup(0x66f, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0xfffffffc, 0x0, r2}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x8, 0x1, 0x0, 0x3, 0x0, 0x1, {0x2, r11}}) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f00000010c0)={{0x3, 0xffffffff, 0x5, 0x8, 0x1000, 0x9}, 0x242, [0x6, 0xdab, 0xb, 0x9, 0x0, 0xe8c, 0x200, 0x7fff, 0x0, 0x6, 0x81, 0x896b, 0x7, 0x4, 0x400, 0xff, 0xfffff000, 0x3a, 0x1, 0x9, 0x71, 0x9, 0xea70, 0x3ec1, 0x1, 0xd96c, 0x24000000, 0x1, 0x2, 0x2, 0x0, 0xa2, 0xeda, 0xef8, 0x65, 0x9505, 0x100, 0x7, 0x8, 0x3, 0x6, 0x6, 0xd, 0x0, 0x344054a0, 0x3, 0x100, 0x2, 0x4, 0xe1, 0x0, 0xf80, 0x1b0, 0x1, 0x4, 0x1, 0x492, 0x88, 0x5, 0x10, 0x401, 0x9, 0x0, 0x8000, 0x81, 0x7ff, 0x3ff, 0x6, 0x7, 0x2, 0x0, 0x3, 0x5, 0x1, 0x6c, 0x8, 0x3, 0x6, 0x8, 0x8001, 0x3, 0x0, 0x2, 0x8, 0x0, 0x0, 0x7, 0x10000, 0x1, 0xa20, 0xffffffff, 0x0, 0x5, 0x8, 0x6, 0x3, 0xe1, 0x4, 0x4, 0x3, 0x6, 0x2, 0x81, 0x10000, 0x0, 0x3, 0xfffffff9, 0xc, 0xfff, 0xfffffff6, 0x0, 0x63, 0xfffffffd, 0x0, 0xfffff000, 0x200, 0x5, 0x1, 0xfffffffe, 0xff, 0x8, 0xfffffff8, 0xfffffff7, 0x2, 0x9, 0x2008, 0x8c, 0x8, 0x2, 0x9, 0xffff, 0xffff, 0xff, 0x2, 0x7, 0x5, 0xf, 0x7, 0x8, 0x9, 0x0, 0xa, 0x9, 0x5, 0xf, 0x3, 0x1, 0x4, 0x40, 0x10000000, 0x5, 0x1, 0x9, 0xbc4, 0x4032, 0x400, 0x8, 0x80000001, 0x5, 0x8, 0x800, 0x2, 0x7, 0xec48, 0x6, 0x81, 0x0, 0x8, 0x4, 0x8, 0x7, 0x5, 0x1, 0x3, 0x9, 0x80000001, 0x7, 0x8, 0xfffffff3, 0x2, 0xffffff6e, 0x2, 0x6, 0x7, 0x3, 0xf7ea, 0x80000001, 0x5, 0x0, 0x7fff, 0x7, 0x3, 0x6e2fc2f6, 0x0, 0x7ff, 0x50, 0xe, 0x180, 0x4, 0xcc, 0x7, 0x0, 0x6, 0x6e, 0x9, 0xe0000000, 0x9, 0x3b5e, 0x4, 0x0, 0xda, 0x4, 0x9, 0xd, 0x0, 0x1, 0x1, 0x7fffffff, 0xf88, 0x3, 0x2, 0x5, 0x6, 0x4e7, 0x7, 0x8, 0xe2d7, 0xd, 0x2, 0x5, 0xffff50ca, 0x9, 0x3, 0x3af1f10, 0x3, 0x1, 0x7ff8000, 0x4, 0x9, 0x4faa, 0x2, 0xecf, 0x9, 0x1, 0x3, 0x101, 0x3f3, 0xa, 0xfffffffd, 0x8, 0x0, 0x800, 0x13, 0x1, 0x4, 0x9, 0x4, 0x0, 0x6, 0xe, 0x94, 0x5, 0x3, 0xf05, 0x80, 0x0, 0x7, 0xc, 0xffff, 0x0, 0x1000, 0xe6, 0x40, 0xf, 0x42f, 0x10001, 0x6, 0x6, 0x6, 0x1a1, 0xa96, 0x3, 0xa6d, 0x5, 0x2, 0x6, 0x2, 0xdf46, 0x401, 0x6, 0x80, 0x3, 0x1, 0x2800000, 0x3, 0xffffffbc, 0xfffffc00, 0x3b2, 0x45db, 0xfff, 0xef, 0x6, 0x7, 0x2, 0x7, 0x5ad9b8de, 0x8, 0x4, 0xfffff001, 0x8, 0x200, 0x101, 0x9, 0x5, 0x8, 0x2, 0x8, 0x2250, 0x1, 0x8, 0x8, 0x75d, 0xffffffff, 0x8, 0x3, 0x2d85, 0x3, 0x7ff, 0x8001, 0x0, 0x8, 0x7, 0x6, 0xe, 0x2, 0x2, 0xdf2a, 0x4, 0x10001, 0x7, 0x3, 0x1, 0x6, 0x3, 0x6, 0xfffffb04, 0x80000000, 0x1, 0x5, 0x100, 0xff, 0x7, 0xa8fb, 0x3, 0x2, 0x3, 0x5, 0x0, 0x8, 0x4, 0xfffffff9, 0x9, 0x3, 0x1000, 0x8, 0xd67, 0xffffffc0, 0x4, 0x1, 0x101, 0x43, 0x5, 0x723, 0x7, 0xffffffff, 0x467d, 0xfff, 0x7, 0x57a8, 0x400, 0x74, 0xaa1, 0x2, 0x2, 0x4, 0xffff, 0x1, 0x1000, 0x7, 0x4, 0x5, 0x2000000, 0x8, 0x5, 0x6d, 0x1, 0x5, 0x4080, 0x3, 0x5, 0xa372, 0xffffff81, 0x5, 0x5, 0x4d000000, 0x7, 0x9, 0x7ae, 0x2000, 0x7, 0xfffffffb, 0x4aa1, 0x7, 0x2, 0x0, 0x2, 0x298c, 0x989f, 0x1, 0x8, 0x1, 0x3, 0xfffffff7, 0x40, 0x2, 0xffff, 0x9, 0x200, 0x9, 0x3ff, 0x32c7, 0x400, 0x5, 0x7c1, 0x1f, 0x7, 0x7, 0x4, 0x8, 0x80000000, 0xd, 0x278e142d, 0x2, 0x5, 0x7f, 0xc0, 0x1, 0x3, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xfff, 0x6, 0x4, 0xaf9, 0x1, 0x8, 0x1ff, 0x7, 0x8, 0x5, 0x5, 0x800, 0x7, 0x40, 0x7, 0x2, 0x400, 0x800, 0xffffffff, 0x9, 0x0, 0x5, 0x9, 0x5, 0x4, 0x3, 0x8, 0x400, 0x6, 0xfffffff9, 0x100, 0x2, 0x3c, 0x2b51, 0xe3, 0x6, 0x3, 0x3e0f, 0xfffffffd, 0x2, 0x2, 0x99, 0x80000000, 0x2a3, 0x5, 0x1, 0x2, 0xe, 0x7ff, 0x4, 0x4, 0x80, 0x401, 0x7, 0xa, 0x10, 0x1, 0x9, 0x7fff, 0x2, 0x6, 0x8001, 0x0, 0x9, 0xcc, 0x8, 0x8, 0xa, 0x9, 0x87, 0x4, 0x8, 0x6, 0xfffffbff, 0x3, 0x8, 0xbec, 0x9, 0x9, 0xbbf6, 0x2, 0x2, 0x2, 0x2, 0x5, 0xffff, 0x7f, 0x2, 0x7, 0x0, 0x4, 0x2, 0x9, 0x2, 0x55, 0xfffffa90, 0x92bf, 0x1, 0x40000, 0x9, 0x4, 0x2, 0x2, 0x7, 0x0, 0x9, 0x7, 0x9, 0xf6, 0x8, 0x3, 0x9a27, 0x6, 0x0, 0x4, 0x4, 0x2000, 0x5, 0x96, 0x1, 0x89, 0x1, 0x3, 0xff, 0x5, 0x3, 0x10, 0x684, 0x40, 0x3491, 0x0, 0xffffffff, 0x1, 0x1, 0xffff8001, 0x2, 0x6, 0x6, 0x4, 0x7fffffff, 0xe, 0x18000, 0x401, 0xc, 0x2, 0xfffffff9, 0x8, 0xacb, 0x8, 0x72c, 0x1000, 0x0, 0x10, 0x4, 0x1, 0xffffffff, 0x8, 0x4, 0x5, 0x7fffffff, 0x0, 0x5, 0x8b, 0x4, 0x2, 0x6, 0x1000, 0xeb3a, 0x0, 0x2, 0x0, 0x101, 0x3, 0xfffffff9, 0x8, 0x9, 0x5, 0xffff, 0xc, 0x9, 0xff, 0x0, 0x8792, 0xfffffffd, 0xce, 0x1000, 0x9, 0xbab, 0x2, 0x80, 0x9, 0x8, 0x8, 0x1, 0x0, 0x8, 0x2, 0x3, 0x2, 0x2, 0x3ff, 0x5, 0x9, 0x9603, 0x7, 0x5, 0x44, 0x9, 0x6, 0x52000000, 0x5, 0x1ff, 0x1, 0x81, 0x30, 0x3, 0x0, 0x7, 0x2, 0x6, 0x3ff, 0x6, 0x6df1, 0x0, 0x60b3, 0x5, 0xa, 0xffd, 0x2, 0x8, 0x2, 0x2, 0x8, 0x1000, 0x50, 0x8, 0x898, 0x3, 0x0, 0x79d8, 0x1d06, 0x7, 0x200, 0x8, 0x60, 0x5, 0x9, 0x6, 0x3ff, 0x8, 0xbd, 0x7, 0xd, 0x2, 0xff, 0xc39, 0xfffffa5f, 0x100, 0x3, 0x1, 0x5f66, 0xe, 0x0, 0x4, 0xfff, 0x8001, 0x9, 0x8, 0x1, 0x8001, 0x6, 0x8, 0x8001, 0x81, 0x68c, 0x5, 0x571, 0x2, 0x1, 0x3, 0x5, 0x5, 0x0, 0x1ff, 0x7, 0x3, 0x5, 0x600, 0x3, 0x10000, 0x3, 0x7ff, 0x401, 0x81, 0x6, 0x20, 0x8, 0xdcb2, 0x1000, 0xffff, 0x101, 0xa, 0x1ff, 0x8001, 0x3, 0x7, 0x80000000, 0x24, 0xf8, 0x10000, 0xf7d4, 0x4, 0x7f, 0x9, 0x2, 0x10001, 0x8, 0x2, 0x0, 0x10001, 0x1cd, 0xffffffff, 0xd, 0x7, 0xac8f, 0xfffffffa, 0x9, 0x0, 0x3, 0xc1c3, 0x4, 0x201, 0x5, 0x5, 0x8, 0x8, 0x8, 0x1, 0x5, 0x7ff, 0x5, 0x7fff, 0xb, 0x6, 0x5, 0x5, 0x4, 0x9, 0x9, 0xd, 0x8001, 0x7f76, 0x8, 0x5, 0x62, 0x9, 0x0, 0x0, 0x800, 0x3, 0xe945, 0x9, 0xe94, 0x7, 0x8, 0x3, 0xfffffff7, 0x7, 0x100, 0x5, 0x5, 0x4, 0x723d3593, 0x40, 0x1, 0x5, 0x5dd3, 0x0, 0xfff, 0x4, 0x8, 0xe184, 0x7, 0x9, 0xe163, 0x4800000, 0xffffea27, 0x7f, 0x4, 0x80, 0x2a7f957d, 0x5, 0x6, 0x7ff, 0x1, 0xbc, 0x8, 0xe, 0x7f, 0x623, 0x5, 0x317b, 0x8001, 0xb, 0x3ff, 0x7fffffff, 0x1ff, 0x74b6, 0x6, 0x1, 0xb57, 0x6, 0x0, 0x800, 0xd, 0x400, 0x99, 0x2, 0x7fff, 0xb2, 0x8001, 0xcd8, 0x80, 0xfffffffe, 0xfffffff7, 0x1000, 0xd, 0x4, 0x1, 0x0, 0x6, 0xfff, 0x4, 0x5, 0x7f, 0x7, 0x5, 0x0, 0xffffff01, 0xffffffff, 0x8, 0x8, 0x0, 0x8, 0xfffffff9, 0x7, 0x1, 0x35, 0xfffffffe, 0x7, 0x4, 0x1, 0x4, 0x1, 0x6, 0x8, 0x6, 0x8000, 0xd5, 0x7, 0x4, 0x5, 0x4, 0x359, 0x9, 0xaa90, 0x6, 0x101, 0x81, 0x1, 0x7, 0x1ab, 0x3, 0x10, 0x10000, 0xa, 0x8, 0x8, 0x2, 0x1, 0x80, 0x4, 0x40, 0x4, 0x5e, 0xac2, 0x6911977, 0x0, 0xd2a, 0x2, 0x1c000, 0xf, 0x7, 0x11, 0x6, 0x7, 0x6, 0x4, 0x10001, 0x6, 0x7, 0x4b8c70f6, 0xff5a, 0x301b, 0x8, 0xaa26, 0x5, 0x10, 0x6cfc, 0x2, 0xa00000, 0x2, 0x366, 0x5, 0x1800, 0x0, 0x800, 0x9, 0x1, 0xb, 0x479a74a, 0x6, 0x3b, 0x8, 0x2, 0x4, 0xfff, 0x98f, 0x0, 0x6, 0x36, 0x6, 0x10, 0x1, 0x1000, 0x3ff, 0x5, 0x9e8, 0x4, 0x0, 0xb1, 0x8, 0x9, 0x4, 0x3, 0x9, 0xffffffff, 0xa2, 0x40, 0x0, 0x8, 0x9, 0x7, 0x8c, 0x4, 0x3, 0xb8c, 0x8, 0x0, 0x5, 0x2, 0x7fff, 0x9400, 0x6, 0x0, 0x9, 0x7, 0x100]}) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000000280)={0x983, 0x8251d54a38b53ba1, 0x0, 0x0, 0x0, 0x0}) 2m38.177778297s ago: executing program 4 (id=93): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYRES64], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001640)={0x2c, &(0x7f0000001440)={0x0, 0x0, 0x1, '>'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001200)={0x2c, &(0x7f0000000e40)={0x20, 0x5, 0x3, "d4b484"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r0, 0xac, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2m35.311670702s ago: executing program 3 (id=101): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') r1 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f00000001c0)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x3, 0x5057c0) dup(r0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000680)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) syz_open_dev$sndctrl(0x0, 0x100000000, 0xb0140) recvmsg$can_raw(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40010022) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x2, 0x0) 2m35.064201894s ago: executing program 4 (id=103): socket(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xf67c}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0, 0x0, 0xa}) r4 = io_uring_setup(0x9, &(0x7f00000002c0)={0x0, 0x164e, 0x0, 0xffffffff}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000004300)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@permit_directio}, {@subj_type={'subj_type', 0x3d, 'fd'}}, {@hash}, {@subj_role={'subj_role', 0x3d, 'seclabel'}}, {@uid_eq}, {@seclabel}, {@subj_user={'subj_user', 0x3d, '&.@'}}, {@smackfsroot={'smackfsroot', 0x3d, '@'}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}}) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0xfffffffffffffffe, 0x7, 0x0, '\x00', {0x1, 0x1, 0x4, 0x6, r5, r6, 0x2000, '\x00', 0x80, 0x4, 0xb4e7, 0x2, {0x8003, 0x8}, {0x6, 0x3}, {0x0, 0xd651}, {0x8, 0x5}, 0x8000, 0xa, 0x0, 0x3}}}}) getresgid(&(0x7f0000014bc0), &(0x7f0000014c00), &(0x7f0000014c40)) newfstatat(0xffffffffffffff9c, &(0x7f0000014c80)='./file0\x00', &(0x7f0000014cc0), 0x2000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000014d40), &(0x7f0000014d80)=0xc) getresgid(&(0x7f0000015380), &(0x7f00000153c0), &(0x7f0000015400)) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) socket$inet_udplite(0x2, 0x2, 0x88) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000ec0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@dfltgid}]}}) close_range(r4, 0xffffffffffffffff, 0x0) 2m33.191971848s ago: executing program 3 (id=106): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000080)=0x2) 2m29.370464684s ago: executing program 3 (id=111): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x14d002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) get_mempolicy(0x0, 0x0, 0x480, &(0x7f000010d000/0x2000)=nil, 0x2) 2m28.628243833s ago: executing program 4 (id=113): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x14d002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$user(&(0x7f0000002900), &(0x7f0000002940)={'syz', 0x2}, &(0x7f0000002980)="be23cc", 0x3, 0xffffffffffffffff) keyctl$update(0x2, r4, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r6 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 2m26.170396022s ago: executing program 4 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_getattr(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x1}, 0x6e) socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, 0x0, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r7}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0xfc, 0x0, 0x4, 0x0, "1b2bc764c7ed2890"}, 0x10}, 0x2, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 2m25.097194943s ago: executing program 4 (id=119): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB="454bf47b848b"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYBLOB="00000000000001018510000007", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001840000006"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0x1, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280), 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m24.057775995s ago: executing program 4 (id=120): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x14d002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) get_mempolicy(0x0, 0x0, 0x480, &(0x7f000010d000/0x2000)=nil, 0x2) 2m14.242327744s ago: executing program 32 (id=111): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x14d002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) get_mempolicy(0x0, 0x0, 0x480, &(0x7f000010d000/0x2000)=nil, 0x2) 2m8.534037264s ago: executing program 33 (id=120): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x14d002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) get_mempolicy(0x0, 0x0, 0x480, &(0x7f000010d000/0x2000)=nil, 0x2) 12.438767724s ago: executing program 0 (id=506): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xd4, &(0x7f0000000000), &(0x7f0000000280)=0x4) 11.52058008s ago: executing program 0 (id=515): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000002600)='.log\x00', 0x0, 0x90) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r3, 0x50dc85624ea6cf59, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000024c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="f61f2abd7400fcdbdf250e0000005e7425f32a6f5684773f0b82d83ab59f365c3cbd34a71c6118f67914d9ad6822f93def0096a8b7cc70c917d007538c026569e3c16ff6e1269683f494bb5f0d3c8f6b87f0939db06e767fcdcc745dd9"], 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x40008000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002680)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xfffffffa, 0x800000, 0xcb, 0x30, 0xffffffffffffffff, 0x7, '\x00', r4, r0, 0x5, 0x0, 0x4, 0xd, @void, @value, @void, @value}, 0x50) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x2, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}}, 0x4004080) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000026c0)="d9e6f0c142b3cee2705ccc1ff27c48225e56190f8dd34b795099fffb24298295455a1e5afd6c45f38c683c1c678be6dc22ae6cff1a88a80761ab6476fd2ec2a5d7a6793c1f7ef4c1ad54068bad1fb56624c467b381d8ff6c52c27b9669c20cff45e9337178c83e6b6f4c20349075ba860e7d0ccd53c0d647b2564aa18a0905006588bf2072bbb68b636da1899a50d084f812aaeaf6f5d42210253b815ca2eb632b9143b6412e31a3fb6a8b836c1eec5321aef6e162249342c3ceb687738c545adccd819a0cf25602d5f2a3a49aaea53249af8e57f3cf5fb95b4802288ad6fe8bd055da5a9d", 0xe5}, {&(0x7f00000027c0)="5f16ec020a2693c3baa1d6b736553e8bc39f2b6365743e285e0689ceb856ce08285543ba0da6058a34d836916e85142d665b168a0cc19d71a12434b73be92580d9486fc7beb3e75a1323c39db09942109970cd1b364126f7b69ef5548faec4bb6c49830b9155deed18f8a55a93c92620c9037248e1ea69377958258577e3645affecfcf2eedc0d46ed2c255f6e75f8c5388f", 0x92}, {&(0x7f0000002880)="ab72bea4afb6ea579ebb642a635e8706bbbbb84f3151b99ef45d88b9b4652108a438d7b8047721d16cce82c4f825db941ff9d500f4523f84e386aebbdc6effd78949a9f0f8208f2127e255d1054b82fd086aec865f8fceda1888f72f02b38c5da1d7b1a550c1b74a660fb50c974fb4e1881c4d24c5a937949608628d007429f40dd13910568bed4074b1374817cd74593f0c", 0x92}], 0x3}}, {{&(0x7f0000002940)=@hci={0x1f, 0x5, 0x2}, 0x80, &(0x7f0000002d40)=[{&(0x7f00000029c0)="995d4ec33078fcaade1bab2babbe46d04f0a9d90a32cc59cbf6047318de0cbca6d82f74ecfb621699d3942e2aca0a8f202ab270adc6cc63ab8d308b9e70d62ab967d952364c42a0cc78e9368b258c25cb5f4ffe7201b717153a00c8623cbb368852d74acd0477987956c10aed073ffa61d0f8ed95bb5c860925fc96d713893b50adcc03f1240bd0b5d9b20b7f9fad1d821453f8f8f9ea01f3ebe3366cb08c24ef5fa", 0xa2}, {&(0x7f0000002a80)="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", 0xff}, {&(0x7f0000002b80)="e70d6be493d540008786856397a3aae850b307dde71c120b5c99f809a2ad9247bc5801c7ff1ef6e8195da0c9f194f21404ded33c710c247ba04d180024adcb50a1ec3c30a700ceec74f5df3c185a69918a50ea08965815f529887a51809c496b9a214859a443ede026243a76b606570a61be8669cbd07550ec4095311358d622c4ac40dd2d9a5f34eb662fda1f95a89bf999adeb243fdd94569fa4d922b4f34ff19e956c27ea8e663f371f73", 0xac}, {&(0x7f0000002c40)="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", 0xff}, {&(0x7f00000025c0)="bb73fe417f1a849e0261c82aa79a19a412ea24bbbca7d60e9d4cd703cb10b34c74ad60e09a92c39c34447428d2b2f4c62362ca11d4aa5915", 0x38}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002dc0)="43b06b91b11374968c92541c8af377835adb941b6d5a54f4fae6c53461d930e8b75e4662c3107b336e11849e9a3650b96276ecc328c56c4cac7baf8b14454d8d6fb11f29f32b92d7cb9000c23d15eb", 0x4f}, {&(0x7f0000002e40)="2045707396652b01442701d7dc47822762a3b912cb09d5ab28be25fc6e36f8fa45b2783cb04aa268d26994e5753d2df18e35cc8ef2ad1f83de46cfbb535cab3cd667e65216eeee6d53e65bb7a7385cad6280ce46f48f4b88c7ad5caabcc6aea6d4bcbd9680", 0x65}, {&(0x7f0000002ec0)="f4970e24f8005978ea373def2b3c1c85ae1edf638ffcaf", 0x17}, {&(0x7f0000002f00)="412e5f40a9d97818cf81b1fcd82a7cb5f4300d9317a3cf", 0x17}], 0x4, &(0x7f0000002f80)=[{0x20, 0x109, 0xa15, "6409d06eac8e740e8609ef6900f9"}, {0xa8, 0x111, 0xffffffff, "7c3f79b4cdab06c8078a61e159f887108d0f6a0fe25b9c8acd8caa719f1275b46bae7d4981419e8c9205a612e52f1fde4e2a4de893a5bf7ad219c05937efc72f2ed89ccc3e050270c96f0136b7edaa0d77d45a8b963f32f7f54de14dcb9a46d6a1aa4be02aada08a0b13da6ebe11ec4d1101e535ff9e990748b117f2faf1a63c90e9471b194755439f45ae2d77cdab0e9f98fe"}, {0xf0, 0x10e, 0x1, "5a3898edac439175d8305770aa954b27ce49d06c80b263445f073024fb9ee2b2a728661e8e75b611c0a7d72b7eb5cb0b1748704616bf2bcb9e9f3cab03ff8b22e7ec9e2de32f7d5aa152adcc559c5978744a196e5cd70737a97fc9cb80d8fc8d2f59e8bd1d83735d96fc7c3b6a7a95e861d75e1396c418b62f74306fa2a306f3441c43cc35e678ac2f33a056de40f7e64c72554ffe72197dc5b6c75f45f96d3647f931b2f884627088fab8880e68040aa3817842a26f285e93218c6341f25b124b091767cbc955715c7493d0263599ac12fd09e61ddebaf1ae"}, {0x90, 0x108, 0x300000, "4e91b1af2aae4c953e87a31a1a996823c012ac190a93598a72199298131b8235fd290a28334f07f4f537413cfef1abb9b6183c9d965553dee18d466c81c20d1ccb55cb17c89b169a38cbd340ddf5f5103b953aef0776927fda6108e27e2fc35c04ae991e85fbf3523c5b388568bae421727b05214eaf57881c4bff4c3107"}, {0x48, 0x84, 0x8000, "74776697d8e8599ff80cb5dce0cb662a16ff78188d98c27a6218bf1292e39f7b30705b708addf905fb713580e00e48637a45b39f8437"}], 0x290}}, {{&(0x7f0000003240)=@phonet={0x23, 0x55, 0x0, 0x5}, 0x80, &(0x7f00000054c0)=[{&(0x7f00000032c0)="03a4e63b56dd2836feb8bc573cd4645b2916c5234c549a5b9626d2dbabb00ee742207b97d5ab21c769b7646760fc903bdd3f686eb26c0489243f6067e2377029fcc70def75776b49497204f0ff17ae89d4025ac129073da68af0ddc094693d1f299de842c1d287129f9cf799e0c5dc28a1692e4da09f33ba93c3f352caf4641e104c2d8d32bd797d6ede3c2c54dd9033a6bb40ac522eb3f11ec7c166e8bbe64e", 0xa0}, {&(0x7f0000003380)="6c15b6711e556728b3e8533678be59edd44319491c9d88625176c5255c65888ca633da9dde84264e9f6b609fe3e15a969672415e6ebe2e4d9ea20c926af246b0acc1621c0e27f4a356239f6e295cb8179e2b14cf5195ca6c26b4456555f53f70ca7fb73c2d8a21a38e5714194fdb6d1f7b24b7b4874a947cd40d6c4995cbccbacb179070dd28cb0d4a87dbe3ae3d2060727d221e771667297de425b2579a2239d6a4fa65353c1cc3", 0xa8}, {&(0x7f0000003440)}, {&(0x7f00000034c0)="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", 0x1000}, {&(0x7f00000044c0)="da3e315a0752a521eb9c40104f135b39942b01b203cf29684999bbc8492022503a2c5d55d1fb35ea543a380e48df6660c5d9f7fd1043a67802ee7a91e6b07bfa9655175ddd2f1851223e12d91dcac8072edcea81b3d9f95fe477db988877017390aff0134af2fdab27fdad23319fe4c211cd3012d12518c74329107ed587eec2c33adfbec457478255a5999ba730daa82eef67b0c643b787c69e9813f47237f915075cf27f747a3f36c1389b720cf88cf53654002473c1f67d475d3d6e25cf26b481be6d4883c23c08f554a42232c5d6cedb73bc68034ba3ba141ec04d33b88181aff148e5979d6e6948697c606aafd0bf1231edf282f17c3948794f8a7d0f886006329dda83e2a8aec1af27f63078f2633e481463823f1a4524afc4b7280986433a742614e9653e520599007981f9853128f4a1765252f2ccf13ffa1b00440737eafc778e1fd692143a51ceab5958d6020d546a3d81015a965326ab243ffd3c86fdb176f155afd3a5cba61078226558f5af0e5b76afed50d50e1ca16c17995d041019268d91ad8271c7d8d8216bdb5d25820283d94080c5954ff804ccb47642dcaffc027bc7f8dca089921cee5e3a37b059e4ea2c2252d587c6b75b9a4de6c137bcc0de1a803b4bf8d968bb14dde77c5adee12ad6d42b0736e9dfcd32aa77d44271a38602ec3b29a60b6f4bbebc2b5eb192870653f47ab204ccb796e49f9dae274945344a674700be47ecef65ddebd4deaaa882f760ebd32ddc338c856fb249b25a065c64c964721bff2bc6debf6002cb5c61d70e379fd573b5362d6ec391e0cb37a21378845ded93239807ff8d750f03ebced0b9ae1d7c1d7db5aa487737321434675bbde2a2edf7d66475be8079926787b0b5461bbef96c6093f0309a739f845305e056ac9a418b0e1c6580d2775f37fb0d2a693409b070ec58be889d6572b23ce0dfb3f191a203a72815ce95bba51ec730afdb7527dc547c211b94f0d2cbe6a16d2fdd29cd79d234e9e8fb7e10f88f67ce920333487e7409583d4202a0abb6399ca5821e5680accf8586fd0d52a5c4a92169c9b97301c73f1f63bdf6b641650e84067bce33b1743d6829a2dc2b92e47c4969a70b5dc4481c855a143503a0559c18f106ba9cf3c9818056be4a46812425166e60b06c1e863abf78fa9740e2b2bda5476faca5081edd3196971e9350f3fd2594966a0196350c7222840e15d5163689a8549c56cc3ecda5acdac06a9a715d48cbddfdfce811a69a1b9ec706bccddcadc49eab5910ff06600c722920a4c879f47b32a89f6633ca083866c5d9af4a33729c4a40c71deac1ba0417e173677f07a71d60b54c27f62a524d55ccd142a2d03d22058a48cca8fb8c9a3ef948c77af5fce4deca7aa288efd556ff95dc1408a98d5c24b0b5b9454ce279a81e60c52db9bd76e602e3ebd0a5d3523a744f2f55c0ab9d31c196138a5a5c0dc2f82d669b4af8b129cda3ba772b980277899e624fa55a63eae356569eb1d79938fcb15d7e37c6eec531c1d2dda84eb200351f88f2c7ac195a9bda132af5857e3525f5f27439c3f83cea5faad5d574163535ccbb99383270fbdd6bc0de22fbd8006fe3f380beb881093f6f83a871592a1c8d091cf577baad94416f18e73d6d78daffcad2182eb4bcfb3e81cdc53533ced0030aecdc6a8c6d008f96328acbd207c5dbd4dd9b19032c4a67bce49ba06b027b4e14879ce76264ff03a243fd5aa010cdcf5e39c95285833dc383b52c3cebbd34b198cd1b80d65390780b05b0a454562977f4131015d3f6902d6125a59e0b6b160d9013020e99716878a5e793f9bba2e7f6196df785708713589eea8fac76f0fe94c313080879d5daf64675ef6114938188812dc91e385d963261cb5ff6ee1a9cd8a767971bdd490d1cb26ea2632f4cbf53dbe332143175d2cd9da15249594374eb675b00f9403fc66f9bd3e83eff16f361c7b138e3a2da7b59a2b4dd637c100d0410399098b0bf3ba533390429c71775630e2e420ce61a5e0160f652a7b5670f1be27c90bd762368a1479faaf7cbcbec6453feea02ff23d80226cb3efdee5616dbb1ea1324c258c8a033fab1404d46c3e6e986e4e5b34061fcecb3ea97753ed8d48b2b157717242f97d482bb8d495de75556604610fc09fb2fdf3fd0b9ddba1c03263f4683b11d37574b4be760a2224c8a75101aa92bfa26b49f9b11e547106eb839bc3e34a775115b2546e61c46b4e9465c3e0904ec58a05599ce64c5b714285d9c89d6577b5c0e4beca71742709738fc9ed5215591c34bf108831376b56ac10f8230a4deb2623768e127fcaf571b3ba15202a6f9aa690c6a2a12ff804177a091c3175692478cbdd2af4065b4fdb50cbf628e70578776f1fd7810e153dcc74d94eb00f5ee2540b538148aebd825eb8d050d56b554b6b20dc74c1c751e0e0100b920ed371c73fa0143c304ed3ad5eec6facf32a9cca5cb973824dc6c0a6b6ad3cd02dffd9e924782d114d3f05710503ea2a7a35aca341362b0649ab7ef5c1a61f24232cbd37dfd999262690aa2c0a396f0e1c1584aaffc85f33ce6ec53631e71601212f87d0e2bfdc8f89df6b2f515e0ccf2020fc4b8e53995105283d1d97b65811377bfe0577dd1ac5b4a73b91ce18b1d71ad9faa4e0c896f71924622ad87a5c910a0e3bac7f93bf1d89b7cce199c60db7d79b61465c5bbd55370d4729f55b0ffb55a0b1fcf856052df1a731314c2ff22bf8d368ff0debf1f9d0f3754cf998eb327f9aa4da09492a36b1b7310a09b1a29781e152663f70e53da67d4451b9ad6f5610e