last executing test programs: 15.851972594s ago: executing program 4 (id=2119): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) prlimit64(0x0, 0x8, &(0x7f00000003c0)={0x2, 0x2}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYRESOCT=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 'dh\x00', 0x25, 0x1ff, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0xc, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e22, 0x3, 0x9, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="449067578ed280c5b23964d4484fece516316a50fbe8e53ece36cb8145e5af72", 0x20}], 0x1}, 0x2008010) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, 0x0) fcntl$dupfd(r4, 0x0, r4) 14.203067455s ago: executing program 3 (id=2125): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x23) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x20) r1 = socket$igmp6(0xa, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x30, 0xffffffffffffffff, 0x0) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4) 14.071267582s ago: executing program 3 (id=2126): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="66823d", @ANYRESHEX=r0, @ANYBLOB="2c726f6f74119c2bad8928fa0ed1e06d6f64653d3030303030303030303030303030303030303430e2cd596ce6293030ebb32d798859", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000000080)={0x0, 0x3, 0x7, 0x800000}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x31, 0x5, "481e223dfe"}, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(r1, &(0x7f0000000100)='./file0\x00', 0x89901) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000002100), 0x10001, &(0x7f0000000540)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@euid_lt={'euid<', r6}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@hash}, {@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@dont_measure}, {@obj_user={'obj_user', 0x3d, '^-'}}, {@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x36, 0x63, 0x32, 0x65, 0x64, 0x37, 0x33], 0x2d, [0x38, 0x36, 0x37, 0x37], 0x2d, [0x39, 0x38, 0x33, 0x39], 0x2d, [0x34, 0x33, 0x36, 0x36], 0x2d, [0x37, 0x65, 0x35, 0x38, 0x36, 0x35, 0x0, 0x64]}}}]}}) r7 = syz_usb_connect$cdc_ncm(0x4, 0x7b, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x0, 0x40, 0x32, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "77a9551ec2"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5, 0x9, 0x9}, {0x6, 0x24, 0x1a, 0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x993b, 0x7, 0x4d5}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x8, 0x50}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0x46, 0x3}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0x2, 0x5, 0x6, 0xff, 0x6}, 0xc, &(0x7f0000000440)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0xc, 0x40}]}, 0x1, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x801}}]}) syz_usb_control_io$cdc_ncm(r7, &(0x7f00000007c0)={0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000261000000610647634f85be88d26b5f003d604a2415671406b69f4e854ad64e4a480be98f74997ca07a8dbc0ad5e3a871354aa57022707b7e58d9c4efa3097a7578508f4212e8a7734adef2d2c1855eec97c07e4e427a74bb205248febf3017d02f8950530e"], &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000800)={0x40, 0x10, 0x65, "96978d3d1476c647f42f596ce757e997cba6c0f982deee61c82400c353a29b739b2e3d69686276e6ac95e9c149030864b68000df9fb6ba95a281d6f910dcd012796c60fc760874ac7bea20d9188af3a07eafec76cce3532041fc02325586fd32762bdc0ebd"}, &(0x7f0000000880)={0x0, 0xa, 0x1}, &(0x7f00000008c0)={0x0, 0x8, 0x1}, &(0x7f0000000900)={0x20, 0x80, 0x1c, {0xc000, 0x101, 0x7fffffff, 0x3f80, 0x8001, 0xa0, 0x8010, 0x9, 0x0, 0xb, 0x0, 0x200}}, &(0x7f0000000940)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000980)={0x20, 0x83, 0x2}, &(0x7f00000009c0)={0x20, 0x87, 0x2, 0x41}, &(0x7f0000000a00)={0x20, 0x89, 0x2}}) 11.486463108s ago: executing program 4 (id=2133): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x64c842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x30000000, 0x400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0xfffffffd, 0x0, 0xb49, 0x5, 0x4, 0x5, 0xa}, 0x0) epoll_create(0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="d4e7db1d52d52f023458b201056f6c20ef323f7cb87e94c96d4115eda7ae5939707ede9fc0c28be674f69794cbcb40bd541a97595ebc57bac9a886c3d7d560e48a9fc52bb566abbef7baa08cb7cce2650589657e2c", 0x55, 0x8940, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000c0000000001a0000f7000000000000009ddd0ef2a3a1", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x48) accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x880) sendfile(0xffffffffffffffff, r2, &(0x7f0000002080)=0x3a, 0x23b) 10.618838714s ago: executing program 0 (id=2135): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x6, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x9, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xd, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x9, 0x80]}) socket$kcm(0x22, 0x2, 0x21) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r8 = syz_open_pts(r7, 0x0) ppoll(&(0x7f0000000100)=[{r2, 0x9000}], 0x3d, 0x0, 0x0, 0x0) ioctl$TCFLSH(r8, 0x540b, 0x2) bind$netlink(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="66641f", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 8.74852329s ago: executing program 1 (id=2137): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @remote, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="19020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000800000000000000040000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695ec1891223a53600d5121b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a0100000000000000e28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c251112e2a59ea0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe95bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6c597eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e64103602000000db47d7990d5a007faccb2f86660079f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab92739be0bdf5b76f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d8418351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa48918000000000000002900000037"], 0x590}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000004c0)="13cf2ed58e27d4", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)="c127afed81fd", 0x6}], 0x1}}], 0x3, 0x28048005) 8.673590898s ago: executing program 0 (id=2138): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x4c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0xd1a}, @broadcast, @device_a, @random="5187bed2e296", {0x7, 0xf95}, @value=@ver_80211n={0x0, 0x6, 0x2, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x68, @val={0x10, 0x1, 0xe6}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x80000) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r5, 0xc00c4809, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x7}) 8.453215332s ago: executing program 3 (id=2139): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 8.423741492s ago: executing program 1 (id=2140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000010a03000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000081}, 0x20040) 8.341595984s ago: executing program 4 (id=2141): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x440002, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x4}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getresuid(0x0, &(0x7f0000000300), 0x0) quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0x0, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000000)={0x1, 0x1}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000000000008500000005000000b70000000000000085000000c100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904"], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r7, @ANYRES64=r2, @ANYRESDEC=r7, @ANYRESHEX=r2, @ANYRESDEC=r7, @ANYRES64=r7], 0x7c}}, 0x4000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x102) ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f00000000c0)={{r8}, 0x0, 0x0, 0x100000}) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESHEX], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000900030073797a32"], 0x80}}, 0x0) socket$inet6(0xa, 0x5, 0x4) 8.211691818s ago: executing program 1 (id=2142): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x110, 0x2, 0x3}}], 0x30}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffde1, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x905, 0x0, 0x0, {0x0, 0x0, 0x4c, 0x0, 0x20081, 0x300}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888}, 0x0) 7.175019417s ago: executing program 1 (id=2144): socket$netlink(0x10, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0x1d8, 0x0, 0xb0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'bridge_slave_0\x00'}, 0x0, 0x100, 0x128, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'team_slave_1\x00', 0x32, 0x1}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="ea0030b000360fc75c090f07ea77000d01ba420066b872eaa87b66efb86c008ed80f005000baf80c66b86c4a368a66efbafc0cb000ee660f3881950400650f30", 0x40}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r7, 0xa, 0x13) fcntl$setlease(r7, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x60001600, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = getpid() fcntl$setownex(r8, 0xf, &(0x7f0000000100)={0x2, r9}) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r7, 0x8, r10) userfaultfd(0x800) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 6.372811375s ago: executing program 0 (id=2145): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xa063002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x81) getdents(r4, 0x0, 0x0) getgroups(0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000140)={0x18, 0x0, 0x200, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0xb, 0x1ff, {0x1, 0x40, 0x0, {0x2, 0x3d, 0x1, 0x8, 0x9, 0x5c11, 0x6, 0x6d400, 0x4, 0x1000, 0x6, r2, r3}}}, &(0x7f0000000580)={0x90, 0x0, 0x200, {0x2, 0x1, 0xfffffffffffffff3, 0xd99, 0x9, 0x4, {0x6, 0x2, 0x0, 0x4066, 0x5, 0x9, 0x7, 0x10, 0x7fff, 0x2000, 0x7, r2, r3, 0x5bc, 0x9}}}, &(0x7f0000000640)={0x30, 0xfffffffffffffff5, 0xffff, [{0x5, 0xf919, 0x1, 0x2, '\x00'}]}, &(0x7f00000008c0)={0x158, 0x0, 0x7, [{{0x1, 0x0, 0x7, 0x2d6, 0x4, 0x5, {0x2, 0x7de, 0x11bb, 0xe86d, 0x7fffffff, 0x6, 0x7, 0x0, 0xdc9, 0xa000, 0x9, r2, 0x0, 0x101, 0x8}}, {0x2, 0x8, 0x2, 0x9, '{!'}}, {{0x1, 0x0, 0x40, 0x5, 0xd5, 0x8, {0x0, 0x1, 0x7fffffff, 0x4, 0x6, 0x3, 0x800, 0xc3, 0x4, 0xa000, 0x5, r2, r3, 0x240000, 0x81}}, {0x6, 0x1, 0xa, 0x4, '/dev/fuse\x00'}}]}, &(0x7f0000000740)={0xa0, 0xfffffffffffffffe, 0x7, {{0x1, 0x2, 0x8, 0x8, 0xfffffff4, 0xd4, {0x4, 0x100, 0x7fffffff, 0x5, 0x6, 0x7, 0x1000, 0xfffffffc, 0x59c1, 0x4000, 0xe727, r2, r3, 0x7, 0x7}}, {0x0, 0x2}}}, &(0x7f0000000ac0)={0x20, 0x0, 0x864a, {0x1, 0x0, 0x2, 0x2}}, &(0x7f0000000e00)={0x130, 0x0, 0x8, {0x9a, 0x8, 0x0, '\x00', {0x7ff, 0x1, 0x1, 0xec, r2, r3, 0x8000, '\x00', 0x1000, 0x7ff, 0x3, 0x9, {0x81, 0x5}, {0x10001, 0x3}, {0x7, 0x93b}, {0x480, 0x83}, 0x9, 0xffff, 0x2, 0x200000}}}}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') close(r5) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r6, 0x10, 0x0) socket$igmp(0x2, 0x3, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000}, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f700", 0x2e}, 0x48, 0xfffffffffffffffd) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc08c5332, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) sendmsg$unix(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000050}, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.765450597s ago: executing program 2 (id=2146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRESHEX=r4, @ANYRES64=r2], 0x64}}, 0x4000) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x40003) ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x44044) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) socket$alg(0x26, 0x5, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e27, 0xb, @mcast1, 0x800a}, 0x1c) syz_open_procfs(0x0, &(0x7f00000002c0)='net/unix\x00') 4.859912157s ago: executing program 3 (id=2147): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e", 0x6, 0xfffffffffffffffb) keyctl$update(0x2, r1, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000300)=[{r2, 0x205}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f0000000000), 0x4) r6 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x7a}, &(0x7f00000000c0)=0x8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000000000)=0x6, 0x4) connect$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r9, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000068c0)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="5baf", 0x2}, {0x0}], 0x2, 0x0, 0x0, 0x1}], 0x1, 0x48000) pipe(&(0x7f0000000080)) 4.354157189s ago: executing program 4 (id=2148): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x300, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x300, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket$inet(0xa, 0x801, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000180), 0x4) close(r4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xb, 0xd}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x7}}}}]}, 0x44}}, 0xc000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x18000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x2) ioctl$EVIOCGABS0(r7, 0x80184540, &(0x7f0000000300)=""/46) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0xe, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xc9}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r3, {0xd, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) 4.000147702s ago: executing program 1 (id=2149): r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x1, 0x3e, &(0x7f0000000640)="81fee571", 0x4) bind$inet6(r1, &(0x7f0000000800)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0xa6a82) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0xe) ioctl$TIOCSLCKTRMIOS(r6, 0x5457, 0x0) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r5, 0x1, {0x0, 0xff, 0x3}, 0xfd}, 0x18) sendmsg$sock(r0, &(0x7f0000000440)={&(0x7f0000000040)=@can={0x1d, r5, 0xc7}, 0x80, &(0x7f0000000740)=[{0x0}, {&(0x7f0000001ac0)="bb", 0x1}], 0x2}, 0x8000) 3.88301244s ago: executing program 3 (id=2150): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) socket$inet6_sctp(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x20000000}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsn(0x0, 0x3f0b, 0x117001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x8000}, &(0x7f0000000340), &(0x7f0000000300)) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x4000000}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000002c0)={0x10000005}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r8 = gettid() tkill(r8, 0x12) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x20, 0x5, 0x7, 0x1, 0x2, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x2, 0xfa, 0x3}}}}}]}}]}}, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3.548389877s ago: executing program 1 (id=2151): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x18) syz_open_dev$video4linux(0x0, 0x7fffffff, 0x100) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000140)='veth1\x00') getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) getxattr(0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b000004"], 0x18}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) r7 = socket$unix(0x1, 0x5, 0x0) bind$unix(r7, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='nilfs2_collection_stage_transition\x00', r5, 0x0, 0x8b}, 0x18) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e", 0x24) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.378192391s ago: executing program 2 (id=2152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000010a03000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000081}, 0x20040) 3.031580598s ago: executing program 2 (id=2153): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x5030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2c}}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x63, 0x66}}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x2a, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x31) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="002205000000aa1aefa9f4"], 0x0}, 0x0) 2.861837532s ago: executing program 0 (id=2154): openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, 0x0, 0x0) 2.595442883s ago: executing program 0 (id=2155): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x4c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0xd1a}, @broadcast, @device_a, @random="5187bed2e296", {0x7, 0xf95}, @value=@ver_80211n={0x0, 0x6, 0x2, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x68, @val={0x10, 0x1, 0xe6}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x80000) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r5, 0xc00c4809, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x7}) 1.839116451s ago: executing program 4 (id=2156): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet(0x2b, 0x801, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x400) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x800, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) 1.052677328s ago: executing program 2 (id=2157): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x280400, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x280400, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000080)={0x8, r1}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x6, 0x80}) read(r0, &(0x7f0000000180)=""/28, 0x1c) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x3e8, 0x0, 0x108, 0x1f0, 0x300, 0x300, 0x300, 0x4, &(0x7f00000001c0), {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz1\x00', {0x800}}}}, {{@arp={@local, @multicast1, 0xffffffff, 0xff000000, 0x6, 0xf, {@empty, {[0xff, 0x0, 0x1eefb0dea4a27810, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x9, 0x6, 0x2, 0x1, 0x4ab5, 0x500, 'dvmrp1\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x4d}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xb07, 0xffff, 0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @rand_addr=0x64010101, 0xb}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r2, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, r2, 0x0, 0x1, 0x0, 0xb, 0x6}) socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f00000006c0)=""/235, &(0x7f00000007c0)=0xeb) write$sndseq(r2, &(0x7f0000000800)=[{0x3, 0xe, 0x78, 0xe, @tick=0x4, {0xaa}, {0x8, 0x3}, @raw32={[0x0, 0x80000001, 0x8]}}, {0x4, 0xf, 0x85, 0x7, @tick=0x8, {0x0, 0x7}, {0xe, 0x6d}, @note={0x8, 0x3, 0xf7, 0x8, 0x9}}, {0x2, 0x6, 0x53, 0x8, @tick=0x2451, {0x1, 0x9}, {0xa8, 0x5}, @result={0x0, 0x10001}}], 0x54) pipe2(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000008c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000008c0)={'batadv_slave_1\x00', 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000900)={0x18, r1}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f00000009c0)=@get={0x1, &(0x7f0000000940)=""/119, 0x400}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000a00)={0xf32, 0x3, 0x1, 'queue0\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000a00)={0xf32, 0x3, 0x1, 'queue0\x00'}) close(r2) (async) close(r2) syz_emit_ethernet(0x1389, &(0x7f0000000ac0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x3, 0x0, 0x4}}, {@mpls_mc={0x8848, {[{0xffff0, 0x0, 0x1}, {0x1ff}, {0xff000}], @ipv6=@udp={0x9, 0x6, 'hK3', 0x133f, 0x11, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@dstopts={0x3c, 0x1e, '\x00', [@jumbo={0xc2, 0x4, 0x71e7}, @generic={0x9, 0xd4, "3becdaa34d094308c7aa409e68056ac477ef96dbe49a216a1d039b5fed9e0a11e4adb20f95281b754678cb52e228029c45d0ce8f7a12b6e337e230347e43963da7a13e462e97ce2979f48a6dd008e341d0a34c5866788883394221a3f02f1243fb393cc0fc5b4bb4cf572b2ca657e1742f01444ea7615578d1f111a22b4ee55e48e3b1fab8ab5a823dd479a3575645bc538e9a5dd1f3f723f21911fa80b4364dcfe0c06c82dd9f68059307ca1cdfba7831ddb3d354ee9b0329290fd264b048fc08d826001e229137570b65a0bc3018edcfefb902"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @pad1, @pad1]}, @fragment={0x2e, 0x0, 0xc0, 0x0, 0x0, 0x6, 0x66}, @dstopts={0x1, 0x0, '\x00', [@ra={0x5, 0x2, 0xfffc}]}, @routing={0x2e, 0xe, 0x1, 0x23, 0x0, [@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x27}, @remote, @private1, @local, @dev={0xfe, 0x80, '\x00', 0x30}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @srh={0x3a, 0xa, 0x4, 0x5, 0x40, 0x0, 0x2, [@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', @private1, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @multicast1}]}, @dstopts={0x5e, 0x224, '\x00', [@enc_lim, @generic={0x4, 0x97, "cf62d3b320606ca8c7070c9f4ebba9ae499d0189d22ccb1a9b2ce8e2784626d33a0fc6b726d48deae59143da20b698e9778d3254aea6bcb7342e132ba30b8ebc07678590c1e2a98110398df9bf8256cf429b04169876ee891d1bbbf349c888e19cd7f1dfd902136936d48611de8887d9c2d13ea3a91ff6d5864a17b682cb4ecfaba2cb0cc16d33ebfa7ceeab76a03b2975a93a99c1461e"}, @generic={0x7, 0x1000, "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"}, @ra={0x5, 0x2, 0x8}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @calipso={0x7, 0x58, {0x1, 0x14, 0x2, 0x4, [0x8, 0x8, 0x0, 0x400, 0xfffffffffffff800, 0xffffffff, 0x4, 0xfffffffffffffbbc, 0x0, 0xad]}}, @jumbo={0xc2, 0x4, 0x81}]}], {0x4e22, 0x4e24, 0x27, 0x0, @gue={{0x1, 0x1, 0x3, 0x98, 0x100, @void}, "aaf2dc8a7610c56261c12944949a72ce5af177d7dddc99da020ea3"}}}}}}}}, &(0x7f0000001e80)={0x1, 0x1, [0x477, 0x7b8, 0x1, 0x6ac]}) (async) syz_emit_ethernet(0x1389, &(0x7f0000000ac0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x3, 0x0, 0x4}}, {@mpls_mc={0x8848, {[{0xffff0, 0x0, 0x1}, {0x1ff}, {0xff000}], @ipv6=@udp={0x9, 0x6, 'hK3', 0x133f, 0x11, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@dstopts={0x3c, 0x1e, '\x00', [@jumbo={0xc2, 0x4, 0x71e7}, @generic={0x9, 0xd4, "3becdaa34d094308c7aa409e68056ac477ef96dbe49a216a1d039b5fed9e0a11e4adb20f95281b754678cb52e228029c45d0ce8f7a12b6e337e230347e43963da7a13e462e97ce2979f48a6dd008e341d0a34c5866788883394221a3f02f1243fb393cc0fc5b4bb4cf572b2ca657e1742f01444ea7615578d1f111a22b4ee55e48e3b1fab8ab5a823dd479a3575645bc538e9a5dd1f3f723f21911fa80b4364dcfe0c06c82dd9f68059307ca1cdfba7831ddb3d354ee9b0329290fd264b048fc08d826001e229137570b65a0bc3018edcfefb902"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @pad1, @pad1]}, @fragment={0x2e, 0x0, 0xc0, 0x0, 0x0, 0x6, 0x66}, @dstopts={0x1, 0x0, '\x00', [@ra={0x5, 0x2, 0xfffc}]}, @routing={0x2e, 0xe, 0x1, 0x23, 0x0, [@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x27}, @remote, @private1, @local, @dev={0xfe, 0x80, '\x00', 0x30}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @srh={0x3a, 0xa, 0x4, 0x5, 0x40, 0x0, 0x2, [@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', @private1, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @multicast1}]}, @dstopts={0x5e, 0x224, '\x00', [@enc_lim, @generic={0x4, 0x97, "cf62d3b320606ca8c7070c9f4ebba9ae499d0189d22ccb1a9b2ce8e2784626d33a0fc6b726d48deae59143da20b698e9778d3254aea6bcb7342e132ba30b8ebc07678590c1e2a98110398df9bf8256cf429b04169876ee891d1bbbf349c888e19cd7f1dfd902136936d48611de8887d9c2d13ea3a91ff6d5864a17b682cb4ecfaba2cb0cc16d33ebfa7ceeab76a03b2975a93a99c1461e"}, @generic={0x7, 0x1000, "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"}, @ra={0x5, 0x2, 0x8}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @calipso={0x7, 0x58, {0x1, 0x14, 0x2, 0x4, [0x8, 0x8, 0x0, 0x400, 0xfffffffffffff800, 0xffffffff, 0x4, 0xfffffffffffffbbc, 0x0, 0xad]}}, @jumbo={0xc2, 0x4, 0x81}]}], {0x4e22, 0x4e24, 0x27, 0x0, @gue={{0x1, 0x1, 0x3, 0x98, 0x100, @void}, "aaf2dc8a7610c56261c12944949a72ce5af177d7dddc99da020ea3"}}}}}}}}, &(0x7f0000001e80)={0x1, 0x1, [0x477, 0x7b8, 0x1, 0x6ac]}) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000001ec0)=0xfffffffb, 0x4) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001f00), 0x100, 0x0) (async) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001f00), 0x100, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000001f40)={{0x3, 0x3, 0x4d03, 0x3, 0x7}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000001f40)={{0x3, 0x3, 0x4d03, 0x3, 0x7}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000001f80)={0x7f, r2, 0x1, {0xe, 0x2}, 0xff}, 0x1) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000001f80)={0x7f, r2, 0x1, {0xe, 0x2}, 0xff}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000002500)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002000)={0x4c0, 0x12, 0x100, 0x70bd25, 0x25dfdbfd, {0x1a, 0x8, 0x5, 0x6a, {0x4e23, 0x4e21, [0x0, 0x100, 0x80000000, 0x16000000], [0x5, 0x1, 0x772, 0x8], r5, [0x5, 0x569]}, 0x4, 0x7fffffff}, [@INET_DIAG_REQ_BYTECODE={0xac, 0x1, "78e71fa1f10dd01aad9f75b1ab3fb2624228409c329825ed91f1df758ee4314baefeea6cec26ceea4cf25f7361ccaae361aebc361867582bff0fa9197ab17c1929c7f16ada5e8ed4a6e315b6ceb7cc46d56cb66b1d0ae85cc93d38d90dc250c5d736a7283a010c73484891c776ee1ae40c4d29682001c76bf6c79d195fa4471642075d62b5353b378f97b8ca158540234abd502980988cdc98c88508d50fd50739bb6b0748f3b996"}, @INET_DIAG_REQ_BYTECODE={0x59, 0x1, "5b130b47aa135c38e22a0d8be6b237bffd57d9a2646ccee7dc4d63de4400be46d241ef254a5a2d370dff3797a6a85058713f369fc4e900a58dd04e3b84d28a39decc0f4bfba33ccbff443a9417fd3ce837d15afaf2"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "a410a1b8d1f78f837af6c2975c264327bb13fb65dc867a972c68835a738a078260961b0be07d49ed521c2e8bec7a95f498d44863d0be4e98782f72e8ed3e3fd701eec03d97ac0779da8a013c6f262cc51f779b6c284d5ee4bf2fe07a780ba363b8affc9880a3392c5c02b201115854dec1"}, @INET_DIAG_REQ_BYTECODE={0x12, 0x1, "e5a8b37a9e4cded8593dd39394d0"}, @INET_DIAG_REQ_BYTECODE={0x8f, 0x1, "63979423ee3ee818330207dcf2af190620b0f2df3a0dbc2ec3a6569097829ace3aa82793d1fc4c541b86b0b4d5fa7f54b0867455721042d673470a0ee1e71ea75b38a1820ed2e775712f7e330ebcf6b542ff0045d99bf876ec162fc14fcd1f4a7d2d58a8b43e68e524ede70a123a699c58b913752c3a8cd4ca9236d0d4625229be3b9e39aa9fc33d221d91"}, @INET_DIAG_REQ_BYTECODE={0xd6, 0x1, "30a37aa67a757416f1f00b74cf313c01f73e895a6f5f219891f7bd175e9cb7b1330a65ba154a466f6fc8577fda3e00b38390875e01e2e3db334025ef987c7c0f0d89d3cc3bd022da1e8a8f86255b6279a0659c94432d3de0c9cb523717c9eed8d0fba4463e354ee0b478ccbda2dfcbe2f778dde803574d4510e921dd03feefe9f16c3b0704f4b7cfff49dc48a91a3611090dbb1c72e7caf1146b2dc63eabd4cf471b6fdc62c4c243366abc01ff62a05677f16a1d0f29a17bbb5e4c163f4ad3dc976f3019c79cfdfab153c8f15fe6764dcedb"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "c21e697cbbd5673e36c4082d2485e13a7f00f252bc4ec5d43be4210012ecc393c8e9107339cf20119b880218efa08283f45e8049bc5727c0df30da114d23c5cd883027ab38b832e28ec88dc5df41ea5b775d06091301d882b07744fad113862fa6402251714549668e91012b6fa39bb5d2c2c3a0e55b13d83550b18fe03736fe619822bcef"}, @INET_DIAG_REQ_BYTECODE={0xec, 0x1, "fd2b5e381e5e13b8a5544554da5365f03d1b86991f9e021044ec14c7b8203650dfd6c494e5f11862fc67043b5e0f1e315a7e9f60df1c5e2d9c788a94af1cac7174cb6e804a944d988ac8f1ace5279bfa31c977cd57ae455065b47a01ec35504ba8f0a2be7273d070e02acbad6a70ba5d6e02dfcfff028e45780a6607273fae15a7ca8d6673db52b5eb1689100f65c996057a78a167eb34d6ecd111fe4b4891563142e9600b9ed7cbf791e02b58b31d97d4006411b202286d3d3f719a26c1240a7509c310dbfc4980f4cb8335603a377dcb2dc465d742826f4172af5a919625a37f86a5dd19667715"}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x100}, 0x80) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000002600)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x4004810) fcntl$lock(r3, 0x24, &(0x7f0000002640)={0x1, 0x3, 0x8, 0x79}) (async) fcntl$lock(r3, 0x24, &(0x7f0000002640)={0x1, 0x3, 0x8, 0x79}) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002680), 0x80, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000026c0)={0x0, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000002700)={0x9, 0x2, {0x0, 0x1, 0x100, 0x2, 0x1}, 0x10001}) 879.955665ms ago: executing program 4 (id=2158): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x440002, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x4}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getresuid(0x0, &(0x7f0000000300), 0x0) quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0x0, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000000)={0x1, 0x1}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB="18060000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000000000008500000005000000b70000000000000085000000c100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904"], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r7, @ANYRES64=r2, @ANYRESDEC=r7, @ANYRESHEX=r2, @ANYRESDEC=r7, @ANYRES64=r7], 0x7c}}, 0x4000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x102) ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f00000000c0)={{r8}, 0x0, 0x0, 0x100000}) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESHEX], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000900030073797a32"], 0x80}}, 0x0) socket$inet6(0xa, 0x5, 0x4) 523.138748ms ago: executing program 2 (id=2159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0a0009000180c2000000fdff08000b"], 0x30}}, 0x0) (fail_nth: 17) 1.110453ms ago: executing program 0 (id=2160): syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f0000000240)="b9") r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) (fail_nth: 37) 672.557µs ago: executing program 2 (id=2161): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x64e10, 0x60c8153c5922bed5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x1}]}}}]}, 0x44}, 0x1, 0x4000000, 0x0, 0x24044040}, 0x2) 0s ago: executing program 3 (id=2162): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="050000000500000003f83275dd28b01380a100000084e4ffffff000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=0x0], 0x50) fsopen(&(0x7f00000003c0)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000fc0)='Rmt\nb\xf6\xa7\xef\x12\x87\xf6d@\x10T\a\xc8$\xbc\xfci\x02\xc8\x98\xc9\xc4\xb8\xe7w\xa6!\x96\x14\n\xf6x\x83\x1b\xc2\xfeq\xf2\n=Qm8\x1a\xc5\x0f\xf8\xf3\x8d6\xfd\xb7\x1cN?\x0e\xd5\xb3\xed\xef\xe2G+\xb7\xa8\xa9\x1f\xa20\x86K\xff\x89\x19uq7\x85TV[\xb0 \xad1E\x13\xf9\xa9\x11,j\xee\xe20J\xab\xdct\xb4\xac\xdb\xaa\xb1\xd1T\x8f\xcbS\xd2\xea\xf9\x85j\x80j\x8fo\xd3\xf2\xd2\xa2\xaaR\xa1Z\x00\xfc\x1f\x9c\xdf\x9bG\xbdc\'H\xf5\xfb\xf1*\xc5\xc0\x8f\x01p\xc5\x14\x1f\x06\xfcmU\n\xeeN\x01\xec\xb2\x04\xdd/\xfc\v\xde\x91\xf0\x86^\xaa\xd5\x18\xf0h\xb8\xcf\xe5\x17\x00\xa2\x8c\x01\x83\xcf\xec\xd2\rz\xfb\xa6CE\n6\x86\x0e}X[*\xba\x8c\xef#\x00\x00\x00\x00\x00\x00\x00\x00\xadh\x8c\t\xbe\x01\x83N\x03\xef\xc2_\x80\xdfy(<\\4\x01p\xa6\x9d\x96\xe0\x80\xe5,yh\xd3\x02\x1e.p\x1d\x05\x8c\xdfA|\xc7\xc4*\xd0\xcaf\xf0O\xf0\xa5\x0f\x03M\xda\xe6\vv\xead\xcb\x0fz\x16\x95/\xe3\x99\xeaM\xa9\tp=\x1d\x0e\xbd\xa2\xfeg\xc8\xdf\x02\x19\x87\x0e7I\x10\x86\x12\xc9\xbfA\xfa\x9dI\xaaW\xcb\xfd\xaf~Q\xf4\x94\xae\xbfY\x1b\x91\\\x90\x95\xdchP\xfc\xac\a=!', &(0x7f0000001140)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4%\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xaa\xb9\x12\xb6\x93\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc|\xcb%bW\xd3\xc6S\xe0w\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xee\xc4O\x00\x00\x00\x00\x00`\xa76\xb64\x10\xcf@?\xcf\x00\x00\x04\xe7U\xf3h\x81\x14l7u\x95\x9bt\\\x0f\xef;\x03\xa4C\xbc(V%\xad\x91\x8c\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xa9)\xb1\t\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef\x06\x84\xda\xd6}&\ne<\x13\x98\xdc\x90D\xca\xcc\xd3IJW\xd7#\xbe\x03#\xa5\xab\xd4s\xc3c\n\xf4C\xa1\xcb\x9f\xae\xc4(\xa2ES\x04+\x13\xd5\x9dos\xb0Ed\x95m7\xab~\aO\xac\v\x97+>\x98!-\xb6\xa96.9\x8f%\x91Y', 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000040), &(0x7f0000000000), 0x800, r1}, 0x38) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x309802, 0x0) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x31, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401}) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000d80)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYBLOB="dbdfd7c9c1cd729a212ff62ee2fc41acde2819d6372e019c65e076e15329b81802b8e59a2b59ee84379dbef77e9069227dcfb092ef7cded6574c734d88cea285380e86dff10d274ee1d15a496c8abe351132170a02978bb118f7fbdcb1d42bf856901d607dff1507d7a3f26498ef9292d1aaaaed096a44c7334e77632df83c702e84fa74990afc41ba33b91805b0a8f63b7be6d221196865961b969dc77ca6154ece0e951b4dd380b948bbe96c258be95942", @ANYRES16=r5], 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r2, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000980)=[@text16={0x10, &(0x7f0000000140)="0f01c30fd858ca0f23120f01d5b801000f00d09066b8010000000f01c126640fd208660f60a69e600f20e06635000004000f22e0", 0x34}], 0x1, 0x2, &(0x7f00000001c0)=[@cstype0={0x4, 0x6}, @dstype3], 0x2) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r1}, 0x38) kernel console output (not intermixed with test programs): ][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.305040][T20199] FAULT_INJECTION: forcing a failure. [ 677.305040][T20199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.308153][ T24] usb 4-1: Product: syz [ 677.322653][ T24] usb 4-1: Manufacturer: syz [ 677.329783][ T24] usb 4-1: SerialNumber: syz [ 677.335344][T20152] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 677.349306][ T24] usb 4-1: config 0 descriptor?? [ 677.362103][T20164] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 677.383360][T20199] CPU: 0 UID: 0 PID: 20199 Comm: syz.2.1782 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 677.383389][T20199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 677.383403][T20199] Call Trace: [ 677.383412][T20199] [ 677.383422][T20199] dump_stack_lvl+0x189/0x250 [ 677.383461][T20199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 677.383491][T20199] ? __pfx__printk+0x10/0x10 [ 677.383525][T20199] should_fail_ex+0x414/0x560 [ 677.383564][T20199] _copy_to_user+0x31/0xb0 [ 677.383594][T20199] simple_read_from_buffer+0xe1/0x170 [ 677.383625][T20199] proc_fail_nth_read+0x1df/0x250 [ 677.383657][T20199] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 677.383695][T20199] ? rw_verify_area+0x258/0x650 [ 677.383717][T20199] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 677.383747][T20199] vfs_read+0x1fd/0x980 [ 677.383775][T20199] ? __pfx___mutex_lock+0x10/0x10 [ 677.383802][T20199] ? __pfx_vfs_read+0x10/0x10 [ 677.383825][T20199] ? __fget_files+0x2a/0x420 [ 677.383856][T20199] ? __fget_files+0x3a0/0x420 [ 677.383881][T20199] ? __fget_files+0x2a/0x420 [ 677.383916][T20199] ksys_read+0x145/0x250 [ 677.383938][T20199] ? __fget_files+0x2a/0x420 [ 677.383964][T20199] ? __pfx_ksys_read+0x10/0x10 [ 677.383991][T20199] ? do_syscall_64+0xba/0x210 [ 677.384020][T20199] do_syscall_64+0xf6/0x210 [ 677.384045][T20199] ? clear_bhb_loop+0x45/0xa0 [ 677.384070][T20199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.384091][T20199] RIP: 0033:0x7f1cc4b8d37c [ 677.384109][T20199] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 677.384127][T20199] RSP: 002b:00007f1cc598b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 677.384149][T20199] RAX: ffffffffffffffda RBX: 00007f1cc4db5fa0 RCX: 00007f1cc4b8d37c [ 677.384164][T20199] RDX: 000000000000000f RSI: 00007f1cc598b0a0 RDI: 0000000000000004 [ 677.384178][T20199] RBP: 00007f1cc598b090 R08: 0000000000000000 R09: 0000000000000000 [ 677.384191][T20199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.384203][T20199] R13: 0000000000000000 R14: 00007f1cc4db5fa0 R15: 00007f1cc4edfa28 [ 677.384233][T20199] [ 677.425762][T20152] Cannot create hsr debugfs directory [ 677.632606][T20164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.649263][T20164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.677983][T19267] usb 1-1: USB disconnect, device number 111 [ 677.879214][T20172] usb usb8: usbfs: process 20172 (syz.3.1779) did not claim interface 0 before use [ 678.042375][T19267] usb 4-1: USB disconnect, device number 93 [ 678.794170][T20257] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 678.843909][T20257] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 678.853141][T20257] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 678.912024][T20261] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 679.485842][T11050] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 679.702183][T11050] usb 4-1: config 0 has no interfaces? [ 679.738269][T20280] netlink: 'syz.1.1790': attribute type 10 has an invalid length. [ 679.757644][T20280] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.810112][T20280] bond0: (slave team0): Enslaving as an active interface with an up link [ 679.890132][T11050] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 679.948831][T11050] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.965311][T11050] usb 4-1: Product: syz [ 679.970030][T11050] usb 4-1: Manufacturer: syz [ 679.980213][T11050] usb 4-1: SerialNumber: syz [ 680.080808][T11050] usb 4-1: config 0 descriptor?? [ 680.116674][T19267] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 680.297615][ T5875] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 680.403806][T19267] usb 2-1: config 0 has no interfaces? [ 680.465050][T19267] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 680.474303][T19267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.477108][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 680.482625][T19267] usb 2-1: Product: syz [ 680.491892][T19267] usb 2-1: Manufacturer: syz [ 680.496699][T19267] usb 2-1: SerialNumber: syz [ 680.529719][ T5875] usb 3-1: unable to get BOS descriptor or descriptor too short [ 680.540955][ T5875] usb 3-1: config 1 interface 0 has no altsetting 0 [ 680.554770][T19267] usb 2-1: config 0 descriptor?? [ 680.555183][ T5875] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 680.588578][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.636422][ T5875] usb 3-1: Product: syz [ 680.656475][ T5875] usb 3-1: Manufacturer: syz [ 680.671613][ T5875] usb 3-1: SerialNumber: syz [ 680.982841][T20288] IPVS: set_ctl: invalid protocol: 12 172.30.1.3:20001 [ 682.287859][T20305] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 682.906451][T19267] usb 2-1: USB disconnect, device number 96 [ 682.913788][ T24] usb 4-1: USB disconnect, device number 94 [ 682.995863][T11050] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 683.285258][T11050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.300097][T11050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.336142][ T24] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 683.352156][T11050] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 683.485539][T11050] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 683.488170][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.534323][T11050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.559758][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 683.582749][T11050] usb 5-1: config 0 descriptor?? [ 683.884242][ T24] usb 4-1: config 1 has no interface number 0 [ 683.939860][ T24] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 684.156253][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 684.181639][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.222282][ T24] usb 4-1: Product: syz [ 684.232070][ T24] usb 4-1: Manufacturer: syz [ 684.276298][ T5875] usbhid 3-1:1.0: can't add hid device: -71 [ 684.282437][ T5875] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 684.300866][ T24] usb 4-1: SerialNumber: syz [ 684.314931][ T5875] usb 3-1: USB disconnect, device number 109 [ 684.357920][ T24] usb 4-1: selecting invalid altsetting 1 [ 684.521943][T20310] "syz.4.1794" (20310) uses obsolete ecb(arc4) skcipher [ 684.566683][T20315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.575884][T20315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.933044][T19267] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 684.956782][ T24] cdc_ncm 4-1:1.1: bind() failure [ 685.105492][T19267] usb 3-1: Using ep0 maxpacket: 16 [ 685.146600][ T24] usb 4-1: USB disconnect, device number 95 [ 685.152795][T19267] usb 3-1: unable to get BOS descriptor or descriptor too short [ 685.254662][T19267] usb 3-1: config 1 interface 0 has no altsetting 0 [ 685.283970][T19267] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 685.306932][T19267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.324843][T19267] usb 3-1: Product: syz [ 685.340655][T19267] usb 3-1: Manufacturer: syz [ 685.410912][T19267] usb 3-1: SerialNumber: syz [ 685.701651][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.708126][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.823935][T20351] IPVS: set_ctl: invalid protocol: 12 172.30.1.3:20001 [ 685.988840][T20368] fuse: Unknown parameter 'gØã\H–>Å' [ 685.999754][T20368] syz_tun: entered allmulticast mode [ 686.013475][T20367] syz_tun: left allmulticast mode [ 686.148598][T20370] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0002 with DS=0x9 [ 686.262871][T20370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1799'. [ 686.291961][T20370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1799'. [ 687.208452][T20382] usb usb8: usbfs: process 20382 (syz.0.1804) did not claim interface 5 before use [ 687.626151][T11050] usbhid 5-1:0.0: can't add hid device: -71 [ 687.642572][T11050] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 687.744336][T11050] usb 5-1: USB disconnect, device number 100 [ 687.805562][ T2150] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 688.067540][ T2150] usb 1-1: config 0 has no interfaces? [ 688.145564][ T2150] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 688.178303][ T2150] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.226988][ T2150] usb 1-1: Product: syz [ 688.316044][ T2150] usb 1-1: Manufacturer: syz [ 688.695614][ T2150] usb 1-1: SerialNumber: syz [ 688.727734][ T2150] usb 1-1: config 0 descriptor?? [ 689.025785][ T5875] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 689.266763][T19267] usbhid 3-1:1.0: can't add hid device: -71 [ 689.273280][T19267] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 689.335019][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 689.382207][T19267] usb 3-1: USB disconnect, device number 110 [ 689.471288][ T5875] usb 5-1: unable to get BOS descriptor or descriptor too short [ 689.517820][ T5875] usb 5-1: config 