50f6937d22a99b345b75350162c86a58d1daf6ee54a3f8a0686a4ae3f2d63360ca5a8be170ca7129053322e0cde1fb44ebe4b9f049e3c7677ba6bf206b201f3761d0ed9db5aa500f9283bb497eb5f02d35caf656ffbf5da166f9f9d77f48dbf5e61aa2789db9eeed27399a27045ae6f7f7abbe7027ea7ce2356cf0cee96bf8077a27e8e77d0d17ccdfcc2fc1d1bbe25a87bbe953adb0eb2c03517438e4b15db73051c88564d5bb59f3e845f9111ad92b4a0eb4edaedb8cea80c4df87549a97bbae5e8a7620e01c398d1b26899b0c3ebf5ff8786fdbf92144df2a273c209cab95e4b1ebfe2aabc6b551a7eb07962d89484f3b11ec859b277f91287a61ab9d5a1cfcc7899b60ef7ad6162b61573b29f70707fa609fe74dbb9ab59cecd69325e0c1eb1866b4c103e45d55662057a35465a4b752d07ddfe9db527ce1fa7075b9e2f03210246f295d6db33fa0914d267977d58c1782fb6502c6c62ea084bb029fa3274aa8c5f79ac3c44bdb3ce7c0d14f7a85c18ce63ab0c1955af892a36df40639e49589f341423cbd6d3a46bc2f71910f52d1af3a4b98e1a7cfbc3ce691b314eead2d05b882e50f1af6cfc4f40a29c673b602df4e4d79a0bba7ad5607b75a232cd2a95839b2b6a678839c76d9bf54469da77f6743c30c31329f0b66978c0baf84fd9fb7764a1b364394fefc0cb35a91494b4032bd756e9c3d0dd8fe2e90d1a7cd6d0216354cdd5e37a44daac5db3c28171031618c4470b4604f49b6801157f1840327d67fc0f2c7672eaec95eebf852b31650dbf626d35f131bb124ffaf0bca4e0ff257e763204b044f631d7d1599eed7f717960832c203c541f95b3a68428787c7cb1f94a5a40037223b63a2e6846cf874014097199b92632db62620da9705af45df4d6e560521ea9a8e1a73704ff04b25c84f7a3c240aa33914fa66275090c97122bf4cf0f5e9f1395377856546a3412477245bb84243b181efc89b745305bb5ad1a458eb06688ee3e0477e0c11401a247d67c9619c3389adef8d45c32a4c4e17ce684ec0d123fe126b3b276948ed0a0bb8880a23fb076246e67234f165b849799d08b7214a29f530f61df83fabaad2187cb704e4276a49b8682c321975d4e3c56ebbd8ad258ceded6b703f1c1e95b0e3fb9f465ab9130b4759d6067f88a4e897c83cda20d19a1464c39c2c96dc94129e4b03436cfe48ca9678de7e28b2f40bd3bfa03169223dd9db6d5ab27692398e8ec22bbf7cf2609becbe2839350c642ee48c68f5591d7fefb993d77dc32ffca96697afca4d40e174677b898be92a31e17e36edbea49a92bde2d9a6478ca0c8655588a5bbb1f2bcb01fdad8338705e9cb8bcc3c1cf67b068f8cbdd7886dc3cd8a7de6b7df08ac9cc2867684b573134b25b0ad71a90b9d5aa1c4f4acbdb6543a9f20c609b4e7a279f3bb4e52ccdb7d379a3711710bf03315fd310bdb7d5db7d96e4b59eb5631c206d0a387fdd45263d87d7c71b569bb8ba0ede52e41eb8660127c632cb27fe4df582cf95303fc4acca2934f9a71ea6291fda80a4365896011d1f028ca85b148bc0fa7ec63f12dfd3da90115b4814f21cb35ec17403dbabb50ca043c354ce5a21d828d2292ed6c0a67163db66542ecb143598e49b61d143288bf7a7fc0838ec8b8309ba1dd9386898e7d0c9bbe7e13eb984430d885f89e24d80129f8153e2080a75fd3b73e140f8914288f30741d4a60b129deeb827cbfb7f4fd5ecdcc6456b788df3346b3deb1207272126aca540ee42a973651a1eaf504635e71eeff28adcd154093b5be5ad30d461dabc2e012f9aad193b34632d3b7137ebf5b125c6d294d34e496ecfaa64fd06372333ff0b1d65d9950e9b1eb0509e6937efcfae43a1706ef144edc73740416d3ae2a4bcc7b735108de6a97347b6c4537d6ae4bd8a595e569f4438e7c7857ef185a4b8d3182a7fb72b2409d0a5b31d9a810c17dccb965778b14ee544472573090348f73f80efa0b2f0a6ff892d10a8aa017fa3956ac9da5c54fa1e820bc9c9cd6705742bb9aa36062cc955e3e0929621da01c589e01eb113363daa9b703205118e3d5e99947a842bd813b4111f08ba1c3a3b7525c33993cc04c169d14bcb1cb1b22e1eb36c1bd73377798c71e31a2e01c1bd8a91a95a14ec59fffb2da2cd31f3544dda7dbbecc475fd3236d5b05e774d5ab7334689bc3ec6681b28d1f665bbdfd4a4b284f7863a553c37154c38314129eedef19f6cfba83f95cd65f35a0781c32b82eaa6c8d45b46090d84289302a595073cff154806315cafc99b9ea0156ea7cd20ec0bce395c8fa66264f69f9d60ec887a6a57887b36a024256c79bdeae95b1258c32333675f01878fa1c952ff9b7430d98bc2678f3d9635b04c3fb8f1bd62d336794aa400e2ea26e59e54eaa1dad6dc69921c86ce3606f0ab9f8506b07670c1fb6d0d9ee22b6471f7b1be671bf711b1d1f0b357fe9c5c44ba4cd2e7dfbf2b800591d9448e5dc964f96ccba28ee3a8b96a1a16ec48a75a3d219765aa4ba305e29b696282d803a92f67784aa7951ab215f3df2e6fb3e74a7338a61826a8efb9d65dce751b3fc7515456c3509de1d4fba5b17178ca52feb84870a243375a38685b058ba6e04b4e41b2fad78492aa5dc7ba3a62ed3195a5bf5f446979d5c3e7077fc35af044d2b34a97d43cc8da214d5a9d7e56a2de630c9ac915221f5b9ca3981fbc697564fe44cbaebf441cda4c54113ae20706d4b3c640566556e919a46cd666e58643899c9fcb7cef3383f68d453acdc7f3f3940257723e6fcd55da5993608b953cba370685513b0a7c3548245af78ce9d828a3f66aecb3674bf8e3ea150a5ab90181a2f8a18d03343379e38089b0ab239afc931eeaa2b3737b78957c4c5aae2d85c3c1225ed42393157808406d8d17a825598133fb49e6d9f2e88cbcb698ef648d6398e3dfcf5e2749c520d0c519e54b7381bebefbdc22ce380f2bba938729c474e", 0x1000}], 0x5}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000005540)="2856d555c0a15e5a724f105279841ae188a41d49db20584b81eca061ba2f1961a19c84d1131cea309d4bc83a91b55c0b6232e85f1220f4ff34e2908b848d1ee616a409cb68277115bd6611d2dea8", 0x4e}, {&(0x7f00000055c0)="46c1f8fa41598cfdb3ff9df4dea9de9ebbf49740365face59baf94f95188dd3996525126ba9c3c22cf081fde493566cf33b361bdaf5ecc5357da6a98697843a20317f6d40401d1b9ff307e27c65209ef87f5e45d3e68b7900e09ee74d4f73fc6ba0f35ce7146e4efd7609118851c8561a605328b4404a1c9207295f7fb3182c287ec13f7874b5c43bbca87d4198986a0483ce787ae027e55235402479aafa3194dffc452f8714b8100c7860c59f89da9e1f535cf143eb51264bfbd397c93a9cc1005b4ea58f4829fd04be570fc9f8c01f5c96a3a5d4b317d2b1408eeb97ae30c2b", 0xe1}, {&(0x7f00000056c0)="d28250483e50d7229214404f371a6e380c8cda117c100b9743198b489051197f2b83c21bf5ed0e560a955487233d9ba1702ca5580ef5913b75463bdc2c6b9375e564fa10cf59123c1d15804e6bfc280b24c9225399b5b1316a2b1f996d355d8446b51b37a495568caa45e867442ba5f4756e1cf56335e57c34e4a435555c52b5a2a0505a0ac1bd670d36a79b0dbb124db08024144f8377155b7a2bfadd0debdf0fa812317686459fbe8604083664e1940ad69baa6995bd48d817c44199e29218c71cade03b24368bd14ddc22e80a778ca73a7d6fabf3be441081f46da6a018a7717ac7385101f66bd3132ed3e8d62f6cad8d96df84e95310", 0xf8}, {&(0x7f00000057c0)="cc5f5861833485bfbb270aea6255cdf0197d1fc33031ee6d4005007cbaa384cfea88aab6b586e6d5f378df2d5ac099eee10931af73f17b9415957a08efdeaeb39d624396e6235ccd07123d0ef2dd11cb0df0", 0x52}, {&(0x7f0000005840)="85b51d9f4ffddf608cf12840075aadd726d497470f35eb0294a67242adc6ee164d27a2b68c8ca95f3f6dfe8073211b9358138e5bd29f98cd9592b262883cffee0312464546ccfaec3376ae89d3502d342dccad7b2aaedf5c9bbd49ac63ffed9b0eefbde261891cff0b69e266c3d5cb28905c1051c79fba26f620fbcf572ab7cfaff92dca9808eb58b77bbd709612", 0x8e}, {&(0x7f0000005900)="9b1be7e05e7bc8f14860665802dc97cb7194b4e60763018aa813bd6fa49a066f1af0decf17347cb2ee35c7125975584c66c52057bef46a994a95b1b25cc1048daaf496f38aa4f6914bdffa0576a87ce0a47c089ca1e217a087e20f00f789d5ea3c4b7c6941294764796a847aa74831df9f35f9cec4fdb41b18d6bee3be17b1d357c53c1b13d1f604c8bcdb24a3", 0x8d}, {&(0x7f00000059c0)}, {&(0x7f0000005ac0)="d75bafecfa634d56c603b96b409a7217b5a57f6b01344acc01ca28dfb0834ae38a0f91b6eb3e7eb09fb461f7ec8f054c8a195d36e41482e0eba876f37de20339f92dde6e1f16719aa0a4a0145b251ea943913b910e1edf8058a5f5c4e83d80a2d35afe0fb77da6", 0x67}, {&(0x7f0000005c00)}], 0x9, &(0x7f0000005d00)=[{0xe0, 0x108, 0x7b, "216010ea191e919469bd71b6e1898274162505ea6c91c4768d9632c6ea809da5eee32d1fc04412ac430b5b944a5481908696986a1463ac8c90628468b1139560faa3c0db3ddf66a8ec5bd7ec210955846d8323ae16b539564fbf1f8e9fc488e6f29bbba918e2cece2f799dd5c3e3c38c23657a8192d594dbcc5c3a405c23ed92cfa61ca3af71259d7200135f932b9421436be5e478a279bb2e22e268643689b9913b2777a6c5ef6400efc41ee982c0c9d487f268cbf9bb4ad596e5055742ddc6fc5de66031d351e328e9a0862ead"}], 0xe0}}, {{0x0, 0x0, &(0x7f0000006380)=[{&(0x7f0000005f00)="aa0f768bcea3af227b993da359758e0e71650b0e130ce55d186ffc33f24670ba46bc786b10d7dabba9b60d791a6b9b0885b5a56350926e4fa2e026e07465c38b76b9ec10c613ba1097dfeddd3bde84996cb50e021fb6bbc5bfbabe8970362ebd49b11fad4c79eab7d0fa380689552ddf166d193a30274ab29767e76bfdb6520a098d20", 0x83}, {&(0x7f0000005fc0)="e33c01dd91fd8d26b99ecd71741aea55cbd7bc188e5accad717069401adad6baeda10d9434dd8e771a561874c90bf536b6f79b6a9171b06358da6379534e3ff95f7118933c63027979401fb6c4c93a00958ca411da787774f20effc6bcc973be36ef3412d7afde10185c15669cb63366a5170eae08552c720f47e4396e922fd388f61acf79ed505a6baca56732009eb5043513aba518e4e2ba591b0c96a4f91d268e9b851b9427ca2a681e0a9ad94c008bc958cca664c9c37b3bd8d59387dd8f978a48b8d7f729593052ba6645fc7db823", 0xd1}, {&(0x7f00000060c0)="a9dc18ce358db21759738f8ff1c99b15974b1f08342e092151b36f90d1b6936e0b3abd087c99b46d6d3493c44c1be56ca869e5d75ca4ac2f33eaae1a5ec5392697ccdf25a76249f9c0e51b77ff1bbbca354121861d0cfb516b96449749d709576cc151d2f4b332d9c4c9c28a0807010d66d94af6b5b15fde89c95dd2f73401d194fc6c491e2c7627509f572760910fe15e924d29c2330161a2a483b6e489fde24f646eb228", 0xa5}, {&(0x7f0000006180)="3e46b1e8e15c088107cfd24562040b11705dd94138f16a7dd930257a2daf1cf65f0c8ffbe858c5a322b0120ddbee6352f2404b570ee3a86521f0df2beaf973", 0x3f}, {&(0x7f0000006200)="42aa5928d52ea12d65059abf3b60cd722b5a95271fda0e36cd7c60121f55492635b47e7eb222f7836a3d1367bdbcc321fe406b7c3b78c084cbc0a4c20e617a824be14d725be9759c8c1605697c7054498012dba02a32da1c0519ed5e4fe13727041595345e9d553453", 0x69}, {&(0x7f0000006280)="89721615bb10120e29e6c1", 0xb}, {&(0x7f00000062c0)="0e436b4883dc6bfeacfb3d77bd4c00d98ead8ac615cb9de79190ba32fe1b7fb1eef3c62bb73a4e587a176d8eab1a40f57ebaf6df628cfa86a4b8", 0x3a}, {&(0x7f0000006300)="999a0b3648db7e4b302721a27b3887f722ea0b9df2a2a12bf625c9596ea78eb4d83588c1ebeb07bf6858dc018b7488bf73cff835575d09bbb72b353aa816325042a4a78f7ebf704665a392ce11e05eca3acb7f271ab037b92e2cebed1f53db0d1a383d8bab35687b85c8579d6efecc35d4081f244d8f3ce09b", 0x79}], 0x8, &(0x7f0000006440)=[{0x40, 0xff, 0xb3, "24e2b551c7393581bc1a8f9c355bc1d7969d3c30fdccbb3e11766c8ac2069ed22aa28a070b5dc74a6dd1a974"}, {0x18, 0x114, 0xe, "ba4db9e6b4f210"}, {0xc8, 0x108, 0x4, "66b572acb6cf8cea929566be506642a30729e82253e490c1e7a8ba08148efa19d77d0a1bf38e3429c969c9f2cb4d4d2aeb7e88ed46265f4af5ed4da964eb0fc08a8857d724e18221d7049e480269131796b197391f15ea099489d1e1a43ee4cac07b5e37fb6046acd637a696c6be27d446e5f6febe2c45197a0f875bbbd11f65811664ed25b433091ec1622da7435c37acb9024f055c42257260a682b8f255e0ab5c61555cca505c19966ee02cdfc372e57b4b6d6108"}, {0xb8, 0x10f, 0xb, "02c32e557535aba557c8b864f2c8bf15dc03d93f560239274d98ae7bbe8a42637ec5811020e1da8e5b7f20821ab1d22cd134fca327b9a215d759e3efc96c00db985532e8530b4d3dffd1037abfca74de596d266a954d4eba05377cb2208af267f766be2d149d52a666035205b766d75798c97e554af466505b83857f4c456a2f77e10d5117854445c7c0d27abadbca7dd6911ac1e5add18a43009c683bf2522a31d42b"}, {0xd0, 0x10c, 0x401, "e5e3a60b264ac166c00a279c20dbf16b0c504f9c0d18cde3c5c18965a69e94a60c3151f423e68b328714acad0be253a304718b403abcbac5cc4296d0f0c346053c49914c304dff42f8c0c41f98551e467ca2b125f8bc517fe66c113d48a086652d57744079e4eafa26334b4969ffa6ef3554b57be078eaec624b8f42fd36139e531e77133775f518e3de860eeb81851a44a9f18fc119ee41afd96efd069db17ea9b9c41d088b3fcd052b1f21875bf189cb11fe34866f8ae16f4d7734a61e0554"}, {0x90, 0x3a, 0xe4, "1665ed33db9f1bea9002dfb9dd0e63660e5730c7a1186b2dea09b9021404c2e0f59291e31e522b33dcc3585d3331e1fab93f3fc18f05707f846cf414b6e418295adfb5804ab6c44b4a0b1581e21e4122fc6688c8a2b2e6155a34ec14c8bcbf4791ebb80eb5938c0cc5434b0d48eb01d2623eeb7165679f328497f4667e"}], 0x338}}, {{0x0, 0x0, &(0x7f0000007a00)=[{0x0}, {&(0x7f0000006900)="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", 0x1000}, {&(0x7f0000007900)="d3b227ee10404ce44763673072a9e6af1a3756b6f0b6c3782a98ccd2271ba89e7b17d6d18a5e315a1bbe8760296155b1e04a64741563fd8d5e4ef5857bb9fc2868504e3e5108996181beee3917c3d1fb02ea1b6a7697f5dbc6b1041c0581dc4987d68f75b12db945aa2f2cb254fab2cc71b35f372c816091b8aea8df4d864b3d3db99b0ae9391a281c2abbf0e65e7b9b13a05a7b51d0a938c9a3efc4a4966bf9764bf010b56ecea96ac362567eca814a88a6a00f8f7c1c3edff310ca4374079f383fe0df68ecfbf71f", 0xc9}], 0x3, &(0x7f0000007a40)=[{0x38, 0x107, 0x6, "2355a10ce89f7a9a92f5efbf79473750ae3001510ff7094df24c3fcc56eb5d559b3f6117c292"}], 0x38}}, {{0x0, 0x0, &(0x7f0000007d80)=[{&(0x7f0000007a80)="b948270d2eac0cb4e14a8538403e65e3cda649a21787a61a5da7b7b54c60ee542653c28c2fb693937e8df593616cfd58db56554cef09263e14e884ecdb", 0x3d}, {&(0x7f0000007ac0)="1c5f615a33658d79ee330b0a44603d1b9aae188af482c2b7b81d602eaa9649e975fd85162dafa197bd1724c340e32283aa260e948b363ca698ff8a48d93a2f3d01ff6710ec5dff73265fbaed5c8c4654b06f4ecf9bf38b3977e726a5241469094fa73d9380999db6cc2202b9ac73f27aa23be946e0cb33e461ceeb6617aeb6c646ddc08d346b742aabb23c181010f5ecd9ef6df12ad729bb7db92d0388808d57d330cc0f91c3610c2f3c856ec9434eb0d05a57be6037f19d9439a13eae5ff80408cac94d38e29b80c2ef921f378938c8cedc880c0f0df43dde28da159eb768ae3861c18adcca74086a8b6f279fbc9a20e60218cd3d8de709", 0xf8}, {&(0x7f0000007bc0)="9eef1f54c64e4f5cd3b53ef9e94f5c9ff02c023d7808d3a5de6e9361dca17ddcd9d317136409abee656e3be52ae72bc746ddc4cda0a065b3498f58476e69e433cc62bcfbf95535843feea6f4c306c160dffab98494b21663659d4babf5f9a218b615c4dd94930277e7311cb17a738faaf8a126fe8474c53e336f474aa1d2d2a3df03334981f05369a28b8bfa6096b6c89e32896215fd725e", 0x98}, {&(0x7f0000007c80)="1a1c0af93887564ec991f7c228871a4602e4ac6318a89e9c20e8d3250076475a6650d1d4d3f1673f8f3ec186c82668cafa53f312032389360598139747e58c18d5ac4b06649abf6fc918a836c983042eee0d924fa569c13ab1e0b3f987e4e07dd75ca7e526011d8e7b13671d53c7fe3edff60080f68beb2fecaab2aba4f8121756bb7c5056be51323ff6c02fe1d38b7a47422627b51c1739fbe10a524e06ec145643d19ee013a6cb19f4f3", 0xab}], 0x4, &(0x7f0000007dc0)=[{0x28, 0x0, 0x1, "b7f4a8fee7f4d8c731935f21ffa1d862c76315"}, {0x10, 0x113, 0x4}, {0xe0, 0x115, 0xc71, "a9f19caf5c21df781bd13ffc4c75d3247b510043815e871f75aab55ba2081628f35b2eea6bc7bf522ee94f928411800818a7418a07992d53ef456b3f4c6ebfdcb3feefdb7330a1bfa4ebe333f5757bf9dddaae9818ab0f708d4889fb0ed3483cf0e17fb8266b003d53d47fe73342cbdd2ad1611cc0ce40c67fd041ec00f70b302e71e72c626f94fd68b48e266326ac7e37b242fe35644b7bda3f6f84ba7498f2df2a2c07661705de80742ab7e9233211faa74f1dbc955f199a1a5b8bb0d836446ac42a7f47edecc3f8a0be1f"}, {0x68, 0x110, 0x6, "bf01f95b5cf6797978c921962a1259e3947bfb59f131367c782cc2e02c1ff20976caaa63bb8c1a35cd4328c85a86e20516b391b4aedcaa85e34e5734ecfc4613ea7eaba53455f9bfd4f443696b1c4d7a970f75c3"}, {0xd8, 0x107, 0x7fffffff, "e068f1ca093765aa11f650720e925bdb6c1ebb2fd5aa01d236e5447df942cf8534c448daf17c468cbc6186f5b05ae31e0fa930fc11a2a4449ccc411fcf8d4b75106afe8e85609a2dc9b0bda8a8bdc4a6f441e30e4c55531e4ad22e6d50dd2ce3651fe997a038d80fcba4904e08fd7a85ba09cd0d7f6644e9556c7d5a726f2e8dcd21f6b9700bc13b7238fe0ffd92ef5b7673c06634507e12ca1a438db0f07ba66680fd58b4956fb7aaa087ea81d538c202fc33050cfde98cea0f944c5ac43b5e90f1924e396a74e2"}, {0x50, 0x10c, 0xffffffff, "2639a66340da9bfa76b86ba284a96dd8261f657f5b68128c560d6c976a5e421f7360c9ac9712612d231167ee4698f6f519e8b9d7de68d71c25"}, {0x80, 0x10b, 0x6e92, "ec8215e90724ac9ee0d7e02d5564aefe4f9688d73df21ab138b2863832b96a3e8453e558b3abba6d8f286f093a540ac83f534d200a721a36e257ff32af56f2f9e4874f4e98c313fafdd11d48c40dcea20a0bccca96ae5309a87f3fe620a88af6475257098d398d2646"}, {0x100, 0x104, 0xc5, "44025234478a43f98b2ab9135f10a4ce358b7f18bc1b35e252cae9b73a833edd3ba38ac771827ec939c054c1dc413c1165bd05228ea6f4038be6d4702d17df61e5b420230846597bfd50b8ee502c9e949a35d778cbb0e74374f3ab9dd41b690ce7b303e511e32863b69d7323902c8d5d8615429e6bbec4b9d54607ace154338280e0868cae94b98c5b60bb66471be2fba031f2948c07fbf614c4dd73684f2da9f5cbddd1fcc60ff4a11ea386ac517ab348c82bab18dc58afc98582a0093472b90a5d8586b48410865466918d8bc310b5135cf94f6bfaf93f7bca60184a4293eae5fc4811236ab48f9d2f9ac9"}, {0x90, 0x107, 0x8000, "d63bd1173dd644b11cf064567105049157a652925d7166db08e6f6c4308d66d6c4582787c0c6305ac8643cf58d0beaba09ceb0c7eefc23ab30824eaa6232cbd5c9c75e00dff2128879c4cba38ba0c819049e36d2609d09ae403494b7ad9bed4fca472f76516f2df6c9e360d7179d12f4b0ed72fcf2bcaf1161af82"}], 0x4b8}}], 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket(0x200000000000011, 0x2, 0x0) r9 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r9, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r9, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r8, &(0x7f0000000080)={0x11, 0x800, r10, 0x1, 0xfe, 0x6, @random}, 0x14) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000a80)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000a40)=ANY=[@ANYBLOB="09000000000000000200fffee0000002"], 0x190) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300), 0x4) 11.242749523s ago: executing program 2 (id=516): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000005c0)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.907709716s ago: executing program 0 (id=522): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYRES64], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001640)={0x2c, &(0x7f0000001440)={0x0, 0x0, 0x1, '>'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r0, 0xac, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x7b59fe1b) 7.917109686s ago: executing program 1 (id=530): socket$netlink(0x10, 0x3, 0x10) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000001e00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) 7.717772756s ago: executing program 2 (id=532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000130a03000000000000000000020000000900020073797a31000000000800034000000001090001"], 0x34}}, 0x0) (fail_nth: 1) 7.369195363s ago: executing program 2 (id=534): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105511, &(0x7f00000000c0)={{0xc}, 0x0, [0x0, 0x0, 0x7ffc, 0x0, 0x9, 0x100000000, 0x4, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0xffffffffffffffff, 0x0, 0x100000000, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x800]}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) ptrace$pokeuser(0x6, r5, 0x80, 0x4) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='::,:/', 0x0) (async) r6 = socket(0x10, 0x803, 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) ioctl$KVM_GET_NESTED_STATE(r9, 0xc080aebe, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) 7.258652494s ago: executing program 1 (id=536): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000040)="eb", 0xff68}], 0x1) (fail_nth: 1) 6.638497806s ago: executing program 6 (id=538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_getattr(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x1}, 0x6e) socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, 0x0, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r7}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0xfc, 0x0, 0x4, 0x0, "1b2bc764c7ed2890"}, 0x10}, 0x2, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 6.337692027s ago: executing program 5 (id=540): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 5.477957466s ago: executing program 1 (id=541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_getattr(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x1}, 0x6e) socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, 0x0, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) sendmsg$can_raw(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0xfc, 0x0, 0x4, 0x0, "1b2bc764c7ed2890"}, 0x10}, 0x2, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 5.401925799s ago: executing program 0 (id=542): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff"], 0x48) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'erspan0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 5.395942538s ago: executing program 6 (id=543): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x14d002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 5.38517523s ago: executing program 5 (id=544): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0xfffb, 0x1000, @private1, 0x200000}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f00000000c0)={0x0, 0x1, 0x7fff, 0x5, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x4e24, @loopback}}}, 0x90) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000001180)={0x0, 0x0, @pic={0x1, 0xfe, 0x0, 0x23, 0x6, 0xfe, 0x40, 0x1, 0x0, 0x8, 0x4, 0xfd, 0x0, 0x40, 0x0, 0x3}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x8000000000000, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.090677118s ago: executing program 0 (id=545): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000002140)=@getae={0x4c, 0x1f, 0x189, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in6=@private2}, [@mark={0xc}]}, 0x4c}}, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5, 0x8, 0x0, 0x53, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x23}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x34, 0x2, r0, 0x0, &(0x7f0000000540)={0x0, 0x15, 0x0}, 0x0, 0x8002, 0x0, {0x1}}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) sched_setattr(0x0, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x5, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, @loopback={0x0, 0x460c6}, 0x7801, 0x8008, 0x1}}) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x40, 0x13, 0x6, @random="4803219e00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r9) sendmsg$NFC_CMD_START_POLL(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="01000000018d647a853605"], 0x1c}}, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x19, 0x2, '\t\x00'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="400b05000000114e"], 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x169802, 0x0) r12 = dup(r11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r12, 0xb0581000) time(&(0x7f0000000640)) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1ff) 5.090491737s ago: executing program 2 (id=546): socket$netlink(0x10, 0x3, 0x10) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000001e00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) 4.266759025s ago: executing program 5 (id=547): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB="454bf47b848bc12bd2d316af"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYBLOB="00000000000001018510000007", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001840000006"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0x1, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.266370366s ago: executing program 1 (id=548): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000056c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) unlinkat(r2, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000200)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x3) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 4.180831978s ago: executing program 