1 interface 0 has no altsetting 0 [ 689.649506][ T5875] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 689.946191][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.042579][T20435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1808'. [ 690.063851][ T5875] usb 5-1: Product: syz [ 690.079185][T20435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1808'. [ 690.107491][ T5875] usb 5-1: Manufacturer: syz [ 690.121280][T20435] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 690.161797][ T5875] usb 5-1: SerialNumber: syz [ 690.481630][T20413] IPVS: set_ctl: invalid protocol: 12 172.30.1.5:20001 [ 690.823784][ T5920] usb 1-1: USB disconnect, device number 112 [ 691.835921][ T2150] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 692.018429][ T2150] usb 3-1: Using ep0 maxpacket: 32 [ 692.065758][T20502] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0002 with DS=0x9 [ 692.126725][T20502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1812'. [ 692.205638][T20502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1812'. [ 692.292493][ T5875] usbhid 5-1:1.0: can't add hid device: -71 [ 692.302512][ T5875] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 692.351162][ T5875] usb 5-1: USB disconnect, device number 101 [ 692.425004][T20523] FAULT_INJECTION: forcing a failure. [ 692.425004][T20523] name failslab, interval 1, probability 0, space 0, times 0 [ 692.440411][ T5889] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 692.484634][T20523] CPU: 0 UID: 0 PID: 20523 Comm: syz.4.1815 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 692.484663][T20523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 692.484676][T20523] Call Trace: [ 692.484684][T20523] [ 692.484696][T20523] dump_stack_lvl+0x189/0x250 [ 692.484733][T20523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 692.484762][T20523] ? __pfx__printk+0x10/0x10 [ 692.484789][T20523] ? __pfx___might_resched+0x10/0x10 [ 692.484808][T20523] ? fs_reclaim_acquire+0x7d/0x100 [ 692.484844][T20523] should_fail_ex+0x414/0x560 [ 692.484882][T20523] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 692.484904][T20523] should_failslab+0xa8/0x100 [ 692.484932][T20523] __kvmalloc_node_noprof+0x168/0x5e0 [ 692.484960][T20523] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 692.484990][T20523] rhashtable_init_noprof+0x4ee/0xbb0 [ 692.485021][T20523] nft_rhash_init+0x10b/0x3a0 [ 692.485045][T20523] ? __pfx_nft_rhash_init+0x10/0x10 [ 692.485064][T20523] ? __pfx_nft_rhash_key+0x10/0x10 [ 692.485082][T20523] ? __pfx_nft_rhash_obj+0x10/0x10 [ 692.485100][T20523] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 692.485123][T20523] ? nf_tables_newset+0x1396/0x2530 [ 692.485145][T20523] ? kfree+0x193/0x440 [ 692.485172][T20523] nf_tables_newset+0x1c04/0x2530 [ 692.485208][T20523] ? __pfx_nf_tables_newset+0x10/0x10 [ 692.485256][T20523] ? __nla_parse+0x40/0x60 [ 692.485285][T20523] nfnetlink_rcv+0x113f/0x2530 [ 692.485354][T20523] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 692.485431][T20523] ? skb_clone+0x246/0x3a0 [ 692.485476][T20523] ? netlink_deliver_tap+0x2e/0x1b0 [ 692.485508][T20523] ? netlink_deliver_tap+0x2e/0x1b0 [ 692.485535][T20523] netlink_unicast+0x758/0x8d0 [ 692.485578][T20523] netlink_sendmsg+0x805/0xb30 [ 692.485610][T20523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 692.485636][T20523] ? aa_sock_msg_perm+0x94/0x160 [ 692.485660][T20523] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 692.485700][T20523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 692.485724][T20523] __sock_sendmsg+0x219/0x270 [ 692.485760][T20523] ____sys_sendmsg+0x505/0x830 [ 692.485794][T20523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 692.485831][T20523] ? import_iovec+0x74/0xa0 [ 692.485862][T20523] ___sys_sendmsg+0x21f/0x2a0 [ 692.485891][T20523] ? __pfx____sys_sendmsg+0x10/0x10 [ 692.485957][T20523] ? __fget_files+0x2a/0x420 [ 692.485981][T20523] ? __fget_files+0x3a0/0x420 [ 692.486017][T20523] __x64_sys_sendmsg+0x19b/0x260 [ 692.486047][T20523] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 692.486092][T20523] ? do_syscall_64+0xba/0x210 [ 692.486121][T20523] do_syscall_64+0xf6/0x210 [ 692.486146][T20523] ? clear_bhb_loop+0x45/0xa0 [ 692.486171][T20523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.486191][T20523] RIP: 0033:0x7f5b8ff8e969 [ 692.486210][T20523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.486228][T20523] RSP: 002b:00007f5b90e6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 692.486250][T20523] RAX: ffffffffffffffda RBX: 00007f5b901b5fa0 RCX: 00007f5b8ff8e969 [ 692.486265][T20523] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 692.486279][T20523] RBP: 00007f5b90e6c090 R08: 0000000000000000 R09: 0000000000000000 [ 692.486292][T20523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 692.486303][T20523] R13: 0000000000000000 R14: 00007f5b901b5fa0 R15: 00007f5b902dfa28 [ 692.486342][T20523] [ 692.976365][T20528] FAULT_INJECTION: forcing a failure. [ 692.976365][T20528] name failslab, interval 1, probability 0, space 0, times 0 [ 693.047441][T20528] CPU: 1 UID: 0 PID: 20528 Comm: syz.1.1817 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 693.047471][T20528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 693.047485][T20528] Call Trace: [ 693.047493][T20528] [ 693.047503][T20528] dump_stack_lvl+0x189/0x250 [ 693.047542][T20528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 693.047570][T20528] ? __pfx__printk+0x10/0x10 [ 693.047589][T20528] ? __lock_acquire+0xaac/0xd20 [ 693.047633][T20528] should_fail_ex+0x414/0x560 [ 693.047672][T20528] should_failslab+0xa8/0x100 [ 693.047701][T20528] kmem_cache_alloc_noprof+0x73/0x3c0 [ 693.047726][T20528] ? skb_clone+0x212/0x3a0 [ 693.047757][T20528] skb_clone+0x212/0x3a0 [ 693.047783][T20528] __netlink_deliver_tap+0x404/0x850 [ 693.047812][T20528] ? netlink_deliver_tap+0x2e/0x1b0 [ 693.047830][T20528] netlink_deliver_tap+0x19c/0x1b0 [ 693.047849][T20528] netlink_sendskb+0x68/0x140 [ 693.047878][T20528] netlink_rcv_skb+0x2a0/0x490 [ 693.047897][T20528] ? __pfx_genl_rcv_msg+0x10/0x10 [ 693.047921][T20528] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 693.047958][T20528] ? down_read+0x1ad/0x2e0 [ 693.047982][T20528] genl_rcv+0x28/0x40 [ 693.048003][T20528] netlink_unicast+0x758/0x8d0 [ 693.048039][T20528] netlink_sendmsg+0x805/0xb30 [ 693.048065][T20528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 693.048086][T20528] ? aa_sock_msg_perm+0x94/0x160 [ 693.048106][T20528] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 693.048124][T20528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 693.048143][T20528] __sock_sendmsg+0x219/0x270 [ 693.048172][T20528] ____sys_sendmsg+0x505/0x830 [ 693.048198][T20528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 693.048228][T20528] ? import_iovec+0x74/0xa0 [ 693.048259][T20528] ___sys_sendmsg+0x21f/0x2a0 [ 693.048283][T20528] ? __pfx____sys_sendmsg+0x10/0x10 [ 693.048334][T20528] ? __fget_files+0x2a/0x420 [ 693.048354][T20528] ? __fget_files+0x3a0/0x420 [ 693.048384][T20528] __x64_sys_sendmsg+0x19b/0x260 [ 693.048408][T20528] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 693.048448][T20528] ? do_syscall_64+0xba/0x210 [ 693.048472][T20528] do_syscall_64+0xf6/0x210 [ 693.048492][T20528] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 693.048508][T20528] ? clear_bhb_loop+0x45/0xa0 [ 693.048528][T20528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.048544][T20528] RIP: 0033:0x7f6dd1f8e969 [ 693.048559][T20528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.048573][T20528] RSP: 002b:00007f6dcfdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 693.048591][T20528] RAX: ffffffffffffffda RBX: 00007f6dd21b5fa0 RCX: 00007f6dd1f8e969 [ 693.048603][T20528] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 693.048614][T20528] RBP: 00007f6dcfdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 693.048625][T20528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 693.048635][T20528] R13: 0000000000000000 R14: 00007f6dd21b5fa0 R15: 00007f6dd22dfa28 [ 693.048659][T20528] [ 693.414738][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 693.433182][ T5889] usb 1-1: config 0 has an invalid interface number: 17 but max is 0 [ 693.447225][ T5889] usb 1-1: config 0 has no interface number 0 [ 693.463160][ T5889] usb 1-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 693.535928][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.539823][T20539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1820'. [ 693.619970][ T5889] usb 1-1: Product: syz [ 693.629187][ T5889] usb 1-1: Manufacturer: syz [ 693.638056][ T5889] usb 1-1: SerialNumber: syz [ 693.653792][ T5889] usb 1-1: config 0 descriptor?? [ 693.678247][ T5889] usb 1-1: Found UVC 0.00 device syz (0408:4034) [ 693.684660][ T5889] usb 1-1: No valid video chain found. [ 693.877553][T20506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1814'. [ 693.891108][ T5889] usb 1-1: USB disconnect, device number 113 [ 694.015763][ T5920] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 694.079030][ T2150] usb 3-1: unable to get BOS descriptor or descriptor too short [ 694.095542][ T2150] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 694.110310][ T2150] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 694.139322][ T2150] usb 3-1: can't read configurations, error -71 [ 694.179369][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 694.207572][ T5920] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 694.236708][ T5920] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 694.378796][ T5920] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 694.402333][ T5920] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 694.412646][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 694.431271][ T5920] usb 4-1: Product: syz [ 694.435904][ T5920] usb 4-1: Manufacturer: syz [ 694.440520][ T5920] usb 4-1: SerialNumber: syz [ 694.520557][ T5920] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input35 [ 695.363236][ T2150] usb 4-1: USB disconnect, device number 96 [ 695.430602][ T2150] appletouch 4-1:1.0: input: appletouch disconnected [ 696.395477][ T5920] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 696.650871][ T5920] usb 1-1: config 0 has no interfaces? [ 696.860193][ T5920] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 696.887333][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.903600][ T5920] usb 1-1: Product: syz [ 696.973237][ T5920] usb 1-1: Manufacturer: syz [ 697.105541][ T47] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 697.115933][ T5920] usb 1-1: SerialNumber: syz [ 697.138387][ T5920] usb 1-1: config 0 descriptor?? [ 698.085146][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 698.182258][ T47] usb 3-1: config 0 has an invalid interface number: 60 but max is 0 [ 698.193519][ T47] usb 3-1: config 0 has no interface number 0 [ 698.291811][ T47] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 698.325587][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.336973][T20673] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1836'. [ 698.364897][T20671] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1836'. [ 698.374127][ T47] usb 3-1: Product: syz [ 698.413198][ T47] usb 3-1: Manufacturer: syz [ 698.465612][ T47] usb 3-1: SerialNumber: syz [ 698.558698][ T47] usb 3-1: config 0 descriptor?? [ 698.578747][ T47] gspca_main: spca500-2.14.0 probing 046d:0900 [ 698.815518][ T47] gspca_spca500: reg write: error -71 [ 699.156278][ T47] gspca_spca500: reg write: error -71 [ 699.162140][ T47] gspca_spca500: reg write: error -71 [ 699.178930][ T47] gspca_spca500: reg write: error -71 [ 699.194610][ T47] gspca_spca500: reg write: error -71 [ 699.223633][ T47] gspca_spca500: reg write: error -71 [ 699.243141][ T47] gspca_spca500: reg write: error -71 [ 699.294417][ T47] gspca_spca500: reg write: error -71 [ 699.384952][ T5889] usb 1-1: USB disconnect, device number 114 [ 699.473735][ T47] gspca_spca500: reg write: error -71 [ 699.495900][ T47] gspca_spca500: reg write: error -71 [ 699.505767][ T47] gspca_spca500: reg write: error -71 [ 699.525067][ T47] gspca_spca500: reg write: error -71 [ 699.539535][ T47] gspca_spca500: reg write: error -71 [ 699.561757][ T47] gspca_spca500: reg write: error -71 [ 699.642780][ T47] usb 3-1: USB disconnect, device number 113 [ 701.035943][T20726] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 702.498194][T20751] FAULT_INJECTION: forcing a failure. [ 702.498194][T20751] name failslab, interval 1, probability 0, space 0, times 0 [ 702.579096][T20751] CPU: 0 UID: 0 PID: 20751 Comm: syz.4.1853 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 702.579127][T20751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 702.579140][T20751] Call Trace: [ 702.579149][T20751] [ 702.579159][T20751] dump_stack_lvl+0x189/0x250 [ 702.579195][T20751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 702.579224][T20751] ? __pfx__printk+0x10/0x10 [ 702.579251][T20751] ? __pfx___might_resched+0x10/0x10 [ 702.579269][T20751] ? fs_reclaim_acquire+0x7d/0x100 [ 702.579304][T20751] should_fail_ex+0x414/0x560 [ 702.579341][T20751] should_failslab+0xa8/0x100 [ 702.579369][T20751] __kmalloc_cache_noprof+0x70/0x3d0 [ 702.579400][T20751] ? nf_tables_commit+0x866/0x8e70 [ 702.579427][T20751] nf_tables_commit+0x866/0x8e70 [ 702.579471][T20751] ? nft_pernet+0x23/0x240 [ 702.579493][T20751] ? nft_pernet+0x23/0x240 [ 702.579518][T20751] ? __pfx_nf_tables_commit+0x10/0x10 [ 702.579542][T20751] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 702.579573][T20751] ? nft_delchain+0x329/0x4b0 [ 702.579604][T20751] ? nf_tables_delchain+0xd43/0xfc0 [ 702.579642][T20751] ? __pfx_nf_tables_delchain+0x10/0x10 [ 702.579687][T20751] nfnetlink_rcv+0x1a5b/0x2530 [ 702.579747][T20751] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 702.579831][T20751] ? skb_clone+0x246/0x3a0 [ 702.579874][T20751] ? netlink_deliver_tap+0x2e/0x1b0 [ 702.579895][T20751] ? netlink_deliver_tap+0x2e/0x1b0 [ 702.579923][T20751] netlink_unicast+0x758/0x8d0 [ 702.579965][T20751] netlink_sendmsg+0x805/0xb30 [ 702.579997][T20751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 702.580022][T20751] ? aa_sock_msg_perm+0x94/0x160 [ 702.580045][T20751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 702.580067][T20751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 702.580090][T20751] __sock_sendmsg+0x219/0x270 [ 702.580128][T20751] ____sys_sendmsg+0x505/0x830 [ 702.580159][T20751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 702.580195][T20751] ? import_iovec+0x74/0xa0 [ 702.580225][T20751] ___sys_sendmsg+0x21f/0x2a0 [ 702.580253][T20751] ? __pfx____sys_sendmsg+0x10/0x10 [ 702.580317][T20751] ? __fget_files+0x2a/0x420 [ 702.580341][T20751] ? __fget_files+0x3a0/0x420 [ 702.580377][T20751] __x64_sys_sendmsg+0x19b/0x260 [ 702.580414][T20751] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 702.580458][T20751] ? do_syscall_64+0xba/0x210 [ 702.580486][T20751] do_syscall_64+0xf6/0x210 [ 702.580511][T20751] ? clear_bhb_loop+0x45/0xa0 [ 702.580536][T20751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.580555][T20751] RIP: 0033:0x7f5b8ff8e969 [ 702.580573][T20751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.580589][T20751] RSP: 002b:00007f5b90e6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 702.580611][T20751] RAX: ffffffffffffffda RBX: 00007f5b901b5fa0 RCX: 00007f5b8ff8e969 [ 702.580625][T20751] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 702.580638][T20751] RBP: 00007f5b90e6c090 R08: 0000000000000000 R09: 0000000000000000 [ 702.580651][T20751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.580662][T20751] R13: 0000000000000000 R14: 00007f5b901b5fa0 R15: 00007f5b902dfa28 [ 702.580693][T20751] [ 703.788446][ T5920] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 703.802690][T20771] loop8: detected capacity change from 0 to 1 [ 704.145485][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 704.214082][T20771] Dev loop8: unable to read RDB block 1 [ 704.229103][T20771] loop8: unable to read partition table [ 704.249737][T20771] loop8: partition table beyond EOD, truncated [ 704.281224][T20771] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 704.938109][ T5920] usb 3-1: unable to get BOS descriptor or descriptor too short [ 704.992081][ T5920] usb 3-1: config 1 interface 0 has no altsetting 0 [ 705.529224][ T5920] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 705.581221][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.623877][ T5920] usb 3-1: Product: syz [ 705.648972][ T5920] usb 3-1: Manufacturer: syz [ 705.663920][ T5920] usb 3-1: SerialNumber: syz [ 705.835822][ T24] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 706.009556][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 706.266483][T20759] IPVS: set_ctl: invalid protocol: 12 172.30.1.3:20001 [ 707.382230][T20856] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 707.748377][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 707.787764][ T24] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 707.873864][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 707.903527][ T24] usb 1-1: can't read configurations, error -71 [ 708.345538][ T47] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 708.555520][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 708.671176][T20879] binder: 20878:20879 ioctl c018620c 200000000380 returned -22 [ 708.763060][ T47] usb 4-1: unable to get BOS descriptor or descriptor too short [ 708.991025][ T47] usb 4-1: config 1 interface 0 has no altsetting 0 [ 709.120148][ T47] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 709.147123][ T5920] usbhid 3-1:1.0: can't add hid device: -71 [ 709.153214][ T5920] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 709.209330][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.262316][ T47] usb 4-1: Product: syz [ 709.282452][ T5920] usb 3-1: USB disconnect, device number 114 [ 709.288979][ T47] usb 4-1: Manufacturer: syz [ 709.307963][ T47] usb 4-1: SerialNumber: syz [ 709.436074][ T2150] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 709.627177][T20909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.686444][T20909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.694030][ T2150] usb 1-1: config 0 has an invalid interface number: 101 but max is 0 [ 709.730841][ T2150] usb 1-1: config 0 has no interface number 0 [ 709.751347][ T2150] usb 1-1: config 0 interface 101 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 709.776070][ T5920] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 709.818538][ T2150] usb 1-1: config 0 interface 101 altsetting 0 endpoint 0x9 has invalid maxpacket 2007, setting to 1024 [ 709.845652][ T24] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 709.887364][ T2150] usb 1-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 709.897817][ T2150] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.905967][ T2150] usb 1-1: Product: syz [ 709.925500][ T2150] usb 1-1: Manufacturer: syz [ 709.935656][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 709.943005][ T5920] usb 3-1: unable to get BOS descriptor or descriptor too short [ 709.968173][ T5920] usb 3-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 709.977396][ T2150] usb 1-1: SerialNumber: syz [ 709.986068][ T2150] usb 1-1: config 0 descriptor?? [ 709.999104][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.011986][ T24] usb 2-1: config 1 has an invalid descriptor of length 36, skipping remainder of the config [ 710.013189][ T2150] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 710.029306][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 710.045097][ T5920] usb 3-1: Product: syz [ 710.050912][ T5920] usb 3-1: Manufacturer: syz [ 710.064151][ T5920] usb 3-1: SerialNumber: syz [ 710.337561][T20895] program syz.2.1870 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 710.433539][ T2150] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 710.444519][ T2150] gspca_pac7302 1-1:0.101: probe with driver gspca_pac7302 failed with error -71 [ 710.475205][ T2150] usb 1-1: USB disconnect, device number 117 [ 710.503681][T20932] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1874'. [ 710.516329][T20932] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1874'. [ 710.577617][T20932] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 711.012684][ T5920] usb 3-1: selecting invalid altsetting 1 [ 711.019122][ T5920] catc 3-1:8.0: Can't set altsetting 1. [ 711.032877][ T5920] catc 3-1:8.0: probe with driver catc failed with error -5 [ 711.114547][ T5920] usb 3-1: USB disconnect, device number 115 [ 711.243205][ T47] usbhid 4-1:1.0: can't add hid device: -71 [ 711.258545][ T47] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 711.266860][T20970] tun0: tun_chr_ioctl cmd 1074812117 [ 711.281084][ T47] usb 4-1: USB disconnect, device number 97 [ 711.364084][T20991] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1879'. [ 712.042279][T21030] fuse: Unknown parameter 'subj_user' [ 712.364332][ T5920] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 712.601451][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 712.622542][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 712.647312][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.672895][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.757712][ T5920] usb 1-1: config 0 has no interfaces? [ 713.145155][ T5920] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 713.164538][ T24] usb 2-1: can't set config #1, error -71 [ 713.313283][ T24] usb 2-1: USB disconnect, device number 97 [ 713.415770][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.463633][ T5920] usb 1-1: config 0 descriptor?? [ 713.690089][T21030] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1883'. [ 713.935716][ T24] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 715.187570][ T5889] usb 1-1: USB disconnect, device number 118 [ 715.256639][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 715.344590][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 715.356330][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 715.409368][ T24] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 715.430789][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.452088][ T24] usb 2-1: Product: syz [ 715.465439][ T24] usb 2-1: Manufacturer: syz [ 715.479880][ T24] usb 2-1: SerialNumber: syz [ 715.883362][ T47] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 716.557650][ T47] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1040, setting to 64 [ 716.572196][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 716.585659][ T47] usb 3-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 716.598537][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.632678][ T47] usb 3-1: config 0 descriptor?? [ 716.692199][T21092] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 716.745866][ T5920] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 716.824442][T21116] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 716.895852][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 716.910735][ T5920] usb 4-1: config 0 has an invalid interface number: 17 but max is 0 [ 716.924325][ T5920] usb 4-1: config 0 has no interface number 0 [ 716.954036][ T5920] usb 4-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 716.963889][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.005246][ T5920] usb 4-1: Product: syz [ 717.018246][ T5920] usb 4-1: Manufacturer: syz [ 717.034233][ T5920] usb 4-1: SerialNumber: syz [ 717.067725][ T5920] usb 4-1: config 0 descriptor?? [ 717.082347][ T5920] usb 4-1: Found UVC 0.00 device syz (0408:4034) [ 717.089179][ T5920] usb 4-1: No valid video chain found. [ 717.129780][ T47] kye 0003:0458:5014.0013: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 717.160535][ T47] kye 0003:0458:5014.0013: hidraw0: USB HID v0.01 Device [HID 0458:5014] on usb-dummy_hcd.2-1/input0 [ 717.185517][ T47] kye 0003:0458:5014.0013: tablet-enabling feature report not found [ 717.195198][ T47] kye 0003:0458:5014.0013: tablet enabling failed [ 717.206379][ T5875] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 717.285044][T21102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1890'. [ 717.301959][T21102] netlink: 'syz.3.1890': attribute type 2 has an invalid length. [ 717.334327][ T47] usb 4-1: USB disconnect, device number 98 [ 717.365628][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 717.372773][ T5889] usb 3-1: USB disconnect, device number 116 [ 717.381775][ T5875] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 152, changing to 11 [ 717.419565][ T5875] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 717.432341][ T5875] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 717.457394][ T5875] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 717.467090][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.487693][ T5875] usb 5-1: Product: syz [ 717.496142][ T5875] usb 5-1: Manufacturer: ዯ鵎î¸è¤ºä€›ì‚ºå—™é•ç‰¢í‡‘蛮簼ì–ꈔ梶åˆé®¾Ý²ã‘½ï èŸ°ä™šç²†í‘ƒå‡Žã°ªä¦¯çŸ¤ì€ˆè§é´¯ï¤Šè…¬î¬‡íŸë¿©íƒ¢âœê—Šïš°î¾ˆé¯©ï¡“爛噣߮苞ာ妺ԃì€ä—´ [ 717.539040][ T5875] usb 5-1: SerialNumber: syz [ 717.811954][ T5875] cdc_ncm 5-1:1.0: bind() failure [ 717.833818][ T5875] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 717.863632][ T5875] cdc_ncm 5-1:1.1: bind() failure [ 717.896879][ T5875] usb 5-1: USB disconnect, device number 102 [ 718.136382][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 718.136404][ T30] audit: type=1326 audit(1746460354.387:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21179 comm="syz.3.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5ad8e969 code=0x7ffc0000 [ 718.167821][T21182] Scaler: ================= START STATUS ================= [ 718.175325][T21182] Scaler: ================== END STATUS ================== [ 718.186573][ T24] usbhid 2-1:1.0: can't add hid device: -71 [ 718.192670][ T24] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 718.224516][ T30] audit: type=1326 audit(1746460354.387:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21179 comm="syz.3.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5ad8e969 code=0x7ffc0000 [ 718.262624][ T30] audit: type=1326 audit(1746460354.397:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21179 comm="syz.3.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8e5ad8e969 code=0x7ffc0000 [ 718.285043][ C0] vkms_vblank_simulate: vblank timer overrun [ 718.313772][ T24] usb 2-1: USB disconnect, device number 98 [ 718.314297][ T30] audit: type=1326 audit(1746460354.397:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21179 comm="syz.3.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5ad8e969 code=0x7ffc0000 [ 718.448594][ T30] audit: type=1326 audit(1746460354.397:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21179 comm="syz.3.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e5ad8e969 code=0x7ffc0000 [ 718.470970][ C0] vkms_vblank_simulate: vblank timer overrun [ 718.507497][ T5875] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 718.642970][ T30] audit: type=1326 audit(1746460354.397:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21179 comm="syz.3.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5ad8e969 code=0x7ffc0000 [ 718.665951][ T5875] usb 3-1: device descriptor read/64, error -71 [ 718.694291][ T30] audit: type=1326 audit(1746460354.397:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21179 comm="syz.3.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f8e5ad8e969 code=0x7ffc0000 [ 718.760395][ T30] audit: type=1326 audit(1746460354.397:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21179 comm="syz.3.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5ad8e969 code=0x7ffc0000 [ 718.808424][ T30] audit: type=1326 audit(1746460354.397:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21179 comm="syz.3.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f8e5ad8e969 code=0x7ffc0000 [ 718.840766][ T30] audit: type=1326 audit(1746460354.397:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21179 comm="syz.3.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5ad8e969 code=0x7ffc0000 [ 718.935669][ T5875] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 719.124231][ T5875] usb 3-1: device descriptor read/64, error -71 [ 719.201917][T21216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1901'. [ 719.239546][T21216] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.248963][T21216] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.258224][T21216] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.267037][T21216] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.281521][ T5875] usb usb3-port1: attempt power cycle [ 719.304869][T21216] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.314303][T21216] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.323809][T21216] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.333227][T21216] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.460145][T21211] kvm: pic: level sensitive irq not supported [ 719.460237][T21211] kvm: pic: non byte read [ 719.625547][ T5875] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 719.679210][ T5875] usb 3-1: device descriptor read/8, error -71 [ 719.735788][ T5889] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 719.745632][ T24] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 719.768524][T21239] Cannot find del_set index 4 as target [ 719.905654][ T24] usb 4-1: device descriptor read/64, error -71 [ 719.913818][ T5889] usb 2-1: not running at top speed; connect to a high speed hub [ 719.934101][ T5889] usb 2-1: config 1 has an invalid interface number: 53 but max is 0 [ 719.942613][ T5875] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 719.953307][ T5889] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 720.025686][ T5889] usb 2-1: config 1 has no interface number 0 [ 720.026318][ T5875] usb 3-1: device descriptor read/8, error -71 [ 720.041684][ T5889] usb 2-1: config 1 interface 53 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 720.079734][ T5889] usb 2-1: config 1 interface 53 has no altsetting 0 [ 720.101318][ T5889] usb 2-1: Dual-Role OTG device on HNP port [ 720.111695][ T5889] usb 2-1: New USB device found, idVendor=05d1, idProduct=1019, bcdDevice=60.e5 [ 720.123510][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.131609][ T5889] usb 2-1: Product: syz [ 720.145538][ T5889] usb 2-1: Manufacturer: syz [ 720.151326][ T5889] usb 2-1: SerialNumber: syz [ 720.165594][ T24] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 720.176108][ T5875] usb usb3-port1: unable to enumerate USB device [ 720.355563][ T24] usb 4-1: device descriptor read/64, error -71 [ 720.404228][ T5889] ftdi_sio 2-1:1.53: FTDI USB Serial Device converter detected [ 720.434897][ T5889] ftdi_sio ttyUSB0: unknown device type: 0x60e5 [ 720.462164][ T5889] usb 2-1: USB disconnect, device number 99 [ 720.476071][ T24] usb usb4-port1: attempt power cycle [ 720.491295][ T5889] ftdi_sio 2-1:1.53: device disconnected [ 720.865163][T21269] tipc: Started in network mode [ 720.877787][T21269] tipc: Node identity 000000002e00003a0000000000000001, cluster identity 4711 [ 720.909012][T21269] tipc: Enabling of bearer rejected, failed to enable media [ 720.925720][ T24] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 720.980974][ T24] usb 4-1: device descriptor read/8, error -71 [ 721.255810][ T24] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 721.298723][ T24] usb 4-1: device descriptor read/8, error -71 [ 721.327822][T21274] dvmrp1: left allmulticast mode [ 721.475284][ T24] usb usb4-port1: unable to enumerate USB device [ 722.645746][T21343] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 723.007017][T21355] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 723.195578][ T5875] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 723.514527][ T5875] usb 5-1: not running at top speed; connect to a high speed hub [ 723.539977][ T5875] usb 5-1: config 1 has an invalid interface number: 53 but max is 0 [ 723.554271][ T5875] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 723.565543][ T5875] usb 5-1: config 1 has no interface number 0 [ 723.573709][ T5875] usb 5-1: config 1 interface 53 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 723.587535][ T5875] usb 5-1: config 1 interface 53 has no altsetting 0 [ 723.761114][ T5875] usb 5-1: Dual-Role OTG device on HNP port [ 723.842078][ T5875] usb 5-1: New USB device found, idVendor=05d1, idProduct=1019, bcdDevice=60.e5 [ 723.865831][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.894315][ T5875] usb 5-1: Product: syz [ 723.914591][ T5875] usb 5-1: Manufacturer: syz [ 723.955746][ T5875] usb 5-1: SerialNumber: syz [ 724.311034][T21365] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 724.666790][ T5875] ftdi_sio 5-1:1.53: FTDI USB Serial Device converter detected [ 724.706929][ T5875] ftdi_sio ttyUSB0: unknown device type: 0x60e5 [ 724.788419][ T5875] usb 5-1: USB disconnect, device number 103 [ 724.826470][ T5875] ftdi_sio 5-1:1.53: device disconnected [ 725.245868][ T5889] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 725.286593][T21387] FAULT_INJECTION: forcing a failure. [ 725.286593][T21387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 725.411298][T21387] CPU: 0 UID: 0 PID: 21387 Comm: syz.2.1927 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 725.411334][T21387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 725.411347][T21387] Call Trace: [ 725.411355][T21387] [ 725.411364][T21387] dump_stack_lvl+0x189/0x250 [ 725.411395][T21387] ? __lock_acquire+0xaac/0xd20 [ 725.411426][T21387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 725.411456][T21387] ? __pfx__printk+0x10/0x10 [ 725.411478][T21387] ? __might_fault+0xb0/0x130 [ 725.411517][T21387] should_fail_ex+0x414/0x560 [ 725.411555][T21387] _copy_from_user+0x2d/0xb0 [ 725.411584][T21387] ___sys_sendmsg+0x158/0x2a0 [ 725.411614][T21387] ? __pfx____sys_sendmsg+0x10/0x10 [ 725.411686][T21387] ? __might_fault+0xb0/0x130 [ 725.411716][T21387] __sys_sendmmsg+0x227/0x430 [ 725.411749][T21387] ? __pfx___sys_sendmmsg+0x10/0x10 [ 725.411785][T21387] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 725.411830][T21387] ? ksys_write+0x1f0/0x250 [ 725.411853][T21387] ? rcu_is_watching+0x15/0xb0 [ 725.411893][T21387] __x64_sys_sendmmsg+0xa0/0xc0 [ 725.411923][T21387] do_syscall_64+0xf6/0x210 [ 725.411949][T21387] ? clear_bhb_loop+0x45/0xa0 [ 725.411975][T21387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.411996][T21387] RIP: 0033:0x7f1cc4b8e969 [ 725.412014][T21387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.412032][T21387] RSP: 002b:00007f1cc598b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 725.412054][T21387] RAX: ffffffffffffffda RBX: 00007f1cc4db5fa0 RCX: 00007f1cc4b8e969 [ 725.412069][T21387] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 725.412083][T21387] RBP: 00007f1cc598b090 R08: 0000000000000000 R09: 0000000000000000 [ 725.412097][T21387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.412109][T21387] R13: 0000000000000000 R14: 00007f1cc4db5fa0 R15: 00007f1cc4edfa28 [ 725.412140][T21387] [ 725.610586][ C0] vkms_vblank_simulate: vblank timer overrun [ 725.859762][ T5889] usb 4-1: unable to get BOS descriptor or descriptor too short [ 725.935517][ T5889] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 725.944102][ T5889] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 726.040517][ T5889] usb 4-1: config 63 has no interface number 0 [ 726.051702][ T5889] usb 4-1: config 63 interface 66 has no altsetting 0 [ 726.120498][ T5889] usb 4-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 726.203876][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.298977][ T5889] usb 4-1: Product: syz [ 726.312223][ T5889] usb 4-1: Manufacturer: syz [ 726.382308][ T5889] usb 4-1: SerialNumber: syz [ 726.614009][T21381] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1926'. [ 726.649527][T21381] netlink: 4304 bytes leftover after parsing attributes in process `syz.3.1926'. [ 726.682850][T21407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.714688][T21407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.812646][ T5889] usb 4-1: Found UVC 0.07 device syz (174f:8a31) [ 726.814478][T21418] FAULT_INJECTION: forcing a failure. [ 726.814478][T21418] name failslab, interval 1, probability 0, space 0, times 0 [ 726.843237][ T5889] usb 4-1: No valid video chain found. [ 726.847618][T21418] CPU: 1 UID: 0 PID: 21418 Comm: syz.1.1933 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 726.847656][T21418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 726.847671][T21418] Call Trace: [ 726.847683][T21418] [ 726.847693][T21418] dump_stack_lvl+0x189/0x250 [ 726.847734][T21418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 726.847766][T21418] ? __pfx__printk+0x10/0x10 [ 726.847795][T21418] ? __pfx___might_resched+0x10/0x10 [ 726.847816][T21418] ? fs_reclaim_acquire+0x7d/0x100 [ 726.847853][T21418] should_fail_ex+0x414/0x560 [ 726.847894][T21418] should_failslab+0xa8/0x100 [ 726.847926][T21418] __kmalloc_noprof+0xcb/0x4f0 [ 726.847951][T21418] ? kfree+0x4d/0x440 [ 726.847972][T21418] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 726.848005][T21418] tomoyo_realpath_from_path+0xe3/0x5d0 [ 726.848034][T21418] ? tomoyo_domain+0xda/0x130 [ 726.848067][T21418] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 726.848108][T21418] tomoyo_path_number_perm+0x1e8/0x5a0 [ 726.848147][T21418] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 726.848201][T21418] ? __lock_acquire+0xaac/0xd20 [ 726.848252][T21418] ? __fget_files+0x2a/0x420 [ 726.848286][T21418] ? __fget_files+0x3a0/0x420 [ 726.848312][T21418] ? __fget_files+0x2a/0x420 [ 726.848344][T21418] security_file_ioctl+0xcb/0x2d0 [ 726.848381][T21418] __se_sys_ioctl+0x47/0x170 [ 726.848406][T21418] do_syscall_64+0xf6/0x210 [ 726.848436][T21418] ? clear_bhb_loop+0x45/0xa0 [ 726.848463][T21418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.848485][T21418] RIP: 0033:0x7f6dd1f8e969 [ 726.848506][T21418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.848524][T21418] RSP: 002b:00007f6dcfdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 726.848548][T21418] RAX: ffffffffffffffda RBX: 00007f6dd21b5fa0 RCX: 00007f6dd1f8e969 [ 726.848564][T21418] RDX: 0000200000000100 RSI: 00000000000089f6 RDI: 0000000000000003 [ 726.848579][T21418] RBP: 00007f6dcfdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 726.848593][T21418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.848606][T21418] R13: 0000000000000000 R14: 00007f6dd21b5fa0 R15: 00007f6dd22dfa28 [ 726.848641][T21418] [ 726.848738][T21418] ERROR: Out of memory at tomoyo_realpath_from_path. [ 727.098910][T21420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1934'. [ 727.193565][ T5889] usb 4-1: USB disconnect, device number 103 [ 727.311445][T21434] qrtr: Invalid version 0 [ 727.635924][ T5875] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 727.674798][T21424] [U] ©ÃÇ [ 727.825257][T21458] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 727.834176][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 727.839872][T21458] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 727.856471][ T5875] usb 3-1: unable to get BOS descriptor or descriptor too short [ 727.869463][ T5875] usb 3-1: config 1 interface 0 has no altsetting 0 [ 727.887155][ T5875] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 727.896466][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.905641][T21458] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 727.921293][ T5875] usb 3-1: Product: syz [ 727.945575][ T5875] usb 3-1: Manufacturer: syz [ 727.961112][ T5875] usb 3-1: SerialNumber: syz [ 728.219289][T21438] IPVS: set_ctl: invalid protocol: 12 172.30.1.3:20001 [ 728.826289][T21478] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 728.833968][T21478] IPv6: NLM_F_CREATE should be set when creating new route [ 728.841536][T21478] IPv6: NLM_F_CREATE should be set when creating new route [ 729.114906][T21482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1947'. [ 729.274039][T21484] fuse: Bad value for 'group_id' [ 729.282476][T21484] fuse: Bad value for 'group_id' [ 729.506500][T21490] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1950'. [ 729.526842][T21490] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.536587][T21490] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.634884][T21491] delete_channel: no stack [ 730.005985][ T5920] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 730.015953][ T24] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 730.245543][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 730.258233][ T24] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 730.272908][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.300216][ T24] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 730.316176][ T5920] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.345532][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 730.395522][ T5920] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.405570][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.538764][ T5920] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 730.645982][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 730.695579][ T5920] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 730.745595][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.779581][ T5920] usb 1-1: config 0 descriptor?? [ 730.986118][ T5875] usbhid 3-1:1.0: can't add hid device: -71 [ 731.002895][ T5875] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 731.037791][ T5875] usb 3-1: USB disconnect, device number 121 [ 731.200689][T21494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.211136][T21494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.247125][ T5920] hid-thrustmaster 0003:044F:B65D.0014: unknown main item tag 0x0 [ 731.262645][ T5920] hid-thrustmaster 0003:044F:B65D.0014: unknown main item tag 0x0 [ 731.274186][ T5920] hid-thrustmaster 0003:044F:B65D.0014: item fetching failed at offset 2/5 [ 731.291301][ T5920] hid-thrustmaster 0003:044F:B65D.0014: parse failed with error -22 [ 731.311553][ T5920] hid-thrustmaster 0003:044F:B65D.0014: probe with driver hid-thrustmaster failed with error -22 [ 731.442954][T21567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.454096][T21567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.485231][T21566] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1959'. [ 731.588291][ T2150] usb 1-1: USB disconnect, device number 119 [ 731.643611][T21583] veth15: entered promiscuous mode [ 731.988943][T21625] FAULT_INJECTION: forcing a failure. [ 731.988943][T21625] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 732.003203][ T5920] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 732.013982][T21625] CPU: 1 UID: 0 PID: 21625 Comm: syz.2.1963 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 732.014015][T21625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 732.014028][T21625] Call Trace: [ 732.014037][T21625] [ 732.014046][T21625] dump_stack_lvl+0x189/0x250 [ 732.014083][T21625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 732.014111][T21625] ? __pfx__printk+0x10/0x10 [ 732.014133][T21625] ? fs_reclaim_acquire+0x7d/0x100 [ 732.014170][T21625] should_fail_ex+0x414/0x560 [ 732.014206][T21625] prepare_alloc_pages+0x213/0x610 [ 732.014263][T21625] __alloc_frozen_pages_noprof+0x123/0x370 [ 732.014298][T21625] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 732.014336][T21625] ? policy_nodemask+0x27c/0x720 [ 732.014367][T21625] alloc_pages_mpol+0x232/0x4a0 [ 732.014404][T21625] alloc_migration_target_by_mpol+0x2e6/0x520 [ 732.014444][T21625] migrate_pages_batch+0x79d/0x2830 [ 732.014478][T21625] ? walk_pgd_range+0x16c7/0x1790 [ 732.014517][T21625] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 732.014550][T21625] ? __pfx_migrate_pages_batch+0x10/0x10 [ 732.014584][T21625] ? __pfx_walk_pgd_range+0x10/0x10 [ 732.014623][T21625] migrate_pages+0x1b3b/0x2850 [ 732.014665][T21625] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 732.014706][T21625] ? __pfx_migrate_pages+0x10/0x10 [ 732.014735][T21625] ? __pfx_walk_page_range_mm+0x10/0x10 [ 732.014756][T21625] ? __lock_acquire+0xaac/0xd20 [ 732.014796][T21625] ? mas_next_slot+0xc20/0xcf0 [ 732.014838][T21625] ? up_write+0x1c4/0x420 [ 732.014864][T21625] __se_sys_mbind+0xa3e/0xc30 [ 732.014889][T21625] ? __pfx_vfs_write+0x10/0x10 [ 732.014916][T21625] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 732.014942][T21625] ? __pfx___se_sys_mbind+0x10/0x10 [ 732.014993][T21625] ? __x64_sys_mbind+0x21/0xf0 [ 732.015019][T21625] do_syscall_64+0xf6/0x210 [ 732.015046][T21625] ? clear_bhb_loop+0x45/0xa0 [ 732.015071][T21625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.015091][T21625] RIP: 0033:0x7f1cc4b8e969 [ 732.015110][T21625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.015128][T21625] RSP: 002b:00007f1cc596a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 732.015150][T21625] RAX: ffffffffffffffda RBX: 00007f1cc4db6080 RCX: 00007f1cc4b8e969 [ 732.015166][T21625] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000 [ 732.015179][T21625] RBP: 00007f1cc596a090 R08: 000000000000000a R09: 0000000000000002 [ 732.015193][T21625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.015205][T21625] R13: 0000000000000001 R14: 00007f1cc4db6080 R15: 00007f1cc4edfa28 [ 732.015236][T21625] [ 732.477140][ T24] usb 5-1: USB disconnect, device number 104 [ 732.499729][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 732.508367][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.520557][ T5920] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 732.530256][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.552126][ T5920] usb 2-1: config 0 descriptor?? [ 732.554578][T21636] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1967'. [ 732.583620][T21636] 8021q: VLANs not supported on caif0 [ 732.996101][ T5920] usbhid 2-1:0.0: can't add hid device: -71 [ 733.014543][ T5920] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 733.087084][ T5920] usb 2-1: USB disconnect, device number 100 [ 733.887271][T21660] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 733.906786][T21660] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 734.001944][T21726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1975'. [ 734.025752][ T5877] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 734.349412][ T5877] usb 2-1: Using ep0 maxpacket: 32 [ 734.375551][ T5875] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 734.416823][ T5877] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 734.452365][ T5877] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 734.484612][ T5877] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 734.519966][ T5877] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 734.547198][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 734.574607][ T5877] usb 2-1: Product: syz [ 734.579441][ T5875] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 734.582386][ T5877] usb 2-1: Manufacturer: syz [ 734.603512][ T5875] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 734.612862][ T5877] usb 2-1: SerialNumber: syz [ 734.653496][ T5877] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input36 [ 734.817257][ T5875] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 734.840090][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 734.859398][ T5875] usb 5-1: SerialNumber: syz [ 735.146512][ T5875] usb 5-1: 0:2 : does not exist [ 735.264012][ T5875] usb 5-1: USB disconnect, device number 105 [ 735.735307][T21772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 736.517405][T21789] fuse: Bad value for 'user_id' [ 736.527935][T21789] fuse: Bad value for 'user_id' [ 736.803696][ T5877] usb 2-1: USB disconnect, device number 101 [ 736.893638][ T5877] appletouch 2-1:1.0: input: appletouch disconnected [ 736.948057][T21815] ALSA: seq fatal error: cannot create timer (-19) [ 738.045836][ T5877] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 738.220203][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.231371][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.266615][ T5877] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 738.322591][ T5877] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 738.322903][T21845] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1985'. [ 738.381131][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.426532][ T5877] usb 2-1: config 0 descriptor?? [ 738.468637][T21845] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 738.977233][T21862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1989'. [ 739.002846][T21862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1989'. [ 739.041674][T21862] sctp: [Deprecated]: syz.2.1989 (pid 21862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 739.041674][T21862] Use struct sctp_sack_info instead [ 739.410157][T21833] "syz.1.1983" (21833) uses obsolete ecb(arc4) skcipher [ 740.689186][T11050] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 740.928015][T11050] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.939146][T11050] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.949014][T11050] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 740.963871][T11050] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 740.973351][T11050] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.025703][T11050] usb 1-1: config 0 descriptor?? [ 741.597849][T21922] FAULT_INJECTION: forcing a failure. [ 741.597849][T21922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.760616][T21922] CPU: 1 UID: 0 PID: 21922 Comm: syz.4.1998 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 741.760648][T21922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 741.760661][T21922] Call Trace: [ 741.760670][T21922] [ 741.760680][T21922] dump_stack_lvl+0x189/0x250 [ 741.760718][T21922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 741.760741][T21922] ? __pfx__printk+0x10/0x10 [ 741.760773][T21922] should_fail_ex+0x414/0x560 [ 741.760821][T21922] _copy_to_user+0x31/0xb0 [ 741.760853][T21922] simple_read_from_buffer+0xe1/0x170 [ 741.760876][T21922] proc_fail_nth_read+0x1df/0x250 [ 741.760900][T21922] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 741.760932][T21922] ? rw_verify_area+0x258/0x650 [ 741.760954][T21922] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 741.760982][T21922] vfs_read+0x1fd/0x980 [ 741.761009][T21922] ? __pfx___mutex_lock+0x10/0x10 [ 741.761029][T21922] ? __pfx_vfs_read+0x10/0x10 [ 741.761055][T21922] ? __fget_files+0x2a/0x420 [ 741.761087][T21922] ? __fget_files+0x3a0/0x420 [ 741.761112][T21922] ? __fget_files+0x2a/0x420 [ 741.761148][T21922] ksys_read+0x145/0x250 [ 741.761172][T21922] ? __pfx_ksys_read+0x10/0x10 [ 741.761193][T21922] ? __secure_computing+0xe2/0x2a0 [ 741.761232][T21922] do_syscall_64+0xf6/0x210 [ 741.761259][T21922] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 741.761279][T21922] ? clear_bhb_loop+0x45/0xa0 [ 741.761304][T21922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.761319][T21922] RIP: 0033:0x7f5b8ff8d37c [ 741.761332][T21922] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 741.761345][T21922] RSP: 002b:00007f5b90e6c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 741.761364][T21922] RAX: ffffffffffffffda RBX: 00007f5b901b5fa0 RCX: 00007f5b8ff8d37c [ 741.761380][T21922] RDX: 000000000000000f RSI: 00007f5b90e6c0a0 RDI: 0000000000000006 [ 741.761393][T21922] RBP: 00007f5b90e6c090 R08: 0000000000000000 R09: 0000000000000000 [ 741.761406][T21922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.761417][T21922] R13: 0000000000000000 R14: 00007f5b901b5fa0 R15: 00007f5b902dfa28 [ 741.761448][T21922] [ 742.069540][T21884] "syz.0.1995" (21884) uses obsolete ecb(arc4) skcipher [ 742.597070][ T5877] usbhid 2-1:0.0: can't add hid device: -71 [ 742.605776][ T5877] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 742.681967][ T5920] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 742.745178][ T5877] usb 2-1: USB disconnect, device number 102 [ 742.948919][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 742.958274][ T5920] usb 5-1: config 0 has an invalid interface number: 17 but max is 0 [ 742.967974][ T5920] usb 5-1: config 0 has no interface number 0 [ 742.978092][ T5920] usb 5-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 742.987736][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.996335][ T5920] usb 5-1: Product: syz [ 743.000774][ T5920] usb 5-1: Manufacturer: syz [ 743.006997][ T5920] usb 5-1: SerialNumber: syz [ 743.026947][ T5920] usb 5-1: config 0 descriptor?? [ 743.059542][ T5920] usb 5-1: Found UVC 0.00 device syz (0408:4034) [ 743.076804][ T5920] usb 5-1: No valid video chain found. [ 743.174084][T21943] binder: 21940:21943 ioctl c0306201 2000000003c0 returned -14 [ 743.255270][T21927] netlink: 'syz.4.1999': attribute type 2 has an invalid length. [ 743.270679][ T5920] usb 5-1: USB disconnect, device number 106 [ 743.651411][T11050] usbhid 1-1:0.0: can't add hid device: -71 [ 743.672505][T11050] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 743.712953][T11050] usb 1-1: USB disconnect, device number 120 [ 744.916547][T11050] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 745.097441][T11050] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 745.113554][T11050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 745.160634][T11050] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 745.191489][T11050] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.327970][T11050] usb 5-1: Product: syz [ 745.332194][T11050] usb 5-1: Manufacturer: syz [ 745.358932][T11050] usb 5-1: SerialNumber: syz [ 745.382815][T11050] usb 5-1: config 0 descriptor?? [ 745.526136][ T5920] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 745.680780][T11050] input: Griffin PowerMate as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input37 [ 745.695966][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 745.713215][ C0] powermate: config urb returned -71 [ 745.719394][ C0] powermate: config urb returned -71 [ 745.725107][ C0] powermate: config urb returned -71 [ 745.735105][ C0] powermate: config urb returned -71 [ 745.745746][T11050] usb 5-1: USB disconnect, device number 107 [ 745.751848][ C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 745.859085][ T5920] usb 4-1: unable to get BOS descriptor or descriptor too short [ 745.931651][ T5920] usb 4-1: config 1 interface 0 has no altsetting 0 [ 746.073689][ T5920] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 746.119693][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.200273][ T5920] usb 4-1: Product: syz [ 746.204509][ T5920] usb 4-1: Manufacturer: syz [ 746.340713][ T5920] usb 4-1: SerialNumber: syz [ 746.633244][T22013] IPVS: set_ctl: invalid protocol: 12 172.30.1.4:20001 [ 746.729141][T22045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2013'. [ 746.775527][ T5877] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 746.982393][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.994651][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.011060][ T5877] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 747.103336][ T5877] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 747.142862][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.143983][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.157851][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.301254][ T5877] usb 2-1: config 0 descriptor?? [ 748.163218][T22051] "syz.1.2015" (22051) uses obsolete ecb(arc4) skcipher [ 748.587027][T22085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 748.597875][T22085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 748.606640][T22085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 748.618078][T22085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 748.629357][T22085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 748.679367][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 748.692827][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 748.695970][ T5875] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 748.713689][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 748.741985][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 748.753989][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 749.033118][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 749.121082][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.140975][ T5875] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 749.165912][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.242214][ T5875] usb 5-1: Product: syz [ 749.286493][ T5875] usb 5-1: Manufacturer: syz [ 749.292203][ T5875] usb 5-1: SerialNumber: syz [ 749.363071][ T5875] usb 5-1: config 0 descriptor?? [ 749.485551][ T5875] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 749.533832][ T5875] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 749.563487][ T5920] usbhid 4-1:1.0: can't add hid device: -71 [ 749.570927][ T5920] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 749.593083][ T5920] usb 4-1: USB disconnect, device number 104 [ 749.699838][T22077] Cannot find add_set index 3 as target [ 750.820488][ T5835] Bluetooth: hci3: command tx timeout [ 750.973799][ T5877] usbhid 2-1:0.0: can't add hid device: -71 [ 750.984896][ T5877] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 751.071032][T22109] chnl_net:caif_netlink_parms(): no params data found [ 751.080066][ T24] usb 5-1: USB disconnect, device number 108 [ 751.127093][ T5877] usb 2-1: USB disconnect, device number 103 [ 751.577934][T22109] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.603691][T22109] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.620514][T22109] bridge_slave_0: entered allmulticast mode [ 751.642342][T22109] bridge_slave_0: entered promiscuous mode [ 751.668000][T22109] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.685638][T22109] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.694501][T22109] bridge_slave_1: entered allmulticast mode [ 751.706537][T22109] bridge_slave_1: entered promiscuous mode [ 751.782926][T22109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.812372][T22109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.887539][ T24] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 751.953168][T22109] team0: Port device team_slave_0 added [ 751.975337][T22109] team0: Port device team_slave_1 added [ 752.045495][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 752.056953][ T24] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 752.077122][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.093268][T22109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.103151][ T24] usb 1-1: config 0 descriptor?? [ 752.108718][T22109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.139972][ T24] as10x_usb: device has been detected [ 752.150544][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 752.167887][T22109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.188898][ T24] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 752.207196][T22109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.224015][ T24] as10x_usb: error during firmware upload part1 [ 752.237963][T22109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.266789][ T24] Registered device nBox DVB-T Dongle [ 752.268352][ T5875] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 752.274566][T22109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.345011][ T24] usb 1-1: USB disconnect, device number 121 [ 752.390932][ T24] Unregistered device nBox DVB-T Dongle [ 752.393688][ T24] as10x_usb: device has been disconnected [ 752.489537][ T5875] usb 5-1: not running at top speed; connect to a high speed hub [ 752.505137][T22109] hsr_slave_0: entered promiscuous mode [ 752.514809][ T5875] usb 5-1: config 1 has an invalid interface number: 53 but max is 0 [ 752.515315][T22109] hsr_slave_1: entered promiscuous mode [ 752.530896][ T5875] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 752.563530][ T5875] usb 5-1: config 1 has no interface number 0 [ 752.577510][ T5875] usb 5-1: config 1 interface 53 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 752.610849][ T5875] usb 5-1: config 1 interface 53 has no altsetting 0 [ 752.625870][ T5875] usb 5-1: Dual-Role OTG device on HNP port [ 752.632506][ T5875] usb 5-1: New USB device found, idVendor=05d1, idProduct=1019, bcdDevice=60.e5 [ 752.642705][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.653824][ T5875] usb 5-1: Product: syz [ 752.659370][ T5875] usb 5-1: Manufacturer: syz [ 752.664490][ T5875] usb 5-1: SerialNumber: syz [ 752.855678][ T24] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 752.896213][ T5835] Bluetooth: hci3: command tx timeout [ 752.982392][ T5875] ftdi_sio 5-1:1.53: FTDI USB Serial Device converter detected [ 752.989821][ T5920] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 753.007333][ T5875] ftdi_sio ttyUSB0: unknown device type: 0x60e5 [ 753.035795][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 753.059791][ T24] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 753.061496][ T5875] usb 5-1: USB disconnect, device number 109 [ 753.110195][ T5875] ftdi_sio 5-1:1.53: device disconnected [ 753.155683][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.178518][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 753.224954][ T24] usb 1-1: config 0 descriptor?? [ 753.302077][ T5920] usb 2-1: unable to get BOS descriptor or descriptor too short [ 753.320773][ T24] as10x_usb: device has been detected [ 753.352110][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 753.398646][ T5920] usb 2-1: config 1 interface 0 has no altsetting 0 [ 753.409848][T22109] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.463959][ T24] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 753.483849][ T24] as10x_usb: error during firmware upload part1 [ 753.514906][T22328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.531182][T22328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.547465][ T24] Registered device nBox DVB-T Dongle [ 753.572617][ T5875] usb 1-1: USB disconnect, device number 122 [ 753.591892][ T5920] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 753.603338][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.612574][ T5920] usb 2-1: Product: syz [ 753.619861][ T5920] usb 2-1: Manufacturer: syz [ 753.624983][ T5920] usb 2-1: SerialNumber: syz [ 753.663437][ T5875] Unregistered device nBox DVB-T Dongle [ 753.723979][ T5875] as10x_usb: device has been disconnected [ 754.174906][T22109] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.231879][T22502] IPVS: set_ctl: invalid protocol: 12 172.30.1.2:20001 [ 754.405923][T11050] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 754.599892][T22109] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.705532][T11050] usb 