2 (id=549): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a68765a6c733a8eb6df2944f6c2", 0x1b, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/19, @ANYRES32, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e000018000280040012000500163001000000080015"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.073489005s ago: executing program 6 (id=550): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x13, 0x8, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r8, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4.047399555s ago: executing program 1 (id=551): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff8, 0xf}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0xf, 0x8}}]}}]}, 0x3c}}, 0x4000000) (fail_nth: 1) 4.041791563s ago: executing program 5 (id=552): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.962180602s ago: executing program 2 (id=553): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYRES64], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001640)={0x2c, &(0x7f0000001440)={0x0, 0x0, 0x1, '>'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001200)={0x2c, &(0x7f0000000e40)={0x20, 0x5, 0x3, "d4b484"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r0, 0xac, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x7b59fe1b) 2.952410307s ago: executing program 6 (id=554): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b9ff03316844268cb89614f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e6902300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffa84, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r6}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 2.902751653s ago: executing program 1 (id=555): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYRES64], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001640)={0x2c, &(0x7f0000001440)={0x0, 0x0, 0x1, '>'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001200)={0x2c, &(0x7f0000000e40)={0x20, 0x5, 0x3, "d4b484"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r0, 0xac, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x7b59fe1b) 1.68769785s ago: executing program 6 (id=556): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r2}, &(0x7f0000000c40), &(0x7f0000000c80)=r0}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket(0x28, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) r9 = landlock_create_ruleset(&(0x7f0000000280)={0x10, 0x2}, 0x18, 0x0) landlock_restrict_self(r9, 0x0) r10 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3, 0x2}, 0x52, 0x0) landlock_restrict_self(r10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_INTERVAL={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x3f}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x4c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f00000000c0)={'gretap0\x00', &(0x7f00000005c0)={'ip_vti0\x00', r8, 0x7, 0x20, 0x8, 0x7, {{0x2e, 0x4, 0x3, 0x1d, 0xb8, 0x67, 0x0, 0x71, 0x29, 0x0, @loopback, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0xc, 0x1f, 0x3, 0xa, [{@rand_addr=0x64010102, 0x3}]}, @timestamp_addr={0x44, 0x44, 0xa7, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x80000001}, {@local, 0x2}, {@remote, 0x3}, {@private=0xa010102, 0xf254}, {@loopback, 0xffffffff}, {@rand_addr=0x64010101, 0x401}]}, @noop, @lsrr={0x83, 0x1b, 0x3f, [@multicast2, @private=0xa010100, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0x5, 0x3, 0xf, [{@broadcast, 0x2}, {@multicast2, 0x10001}, {@empty, 0x4}, {@loopback, 0xf48c}, {@rand_addr=0x64010100, 0x8}, {@multicast2, 0x3}]}]}}}}}) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 1.097370727s ago: executing program 5 (id=557): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x49) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x8000, 0x1f7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x0) 1.068676357s ago: executing program 0 (id=558): socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r0, 0x2000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x91f, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) bind$bt_l2cap(r1, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000005580)=""/4084, 0xff4}], 0x1}, 0x0) 41.083453ms ago: executing program 5 (id=559): socket$netlink(0x10, 0x3, 0x10) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000001e00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) 0s ago: executing program 6 (id=560): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) unshare(0x400) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'rr\x00', 0x16, 0x2, 0x6f}, 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x3d71, 0x3}}, 0x44) kernel console output (not intermixed with test programs): [ 155.374045][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.395430][ T5885] usb 3-1: Product: syz [ 155.404240][ T5885] usb 3-1: Manufacturer: syz [ 155.420712][ T5885] usb 3-1: SerialNumber: syz [ 155.436249][ T5885] usb 3-1: config 0 descriptor?? [ 155.602371][ T6499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.661852][ T5885] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 155.678091][ T5885] cx231xx 3-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 155.797481][ T5885] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 155.825525][ T5885] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 155.838358][ T5885] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 155.848976][ T5885] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 155.857736][ T5885] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 155.869194][ T5885] cx231xx 3-1:0.1: Failed to set devmode to analog: error: -32 [ 155.940647][ T5885] i2c i2c-2: Added multiplexed i2c bus 4 [ 155.967916][ T5885] i2c i2c-2: Added multiplexed i2c bus 5 [ 155.999002][ T6499] veth0_vlan: entered promiscuous mode [ 156.016268][ T6499] veth1_vlan: entered promiscuous mode [ 156.057914][ T6499] veth0_macvtap: entered promiscuous mode [ 156.071237][ T6499] veth1_macvtap: entered promiscuous mode [ 156.098285][ T6499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.110287][ T6499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.122207][ T6499] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.132220][ T6499] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.158163][ T6499] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.172959][ T6499] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.176041][ T5885] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 156.239618][ T5885] cx231xx 3-1:0.1: cx231xx_send_usb_command: failed with status --71 [ 156.252964][ T5885] cx231xx 3-1:0.1: cx231xx_send_usb_command: failed with status --71 [ 156.264888][ T5885] cx231xx 3-1:0.1: cx231xx_send_usb_command: failed with status --71 [ 156.278344][ T5885] cx231xx 3-1:0.1: cx231xx_send_usb_command: failed with status --71 [ 156.287723][ T5885] cx231xx 3-1:0.1: cx231xx_send_usb_command: failed with status --71 [ 156.297074][ T5885] cx231xx 3-1:0.1: cx231xx_send_usb_command: failed with status --71 [ 156.306471][ T5885] cx231xx 3-1:0.1: cx231xx_send_usb_command: failed with status --71 [ 156.315110][ T5885] cx231xx 3-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 156.324399][ T5885] cx231xx 3-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 156.362259][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.373329][ T5885] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 156.387290][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.400538][ T5885] usb 3-1: USB disconnect, device number 8 [ 156.497070][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.508374][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.866460][ T5947] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 157.037802][ T5947] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 157.076499][ T5947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.084710][ T5947] usb 6-1: Product: syz [ 157.089410][ T5947] usb 6-1: Manufacturer: syz [ 157.094149][ T5947] usb 6-1: SerialNumber: syz [ 157.139180][ T5947] usb 6-1: config 0 descriptor?? [ 157.195508][ T5850] Bluetooth: hci5: command tx timeout [ 157.388138][ T5947] hso 6-1:0.0: Failed to find BULK IN ep [ 157.611692][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 157.611712][ T30] audit: type=1326 audit(1745353113.919:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.5.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dd98e169 code=0x7ffc0000 [ 157.680216][ T5947] usb 6-1: USB disconnect, device number 2 [ 157.715522][ T30] audit: type=1326 audit(1745353113.959:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.5.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dd98e169 code=0x7ffc0000 [ 157.737526][ T30] audit: type=1326 audit(1745353113.959:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.5.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f42dd98e169 code=0x7ffc0000 [ 157.763368][ T6571] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.772779][ T30] audit: type=1326 audit(1745353113.959:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.5.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dd98e169 code=0x7ffc0000 [ 157.840743][ T30] audit: type=1326 audit(1745353113.959:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.5.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dd98e169 code=0x7ffc0000 [ 157.867567][ T30] audit: type=1326 audit(1745353113.959:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.5.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f42dd98e169 code=0x7ffc0000 [ 157.892799][ T30] audit: type=1326 audit(1745353113.959:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.5.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dd98e169 code=0x7ffc0000 [ 157.965402][ T30] audit: type=1326 audit(1745353113.959:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.5.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f42dd98e169 code=0x7ffc0000 [ 157.987126][ T30] audit: type=1326 audit(1745353113.959:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.5.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dd98e169 code=0x7ffc0000 [ 158.018122][ T30] audit: type=1326 audit(1745353113.959:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6552 comm="syz.5.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42dd98e169 code=0x7ffc0000 [ 159.287482][ T5850] Bluetooth: hci5: command tx timeout [ 159.596149][ T5885] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 159.775507][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 159.785806][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 159.798453][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 159.799527][ T5885] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 159.813947][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 159.822151][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 159.829412][ T5885] usb 1-1: config 0 has no interface number 0 [ 159.829461][ T5885] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 159.829485][ T5885] usb 1-1: config 0 interface 1 has no altsetting 0 [ 159.836981][ T5885] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 159.889764][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.898456][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 159.898554][ T5885] usb 1-1: Product: syz [ 159.910560][ T5885] usb 1-1: Manufacturer: syz [ 159.920828][ T5885] usb 1-1: SerialNumber: syz [ 159.953593][ T5885] usb 1-1: config 0 descriptor?? [ 160.163876][ T6615] random: crng reseeded on system resumption [ 160.517617][ T5885] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 160.535390][ T5885] cx231xx 1-1:0.1: Failed to read PCB config [ 160.541480][ T5885] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 160.564370][ T5885] usb 1-1: USB disconnect, device number 10 [ 160.655901][ T6603] chnl_net:caif_netlink_parms(): no params data found [ 160.745822][ T6603] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.753041][ T6603] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.760972][ T6603] bridge_slave_0: entered allmulticast mode [ 160.769328][ T6603] bridge_slave_0: entered promiscuous mode [ 160.779162][ T6603] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.786703][ T6603] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.793948][ T6603] bridge_slave_1: entered allmulticast mode [ 160.802648][ T6603] bridge_slave_1: entered promiscuous mode [ 160.852744][ T6603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.865491][ T919] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 160.875080][ T6603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.971903][ T5885] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 161.077852][ T6628] atomic_op ffff88807df09198 conn xmit_atomic 0000000000000000 [ 161.191361][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 161.199124][ T6603] team0: Port device team_slave_0 added [ 161.345888][ T5885] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 161.347986][ T6603] team0: Port device team_slave_1 added [ 161.376538][ T5850] Bluetooth: hci5: command tx timeout [ 161.415328][ T5885] usb 1-1: config 0 has no interface number 0 [ 161.436158][ T919] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 161.445828][ T5885] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 161.460845][ T919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.475426][ T5885] usb 1-1: config 0 interface 1 has no altsetting 0 [ 161.485308][ T919] usb 2-1: Product: syz [ 161.494683][ T919] usb 2-1: Manufacturer: syz [ 161.516335][ T919] usb 2-1: SerialNumber: syz [ 161.582677][ T5885] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 161.593694][ T919] usb 2-1: config 0 descriptor?? [ 161.610862][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.663214][ T5885] usb 1-1: Product: syz [ 161.668356][ T5885] usb 1-1: Manufacturer: syz [ 161.673027][ T5885] usb 1-1: SerialNumber: syz [ 161.687578][ T5885] usb 1-1: config 0 descriptor?? [ 161.725512][ T6603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.742711][ T6603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.783271][ T6603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.803937][ T6603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.815863][ T6603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.846775][ T6603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.978819][ T5885] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 162.008557][ T5850] Bluetooth: hci6: command tx timeout [ 162.112614][ T5885] cx231xx 1-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 162.236046][ T5885] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 162.244463][ T5885] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 162.254746][ T5885] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 162.269655][ T5899] usb 2-1: USB disconnect, device number 5 [ 162.319914][ T6603] hsr_slave_0: entered promiscuous mode [ 162.362568][ T6603] hsr_slave_1: entered promiscuous mode [ 162.371644][ T5885] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 162.388698][ T6603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.397165][ T6603] Cannot create hsr debugfs directory [ 162.647154][ T5885] i2c i2c-2: Added multiplexed i2c bus 4 [ 162.743804][ T5885] i2c i2c-2: Added multiplexed i2c bus 5 [ 162.750112][ T5885] cx231xx 1-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 162.761701][ T5885] cx231xx 1-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 162.784173][ T6639] atomic_op ffff888031f8a198 conn xmit_atomic 0000000000000000 [ 162.866863][ T5885] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 162.901664][ T5885] usb 1-1: USB disconnect, device number 11 [ 164.078787][ T5850] Bluetooth: hci6: command tx timeout [ 164.534524][ T6603] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 164.547062][ T6603] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 164.557186][ T6657] nbd2: detected capacity change from 0 to 510 [ 164.564191][ T6658] block nbd2: shutting down sockets [ 164.597425][ T6603] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 164.716189][ T11] blk_print_req_error: 27 callbacks suppressed [ 164.716213][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.731857][ T11] buffer_io_error: 27 callbacks suppressed [ 164.731873][ T11] Buffer I/O error on dev nbd2, logical block 0, async page read [ 164.745830][ T5960] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.762058][ T6603] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 164.785902][ T5960] Buffer I/O error on dev nbd2, logical block 0, async page read [ 164.793947][ T5960] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.803450][ T5960] Buffer I/O error on dev nbd2, logical block 0, async page read [ 164.812162][ T5960] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.821492][ T5960] Buffer I/O error on dev nbd2, logical block 0, async page read [ 164.829803][ T5960] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.839094][ T5960] Buffer I/O error on dev nbd2, logical block 0, async page read [ 164.847200][ T5960] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.856560][ T5960] Buffer I/O error on dev nbd2, logical block 0, async page read [ 164.892060][ T5960] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.916981][ T5960] Buffer I/O error on dev nbd2, logical block 0, async page read [ 164.937824][ T5960] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.961796][ T5960] Buffer I/O error on dev nbd2, logical block 0, async page read [ 164.983953][ T5960] ldm_validate_partition_table(): Disk read failed. [ 165.001877][ T5960] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.036280][ T5960] Buffer I/O error on dev nbd2, logical block 0, async page read [ 165.071052][ T5960] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.762898][ T6603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.785027][ T5960] Buffer I/O error on dev nbd2, logical block 0, async page read [ 165.800077][ T5960] Dev nbd2: unable to read RDB block 0 [ 165.810432][ T5960] nbd2: unable to read partition table [ 165.867114][ T5960] ldm_validate_partition_table(): Disk read failed. [ 165.874336][ T5960] Dev nbd2: unable to read RDB block 0 [ 165.934807][ T6603] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.945600][ T5960] nbd2: unable to read partition table [ 166.017446][ T6044] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.024638][ T6044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.103171][ T6044] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.110330][ T6044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.175544][ T5850] Bluetooth: hci6: command tx timeout [ 166.435778][ T919] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 166.617357][ T919] usb 1-1: Using ep0 maxpacket: 16 [ 166.639172][ T919] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 166.688257][ T6603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.707814][ T919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.730438][ T919] usb 1-1: Product: syz [ 166.747470][ T919] usb 1-1: Manufacturer: syz [ 166.765786][ T919] usb 1-1: SerialNumber: syz [ 166.794109][ T919] r8152-cfgselector 1-1: Unknown version 0x0000 [ 166.824832][ T919] r8152-cfgselector 1-1: config 0 descriptor?? [ 166.945838][ T6681] nbd5: detected capacity change from 0 to 510 [ 166.965770][ T6685] block nbd5: shutting down sockets [ 166.974697][ T5960] ldm_validate_partition_table(): Disk read failed. [ 167.004122][ T5960] Dev nbd5: unable to read RDB block 0 [ 167.030315][ T5960] nbd5: unable to read partition table [ 167.061386][ T6691] No control pipe specified [ 167.068301][ T5960] ldm_validate_partition_table(): Disk read failed. [ 167.078976][ T5960] Dev nbd5: unable to read RDB block 0 [ 167.114881][ T5960] nbd5: unable to read partition table [ 167.281961][ T6603] veth0_vlan: entered promiscuous mode [ 167.368499][ T6698] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.410852][ T6603] veth1_vlan: entered promiscuous mode [ 167.568813][ T6672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.193'. [ 167.577956][ T5899] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 168.342769][ T5850] Bluetooth: hci6: command tx timeout [ 168.466131][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 168.492833][ T6603] veth0_macvtap: entered promiscuous mode [ 168.503738][ T5899] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 168.529193][ T5899] usb 3-1: config 0 has no interface number 0 [ 168.539222][ T6603] veth1_macvtap: entered promiscuous mode [ 168.556486][ T5899] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 168.589897][ T5899] usb 3-1: config 0 interface 1 has no altsetting 0 [ 168.604269][ T6603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.621670][ T6603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.634627][ T5899] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 168.647091][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.661667][ T6603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.670745][ T5899] usb 3-1: Product: syz [ 168.674974][ T5899] usb 3-1: Manufacturer: syz [ 168.796673][ T11] block nbd3: Possible stuck request ffff888025f1b0c0: control (read@0,4096B). Runtime 30 seconds [ 168.830727][ T6603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.835465][ T5899] usb 3-1: SerialNumber: syz [ 168.845286][ T6603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.865948][ T5899] usb 3-1: config 0 descriptor?? [ 168.866340][ T6603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.458977][ T6603] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.474540][ T6603] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.483351][ T6603] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.635400][ T6603] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.641865][ T5899] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 169.664627][ T5899] cx231xx 3-1:0.1: Failed to read PCB config [ 169.678415][ T5885] r8152-cfgselector 1-1: USB disconnect, device number 12 [ 169.721826][ T5899] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 169.763964][ T5899] usb 3-1: USB disconnect, device number 9 [ 169.884514][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.903407][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.941436][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.954198][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.018770][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 170.112861][ T6714] nbd5: detected capacity change from 0 to 510 [ 170.130626][ T6715] block nbd5: shutting down sockets [ 170.516026][ T5899] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 170.915515][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 170.939341][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 171.167485][ T10] usb 2-1: config 31 has an invalid interface number: 134 but max is 0 [ 171.305806][ T10] usb 2-1: config 31 contains an unexpected descriptor of type 0x2, skipping [ 171.326057][ T10] usb 2-1: config 31 contains an unexpected descriptor of type 0x1, skipping [ 171.334908][ T10] usb 2-1: config 31 has no interface number 0 [ 171.537702][ T10] usb 2-1: config 31 interface 134 altsetting 41 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 171.580737][ T10] usb 2-1: config 31 interface 134 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 171.635526][ T10] usb 2-1: config 31 interface 134 has no altsetting 0 [ 171.657556][ T10] usb 2-1: string descriptor 0 read error: -22 [ 171.663905][ T10] usb 2-1: New USB device found, idVendor=0499, idProduct=1052, bcdDevice=a4.d0 [ 171.790732][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.813846][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 171.855928][ T10] snd-usb-audio 2-1:31.134: probe with driver snd-usb-audio failed with error -2 [ 171.870567][ T6733] No control pipe specified [ 173.117112][ T11] block nbd4: Possible stuck request ffff888025f8d200: control (read@0,4096B). Runtime 30 seconds [ 174.206473][ T6550] udevd[6550]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:31.134/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.240851][ T5899] usb 2-1: USB disconnect, device number 6 [ 174.414999][ T6752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.546271][ T6754] nbd1: detected capacity change from 0 to 510 [ 174.565288][ T6756] block nbd1: shutting down sockets [ 175.288087][ T6550] blk_print_req_error: 64 callbacks suppressed [ 175.288107][ T6550] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.370136][ T6550] buffer_io_error: 64 callbacks suppressed [ 175.370153][ T6550] Buffer I/O error on dev nbd1, logical block 0, async page read [ 175.415676][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.424914][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 175.434239][ T6550] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.454911][ T6550] Buffer I/O error on dev nbd1, logical block 0, async page read [ 175.464363][ T6550] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.474190][ T6550] Buffer I/O error on dev nbd1, logical block 0, async page read [ 175.484371][ T6550] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.493899][ T6550] Buffer I/O error on dev nbd1, logical block 0, async page read [ 175.505046][ T6550] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.516319][ T6550] Buffer I/O error on dev nbd1, logical block 0, async page read [ 175.524297][ T6550] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.534053][ T6550] Buffer I/O error on dev nbd1, logical block 0, async page read [ 175.542427][ T6550] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.560944][ T6550] Buffer I/O error on dev nbd1, logical block 0, async page read [ 175.586269][ T6550] ldm_validate_partition_table(): Disk read failed. [ 175.600241][ T6550] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.621970][ T6550] Buffer I/O error on dev nbd1, logical block 0, async page read [ 175.645455][ T6550] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.666562][ T6550] Buffer I/O error on dev nbd1, logical block 0, async page read [ 175.685789][ T6550] Dev nbd1: unable to read RDB block 0 [ 175.692151][ T6550] nbd1: unable to read partition table [ 175.702149][ T6550] ldm_validate_partition_table(): Disk read failed. [ 175.709907][ T6550] Dev nbd1: unable to read RDB block 0 [ 175.717613][ T6550] nbd1: unable to read partition table [ 175.735527][ T6766] nbd0: detected capacity change from 0 to 510 [ 175.735536][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 175.759515][ T6768] block nbd0: shutting down sockets [ 175.770357][ T5960] ldm_validate_partition_table(): Disk read failed. [ 175.794891][ T5960] Dev nbd0: unable to read RDB block 0 [ 175.801033][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 175.801065][ T30] audit: type=1800 audit(1745353132.099:196): pid=6763 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.217" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 175.820242][ T5960] nbd0: unable to read partition table [ 175.885939][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 175.897069][ T5960] ldm_validate_partition_table(): Disk read failed. [ 175.918369][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.947138][ T5960] Dev nbd0: unable to read RDB block 0 [ 175.952931][ T10] usb 7-1: config 0 has no interface number 0 [ 175.973810][ T5960] nbd0: unable to read partition table [ 175.990035][ T10] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 176.062370][ T10] usb 7-1: config 0 interface 1 has no altsetting 0 [ 176.119946][ T10] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 176.175499][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.183563][ T10] usb 7-1: Product: syz [ 176.242579][ T10] usb 7-1: Manufacturer: syz [ 176.261859][ T10] usb 7-1: SerialNumber: syz [ 176.283297][ T10] usb 7-1: config 0 descriptor?? [ 176.518793][ T10] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 176.617504][ T10] cx231xx 7-1:0.1: Failed to read PCB config [ 176.669899][ T10] cx231xx 7-1:0.1: probe with driver cx231xx failed with error -71 [ 176.689672][ T10] usb 7-1: USB disconnect, device number 2 [ 177.030194][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 177.185340][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 177.258175][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 177.290382][ T10] usb 7-1: config 0 has no interface number 0 [ 177.983617][ T10] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 177.995969][ T10] usb 7-1: config 0 interface 1 has no altsetting 0 [ 178.005402][ T10] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 178.014480][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.023226][ T10] usb 7-1: Product: syz [ 178.112514][ T10] usb 7-1: Manufacturer: syz [ 178.145401][ T10] usb 7-1: SerialNumber: syz [ 178.210052][ T10] usb 7-1: config 0 descriptor?? [ 178.599497][ T10] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 178.609220][ T10] cx231xx 7-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 178.632529][ T6811] nbd1: detected capacity change from 0 to 510 [ 179.409597][ T10] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 179.425645][ T10] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 179.445364][ T10] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 179.463203][ T10] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 179.465012][ T6810] block nbd1: shutting down sockets [ 179.479573][ T5960] ldm_validate_partition_table(): Disk read failed. [ 179.487195][ T5960] Dev nbd1: unable to read RDB block 0 [ 179.494511][ T5960] nbd1: unable to read partition table [ 179.619545][ T10] i2c i2c-2: Added multiplexed i2c bus 4 [ 179.622245][ T5960] ldm_validate_partition_table(): Disk read failed. [ 179.631486][ T10] i2c i2c-2: Added multiplexed i2c bus 5 [ 179.659520][ T30] audit: type=1800 audit(1745353135.959:197): pid=6810 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.232" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 179.694733][ T5960] Dev nbd1: unable to read RDB block 0 [ 179.706483][ T10] cx231xx 7-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 179.725820][ T5960] nbd1: unable to read partition table [ 179.732184][ T10] cx231xx 7-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 179.830311][ T10] cx231xx 7-1:0.1: probe with driver cx231xx failed with error -71 [ 179.877895][ T10] usb 7-1: USB disconnect, device number 3 [ 181.415578][ T5947] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 182.045647][ T6843] overlayfs: failed to resolve './file0': -2 [ 182.077971][ T5947] usb 2-1: Using ep0 maxpacket: 32 [ 182.104880][ T5947] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 183.037858][ T5947] usb 2-1: config 0 has no interface number 0 [ 183.044449][ T5947] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 183.056010][ T5947] usb 2-1: config 0 interface 1 has no altsetting 0 [ 183.374215][ T6849] netlink: 16 bytes leftover after parsing attributes in process `syz.6.242'. [ 183.387994][ T5947] usb 2-1: string descriptor 0 read error: -71 [ 183.405451][ T5947] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 183.429449][ T6849] netlink: 16 bytes leftover after parsing attributes in process `syz.6.242'. [ 183.439529][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.484281][ T5947] usb 2-1: config 0 descriptor?? [ 183.493893][ T5947] usb 2-1: can't set config #0, error -71 [ 183.512510][ T5947] usb 2-1: USB disconnect, device number 7 [ 184.067245][ T6854] nbd5: detected capacity change from 0 to 510 [ 184.130871][ T6851] atomic_op ffff888029423198 conn xmit_atomic 0000000000000000 [ 184.157102][ T6857] block nbd5: shutting down sockets [ 184.183344][ C1] blk_print_req_error: 101 callbacks suppressed [ 184.183366][ C1] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 184.198777][ C1] buffer_io_error: 101 callbacks suppressed [ 184.198789][ C1] Buffer I/O error on dev nbd5, logical block 0, async page read [ 184.215515][ T6550] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 184.248146][ T6550] Buffer I/O error on dev nbd5, logical block 0, async page read [ 184.435468][ T6550] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 184.450552][ T6550] Buffer I/O error on dev nbd5, logical block 0, async page read [ 185.204178][ T6550] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.230623][ T6550] Buffer I/O error on dev nbd5, logical block 0, async page read [ 185.376828][ T6550] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.425764][ T6869] nbd6: detected capacity change from 0 to 510 [ 185.441532][ T6550] Buffer I/O error on dev nbd5, logical block 0, async page read [ 185.459240][ T6550] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.468801][ T6550] Buffer I/O error on dev nbd5, logical block 0, async page read [ 185.473524][ T6869] block nbd6: shutting down sockets [ 185.480776][ T6550] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.493987][ T6550] Buffer I/O error on dev nbd5, logical block 0, async page read [ 185.502961][ T6550] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.512722][ C0] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.514348][ T6550] Buffer I/O error on dev nbd5, logical block 0, async page read [ 185.521800][ C0] Buffer I/O error on dev nbd6, logical block 0, async page read [ 185.543866][ T5960] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.558516][ T30] audit: type=1800 audit(1745353141.869:198): pid=6869 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.247" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 185.585450][ T6550] ldm_validate_partition_table(): Disk read failed. [ 185.593203][ T6550] Buffer I/O error on dev nbd5, logical block 0, async page read [ 185.596366][ T5960] ldm_validate_partition_table(): Disk read failed. [ 185.607850][ T6550] Dev nbd5: unable to read RDB block 0 [ 185.623829][ T6550] nbd5: unable to read partition table [ 185.630093][ T5960] Dev nbd6: unable to read RDB block 0 [ 185.640776][ T6550] ldm_validate_partition_table(): Disk read failed. [ 185.651056][ T6550] Dev nbd5: unable to read RDB block 0 [ 185.668300][ T6550] nbd5: unable to read partition table [ 185.668516][ T5960] nbd6: unable to read partition table [ 185.675487][ T5899] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 185.727103][ T5960] ldm_validate_partition_table(): Disk read failed. [ 185.734331][ T5960] Dev nbd6: unable to read RDB block 0 [ 185.772233][ T5960] nbd6: unable to read partition table [ 185.992815][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 186.058481][ T5899] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 186.072752][ T5899] usb 3-1: config 0 has no interface number 0 [ 186.079105][ T5899] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 186.090910][ T5899] usb 3-1: config 0 interface 1 has no altsetting 0 [ 186.100199][ T5899] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 186.105409][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 186.110627][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.133832][ T5899] usb 3-1: Product: syz [ 186.141874][ T5899] usb 3-1: Manufacturer: syz [ 186.150508][ T5899] usb 3-1: SerialNumber: syz [ 186.165603][ T5899] usb 3-1: config 0 descriptor?? [ 186.386601][ T5899] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 186.417436][ T5899] cx231xx 3-1:0.1: Failed to read PCB config [ 186.486687][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 187.151124][ T5899] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 187.198137][ T10] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 187.207638][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.222248][ T10] usb 6-1: Product: syz [ 187.233150][ T5899] usb 3-1: USB disconnect, device number 11 [ 187.237643][ T10] usb 6-1: Manufacturer: syz [ 187.243719][ T10] usb 6-1: SerialNumber: syz [ 187.392315][ T10] r8152-cfgselector 6-1: Unknown version 0x0000 [ 187.400839][ T10] r8152-cfgselector 6-1: config 0 descriptor?? [ 187.605517][ T5899] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 187.757964][ T6905] atomic_op ffff8880120c8198 conn xmit_atomic 0000000000000000 [ 187.845553][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 187.927171][ T5899] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.034462][ T6907] netlink: 24 bytes leftover after parsing attributes in process `syz.5.253'. [ 188.070057][ T5899] usb 3-1: config 0 has no interface number 0 [ 188.143186][ T5899] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 188.505805][ T5899] usb 3-1: config 0 interface 1 has no altsetting 0 [ 188.549182][ T5899] usb 3-1: string descriptor 0 read error: -71 [ 188.565467][ T5899] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 188.595700][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.616689][ T5899] usb 3-1: config 0 descriptor?? [ 188.631338][ T5899] usb 3-1: can't set config #0, error -71 [ 188.922683][ T5899] usb 3-1: USB disconnect, device number 12 [ 189.662455][ T6915] overlayfs: failed to resolve './file0': -2 [ 190.111235][ T5947] r8152-cfgselector 6-1: USB disconnect, device number 3 [ 190.445826][ T6929] nbd5: detected capacity change from 0 to 510 [ 190.526191][ T6929] block nbd5: shutting down sockets [ 190.532358][ T6550] blk_print_req_error: 64 callbacks suppressed [ 190.532371][ T6550] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 190.639104][ T30] audit: type=1800 audit(1745353146.949:199): pid=6930 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.264" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 190.753447][ T6550] buffer_io_error: 64 callbacks suppressed [ 190.753508][ T6550] Buffer I/O error on dev nbd5, logical block 0, async page read [ 191.636788][ T59] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.646321][ T59] Buffer I/O error on dev nbd5, logical block 0, async page read [ 191.672589][ T6550] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.767050][ T6550] Buffer I/O error on dev nbd5, logical block 0, async page read [ 191.775011][ T6550] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.820225][ T6550] Buffer I/O error on dev nbd5, logical block 0, async page read [ 191.837300][ T6550] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.985702][ T6550] Buffer I/O error on dev nbd5, logical block 0, async page read [ 191.994711][ T6550] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.011060][ T6550] Buffer I/O error on dev nbd5, logical block 0, async page read [ 192.021360][ T6550] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.030580][ T6550] Buffer I/O error on dev nbd5, logical block 0, async page read [ 192.038567][ T6550] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.745898][ T6550] Buffer I/O error on dev nbd5, logical block 0, async page read [ 192.753781][ T6550] ldm_validate_partition_table(): Disk read failed. [ 192.779137][ T6550] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.814704][ T6550] Buffer I/O error on dev nbd5, logical block 0, async page read [ 192.842408][ T6550] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.870820][ T6550] Buffer I/O error on dev nbd5, logical block 0, async page read [ 192.896009][ T6550] Dev nbd5: unable to read RDB block 0 [ 192.929457][ T6550] nbd5: unable to read partition table [ 192.997215][ T6550] ldm_validate_partition_table(): Disk read failed. [ 193.026213][ T6550] Dev nbd5: unable to read RDB block 0 [ 193.044054][ T6550] nbd5: unable to read partition table [ 193.115548][ T6951] nbd1: detected capacity change from 0 to 510 [ 193.123016][ T6952] block nbd1: shutting down sockets [ 193.134230][ T5960] ldm_validate_partition_table(): Disk read failed. [ 193.202756][ T5960] Dev nbd1: unable to read RDB block 0 [ 193.226051][ T5960] nbd1: unable to read partition table [ 193.258919][ T5960] ldm_validate_partition_table(): Disk read failed. [ 193.275525][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 193.276595][ T5960] Dev nbd1: unable to read RDB block 0 [ 193.298691][ T5960] nbd1: unable to read partition table [ 193.575309][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 193.583388][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 194.186914][ T10] usb 1-1: config 0 has no interface number 0 [ 194.193142][ T10] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 194.205261][ T10] usb 1-1: config 0 interface 1 has no altsetting 0 [ 194.215479][ T10] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 194.224571][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.306598][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.313033][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.339154][ T10] usb 1-1: Product: syz [ 194.343426][ T10] usb 1-1: Manufacturer: syz [ 194.348629][ T10] usb 1-1: SerialNumber: syz [ 194.366870][ T10] usb 1-1: config 0 descriptor?? [ 194.617340][ T10] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 194.643351][ T10] cx231xx 1-1:0.1: Failed to read PCB config [ 194.655365][ T10] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 194.699787][ T10] usb 1-1: USB disconnect, device number 13 [ 195.519973][ T919] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 195.675403][ T919] usb 3-1: Using ep0 maxpacket: 16 [ 195.743582][ T919] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 195.768778][ T919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.780833][ T919] usb 3-1: Product: syz [ 195.791216][ T919] usb 3-1: Manufacturer: syz [ 195.797615][ T919] usb 3-1: SerialNumber: syz [ 195.813101][ T919] r8152-cfgselector 3-1: Unknown version 0x0000 [ 195.819661][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 195.827676][ T919] r8152-cfgselector 3-1: config 0 descriptor?? [ 196.205421][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 196.861946][ T5832] IPVS: starting estimator thread 0... [ 196.957233][ T6974] IPVS: using max 37 ests per chain, 88800 per kthread [ 197.123146][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 197.134718][ T10] usb 1-1: can't read configurations, error -71 [ 199.181485][ T5947] r8152-cfgselector 3-1: USB disconnect, device number 13 [ 199.356292][ T11] block nbd3: Possible stuck request ffff888025f1b0c0: control (read@0,4096B). Runtime 60 seconds [ 199.600099][ T7010] overlayfs: failed to resolve './file0': -2 [ 199.925646][ T5947] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 201.148245][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.165855][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.228023][ T5947] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 201.273038][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.643595][ T5947] usb 3-1: config 0 descriptor?? [ 203.601097][ T919] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 203.619094][ T11] block nbd4: Possible stuck request ffff888025f8d200: control (read@0,4096B). Runtime 60 seconds [ 203.696097][ T5947] usbhid 3-1:0.0: can't add hid device: -71 [ 203.726157][ T5947] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 203.800375][ T5947] usb 3-1: USB disconnect, device number 14 [ 203.905669][ T5899] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 203.926082][ T919] usb 7-1: Using ep0 maxpacket: 16 [ 204.166868][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 204.312824][ T5899] usb 2-1: unable to get BOS descriptor or descriptor too short [ 204.356098][ T919] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 204.368200][ T5899] usb 2-1: config 31 has an invalid interface number: 134 but max is 0 [ 204.371257][ T919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.405927][ T5899] usb 2-1: config 31 contains an unexpected descriptor of type 0x2, skipping [ 204.408205][ T919] usb 7-1: Product: syz [ 204.433833][ T919] usb 7-1: Manufacturer: syz [ 204.488664][ T919] usb 7-1: SerialNumber: syz [ 204.510286][ T5899] usb 2-1: config 31 contains an unexpected descriptor of type 0x1, skipping [ 204.528259][ T919] r8152-cfgselector 7-1: Unknown version 0x0000 [ 204.536885][ T919] r8152-cfgselector 7-1: config 0 descriptor?? [ 204.552973][ T5899] usb 2-1: config 31 has an invalid descriptor of length 238, skipping remainder of the config [ 204.609472][ T5899] usb 2-1: config 31 has no interface number 0 [ 204.653230][ T5899] usb 2-1: config 31 interface 134 altsetting 41 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 204.672176][ T5899] usb 2-1: config 31 interface 134 has no altsetting 0 [ 204.682455][ T5899] usb 2-1: string descriptor 0 read error: -22 [ 204.689024][ T5899] usb 2-1: New USB device found, idVendor=0499, idProduct=1052, bcdDevice=a4.d0 [ 204.702898][ T7053] netlink: 'syz.0.300': attribute type 11 has an invalid length. [ 204.706756][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.718874][ T7053] netlink: 'syz.0.300': attribute type 5 has an invalid length. [ 204.762197][ T5899] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 204.966059][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 205.219070][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 205.228059][ T7057] netlink: 24 bytes leftover after parsing attributes in process `syz.6.294'. [ 205.229630][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.308080][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.259955][ T5899] snd-usb-audio 2-1:31.134: probe with driver snd-usb-audio failed with error -2 [ 206.567688][ T919] r8152-cfgselector 7-1: Unknown version 0x0000 [ 206.653928][ T919] r8152-cfgselector 7-1: bad CDC descriptors [ 206.910345][ T919] r8152-cfgselector 7-1: USB disconnect, device number 4 [ 206.953686][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 206.975103][ T24] usb 1-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 206.984330][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.971624][ T24] usb 1-1: config 0 descriptor?? [ 207.971985][ T5886] usb 2-1: USB disconnect, device number 8 [ 208.636503][ T24] usb 1-1: can't set config #0, error -71 [ 208.674196][ T24] usb 1-1: USB disconnect, device number 16 [ 208.811077][ T6550] udevd[6550]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:31.134/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.918119][ T7083] block nbd0: shutting down sockets [ 209.855345][ T919] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 210.025459][ T919] usb 3-1: Using ep0 maxpacket: 8 [ 210.151262][ T919] usb 3-1: unable to get BOS descriptor or descriptor too short [ 210.307380][ T919] usb 3-1: config 31 has an invalid interface number: 134 but max is 0 [ 210.384961][ T919] usb 3-1: config 31 contains an unexpected descriptor of type 0x2, skipping [ 210.459623][ T919] usb 3-1: config 31 contains an unexpected descriptor of type 0x1, skipping [ 210.701048][ T7102] FAULT_INJECTION: forcing a failure. [ 210.701048][ T7102] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 210.714410][ T7102] CPU: 0 UID: 0 PID: 7102 Comm: syz.5.311 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 210.714441][ T7102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 210.714460][ T7102] Call Trace: [ 210.714470][ T7102] [ 210.714480][ T7102] dump_stack_lvl+0x241/0x360 [ 210.714525][ T7102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.714574][ T7102] should_fail_ex+0x424/0x570 [ 210.714611][ T7102] _copy_from_iter+0x211/0x1c70 [ 210.714644][ T7102] ? kstrtouint+0xfc/0x190 [ 210.714670][ T7102] ? __pfx__copy_from_iter+0x10/0x10 [ 210.714694][ T7102] ? __lock_acquire+0xad5/0xd80 [ 210.714738][ T7102] vhost_chr_write_iter+0x10a/0xd00 [ 210.714779][ T7102] ? __pfx_vhost_chr_write_iter+0x10/0x10 [ 210.714811][ T7102] ? rcu_read_lock_any_held+0xbb/0x160 [ 210.714839][ T7102] ? bpf_lsm_file_permission+0x9/0x10 [ 210.714875][ T7102] vfs_write+0x70f/0xd10 [ 210.714905][ T7102] ? __pfx_vhost_net_chr_write_iter+0x10/0x10 [ 210.714934][ T7102] ? __pfx_vfs_write+0x10/0x10 [ 210.714958][ T7102] ? __fget_files+0x2a/0x420 [ 210.714987][ T7102] ? __fget_files+0x2a/0x420 [ 210.715022][ T7102] ksys_write+0x19d/0x2d0 [ 210.715045][ T7102] ? __pfx_ksys_write+0x10/0x10 [ 210.715073][ T7102] ? do_syscall_64+0xb6/0x210 [ 210.715099][ T7102] do_syscall_64+0xf3/0x210 [ 210.715121][ T7102] ? clear_bhb_loop+0x45/0xa0 [ 210.715147][ T7102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.715168][ T7102] RIP: 0033:0x7f42dd98e169 [ 210.715192][ T7102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.715214][ T7102] RSP: 002b:00007f42de793038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 210.715239][ T7102] RAX: ffffffffffffffda RBX: 00007f42ddbb6160 RCX: 00007f42dd98e169 [ 210.715254][ T7102] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000007 [ 210.715267][ T7102] RBP: 00007f42de793090 R08: 0000000000000000 R09: 0000000000000000 [ 210.715279][ T7102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.715290][ T7102] R13: 0000000000000000 R14: 00007f42ddbb6160 R15: 00007ffdd1dd2518 [ 210.715320][ T7102] [ 210.937235][ T919] usb 3-1: config 31 has an invalid descriptor of length 238, skipping remainder of the config [ 210.953375][ T919] usb 3-1: config 31 has no interface number 0 [ 210.971961][ T919] usb 3-1: config 31 interface 134 altsetting 41 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 210.987347][ T919] usb 3-1: config 31 interface 134 has no altsetting 0 [ 211.319868][ T919] usb 3-1: string descriptor 0 read error: -22 [ 211.330836][ T919] usb 3-1: New USB device found, idVendor=0499, idProduct=1052, bcdDevice=a4.d0 [ 211.413364][ T919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.508188][ T919] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 211.585426][ T919] snd-usb-audio 3-1:31.134: probe with driver snd-usb-audio failed with error -2 [ 211.837109][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 211.843193][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 211.849347][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 211.852378][ T5141] Bluetooth: hci3: command 0x0406 tx timeout [ 211.855438][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 211.869640][ T7075] udevd[7075]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:31.134/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 212.073984][ T5886] IPVS: starting estimator thread 0... [ 212.561866][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 212.763036][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 213.804168][ T24] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 213.925533][ T7120] IPVS: using max 24 ests per chain, 57600 per kthread [ 213.964596][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.073196][ T24] usb 2-1: Product: syz [ 214.149476][ T24] usb 2-1: Manufacturer: syz [ 214.219420][ T24] usb 2-1: SerialNumber: syz [ 214.374759][ T24] r8152-cfgselector 2-1: Unknown version 0x0000 [ 214.558675][ T24] r8152-cfgselector 2-1: config 0 descriptor?? [ 214.582962][ T5923] usb 3-1: USB disconnect, device number 15 [ 215.358555][ T24] r8152-cfgselector 2-1: can't set config #0, error -71 [ 215.396059][ T24] r8152-cfgselector 2-1: USB disconnect, device number 9 [ 215.489676][ T5960] udevd[5960]: setting owner of /dev/bus/usb/002/009 to uid=0, gid=0 failed: No such file or directory [ 216.476212][ T7159] nbd6: detected capacity change from 0 to 510 [ 216.660539][ T7162] block nbd6: shutting down sockets [ 217.543020][ C0] blk_print_req_error: 64 callbacks suppressed [ 217.543044][ C0] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 217.558608][ C0] buffer_io_error: 64 callbacks suppressed [ 217.558640][ C0] Buffer I/O error on dev nbd6, logical block 0, async page read [ 217.596483][ T7075] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 217.950575][ T7075] Buffer I/O error on dev nbd6, logical block 0, async page read [ 217.988983][ T7075] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 217.998776][ T7075] Buffer I/O error on dev nbd6, logical block 0, async page read [ 218.008688][ T7075] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.019827][ T7075] Buffer I/O error on dev nbd6, logical block 0, async page read [ 218.030182][ T7075] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.040026][ T7075] Buffer I/O error on dev nbd6, logical block 0, async page read [ 218.049491][ T7075] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.118308][ T7075] Buffer I/O error on dev nbd6, logical block 0, async page read [ 218.130105][ T7075] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.139918][ T7075] Buffer I/O error on dev nbd6, logical block 0, async page read [ 218.148219][ T7075] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.157812][ T7075] Buffer I/O error on dev nbd6, logical block 0, async page read [ 218.166268][ T7075] ldm_validate_partition_table(): Disk read failed. [ 218.174233][ T7075] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.186728][ T7075] Buffer I/O error on dev nbd6, logical block 0, async page read [ 218.199846][ T7075] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.262890][ T7075] Buffer I/O error on dev nbd6, logical block 0, async page read [ 218.272762][ T7075] Dev nbd6: unable to read RDB block 0 [ 218.279610][ T7075] nbd6: unable to read partition table [ 218.300504][ T7075] ldm_validate_partition_table(): Disk read failed. [ 218.309468][ T7075] Dev nbd6: unable to read RDB block 0 [ 218.318160][ T7075] nbd6: unable to read partition table [ 218.385533][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 218.828122][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.984095][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.994738][ T24] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 219.015343][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.496929][ T24] usb 1-1: config 0 descriptor?? [ 220.345384][ T5899] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 220.561650][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 220.588409][ T5899] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 220.614288][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.664320][ T5899] usb 3-1: Product: syz [ 220.674216][ T7203] FAULT_INJECTION: forcing a failure. [ 220.674216][ T7203] name failslab, interval 1, probability 0, space 0, times 1 [ 220.682882][ T5899] usb 3-1: Manufacturer: syz [ 220.695479][ T7203] CPU: 0 UID: 0 PID: 7203 Comm: syz.6.339 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 220.695510][ T7203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.695524][ T7203] Call Trace: [ 220.695532][ T7203] [ 220.695541][ T7203] dump_stack_lvl+0x241/0x360 [ 220.695578][ T7203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.695607][ T7203] ? __pfx__printk+0x10/0x10 [ 220.695641][ T7203] ? __pfx___might_resched+0x10/0x10 [ 220.695676][ T7203] should_fail_ex+0x424/0x570 [ 220.695713][ T7203] should_failslab+0xac/0x100 [ 220.695742][ T7203] __kmalloc_noprof+0xdf/0x4d0 [ 220.695775][ T7203] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 220.695806][ T7203] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 220.695843][ T7203] tomoyo_realpath_from_path+0xcf/0x5e0 [ 220.695888][ T7203] tomoyo_path_number_perm+0x245/0x790 [ 220.695919][ T7203] ? tomoyo_path_number_perm+0x215/0x790 [ 220.695948][ T7203] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 220.695983][ T7203] ? ksys_write+0x24e/0x2d0 [ 220.696011][ T7203] ? __lock_acquire+0xad5/0xd80 [ 220.696060][ T7203] ? __fget_files+0x2a/0x420 [ 220.696085][ T7203] ? __fget_files+0x2a/0x420 [ 220.696112][ T7203] ? __fget_files+0x2a/0x420 [ 220.696142][ T7203] security_file_ioctl+0xc6/0x2a0 [ 220.696172][ T7203] __se_sys_ioctl+0x46/0x160 [ 220.696207][ T7203] do_syscall_64+0xf3/0x210 [ 220.696229][ T7203] ? clear_bhb_loop+0x45/0xa0 [ 220.696254][ T7203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.696274][ T7203] RIP: 0033:0x7f034f18e169 [ 220.696292][ T7203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.696310][ T7203] RSP: 002b:00007f034ff1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.696333][ T7203] RAX: ffffffffffffffda RBX: 00007f034f3b5fa0 RCX: 00007f034f18e169 [ 220.696348][ T7203] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 220.696361][ T7203] RBP: 00007f034ff1b090 R08: 0000000000000000 R09: 0000000000000000 [ 220.696373][ T7203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.696385][ T7203] R13: 0000000000000000 R14: 00007f034f3b5fa0 R15: 00007ffd726a1518 [ 220.696417][ T7203] [ 220.696427][ T7203] ERROR: Out of memory at tomoyo_realpath_from_path. [ 220.701925][ T5899] usb 3-1: SerialNumber: syz [ 220.743038][ T7203] kvm: kvm [7202]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x6326 [ 220.821653][ T24] hid-led 0003:27B8:01ED.0002: probe with driver hid-led failed with error -32 [ 221.044153][ T5899] r8152-cfgselector 3-1: Unknown version 0x0000 [ 221.066184][ T5899] r8152-cfgselector 3-1: config 0 descriptor?? [ 221.128228][ T24] usb 1-1: USB disconnect, device number 17 [ 221.523124][ T7216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.337'. [ 222.048831][ T30] audit: type=1800 audit(1745353178.359:200): pid=7212 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.342" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 222.412691][ T7214] syz.6.341 (7214): drop_caches: 2 [ 222.559696][ T5899] r8152-cfgselector 3-1: Unknown version 0x0000 [ 222.567092][ T5899] r8152-cfgselector 3-1: bad CDC descriptors [ 222.635169][ T5899] r8152-cfgselector 3-1: USB disconnect, device number 16 [ 224.004977][ T7248] FAULT_INJECTION: forcing a failure. [ 224.004977][ T7248] name failslab, interval 1, probability 0, space 0, times 0 [ 224.006392][ T5886] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 224.026864][ T7248] CPU: 1 UID: 0 PID: 7248 Comm: syz.2.352 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 224.026894][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.026908][ T7248] Call Trace: [ 224.026916][ T7248] [ 224.026925][ T7248] dump_stack_lvl+0x241/0x360 [ 224.026961][ T7248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.026989][ T7248] ? __pfx__printk+0x10/0x10 [ 224.027022][ T7248] ? __pfx___might_resched+0x10/0x10 [ 224.027057][ T7248] should_fail_ex+0x424/0x570 [ 224.027094][ T7248] should_failslab+0xac/0x100 [ 224.027124][ T7248] __kmalloc_noprof+0xdf/0x4d0 [ 224.027148][ T7248] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 224.027178][ T7248] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 224.027214][ T7248] tomoyo_realpath_from_path+0xcf/0x5e0 [ 224.027259][ T7248] tomoyo_path_number_perm+0x245/0x790 [ 224.027289][ T7248] ? tomoyo_path_number_perm+0x215/0x790 [ 224.027318][ T7248] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 224.027352][ T7248] ? ksys_write+0x24e/0x2d0 [ 224.027380][ T7248] ? __lock_acquire+0xad5/0xd80 [ 224.027426][ T7248] ? __fget_files+0x2a/0x420 [ 224.027449][ T7248] ? __fget_files+0x2a/0x420 [ 224.027484][ T7248] ? __fget_files+0x2a/0x420 [ 224.027511][ T7248] security_file_ioctl+0xc6/0x2a0 [ 224.027534][ T7248] __se_sys_ioctl+0x46/0x160 [ 224.027562][ T7248] do_syscall_64+0xf3/0x210 [ 224.027580][ T7248] ? clear_bhb_loop+0x45/0xa0 [ 224.027600][ T7248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.027617][ T7248] RIP: 0033:0x7ff922d8e169 [ 224.027632][ T7248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.027646][ T7248] RSP: 002b:00007ff920bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.027665][ T7248] RAX: ffffffffffffffda RBX: 00007ff922fb5fa0 RCX: 00007ff922d8e169 [ 224.027678][ T7248] RDX: 0000200000000040 RSI: 0000000000004b47 RDI: 0000000000000003 [ 224.027689][ T7248] RBP: 00007ff920bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 224.027700][ T7248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.027711][ T7248] R13: 0000000000000000 R14: 00007ff922fb5fa0 R15: 00007fff06b0c1b8 [ 224.027736][ T7248] [ 224.027746][ T7248] ERROR: Out of memory at tomoyo_realpath_from_path. [ 224.135437][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 224.357934][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.368954][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.379154][ T5886] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 224.407685][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.450970][ T10] usb 1-1: New USB device found, idVendor=19d2, idProduct=7858, bcdDevice=8d.d2 [ 224.534631][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.543125][ T10] usb 1-1: Product: syz [ 224.547625][ T10] usb 1-1: Manufacturer: syz [ 224.552270][ T10] usb 1-1: SerialNumber: syz [ 224.568485][ T5886] usb 6-1: config 0 descriptor?? [ 224.575364][ T10] usb 1-1: config 0 descriptor?? [ 224.937687][ T10] usb 1-1: bad CDC descriptors [ 225.154977][ T7241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.178106][ T7241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.246907][ T5899] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 225.311260][ T10] usb 1-1: USB disconnect, device number 18 [ 225.507196][ T7263] FAULT_INJECTION: forcing a failure. [ 225.507196][ T7263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.527319][ T7263] CPU: 0 UID: 0 PID: 7263 Comm: syz.6.357 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 225.527359][ T7263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 225.527374][ T7263] Call Trace: [ 225.527382][ T7263] [ 225.527391][ T7263] dump_stack_lvl+0x241/0x360 [ 225.527429][ T7263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.527459][ T7263] ? __pfx__printk+0x10/0x10 [ 225.527498][ T7263] should_fail_ex+0x424/0x570 [ 225.527537][ T7263] _copy_to_user+0x31/0xb0 [ 225.527568][ T7263] simple_read_from_buffer+0xc4/0x170 [ 225.527596][ T7263] proc_fail_nth_read+0x1ef/0x260 [ 225.527625][ T7263] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.527654][ T7263] ? rw_verify_area+0x246/0x630 [ 225.527674][ T7263] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.527702][ T7263] vfs_read+0x21f/0xb90 [ 225.527728][ T7263] ? __pfx___mutex_lock+0x10/0x10 [ 225.527752][ T7263] ? __pfx_vfs_read+0x10/0x10 [ 225.527776][ T7263] ? __fget_files+0x2a/0x420 [ 225.527803][ T7263] ? __fget_files+0x39d/0x420 [ 225.527826][ T7263] ? __fget_files+0x2a/0x420 [ 225.527861][ T7263] ksys_read+0x19d/0x2d0 [ 225.527885][ T7263] ? __pfx_ksys_read+0x10/0x10 [ 225.527913][ T7263] ? do_syscall_64+0xb6/0x210 [ 225.527938][ T7263] do_syscall_64+0xf3/0x210 [ 225.527960][ T7263] ? clear_bhb_loop+0x45/0xa0 [ 225.527985][ T7263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.528005][ T7263] RIP: 0033:0x7f034f18cb7c [ 225.528024][ T7263] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 225.528042][ T7263] RSP: 002b:00007f034ff1b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 225.528065][ T7263] RAX: ffffffffffffffda RBX: 00007f034f3b5fa0 RCX: 00007f034f18cb7c [ 225.528081][ T7263] RDX: 000000000000000f RSI: 00007f034ff1b0a0 RDI: 0000000000000004 [ 225.528094][ T7263] RBP: 00007f034ff1b090 R08: 0000000000000000 R09: 0000000000000000 [ 225.528107][ T7263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.528119][ T7263] R13: 0000000000000000 R14: 00007f034f3b5fa0 R15: 00007ffd726a1518 [ 225.528152][ T7263] [ 225.618046][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.760630][ T5886] usbhid 6-1:0.0: can't add hid device: -71 [ 225.767124][ T5886] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 225.962919][ T5886] usb 6-1: USB disconnect, device number 4 [ 226.033466][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.069704][ T5899] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 226.097662][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.349959][ T5899] usb 3-1: config 0 descriptor?? [ 227.482266][ T5899] hid-led 0003:27B8:01ED.0003: probe with driver hid-led failed with error -32 [ 227.496438][ T5899] usb 3-1: USB disconnect, device number 17 [ 228.292588][ T7292] netlink: 'syz.5.364': attribute type 4 has an invalid length. [ 228.300489][ T7292] netlink: 152 bytes leftover after parsing attributes in process `syz.5.364'. [ 228.328177][ T7292] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 228.499382][ T7298] FAULT_INJECTION: forcing a failure. [ 228.499382][ T7298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.578124][ T7298] CPU: 0 UID: 0 PID: 7298 Comm: syz.1.366 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 228.578154][ T7298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 228.578167][ T7298] Call Trace: [ 228.578175][ T7298] [ 228.578183][ T7298] dump_stack_lvl+0x241/0x360 [ 228.578217][ T7298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.578254][ T7298] ? __pfx__printk+0x10/0x10 [ 228.578294][ T7298] should_fail_ex+0x424/0x570 [ 228.578331][ T7298] _copy_to_user+0x31/0xb0 [ 228.578359][ T7298] simple_read_from_buffer+0xc4/0x170 [ 228.578386][ T7298] proc_fail_nth_read+0x1ef/0x260 [ 228.578414][ T7298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.578442][ T7298] ? rw_verify_area+0x246/0x630 [ 228.578461][ T7298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.578488][ T7298] vfs_read+0x21f/0xb90 [ 228.578513][ T7298] ? __pfx___mutex_lock+0x10/0x10 [ 228.578535][ T7298] ? __pfx_vfs_read+0x10/0x10 [ 228.578559][ T7298] ? __fget_files+0x2a/0x420 [ 228.578585][ T7298] ? __fget_files+0x39d/0x420 [ 228.578607][ T7298] ? __fget_files+0x2a/0x420 [ 228.578641][ T7298] ksys_read+0x19d/0x2d0 [ 228.578663][ T7298] ? __pfx_ksys_read+0x10/0x10 [ 228.578690][ T7298] ? do_syscall_64+0xb6/0x210 [ 228.578715][ T7298] do_syscall_64+0xf3/0x210 [ 228.578737][ T7298] ? clear_bhb_loop+0x45/0xa0 [ 228.578762][ T7298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.578782][ T7298] RIP: 0033:0x7f125118cb7c [ 228.578801][ T7298] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 228.578819][ T7298] RSP: 002b:00007f1252051030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 228.578842][ T7298] RAX: ffffffffffffffda RBX: 00007f12513b5fa0 RCX: 00007f125118cb7c [ 228.578858][ T7298] RDX: 000000000000000f RSI: 00007f12520510a0 RDI: 0000000000000004 [ 228.578871][ T7298] RBP: 00007f1252051090 R08: 0000000000000000 R09: 0000000000000000 [ 228.578884][ T7298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.578897][ T7298] R13: 0000000000000000 R14: 00007f12513b5fa0 R15: 00007fff64914d18 [ 228.578929][ T7298] [ 228.855049][ T7306] FAULT_INJECTION: forcing a failure. [ 228.855049][ T7306] name failslab, interval 1, probability 0, space 0, times 0 [ 228.856268][ T7307] fuse: Bad value for 'fd' [ 228.868567][ T7306] CPU: 1 UID: 0 PID: 7306 Comm: syz.1.369 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 228.868600][ T7306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 228.868613][ T7306] Call Trace: [ 228.868621][ T7306] [ 228.868630][ T7306] dump_stack_lvl+0x241/0x360 [ 228.868666][ T7306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.868697][ T7306] ? __pfx__printk+0x10/0x10 [ 228.868730][ T7306] ? __pfx___might_resched+0x10/0x10 [ 228.868767][ T7306] should_fail_ex+0x424/0x570 [ 228.868804][ T7306] should_failslab+0xac/0x100 [ 228.868834][ T7306] __kmalloc_noprof+0xdf/0x4d0 [ 228.868860][ T7306] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 228.868891][ T7306] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 228.868929][ T7306] tomoyo_realpath_from_path+0xcf/0x5e0 [ 228.868975][ T7306] tomoyo_path_number_perm+0x245/0x790 [ 228.869007][ T7306] ? tomoyo_path_number_perm+0x215/0x790 [ 228.869038][ T7306] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 228.869073][ T7306] ? ksys_write+0x24e/0x2d0 [ 228.869102][ T7306] ? __lock_acquire+0xad5/0xd80 [ 228.869152][ T7306] ? __fget_files+0x2a/0x420 [ 228.869211][ T7306] ? __fget_files+0x2a/0x420 [ 228.869241][ T7306] ? __fget_files+0x2a/0x420 [ 228.869279][ T7306] security_file_ioctl+0xc6/0x2a0 [ 228.869311][ T7306] __se_sys_ioctl+0x46/0x160 [ 228.869348][ T7306] do_syscall_64+0xf3/0x210 [ 228.869372][ T7306] ? clear_bhb_loop+0x45/0xa0 [ 228.869400][ T7306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.869422][ T7306] RIP: 0033:0x7f125118e169 [ 228.869442][ T7306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.869460][ T7306] RSP: 002b:00007f1252051038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.869484][ T7306] RAX: ffffffffffffffda RBX: 00007f12513b5fa0 RCX: 00007f125118e169 [ 228.869501][ T7306] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000005 [ 228.869516][ T7306] RBP: 00007f1252051090 R08: 0000000000000000 R09: 0000000000000000 [ 228.869530][ T7306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.869543][ T7306] R13: 0000000000000000 R14: 00007f12513b5fa0 R15: 00007fff64914d18 [ 228.869578][ T7306] [ 228.869680][ T7306] ERROR: Out of memory at tomoyo_realpath_from_path. [ 230.321551][ T11] block nbd3: Possible stuck request ffff888025f1b0c0: control (read@0,4096B). Runtime 90 seconds [ 230.671852][ T7319] (syz.5.368,7319,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 230.680763][ T7319] (syz.5.368,7319,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 231.771120][ T7338] capability: warning: `syz.0.379' uses deprecated v2 capabilities in a way that may be insecure [ 232.023979][ T7345] FAULT_INJECTION: forcing a failure. [ 232.023979][ T7345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.037454][ T7345] CPU: 1 UID: 0 PID: 7345 Comm: syz.1.380 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 232.037486][ T7345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 232.037500][ T7345] Call Trace: [ 232.037508][ T7345] [ 232.037517][ T7345] dump_stack_lvl+0x241/0x360 [ 232.037555][ T7345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.037595][ T7345] ? __pfx__printk+0x10/0x10 [ 232.037634][ T7345] should_fail_ex+0x424/0x570 [ 232.037676][ T7345] _copy_to_user+0x31/0xb0 [ 232.037705][ T7345] __se_sys_semctl+0x25b/0x3b0 [ 232.037735][ T7345] ? __pfx___se_sys_semctl+0x10/0x10 [ 232.037781][ T7345] ? do_syscall_64+0xb6/0x210 [ 232.037806][ T7345] do_syscall_64+0xf3/0x210 [ 232.037827][ T7345] ? clear_bhb_loop+0x45/0xa0 [ 232.037851][ T7345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.037871][ T7345] RIP: 0033:0x7f125118e169 [ 232.037889][ T7345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.037907][ T7345] RSP: 002b:00007f125200f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 232.037929][ T7345] RAX: ffffffffffffffda RBX: 00007f12513b6160 RCX: 00007f125118e169 [ 232.037944][ T7345] RDX: 0000000000000012 RSI: 0000000000000003 RDI: 0000000000000000 [ 232.037956][ T7345] RBP: 00007f125200f090 R08: 0000000000000000 R09: 0000000000000000 [ 232.037969][ T7345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.037980][ T7345] R13: 0000000000000000 R14: 00007f12513b6160 R15: 00007fff64914d18 [ 232.038011][ T7345] [ 233.970305][ T11] block nbd4: Possible stuck request ffff888025f8d200: control (read@0,4096B). Runtime 90 seconds [ 234.615359][ T10] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 234.761018][ T30] audit: type=1326 audit(1745353191.069:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7363 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f034f18e169 code=0x7ffc0000 [ 234.836419][ T30] audit: type=1326 audit(1745353191.099:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7363 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f034f18e169 code=0x7ffc0000 [ 234.899004][ T30] audit: type=1326 audit(1745353191.099:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7363 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f034f18e169 code=0x7ffc0000 [ 234.949593][ T30] audit: type=1326 audit(1745353191.099:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7363 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f034f18e169 code=0x7ffc0000 [ 234.954807][ T10] usb 2-1: config 7 has an invalid interface number: 252 but max is 0 [ 234.971370][ T30] audit: type=1326 audit(1745353191.099:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7363 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f034f18e169 code=0x7ffc0000 [ 234.971424][ T30] audit: type=1326 audit(1745353191.099:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7363 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f034f18e169 code=0x7ffc0000 [ 234.971469][ T30] audit: type=1326 audit(1745353191.099:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7363 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f034f18e169 code=0x7ffc0000 [ 234.971513][ T30] audit: type=1326 audit(1745353191.099:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7363 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f034f18e169 code=0x7ffc0000 [ 234.971556][ T30] audit: type=1326 audit(1745353191.109:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7363 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f034f18e169 code=0x7ffc0000 [ 234.971600][ T30] audit: type=1326 audit(1745353191.109:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7363 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f034f18e169 code=0x7ffc0000 [ 234.981141][ T10] usb 2-1: config 7 has no interface number 0 [ 235.837601][ T10] usb 2-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 235.848988][ T10] usb 2-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 235.859852][ T10] usb 2-1: config 7 interface 252 has no altsetting 0 [ 235.889860][ T10] usb 2-1: string descriptor 0 read error: -71 [ 235.896346][ T10] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 235.945285][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.966907][ T10] usb 2-1: can't set config #7, error -71 [ 236.005462][ T10] usb 2-1: USB disconnect, device number 10 [ 236.084123][ T7382] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.358885][ T7383] FAULT_INJECTION: forcing a failure. [ 236.358885][ T7383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.372918][ T7383] CPU: 1 UID: 0 PID: 7383 Comm: syz.5.390 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 236.372948][ T7383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 236.372961][ T7383] Call Trace: [ 236.372970][ T7383] [ 236.372978][ T7383] dump_stack_lvl+0x241/0x360 [ 236.373015][ T7383] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.373043][ T7383] ? __pfx__printk+0x10/0x10 [ 236.373079][ T7383] should_fail_ex+0x424/0x570 [ 236.373114][ T7383] _copy_to_user+0x31/0xb0 [ 236.373142][ T7383] snd_pcm_oss_read2+0x3aa/0x490 [ 236.373173][ T7383] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 236.373198][ T7383] ? __pfx_snd_pcm_post_prepare+0x10/0x10 [ 236.373233][ T7383] snd_pcm_oss_read+0x608/0x8a0 [ 236.373275][ T7383] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 236.373301][ T7383] vfs_read+0x21f/0xb90 [ 236.373330][ T7383] ? __pfx_vfs_read+0x10/0x10 [ 236.373350][ T7383] ? __fget_files+0x2a/0x420 [ 236.373374][ T7383] ? __fget_files+0x2a/0x420 [ 236.373399][ T7383] ? __fget_files+0x39d/0x420 [ 236.373420][ T7383] ? __fget_files+0x2a/0x420 [ 236.373454][ T7383] ksys_read+0x19d/0x2d0 [ 236.373476][ T7383] ? __pfx_ksys_read+0x10/0x10 [ 236.373501][ T7383] ? do_syscall_64+0xb6/0x210 [ 236.373527][ T7383] do_syscall_64+0xf3/0x210 [ 236.373548][ T7383] ? clear_bhb_loop+0x45/0xa0 [ 236.373572][ T7383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.373592][ T7383] RIP: 0033:0x7f42dd98e169 [ 236.373610][ T7383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.373628][ T7383] RSP: 002b:00007f42de7b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 236.373649][ T7383] RAX: ffffffffffffffda RBX: 00007f42ddbb6080 RCX: 00007f42dd98e169 [ 236.373664][ T7383] RDX: 0000000000001000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 236.373677][ T7383] RBP: 00007f42de7b4090 R08: 0000000000000000 R09: 0000000000000000 [ 236.373690][ T7383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.373701][ T7383] R13: 0000000000000000 R14: 00007f42ddbb6080 R15: 00007ffdd1dd2518 [ 236.373733][ T7383] [ 237.690517][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.395'. [ 237.707259][ T7401] syz_tun: entered promiscuous mode [ 240.374368][ T7411] loop8: detected capacity change from 0 to 8 [ 240.495105][ T7411] Dev loop8: unable to read RDB block 8 [ 240.529885][ T7411] loop8: unable to read partition table [ 240.564808][ T7411] loop8: partition table beyond EOD, truncated [ 240.574717][ T7411] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 240.648607][ T7419] vlan0: entered promiscuous mode [ 240.866159][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 241.259790][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.474100][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.593162][ T10] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 241.692114][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.767709][ T10] usb 3-1: config 0 descriptor?? [ 242.236279][ T5947] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 242.428140][ T5947] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 242.460255][ T5947] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.500973][ T5947] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 242.520719][ T5947] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 242.538738][ T5947] usb 1-1: Product: syz [ 242.547208][ T5947] usb 1-1: Manufacturer: syz [ 242.572388][ T5947] hub 1-1:4.0: USB hub found [ 242.622547][ T10] hid-led 0003:27B8:01ED.0004: probe with driver hid-led failed with error -32 [ 242.665149][ T10] usb 3-1: USB disconnect, device number 18 [ 242.712936][ T7443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.783424][ T5947] hub 1-1:4.0: 8 ports detected [ 242.825131][ T5947] hub 1-1:4.0: insufficient power available to use all downstream ports [ 243.050447][ T7451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 243.092433][ T5947] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 243.109392][ T5947] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 243.148502][ T5947] usb 1-1: USB disconnect, device number 19 [ 243.576229][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 243.737622][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 243.752170][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 243.812110][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.848477][ T10] usb 3-1: Product: syz [ 243.871542][ T10] usb 3-1: Manufacturer: syz [ 243.985702][ T10] usb 3-1: SerialNumber: syz [ 244.418154][ T7491] FAULT_INJECTION: forcing a failure. [ 244.418154][ T7491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.442966][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 244.455407][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 244.455463][ T7491] CPU: 1 UID: 0 PID: 7491 Comm: syz.0.424 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 244.455492][ T7491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 244.455508][ T7491] Call Trace: [ 244.455517][ T7491] [ 244.455527][ T7491] dump_stack_lvl+0x241/0x360 [ 244.455568][ T7491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.455598][ T7491] ? __pfx__printk+0x10/0x10 [ 244.455640][ T7491] should_fail_ex+0x424/0x570 [ 244.455681][ T7491] _copy_to_user+0x31/0xb0 [ 244.455713][ T7491] simple_read_from_buffer+0xc4/0x170 [ 244.455743][ T7491] proc_fail_nth_read+0x1ef/0x260 [ 244.455782][ T7491] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.455813][ T7491] ? rw_verify_area+0x246/0x630 [ 244.455834][ T7491] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.455863][ T7491] vfs_read+0x21f/0xb90 [ 244.455891][ T7491] ? __pfx___mutex_lock+0x10/0x10 [ 244.455920][ T7491] ? __pfx_vfs_read+0x10/0x10 [ 244.455944][ T7491] ? __fget_files+0x2a/0x420 [ 244.455973][ T7491] ? __fget_files+0x39d/0x420 [ 244.455997][ T7491] ? __fget_files+0x2a/0x420 [ 244.456034][ T7491] ksys_read+0x19d/0x2d0 [ 244.456059][ T7491] ? __pfx_ksys_read+0x10/0x10 [ 244.456088][ T7491] ? do_syscall_64+0xb6/0x210 [ 244.456114][ T7491] do_syscall_64+0xf3/0x210 [ 244.456137][ T7491] ? clear_bhb_loop+0x45/0xa0 [ 244.456164][ T7491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.456187][ T7491] RIP: 0033:0x7f914ab8cb7c [ 244.456206][ T7491] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 244.456225][ T7491] RSP: 002b:00007f914b9c1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 244.456249][ T7491] RAX: ffffffffffffffda RBX: 00007f914adb5fa0 RCX: 00007f914ab8cb7c [ 244.456266][ T7491] RDX: 000000000000000f RSI: 00007f914b9c10a0 RDI: 0000000000000004 [ 244.456280][ T7491] RBP: 00007f914b9c1090 R08: 0000000000000000 R09: 0000000000000000 [ 244.456294][ T7491] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 244.456308][ T7491] R13: 0000000000000000 R14: 00007f914adb5fa0 R15: 00007ffd4a1d9478 [ 244.456342][ T7491] [ 244.868990][ T7494] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 244.891450][ T7497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 245.135845][ T5947] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 245.305696][ T5947] usb 6-1: device descriptor read/64, error -71 [ 245.425574][ T5888] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 245.635411][ T5947] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 245.675483][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 245.683055][ T5888] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 245.705087][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.945357][ T5947] usb 6-1: device descriptor read/64, error -71 [ 245.957919][ T5888] usb 2-1: config 0 descriptor?? [ 246.001221][ T5888] usb 2-1: selecting invalid altsetting 3 [ 246.019841][ T7512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.030253][ T5888] comedi comedi0: could not set alternate setting 3 in high speed [ 246.054207][ T5888] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 246.069529][ T5947] usb usb6-port1: attempt power cycle [ 246.189627][ T5888] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22 [ 246.270568][ T5888] usb 2-1: USB disconnect, device number 11 [ 246.456013][ T5947] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 246.506473][ T5947] usb 6-1: device descriptor read/8, error -71 [ 246.731127][ T5899] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 246.765794][ T5947] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 246.820530][ T5947] usb 6-1: device descriptor read/8, error -71 [ 246.897334][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 246.903838][ T10] r8152-cfgselector 3-1: bad CDC descriptors [ 246.933435][ T10] r8152-cfgselector 3-1: USB disconnect, device number 19 [ 247.075603][ T5947] usb usb6-port1: unable to enumerate USB device [ 247.086810][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 247.290266][ T5899] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 247.383963][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.618346][ T5899] usb 1-1: config 0 descriptor?? [ 247.798304][ T5899] usb 1-1: selecting invalid altsetting 3 [ 247.844281][ T5899] comedi comedi0: could not set alternate setting 3 in high speed [ 247.887257][ T5899] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 247.966726][ T5899] usbduxsigma 1-1:0.0: probe with driver usbduxsigma failed with error -22 [ 248.020454][ T5899] usb 1-1: USB disconnect, device number 20 [ 248.267027][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.5.437'. [ 250.585772][ T5886] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 250.789362][ T7566] overlayfs: failed to resolve './file0': -2 [ 251.895490][ T5888] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 252.425344][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 252.479725][ T5888] usb 6-1: config 10 has an invalid interface number: 45 but max is 2 [ 252.494850][ T5888] usb 6-1: config 10 has an invalid interface number: 248 but max is 2 [ 252.523550][ T5888] usb 6-1: config 10 contains an unexpected descriptor of type 0x2, skipping [ 252.546592][ T5899] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 252.582534][ T5888] usb 6-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 252.603681][ T5888] usb 6-1: config 10 has 2 interfaces, different from the descriptor's value: 3 [ 252.613865][ T5888] usb 6-1: config 10 has no interface number 0 [ 252.620407][ T5888] usb 6-1: config 10 has no interface number 1 [ 252.630992][ T5888] usb 6-1: config 10 interface 248 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 252.645039][ T5888] usb 6-1: config 10 interface 45 has no altsetting 0 [ 252.655179][ T5888] usb 6-1: config 10 interface 248 has no altsetting 0 [ 252.678032][ T5888] usb 6-1: New USB device found, idVendor=03f0, idProduct=1b1d, bcdDevice=22.cb [ 252.687369][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.708095][ T5888] usb 6-1: Product: х [ 252.712231][ T5888] usb 6-1: Manufacturer: ⠍ﻭ㤴풟㉧剨쾑䔲휋觞눉㜦虂ܪ殙ຜꋢ赗 [ 252.723573][ T5888] usb 6-1: SerialNumber: 䀊 [ 252.728359][ T5899] usb 1-1: device descriptor read/64, error -71 [ 253.885548][ T5899] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 253.893331][ T5947] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 254.322557][ T7598] overlayfs: failed to resolve './file1': -2 [ 254.329726][ T5899] usb 1-1: device descriptor read/64, error -71 [ 254.445740][ T5947] usb 3-1: Using ep0 maxpacket: 32 [ 254.471662][ T5899] usb usb1-port1: attempt power cycle [ 254.532553][ T5947] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 254.630592][ T5947] usb 3-1: config 0 has no interface number 0 [ 254.786274][ T5947] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 254.798159][ T5947] usb 3-1: config 0 interface 1 has no altsetting 0 [ 254.827651][ T5947] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 254.845963][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.893144][ T5947] usb 3-1: Product: syz [ 254.922353][ T5947] usb 3-1: Manufacturer: syz [ 254.969224][ T5947] usb 3-1: SerialNumber: syz [ 255.041339][ T5888] sierra 6-1:10.45: Sierra USB modem converter detected [ 255.055552][ T5947] usb 3-1: config 0 descriptor?? [ 255.060864][ T5899] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 255.093883][ T5888] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 255.124239][ T5888] sierra 6-1:10.248: Sierra USB modem converter detected [ 255.164079][ T5888] usb 6-1: Sierra USB modem converter now attached to ttyUSB1 [ 255.234913][ T5888] usb 6-1: USB disconnect, device number 9 [ 255.286699][ T5888] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 255.301826][ T5899] usb 1-1: device not accepting address 23, error -71 [ 255.318836][ T5947] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 255.338677][ T5888] sierra 6-1:10.45: device disconnected [ 255.349100][ T5947] cx231xx 3-1:0.1: Failed to read PCB config [ 255.355184][ T5947] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 255.390901][ T5888] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 255.431123][ T5947] usb 3-1: USB disconnect, device number 20 [ 255.452734][ T5888] sierra 6-1:10.248: device disconnected [ 255.685610][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.692112][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.933806][ T7612] FAULT_INJECTION: forcing a failure. [ 255.933806][ T7612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.947288][ T7612] CPU: 0 UID: 0 PID: 7612 Comm: syz.1.457 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 255.947319][ T7612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 255.947332][ T7612] Call Trace: [ 255.947342][ T7612] [ 255.947351][ T7612] dump_stack_lvl+0x241/0x360 [ 255.947389][ T7612] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.947419][ T7612] ? __pfx__printk+0x10/0x10 [ 255.947460][ T7612] should_fail_ex+0x424/0x570 [ 255.947499][ T7612] _copy_from_user+0x2d/0xb0 [ 255.947528][ T7612] core_sys_select+0x542/0xab0 [ 255.947564][ T7612] ? __pfx_core_sys_select+0x10/0x10 [ 255.947591][ T7612] ? rcu_read_lock_any_held+0xbb/0x160 [ 255.947619][ T7612] ? vfs_write+0xb29/0xd10 [ 255.947667][ T7612] ? __pfx_set_user_sigmask+0x10/0x10 [ 255.947700][ T7612] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 255.947723][ T7612] ? __fget_files+0x2a/0x420 [ 255.947755][ T7612] __se_sys_pselect6+0x356/0x3e0 [ 255.947788][ T7612] ? __pfx___se_sys_pselect6+0x10/0x10 [ 255.947821][ T7612] ? __x64_sys_pselect6+0x21/0xf0 [ 255.947847][ T7612] do_syscall_64+0xf3/0x210 [ 255.947871][ T7612] ? clear_bhb_loop+0x45/0xa0 [ 255.947896][ T7612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.947917][ T7612] RIP: 0033:0x7f125118e169 [ 255.947937][ T7612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.947955][ T7612] RSP: 002b:00007f1252030038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 255.947977][ T7612] RAX: ffffffffffffffda RBX: 00007f12513b6080 RCX: 00007f125118e169 [ 255.947993][ T7612] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 255.948007][ T7612] RBP: 00007f1252030090 R08: 0000000000000000 R09: 0000000000000000 [ 255.948020][ T7612] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 255.948034][ T7612] R13: 0000000000000000 R14: 00007f12513b6080 R15: 00007fff64914d18 [ 255.948067][ T7612] [ 256.149000][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.615550][ T5947] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 258.565353][ T7623] overlayfs: failed to resolve './file0': -2 [ 258.762857][ T5886] IPVS: starting estimator thread 0... [ 258.855404][ T7632] IPVS: using max 25 ests per chain, 60000 per kthread [ 258.928481][ T7631] FAULT_INJECTION: forcing a failure. [ 258.928481][ T7631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.941666][ T7631] CPU: 1 UID: 0 PID: 7631 Comm: syz.5.460 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 258.941696][ T7631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 258.941709][ T7631] Call Trace: [ 258.941717][ T7631] [ 258.941726][ T7631] dump_stack_lvl+0x241/0x360 [ 258.941763][ T7631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.941793][ T7631] ? __pfx__printk+0x10/0x10 [ 258.941834][ T7631] should_fail_ex+0x424/0x570 [ 258.941872][ T7631] _copy_from_user+0x2d/0xb0 [ 258.941900][ T7631] move_addr_to_kernel+0x7f/0x170 [ 258.941927][ T7631] __sys_bind+0x12e/0x290 [ 258.941956][ T7631] ? __pfx___sys_bind+0x10/0x10 [ 258.942009][ T7631] __x64_sys_bind+0x7a/0x90 [ 258.942037][ T7631] do_syscall_64+0xf3/0x210 [ 258.942060][ T7631] ? clear_bhb_loop+0x45/0xa0 [ 258.942085][ T7631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.942114][ T7631] RIP: 0033:0x7f42dd98e169 [ 258.942134][ T7631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.942152][ T7631] RSP: 002b:00007f42de793038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 258.942174][ T7631] RAX: ffffffffffffffda RBX: 00007f42ddbb6160 RCX: 00007f42dd98e169 [ 258.942190][ T7631] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000003 [ 258.942203][ T7631] RBP: 00007f42de793090 R08: 0000000000000000 R09: 0000000000000000 [ 258.942216][ T7631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.942228][ T7631] R13: 0000000000000000 R14: 00007f42ddbb6160 R15: 00007ffdd1dd2518 [ 258.942261][ T7631] [ 260.870168][ T7652] netlink: 40 bytes leftover after parsing attributes in process `syz.0.463'. [ 261.562639][ T7644] bridge: RTM_NEWNEIGH with invalid ether address [ 261.574601][ T7647] overlayfs: failed to resolve './file1': -2 [ 261.619325][ T11] block nbd3: Possible stuck request ffff888025f1b0c0: control (read@0,4096B). Runtime 120 seconds [ 262.413014][ T7667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.469'. [ 262.709324][ T919] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 262.905568][ T919] usb 7-1: Using ep0 maxpacket: 32 [ 262.917389][ T919] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 262.944230][ T919] usb 7-1: config 0 has no interface number 0 [ 262.965656][ T919] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 263.165893][ T919] usb 7-1: config 0 interface 1 has no altsetting 0 [ 263.237097][ T919] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 263.882655][ T919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.920856][ T919] usb 7-1: Product: syz [ 263.932183][ T919] usb 7-1: Manufacturer: syz [ 263.942319][ T919] usb 7-1: SerialNumber: syz [ 263.997015][ T11] block nbd4: Possible stuck request ffff888025f8d200: control (read@0,4096B). Runtime 120 seconds [ 264.083615][ T919] usb 7-1: config 0 descriptor?? [ 264.096938][ T7674] ufs: You didn't specify the type of your ufs filesystem [ 264.096938][ T7674] [ 264.096938][ T7674] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 264.096938][ T7674] [ 264.096938][ T7674] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 264.232607][ T7683] overlayfs: failed to resolve './file0': -2 [ 264.813141][ T7674] ufs: ufstype=old is supported read-only [ 264.826481][ T7674] syz.5.473: attempt to access beyond end of device [ 264.826481][ T7674] loop5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 265.053102][ T919] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 265.076986][ T919] cx231xx 7-1:0.1: Failed to read PCB config [ 265.077574][ T5947] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 265.095312][ T919] cx231xx 7-1:0.1: probe with driver cx231xx failed with error -71 [ 265.145550][ T919] usb 7-1: USB disconnect, device number 6 [ 265.255853][ T5947] usb 1-1: Using ep0 maxpacket: 32 [ 265.275405][ T5947] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 265.283466][ T5947] usb 1-1: config 0 has no interface number 0 [ 265.313671][ T5947] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 265.330901][ T5947] usb 1-1: config 0 interface 1 has no altsetting 0 [ 265.340525][ T5947] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 265.355146][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.364208][ T5947] usb 1-1: Product: syz [ 265.373926][ T5947] usb 1-1: Manufacturer: syz [ 265.380763][ T5947] usb 1-1: SerialNumber: syz [ 265.401495][ T5947] usb 1-1: config 0 descriptor?? [ 265.595685][ T919] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 265.676803][ T7703] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.482'. [ 265.690917][ T5947] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 265.701178][ T5947] cx231xx 1-1:0.1: Failed to read PCB config [ 265.711529][ T5947] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 265.728136][ T5947] usb 1-1: USB disconnect, device number 25 [ 266.445290][ T919] usb 7-1: Using ep0 maxpacket: 32 [ 266.454676][ T919] usb 7-1: device descriptor read/all, error -71 [ 266.805420][ T5947] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 267.176387][ T2155] IPVS: starting estimator thread 0... [ 267.723936][ T5947] usb 1-1: Using ep0 maxpacket: 32 [ 267.756393][ T7719] IPVS: using max 29 ests per chain, 69600 per kthread [ 267.765339][ T5947] usb 1-1: device descriptor read/all, error -71 [ 267.863865][ T7727] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.489'. [ 268.159640][ T7734] overlayfs: failed to resolve './file0': -2 [ 268.858306][ T7735] netlink: 24 bytes leftover after parsing attributes in process `syz.0.491'. [ 269.151925][ T7739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.492'. [ 269.166880][ T7740] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.493'. [ 271.261743][ T7754] Invalid ELF header magic: != ELF [ 271.980625][ T7767] FAULT_INJECTION: forcing a failure. [ 271.980625][ T7767] name failslab, interval 1, probability 0, space 0, times 0 [ 272.014113][ T7767] CPU: 0 UID: 0 PID: 7767 Comm: syz.1.498 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 272.014136][ T7767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 272.014146][ T7767] Call Trace: [ 272.014154][ T7767] [ 272.014161][ T7767] dump_stack_lvl+0x241/0x360 [ 272.014187][ T7767] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.014207][ T7767] ? __pfx__printk+0x10/0x10 [ 272.014229][ T7767] ? __pfx___might_resched+0x10/0x10 [ 272.014253][ T7767] should_fail_ex+0x424/0x570 [ 272.014279][ T7767] should_failslab+0xac/0x100 [ 272.014299][ T7767] __kmalloc_noprof+0xdf/0x4d0 [ 272.014317][ T7767] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 272.014339][ T7767] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 272.014364][ T7767] tomoyo_realpath_from_path+0xcf/0x5e0 [ 272.014396][ T7767] tomoyo_path_number_perm+0x245/0x790 [ 272.014417][ T7767] ? tomoyo_path_number_perm+0x215/0x790 [ 272.014437][ T7767] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 272.014461][ T7767] ? ksys_write+0x24e/0x2d0 [ 272.014481][ T7767] ? __lock_acquire+0xad5/0xd80 [ 272.014513][ T7767] ? __fget_files+0x2a/0x420 [ 272.014530][ T7767] ? __fget_files+0x2a/0x420 [ 272.014550][ T7767] ? __fget_files+0x2a/0x420 [ 272.014570][ T7767] security_file_ioctl+0xc6/0x2a0 [ 272.014591][ T7767] __se_sys_ioctl+0x46/0x160 [ 272.014615][ T7767] do_syscall_64+0xf3/0x210 [ 272.014631][ T7767] ? clear_bhb_loop+0x45/0xa0 [ 272.014648][ T7767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.014662][ T7767] RIP: 0033:0x7f125118e169 [ 272.014675][ T7767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.014687][ T7767] RSP: 002b:00007f125200f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.014703][ T7767] RAX: ffffffffffffffda RBX: 00007f12513b6160 RCX: 00007f125118e169 [ 272.014714][ T7767] RDX: 0000200000000040 RSI: 00000000c004500a RDI: 0000000000000003 [ 272.014724][ T7767] RBP: 00007f125200f090 R08: 0000000000000000 R09: 0000000000000000 [ 272.014733][ T7767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.014741][ T7767] R13: 0000000000000001 R14: 00007f12513b6160 R15: 00007fff64914d18 [ 272.014763][ T7767] [ 272.244235][ T7767] ERROR: Out of memory at tomoyo_realpath_from_path. [ 272.472503][ T7772] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.501'. [ 272.481908][ T919] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 272.635480][ T919] usb 7-1: Using ep0 maxpacket: 32 [ 272.643742][ T919] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 272.656771][ T919] usb 7-1: config 0 has no interface number 0 [ 272.664437][ T919] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 272.683840][ T919] usb 7-1: config 0 interface 1 has no altsetting 0 [ 272.724134][ T919] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 272.733745][ T919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.754037][ T919] usb 7-1: Product: syz [ 272.775116][ T919] usb 7-1: Manufacturer: syz [ 272.998632][ T7778] overlayfs: failed to resolve './file0': -2 [ 273.474423][ T919] usb 7-1: SerialNumber: syz [ 273.494993][ T919] usb 7-1: config 0 descriptor?? [ 273.751104][ T919] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 273.766814][ T919] cx231xx 7-1:0.1: Failed to read PCB config [ 273.785407][ T919] cx231xx 7-1:0.1: probe with driver cx231xx failed with error -71 [ 273.861648][ T919] usb 7-1: USB disconnect, device number 9 [ 273.981413][ T7786] FAULT_INJECTION: forcing a failure. [ 273.981413][ T7786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.004406][ T7786] CPU: 1 UID: 0 PID: 7786 Comm: syz.0.505 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 274.004437][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 274.004449][ T7786] Call Trace: [ 274.004457][ T7786] [ 274.004466][ T7786] dump_stack_lvl+0x241/0x360 [ 274.004501][ T7786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.004528][ T7786] ? __pfx__printk+0x10/0x10 [ 274.004566][ T7786] should_fail_ex+0x424/0x570 [ 274.004601][ T7786] _copy_from_user+0x2d/0xb0 [ 274.004627][ T7786] ucma_write+0x17f/0x430 [ 274.004654][ T7786] ? rcu_read_lock_any_held+0xbb/0x160 [ 274.004678][ T7786] ? __pfx_ucma_write+0x10/0x10 [ 274.004710][ T7786] ? bpf_lsm_file_permission+0x9/0x10 [ 274.004736][ T7786] ? rw_verify_area+0x246/0x630 [ 274.004754][ T7786] ? __pfx_ucma_write+0x10/0x10 [ 274.004780][ T7786] vfs_write+0x2bc/0xd10 [ 274.004829][ T7786] ? __pfx_vfs_write+0x10/0x10 [ 274.004850][ T7786] ? __fget_files+0x2a/0x420 [ 274.004873][ T7786] ? __fget_files+0x2a/0x420 [ 274.004899][ T7786] ? __fget_files+0x39d/0x420 [ 274.004920][ T7786] ? __fget_files+0x2a/0x420 [ 274.004954][ T7786] ksys_write+0x19d/0x2d0 [ 274.004977][ T7786] ? __pfx_ksys_write+0x10/0x10 [ 274.005004][ T7786] ? do_syscall_64+0xb6/0x210 [ 274.005029][ T7786] do_syscall_64+0xf3/0x210 [ 274.005050][ T7786] ? clear_bhb_loop+0x45/0xa0 [ 274.005073][ T7786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.005094][ T7786] RIP: 0033:0x7f914ab8e169 [ 274.005119][ T7786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.005136][ T7786] RSP: 002b:00007f914b9c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 274.005158][ T7786] RAX: ffffffffffffffda RBX: 00007f914adb5fa0 RCX: 00007f914ab8e169 [ 274.005174][ T7786] RDX: 0000000000000090 RSI: 0000200000000140 RDI: 0000000000000003 [ 274.005191][ T7786] RBP: 00007f914b9c1090 R08: 0000000000000000 R09: 0000000000000000 [ 274.005203][ T7786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.005215][ T7786] R13: 0000000000000000 R14: 00007f914adb5fa0 R15: 00007ffd4a1d9478 [ 274.005246][ T7786] [ 274.365673][ T919] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 274.536867][ T919] usb 7-1: Using ep0 maxpacket: 32 [ 274.563769][ T919] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 274.582521][ T919] usb 7-1: config 0 has no interface number 0 [ 274.589671][ T919] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 274.686920][ T919] usb 7-1: config 0 interface 1 has no altsetting 0 [ 274.711633][ T919] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 274.747111][ T919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.763871][ T919] usb 7-1: Product: syz [ 274.770465][ T919] usb 7-1: Manufacturer: syz [ 274.775115][ T919] usb 7-1: SerialNumber: syz [ 274.832506][ T919] usb 7-1: config 0 descriptor?? [ 275.050389][ T919] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 275.098418][ T919] cx231xx 7-1:0.1: Failed to read PCB config [ 275.105132][ T919] cx231xx 7-1:0.1: probe with driver cx231xx failed with error -71 [ 275.152579][ T919] usb 7-1: USB disconnect, device number 10 [ 275.210124][ T7813] netlink: 'syz.2.513': attribute type 72 has an invalid length. [ 275.218352][ T7812] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.512'. [ 275.657373][ T7819] overlayfs: failed to resolve './file0': -2 [ 276.403740][ T7825] FAULT_INJECTION: forcing a failure. [ 276.403740][ T7825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.418616][ T7825] CPU: 0 UID: 0 PID: 7825 Comm: syz.6.517 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 276.418646][ T7825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 276.418660][ T7825] Call Trace: [ 276.418668][ T7825] [ 276.418676][ T7825] dump_stack_lvl+0x241/0x360 [ 276.418711][ T7825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.418739][ T7825] ? __pfx__printk+0x10/0x10 [ 276.418781][ T7825] should_fail_ex+0x424/0x570 [ 276.418819][ T7825] _copy_from_user+0x2d/0xb0 [ 276.418847][ T7825] copy_msghdr_from_user+0xb3/0x580 [ 276.418879][ T7825] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 276.418902][ T7825] ? __fget_files+0x2a/0x420 [ 276.418930][ T7825] ? __fget_files+0x2a/0x420 [ 276.418964][ T7825] __sys_sendmsg+0x20a/0x360 [ 276.419002][ T7825] ? __pfx___sys_sendmsg+0x10/0x10 [ 276.419092][ T7825] ? do_syscall_64+0xb6/0x210 [ 276.419118][ T7825] do_syscall_64+0xf3/0x210 [ 276.419139][ T7825] ? clear_bhb_loop+0x45/0xa0 [ 276.419164][ T7825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.419185][ T7825] RIP: 0033:0x7f034f18e169 [ 276.419203][ T7825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.419220][ T7825] RSP: 002b:00007f034ff1b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.419258][ T7825] RAX: ffffffffffffffda RBX: 00007f034f3b5fa0 RCX: 00007f034f18e169 [ 276.419274][ T7825] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 276.419287][ T7825] RBP: 00007f034ff1b090 R08: 0000000000000000 R09: 0000000000000000 [ 276.419300][ T7825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.419311][ T7825] R13: 0000000000000000 R14: 00007f034f3b5fa0 R15: 00007ffd726a1518 [ 276.419343][ T7825] [ 276.769137][ T5832] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 276.916520][ T7831] nbd6: detected capacity change from 0 to 510 [ 276.923384][ T7835] block nbd6: shutting down sockets [ 276.924734][ T7075] blk_print_req_error: 27 callbacks suppressed [ 276.924754][ T7075] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.946230][ T7075] buffer_io_error: 27 callbacks suppressed [ 276.946248][ T7075] Buffer I/O error on dev nbd6, logical block 0, async page read [ 276.963821][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.985398][ T11] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.996026][ T11] Buffer I/O error on dev nbd6, logical block 0, async page read [ 277.003908][ T7075] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.023307][ T7075] Buffer I/O error on dev nbd6, logical block 0, async page read [ 277.031199][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 277.031217][ T30] audit: type=1800 audit(1745353233.339:222): pid=7831 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.520" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 277.031517][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.055791][ T7075] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.061882][ T5832] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 277.095885][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.110546][ T7075] Buffer I/O error on dev nbd6, logical block 0, async page read [ 277.119694][ T5832] usb 3-1: config 0 descriptor?? [ 277.125970][ T7075] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.135050][ T7075] Buffer I/O error on dev nbd6, logical block 0, async page read [ 277.175369][ T7075] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.184736][ T7075] Buffer I/O error on dev nbd6, logical block 0, async page read [ 277.194415][ T7075] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.204339][ T7075] Buffer I/O error on dev nbd6, logical block 0, async page read [ 277.215499][ T5899] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 277.243485][ T7075] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.273413][ T7075] Buffer I/O error on dev nbd6, logical block 0, async page read [ 277.281910][ T7075] ldm_validate_partition_table(): Disk read failed. [ 277.340230][ T7075] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.352201][ T7075] Buffer I/O error on dev nbd6, logical block 0, async page read [ 277.363024][ T7075] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.372680][ T7075] Buffer I/O error on dev nbd6, logical block 0, async page read [ 277.381266][ T7075] Dev nbd6: unable to read RDB block 0 [ 277.388282][ T7075] nbd6: unable to read partition table [ 277.415328][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 277.466895][ T5899] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 277.470000][ T7075] ldm_validate_partition_table(): Disk read failed. [ 277.474945][ T5899] usb 1-1: config 0 has no interface number 0 [ 277.474994][ T5899] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 277.518783][ T7075] Dev nbd6: unable to read RDB block 0 [ 277.546602][ T5899] usb 1-1: config 0 interface 1 has no altsetting 0 [ 277.559933][ T5899] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 277.569197][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.577325][ T5899] usb 1-1: Product: syz [ 277.581518][ T5899] usb 1-1: Manufacturer: syz [ 277.591551][ T5899] usb 1-1: SerialNumber: syz [ 277.606133][ T5899] usb 1-1: config 0 descriptor?? [ 277.612392][ T7075] nbd6: unable to read partition table [ 277.699762][ T7848] netlink: 'syz.5.525': attribute type 72 has an invalid length. [ 277.828994][ T5899] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 278.059600][ T5899] cx231xx 1-1:0.1: Failed to read PCB config [ 278.062808][ T5832] hid-led 0003:27B8:01ED.0005: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 278.066438][ T5899] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 278.093179][ T5899] usb 1-1: USB disconnect, device number 28 [ 278.124334][ T7856] bridge: RTM_NEWNEIGH with invalid ether address [ 278.230899][ T7859] overlayfs: failed to resolve './file0': -2 [ 278.241659][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 278.447842][ T5899] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 278.783611][ T5832] hid-led 0003:27B8:01ED.0005: ThingM blink(1) initialized [ 278.795975][ T5832] usb 3-1: USB disconnect, device number 22 [ 278.845663][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.5.529'. [ 278.905983][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 278.926851][ T5899] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 278.934985][ T5899] usb 1-1: config 0 has no interface number 0 [ 278.942850][ T5899] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 278.961645][ T5899] usb 1-1: config 0 interface 1 has no altsetting 0 [ 279.045374][ T5899] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 279.055158][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.109277][ T5899] usb 1-1: Product: syz [ 279.113503][ T5899] usb 1-1: Manufacturer: syz [ 279.132652][ T5899] usb 1-1: SerialNumber: syz [ 279.142763][ T5899] usb 1-1: config 0 descriptor?? [ 279.167517][ T7867] FAULT_INJECTION: forcing a failure. [ 279.167517][ T7867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.186141][ T7867] CPU: 1 UID: 0 PID: 7867 Comm: syz.2.532 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 279.186172][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 279.186186][ T7867] Call Trace: [ 279.186194][ T7867] [ 279.186203][ T7867] dump_stack_lvl+0x241/0x360 [ 279.186240][ T7867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.186268][ T7867] ? __pfx__printk+0x10/0x10 [ 279.186310][ T7867] should_fail_ex+0x424/0x570 [ 279.186347][ T7867] _copy_from_user+0x2d/0xb0 [ 279.186375][ T7867] copy_msghdr_from_user+0xb3/0x580 [ 279.186414][ T7867] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 279.186436][ T7867] ? __fget_files+0x2a/0x420 [ 279.186464][ T7867] ? __fget_files+0x2a/0x420 [ 279.186498][ T7867] __sys_sendmsg+0x20a/0x360 [ 279.186536][ T7867] ? __pfx___sys_sendmsg+0x10/0x10 [ 279.186636][ T7867] ? do_syscall_64+0xb6/0x210 [ 279.186661][ T7867] do_syscall_64+0xf3/0x210 [ 279.186682][ T7867] ? clear_bhb_loop+0x45/0xa0 [ 279.186706][ T7867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.186726][ T7867] RIP: 0033:0x7ff922d8e169 [ 279.186743][ T7867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.186761][ T7867] RSP: 002b:00007ff920bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.186782][ T7867] RAX: ffffffffffffffda RBX: 00007ff922fb5fa0 RCX: 00007ff922d8e169 [ 279.186798][ T7867] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 279.186811][ T7867] RBP: 00007ff920bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 279.186823][ T7867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.186835][ T7867] R13: 0000000000000000 R14: 00007ff922fb5fa0 R15: 00007fff06b0c1b8 [ 279.186865][ T7867] [ 279.460714][ T5899] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 279.470612][ T5899] cx231xx 1-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 279.585889][ T5899] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 279.594637][ T5899] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 279.605051][ T5899] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 279.614051][ T5899] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 279.635679][ T5899] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 279.643567][ T5899] cx231xx 1-1:0.1: Failed to set devmode to analog: error: -32 [ 279.699032][ T5899] i2c i2c-2: Added multiplexed i2c bus 4 [ 279.718845][ T5899] i2c i2c-2: Added multiplexed i2c bus 5 [ 279.825521][ T2155] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 279.899223][ T5899] cx231xx 1-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]! [ 279.951254][ T5899] cx231xx 1-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]! [ 279.996658][ T7880] netlink: 788 bytes leftover after parsing attributes in process `syz.5.537'. [ 280.011407][ T2155] usb 2-1: Using ep0 maxpacket: 8 [ 280.034702][ T2155] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 280.060905][ T2155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.094330][ T2155] usb 2-1: Product: syz [ 280.110509][ T5899] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -32 [ 280.119007][ T2155] usb 2-1: Manufacturer: syz [ 280.123648][ T2155] usb 2-1: SerialNumber: syz [ 280.164239][ T2155] usb 2-1: config 0 descriptor?? [ 280.191721][ T2155] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 280.236316][ T2155] usb 2-1: setting power ON [ 280.246776][ T2155] dvb-usb: bulk message failed: -22 (2/0) [ 280.278667][ T2155] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 280.506039][ T2155] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 280.514886][ T2155] usb 2-1: media controller created [ 280.802262][ T2155] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 280.818695][ T7891] bridge: RTM_NEWNEIGH with invalid ether address [ 281.371477][ T5832] usb 1-1: USB disconnect, device number 29 [ 281.465153][ T2155] usb 2-1: selecting invalid altsetting 6 [ 281.473420][ T2155] usb 2-1: digital interface selection failed (-22) [ 281.501890][ T2155] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 281.724283][ T2155] usb 2-1: setting power OFF [ 281.735305][ T2155] dvb-usb: bulk message failed: -22 (2/0) [ 281.741230][ T2155] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 281.750778][ T2155] (NULL device *): no alternate interface [ 281.879256][ T7908] overlayfs: failed to resolve './file0': -2 [ 282.461960][ T7906] netlink: 71 bytes leftover after parsing attributes in process `syz.0.545'. [ 282.472969][ T5837] block nbd6: Receive control failed (result -32) [ 282.537020][ T2155] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 282.555956][ T7901] nbd6: detected capacity change from 0 to 510 [ 282.564160][ T2155] usb 2-1: USB disconnect, device number 12 [ 282.575707][ T7909] block nbd6: shutting down sockets [ 282.840416][ T7923] FAULT_INJECTION: forcing a failure. [ 282.840416][ T7923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.853982][ T7923] CPU: 0 UID: 0 PID: 7923 Comm: syz.1.551 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 282.854011][ T7923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 282.854024][ T7923] Call Trace: [ 282.854032][ T7923] [ 282.854041][ T7923] dump_stack_lvl+0x241/0x360 [ 282.854076][ T7923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.854105][ T7923] ? __pfx__printk+0x10/0x10 [ 282.854147][ T7923] should_fail_ex+0x424/0x570 [ 282.854185][ T7923] _copy_from_user+0x2d/0xb0 [ 282.854215][ T7923] copy_msghdr_from_user+0xb3/0x580 [ 282.854247][ T7923] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 282.854270][ T7923] ? __fget_files+0x2a/0x420 [ 282.854298][ T7923] ? __fget_files+0x2a/0x420 [ 282.854333][ T7923] __sys_sendmsg+0x20a/0x360 [ 282.854371][ T7923] ? __pfx___sys_sendmsg+0x10/0x10 [ 282.854461][ T7923] ? do_syscall_64+0xb6/0x210 [ 282.854488][ T7923] do_syscall_64+0xf3/0x210 [ 282.854510][ T7923] ? clear_bhb_loop+0x45/0xa0 [ 282.854535][ T7923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.854556][ T7923] RIP: 0033:0x7f125118e169 [ 282.854575][ T7923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.854593][ T7923] RSP: 002b:00007f1252051038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.854615][ T7923] RAX: ffffffffffffffda RBX: 00007f12513b5fa0 RCX: 00007f125118e169 [ 282.854631][ T7923] RDX: 0000000004000000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 282.854645][ T7923] RBP: 00007f1252051090 R08: 0000000000000000 R09: 0000000000000000 [ 282.854658][ T7923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.854671][ T7923] R13: 0000000000000000 R14: 00007f12513b5fa0 R15: 00007fff64914d18 [ 282.854703][ T7923] [ 283.029560][ T5899] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 283.360586][ T5837] Bluetooth: hci6: command 0x0406 tx timeout [ 283.770491][ T5899] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.783790][ T5899] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 283.793007][ T5899] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.803033][ T5899] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 283.812220][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.834767][ T5899] hub 1-1:1.0: bad descriptor, ignoring hub [ 283.865290][ T5899] hub 1-1:1.0: probe with driver hub failed with error -5 [ 283.873098][ T5899] cdc_wdm 1-1:1.0: skipping garbage [ 284.150412][ T5899] cdc_wdm 1-1:1.0: skipping garbage [ 284.166308][ T5899] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 284.176428][ T7906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.185146][ T7906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.169900][ T5947] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 285.225326][ T5899] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 285.255632][ T919] usb 1-1: USB disconnect, device number 30 [ 285.358633][ T5947] usb 3-1: Using ep0 maxpacket: 32 [ 285.375430][ T5899] usb 2-1: device descriptor read/64, error -71 [ 285.395700][ T5947] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 285.403754][ T5947] usb 3-1: config 0 has no interface number 0 [ 285.410936][ T5947] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 285.432067][ T5947] usb 3-1: config 0 interface 1 has no altsetting 0 [ 285.451011][ T5947] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 285.462129][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.503344][ T5947] usb 3-1: Product: syz [ 285.513407][ T5947] usb 3-1: Manufacturer: syz [ 285.520134][ T5947] usb 3-1: SerialNumber: syz [ 285.530800][ T5947] usb 3-1: config 0 descriptor?? [ 285.625685][ T5899] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 285.754899][ T5947] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 285.767580][ T5899] usb 2-1: device descriptor read/64, error -71 [ 285.790514][ T5947] cx231xx 3-1:0.1: Failed to read PCB config [ 285.804428][ T5947] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 285.830594][ T5947] usb 3-1: USB disconnect, device number 23 [ 285.995166][ T5899] usb usb2-port1: attempt power cycle [ 286.297594][ T5947] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 286.345506][ T5899] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 286.807929][ T5899] usb 2-1: device descriptor read/8, error -71 [ 286.935299][ T5947] usb 3-1: Using ep0 maxpacket: 32 [ 287.036098][ T31] INFO: task syz.3.111:6336 blocked for more than 143 seconds. [ 287.043745][ T31] Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 [ 287.044575][ T5947] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 287.051677][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.068366][ T31] task:syz.3.111 state:D stack:26200 pid:6336 tgid:6332 ppid:5831 task_flags:0x400140 flags:0x00004006 [ 287.080780][ T31] Call Trace: [ 287.724155][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 287.804853][ T31] __schedule+0x1b33/0x51f0 [ 287.809551][ T31] ? schedule+0x163/0x360 [ 287.813931][ T31] ? __pfx___schedule+0x10/0x10 [ 287.818904][ T5899] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 287.842431][ T31] ? schedule+0x90/0x360 [ 287.856495][ T31] ? schedule+0x90/0x360 [ 287.861087][ T5947] usb 3-1: config 0 has no interface number 0 [ 287.872268][ T31] schedule+0x163/0x360 [ 287.890874][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 287.897847][ T5899] usb 2-1: device descriptor read/8, error -71 [ 287.908664][ T5947] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 287.921580][ T31] schedule_preempt_disabled+0x13/0x30 [ 287.956482][ T5947] usb 3-1: config 0 interface 1 has no altsetting 0 [ 287.966827][ T31] __mutex_lock+0x805/0x10c0 [ 287.971490][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 288.014486][ T31] ? bdev_release+0x17e/0x700 [ 288.024345][ T5947] usb 3-1: string descriptor 0 read error: -71 [ 288.035915][ T5899] usb usb2-port1: unable to enumerate USB device [ 288.064906][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 288.070466][ T5947] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 288.079800][ T31] ? __pfx_ima_file_free+0x10/0x10 [ 288.123700][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.135558][ T31] bdev_release+0x17e/0x700 [ 288.169805][ T31] blkdev_release+0x15/0x20 [ 288.182304][ T5947] usb 3-1: config 0 descriptor?? [ 288.185277][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 288.203727][ T31] __fput+0x3e9/0x9f0 [ 288.215264][ T31] task_work_run+0x251/0x310 [ 288.219996][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.220106][ T5947] usb 3-1: can't set config #0, error -71 [ 288.232064][ T31] ? __pfx_task_work_run+0x10/0x10 [ 288.240466][ T31] get_signal+0x15db/0x1730 [ 288.273895][ T31] ? __pfx_get_signal+0x10/0x10 [ 288.275502][ T5947] usb 3-1: USB disconnect, device number 24 [ 288.286401][ T31] arch_do_signal_or_restart+0x98/0x810 [ 288.292039][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 288.312678][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 288.321741][ T31] syscall_exit_to_user_mode+0xce/0x340 [ 288.335236][ T31] do_syscall_64+0x100/0x210 [ 288.339924][ T31] ? clear_bhb_loop+0x45/0xa0 [ 288.344639][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.362813][ T31] RIP: 0033:0x7f8e3658e169 [ 288.372883][ T31] RSP: 002b:00007f8e373d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.386411][ T31] RAX: 0000000000000000 RBX: 00007f8e367b6080 RCX: 00007f8e3658e169 [ 288.394533][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 288.424230][ T31] RBP: 00007f8e36610a68 R08: 0000000000000000 R09: 0000000000000000 [ 288.443181][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.459499][ T31] R13: 0000000000000001 R14: 00007f8e367b6080 R15: 00007ffe29825288 [ 288.480892][ T31] [ 288.491076][ T31] [ 288.491076][ T31] Showing all locks held in the system: [ 288.500936][ T31] 1 lock held by khungtaskd/31: [ 288.535443][ T31] #0: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 288.564480][ T31] 3 locks held by kworker/0:2/919: [ 288.605446][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 288.649261][ T31] #1: ffffc9000366fc60 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 288.690713][ T31] #2: ffffffff8ed43438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x454/0x830 [ 288.745473][ T31] 2 locks held by getty/5589: [ 288.755679][ T31] #0: ffff88803596a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 288.825450][ T31] #1: ffffc900036d62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 288.865402][ T31] 1 lock held by syz-executor/5826: [ 288.890033][ T31] 4 locks held by syz-executor/5829: [ 288.915552][ T31] #0: ffff888054448d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 288.941305][ T31] #1: ffff888054448078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60f/0x1260 [ 288.983909][ T31] #2: ffffffff90251468 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa6/0x240 [ 289.026860][ T31] #3: ffff888028ba7338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x71/0x690 [ 289.050126][ T31] 1 lock held by syz-executor/5843: [ 289.093021][ T31] 1 lock held by udevd/5884: [ 289.135224][ T31] #0: ffff888025e4b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf7/0xcd0 [ 289.165253][ T31] 1 lock held by udevd/5961: [ 289.169950][ T31] #0: ffff888025d47358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf7/0xcd0 [ 289.225249][ T31] 1 lock held by syz.3.111/6336: [ 289.235384][ T31] #0: ffff888025d47358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x17e/0x700 [ 289.292805][ T31] 1 lock held by syz.4.120/6391: [ 289.305740][ T31] #0: ffff888025e4b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x17e/0x700 [ 289.326390][ T31] 3 locks held by syz-executor/6603: [ 289.331712][ T31] #0: ffff888029fd4d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 289.346697][ T31] #1: ffff888029fd4078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60f/0x1260 [ 289.356708][ T31] #2: ffffffff90251468 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa6/0x240 [ 289.367067][ T31] 3 locks held by syz.5.417/7473: [ 289.372210][ T31] #0: ffff8880120e0d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 289.382847][ T31] #1: ffff8880120e0078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60f/0x1260 [ 289.393123][ T31] #2: ffffffff90251468 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa6/0x240 [ 289.404363][ T31] [ 289.406885][ T31] ============================================= [ 289.406885][ T31] [ 289.415559][ T31] NMI backtrace for cpu 1 [ 289.415580][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 289.415604][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 289.415617][ T31] Call Trace: [ 289.415626][ T31] [ 289.415635][ T31] dump_stack_lvl+0x241/0x360 [ 289.415670][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.415699][ T31] ? __pfx__printk+0x10/0x10 [ 289.415737][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 289.415773][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 289.415798][ T31] ? _printk+0xd5/0x120 [ 289.415824][ T31] ? __wake_up_klogd+0xcc/0x110 [ 289.415848][ T31] ? __pfx__printk+0x10/0x10 [ 289.415878][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 289.415911][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 289.415941][ T31] watchdog+0x1058/0x10a0 [ 289.415964][ T31] ? watchdog+0x1ea/0x10a0 [ 289.415993][ T31] ? __pfx_watchdog+0x10/0x10 [ 289.416018][ T31] kthread+0x7b7/0x940 [ 289.416040][ T31] ? __pfx_watchdog+0x10/0x10 [ 289.416064][ T31] ? __pfx_kthread+0x10/0x10 [ 289.416083][ T31] ? __pfx_kthread+0x10/0x10 [ 289.416102][ T31] ? __pfx_kthread+0x10/0x10 [ 289.416122][ T31] ? __pfx_kthread+0x10/0x10 [ 289.416138][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.416161][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 289.416176][ T31] ? __pfx_kthread+0x10/0x10 [ 289.416194][ T31] ret_from_fork+0x4b/0x80 [ 289.416216][ T31] ? __pfx_kthread+0x10/0x10 [ 289.416233][ T31] ret_from_fork_asm+0x1a/0x30 [ 289.416269][ T31] [ 289.416277][ T31] Sending NMI from CPU 1 to CPUs 0: [ 289.580752][ C0] NMI backtrace for cpu 0 [ 289.580771][ C0] CPU: 0 UID: 0 PID: 1149 Comm: kworker/u8:8 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 289.580793][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 289.580805][ C0] Workqueue: bat_events batadv_nc_worker [ 289.580837][ C0] RIP: 0010:rcu_is_watching+0x6/0xb0 [ 289.580855][ C0] Code: d0 d7 8f 03 eb cd 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 65 ff 05 00 e3 bc 11 e8 6b a1 7f 0a 89 c3 83 f8 08 73 7a [ 289.580870][ C0] RSP: 0018:ffffc90003b77aa8 EFLAGS: 00000202 [ 289.580884][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff8880279a3c00 [ 289.580896][ C0] RDX: ffff8880279a3c00 RSI: 0000000000000001 RDI: 0000000000000000 [ 289.580907][ C0] RBP: 0000000000000000 R08: ffffffff8bf1b94e R09: 0000000000000000 [ 289.580918][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805f710d80 [ 289.580929][ C0] R13: 000000000000030c R14: ffff888054500100 R15: dffffc0000000000 [ 289.580941][ C0] FS: 0000000000000000(0000) GS:ffff888124fcf000(0000) knlGS:0000000000000000 [ 289.580955][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.580967][ C0] CR2: 000055b222dd9028 CR3: 000000000eb38000 CR4: 00000000003526f0 [ 289.580982][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 289.580992][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 289.581002][ C0] Call Trace: [ 289.581009][ C0] [ 289.581015][ C0] batadv_nc_worker+0x207/0x610 [ 289.581040][ C0] ? batadv_nc_worker+0xcb/0x610 [ 289.581066][ C0] ? process_scheduled_works+0x9cb/0x18e0 [ 289.581096][ C0] process_scheduled_works+0xac3/0x18e0 [ 289.581136][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 289.581166][ C0] ? assign_work+0x367/0x3d0 [ 289.581191][ C0] worker_thread+0x870/0xd50 [ 289.581225][ C0] ? __kthread_parkme+0x1a8/0x200 [ 289.581252][ C0] ? __pfx_worker_thread+0x10/0x10 [ 289.581277][ C0] kthread+0x7b7/0x940 [ 289.581295][ C0] ? __pfx_worker_thread+0x10/0x10 [ 289.581321][ C0] ? __pfx_kthread+0x10/0x10 [ 289.581337][ C0] ? __pfx_kthread+0x10/0x10 [ 289.581354][ C0] ? __pfx_kthread+0x10/0x10 [ 289.581377][ C0] ? __pfx_kthread+0x10/0x10 [ 289.581394][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.581418][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 289.581434][ C0] ? __pfx_kthread+0x10/0x10 [ 289.581451][ C0] ret_from_fork+0x4b/0x80 [ 289.581466][ C0] ? __pfx_kthread+0x10/0x10 [ 289.581483][ C0] ret_from_fork_asm+0x1a/0x30 [ 289.581516][ C0] [ 289.843602][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 289.850517][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 289.862358][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 289.872463][ T31] Call Trace: [ 289.875752][ T31] [ 289.878693][ T31] dump_stack_lvl+0x241/0x360 [ 289.883423][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.888639][ T31] ? __pfx__printk+0x10/0x10 [ 289.893252][ T31] ? vscnprintf+0x5d/0x90 [ 289.897614][ T31] panic+0x349/0x880 [ 289.901524][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 289.906916][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 289.913171][ T31] ? __pfx_panic+0x10/0x10 [ 289.917601][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 289.923017][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 289.929206][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 289.935376][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 289.941550][ T31] watchdog+0x1097/0x10a0 [ 289.945895][ T31] ? watchdog+0x1ea/0x10a0 [ 289.950324][ T31] ? __pfx_watchdog+0x10/0x10 [ 289.955014][ T31] kthread+0x7b7/0x940 [ 289.959092][ T31] ? __pfx_watchdog+0x10/0x10 [ 289.963781][ T31] ? __pfx_kthread+0x10/0x10 [ 289.968381][ T31] ? __pfx_kthread+0x10/0x10 [ 289.972976][ T31] ? __pfx_kthread+0x10/0x10 [ 289.977587][ T31] ? __pfx_kthread+0x10/0x10 [ 289.982182][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.987396][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 289.992637][ T31] ? __pfx_kthread+0x10/0x10 [ 289.997243][ T31] ret_from_fork+0x4b/0x80 [ 290.001671][ T31] ? __pfx_kthread+0x10/0x10 [ 290.006271][ T31] ret_from_fork_asm+0x1a/0x30 [ 290.011066][ T31] [ 290.014441][ T31] Kernel Offset: disabled [ 290.018803][ T31] Rebooting in 86400 seconds..