5-1: Using ep0 maxpacket: 16 [ 754.824027][T11050] usb 5-1: unable to get BOS descriptor or descriptor too short [ 754.850739][T11050] usb 5-1: config 1 interface 0 has no altsetting 0 [ 754.863422][T11050] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 754.874468][T11050] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.993387][ T5835] Bluetooth: hci3: command tx timeout [ 755.003043][T11050] usb 5-1: Product: syz [ 755.007761][T11050] usb 5-1: Manufacturer: syz [ 755.013190][T11050] usb 5-1: SerialNumber: syz [ 755.235921][T22109] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.268988][T22574] IPVS: set_ctl: invalid protocol: 12 172.30.1.5:20001 [ 755.455709][ T5877] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 755.639981][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.675574][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.792557][ T5877] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 755.951154][ T5877] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 755.985437][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.038785][ T5877] usb 1-1: config 0 descriptor?? [ 756.101965][T22109] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 756.132249][T22109] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 756.152696][T22109] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 756.220880][T22109] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 756.604158][T22593] "syz.0.2032" (22593) uses obsolete ecb(arc4) skcipher [ 756.832978][T22109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.923711][T22109] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.990933][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.998188][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 757.055663][ T5835] Bluetooth: hci3: command tx timeout [ 757.127247][T14275] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.134447][T14275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.539386][T22109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.694426][ T5920] usbhid 2-1:1.0: can't add hid device: -71 [ 757.757510][ T5920] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 757.821814][ T5920] usb 2-1: USB disconnect, device number 104 [ 757.850272][T22109] veth0_vlan: entered promiscuous mode [ 757.894889][T11050] usbhid 5-1:1.0: can't add hid device: -71 [ 757.912474][T11050] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 757.951936][T22109] veth1_vlan: entered promiscuous mode [ 757.976176][T11050] usb 5-1: USB disconnect, device number 110 [ 758.092460][ T5877] usbhid 1-1:0.0: can't add hid device: -71 [ 758.107828][ T5877] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 758.217252][T22109] veth0_macvtap: entered promiscuous mode [ 758.224604][T22628] xt_CT: No such helper "pptp" [ 758.237184][T22109] veth1_macvtap: entered promiscuous mode [ 758.325262][T22109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.374296][ T5877] usb 1-1: USB disconnect, device number 123 [ 758.388707][T22109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.398996][T22109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.410538][T22109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.422246][T22109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.434438][T22109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.448670][T22109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.502736][T22109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.530516][T22109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.569006][T22109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.583521][T22109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.599482][T22109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.611599][T22109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.627323][T22109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.642410][T22109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.665226][T22109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.703609][T22109] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.717598][T22109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.739412][T22109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.752140][T22109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.973777][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.005580][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.057000][T22676] xt_CT: No such helper "pptp" [ 759.153796][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.162646][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.354281][T22699] vlan0: entered promiscuous mode [ 759.376691][T22699] FAULT_INJECTION: forcing a failure. [ 759.376691][T22699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.436360][T22699] CPU: 1 UID: 0 PID: 22699 Comm: syz.2.2014 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 759.436390][T22699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 759.436404][T22699] Call Trace: [ 759.436412][T22699] [ 759.436423][T22699] dump_stack_lvl+0x189/0x250 [ 759.436457][T22699] ? __lock_acquire+0xaac/0xd20 [ 759.436489][T22699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 759.436519][T22699] ? __pfx__printk+0x10/0x10 [ 759.436540][T22699] ? __might_fault+0xb0/0x130 [ 759.436578][T22699] should_fail_ex+0x414/0x560 [ 759.436615][T22699] _copy_from_user+0x2d/0xb0 [ 759.436643][T22699] do_ipv6_setsockopt+0x329/0x2fb0 [ 759.436678][T22699] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 759.436704][T22699] ? __might_fault+0xb0/0x130 [ 759.436731][T22699] ? _parse_integer_limit+0x1ae/0x1f0 [ 759.436755][T22699] ? aa_label_sk_perm+0x413/0x560 [ 759.436790][T22699] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 759.436836][T22699] ? __pfx___might_resched+0x10/0x10 [ 759.436862][T22699] ? rcu_read_lock_any_held+0xb3/0x120 [ 759.436883][T22699] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 759.436924][T22699] ipv6_setsockopt+0x59/0x170 [ 759.436954][T22699] rawv6_setsockopt+0x23b/0x5b0 [ 759.436983][T22699] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 759.437010][T22699] ? aa_sock_opt_perm+0x74/0x110 [ 759.437033][T22699] ? sock_common_setsockopt+0x36/0xc0 [ 759.437054][T22699] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 759.437079][T22699] do_sock_setsockopt+0x257/0x3e0 [ 759.437108][T22699] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 759.437131][T22699] ? __fget_files+0x2a/0x420 [ 759.437162][T22699] ? __fget_files+0x3a0/0x420 [ 759.437188][T22699] ? __fget_files+0x2a/0x420 [ 759.437222][T22699] __x64_sys_setsockopt+0x18b/0x220 [ 759.437255][T22699] do_syscall_64+0xf6/0x210 [ 759.437281][T22699] ? clear_bhb_loop+0x45/0xa0 [ 759.437307][T22699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.437327][T22699] RIP: 0033:0x7fdb4178e969 [ 759.437346][T22699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.437364][T22699] RSP: 002b:00007fdb42660038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 759.437386][T22699] RAX: ffffffffffffffda RBX: 00007fdb419b5fa0 RCX: 00007fdb4178e969 [ 759.437402][T22699] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 759.437415][T22699] RBP: 00007fdb42660090 R08: 00000000000004b0 R09: 0000000000000000 [ 759.437428][T22699] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 759.437442][T22699] R13: 0000000000000000 R14: 00007fdb419b5fa0 R15: 00007fdb41adfa28 [ 759.437473][T22699] [ 760.248961][T22721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2048'. [ 760.356267][T22722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2048'. [ 760.365603][T22722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2048'. [ 760.395519][ T5875] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 760.403296][T11050] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 760.444497][T22722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2048'. [ 760.463479][T22721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2048'. [ 760.481255][T22721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2048'. [ 760.568993][T22730] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0003 with DS=0x9 [ 760.578628][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 760.589959][ T5875] usb 4-1: unable to get BOS descriptor or descriptor too short [ 760.598226][T11050] usb 1-1: Using ep0 maxpacket: 16 [ 760.606481][ T5875] usb 4-1: config 1 interface 0 has no altsetting 0 [ 760.615464][T11050] usb 1-1: unable to get BOS descriptor or descriptor too short [ 760.627294][T11050] usb 1-1: config 1 interface 0 has no altsetting 0 [ 760.635249][ T5875] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 760.644690][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.656119][ T5875] usb 4-1: Product: syz [ 760.660412][ T5875] usb 4-1: Manufacturer: syz [ 760.694613][ T5875] usb 4-1: SerialNumber: syz [ 760.743765][T22730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2051'. [ 760.761977][T11050] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 760.771944][T11050] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.775686][ T5920] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 760.786673][T11050] usb 1-1: Product: syz [ 760.794545][T11050] usb 1-1: Manufacturer: syz [ 760.799482][T11050] usb 1-1: SerialNumber: syz [ 760.833057][T22736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.965024][T22701] IPVS: set_ctl: invalid protocol: 12 172.30.1.4:20001 [ 760.984826][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.012297][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.034412][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 761.053449][T22704] IPVS: set_ctl: invalid protocol: 12 172.30.1.1:20001 [ 761.072438][ T5920] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 761.082084][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.110754][ T5920] usb 5-1: config 0 descriptor?? [ 761.344017][T22752] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2057'. [ 761.367734][T22752] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.443085][T22752] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2057'. [ 761.563551][T22725] "syz.4.2050" (22725) uses obsolete ecb(arc4) skcipher [ 762.599124][ T5875] usbhid 4-1:1.0: can't add hid device: -71 [ 762.629988][ T5875] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 762.672023][ T5875] usb 4-1: USB disconnect, device number 105 [ 763.165730][ T9] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 763.397078][ T5875] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 763.779287][ T5875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.790960][ T5875] usb 4-1: config 0 has no interfaces? [ 763.812109][ T9] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 763.839325][ T5875] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 763.850900][ T9] usb 2-1: config 0 has no interface number 0 [ 763.861963][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.890366][ T9] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 763.909536][T11050] usbhid 1-1:1.0: can't add hid device: -71 [ 763.920631][T11050] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 763.937432][ T5875] usb 4-1: config 0 descriptor?? [ 763.943139][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.969775][ T9] usb 2-1: Product: syz [ 763.974009][ T9] usb 2-1: Manufacturer: syz [ 763.986697][T11050] usb 1-1: USB disconnect, device number 124 [ 764.028491][ T9] usb 2-1: SerialNumber: syz [ 764.071085][ T9] usb 2-1: config 0 descriptor?? [ 764.132281][ T5920] usbhid 5-1:0.0: can't add hid device: -71 [ 764.138533][ T5920] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 764.144216][T22817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2061'. [ 764.202036][ T5920] usb 5-1: USB disconnect, device number 111 [ 764.298207][T22800] binder: BINDER_SET_CONTEXT_MGR already set [ 764.304267][T22800] binder: 22792:22800 ioctl 4018620d 200000000040 returned -16 [ 764.856063][ T5877] usb 1-1: new low-speed USB device number 125 using dummy_hcd [ 765.017496][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 765.037913][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.083918][ T5877] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 765.120339][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.132422][ T5877] usb 1-1: config 0 descriptor?? [ 765.553947][ T5877] kone 0003:1E7D:2CED.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.0-1/input0 [ 765.915911][ T5877] usb 2-1: USB disconnect, device number 105 [ 765.964121][ T5920] usb 1-1: USB disconnect, device number 125 [ 766.113538][T22884] process '/newroot/388/file0' started with executable stack [ 766.252818][ T5920] usb 4-1: USB disconnect, device number 106 [ 766.416971][T22904] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0005 with DS=0x9 [ 766.459103][T22904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2074'. [ 766.655646][ T47] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 767.115819][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 767.308633][ T47] usb 1-1: unable to get BOS descriptor or descriptor too short [ 767.424506][ T47] usb 1-1: config 1 interface 0 has no altsetting 0 [ 767.445138][ T47] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 767.461985][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.489377][ T47] usb 1-1: Product: syz [ 767.506521][ T47] usb 1-1: Manufacturer: syz [ 767.528447][ T47] usb 1-1: SerialNumber: syz [ 767.642581][T22920] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0005 with DS=0x9 [ 767.664990][T22920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2078'. [ 767.676341][T22920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2078'. [ 767.781574][T22898] IPVS: set_ctl: invalid protocol: 12 172.30.1.1:20001 [ 768.264912][T22923] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0005 with DS=0x9 [ 768.329292][T22923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2079'. [ 768.466972][T22928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2079'. [ 769.066196][T22945] FAULT_INJECTION: forcing a failure. [ 769.066196][T22945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.080091][T22945] CPU: 0 UID: 0 PID: 22945 Comm: syz.1.2086 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 769.080120][T22945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 769.080132][T22945] Call Trace: [ 769.080141][T22945] [ 769.080150][T22945] dump_stack_lvl+0x189/0x250 [ 769.080185][T22945] ? __pfx_dump_stack_lvl+0x10/0x10 [ 769.080216][T22945] ? __pfx__printk+0x10/0x10 [ 769.080240][T22945] ? get_sigframe+0x596/0x7d0 [ 769.080265][T22945] should_fail_ex+0x414/0x560 [ 769.080293][T22945] _copy_to_user+0x31/0xb0 [ 769.080315][T22945] copy_siginfo_to_user+0x22/0xc0 [ 769.080335][T22945] x64_setup_rt_frame+0x777/0xd40 [ 769.080377][T22945] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 769.080407][T22945] arch_do_signal_or_restart+0x3e5/0x780 [ 769.080426][T22945] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 769.080450][T22945] ? local_irq_enable_exit_to_user+0x5/0x10 [ 769.080477][T22945] syscall_exit_to_user_mode+0x8b/0x120 [ 769.080505][T22945] do_syscall_64+0x103/0x210 [ 769.080530][T22945] ? clear_bhb_loop+0x45/0xa0 [ 769.080555][T22945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.080571][T22945] RIP: 0033:0x7f6dd1f8e967 [ 769.080584][T22945] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 769.080597][T22945] RSP: 002b:00007f6dcfdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 769.080612][T22945] RAX: 0000000000000000 RBX: 00007f6dd21b5fa0 RCX: 00007f6dd1f8e969 [ 769.080623][T22945] RDX: 0000000000002020 RSI: 0000200000000b00 RDI: 0000000000000003 [ 769.080637][T22945] RBP: 00007f6dcfdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 769.080650][T22945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 769.080662][T22945] R13: 0000000000000000 R14: 00007f6dd21b5fa0 R15: 00007f6dd22dfa28 [ 769.080691][T22945] [ 769.175577][ T5878] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 769.368130][T22949] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0003 with DS=0x9 [ 769.400756][T22949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2087'. [ 769.427300][ T47] usbhid 1-1:1.0: can't add hid device: -71 [ 769.433478][ T47] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 769.585619][T22958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2089'. [ 769.619495][ T5878] usb 5-1: descriptor type invalid, skip [ 769.625540][ T47] usb 1-1: USB disconnect, device number 126 [ 769.637650][ T5878] usb 5-1: descriptor type invalid, skip [ 769.648272][T22958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2089'. [ 769.667909][ T5878] usb 5-1: config 7 has an invalid interface number: 222 but max is 0 [ 769.687106][ T5878] usb 5-1: config 7 has no interface number 0 [ 769.705024][ T5878] usb 5-1: config 7 interface 222 altsetting 89 has an invalid descriptor for endpoint zero, skipping [ 769.734201][ T5878] usb 5-1: config 7 interface 222 altsetting 89 has a duplicate endpoint with address 0x5, skipping [ 769.750920][ T5878] usb 5-1: config 7 interface 222 has no altsetting 0 [ 769.776208][ T5878] usb 5-1: New USB device found, idVendor=08ca, idProduct=0020, bcdDevice=56.f4 [ 769.790746][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.799263][ T5878] usb 5-1: Product: syz [ 769.803439][ T5878] usb 5-1: Manufacturer: syz [ 769.813397][ T5878] usb 5-1: SerialNumber: syz [ 770.143179][T22978] usb usb8: usbfs: process 22978 (syz.2.2092) did not claim interface 0 before use [ 770.152664][ T47] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 770.306002][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 770.313516][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.325474][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.336173][ T47] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 770.357476][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.406669][ T47] usb 1-1: config 0 descriptor?? [ 770.417873][ T9] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 770.563415][T22990] syz_tun: entered allmulticast mode [ 770.578734][T22990] syz_tun: left allmulticast mode [ 770.616706][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 770.647246][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.743233][ T9] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 770.752700][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.767153][ T9] usb 3-1: Product: syz [ 770.771495][ T9] usb 3-1: Manufacturer: syz [ 770.781364][ T9] usb 3-1: SerialNumber: syz [ 770.794953][ T9] usb 3-1: config 0 descriptor?? [ 770.867217][ T47] savu 0003:1E7D:2D5A.0016: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 771.090003][ T5877] usb 1-1: USB disconnect, device number 127 [ 771.237257][ T47] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 771.395926][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 771.415496][ T9] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 771.417561][ T47] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 771.451300][ T47] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 771.595215][ T47] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 771.651332][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 771.651528][ T47] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 771.672686][ T47] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 771.701956][ T47] usb 2-1: Product: syz [ 771.706246][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 771.715265][ T47] usb 2-1: Manufacturer: syz [ 771.720699][ T47] usb 2-1: SerialNumber: syz [ 771.744296][ T47] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input39 [ 771.796835][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 771.875325][ T5878] aiptek 5-1:7.222: interface has no int in endpoints, but must have minimum 1 [ 771.891926][ T9] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 771.967357][ T5878] usb 5-1: USB disconnect, device number 112 [ 772.022700][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.055496][ T9] usb 4-1: Product: syz [ 772.071492][ T9] usb 4-1: Manufacturer: syz [ 772.109247][ T9] usb 4-1: SerialNumber: syz [ 772.155821][T11050] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 772.352151][T11050] usb 1-1: Using ep0 maxpacket: 32 [ 772.371213][ T2150] usb 2-1: USB disconnect, device number 106 [ 772.444032][ T2150] appletouch 2-1:1.0: input: appletouch disconnected [ 772.472212][T23010] IPVS: set_ctl: invalid protocol: 12 172.30.1.4:20001 [ 773.815811][ T2150] usb 3-1: USB disconnect, device number 122 [ 773.984122][T11050] usb 1-1: unable to get BOS descriptor or descriptor too short [ 774.000234][T11050] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 774.165646][T11050] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 774.212244][T11050] usb 1-1: can't read configurations, error -71 [ 774.395500][ T5878] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 774.611415][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 774.621370][T23116] netlink: zone id is out of range [ 775.733981][ T5878] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 775.764576][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.778870][ T5878] usb 3-1: Product: syz [ 775.783086][ T5878] usb 3-1: Manufacturer: syz [ 775.816513][ T5878] usb 3-1: SerialNumber: syz [ 775.827067][ T9] usbhid 4-1:1.0: can't add hid device: -71 [ 775.845131][ T5878] usb 3-1: config 0 descriptor?? [ 775.852799][ T9] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 775.974723][ T9] usb 4-1: USB disconnect, device number 107 [ 776.045790][ T5920] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 776.070882][ T5878] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 776.195705][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 776.204089][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 776.228071][ T5920] usb 2-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 776.273316][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.297561][ T9] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 776.342946][ T5920] usb 2-1: config 0 descriptor?? [ 776.468736][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 776.482632][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.503175][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.535834][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 776.559716][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.614884][ T9] usb 4-1: config 0 descriptor?? [ 776.872055][T23152] FAULT_INJECTION: forcing a failure. [ 776.872055][T23152] name failslab, interval 1, probability 0, space 0, times 0 [ 776.905664][T23152] CPU: 1 UID: 0 PID: 23152 Comm: syz.1.2108 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 776.905698][T23152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 776.905711][T23152] Call Trace: [ 776.905720][T23152] [ 776.905729][T23152] dump_stack_lvl+0x189/0x250 [ 776.905766][T23152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 776.905797][T23152] ? __pfx__printk+0x10/0x10 [ 776.905822][T23152] ? __pfx___might_resched+0x10/0x10 [ 776.905840][T23152] ? fs_reclaim_acquire+0x7d/0x100 [ 776.905874][T23152] should_fail_ex+0x414/0x560 [ 776.905911][T23152] should_failslab+0xa8/0x100 [ 776.905939][T23152] kmem_cache_alloc_noprof+0x73/0x3c0 [ 776.905963][T23152] ? fuse_get_req+0x7b9/0x10b0 [ 776.905995][T23152] fuse_get_req+0x7b9/0x10b0 [ 776.906020][T23152] ? stack_depot_save_flags+0x40/0x910 [ 776.906051][T23152] ? __pfx_fuse_get_req+0x10/0x10 [ 776.906082][T23152] ? fuse_lookup_name+0x1b5/0x860 [ 776.906099][T23152] ? fuse_lookup+0x13e/0x5a0 [ 776.906117][T23152] ? lookup_one_qstr_excl_raw+0x115/0x280 [ 776.906145][T23152] ? do_unlinkat+0x1d6/0x560 [ 776.906165][T23152] ? __x64_sys_unlink+0x47/0x50 [ 776.906184][T23152] ? do_syscall_64+0xf6/0x210 [ 776.906216][T23152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.906251][T23152] __fuse_simple_request+0x2aa/0x18d0 [ 776.906286][T23152] ? __pfx___fuse_simple_request+0x10/0x10 [ 776.906331][T23152] ? __kasan_kmalloc+0x93/0xb0 [ 776.906365][T23152] fuse_lookup_name+0x34c/0x860 [ 776.906391][T23152] ? lockdep_hardirqs_on+0x9c/0x150 [ 776.906418][T23152] ? __pfx_fuse_lookup_name+0x10/0x10 [ 776.906464][T23152] ? percpu_ref_get_many+0x19/0x140 [ 776.906506][T23152] fuse_lookup+0x13e/0x5a0 [ 776.906531][T23152] ? __pfx_fuse_lookup+0x10/0x10 [ 776.906567][T23152] ? _raw_spin_unlock+0x28/0x50 [ 776.906587][T23152] ? d_alloc+0x144/0x190 [ 776.906619][T23152] lookup_one_qstr_excl_raw+0x115/0x280 [ 776.906654][T23152] do_unlinkat+0x1d6/0x560 [ 776.906683][T23152] ? __pfx_do_unlinkat+0x10/0x10 [ 776.906706][T23152] ? strncpy_from_user+0x150/0x290 [ 776.906740][T23152] ? getname_flags+0x1e5/0x540 [ 776.906771][T23152] __x64_sys_unlink+0x47/0x50 [ 776.906794][T23152] do_syscall_64+0xf6/0x210 [ 776.906820][T23152] ? clear_bhb_loop+0x45/0xa0 [ 776.906844][T23152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.906863][T23152] RIP: 0033:0x7f6dd1f8e969 [ 776.906882][T23152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.906900][T23152] RSP: 002b:00007f6dcfdb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 776.906922][T23152] RAX: ffffffffffffffda RBX: 00007f6dd21b6160 RCX: 00007f6dd1f8e969 [ 776.906938][T23152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 776.906951][T23152] RBP: 00007f6dcfdb4090 R08: 0000000000000000 R09: 0000000000000000 [ 776.906963][T23152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.906975][T23152] R13: 0000000000000000 R14: 00007f6dd21b6160 R15: 00007f6dd22dfa28 [ 776.907006][T23152] [ 777.091033][ T9] savu 0003:1E7D:2D5A.0017: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 777.308663][ T5875] usb 4-1: USB disconnect, device number 108 [ 777.515637][ T9] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 777.675895][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 777.684267][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 777.695849][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 777.707863][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 777.725031][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 777.746636][ T9] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 777.755082][ T9] usb 5-1: Product: syz [ 777.759709][ T9] usb 5-1: Manufacturer: syz [ 777.765102][ T9] usb 5-1: SerialNumber: syz [ 777.802200][ T9] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input41 [ 778.030382][ T5878] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 778.107934][ T5878] usb 3-1: USB disconnect, device number 123 [ 778.248800][ T9] usb 5-1: USB disconnect, device number 113 [ 778.287703][ T9] appletouch 5-1:1.0: input: appletouch disconnected [ 778.752973][T23219] usb usb8: usbfs: process 23219 (syz.0.2115) did not claim interface 0 before use [ 778.886076][ T5920] usbhid 2-1:0.0: can't add hid device: -71 [ 778.892166][ T5920] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 779.045705][ T5877] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 779.057078][ T5920] usb 2-1: USB disconnect, device number 107 [ 779.148679][T23242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2118'. [ 779.183202][T23242] veth1_virt_wifi: entered promiscuous mode [ 779.189503][T23242] veth1_virt_wifi: entered allmulticast mode [ 779.238610][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 779.349380][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 779.349401][ T30] audit: type=1326 audit(1746460415.597:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23247 comm="syz.3.2121" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e5ad8e969 code=0x0 [ 779.384933][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.423221][ T5877] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 779.477354][ T5878] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 779.504556][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.549748][ T5877] usb 1-1: Product: syz [ 779.571505][ T5877] usb 1-1: Manufacturer: syz [ 779.696078][ T5878] usb 5-1: Using ep0 maxpacket: 16 [ 779.775914][ T5877] usb 1-1: SerialNumber: syz [ 779.908150][ T5877] usb 1-1: config 0 descriptor?? [ 779.915021][ T5878] usb 5-1: unable to get BOS descriptor or descriptor too short [ 779.924532][ T5878] usb 5-1: config 1 interface 0 has no altsetting 0 [ 779.934402][ T5878] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 779.943600][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.951867][ T5878] usb 5-1: Product: syz [ 779.956290][ T5878] usb 5-1: Manufacturer: syz [ 779.960915][ T5878] usb 5-1: SerialNumber: syz [ 780.048730][ T5875] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 780.176579][T23274] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 780.344221][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 780.362040][T23243] IPVS: set_ctl: invalid protocol: 12 172.30.1.5:20001 [ 780.472304][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.501915][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.558125][ T5875] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 780.591153][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.660376][ T5875] usb 3-1: config 0 descriptor?? [ 781.030090][T23306] fuse: Unknown parameter 'f‚' [ 781.113002][ T5875] savu 0003:1E7D:2D5A.0018: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 781.335676][ T5877] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 781.475108][ T5875] usb 3-1: USB disconnect, device number 124 [ 781.608943][ T5877] usb 4-1: Using ep0 maxpacket: 32 [ 781.654994][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.696788][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.747203][ T5877] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 781.773463][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.804294][ T5877] usb 4-1: config 0 descriptor?? [ 781.858812][ T5877] hub 4-1:0.0: USB hub found [ 782.740791][ T5920] usb 1-1: USB disconnect, device number 4 [ 783.286652][ T5878] usbhid 5-1:1.0: can't add hid device: -71 [ 783.293477][ T5878] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 783.465866][ T5878] usb 5-1: USB disconnect, device number 114 [ 785.639105][T23410] delete_channel: no stack [ 786.222052][ T5877] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 786.300526][ T5877] usbhid 4-1:0.0: can't add hid device: -71 [ 786.326492][ T5877] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 786.413808][ T5877] usb 4-1: USB disconnect, device number 109 [ 786.523139][T23460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2140'. [ 786.735662][ T5878] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 786.917261][T23470] usb usb8: usbfs: process 23470 (syz.4.2141) did not claim interface 0 before use [ 786.958666][T23471] erspan0: left allmulticast mode [ 787.018896][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 787.063045][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.084645][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.087891][T23471] vlan0: left promiscuous mode [ 787.115964][ T5878] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 787.139253][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.167352][ T5878] usb 1-1: config 0 descriptor?? [ 787.195497][ T5875] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 787.246071][T23471] macvlan0: left allmulticast mode [ 787.258515][T23471] veth1_vlan: left allmulticast mode [ 787.354753][T23471] veth3: left promiscuous mode [ 787.372157][T23471] veth5: left promiscuous mode [ 787.426064][ T5920] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 787.625321][ T5878] savu 0003:1E7D:2D5A.0019: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 787.655570][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 787.670957][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.689825][ T5875] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 787.712080][T23489] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2144'. [ 787.721583][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.730521][ T5875] usb 5-1: Product: syz [ 787.737299][T23489] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2144'. [ 787.748739][ T5875] usb 5-1: Manufacturer: syz [ 787.754316][ T5875] usb 5-1: SerialNumber: syz [ 787.809751][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 787.832837][ T5920] usb 3-1: unable to get BOS descriptor or descriptor too short [ 787.842575][ T5875] usb 5-1: config 0 descriptor?? [ 787.860234][ T5920] usb 3-1: config 1 interface 0 has no altsetting 0 [ 787.905905][ T5877] usb 1-1: USB disconnect, device number 5 [ 787.971897][ T5920] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 788.032501][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.062187][ T5920] usb 3-1: Product: syz [ 788.070588][ T5920] usb 3-1: Manufacturer: syz [ 788.075764][ T5920] usb 3-1: SerialNumber: syz [ 788.300287][T23476] IPVS: set_ctl: invalid protocol: 12 172.30.1.3:20001 [ 788.309137][ T5875] IPVS: starting estimator thread 0... [ 788.332037][ T5920] usbhid 3-1:1.0: can't add hid device: -71 [ 788.338677][ T5920] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 788.373846][ T5920] usb 3-1: USB disconnect, device number 125 [ 788.445899][T23532] IPVS: using max 38 ests per chain, 91200 per kthread [ 789.176532][ T5875] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 789.426278][ T5875] usb 1-1: Using ep0 maxpacket: 8 [ 789.568293][ T5875] usb 1-1: config index 0 descriptor too short (expected 11315, got 45) [ 789.579479][ T5875] usb 1-1: config 111 has too many interfaces: 114, using maximum allowed: 32 [ 789.590138][ T5875] usb 1-1: config 111 has an invalid descriptor of length 111, skipping remainder of the config [ 789.602480][ T5875] usb 1-1: config 111 has 0 interfaces, different from the descriptor's value: 114 [ 789.617752][ T5875] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 789.634444][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.104552][ T5878] usb 5-1: USB disconnect, device number 115 [ 790.612305][T23599] netlink: 'syz.4.2148': attribute type 16 has an invalid length. [ 790.641940][T23599] netlink: 'syz.4.2148': attribute type 17 has an invalid length. [ 790.801956][T23599] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.809576][T23599] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.996501][T23608] loop5: detected capacity change from 0 to 1 [ 791.421588][T23599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 791.527770][T11050] usb 4-1: new low-speed USB device number 110 using dummy_hcd [ 791.571112][T23599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 791.648976][T23626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2152'. [ 791.698766][T11050] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 791.711778][T11050] usb 4-1: config 0 has no interface number 0 [ 791.730517][T11050] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 791.805749][ T5889] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 791.832896][ T5875] usb 1-1: string descriptor 0 read error: -71 [ 791.932781][T11050] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 791.992762][ T5875] usb 1-1: USB disconnect, device number 6 [ 792.013760][ T5889] usb 2-1: config 0 has no interfaces? [ 792.045241][T11050] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 792.122791][T23599] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.136401][T11050] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.164849][T11050] usb 4-1: config 0 descriptor?? [ 792.174745][T23613] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 792.197662][T11050] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 792.215573][ T5878] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 792.241272][T23599] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.281947][ T5889] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 792.291487][T23599] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.300984][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.326175][ T5889] usb 2-1: Product: syz [ 792.326176][T23599] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.336075][ T5889] usb 2-1: Manufacturer: syz [ 792.359341][ T5889] usb 2-1: SerialNumber: syz [ 792.382124][ T5889] usb 2-1: config 0 descriptor?? [ 792.397518][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 44, changing to 9 [ 792.408974][ T5878] usb 3-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00 [ 792.433462][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.460834][T23613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.470271][T23613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.577493][ T5878] usb 3-1: config 0 descriptor?? [ 792.659331][ T5877] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 792.875558][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 792.887443][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.922819][T23660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2151'. [ 792.993030][ T5878] hid (null): nested delimiters [ 793.027027][ T5878] hid-generic 0003:18D1:5030.001A: nested delimiters [ 793.035301][ T5878] hid-generic 0003:18D1:5030.001A: item 0 1 2 10 parsing failed [ 793.074797][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.117303][ T5878] hid-generic 0003:18D1:5030.001A: probe with driver hid-generic failed with error -22 [ 793.135956][ T5877] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 793.273049][ T5878] usb 3-1: USB disconnect, device number 126 [ 793.285654][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.376264][ T5877] usb 1-1: config 0 descriptor?? [ 793.856009][ T5877] savu 0003:1E7D:2D5A.001B: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 794.007436][ T9] usb 1-1: USB disconnect, device number 7 [ 794.361509][ T9] usb 4-1: USB disconnect, device number 110 [ 794.396391][T23705] usb usb8: usbfs: process 23705 (syz.4.2158) did not claim interface 0 before use [ 794.418486][T23704] FAULT_INJECTION: forcing a failure. [ 794.418486][T23704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.433095][T23704] CPU: 1 UID: 0 PID: 23704 Comm: syz.2.2159 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 794.433121][T23704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 794.433133][T23704] Call Trace: [ 794.433142][T23704] [ 794.433151][T23704] dump_stack_lvl+0x189/0x250 [ 794.433190][T23704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 794.433219][T23704] ? __pfx__printk+0x10/0x10 [ 794.433253][T23704] should_fail_ex+0x414/0x560 [ 794.433292][T23704] _copy_to_user+0x31/0xb0 [ 794.433322][T23704] simple_read_from_buffer+0xe1/0x170 [ 794.433351][T23704] proc_fail_nth_read+0x1df/0x250 [ 794.433383][T23704] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 794.433413][T23704] ? rw_verify_area+0x258/0x650 [ 794.433434][T23704] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 794.433463][T23704] vfs_read+0x1fd/0x980 [ 794.433490][T23704] ? __pfx___mutex_lock+0x10/0x10 [ 794.433514][T23704] ? __pfx_vfs_read+0x10/0x10 [ 794.433537][T23704] ? __fget_files+0x2a/0x420 [ 794.433566][T23704] ? __fget_files+0x3a0/0x420 [ 794.433590][T23704] ? __fget_files+0x2a/0x420 [ 794.433625][T23704] ksys_read+0x145/0x250 [ 794.433646][T23704] ? rcu_is_watching+0x15/0xb0 [ 794.433679][T23704] ? __pfx_ksys_read+0x10/0x10 [ 794.433705][T23704] ? do_syscall_64+0xba/0x210 [ 794.433734][T23704] do_syscall_64+0xf6/0x210 [ 794.433759][T23704] ? clear_bhb_loop+0x45/0xa0 [ 794.433785][T23704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.433805][T23704] RIP: 0033:0x7fdb4178d37c [ 794.433824][T23704] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 794.433841][T23704] RSP: 002b:00007fdb42660030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 794.433863][T23704] RAX: ffffffffffffffda RBX: 00007fdb419b5fa0 RCX: 00007fdb4178d37c [ 794.433886][T23704] RDX: 000000000000000f RSI: 00007fdb426600a0 RDI: 0000000000000004 [ 794.433899][T23704] RBP: 00007fdb42660090 R08: 0000000000000000 R09: 0000000000000000 [ 794.433912][T23704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 794.433924][T23704] R13: 0000000000000000 R14: 00007fdb419b5fa0 R15: 00007fdb41adfa28 [ 794.433956][T23704] [ 794.900194][T23720] [ 794.902559][T23720] ===================================================== [ 794.909498][T23720] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 794.917055][T23720] 6.15.0-rc5-syzkaller #0 Not tainted [ 794.922431][T23720] ----------------------------------------------------- [ 794.929417][T23720] syz.0.2160/23720 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 794.937130][T23720] ffff8880347ab408 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 794.945885][T23720] [ 794.945885][T23720] and this task is already holding: [ 794.953256][T23720] ffff888028c84028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 794.963227][T23720] which would create a new lock dependency: [ 794.969181][T23720] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 794.977378][T23720] [ 794.977378][T23720] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 794.986833][T23720] (&dev->event_lock#2){..-.}-{3:3} [ 794.986865][T23720] [ 794.986865][T23720] ... which became SOFTIRQ-irq-safe at: [ 794.999749][T23720] lock_acquire+0x120/0x360 [ 795.004712][T23720] _raw_spin_lock_irqsave+0xa7/0xf0 [ 795.010017][T23720] input_event+0x7a/0xc0 [ 795.014365][T23720] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 795.020294][T23720] __usb_hcd_giveback_urb+0x417/0x690 [ 795.025833][T23720] dummy_timer+0x862/0x4550 [ 795.030619][T23720] __hrtimer_run_queues+0x529/0xc60 [ 795.035920][T23720] hrtimer_run_softirq+0x187/0x2b0 [ 795.041123][T23720] handle_softirqs+0x283/0x870 [ 795.045979][T23720] __irq_exit_rcu+0xca/0x1f0 [ 795.050648][T23720] irq_exit_rcu+0x9/0x30 [ 795.054971][T23720] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 795.060687][T23720] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 795.066748][T23720] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 795.072552][T23720] dummy_urb_enqueue+0x58a/0x780 [ 795.077578][T23720] usb_hcd_submit_urb+0x322/0x1aa0 [ 795.082770][T23720] atp_open+0x63/0xc0 [ 795.086836][T23720] input_open_device+0x1c2/0x360 [ 795.091859][T23720] mousedev_open_device+0xcc/0x150 [ 795.097063][T23720] mousedev_open+0x2ec/0x4a0 [ 795.101814][T23720] chrdev_open+0x4c9/0x5e0 [ 795.106444][T23720] do_dentry_open+0xdf0/0x1970 [ 795.111304][T23720] vfs_open+0x3b/0x340 [ 795.115644][T23720] path_openat+0x2ee5/0x3830 [ 795.120325][T23720] do_filp_open+0x1fa/0x410 [ 795.125191][T23720] do_sys_openat2+0x121/0x1c0 [ 795.129957][T23720] __x64_sys_openat+0x138/0x170 [ 795.134923][T23720] do_syscall_64+0xf6/0x210 [ 795.139520][T23720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.145645][T23720] [ 795.145645][T23720] to a SOFTIRQ-irq-unsafe lock: [ 795.152681][T23720] (tasklist_lock){.+.+}-{3:3} [ 795.152706][T23720] [ 795.152706][T23720] ... which became SOFTIRQ-irq-unsafe at: [ 795.165355][T23720] ... [ 795.165369][T23720] lock_acquire+0x120/0x360 [ 795.172557][T23720] _raw_read_lock+0x36/0x50 [ 795.177147][T23720] __do_wait+0xde/0x740 [ 795.181432][T23720] do_wait+0x1f8/0x520 [ 795.185593][T23720] kernel_wait+0xab/0x170 [ 795.190008][T23720] call_usermodehelper_exec_work+0xbe/0x230 [ 795.195997][T23720] process_scheduled_works+0xadb/0x17a0 [ 795.201720][T23720] worker_thread+0x8a0/0xda0 [ 795.206411][T23720] kthread+0x70e/0x8a0 [ 795.210656][T23720] ret_from_fork+0x4b/0x80 [ 795.215156][T23720] ret_from_fork_asm+0x1a/0x30 [ 795.219999][T23720] [ 795.219999][T23720] other info that might help us debug this: [ 795.219999][T23720] [ 795.230241][T23720] Chain exists of: [ 795.230241][T23720] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 795.230241][T23720] [ 795.243923][T23720] Possible interrupt unsafe locking scenario: [ 795.243923][T23720] [ 795.252239][T23720] CPU0 CPU1 [ 795.257603][T23720] ---- ---- [ 795.262960][T23720] lock(tasklist_lock); [ 795.267202][T23720] local_irq_disable(); [ 795.273949][T23720] lock(&dev->event_lock#2); [ 795.281149][T23720] lock(&client->buffer_lock); [ 795.288518][T23720] [ 795.291972][T23720] lock(&dev->event_lock#2); [ 795.296830][T23720] [ 795.296830][T23720] *** DEADLOCK *** [ 795.296830][T23720] [ 795.304966][T23720] 7 locks held by syz.0.2160/23720: [ 795.310158][T23720] #0: ffff8880293bc118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 795.319308][T23720] #1: ffff88801bf77230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 795.329412][T23720] #2: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 795.339088][T23720] #3: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 795.348707][T23720] #4: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 795.357863][T23720] #5: ffff888028c84028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 795.368078][T23720] #6: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 795.377129][T23720] [ 795.377129][T23720] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 795.387619][T23720] -> (&dev->event_lock#2){..-.}-{3:3} { [ 795.393267][T23720] IN-SOFTIRQ-W at: [ 795.397333][T23720] lock_acquire+0x120/0x360 [ 795.403665][T23720] _raw_spin_lock_irqsave+0xa7/0xf0 [ 795.410680][T23720] input_event+0x7a/0xc0 [ 795.416833][T23720] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 795.424290][T23720] __usb_hcd_giveback_urb+0x417/0x690 [ 795.431500][T23720] dummy_timer+0x862/0x4550 [ 795.437832][T23720] __hrtimer_run_queues+0x529/0xc60 [ 795.444858][T23720] hrtimer_run_softirq+0x187/0x2b0 [ 795.451813][T23720] handle_softirqs+0x283/0x870 [ 795.458422][T23720] __irq_exit_rcu+0xca/0x1f0 [ 795.464830][T23720] irq_exit_rcu+0x9/0x30 [ 795.470887][T23720] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 795.478378][T23720] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 795.486188][T23720] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 795.493729][T23720] dummy_urb_enqueue+0x58a/0x780 [ 795.500493][T23720] usb_hcd_submit_urb+0x322/0x1aa0 [ 795.507508][T23720] atp_open+0x63/0xc0 [ 795.513310][T23720] input_open_device+0x1c2/0x360 [ 795.520074][T23720] mousedev_open_device+0xcc/0x150 [ 795.527017][T23720] mousedev_open+0x2ec/0x4a0 [ 795.533427][T23720] chrdev_open+0x4c9/0x5e0 [ 795.539671][T23720] do_dentry_open+0xdf0/0x1970 [ 795.546260][T23720] vfs_open+0x3b/0x340 [ 795.552156][T23720] path_openat+0x2ee5/0x3830 [ 795.558563][T23720] do_filp_open+0x1fa/0x410 [ 795.564899][T23720] do_sys_openat2+0x121/0x1c0 [ 795.571461][T23720] __x64_sys_openat+0x138/0x170 [ 795.578144][T23720] do_syscall_64+0xf6/0x210 [ 795.584467][T23720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.592262][T23720] INITIAL USE at: [ 795.596239][T23720] lock_acquire+0x120/0x360 [ 795.602507][T23720] _raw_spin_lock_irqsave+0xa7/0xf0 [ 795.609435][T23720] input_inject_event+0xab/0x320 [ 795.616108][T23720] kbd_led_trigger_activate+0xbc/0x100 [ 795.623397][T23720] led_trigger_set+0x52a/0x950 [ 795.629901][T23720] led_trigger_set_default+0x215/0x250 [ 795.637118][T23720] led_classdev_register_ext+0x73d/0x930 [ 795.644494][T23720] input_leds_connect+0x517/0x790 [ 795.651255][T23720] input_register_device+0xceb/0x10b0 [ 795.658577][T23720] atkbd_connect+0x70e/0x9c0 [ 795.665020][T23720] serio_driver_probe+0x7f/0xa0 [ 795.671627][T23720] really_probe+0x26a/0x9a0 [ 795.677973][T23720] __driver_probe_device+0x18c/0x2f0 [ 795.685059][T23720] driver_probe_device+0x4f/0x430 [ 795.691845][T23720] __driver_attach+0x452/0x700 [ 795.698367][T23720] bus_for_each_dev+0x230/0x2b0 [ 795.704979][T23720] serio_handle_event+0x1a2/0x860 [ 795.711754][T23720] process_scheduled_works+0xadb/0x17a0 [ 795.719052][T23720] worker_thread+0x8a0/0xda0 [ 795.725389][T23720] kthread+0x70e/0x8a0 [ 795.731202][T23720] ret_from_fork+0x4b/0x80 [ 795.737361][T23720] ret_from_fork_asm+0x1a/0x30 [ 795.743889][T23720] } [ 795.746473][T23720] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 795.755586][T23720] -> (&client->buffer_lock){....}-{3:3} { [ 795.761326][T23720] INITIAL USE at: [ 795.765214][T23720] lock_acquire+0x120/0x360 [ 795.771289][T23720] _raw_spin_lock_irq+0xa2/0xf0 [ 795.777697][T23720] evdev_read+0x370/0xca0 [ 795.783594][T23720] vfs_read+0x1fd/0x980 [ 795.789304][T23720] ksys_read+0x145/0x250 [ 795.795106][T23720] do_syscall_64+0xf6/0x210 [ 795.801206][T23720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.808685][T23720] } [ 795.811560][T23720] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 795.819750][T23720] ... acquired at: [ 795.823650][T23720] lock_acquire+0x120/0x360 [ 795.828359][T23720] _raw_spin_lock+0x2e/0x40 [ 795.833038][T23720] evdev_pass_values+0xb9/0xbd0 [ 795.838189][T23720] evdev_events+0x1e6/0x340 [ 795.842886][T23720] input_pass_values+0x285/0x890 [ 795.848038][T23720] input_event_dispose+0x330/0x6b0 [ 795.853429][T23720] input_inject_event+0x1fe/0x320 [ 795.858642][T23720] evdev_write+0x2fc/0x480 [ 795.863238][T23720] vfs_write+0x27b/0xa90 [ 795.867671][T23720] ksys_write+0x145/0x250 [ 795.872321][T23720] do_syscall_64+0xf6/0x210 [ 795.877705][T23720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.883777][T23720] [ 795.886130][T23720] [ 795.886130][T23720] the dependencies between the lock to be acquired [ 795.886139][T23720] and SOFTIRQ-irq-unsafe lock: [ 795.900042][T23720] -> (tasklist_lock){.+.+}-{3:3} { [ 795.905374][T23720] HARDIRQ-ON-R at: [ 795.909543][T23720] lock_acquire+0x120/0x360 [ 795.916136][T23720] _raw_read_lock+0x36/0x50 [ 795.922667][T23720] __do_wait+0xde/0x740 [ 795.928838][T23720] do_wait+0x1f8/0x520 [ 795.934915][T23720] kernel_wait+0xab/0x170 [ 795.941266][T23720] call_usermodehelper_exec_work+0xbe/0x230 [ 795.949378][T23720] process_scheduled_works+0xadb/0x17a0 [ 795.956927][T23720] worker_thread+0x8a0/0xda0 [ 795.963510][T23720] kthread+0x70e/0x8a0 [ 795.969651][T23720] ret_from_fork+0x4b/0x80 [ 795.976063][T23720] ret_from_fork_asm+0x1a/0x30 [ 795.982852][T23720] SOFTIRQ-ON-R at: [ 795.987108][T23720] lock_acquire+0x120/0x360 [ 795.993632][T23720] _raw_read_lock+0x36/0x50 [ 796.000139][T23720] __do_wait+0xde/0x740 [ 796.006380][T23720] do_wait+0x1f8/0x520 [ 796.012533][T23720] kernel_wait+0xab/0x170 [ 796.018886][T23720] call_usermodehelper_exec_work+0xbe/0x230 [ 796.026984][T23720] process_scheduled_works+0xadb/0x17a0 [ 796.035182][T23720] worker_thread+0x8a0/0xda0 [ 796.041814][T23720] kthread+0x70e/0x8a0 [ 796.047990][T23720] ret_from_fork+0x4b/0x80 [ 796.054422][T23720] ret_from_fork_asm+0x1a/0x30 [ 796.061209][T23720] INITIAL USE at: [ 796.065298][T23720] lock_acquire+0x120/0x360 [ 796.071778][T23720] _raw_write_lock_irq+0xa2/0xf0 [ 796.078645][T23720] copy_process+0x21d5/0x3b80 [ 796.085290][T23720] kernel_clone+0x21e/0x870 [ 796.091824][T23720] user_mode_thread+0xdd/0x140 [ 796.098533][T23720] rest_init+0x23/0x300 [ 796.104634][T23720] start_kernel+0x470/0x4f0 [ 796.111067][T23720] x86_64_start_reservations+0x2a/0x30 [ 796.118469][T23720] x86_64_start_kernel+0x66/0x70 [ 796.125444][T23720] common_startup_64+0x13e/0x147 [ 796.132399][T23720] INITIAL READ USE at: [ 796.136942][T23720] lock_acquire+0x120/0x360 [ 796.143828][T23720] _raw_read_lock+0x36/0x50 [ 796.150775][T23720] __do_wait+0xde/0x740 [ 796.157479][T23720] do_wait+0x1f8/0x520 [ 796.164015][T23720] kernel_wait+0xab/0x170 [ 796.170790][T23720] call_usermodehelper_exec_work+0xbe/0x230 [ 796.179053][T23720] process_scheduled_works+0xadb/0x17a0 [ 796.187063][T23720] worker_thread+0x8a0/0xda0 [ 796.194014][T23720] kthread+0x70e/0x8a0 [ 796.200442][T23720] ret_from_fork+0x4b/0x80 [ 796.207214][T23720] ret_from_fork_asm+0x1a/0x30 [ 796.214332][T23720] } [ 796.217002][T23720] ... key at: [] tasklist_lock+0x18/0x40 [ 796.224920][T23720] ... acquired at: [ 796.228984][T23720] lock_acquire+0x120/0x360 [ 796.233931][T23720] _raw_read_lock+0x36/0x50 [ 796.238697][T23720] send_sigio+0x101/0x370 [ 796.243580][T23720] kill_fasync+0x24d/0x4d0 [ 796.248187][T23720] lease_break_callback+0x26/0x30 [ 796.253485][T23720] __break_lease+0x6a2/0x1620 [ 796.258548][T23720] vfs_truncate+0x428/0x520 [ 796.263232][T23720] do_sys_truncate+0xdb/0x190 [ 796.268086][T23720] __x64_sys_truncate+0x5b/0x70 [ 796.273294][T23720] do_syscall_64+0xf6/0x210 [ 796.277976][T23720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.284038][T23720] [ 796.286368][T23720] -> (&f_owner->lock){....}-{3:3} { [ 796.291704][T23720] INITIAL USE at: [ 796.295691][T23720] lock_acquire+0x120/0x360 [ 796.301942][T23720] _raw_write_lock_irq+0xa2/0xf0 [ 796.308637][T23720] __f_setown+0x67/0x370 [ 796.314724][T23720] generic_setlease+0xd5d/0x1240 [ 796.321422][T23720] fcntl_setlease+0x3a2/0x4c0 [ 796.327845][T23720] do_fcntl+0x6a0/0x1910 [ 796.333828][T23720] __se_sys_fcntl+0xc8/0x150 [ 796.340167][T23720] do_syscall_64+0xf6/0x210 [ 796.346414][T23720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.354041][T23720] INITIAL READ USE at: [ 796.358468][T23720] lock_acquire+0x120/0x360 [ 796.365147][T23720] _raw_read_lock_irqsave+0xaf/0x100 [ 796.372600][T23720] send_sigio+0x38/0x370 [ 796.379017][T23720] kill_fasync+0x24d/0x4d0 [ 796.385612][T23720] lease_break_callback+0x26/0x30 [ 796.392804][T23720] __break_lease+0x6a2/0x1620 [ 796.399661][T23720] vfs_truncate+0x428/0x520 [ 796.406458][T23720] do_sys_truncate+0xdb/0x190 [ 796.413884][T23720] __x64_sys_truncate+0x5b/0x70 [ 796.421008][T23720] do_syscall_64+0xf6/0x210 [ 796.427688][T23720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.435918][T23720] } [ 796.438513][T23720] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 796.447463][T23720] ... acquired at: [ 796.451434][T23720] lock_acquire+0x120/0x360 [ 796.456121][T23720] _raw_read_lock_irqsave+0xaf/0x100 [ 796.461593][T23720] send_sigio+0x38/0x370 [ 796.466063][T23720] kill_fasync+0x24d/0x4d0 [ 796.471005][T23720] lease_break_callback+0x26/0x30 [ 796.476230][T23720] __break_lease+0x6a2/0x1620 [ 796.481104][T23720] vfs_truncate+0x428/0x520 [ 796.485831][T23720] do_sys_truncate+0xdb/0x190 [ 796.490706][T23720] __x64_sys_truncate+0x5b/0x70 [ 796.495830][T23720] do_syscall_64+0xf6/0x210 [ 796.500541][T23720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.506741][T23720] [ 796.509069][T23720] -> (&new->fa_lock){....}-{3:3} { [ 796.514210][T23720] INITIAL USE at: [ 796.518202][T23720] lock_acquire+0x120/0x360 [ 796.524284][T23720] _raw_write_lock_irq+0xa2/0xf0 [ 796.530889][T23720] fasync_remove_entry+0xf1/0x1c0 [ 796.537491][T23720] lease_modify+0x1ca/0x3c0 [ 796.543569][T23720] locks_remove_file+0x4bf/0xea0 [ 796.550068][T23720] __fput+0x3ab/0xa70 [ 796.555616][T23720] task_work_run+0x1d1/0x260 [ 796.561771][T23720] resume_user_mode_work+0x5e/0x80 [ 796.568450][T23720] syscall_exit_to_user_mode+0x9a/0x120 [ 796.575558][T23720] do_syscall_64+0x103/0x210 [ 796.581709][T23720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.589160][T23720] INITIAL READ USE at: [ 796.593482][T23720] lock_acquire+0x120/0x360 [ 796.599985][T23720] _raw_read_lock_irqsave+0xaf/0x100 [ 796.607276][T23720] kill_fasync+0x199/0x4d0 [ 796.613684][T23720] lease_break_callback+0x26/0x30 [ 796.620710][T23720] __break_lease+0x6a2/0x1620 [ 796.627389][T23720] vfs_truncate+0x428/0x520 [ 796.633993][T23720] do_sys_truncate+0xdb/0x190 [ 796.640706][T23720] __x64_sys_truncate+0x5b/0x70 [ 796.647555][T23720] do_syscall_64+0xf6/0x210 [ 796.654225][T23720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.662110][T23720] } [ 796.664603][T23720] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 796.673277][T23720] ... acquired at: [ 796.677070][T23720] lock_acquire+0x120/0x360 [ 796.681747][T23720] _raw_read_lock_irqsave+0xaf/0x100 [ 796.687210][T23720] kill_fasync+0x199/0x4d0 [ 796.691793][T23720] evdev_pass_values+0x627/0xbd0 [ 796.696906][T23720] evdev_events+0x1e6/0x340 [ 796.701588][T23720] input_pass_values+0x285/0x890 [ 796.706699][T23720] input_event_dispose+0x330/0x6b0 [ 796.711978][T23720] input_inject_event+0x1fe/0x320 [ 796.717169][T23720] evdev_write+0x2fc/0x480 [ 796.721846][T23720] vfs_write+0x27b/0xa90 [ 796.726263][T23720] ksys_write+0x145/0x250 [ 796.730761][T23720] do_syscall_64+0xf6/0x210 [ 796.735447][T23720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.741508][T23720] [ 796.743842][T23720] [ 796.743842][T23720] stack backtrace: [ 796.749818][T23720] CPU: 0 UID: 0 PID: 23720 Comm: syz.0.2160 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 796.749838][T23720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 796.749848][T23720] Call Trace: [ 796.749856][T23720] [ 796.749864][T23720] dump_stack_lvl+0x189/0x250 [ 796.749890][T23720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 796.749911][T23720] ? __pfx__printk+0x10/0x10 [ 796.749930][T23720] validate_chain+0x1f05/0x2140 [ 796.749952][T23720] __lock_acquire+0xaac/0xd20 [ 796.749973][T23720] ? kill_fasync+0x199/0x4d0 [ 796.749986][T23720] lock_acquire+0x120/0x360 [ 796.750004][T23720] ? kill_fasync+0x199/0x4d0 [ 796.750017][T23720] ? __lock_acquire+0xaac/0xd20 [ 796.750044][T23720] _raw_read_lock_irqsave+0xaf/0x100 [ 796.750060][T23720] ? kill_fasync+0x199/0x4d0 [ 796.750072][T23720] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 796.750095][T23720] ? do_raw_spin_lock+0x121/0x290 [ 796.750115][T23720] kill_fasync+0x199/0x4d0 [ 796.750127][T23720] ? kill_fasync+0x53/0x4d0 [ 796.750140][T23720] evdev_pass_values+0x627/0xbd0 [ 796.750164][T23720] ? evdev_pass_values+0x621/0xbd0 [ 796.750186][T23720] evdev_events+0x1e6/0x340 [ 796.750206][T23720] ? evdev_events+0x79/0x340 [ 796.750225][T23720] ? input_pass_values+0x8d/0x890 [ 796.750249][T23720] input_pass_values+0x285/0x890 [ 796.750271][T23720] ? input_handle_event+0x70c/0xf30 [ 796.750289][T23720] input_event_dispose+0x330/0x6b0 [ 796.750309][T23720] input_inject_event+0x1fe/0x320 [ 796.750328][T23720] ? input_inject_event+0xbc/0x320 [ 796.750346][T23720] evdev_write+0x2fc/0x480 [ 796.750370][T23720] ? __pfx_evdev_write+0x10/0x10 [ 796.750391][T23720] ? bpf_lsm_file_permission+0x9/0x20 [ 796.750416][T23720] ? security_file_permission+0x75/0x290 [ 796.750438][T23720] ? rw_verify_area+0x258/0x650 [ 796.750453][T23720] ? __pfx_evdev_write+0x10/0x10 [ 796.750476][T23720] vfs_write+0x27b/0xa90 [ 796.750494][T23720] ? __pfx_vfs_write+0x10/0x10 [ 796.750509][T23720] ? __fget_files+0x2a/0x420 [ 796.750528][T23720] ? __fget_files+0x2a/0x420 [ 796.750546][T23720] ? __fget_files+0x3a0/0x420 [ 796.750564][T23720] ? __fget_files+0x2a/0x420 [ 796.750584][T23720] ksys_write+0x145/0x250 [ 796.750599][T23720] ? rcu_is_watching+0x15/0xb0 [ 796.750623][T23720] ? __pfx_ksys_write+0x10/0x10 [ 796.750639][T23720] ? do_syscall_64+0xba/0x210 [ 796.750660][T23720] do_syscall_64+0xf6/0x210 [ 796.750678][T23720] ? clear_bhb_loop+0x45/0xa0 [ 796.750694][T23720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.750710][T23720] RIP: 0033:0x7f805d38e969 [ 796.750725][T23720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 796.750738][T23720] RSP: 002b:00007f805e1ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 796.750755][T23720] RAX: ffffffffffffffda RBX: 00007f805d5b5fa0 RCX: 00007f805d38e969 [ 796.750767][T23720] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 796.750777][T23720] RBP: 00007f805e1ee090 R08: 0000000000000000 R09: 0000000000000000 [ 796.750786][T23720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 796.750795][T23720] R13: 0000000000000000 R14: 00007f805d5b5fa0 R15: 00007f805d6dfa28 [ 796.750810][T23720] [ 797.065599][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.075712][T23720] FAULT_INJECTION: forcing a failure. [ 797.075712][T23720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.092270][ T5889] usb 2-1: USB disconnect, device number 108 [ 797.124264][T23720] CPU: 0 UID: 0 PID: 23720 Comm: syz.0.2160 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 797.124293][T23720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 797.124306][T23720] Call Trace: [ 797.124313][T23720] [ 797.124322][T23720] dump_stack_lvl+0x189/0x250 [ 797.124357][T23720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 797.124391][T23720] ? __pfx__printk+0x10/0x10 [ 797.124409][T23720] ? __might_fault+0xb0/0x130 [ 797.124434][T23720] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 797.124455][T23720] ? preempt_schedule+0xae/0xc0 [ 797.124476][T23720] ? rcu_is_watching+0x15/0xb0 [ 797.124505][T23720] should_fail_ex+0x414/0x560 [ 797.124538][T23720] _copy_from_user+0x2d/0xb0 [ 797.124563][T23720] input_event_from_user+0xb2/0x280 [ 797.124578][T23720] ? __pfx_input_event_from_user+0x10/0x10 [ 797.124593][T23720] ? input_inject_event+0xbc/0x320 [ 797.124612][T23720] evdev_write+0x2a6/0x480 [ 797.124635][T23720] ? __pfx_evdev_write+0x10/0x10 [ 797.124655][T23720] ? bpf_lsm_file_permission+0x9/0x20 [ 797.124674][T23720] ? security_file_permission+0x75/0x290 [ 797.124695][T23720] ? rw_verify_area+0x258/0x650 [ 797.124710][T23720] ? __pfx_evdev_write+0x10/0x10 [ 797.124729][T23720] vfs_write+0x27b/0xa90 [ 797.124747][T23720] ? __pfx_vfs_write+0x10/0x10 [ 797.124762][T23720] ? __fget_files+0x2a/0x420 [ 797.124781][T23720] ? __fget_files+0x2a/0x420 [ 797.124798][T23720] ? __fget_files+0x3a0/0x420 [ 797.124815][T23720] ? __fget_files+0x2a/0x420 [ 797.124835][T23720] ksys_write+0x145/0x250 [ 797.124850][T23720] ? rcu_is_watching+0x15/0xb0 [ 797.124870][T23720] ? __pfx_ksys_write+0x10/0x10 [ 797.124886][T23720] ? do_syscall_64+0xba/0x210 [ 797.124904][T23720] do_syscall_64+0xf6/0x210 [ 797.124921][T23720] ? clear_bhb_loop+0x45/0xa0 [ 797.124937][T23720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.124951][T23720] RIP: 0033:0x7f805d38e969 [ 797.124964][T23720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 797.124975][T23720] RSP: 002b:00007f805e1ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 797.124991][T23720] RAX: ffffffffffffffda RBX: 00007f805d5b5fa0 RCX: 00007f805d38e969 [ 797.125002][T23720] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 797.125012][T23720] RBP: 00007f805e1ee090 R08: 0000000000000000 R09: 0000000000000000 [ 797.125021][T23720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 797.125030][T23720] R13: 0000000000000000 R14: 00007f805d5b5fa0 R15: 00007f805d6dfa28 [ 797.125045][T23720] [ 797.377772][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.549952][T23729] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.665525][ T9] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 797.815471][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 797.821853][ T9] usb 4-1: config 1 has an invalid descriptor of length 157, skipping remainder of the config [ 797.833827][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 797.845645][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 797.854772][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.862952][ T9] usb 4-1: Product: syz [ 797.867184][ T9] usb 4-1: Manufacturer: syz [ 797.871997][ T9] usb 4-1: SerialNumber: syz [ 798.086600][ T9] usb 4-1: 0:2 : does not exist [ 798.095038][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 798.116104][ T9] usb 4-1: USB disconnect, device number 111 [ 798.134929][T21689] udevd[21689]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory