last executing test programs: 5m47.14605174s ago: executing program 2 (id=860): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 5m47.009894443s ago: executing program 2 (id=861): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, 0x0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f15", 0xc}) 5m46.852404258s ago: executing program 2 (id=862): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001e0001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\n'], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5m46.611148566s ago: executing program 2 (id=866): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x122) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000001c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket(0x2c, 0x5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003d000701001200000000000003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000008000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000b64f000000"], 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) openat$urandom(0xffffffffffffff9c, &(0x7f00000003c0), 0x820182, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) 5m44.592158842s ago: executing program 2 (id=882): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 5m43.931306079s ago: executing program 2 (id=896): unshare(0x2a020400) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040010) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0)={r3, 0x3a, "5fb0e8a5b020c9efa372187d2acbafb85563593212ebd0c8695e4257b9d5eb28951e5490bd388ad05b5bf1be0fb1e5aa2183fdba391db978b7f6"}, &(0x7f0000000080)=0x42) 5m42.837049573s ago: executing program 32 (id=896): unshare(0x2a020400) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040010) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0)={r3, 0x3a, "5fb0e8a5b020c9efa372187d2acbafb85563593212ebd0c8695e4257b9d5eb28951e5490bd388ad05b5bf1be0fb1e5aa2183fdba391db978b7f6"}, &(0x7f0000000080)=0x42) 7.598967861s ago: executing program 0 (id=2352): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000029) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r1, 0x402, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000002c0)="32c6", 0x2, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) shutdown(r0, 0x1) 7.511960007s ago: executing program 0 (id=2354): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6019f14d00383c0020010000000000000000000000000000ff0200000000000000000000000000012c03000000000000c910ff"], 0x0) 7.398473832s ago: executing program 0 (id=2355): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a}}, 0x20}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"]) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f00000000c0)=[{r5, 0x3a8}], 0x1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x24, 0x0, 0x801, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) (async) open(&(0x7f0000000080)='./file0\x00', 0x4a8481, 0x0) (async) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0d03000000000000000013000000240009"], 0x38}}, 0x0) 6.29489528s ago: executing program 3 (id=2361): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setreuid(0xee00, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001740)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000003180)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003140)={&(0x7f00000030c0)={0x64, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x48814) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8004"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000001080000000028688ece5a0f06907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02004190780000"], 0x0) syz_emit_ethernet(0x115, &(0x7f00000033c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004417010700670000771190787f0000010a010102441cd033ac1e000100000004ac1e0001fffffffb0a01010200001000070f347f0000010a010100ac1414bb830ffae0000001ac1414bbe0000001000054234e2300b790781752645bdcdb078549985b754d898cee669d1f9767f0bf47f022a24dc5786cd7e3d8a3225c0000ed80d99e51e43098280f86a1242dca3d7c38d10279c4c8e82ddcc347bb3eb99f2182dc71a7cb5230d4844803b480e79bd04c0b08d5e62b8ae6db11960ab84a178b8cb0d52c4868cde6eac30eeafb7f53f35108581631181d5c61f420eda07e4763c8d1ba8a58fa71fcd7c316e11c3489ec5bd4bd789f724ff916a4f03de0bb5f23dd25a00be65d4f"], 0x0) r4 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000280)={&(0x7f0000002080)=[{0x7, 0x211, 0x0, 0x0}, {0x50, 0x40f5, 0x0, 0x0}], 0x2}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000001540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000000540)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {0x0, r9}], 0x5e, "654c4e3ea2f26a"}) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f00000020c0)={r10, 0x8}) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r6], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r11 = accept$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000004c0)=0x1c) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x7, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000001c0)={0x14, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"/455], &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x1c, &(0x7f00000002c0)={0x20, 0x5, 0xa7, "6cb914c38253b85d8b52e886844ad8953118226e4166c1098c7ba3a7515483e468980201c660a3f621968ccb1e19c30f9a4dd30387bcbbca1c2a0062c4a3a75ab4bdb01e370b04ec41eb6d5c9db5bb4450b784a837999b66f9647c8e358ce2ad3b0b29277a82783c2b791a42499ac27281144dd112106d381c266b7333ab5dfbfcd3c14ac21ffe299929522771765f4679ad8095331985d9d014d08f33469083d301b7b730c6a7"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}}) 5.478457899s ago: executing program 1 (id=2363): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000140)=0x3) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x8000000, 0x104000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000100)={0x80a0000}) 5.415913363s ago: executing program 4 (id=2364): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r5) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32=0x0], 0x2c2) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0, 0x400) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newtfilter={0x910, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x8, 0xfff3}, {}, {0x9, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x8e0, 0x2, [@TCA_BASIC_POLICE={0x418, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x17b8, 0x80, 0x2, 0x5, 0xbb95, 0x30, 0x91, 0x7ff, 0x84, 0x5, 0x8, 0x3, 0xfffffffe, 0xffff, 0x5, 0x3ff, 0x4663, 0x9, 0x1ff, 0x80, 0xa8, 0x5, 0x5, 0xb8, 0x80000000, 0x2, 0x5, 0xa400, 0x81, 0x8, 0x10, 0xfffffff5, 0x8, 0xd5, 0xffffffff, 0x101, 0x5, 0x2, 0x8, 0x10003, 0x6, 0x39508cc3, 0x9, 0x6, 0x3, 0x9, 0xe4df, 0x7, 0x861, 0x3db, 0x2, 0x9, 0xe9, 0x6, 0x3, 0xef3, 0xd, 0x3, 0x5, 0x8, 0x6, 0x8001, 0x4, 0x2, 0x0, 0x4f01, 0x101, 0x2, 0x100, 0x7, 0x3, 0x800, 0x6, 0x0, 0x7, 0x800, 0x401, 0x3, 0x1, 0x7fff, 0x7, 0x4, 0x88, 0x7, 0x80000001, 0x5, 0x0, 0x2, 0x921, 0x80000000, 0x9, 0x8, 0x2, 0x5, 0x8, 0xc, 0xece, 0xdd7d, 0x6, 0x2, 0x4, 0x4, 0x986, 0xbcf, 0x9, 0x30000, 0x5, 0x6, 0xc18, 0x800, 0xd, 0x100, 0x1c, 0xff, 0x3, 0x17, 0x10000, 0x1, 0x0, 0x664d, 0x2, 0x6, 0x104a3, 0x0, 0x9, 0x200, 0x4, 0x80, 0x2, 0x4, 0x2, 0x7fff, 0x9, 0xffffffff, 0x9, 0x7, 0x6, 0x6, 0x40, 0x1, 0xada9, 0x7, 0x7, 0x7, 0x0, 0x401, 0x72c2, 0x5, 0x0, 0x7, 0x1200, 0x3, 0xfffffffb, 0x2, 0x5, 0x5, 0x4, 0x81, 0x7f, 0xfff, 0xa23, 0x9, 0x1ed69fd6, 0x6, 0x463d, 0xfff, 0x0, 0x800, 0x3, 0x9, 0x1, 0x7b6, 0x1, 0xe5e8, 0x4, 0x5, 0x81, 0x3, 0x401, 0x7f, 0x7, 0x40, 0x5, 0x8001, 0x6, 0x2dd, 0xdf9e, 0x7ff, 0x8, 0x200, 0xf32, 0xe95b, 0x7, 0x7ff, 0x1, 0xfff, 0x1, 0xfffffffb, 0x7, 0xa, 0xc05, 0x1, 0x6, 0x8, 0x6, 0x0, 0x9, 0x7fffffff, 0x2, 0x9, 0x4, 0x4, 0xffffffff, 0x40c, 0x765, 0x4, 0x80000001, 0x0, 0x0, 0x6, 0x100, 0xfffffffd, 0x1000, 0x6, 0x5, 0x6, 0x6, 0x5f8fe372, 0xa3b, 0x4, 0x5, 0x1c36, 0x800, 0x3, 0x1, 0x4, 0x6, 0x8001, 0x2, 0x1, 0x81, 0x3ff, 0x5daa, 0xf, 0x76, 0xfffffffd, 0x3, 0x2, 0x7fff, 0xffffa682, 0x8, 0x61, 0x5, 0x1, 0x1000, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_BASIC_ACT={0x4c4, 0x3, [@m_gact={0xa0, 0x11, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x10e0, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe, 0x0, 0x7, 0x8001, 0xe844}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x10001, 0x1, 0x2, 0x1ff}}]}, {0x36, 0x6, "1b68ac19dfd09d4f4725454a4f8577d057f6e4098dc1b70d5834927932cb64c818573fcffe05d9658c49086d07fd2f7f499e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x218, 0x8, 0x0, 0x0, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x9ee8, 0x10000000, 0x3, 0x7}, @empty, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x8, 0x0, 0x80000000, 0x3}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1a}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xbf2a, 0x4, 0xffffffffffffffff, 0x9, 0xef}, @rand_addr=0x64010102, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x6, 0x7, 0xfffffffe, 0x2}, @private=0xa010101, @loopback, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xf, 0x0, 0x3b, 0x8}, @private=0xa010101, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5d6196e1, 0x8, 0x0, 0x6, 0x6}, @multicast1, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xb, 0x0, 0x20000000, 0x400, 0xf}, @multicast1, @loopback, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x13f, 0x0, 0x10000000, 0x5, 0x7}, @broadcast, @broadcast, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd4e, 0x8, 0x8, 0x0, 0x317521c}, @empty, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa19, 0x7ff, 0x20000000, 0x7, 0xc18}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0xf09, 0x6, 0x9, 0x9}, @empty, @multicast1}}]}, {0x35, 0x6, "805accc16b445b1901635a9e780462bd3cd082490efd6804cab2b53bbf2c886734d55a71c3ad95de6de31932570fdf7ab8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x134, 0x8, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x1}]}, {0xed, 0x6, "ad57f92d8657e730dc48125b1bee1a5e45020e570b13b4644cf3897833410cc9d496ffc3acd6fc1e811d85244c6231d79ea1d57aaf11ca83413a0039e3ee8245c276fc4d51b4f29a1eea06305d5cc3e0b52b98b10c916a4a357f8ead630c8001913d856fb4c8541c8dd2b2e403b24c3936defb07e5798ec7388cc3c4a5a60bb65bedb1610ace11669ac9e4dcdc246e6cebb49d53ec9805e29c26f29188284a00ce69fbc05c77aaa72e49cd243c3fd254f25575319c0d45948e975b55dfd95a6b05b217920d07d557fd9e713515669dd9c72bf95a0df13fef753adc24e75f8ce28f03889b8dd57831d7"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_bpf={0xd4, 0xf, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r9}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x9, 0x7f, 0x4, 0x6}, {0x892, 0x6, 0x0, 0x5}, {0x9a7b, 0x2e, 0x9, 0x1ff}, {0xe, 0x40, 0x1, 0x6}, {0x6, 0xf2, 0x0, 0x60000000}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}]}, {0x62, 0x6, "bf31f31ee40081900a8c8a073d9fec45ce5adfaf71e0ff09e468c73989c7afe7f449a2240171b18eacefb8d424c05b0e3c32ffd13a43fc3d3b82fac4e5eaa968d082fed445bc1b91930566611729c38d23715af4f7fd264091d8a4902f3c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x910}, 0x1, 0x0, 0x0, 0x2004028}, 0x8040000) mremap(&(0x7f00005a9000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000292000/0x4000)=nil) syz_clone(0x5014100, 0x0, 0x0, 0x0, 0x0, 0x0) 5.31141907s ago: executing program 1 (id=2365): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x1f, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4004) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000d40)=""/244, 0xf4}, {&(0x7f0000001e40)=""/4046, 0xfce}, {&(0x7f00000007c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000340)=""/212, 0xd4}, {&(0x7f0000000a40)=""/190, 0xbe}, {&(0x7f0000000940)=""/198, 0xc6}, {&(0x7f0000000580)=""/133, 0x85}], 0x9}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) pselect6(0x81, &(0x7f0000000000)={0xa, 0x7ff, 0x100, 0xffffffff, 0x8, 0xba4, 0xffffffffffffffff, 0xfffffffffffffff8}, 0x0, &(0x7f00000000c0)={0x6b40, 0x3, 0x0, 0x8, 0x1, 0x4000006, 0x8, 0x8080}, 0x0, 0x0) 4.996089197s ago: executing program 5 (id=2366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x60, 0x0) recvmmsg(r3, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/37, 0x25}, {&(0x7f0000003a40)=""/4093, 0xffd}, {&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000480)=""/74, 0x4a}], 0x5}, 0x1801}], 0x1, 0x120, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x1c}}, 0x404d) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) 4.817718201s ago: executing program 5 (id=2367): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x20, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xe}, {0x4, 0x5}}}, 0x12}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/83, 0x53}], 0x1, 0x8f, 0x3b16) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x5, @broadcast}, 0x10) connect(r2, &(0x7f0000000000)=@rc={0x1f, @none, 0x7}, 0x80) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r4 = memfd_create(&(0x7f0000000500)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14f>\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW|GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r3, &(0x7f00000009c0), 0x0, 0x40012102, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x44100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r8}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_open_dev$midi(&(0x7f0000000180), 0x1, 0x145004) setrlimit(0x9, &(0x7f00000001c0)={0x5, 0xdbc}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 4.124944018s ago: executing program 5 (id=2369): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB]) r2 = syz_io_uring_setup(0x10c, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0xa, &(0x7f0000000400)={0x0, 0x989680}, 0x1, 0x4, 0x1}) io_uring_enter(r2, 0x3516, 0xf00, 0x0, 0x0, 0x0) 3.95000782s ago: executing program 5 (id=2370): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000003e80)={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x7}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x8, @mcast2, 0x70fd}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x34}}], 0x2, 0x4008810) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000040)={&(0x7f00000006c0)={{@host, 0x64}, {}, 0x400, "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"}, 0x418, 0x7fffffff}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000001580)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r5, 0x3, r4, 0x120000}) close_range(r1, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)="5a20e5057750af7ce68a5df09edc3d1a5f99dc60429b10557d79641bc3f81f61e9015f0295a142ca0aaca199181e587c26c3690a3a0818d3fa92982c6a947f72df4521f49a0411e9e666a740b9ebcfa08fb6e4d69482", 0x56, r3}, 0x68) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, &(0x7f0000000200)) r8 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) syz_open_procfs(r6, &(0x7f0000000340)='net/ip_tables_names\x00') r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000006c241, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) writev(r10, &(0x7f0000000400)=[{&(0x7f00000000c0)="dccb07ef399fa77311413e3cc9adf84d8610a42dae9b113a24288a1a7f834417b381ced900f61b5f7a9cd30a51dc432a6e27e25be626f6c476ba1378fbed11fd28d3409cebcf4ff5cabb", 0x4a}, {&(0x7f0000000040)="f583fbef", 0x4}, {0x0}, {&(0x7f0000000540)="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", 0xfa0}], 0x4) timer_settime(0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4682010503fcffffffffffffff02003e0005000000010500000000000040000000000000004401000000000000000000003e00380065"], 0xbd) close(r9) fcntl$notify(0xffffffffffffffff, 0x402, 0xa) execveat$binfmt(0xffffffffffffffff, r8, 0x0, 0x0, 0x1000) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000001e40)={0x14, 0x1, {0x1, @struct={0x3ff, 0x1f73}, 0x0, 0x7, 0x7, 0x9cbe, 0x4, 0x6, 0x40, @usage=0x3, 0x3, 0x4, [0xd3, 0x0, 0x8, 0xffffffffffffff86, 0x7, 0x7]}, {0x5, @struct={0xe390, 0x10}, 0x0, 0xff, 0xffff, 0xffffffff7fffffff, 0xfffffffffffffff8, 0x7f, 0x0, @struct={0x8, 0x7}, 0x4, 0x6, [0x2, 0x3f, 0xb29d, 0xcd11, 0xda8, 0x7ff]}, {0x10, @usage=0x8, 0x0, 0x0, 0xd0, 0x1, 0x9, 0x4, 0x28, @struct={0x4, 0x9}, 0x6, 0x6, [0x80000001, 0xfffffffff9bd3949, 0x3, 0x0, 0x7, 0x1]}, {0x8, 0x2, 0x81}}) 3.803866665s ago: executing program 4 (id=2371): socket$key(0xf, 0x3, 0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x19c5498e, 0x103902) readv(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, &(0x7f0000000280)={0x20, r7, 0x0}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x9, 0x6, 0x1, 0x5, 0x9, 0x6, 0x2}, 0x1c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x855, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req={0xa7f, 0x9, 0x1, 0x7f}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r8 = syz_usb_connect(0x6, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e208ff3d6a4cf1459215a68f3f6d5a14ecb1651cd627fddabf76dbaf3836cbc74f638370a10ba61789f829a91084e57a558b2d026fec0295a10fd47a0afb6b0001c1f4e552752b35b085b64d01b4572a963f21923ce30a6ab4b96d3c972df"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000", @ANYRES16, @ANYBLOB], 0xb0}}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) 3.199160596s ago: executing program 0 (id=2372): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) io_setup(0x0, &(0x7f0000000000)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xe739, 0x1, 0x8000002, 0x1d4}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r3, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$nci(r3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000002d40)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x8, 0x28d662, 0x1096e}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) close_range(r2, 0xffffffffffffffff, 0x0) 3.167443562s ago: executing program 3 (id=2373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/kexec_crash_size', 0x800, 0x0) lseek(r3, 0xb, 0x1) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="03002abd7000ffdbdf253a00008008000100de109310e51dd299352a55c189d0fdcee256464f237c1985396787d98752614788b0ee7788df54318fb4abe90e7900000000000000660568be7c73ff5e9b8e278d285bb9dbc07f1675a8f555c22bad4c3af1b5e442e41ae7622d963666bfa70a64b39ba953358da6e1c6e98f0d57f0c2d01f963c7d16b8138ffc984392cd13da1f6526b102f64ea4ab48388f993d88af5c08d83da90000", @ANYRES32=r2, @ANYBLOB="04005b000600650008000000"], 0x28}, 0x1, 0x0, 0x0, 0x4c881}, 0x4000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'vlan1\x00', 0x1000}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x2, 0x2, 0x0, [0x6e, 0x10000, 0x7, 0xc6]}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd31, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x4}}]}}]}, 0x3c}}, 0x0) 2.999757052s ago: executing program 5 (id=2374): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4008af00, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x48094}, 0x240400c0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x19, 0x5, 0xd}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$key(r4, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000002e40)=ANY=[], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x40000) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r5 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000300)={0x50, 0x8001, 0x0, {0xe797, 0x68bd}, {}, @cond=[{0x0, 0x9, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008c02"]) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001b80)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x7f, 0x3ff, 0x432, 0x44, 0x3ff}, &(0x7f0000001c40)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000001c80)={r8, 0x7f}, &(0x7f0000001cc0)=0x8) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f00000018c0)={0x0, [{0x3, 0x6b8, 0x100, &(0x7f00000001c0)="79cb31e213e77462be69d9dd8199d64892c8ad2eb275add0e5f16256f47353f27850702d74da6c23f25a571f7c9d6256f1fd66f372086f64bc660fa1228512c6a9fc8c40c59becce310f107b81ff636d13360a86ee0bd22eaf7fa60657075d66469f44e0bebfd46f6882de746a6f21e4ac220a270cea61d8d447b1c30ba6b022e9a155b411907d02c02c6ac956600cfeba7c7d18baa125b4a45858919676bea303712165b9dd5e7e055b7271dcaa31c34023be256bdd579aac01f7dab94a06cde7bdeff4b13ff1ee9bdb980f348f8d041314c151e09234"}, {0x1, 0x88, 0x8, &(0x7f0000000000)="6b2157277b3dd8e6b23ef5316e8e810b91"}, {0x3, 0x3d8, 0x0, &(0x7f00000002c0)="971ccce2f8999af7daa16e5e4f892f68f159c0e759b57dca11e516be47c81c344640f5d8939e76326a31064610e89134e0fa96d07dbb49e58e3078e26128da20b86a8f5b46be73722d01a83f06159735c15c648503521132c4e9bfdce2d6f940e155c7fff47558e9d910e034d53f3f93cfa33dbc64084f56f93403"}, {0x1, 0x1e0, 0x3, &(0x7f0000000340)="8d97c7b517d2d76136657c3150e87d800bd4a48dca0a3c28cb6dc1f632c982021f64c27c0237300e00901b48270e0c57c1f13f5f9aa305520926cb08"}, {0x3, 0x1c0, 0x5, &(0x7f0000000380)="a04593de3f21b0999e495ba605c5f22dcb052e54fbd0619960e4df3263901372c507a59515e084cd95612de1cd2cdcbca13a744e34e94085"}, {0x0, 0x718, 0x1, &(0x7f00000003c0)="edd79a5e2ab6e47eed561330af79fc46532adff1ca5738fe714c3da93f436ecc5a2b0d5a009b816c2e21da6a3774fb9862060da591badaf40c02cb5104bd04274d50ae9b7f8799de446473d11155e9447389b95c13cf5b27696e56303422e7cfb00856ae438bc63da58642acad21216e5ef71bba1531dac4be127c36ada1e6d0ecb80f972a232b09e1e725704e600067238662dc02f411aa80088a2d96669b4b607689d4e461af593b360c7a7c21fc55be1acc98f08184455a061bb7490aa571b4c9a0c0466747b4fa696a671a611290f9d72954fdc5b30bbfaf14836344f7893e770a"}, {0x3, 0x2f0, 0x0, &(0x7f00000016c0)="e01cad6c8a8456de21bf1b7797394aa8dec1ed54993d8701fb76934ca273905cb6ec742dd420fec23487d6f43a1e3add1de7fcc6c77f7cde41683ed138558ed71b989d267297bf9a819f1de8b2079587d4fbd4d6558c28cfae4a9e58fc01"}, {0x1, 0x2b0, 0x8000, &(0x7f0000000540)="599f77a4dceb8f6daa632fc3d3991939e10f9cbe2b1cfb1d9f1d132a696a06fd8f70fe1c3e0bfa7c28a2d77c6b1558feed604e9d40bb61cb3d4baa74a071322c0d453fbfd9ed518bd5d089220bbe84257157bea923a0"}, {0x1, 0x5a0, 0xfffffbff, &(0x7f00000005c0)="56fcf5c8ed6c0ae6e1ff4c9056d8193fa8ea5fe59cb802de929cce7cb71f0801dbd72d710bb62dc6faa8a339870164c4b0bdaf259338c9381735ad20bd7abfb3bf94ab22e605046577e19984126bf96aa549037cad69ae33913551cf7d678512772fc7048726b5a2fa697335ad7f815caba6b2e06f55da03d8ddeba4b89f6532889f788dc75e5bbe232656ca701580510d76f46b9433cf8146d49c4de9c3cf86a558e2ced3d4270d26dd354b69cfdcda5cdbaa53"}, {0x2, 0xc0, 0x5, &(0x7f0000000680)="fd487aa695819362a9ac89dfd6361e00c53e0f5c005de5e5"}, {0x1, 0x8000, 0x1, &(0x7f00000006c0)="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"}, {0x1, 0xc38, 0x1, &(0x7f0000002f80)="db8e9f7637fa7cb8a808ee80b544e501ed22396eaab7f012a6e77b45c1d5b20b210f7672e753a258752865e09426946001785d3d31b798074ae6461e279ac11399601baf9fdf080200f45330877472c573b2f5d1a297632216d12afc7da5bb6589fb35a3a43687347f3947baae900356c9c559e513861bcdbe52079d72663575c01fc5b6046bfbd3dd236b50cfeb457e39aa23c515511a34fbd1de36e3b4c1cf280507be1ea700e6da1fd6b93b63eb3113efd5ca40e0eb2b738306ac17b7fb4826fb244e8cf96093cf33ca3842d764a6c8a4bd72cf561cb7c7578674107d075e77f168d738332c3583909967ecc3fcea701fcc6dff29bef2ac9154bad3faf7042f5ebf18366ff68320bf994368af7c84d512bec113b8a85484cdf870d2f3d7443ccce16394c902b472926063a9b8b4ecb7481802cee705f72b643e743a630faf5b9005299a501aeb8754de6784a8e1efb0f2d06155cdb584098b44ef821171fd525d9a093b8f6643c0f4a45ebca19810d6e854e7f032f87d8f6041fb1a1451447fddb273a97971"}, {0x1, 0x238, 0x7, &(0x7f0000001740)="772937c3daa47b28abd25dc64658d4f01a88af5c5fd7043a01ed6f7ac06c40dab5cd4692d90c5e3ee684d57649eb8a2dbeaa29c194f7086d64c24c346dac0f69eb10a6b3ac872d"}, {0x2, 0x150, 0x8, &(0x7f00000017c0)="fc25f92c51102eaef86e8f4428deeb42c6e2ae1fa8cf1b5ff41ea98483cf80b84d5c921dabd49d3a6fe4"}, {0x0, 0x148, 0x1, &(0x7f0000001800)="3aa58e770b50430802bebf5eb1c51a41e32f2ae2825db7b1d2ad198e512e0972f601c25d281aa509ff"}, {0x1, 0x368, 0x1, &(0x7f0000001840)="483346a24ed97d29c9238c796623c92d5722270eb1a24941ed95287a33b908e39116b0e80f38874054d1024f36c647e72e9df5cfd1c7262f2de27ac6cf83613bd3bc4546aa98018c95bb2379e99b506e3db5ec5ab12cb0a681704709a40fd457ca7213fb2a1f688cd48de4097c"}]}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x35, 0x0, 0x3, 0x25c}, {0x34, 0x0, 0x9, 0xfffffffe}, {}, {0x0, 0x3}, {0x6, 0x0, 0xff, 0x8000}]}) 2.679143727s ago: executing program 3 (id=2375): syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0xb00, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@generic={0x94, 0x2}]}}, @address_request={0x11, 0x0, 0x0, 0x90b6}}}}}, 0x0) 2.433685961s ago: executing program 3 (id=2376): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @broadcast}, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000000040000000, 0x102}) mknodat$loop(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0x1b) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 2.251850219s ago: executing program 1 (id=2377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xd, 0x0, 0x3}}}}}}}, 0x0) 2.020627632s ago: executing program 1 (id=2378): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x5) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4789, 0x2, 0x80, 0x5, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9bd, 0x742, 0x1005, 0x7, 0x4db6, 0x8, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_RUN(r2, 0xae80, 0x40000) 1.45501134s ago: executing program 1 (id=2379): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x119880, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x4, 0x10000, 0x100, 0x9004, 0x0, 0x8, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x1, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x3, 0x2, 0x888f, 0x1, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x3, 0x7, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xffffffffffffffff, 0x2b, 0x8, 0x2293332c, 0x6, 0x6, 0x0, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x0, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r3], &(0x7f0000000200), &(0x7f0000000300)=[r4], &(0x7f0000000340)}) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000240)) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="120100004439dc4060162119841f010203010902240001000000000904030002f662700009050700100009060809050d03000068374023b665b03ec8855808c0b5c00a08cd66504357caa380fb7a810c5b6b5a1230464e03e4eb5cc2eb58f60ee3e7ed252e51e84901f82394012123bc46e2d73a3e4c9f4755e3e7c887081872de01c21fa2b385fa2f4c2b9756a1f0a0c9b1630d8f21275b"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x20, 0x0, 0x1, "f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000000c0)={0x0, 0x18, 0x9, "dcf3390988dd7cac29"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090528bd700000000400021f0d00", @ANYRES32=r8, @ANYBLOB="080001000000000008000400ac1414bb0d000200ac1414bb080001006401010208000a0001000000080009000c"], 0x48}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r10 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0xc, 0x0, 0x4}]}, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r10, 0x47bc, 0x20, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 1.1215653s ago: executing program 3 (id=2380): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB]) r2 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0xa, &(0x7f0000000400)={0x0, 0x989680}, 0x1, 0x4, 0x1}) io_uring_enter(r2, 0x3516, 0xf00, 0x0, 0x0, 0x0) 1.114388074s ago: executing program 0 (id=2381): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0xa00) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f00000000c0)={0x6, 0x5, 0x10}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008502"]) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd28, 0x0, {0xa, 0x0, 0x20, 0x64, 0x2, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e21}}, @FRA_SRC={0x14, 0x2, @private1}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r9 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0xd5}], 0x1, 0x40800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r9) 963.109152ms ago: executing program 0 (id=2382): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800003000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000000c0)=[{{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000240)="837406d4c1c68cca55fdb9fb69f7ad892c9b62f97fb74e8e394e6cb579b5a99cb1b6c071fddea686897503327a2b47bcd8ab8548eef85995799de83ffc6db156e921a30978441a244d5aa6", 0x4b}, {&(0x7f0000000300)="5844e98d60e6d5dc365696745a23b920e0d5850b36bae11cf2216f9362f8c840bbd79632f7c7bafa8fec2b31e3bbeb64167eaecce610fb44cc618217c788c9d9bed22b27dfd9c9aa97d7f014cd8dadfedccac570e0c219c30b1d2fc222ab513deb03f4df6a32f5dab3aae5468964a8ecee9729f2527ee6a49d76", 0x7a}, {&(0x7f0000000380)="158bca2fe86f46b1c5ce3d128b436bca41e96f9052fee91f0d4bf29bda54b0f0f40e8848673b01c69dc3dfa3fede72621d46c0613ba70185653b9eba22d83f0d2bc554e326761c0d029ed7a2", 0x4c}, {&(0x7f0000000400)="0849b5961740633337d4f89d25ebddd6f25097be07bfaa9931b0af529636de4632ed1333937a6c2a7b3a72c325f0d8205a6b231f6629163772c452fd09e4055bb279d725778f045a77535ac125d712501d3e77d2e96859c44cf0b7c468af4b3362c1cb191f85df68241058325b9851592f62", 0x72}, {&(0x7f0000000480)="57ef9461bbecb19559b347355b2cad04991b0bcade059eaa86a351c9b2ddd199b3dfa84892b4cda9c9b2f9ad7545fa985568d51a1643e051b223adaf40d534c439ffd7e0c3ac6353a58c88d8e1b6242e0aac2b2084682cf8988951c148c5d471eb3cb6f46a1955c0d4f93617bdd71b545df4ee8fec821f57a96badbd8c594dc0b7e68d4a103ab7e7ca9443cae1d47c479ad38b463b29b499bf9173e866816cb3a8626509ec82b98884ffb5b9c5a64e067962d61bac25d61cb07721af83d8a9752050581c41f6b650e8b99b29769a7c6bea9d1d0b338adfc85fe2bf571c7184aea3", 0xe1}], 0x5, 0x0, 0x0, 0x20004080}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x0, 0x43, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xe7, 0xc2, 0xf7, 0x8, 0x421, 0x335, 0x5f0e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x31, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x4}, @mdlm_detail={0x4}]}]}}]}}]}}, 0x0) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000040)="c6", 0x1, 0x480c4, &(0x7f0000000000)={0xa, 0x4e23, 0x100, @loopback, 0xffffffff}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r4, 0x4004510f, &(0x7f0000000080)=0xfb9fa3e5) 962.80649ms ago: executing program 3 (id=2383): unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r5, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c0007"], 0x38}}, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x9}) write$uinput_user_dev(r3, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4b], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55f8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) 810.412094ms ago: executing program 5 (id=2384): syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002000)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006180)="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", 0x2000, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}, {0x7, 0x4200, 0x0, 0x0}, {0x794, 0xd201, 0x0, 0x0}], 0x3}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002300)="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", 0x2000, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, 0x20, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x4008000) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffffffffffec2, 0x0, 0x0, 0x0, 0x0, 0x4a0f0000}, 0x20000004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000cca605e2752cc8ea88eab0000030000"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) mq_getsetattr(r3, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f00000004c0)={0xffffffff, 0xc9a, 0x80080000, 0x6, 0xe, '\t\x00'}) 536.543768ms ago: executing program 4 (id=2385): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c) sendto$inet(r0, 0x0, 0x0, 0xd000, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 395.348422ms ago: executing program 4 (id=2386): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 361.802199ms ago: executing program 4 (id=2387): socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$video(0x0, 0xa7, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)={0x28, 0x6c, 0x1, 0x70bd29, 0x25dfdbff, "", [@typed={0x8, 0xd, 0x0, 0x0, @fd}, @nested={0x10, 0x13b, 0x0, 0x1, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @pid}]}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x20004880}, 0xc000) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0x4000}, 0xc) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0xc048aeca, &(0x7f0000000080)) 0s ago: executing program 4 (id=2388): ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x400caed0, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0xffffffff}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00220f00000054b20000935aa8257f90b39e"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000080)={0x2, 0x100, 0x20a6}) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, 0x0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f0000000500)=""/121) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 64] veth1_macvtap: entered promiscuous mode [ 532.518452][T12264] veth1_macvtap: entered allmulticast mode [ 532.529822][T12264] macsec0: left allmulticast mode [ 532.551131][T12264] veth1_macvtap: left allmulticast mode [ 533.202490][ T10] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 533.390927][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 533.428534][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.469528][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.500685][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 533.540890][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 533.560979][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.582007][ T10] usb 6-1: config 0 descriptor?? [ 533.851044][ T6004] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 534.039057][ T6004] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 534.052670][ T6004] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.056497][ T10] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 534.070290][ T6004] usb 5-1: Product: Ⰹ [ 534.070923][ T10] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 534.075225][ T6004] usb 5-1: Manufacturer: 、 [ 534.084345][ T10] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 534.088950][ T6004] usb 5-1: SerialNumber: І [ 534.102331][ T10] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 534.115378][ T10] microsoft 0003:045E:07DA.0018: no inputs found [ 534.129091][ T10] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway [ 534.525604][T12276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.543931][T12276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.560282][T12276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.579406][T12276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.604744][T12276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.676197][T12276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.693382][T12276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.767431][T12276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.810646][ T6004] usb 5-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 534.836947][ T6004] usb 5-1: found format II with max.bitrate = 13, frame size=1594 [ 534.866250][ T6004] usb 5-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 534.877758][ T6004] usb 5-1: found format II with max.bitrate = 13, frame size=1594 [ 534.923662][ T6004] usb 5-1: failed to enable PITCH for EP 0x82 [ 535.054825][ T6004] usb 5-1: USB disconnect, device number 57 [ 535.196528][ T6010] udevd[6010]: setting mode of /dev/bus/usb/005/057 to 020664 failed: No such file or directory [ 535.367515][ T6010] udevd[6010]: setting owner of /dev/bus/usb/005/057 to uid=0, gid=0 failed: No such file or directory [ 535.604378][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.828582][ T9] usb 6-1: USB disconnect, device number 33 [ 537.136172][ T30] audit: type=1326 audit(1757124405.529:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.4.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355718ebe9 code=0x7ffc0000 [ 537.158735][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.182198][ T30] audit: type=1326 audit(1757124405.529:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.4.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355718ebe9 code=0x7ffc0000 [ 537.205264][ T30] audit: type=1326 audit(1757124405.559:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.4.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f355718ebe9 code=0x7ffc0000 [ 537.228204][ T30] audit: type=1326 audit(1757124405.559:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.4.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355718ebe9 code=0x7ffc0000 [ 537.256405][ T30] audit: type=1326 audit(1757124405.559:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.4.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f355718ebe9 code=0x7ffc0000 [ 537.305943][ T30] audit: type=1326 audit(1757124405.559:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.4.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355718ebe9 code=0x7ffc0000 [ 537.329163][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.337113][ T30] audit: type=1326 audit(1757124405.559:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.4.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f355718d69f code=0x7ffc0000 [ 537.359561][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.368243][ T30] audit: type=1326 audit(1757124405.559:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.4.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355718ebe9 code=0x7ffc0000 [ 537.380859][ T9] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 537.391063][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.392340][ T30] audit: type=1326 audit(1757124405.559:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.4.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f355718ebe9 code=0x7ffc0000 [ 537.428142][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.440040][ T30] audit: type=1326 audit(1757124405.559:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.4.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355718ebe9 code=0x7ffc0000 [ 537.556600][ T9] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 537.594564][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 537.631886][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 537.650399][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 537.675781][ T9] usb 6-1: Product: syz [ 537.685741][ T9] usb 6-1: Manufacturer: syz [ 537.690407][ T9] usb 6-1: SerialNumber: syz [ 537.724634][ T9] usb 6-1: config 0 descriptor?? [ 537.738453][T12337] futex_wake_op: syz.3.1951 tries to shift op by 32; fix this program [ 537.754431][ T9] usb 6-1: selecting invalid altsetting 0 [ 538.543458][T12352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1954'. [ 539.080932][ T9] usb 6-1: USB disconnect, device number 34 [ 539.104962][T12348] sctp: failed to load transform for md5: -2 [ 541.020945][ T45] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 541.060892][ T5955] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 541.191424][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 541.202312][ T45] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 541.210619][ T45] usb 6-1: config 0 has no interface number 0 [ 541.227668][ T45] usb 6-1: config 0 interface 89 has no altsetting 0 [ 541.235426][ T5955] usb 2-1: Using ep0 maxpacket: 16 [ 541.257547][ T45] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 541.268999][ T5955] usb 2-1: config index 0 descriptor too short (expected 1828, got 36) [ 541.288839][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.297700][ T5955] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 541.311179][ T45] usb 6-1: Product: syz [ 541.315397][ T45] usb 6-1: Manufacturer: syz [ 541.330573][ T5955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.341452][ T45] usb 6-1: SerialNumber: syz [ 541.352756][ T5955] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 541.364167][ T45] usb 6-1: config 0 descriptor?? [ 541.392486][ T45] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 541.402952][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 541.431332][ T45] em28xx 6-1:0.89: Video interface 89 found: bulk [ 541.438069][ T5955] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 541.475290][ T5955] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 541.493100][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.511088][ T5955] usb 2-1: Product: syz [ 541.521017][ T5955] usb 2-1: Manufacturer: syz [ 541.530938][ T5955] usb 2-1: SerialNumber: syz [ 541.556813][ T5955] usb 2-1: config 0 descriptor?? [ 541.577202][ T5955] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 541.591394][ T5955] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 541.620277][ T5955] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 541.640661][ T5955] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 541.659178][ T5955] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 541.678767][ T5955] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 541.697399][ T5955] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 541.724074][ T5955] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 541.752120][ T5955] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 541.777739][T12389] tipc: Enabled bearer , priority 22 [ 541.791622][ T5955] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 541.873949][ T5955] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 541.901782][ T5955] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 541.977945][ T45] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 542.021422][ T5955] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 542.051354][ T5955] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 542.078666][ T5955] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 542.262711][ T10] usb 2-1: USB disconnect, device number 52 [ 542.281377][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 542.295000][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 542.305632][ T10] keyspan 2-1:0.0: device disconnected [ 542.751478][T12409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1971'. [ 542.761578][T12409] netlink: 18 bytes leftover after parsing attributes in process `syz.3.1971'. [ 543.203535][ T5955] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 543.225481][ T45] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 543.299062][ T45] em28xx 6-1:0.89: board has no eeprom [ 543.373986][ T45] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 543.384336][ T45] em28xx 6-1:0.89: analog set to bulk mode. [ 543.396060][ T6004] em28xx 6-1:0.89: Registering V4L2 extension [ 543.413400][ T5955] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 543.422879][ T45] usb 6-1: USB disconnect, device number 35 [ 543.435943][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.447023][ T45] em28xx 6-1:0.89: Disconnecting em28xx [ 543.452789][ T5955] usb 5-1: Product: Ⰹ [ 543.468768][ T5955] usb 5-1: Manufacturer: 、 [ 543.636456][ T5955] usb 5-1: SerialNumber: І [ 543.836936][ T6004] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 543.888158][ T6004] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 543.901055][ T6004] em28xx 6-1:0.89: No AC97 audio processor [ 543.929375][ T6004] usb 6-1: Decoder not found [ 543.936700][ T6004] em28xx 6-1:0.89: failed to create media graph [ 543.950357][ T6004] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 543.978738][ T6004] em28xx 6-1:0.89: Registering snapshot button... [ 544.011669][ T6004] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input37 [ 544.062499][ T6004] em28xx 6-1:0.89: Remote control support is not available for this card. [ 544.081865][ T45] em28xx 6-1:0.89: Closing input extension [ 544.089326][ T45] em28xx 6-1:0.89: Deregistering snapshot button [ 544.229649][T12416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.259903][ T45] em28xx 6-1:0.89: Freeing device [ 544.261457][T12416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.320466][T12416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.364475][T12416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.390448][T12416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.419667][T12416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.449147][T12416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.460416][T12416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.489289][ T5955] usb 5-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 544.508406][ T5955] usb 5-1: found format II with max.bitrate = 13, frame size=1594 [ 544.518150][ T5955] usb 5-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 544.527412][ T5955] usb 5-1: found format II with max.bitrate = 13, frame size=1594 [ 544.540567][ T5955] usb 5-1: failed to enable PITCH for EP 0x82 [ 544.583633][ T5955] usb 5-1: USB disconnect, device number 58 [ 544.632564][ T45] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 544.661514][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.801082][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 544.808347][ T45] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 544.817353][ T45] usb 6-1: config 0 has no interface number 0 [ 544.827572][ T45] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 544.840420][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.849874][ T45] usb 6-1: Product: syz [ 544.854442][ T45] usb 6-1: Manufacturer: syz [ 544.859148][ T45] usb 6-1: SerialNumber: syz [ 544.870633][ T45] usb 6-1: config 0 descriptor?? [ 544.886906][ T45] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 545.117691][ T45] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 545.164289][ T45] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 545.589066][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 545.598582][ T45] usb 6-1: USB disconnect, device number 36 [ 545.617299][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 545.617318][ T30] audit: type=1326 audit(1757124414.009:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12446 comm="syz.1.1983" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6384d8ebe9 code=0x0 [ 545.646377][ T45] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 545.727692][ T45] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 545.770417][ T45] quatech2 6-1:0.51: device disconnected [ 545.846056][T12455] syzkaller0: entered promiscuous mode [ 545.866977][T12455] syzkaller0: entered allmulticast mode [ 545.933635][T12455] tipc: Enabled bearer , priority 0 [ 546.107211][T12454] tipc: Resetting bearer [ 546.172354][T12454] tipc: Disabling bearer [ 547.351354][ T5955] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 547.743424][ T5955] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 547.762895][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.837551][ T5955] usb 6-1: config 0 descriptor?? [ 547.862162][ T5955] cp210x 6-1:0.0: cp210x converter detected [ 548.540921][T12396] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 548.690919][T12396] usb 5-1: Using ep0 maxpacket: 8 [ 548.702738][T12396] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 548.712421][T12396] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.722204][T12396] usb 5-1: Product: syz [ 548.727831][T12396] usb 5-1: Manufacturer: syz [ 548.732716][T12396] usb 5-1: SerialNumber: syz [ 548.740182][T12396] usb 5-1: config 0 descriptor?? [ 548.750591][T12396] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 548.783110][ T5955] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 548.791097][ T5955] cp210x 6-1:0.0: querying part number failed [ 548.803583][ T5955] usb 6-1: cp210x converter now attached to ttyUSB0 [ 548.817902][ T5955] usb 6-1: USB disconnect, device number 37 [ 548.845860][ T5955] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 548.854828][ T5955] cp210x 6-1:0.0: device disconnected [ 548.953430][T12487] binder: 12486:12487 ioctl c018620c 0 returned -14 [ 549.771220][T12396] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 549.791689][T12396] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 551.267821][ T6004] usb 5-1: USB disconnect, device number 59 [ 552.620384][T12573] FAULT_INJECTION: forcing a failure. [ 552.620384][T12573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.641431][T12573] CPU: 1 UID: 0 PID: 12573 Comm: syz.4.2024 Not tainted syzkaller #0 PREEMPT(full) [ 552.641460][T12573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 552.641471][T12573] Call Trace: [ 552.641479][T12573] [ 552.641499][T12573] dump_stack_lvl+0x189/0x250 [ 552.641528][T12573] ? __pfx____ratelimit+0x10/0x10 [ 552.641548][T12573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 552.641578][T12573] ? __pfx__printk+0x10/0x10 [ 552.641599][T12573] ? __might_fault+0xb0/0x130 [ 552.641630][T12573] should_fail_ex+0x414/0x560 [ 552.641662][T12573] _copy_from_user+0x2d/0xb0 [ 552.641687][T12573] ___sys_sendmsg+0x158/0x2a0 [ 552.641714][T12573] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.641779][T12573] ? __fget_files+0x2a/0x420 [ 552.641795][T12573] ? __fget_files+0x3a0/0x420 [ 552.641832][T12573] __x64_sys_sendmsg+0x19b/0x260 [ 552.641859][T12573] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 552.641894][T12573] ? __pfx_ksys_write+0x10/0x10 [ 552.641916][T12573] ? rcu_is_watching+0x15/0xb0 [ 552.641942][T12573] ? do_syscall_64+0xbe/0x3b0 [ 552.641966][T12573] do_syscall_64+0xfa/0x3b0 [ 552.641985][T12573] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.642003][T12573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.642022][T12573] ? clear_bhb_loop+0x60/0xb0 [ 552.642046][T12573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.642063][T12573] RIP: 0033:0x7f355718ebe9 [ 552.642081][T12573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.642098][T12573] RSP: 002b:00007f3558004038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.642119][T12573] RAX: ffffffffffffffda RBX: 00007f35573c5fa0 RCX: 00007f355718ebe9 [ 552.642133][T12573] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 552.642144][T12573] RBP: 00007f3558004090 R08: 0000000000000000 R09: 0000000000000000 [ 552.642156][T12573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.642167][T12573] R13: 00007f35573c6038 R14: 00007f35573c5fa0 R15: 00007f35574efa28 [ 552.642198][T12573] [ 552.857623][ C1] vkms_vblank_simulate: vblank timer overrun [ 553.285242][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2026'. [ 553.308397][T12579] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 553.326669][T12579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.379047][T12577] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 553.449231][T12577] CIFS: iocharset name too long [ 553.942602][T12584] sit1: entered allmulticast mode [ 554.559837][T12603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2031'. [ 555.007607][T12617] netlink: 'syz.1.2037': attribute type 23 has an invalid length. [ 556.204078][T12635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2039'. [ 556.641539][ T3096] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 557.101006][ T3096] usb 5-1: Using ep0 maxpacket: 8 [ 557.108513][ T3096] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 557.158896][ T3096] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 557.228722][ T3096] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 557.272511][ T3096] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 557.360818][ T3096] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 557.406479][ T3096] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 557.459804][ T3096] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 557.528085][ T3096] usb 5-1: config 168 interface 0 has no altsetting 0 [ 557.551622][ T3096] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 557.568083][ T3096] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 557.608701][ T3096] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 557.617117][T12642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2043'. [ 557.657252][ T3096] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 557.710953][ T3096] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 557.737014][ T3096] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 557.758141][ T3096] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 557.776100][ T3096] usb 5-1: config 168 interface 0 has no altsetting 0 [ 557.784694][ T3096] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 557.800895][ T3096] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 557.817096][ T3096] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 557.839124][ T3096] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 557.890997][ T3096] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 557.912865][ T3096] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 557.940949][ T3096] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 557.969079][ T3096] usb 5-1: config 168 interface 0 has no altsetting 0 [ 557.995250][ T3096] usb 5-1: string descriptor 0 read error: -22 [ 558.002024][ T3096] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 558.011436][ T3096] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.064383][ T3096] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 558.108511][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2041'. [ 558.176108][T12660] FAULT_INJECTION: forcing a failure. [ 558.176108][T12660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.189559][T12660] CPU: 1 UID: 0 PID: 12660 Comm: syz.5.2050 Not tainted syzkaller #0 PREEMPT(full) [ 558.189587][T12660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 558.189598][T12660] Call Trace: [ 558.189607][T12660] [ 558.189615][T12660] dump_stack_lvl+0x189/0x250 [ 558.189645][T12660] ? __pfx____ratelimit+0x10/0x10 [ 558.189666][T12660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.189689][T12660] ? __pfx__printk+0x10/0x10 [ 558.189730][T12660] should_fail_ex+0x414/0x560 [ 558.189763][T12660] _copy_to_user+0x31/0xb0 [ 558.189790][T12660] simple_read_from_buffer+0xe1/0x170 [ 558.189823][T12660] proc_fail_nth_read+0x1b3/0x220 [ 558.189848][T12660] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 558.189873][T12660] ? rw_verify_area+0x2a6/0x4d0 [ 558.189895][T12660] ? __lock_acquire+0xab9/0xd20 [ 558.189920][T12660] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 558.189943][T12660] vfs_read+0x200/0xa30 [ 558.189967][T12660] ? fdget_pos+0x247/0x320 [ 558.189989][T12660] ? __pfx___mutex_lock+0x10/0x10 [ 558.190010][T12660] ? __pfx_vfs_read+0x10/0x10 [ 558.190036][T12660] ? __fget_files+0x2a/0x420 [ 558.190058][T12660] ? __fget_files+0x3a0/0x420 [ 558.190074][T12660] ? __fget_files+0x2a/0x420 [ 558.190102][T12660] ksys_read+0x145/0x250 [ 558.190129][T12660] ? __pfx_ksys_read+0x10/0x10 [ 558.190150][T12660] ? rcu_is_watching+0x15/0xb0 [ 558.190175][T12660] ? do_syscall_64+0xbe/0x3b0 [ 558.190200][T12660] do_syscall_64+0xfa/0x3b0 [ 558.190217][T12660] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.190235][T12660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.190253][T12660] ? clear_bhb_loop+0x60/0xb0 [ 558.190276][T12660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.190293][T12660] RIP: 0033:0x7f166378d5fc [ 558.190310][T12660] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 558.190326][T12660] RSP: 002b:00007f1664684030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 558.190347][T12660] RAX: ffffffffffffffda RBX: 00007f16639c5fa0 RCX: 00007f166378d5fc [ 558.190361][T12660] RDX: 000000000000000f RSI: 00007f16646840a0 RDI: 0000000000000003 [ 558.190373][T12660] RBP: 00007f1664684090 R08: 0000000000000000 R09: 0000000000000000 [ 558.190385][T12660] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 558.190396][T12660] R13: 00007f16639c6038 R14: 00007f16639c5fa0 R15: 00007f1663aefa28 [ 558.190430][T12660] [ 558.498883][T12667] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2049'. [ 558.849799][T12636] tipc: Enabled bearer , priority 0 [ 558.859461][T12636] syzkaller0: entered promiscuous mode [ 558.866292][T12636] syzkaller0: entered allmulticast mode [ 559.135469][T12670] tipc: Resetting bearer [ 559.162642][T12663] kvm: pic: non byte write [ 559.169392][T12634] tipc: Resetting bearer [ 559.300333][ T5955] usb 5-1: USB disconnect, device number 60 [ 559.389430][T12634] tipc: Disabling bearer [ 559.907297][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2056'. [ 560.829660][T12699] fuse: Bad value for 'rootmode' [ 560.836988][T12699] netlink: 'syz.5.2059': attribute type 10 has an invalid length. [ 561.406227][T12713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2062'. [ 561.862525][T12720] binder_alloc: 12719: pid 12719 spamming oneway? 1 buffers allocated for a total size of 4096 [ 561.896853][T12720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2066'. [ 562.081064][T12396] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 562.097997][T12712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2063'. [ 562.257044][T12396] usb 6-1: Using ep0 maxpacket: 32 [ 562.274796][T12396] usb 6-1: config 1 has an invalid descriptor of length 107, skipping remainder of the config [ 562.294264][T12396] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 562.312599][T12396] usb 6-1: config 1 has no interface number 1 [ 562.327410][T12396] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 125, changing to 7 [ 562.359225][T12713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.368817][T12396] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 562.378738][T12396] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.401922][T12713] bond_slave_0: left promiscuous mode [ 562.412983][T12396] usb 6-1: Product: syz [ 562.419449][T12713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.429238][T12396] usb 6-1: Manufacturer: syz [ 562.434477][T12396] usb 6-1: SerialNumber: syz [ 562.442269][T12713] bond_slave_1: left promiscuous mode [ 562.446672][T12713] bond0 (unregistering): Released all slaves [ 562.579470][T12724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2067'. [ 562.711266][T12396] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 562.711297][T12396] usb 6-1: 2:1 : format type 6 is not supported yet [ 562.749102][T12396] usb 6-1: USB disconnect, device number 38 [ 562.867107][ T6002] udevd[6002]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 563.208759][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.212855][ T919] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 563.215746][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.299493][ T919] usb 4-1: USB disconnect, device number 51 [ 563.300913][ T3096] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 563.487150][ T3096] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 563.508837][ T3096] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.545559][ T3096] usb 5-1: Product: Ⰹ [ 563.563541][ T3096] usb 5-1: Manufacturer: 、 [ 563.596520][ T3096] usb 5-1: SerialNumber: І [ 563.858627][T12759] netlink: 'syz.3.2078': attribute type 10 has an invalid length. [ 563.868465][T12759] macvlan1: entered allmulticast mode [ 563.877979][T12759] veth1_vlan: entered allmulticast mode [ 563.895051][T12759] team0: Port device macvlan1 added [ 564.038978][T12739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.051945][T12739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.066632][T12761] program syz.0.2079 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 564.077759][T12739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.097741][T12739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.114454][T12739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.125291][T12739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.149307][T12739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.163022][T12739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.186844][ T3096] usb 5-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 564.201544][ T3096] usb 5-1: found format II with max.bitrate = 13, frame size=1594 [ 564.241848][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2081'. [ 564.242805][ T3096] usb 5-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 564.475714][ T3096] usb 5-1: found format II with max.bitrate = 13, frame size=1594 [ 564.544102][ T3096] usb 5-1: failed to enable PITCH for EP 0x82 [ 564.683002][ T3096] usb 5-1: USB disconnect, device number 61 [ 565.072057][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2080'. [ 565.459673][ T30] audit: type=1326 audit(1757124433.849:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12784 comm="syz.3.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701f38ebe9 code=0x7ffc0000 [ 565.484325][ T30] audit: type=1326 audit(1757124433.849:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12784 comm="syz.3.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701f38ebe9 code=0x7ffc0000 [ 565.519182][ T30] audit: type=1326 audit(1757124433.849:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12784 comm="syz.3.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f701f38ebe9 code=0x7ffc0000 [ 565.582397][T12793] tipc: New replicast peer: 0.0.0.0 [ 565.590669][T12793] tipc: Enabled bearer , priority 10 [ 565.609940][T12793] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2091'. [ 565.634617][T12797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2092'. [ 565.891023][T12396] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 566.050862][T12396] usb 2-1: Using ep0 maxpacket: 32 [ 566.059467][T12396] usb 2-1: config 0 has an invalid interface number: 136 but max is 0 [ 566.068275][T12396] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.079295][T12396] usb 2-1: config 0 has no interface number 0 [ 566.085982][T12396] usb 2-1: config 0 interface 136 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 566.099761][T12396] usb 2-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 566.111142][T12396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.123171][T12396] usb 2-1: config 0 descriptor?? [ 566.145074][T12396] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 566.297584][T12396] snd-usb-audio 2-1:0.136: probe with driver snd-usb-audio failed with error -2 [ 566.367373][T12396] usb 2-1: USB disconnect, device number 53 [ 566.521679][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2100'. [ 566.547973][T12821] : entered promiscuous mode [ 566.635506][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2099'. [ 567.062365][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2104'. [ 567.311129][T12835] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2103'. [ 567.691417][T12396] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 567.780055][T12846] loop4: detected capacity change from 0 to 1 [ 567.836885][T12846] Dev loop4: unable to read RDB block 1 [ 567.849812][T12846] loop4: unable to read partition table [ 567.858894][T12846] loop4: partition table beyond EOD, truncated [ 567.876053][T12846] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 568.068580][T12855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2108'. [ 568.150215][T12396] usb 2-1: Using ep0 maxpacket: 32 [ 568.352279][T12396] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 568.361869][T12396] usb 2-1: config 0 has no interface number 0 [ 568.411113][T12396] usb 2-1: config 0 interface 184 has no altsetting 0 [ 568.420807][T12396] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 568.429911][T12396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.437963][T12396] usb 2-1: Product: syz [ 568.442185][T12396] usb 2-1: Manufacturer: syz [ 568.446886][T12396] usb 2-1: SerialNumber: syz [ 568.455685][T12396] usb 2-1: config 0 descriptor?? [ 568.515562][T12396] smsc75xx v1.0.0 [ 568.528266][T12396] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 568.538987][T12396] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 570.267632][ T6004] usb 2-1: USB disconnect, device number 54 [ 570.811035][ T9] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 571.201142][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 571.211830][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 571.215092][T12886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2116'. [ 571.306019][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 571.375596][ T9] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 571.406266][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.433959][ T9] usb 5-1: Product: syz [ 571.451197][ T9] usb 5-1: Manufacturer: syz [ 571.456879][ T9] usb 5-1: SerialNumber: syz [ 571.495354][ T9] usb 5-1: config 0 descriptor?? [ 571.590092][ T9] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 572.331116][ T919] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 572.576930][ T919] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 572.615202][ T919] usb 2-1: config 0 has no interface number 0 [ 572.627913][ T919] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 572.638839][ T919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.891184][ T919] usb 2-1: Product: syz [ 572.916966][ T919] usb 2-1: Manufacturer: syz [ 572.956212][ T919] usb 2-1: SerialNumber: syz [ 573.039989][ T919] usb 2-1: config 0 descriptor?? [ 573.211825][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2124'. [ 573.241119][ T9] snd_usb_toneport 5-1:0.0: set_interface failed [ 573.277693][ T9] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 573.307130][ T9] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 573.372252][ T9] usb 5-1: USB disconnect, device number 62 [ 573.419414][T12916] team0: Port device vlan2 added [ 573.467871][T12921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2125'. [ 573.487664][ T919] usb 2-1: Firmware version (0.0) predates our first public release. [ 573.508109][ T919] usb 2-1: Please update to version 0.2 or newer [ 573.519450][ T919] usb 2-1: Firmware: build [ 573.837580][ T9] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 574.180879][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 574.234198][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 574.243161][ T9] usb 5-1: config 0 has no interface number 0 [ 574.278368][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 574.291429][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 574.301180][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.312198][ T9] usb 5-1: Product: syz [ 574.316648][ T9] usb 5-1: Manufacturer: syz [ 574.324965][ T9] usb 5-1: SerialNumber: syz [ 574.337334][ T9] usb 5-1: config 0 descriptor?? [ 574.348744][ T9] smsc75xx v1.0.0 [ 574.353274][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 574.364668][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 574.867695][T12396] usb 2-1: USB disconnect, device number 55 [ 575.983000][T12396] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 576.150874][T12396] usb 2-1: Using ep0 maxpacket: 16 [ 576.161665][T12953] fuse: Unknown parameter 'Cn ֏7(.mfB7!mܲY, priority 0 [ 585.640935][T13089] syzkaller0: entered promiscuous mode [ 585.650591][T13089] syzkaller0: entered allmulticast mode [ 585.792319][T13089] tipc: Resetting bearer [ 586.077531][T13088] tipc: Resetting bearer [ 586.298771][T13088] tipc: Disabling bearer [ 586.466142][T13102] sctp: [Deprecated]: syz.3.2177 (pid 13102) Use of struct sctp_assoc_value in delayed_ack socket option. [ 586.466142][T13102] Use struct sctp_sack_info instead [ 587.212183][T13111] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2179'. [ 587.280428][ T6004] usb 2-1: USB disconnect, device number 58 [ 587.358530][T12396] usb 5-1: USB disconnect, device number 64 [ 587.503628][T13113] Invalid logical block size (14745599) [ 587.900927][T12396] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 587.941525][ T6004] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 588.063033][T12396] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 588.084850][T12396] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 588.104279][ T6004] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 588.124427][ T6004] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.139261][T12396] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 588.155384][ T6004] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 588.166336][ T6004] usb 5-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 588.176896][ T6004] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.188458][T12396] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 588.213264][T12396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.233130][ T6004] usb 5-1: config 0 descriptor?? [ 588.240967][T12396] usb 2-1: Product: syz [ 588.245578][T12396] usb 2-1: Manufacturer: syz [ 588.268877][T12396] usb 2-1: SerialNumber: syz [ 588.279702][T12396] usb 2-1: config 0 descriptor?? [ 588.286189][T13131] syzkaller0: entered promiscuous mode [ 588.330912][T13131] syzkaller0: entered allmulticast mode [ 588.683675][T13138] Invalid logical block size (65431) [ 588.739980][T13135] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 588.749980][T13140] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2183'. [ 588.786458][T12396] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 588.816722][T13131] tipc: Enabled bearer , priority 0 [ 588.827353][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2183'. [ 588.837296][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2183'. [ 588.846702][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2183'. [ 588.882330][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2183'. [ 588.892118][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2183'. [ 588.909216][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2183'. [ 588.920473][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2183'. [ 588.930651][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2183'. [ 588.943376][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2183'. [ 588.953797][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2183'. [ 588.965535][T13130] tipc: Resetting bearer [ 589.206878][T13130] tipc: Disabling bearer [ 589.342840][ T10] usb 2-1: USB disconnect, device number 59 [ 589.781636][ T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 589.950888][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 589.962202][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 589.972891][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 589.986443][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 589.996700][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.005210][ T9] usb 4-1: Product: syz [ 590.009497][ T9] usb 4-1: Manufacturer: syz [ 590.016837][ T9] usb 4-1: SerialNumber: syz [ 590.029105][ T9] usb 4-1: config 0 descriptor?? [ 590.191122][ T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 590.250392][ T9] usb 4-1: USB disconnect, device number 52 [ 590.350979][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 590.359717][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 590.368615][ T10] usb 2-1: config 179 has no interface number 0 [ 590.375689][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 590.387818][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 590.399811][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 590.416819][ T10] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 590.433415][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 590.443105][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.458462][T13154] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 590.678911][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input38 [ 590.745982][ T6004] usb 5-1: USB disconnect, device number 65 [ 590.967488][ T919] usb 2-1: USB disconnect, device number 60 [ 590.967522][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 590.983519][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 591.603362][T13175] syzkaller0: entered promiscuous mode [ 591.607942][T13177] loop6: detected capacity change from 0 to 63 [ 591.627755][ T5880] buffer_io_error: 315 callbacks suppressed [ 591.627773][ T5880] Buffer I/O error on dev loop6, logical block 0, async page read [ 591.642832][T13175] syzkaller0: entered allmulticast mode [ 591.644353][T13177] Buffer I/O error on dev loop6, logical block 0, async page read [ 591.659796][ T5880] Buffer I/O error on dev loop6, logical block 0, async page read [ 591.679796][T13177] Buffer I/O error on dev loop6, logical block 0, async page read [ 591.693426][ T5880] Buffer I/O error on dev loop6, logical block 0, async page read [ 591.694122][T13175] tipc: Enabled bearer , priority 0 [ 591.709885][ T5880] Buffer I/O error on dev loop6, logical block 0, async page read [ 591.718445][T13174] tipc: Resetting bearer [ 591.718970][T13177] Buffer I/O error on dev loop6, logical block 0, async page read [ 591.750278][ T5880] Buffer I/O error on dev loop6, logical block 0, async page read [ 591.760255][T13174] tipc: Disabling bearer [ 591.762231][T13177] Buffer I/O error on dev loop6, logical block 0, async page read [ 592.444137][T13197] tipc: New replicast peer: 0.0.0.0 [ 592.453598][T13197] tipc: Enabled bearer , priority 10 [ 592.531667][ T10] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 592.691983][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 592.698971][ T10] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 592.709709][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 592.722944][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 592.732379][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.750951][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 592.759148][ T10] usb 5-1: Product: syz [ 592.766528][ T10] usb 5-1: Manufacturer: syz [ 592.771681][ T10] usb 5-1: SerialNumber: syz [ 592.821142][ T919] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 592.933126][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.946075][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 592.951739][T13207] syzkaller0: entered promiscuous mode [ 592.961517][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 592.974498][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.984196][T13207] syzkaller0: entered allmulticast mode [ 592.993765][ T9] usb 4-1: config 0 descriptor?? [ 593.001356][ T919] usb 6-1: Using ep0 maxpacket: 8 [ 593.012020][ T919] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 593.012434][ T10] usb 5-1: 0:2 : does not exist [ 593.023102][ T919] usb 6-1: config 179 has no interface number 0 [ 593.033029][ T919] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 593.045175][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 593.045638][ T919] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 593.064562][ T919] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 593.078025][ T919] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 593.093131][ T919] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 593.095199][T13207] tipc: Enabled bearer , priority 0 [ 593.100661][ T10] usb 5-1: USB disconnect, device number 66 [ 593.122250][T13206] tipc: Resetting bearer [ 593.129107][ T919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.156429][T13201] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 593.179980][T13206] tipc: Disabling bearer [ 593.214193][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 593.401132][ T919] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input39 [ 593.573972][ T919] tipc: Node number set to 2368680995 [ 593.770223][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 593.778868][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 593.895533][ T9] usb 4-1: USB disconnect, device number 53 [ 593.943396][ T5996] usb 6-1: USB disconnect, device number 39 [ 593.943396][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 593.958419][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 594.761565][T13240] FAULT_INJECTION: forcing a failure. [ 594.761565][T13240] name failslab, interval 1, probability 0, space 0, times 0 [ 594.797155][T13240] CPU: 0 UID: 0 PID: 13240 Comm: syz.3.2223 Not tainted syzkaller #0 PREEMPT(full) [ 594.797176][T13240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 594.797183][T13240] Call Trace: [ 594.797189][T13240] [ 594.797195][T13240] dump_stack_lvl+0x189/0x250 [ 594.797216][T13240] ? __pfx____ratelimit+0x10/0x10 [ 594.797228][T13240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 594.797241][T13240] ? __pfx__printk+0x10/0x10 [ 594.797259][T13240] ? __pfx___might_resched+0x10/0x10 [ 594.797270][T13240] ? fs_reclaim_acquire+0x7d/0x100 [ 594.797289][T13240] should_fail_ex+0x414/0x560 [ 594.797316][T13240] should_failslab+0xa8/0x100 [ 594.797332][T13240] kmem_cache_alloc_noprof+0x73/0x3c0 [ 594.797346][T13240] ? alloc_vfsmnt+0x23/0x430 [ 594.797361][T13240] alloc_vfsmnt+0x23/0x430 [ 594.797376][T13240] clone_mnt+0x67/0xae0 [ 594.797389][T13240] ? do_raw_spin_unlock+0x122/0x240 [ 594.797405][T13240] copy_tree+0x3d4/0x930 [ 594.797427][T13240] copy_mnt_ns+0x179/0x880 [ 594.797442][T13240] ? rcu_is_watching+0x15/0xb0 [ 594.797455][T13240] ? create_new_namespaces+0x31/0x720 [ 594.797474][T13240] create_new_namespaces+0xd1/0x720 [ 594.797493][T13240] ? bpf_lsm_capable+0x9/0x20 [ 594.797507][T13240] ? security_capable+0x7e/0x2e0 [ 594.797527][T13240] unshare_nsproxy_namespaces+0x11c/0x170 [ 594.797540][T13240] ksys_unshare+0x4c8/0x8c0 [ 594.797558][T13240] ? __pfx_ksys_unshare+0x10/0x10 [ 594.797571][T13240] ? __pfx_ksys_write+0x10/0x10 [ 594.797591][T13240] __x64_sys_unshare+0x38/0x50 [ 594.797604][T13240] do_syscall_64+0xfa/0x3b0 [ 594.797615][T13240] ? lockdep_hardirqs_on+0x9c/0x150 [ 594.797626][T13240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.797636][T13240] ? clear_bhb_loop+0x60/0xb0 [ 594.797650][T13240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.797660][T13240] RIP: 0033:0x7f701f38ebe9 [ 594.797671][T13240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.797681][T13240] RSP: 002b:00007f7020290038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 594.797694][T13240] RAX: ffffffffffffffda RBX: 00007f701f5c5fa0 RCX: 00007f701f38ebe9 [ 594.797702][T13240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c020400 [ 594.797709][T13240] RBP: 00007f7020290090 R08: 0000000000000000 R09: 0000000000000000 [ 594.797716][T13240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.797723][T13240] R13: 00007f701f5c6038 R14: 00007f701f5c5fa0 R15: 00007f701f6efa28 [ 594.797741][T13240] [ 594.870987][ T919] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 595.183348][T13235] FAULT_INJECTION: forcing a failure. [ 595.183348][T13235] name failslab, interval 1, probability 0, space 0, times 0 [ 595.198011][T13235] CPU: 1 UID: 0 PID: 13235 Comm: syz.4.2221 Not tainted syzkaller #0 PREEMPT(full) [ 595.198040][T13235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 595.198049][T13235] Call Trace: [ 595.198057][T13235] [ 595.198063][T13235] dump_stack_lvl+0x189/0x250 [ 595.198082][T13235] ? __pfx____ratelimit+0x10/0x10 [ 595.198094][T13235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 595.198107][T13235] ? __pfx__printk+0x10/0x10 [ 595.198127][T13235] ? __lock_acquire+0xab9/0xd20 [ 595.198144][T13235] should_fail_ex+0x414/0x560 [ 595.198163][T13235] should_failslab+0xa8/0x100 [ 595.198180][T13235] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 595.198217][T13235] ? alloc_io_context+0x27/0x290 [ 595.198241][T13235] alloc_io_context+0x27/0x290 [ 595.198259][T13235] set_task_ioprio+0x462/0x5e0 [ 595.198269][T13235] ? set_task_ioprio+0x60/0x5e0 [ 595.198280][T13235] __se_sys_ioprio_set+0x519/0xa30 [ 595.198302][T13235] ? __se_sys_ioprio_set+0xd0/0xa30 [ 595.198320][T13235] do_syscall_64+0xfa/0x3b0 [ 595.198330][T13235] ? lockdep_hardirqs_on+0x9c/0x150 [ 595.198341][T13235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.198351][T13235] ? clear_bhb_loop+0x60/0xb0 [ 595.198382][T13235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.198393][T13235] RIP: 0033:0x7f355718ebe9 [ 595.198405][T13235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.198415][T13235] RSP: 002b:00007f3557fe3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 595.198428][T13235] RAX: ffffffffffffffda RBX: 00007f35573c6090 RCX: 00007f355718ebe9 [ 595.198436][T13235] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 595.198443][T13235] RBP: 00007f3557fe3090 R08: 0000000000000000 R09: 0000000000000000 [ 595.198450][T13235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.198457][T13235] R13: 00007f35573c6128 R14: 00007f35573c6090 R15: 00007f35574efa28 [ 595.198475][T13235] [ 595.501200][ T919] usb 6-1: Using ep0 maxpacket: 16 [ 595.508678][ T919] usb 6-1: config 3 has an invalid interface number: 156 but max is 0 [ 595.519309][ T919] usb 6-1: config 3 has no interface number 0 [ 595.531128][ T919] usb 6-1: config 3 interface 156 has no altsetting 0 [ 595.549928][ T919] usb 6-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=f1.d8 [ 595.561895][ T919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.570239][ T919] usb 6-1: Product: syz [ 595.574873][ T919] usb 6-1: Manufacturer: syz [ 595.579711][ T919] usb 6-1: SerialNumber: syz [ 595.753936][T13249] tipc: Enabled bearer , priority 10 [ 595.911016][ T919] gl620a 6-1:3.156: probe with driver gl620a failed with error -22 [ 595.943135][T13243] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 595.962113][ T919] usb 6-1: USB disconnect, device number 40 [ 596.035883][T13255] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 596.063437][T13255] syzkaller0: entered promiscuous mode [ 596.075382][T13255] syzkaller0: entered allmulticast mode [ 596.084998][T13257] __nla_validate_parse: 41 callbacks suppressed [ 596.085018][T13257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2230'. [ 596.128746][T13257] netlink: 18 bytes leftover after parsing attributes in process `syz.4.2230'. [ 596.142006][T13255] FAULT_INJECTION: forcing a failure. [ 596.142006][T13255] name failslab, interval 1, probability 0, space 0, times 0 [ 596.156330][T13255] CPU: 0 UID: 0 PID: 13255 Comm: syz.1.2229 Not tainted syzkaller #0 PREEMPT(full) [ 596.156355][T13255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 596.156365][T13255] Call Trace: [ 596.156374][T13255] [ 596.156381][T13255] dump_stack_lvl+0x189/0x250 [ 596.156407][T13255] ? __pfx____ratelimit+0x10/0x10 [ 596.156427][T13255] ? __pfx_dump_stack_lvl+0x10/0x10 [ 596.156448][T13255] ? __pfx__printk+0x10/0x10 [ 596.156477][T13255] ? __pfx___might_resched+0x10/0x10 [ 596.156495][T13255] ? fs_reclaim_acquire+0x7d/0x100 [ 596.156525][T13255] should_fail_ex+0x414/0x560 [ 596.156556][T13255] should_failslab+0xa8/0x100 [ 596.156585][T13255] __kmalloc_noprof+0xcb/0x4f0 [ 596.156605][T13255] ? kfree+0x4d/0x440 [ 596.156622][T13255] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 596.156646][T13255] tomoyo_realpath_from_path+0xe3/0x5d0 [ 596.156666][T13255] ? tomoyo_domain+0xd9/0x130 [ 596.156689][T13255] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 596.156712][T13255] tomoyo_path_number_perm+0x1e8/0x5a0 [ 596.156738][T13255] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 596.156779][T13255] ? __lock_acquire+0xab9/0xd20 [ 596.156823][T13255] ? __fget_files+0x2a/0x420 [ 596.156841][T13255] ? __fget_files+0x2a/0x420 [ 596.156853][T13255] ? __fget_files+0x3a0/0x420 [ 596.156866][T13255] ? __fget_files+0x2a/0x420 [ 596.156885][T13255] security_file_ioctl+0xcb/0x2d0 [ 596.156909][T13255] __se_sys_ioctl+0x47/0x170 [ 596.156932][T13255] do_syscall_64+0xfa/0x3b0 [ 596.156948][T13255] ? lockdep_hardirqs_on+0x9c/0x150 [ 596.156964][T13255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.156980][T13255] ? clear_bhb_loop+0x60/0xb0 [ 596.157001][T13255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.157017][T13255] RIP: 0033:0x7f6384d8ebe9 [ 596.157034][T13255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.157048][T13255] RSP: 002b:00007f6385c88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.157079][T13255] RAX: ffffffffffffffda RBX: 00007f6384fc5fa0 RCX: 00007f6384d8ebe9 [ 596.157091][T13255] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 596.157102][T13255] RBP: 00007f6385c88090 R08: 0000000000000000 R09: 0000000000000000 [ 596.157113][T13255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.157124][T13255] R13: 00007f6384fc6038 R14: 00007f6384fc5fa0 R15: 00007f63850efa28 [ 596.157153][T13255] [ 596.157160][T13255] ERROR: Out of memory at tomoyo_realpath_from_path. [ 596.400856][T12396] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 596.574064][T12396] usb 5-1: Using ep0 maxpacket: 8 [ 596.581513][T12396] usb 5-1: config 0 has no interfaces? [ 596.589526][T12396] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 596.599941][T12396] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.608555][T12396] usb 5-1: Product: syz [ 596.613202][T12396] usb 5-1: Manufacturer: syz [ 596.618008][T12396] usb 5-1: SerialNumber: syz [ 596.624977][T12396] usb 5-1: config 0 descriptor?? [ 596.815849][ T5996] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 596.857945][T12396] usb 5-1: USB disconnect, device number 67 [ 596.981155][ T5996] usb 4-1: Using ep0 maxpacket: 8 [ 596.989773][ T5996] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 597.000484][ T5996] usb 4-1: config 179 has no interface number 0 [ 597.008551][ T5996] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 597.020210][ T5996] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 597.051230][ T5996] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 597.072098][ T5996] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 597.093880][ T5996] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 597.109988][ T5996] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.132998][T13263] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 597.318746][T13278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2237'. [ 597.368170][ T5996] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input40 [ 597.528787][T13284] FAULT_INJECTION: forcing a failure. [ 597.528787][T13284] name failslab, interval 1, probability 0, space 0, times 0 [ 597.568414][T13284] CPU: 1 UID: 0 PID: 13284 Comm: syz.4.2241 Not tainted syzkaller #0 PREEMPT(full) [ 597.568442][T13284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 597.568454][T13284] Call Trace: [ 597.568463][T13284] [ 597.568472][T13284] dump_stack_lvl+0x189/0x250 [ 597.568501][T13284] ? __pfx____ratelimit+0x10/0x10 [ 597.568519][T13284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 597.568541][T13284] ? __pfx__printk+0x10/0x10 [ 597.568570][T13284] ? __pfx___might_resched+0x10/0x10 [ 597.568589][T13284] ? fs_reclaim_acquire+0x7d/0x100 [ 597.568622][T13284] should_fail_ex+0x414/0x560 [ 597.568656][T13284] should_failslab+0xa8/0x100 [ 597.568684][T13284] __kmalloc_noprof+0xcb/0x4f0 [ 597.568707][T13284] ? tomoyo_encode+0x28b/0x550 [ 597.568731][T13284] tomoyo_encode+0x28b/0x550 [ 597.568757][T13284] tomoyo_realpath_from_path+0x58d/0x5d0 [ 597.568789][T13284] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 597.568814][T13284] tomoyo_path_number_perm+0x1e8/0x5a0 [ 597.568842][T13284] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 597.568886][T13284] ? __lock_acquire+0xab9/0xd20 [ 597.568932][T13284] ? __fget_files+0x2a/0x420 [ 597.568953][T13284] ? __fget_files+0x2a/0x420 [ 597.568967][T13284] ? __fget_files+0x3a0/0x420 [ 597.568982][T13284] ? __fget_files+0x2a/0x420 [ 597.569003][T13284] security_file_ioctl+0xcb/0x2d0 [ 597.569037][T13284] __se_sys_ioctl+0x47/0x170 [ 597.569062][T13284] do_syscall_64+0xfa/0x3b0 [ 597.569080][T13284] ? lockdep_hardirqs_on+0x9c/0x150 [ 597.569099][T13284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.569117][T13284] ? clear_bhb_loop+0x60/0xb0 [ 597.569138][T13284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.569155][T13284] RIP: 0033:0x7f355718ebe9 [ 597.569173][T13284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.569188][T13284] RSP: 002b:00007f3558004038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.569209][T13284] RAX: ffffffffffffffda RBX: 00007f35573c5fa0 RCX: 00007f355718ebe9 [ 597.569223][T13284] RDX: 0000200000000040 RSI: 00000000c0185500 RDI: 0000000000000003 [ 597.569234][T13284] RBP: 00007f3558004090 R08: 0000000000000000 R09: 0000000000000000 [ 597.569244][T13284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.569255][T13284] R13: 00007f35573c6038 R14: 00007f35573c5fa0 R15: 00007f35574efa28 [ 597.569287][T13284] [ 597.569309][T13284] ERROR: Out of memory at tomoyo_realpath_from_path. [ 597.901284][T12396] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 597.935928][ T919] usb 4-1: USB disconnect, device number 54 [ 597.935955][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 598.076800][T12396] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 598.088396][T12396] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.098767][T12396] usb 6-1: Product: Ⰹ [ 598.103338][T12396] usb 6-1: Manufacturer: 、 [ 598.108653][T12396] usb 6-1: SerialNumber: І [ 598.220980][ T6004] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 598.370905][ T6004] usb 5-1: Using ep0 maxpacket: 8 [ 598.378498][ T6004] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 598.391861][ T6004] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 598.401234][ T6004] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.409396][ T6004] usb 5-1: Product: syz [ 598.413713][ T6004] usb 5-1: Manufacturer: syz [ 598.418375][ T6004] usb 5-1: SerialNumber: syz [ 598.420966][ T5996] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 598.429619][ T6004] usb 5-1: config 0 descriptor?? [ 598.442175][ T6004] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 598.450662][ T6004] usb 5-1: setting power ON [ 598.456108][ T6004] dvb-usb: bulk message failed: -22 (2/0) [ 598.465899][ T6004] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 598.481430][ T6004] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 598.490099][ T6004] usb 5-1: media controller created [ 598.523649][T13280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.528279][ T6004] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 598.540424][T13280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.553579][T13280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.572651][ T6004] usb 5-1: selecting invalid altsetting 6 [ 598.579173][ T6004] usb 5-1: digital interface selection failed (-22) [ 598.589282][T13280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.597833][ T5996] usb 2-1: Using ep0 maxpacket: 8 [ 598.601097][ T6004] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 598.614695][ T6004] usb 5-1: setting power OFF [ 598.617182][ T5996] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 598.620185][ T6004] dvb-usb: bulk message failed: -22 (2/0) [ 598.629978][ T5996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.638079][ T6004] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 598.651504][ T5996] usb 2-1: Product: syz [ 598.659597][T13280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.660030][T13290] dvb-usb: bulk message failed: -22 (4/0) [ 598.677689][T13280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.680632][T13290] cxusb: i2c read failed [ 598.686409][ T6004] (NULL device *): no alternate interface [ 598.692383][ T5996] usb 2-1: Manufacturer: syz [ 598.694123][T13280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.703260][ T5996] usb 2-1: SerialNumber: syz [ 598.729111][T13280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.750426][ T5996] usb 2-1: config 0 descriptor?? [ 598.769580][T12396] usb 6-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 598.794443][T12396] usb 6-1: found format II with max.bitrate = 13, frame size=1594 [ 598.815275][T12396] usb 6-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 598.826478][ T6004] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 598.837264][T12396] usb 6-1: found format II with max.bitrate = 13, frame size=1594 [ 598.851152][ T6004] usb 5-1: USB disconnect, device number 68 [ 598.859066][T12396] usb 6-1: failed to enable PITCH for EP 0x82 [ 598.959274][T12396] usb 6-1: USB disconnect, device number 41 [ 598.993212][ T5996] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 599.003068][ T5996] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 599.067230][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.069312][ T5996] usb 2-1: USB disconnect, device number 61 [ 599.564342][T13311] binfmt_misc: register: failed to install interpreter file ./file0 [ 599.696860][T13315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2251'. [ 599.707781][T13315] netlink: 18 bytes leftover after parsing attributes in process `syz.5.2251'. [ 599.861266][T13321] bond_slave_0: entered promiscuous mode [ 599.867922][T13321] bond_slave_1: entered promiscuous mode [ 599.892217][T13321] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 599.934034][T13321] bond_slave_0: left promiscuous mode [ 599.940199][T13321] bond_slave_1: left promiscuous mode [ 599.990944][ T3096] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 600.151127][ T3096] usb 6-1: Using ep0 maxpacket: 8 [ 600.160639][ T3096] usb 6-1: config 0 has no interfaces? [ 600.185125][ T3096] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 600.209446][ T3096] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.225005][ T3096] usb 6-1: Product: syz [ 600.229661][ T3096] usb 6-1: Manufacturer: syz [ 600.255346][ T3096] usb 6-1: SerialNumber: syz [ 600.280218][ T3096] usb 6-1: config 0 descriptor?? [ 600.350920][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 600.499926][ T3096] usb 6-1: USB disconnect, device number 42 [ 600.516678][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 600.531013][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.553126][ T9] usb 4-1: Product: Ⰹ [ 600.557575][ T9] usb 4-1: Manufacturer: 、 [ 600.565779][ T9] usb 4-1: SerialNumber: І [ 600.997228][T13328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.009606][T13328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.043860][ T5996] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 601.055384][T13328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.065506][T13328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.089505][T13328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.110354][T13328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.123346][T13328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.136579][T13328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.159024][ T9] usb 4-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 601.179202][ T9] usb 4-1: found format II with max.bitrate = 13, frame size=1594 [ 601.187568][ T9] usb 4-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 601.196819][ T9] usb 4-1: found format II with max.bitrate = 13, frame size=1594 [ 601.207956][ T9] usb 4-1: failed to enable PITCH for EP 0x82 [ 601.271298][ T5996] usb 5-1: config 0 interface 0 has no altsetting 0 [ 601.278255][ T5996] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 601.300843][ T5996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.342714][ T5996] usb 5-1: config 0 descriptor?? [ 601.354371][ T9] usb 4-1: USB disconnect, device number 55 [ 601.424153][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 601.951004][ T3096] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 602.100897][ T3096] usb 2-1: Using ep0 maxpacket: 8 [ 602.109171][ T3096] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 602.125484][ T30] kauditd_printk_skb: 830 callbacks suppressed [ 602.125504][ T30] audit: type=1326 audit(1757124470.519:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13342 comm="syz.4.2261" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f355718ebe9 code=0x0 [ 602.159293][ T3096] usb 2-1: config 0 has no interface number 0 [ 602.212082][ T3096] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 602.257400][ T3096] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 602.328564][ T3096] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 602.341112][ T3096] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 602.564309][ T5996] video4linux radio48: keene_cmd_set failed (-110) [ 602.691924][ T5996] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 602.779666][ T3096] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 602.789363][ T3096] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.826936][ T3096] usb 2-1: config 0 descriptor?? [ 602.849360][ T3096] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 603.415377][ T3096] usb 2-1: USB disconnect, device number 62 [ 603.431252][ T3096] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 603.560875][ T6004] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 603.730988][ T6004] usb 6-1: Using ep0 maxpacket: 32 [ 603.743009][ T6004] usb 6-1: config 1 has an invalid descriptor of length 107, skipping remainder of the config [ 603.795327][ T6004] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 603.855065][ T6004] usb 6-1: config 1 has no interface number 1 [ 603.862080][ T6004] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 125, changing to 7 [ 603.877213][ T6004] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 603.886923][ T6004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.895305][ T6004] usb 6-1: Product: syz [ 603.899611][ T6004] usb 6-1: Manufacturer: syz [ 603.904876][ T6004] usb 6-1: SerialNumber: syz [ 604.114959][T13385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2272'. [ 604.150909][T13385] netlink: 18 bytes leftover after parsing attributes in process `syz.3.2272'. [ 604.190024][ T6004] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 604.223325][ T6004] usb 6-1: 2:1 : format type 6 is not supported yet [ 604.290126][ T6004] usb 6-1: USB disconnect, device number 43 [ 604.363061][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 604.470960][ T5996] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 604.595853][T13391] syzkaller0: entered promiscuous mode [ 604.604284][T13391] syzkaller0: entered allmulticast mode [ 604.636537][T13391] tipc: Enabled bearer , priority 0 [ 604.641025][ T5996] usb 4-1: Using ep0 maxpacket: 8 [ 604.648824][T13390] tipc: Resetting bearer [ 604.666976][T13390] tipc: Disabling bearer [ 604.685897][ T5996] usb 4-1: config 0 has no interfaces? [ 604.703745][ T5996] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 604.717525][ T5996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.738059][ T5996] usb 4-1: Product: syz [ 604.747029][ T3096] usb 5-1: USB disconnect, device number 69 [ 604.763376][ T5996] usb 4-1: Manufacturer: syz [ 604.786293][ T5996] usb 4-1: SerialNumber: syz [ 604.896984][ T5996] usb 4-1: config 0 descriptor?? [ 605.135597][ T3096] usb 4-1: USB disconnect, device number 56 [ 605.580897][ T3096] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 605.793210][T13417] random: crng reseeded on system resumption [ 605.876281][ T3096] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.913566][ T3096] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.957461][ T3096] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 605.979931][ T3096] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.031152][ T3096] usb 6-1: config 0 descriptor?? [ 606.131270][T13428] syzkaller0: entered promiscuous mode [ 606.145476][T13428] syzkaller0: entered allmulticast mode [ 606.235311][T13428] tipc: Enabled bearer , priority 0 [ 606.266593][T13427] tipc: Resetting bearer [ 606.352781][T13427] tipc: Disabling bearer [ 606.740924][T13355] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 606.851849][T13441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2292'. [ 606.871831][T13441] netlink: 18 bytes leftover after parsing attributes in process `syz.4.2292'. [ 606.926538][T13409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.935745][T13409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.944611][T13355] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 606.970914][T13355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 607.022891][T13355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 607.037970][T13355] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 607.141050][T13355] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 607.150678][T13355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.193458][ T6004] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 607.268489][T13355] usb 2-1: config 0 descriptor?? [ 607.361250][ T6004] usb 5-1: Using ep0 maxpacket: 8 [ 607.368726][ T6004] usb 5-1: config 0 has no interfaces? [ 607.377371][ T6004] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 607.390924][ T6004] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.409992][ T6004] usb 5-1: Product: syz [ 607.419736][ T6004] usb 5-1: Manufacturer: syz [ 607.430856][ T6004] usb 5-1: SerialNumber: syz [ 607.454384][ T6004] usb 5-1: config 0 descriptor?? [ 607.679062][ T6004] usb 5-1: USB disconnect, device number 70 [ 607.691433][T13355] plantronics 0003:047F:FFFF.001A: ignoring exceeding usage max [ 607.706598][ T3096] uclogic 0003:256C:006D.0019: failed retrieving Huion firmware version: -71 [ 607.746652][ T3096] uclogic 0003:256C:006D.0019: failed probing parameters: -71 [ 607.775843][T13355] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 607.789067][ T3096] uclogic 0003:256C:006D.0019: probe with driver uclogic failed with error -71 [ 607.814314][ T3096] usb 6-1: USB disconnect, device number 44 [ 607.862395][T13455] FAULT_INJECTION: forcing a failure. [ 607.862395][T13455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.903536][T13455] CPU: 1 UID: 0 PID: 13455 Comm: syz.0.2296 Not tainted syzkaller #0 PREEMPT(full) [ 607.903564][T13455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 607.903576][T13455] Call Trace: [ 607.903584][T13455] [ 607.903592][T13455] dump_stack_lvl+0x189/0x250 [ 607.903620][T13455] ? __pfx____ratelimit+0x10/0x10 [ 607.903640][T13455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.903660][T13455] ? __pfx__printk+0x10/0x10 [ 607.903701][T13455] should_fail_ex+0x414/0x560 [ 607.903733][T13455] _copy_to_user+0x31/0xb0 [ 607.903760][T13455] simple_read_from_buffer+0xe1/0x170 [ 607.903793][T13455] proc_fail_nth_read+0x1b3/0x220 [ 607.903817][T13455] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 607.903841][T13455] ? rw_verify_area+0x2a6/0x4d0 [ 607.903863][T13455] ? __lock_acquire+0xab9/0xd20 [ 607.903887][T13455] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 607.903910][T13455] vfs_read+0x200/0xa30 [ 607.903932][T13455] ? fdget_pos+0x247/0x320 [ 607.903954][T13455] ? __pfx___mutex_lock+0x10/0x10 [ 607.903988][T13455] ? __pfx_vfs_read+0x10/0x10 [ 607.904014][T13455] ? __fget_files+0x2a/0x420 [ 607.904034][T13455] ? __fget_files+0x3a0/0x420 [ 607.904049][T13455] ? __fget_files+0x2a/0x420 [ 607.904076][T13455] ksys_read+0x145/0x250 [ 607.904103][T13455] ? __pfx_ksys_read+0x10/0x10 [ 607.904133][T13455] ? do_syscall_64+0xbe/0x3b0 [ 607.904157][T13455] do_syscall_64+0xfa/0x3b0 [ 607.904174][T13455] ? lockdep_hardirqs_on+0x9c/0x150 [ 607.904192][T13455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.904210][T13455] ? clear_bhb_loop+0x60/0xb0 [ 607.904232][T13455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.904249][T13455] RIP: 0033:0x7f583bf8d5fc [ 607.904266][T13455] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 607.904282][T13455] RSP: 002b:00007f583cec3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 607.904303][T13455] RAX: ffffffffffffffda RBX: 00007f583c1c5fa0 RCX: 00007f583bf8d5fc [ 607.904317][T13455] RDX: 000000000000000f RSI: 00007f583cec30a0 RDI: 0000000000000005 [ 607.904329][T13455] RBP: 00007f583cec3090 R08: 0000000000000000 R09: 0000000000000000 [ 607.904341][T13455] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 607.904352][T13455] R13: 00007f583c1c6038 R14: 00007f583c1c5fa0 R15: 00007f583c2efa28 [ 607.904385][T13455] [ 608.260369][T13460] FAULT_INJECTION: forcing a failure. [ 608.260369][T13460] name failslab, interval 1, probability 0, space 0, times 0 [ 608.273388][T13460] CPU: 1 UID: 0 PID: 13460 Comm: syz.0.2298 Not tainted syzkaller #0 PREEMPT(full) [ 608.273423][T13460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 608.273435][T13460] Call Trace: [ 608.273444][T13460] [ 608.273452][T13460] dump_stack_lvl+0x189/0x250 [ 608.273480][T13460] ? __pfx____ratelimit+0x10/0x10 [ 608.273498][T13460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 608.273520][T13460] ? __pfx__printk+0x10/0x10 [ 608.273546][T13460] ? __pfx___might_resched+0x10/0x10 [ 608.273563][T13460] ? fs_reclaim_acquire+0x7d/0x100 [ 608.273595][T13460] should_fail_ex+0x414/0x560 [ 608.273626][T13460] should_failslab+0xa8/0x100 [ 608.273654][T13460] __kmalloc_noprof+0xcb/0x4f0 [ 608.273676][T13460] ? tomoyo_encode+0x28b/0x550 [ 608.273702][T13460] tomoyo_encode+0x28b/0x550 [ 608.273728][T13460] tomoyo_realpath_from_path+0x58d/0x5d0 [ 608.273760][T13460] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 608.273786][T13460] tomoyo_path_number_perm+0x1e8/0x5a0 [ 608.273815][T13460] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 608.273860][T13460] ? __lock_acquire+0xab9/0xd20 [ 608.273908][T13460] ? __fget_files+0x2a/0x420 [ 608.273929][T13460] ? __fget_files+0x2a/0x420 [ 608.273943][T13460] ? __fget_files+0x3a0/0x420 [ 608.273956][T13460] ? __fget_files+0x2a/0x420 [ 608.273976][T13460] security_file_ioctl+0xcb/0x2d0 [ 608.274001][T13460] __se_sys_ioctl+0x47/0x170 [ 608.274028][T13460] do_syscall_64+0xfa/0x3b0 [ 608.274047][T13460] ? lockdep_hardirqs_on+0x9c/0x150 [ 608.274063][T13460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.274082][T13460] ? clear_bhb_loop+0x60/0xb0 [ 608.274105][T13460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.274120][T13460] RIP: 0033:0x7f583bf8ebe9 [ 608.274138][T13460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.274153][T13460] RSP: 002b:00007f583cec3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 608.274172][T13460] RAX: ffffffffffffffda RBX: 00007f583c1c5fa0 RCX: 00007f583bf8ebe9 [ 608.274205][T13460] RDX: 00002000000000c0 RSI: 00000000c004510e RDI: 0000000000000003 [ 608.274218][T13460] RBP: 00007f583cec3090 R08: 0000000000000000 R09: 0000000000000000 [ 608.274230][T13460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.274241][T13460] R13: 00007f583c1c6038 R14: 00007f583c1c5fa0 R15: 00007f583c2efa28 [ 608.274282][T13460] [ 608.274334][T13460] ERROR: Out of memory at tomoyo_realpath_from_path. [ 608.276706][T13433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2288'. [ 608.683736][T13433] hsr0: entered promiscuous mode [ 608.861379][T13355] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 608.961535][T13467] syzkaller0: entered promiscuous mode [ 609.082918][T13355] usb 6-1: Using ep0 maxpacket: 16 [ 609.090233][T13467] syzkaller0: entered allmulticast mode [ 609.100109][T13355] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 609.128057][T13355] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.150138][T13355] usb 6-1: config 0 has no interface number 0 [ 609.268613][ T3096] usb 2-1: reset high-speed USB device number 63 using dummy_hcd [ 609.406345][T13355] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 609.422415][T13477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 609.431257][T13355] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.439303][T13355] usb 6-1: Product: syz [ 609.448247][T13355] usb 6-1: Manufacturer: syz [ 609.508604][T13355] usb 6-1: SerialNumber: syz [ 609.675019][T13355] usb 6-1: config 0 descriptor?? [ 609.685433][T13355] uvcvideo 6-1:0.105: probe with driver uvcvideo failed with error -22 [ 609.810860][ T5955] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 610.078660][ T5955] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 610.091101][ T5955] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 610.290963][ T5955] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 610.324539][T13488] dlm: non-version read from control device 36 [ 610.334523][ T5996] usb 2-1: USB disconnect, device number 63 [ 610.367686][ T30] audit: type=1326 audit(1757124478.689:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.0.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583bf8ebe9 code=0x7ffc0000 [ 610.450926][ T5955] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 610.460549][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.481147][ T30] audit: type=1326 audit(1757124478.699:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.0.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583bf8ebe9 code=0x7ffc0000 [ 610.520463][ T5955] usb 5-1: Product: syz [ 610.524837][ T5955] usb 5-1: Manufacturer: syz [ 610.562485][ T5955] usb 5-1: SerialNumber: syz [ 610.582949][ T30] audit: type=1326 audit(1757124478.699:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.0.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f583bf8ebe9 code=0x7ffc0000 [ 610.652457][ T5955] hub 5-1:1.0: bad descriptor, ignoring hub [ 610.658482][ T5955] hub 5-1:1.0: probe with driver hub failed with error -5 [ 610.755336][T13496] delete_channel: no stack [ 610.783251][ T30] audit: type=1326 audit(1757124478.699:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.0.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583bf8ebe9 code=0x7ffc0000 [ 610.837379][ T30] audit: type=1326 audit(1757124478.699:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.0.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583bf8ebe9 code=0x7ffc0000 [ 611.031622][ T30] audit: type=1326 audit(1757124478.699:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.0.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f583bf8ebe9 code=0x7ffc0000 [ 611.055284][ T5955] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 71 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 611.156634][ T30] audit: type=1326 audit(1757124478.699:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.0.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583bf8ebe9 code=0x7ffc0000 [ 611.221073][ T30] audit: type=1326 audit(1757124478.699:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.0.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583bf8ebe9 code=0x7ffc0000 [ 611.254560][ T30] audit: type=1326 audit(1757124478.709:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.0.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f583bf8ebe9 code=0x7ffc0000 [ 611.277385][ T30] audit: type=1326 audit(1757124478.709:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.0.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583bf8ebe9 code=0x7ffc0000 [ 611.904745][T13510] FAULT_INJECTION: forcing a failure. [ 611.904745][T13510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.983599][T13510] CPU: 1 UID: 0 PID: 13510 Comm: syz.0.2307 Not tainted syzkaller #0 PREEMPT(full) [ 611.983629][T13510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 611.983640][T13510] Call Trace: [ 611.983649][T13510] [ 611.983658][T13510] dump_stack_lvl+0x189/0x250 [ 611.983685][T13510] ? __pfx____ratelimit+0x10/0x10 [ 611.983705][T13510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.983725][T13510] ? __pfx__printk+0x10/0x10 [ 611.983763][T13510] should_fail_ex+0x414/0x560 [ 611.983797][T13510] _copy_to_user+0x31/0xb0 [ 611.983822][T13510] simple_read_from_buffer+0xe1/0x170 [ 611.983854][T13510] proc_fail_nth_read+0x1b3/0x220 [ 611.983878][T13510] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 611.983902][T13510] ? rw_verify_area+0x2a6/0x4d0 [ 611.983924][T13510] ? __lock_acquire+0xab9/0xd20 [ 611.983947][T13510] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 611.983968][T13510] vfs_read+0x200/0xa30 [ 611.983989][T13510] ? fdget_pos+0x247/0x320 [ 611.984011][T13510] ? __pfx___mutex_lock+0x10/0x10 [ 611.984032][T13510] ? __pfx_vfs_read+0x10/0x10 [ 611.984055][T13510] ? __fget_files+0x2a/0x420 [ 611.984077][T13510] ? __fget_files+0x3a0/0x420 [ 611.984093][T13510] ? __fget_files+0x2a/0x420 [ 611.984127][T13510] ksys_read+0x145/0x250 [ 611.984156][T13510] ? __pfx_ksys_read+0x10/0x10 [ 611.984186][T13510] ? do_syscall_64+0xbe/0x3b0 [ 611.984210][T13510] do_syscall_64+0xfa/0x3b0 [ 611.984229][T13510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.984247][T13510] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 611.984263][T13510] ? clear_bhb_loop+0x60/0xb0 [ 611.984287][T13510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.984304][T13510] RIP: 0033:0x7f583bf8d5fc [ 611.984322][T13510] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 611.984345][T13510] RSP: 002b:00007f583cec3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 611.984366][T13510] RAX: ffffffffffffffda RBX: 00007f583c1c5fa0 RCX: 00007f583bf8d5fc [ 611.984379][T13510] RDX: 000000000000000f RSI: 00007f583cec30a0 RDI: 0000000000000006 [ 611.984390][T13510] RBP: 00007f583cec3090 R08: 0000000000000000 R09: 0000000000000000 [ 611.984400][T13510] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.984411][T13510] R13: 00007f583c1c6038 R14: 00007f583c1c5fa0 R15: 00007f583c2efa28 [ 611.984441][T13510] [ 612.466186][T13515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2309'. [ 612.477339][T13515] netlink: 18 bytes leftover after parsing attributes in process `syz.0.2309'. [ 613.042482][T13520] program syz.3.2308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 613.121812][ T10] usb 6-1: USB disconnect, device number 45 [ 613.219118][T13535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.237603][T13535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.582096][T13539] FAULT_INJECTION: forcing a failure. [ 613.582096][T13539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.650865][ T10] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 613.678546][T13539] CPU: 0 UID: 0 PID: 13539 Comm: syz.3.2313 Not tainted syzkaller #0 PREEMPT(full) [ 613.678575][T13539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 613.678588][T13539] Call Trace: [ 613.678597][T13539] [ 613.678606][T13539] dump_stack_lvl+0x189/0x250 [ 613.678635][T13539] ? __pfx____ratelimit+0x10/0x10 [ 613.678654][T13539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 613.678678][T13539] ? __pfx__printk+0x10/0x10 [ 613.678705][T13539] ? __might_fault+0xb0/0x130 [ 613.678743][T13539] should_fail_ex+0x414/0x560 [ 613.678777][T13539] _copy_from_user+0x2d/0xb0 [ 613.678804][T13539] ucma_resolve_ip+0x9a/0x280 [ 613.678829][T13539] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 613.678877][T13539] ucma_write+0x249/0x2e0 [ 613.678900][T13539] ? __pfx_ucma_write+0x10/0x10 [ 613.678919][T13539] ? security_file_permission+0x75/0x290 [ 613.678947][T13539] ? rw_verify_area+0x255/0x4d0 [ 613.678970][T13539] ? __lock_acquire+0xab9/0xd20 [ 613.678995][T13539] ? __pfx_ucma_write+0x10/0x10 [ 613.679016][T13539] vfs_write+0x27b/0xb30 [ 613.679051][T13539] ? __pfx_vfs_write+0x10/0x10 [ 613.679078][T13539] ? __fget_files+0x2a/0x420 [ 613.679098][T13539] ? __fget_files+0x2a/0x420 [ 613.679113][T13539] ? __fget_files+0x3a0/0x420 [ 613.679129][T13539] ? __fget_files+0x2a/0x420 [ 613.679156][T13539] ksys_write+0x145/0x250 [ 613.679185][T13539] ? __pfx_ksys_write+0x10/0x10 [ 613.679207][T13539] ? rcu_is_watching+0x15/0xb0 [ 613.679234][T13539] ? do_syscall_64+0xbe/0x3b0 [ 613.679259][T13539] do_syscall_64+0xfa/0x3b0 [ 613.679277][T13539] ? lockdep_hardirqs_on+0x9c/0x150 [ 613.679296][T13539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.679316][T13539] ? clear_bhb_loop+0x60/0xb0 [ 613.679340][T13539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.679358][T13539] RIP: 0033:0x7f701f38ebe9 [ 613.679377][T13539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.679394][T13539] RSP: 002b:00007f7020290038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 613.679417][T13539] RAX: ffffffffffffffda RBX: 00007f701f5c5fa0 RCX: 00007f701f38ebe9 [ 613.679431][T13539] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000003 [ 613.679443][T13539] RBP: 00007f7020290090 R08: 0000000000000000 R09: 0000000000000000 [ 613.679455][T13539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.679466][T13539] R13: 00007f701f5c6038 R14: 00007f701f5c5fa0 R15: 00007f701f6efa28 [ 613.679499][T13539] [ 613.930028][ C0] vkms_vblank_simulate: vblank timer overrun [ 614.010957][ T10] usb 6-1: device descriptor read/64, error -71 [ 614.246331][ T45] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 614.250934][ T10] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 614.281462][ T5955] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 614.396709][ T10] usb 6-1: device descriptor read/64, error -71 [ 614.423037][ T45] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 614.432936][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.442242][ T45] usb 2-1: Product: Ⰹ [ 614.446549][ T45] usb 2-1: Manufacturer: 、 [ 614.452193][ T45] usb 2-1: SerialNumber: І [ 614.458396][ T5955] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 614.470888][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.491375][ T5955] usb 4-1: config 0 descriptor?? [ 614.525250][ T10] usb usb6-port1: attempt power cycle [ 614.870960][ T10] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 614.894162][T13542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.910851][ T10] usb 6-1: device descriptor read/8, error -71 [ 614.918191][T13542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.929919][T13542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.940306][T13542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.953092][T13542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.964095][T13542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.977658][T13542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.989008][T13542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.010545][ T45] usb 2-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 615.024358][ T45] usb 2-1: found format II with max.bitrate = 13, frame size=1594 [ 615.033241][ T45] usb 2-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 615.044549][ T45] usb 2-1: found format II with max.bitrate = 13, frame size=1594 [ 615.057215][ T45] usb 2-1: failed to enable PITCH for EP 0x82 [ 615.112709][ T45] usb 2-1: USB disconnect, device number 64 [ 615.150919][ T10] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 615.193118][ T10] usb 6-1: device descriptor read/8, error -71 [ 615.199560][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 615.320862][ T3096] usb 5-1: USB disconnect, device number 71 [ 615.327217][ T10] usb usb6-port1: unable to enumerate USB device [ 615.345288][ T3096] usblp0: removed [ 615.910894][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 615.962626][T13544] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.983662][T13544] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.087945][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 616.115747][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 616.124861][ T10] usb 2-1: config 179 has no interface number 0 [ 616.210861][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 616.259376][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 616.325843][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 616.360817][ T10] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 616.393809][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 616.403414][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.432495][T13583] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 616.728200][ T5874] Bluetooth: hci3: unexpected event for opcode 0x0011 [ 616.806549][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input41 [ 616.912846][ T5955] usb 4-1: Cannot set autoneg [ 616.920285][ T5955] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 617.056331][ T5955] usb 4-1: USB disconnect, device number 57 [ 617.165931][T13615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2327'. [ 617.190881][T13615] netlink: 18 bytes leftover after parsing attributes in process `syz.4.2327'. [ 617.316091][ T6004] usb 2-1: USB disconnect, device number 65 [ 617.316142][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 617.423490][T12396] IPVS: starting estimator thread 0... [ 617.481187][ T45] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 617.511178][T13625] IPVS: using max 23 ests per chain, 55200 per kthread [ 617.610892][ T5955] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 617.650898][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 617.669357][ T45] usb 5-1: config 0 has no interfaces? [ 617.677972][ T45] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 617.695806][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.705744][ T45] usb 5-1: Product: syz [ 617.710680][ T45] usb 5-1: Manufacturer: syz [ 617.716747][ T45] usb 5-1: SerialNumber: syz [ 617.739652][ T45] usb 5-1: config 0 descriptor?? [ 617.770982][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 617.786349][ T5955] usb 4-1: config 1 has an invalid descriptor of length 107, skipping remainder of the config [ 617.798980][ T5955] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 617.830080][ T5955] usb 4-1: config 1 has no interface number 1 [ 617.847878][ T5955] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 125, changing to 7 [ 617.874977][ T5955] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 617.884596][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.907834][ T5955] usb 4-1: Product: syz [ 617.918619][ T5955] usb 4-1: Manufacturer: syz [ 617.926671][ T5955] usb 4-1: SerialNumber: syz [ 617.954559][ T45] usb 5-1: USB disconnect, device number 72 [ 618.194819][ T5955] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 618.205012][ T5955] usb 4-1: 2:1 : format type 6 is not supported yet [ 618.224534][ T5955] usb 4-1: USB disconnect, device number 58 [ 619.365745][T13642] vivid-004: disconnect [ 619.382357][T13641] vivid-004: reconnect [ 619.780922][ T10] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 619.973781][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 619.983039][ T10] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 619.992608][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.004954][ T10] usb 5-1: Product: syz [ 620.010489][ T10] usb 5-1: Manufacturer: syz [ 620.024172][ T10] usb 5-1: SerialNumber: syz [ 620.052415][ T10] usb 5-1: config 0 descriptor?? [ 620.265691][ T10] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 620.283443][ T10] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 620.389016][ T10] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 620.428744][ T10] usb 5-1: USB disconnect, device number 73 [ 620.428995][T13663] FAULT_INJECTION: forcing a failure. [ 620.428995][T13663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.492153][T13663] CPU: 1 UID: 0 PID: 13663 Comm: syz.3.2338 Not tainted syzkaller #0 PREEMPT(full) [ 620.492181][T13663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 620.492192][T13663] Call Trace: [ 620.492201][T13663] [ 620.492210][T13663] dump_stack_lvl+0x189/0x250 [ 620.492239][T13663] ? __pfx____ratelimit+0x10/0x10 [ 620.492258][T13663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 620.492278][T13663] ? __pfx__printk+0x10/0x10 [ 620.492315][T13663] should_fail_ex+0x414/0x560 [ 620.492345][T13663] _copy_from_user+0x2d/0xb0 [ 620.492370][T13663] sctp_setsockopt+0x19f/0x1200 [ 620.492391][T13663] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 620.492413][T13663] do_sock_setsockopt+0x179/0x1b0 [ 620.492441][T13663] __x64_sys_setsockopt+0x13f/0x1b0 [ 620.492469][T13663] do_syscall_64+0xfa/0x3b0 [ 620.492488][T13663] ? lockdep_hardirqs_on+0x9c/0x150 [ 620.492506][T13663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.492525][T13663] ? clear_bhb_loop+0x60/0xb0 [ 620.492548][T13663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.492564][T13663] RIP: 0033:0x7f701f38ebe9 [ 620.492582][T13663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.492599][T13663] RSP: 002b:00007f7020290038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 620.492620][T13663] RAX: ffffffffffffffda RBX: 00007f701f5c5fa0 RCX: 00007f701f38ebe9 [ 620.492633][T13663] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 620.492645][T13663] RBP: 00007f7020290090 R08: 0000000000000098 R09: 0000000000000000 [ 620.492657][T13663] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 620.492669][T13663] R13: 00007f701f5c6038 R14: 00007f701f5c5fa0 R15: 00007f701f6efa28 [ 620.492700][T13663] [ 620.712991][T13666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2340'. [ 620.813748][ T5874] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 620.823501][ T5874] Bluetooth: hci3: Injecting HCI hardware error event [ 620.833832][T10644] Bluetooth: hci3: hardware error 0x00 [ 620.983188][ T5955] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 621.106786][ T919] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 621.271150][T13677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2343'. [ 621.300890][ T919] usb 4-1: Using ep0 maxpacket: 8 [ 621.311571][ T5955] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 621.321586][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 621.339189][ T919] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 621.349444][ T919] usb 4-1: config 179 has no interface number 0 [ 621.361122][ T5955] usb 2-1: Product: syz [ 621.371402][ T919] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 621.383808][ T5955] usb 2-1: SerialNumber: syz [ 621.393700][ T5955] usb 2-1: config 0 descriptor?? [ 621.406855][ T919] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 621.486892][ T919] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 621.575700][ T919] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 621.878103][ T919] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 621.893384][ T919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.971810][T13680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.021999][T13669] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 622.024081][T13680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.254712][ T6004] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input42 [ 622.535085][ T6004] usb 2-1: USB disconnect, device number 66 [ 622.599252][T13355] usb 4-1: USB disconnect, device number 59 [ 622.599252][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 622.599396][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 622.687966][T13685] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2345'. [ 622.895704][T10644] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 623.319535][ T6004] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 623.660851][ T6004] usb 6-1: Using ep0 maxpacket: 32 [ 623.688739][ T6004] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 623.703793][ T6004] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.735588][ T6004] usb 6-1: config 0 descriptor?? [ 623.771284][ T6004] as10x_usb: device has been detected [ 623.778001][ T6004] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 623.954264][ T6004] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 624.060408][ T6004] as10x_usb: error during firmware upload part1 [ 624.082211][ T6004] Registered device nBox DVB-T Dongle [ 624.170977][T13355] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 624.350832][T13355] usb 4-1: Using ep0 maxpacket: 8 [ 624.359228][T13355] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 624.369369][T13355] usb 4-1: config 0 has no interface number 0 [ 624.376503][T13355] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 624.408899][T13355] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 624.433474][T13355] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 624.475888][T13355] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 624.525233][T13355] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 624.544134][T13717] netlink: 'syz.0.2355': attribute type 2 has an invalid length. [ 624.548282][T13355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.573403][T13717] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2355'. [ 624.586004][T13355] usb 4-1: config 0 descriptor?? [ 624.602163][T13355] ldusb 4-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 624.645861][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.652622][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.689697][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 624.689718][ T30] audit: type=1326 audit(1757124493.079:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13719 comm="syz.4.2356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f355718ebe9 code=0x0 [ 624.920429][ T3096] usb 4-1: USB disconnect, device number 60 [ 624.930179][ T3096] ldusb 4-1:0.55: LD USB Device #1 now disconnected [ 624.991906][ T5955] usb 6-1: USB disconnect, device number 50 [ 625.008162][ T5955] Unregistered device nBox DVB-T Dongle [ 625.086480][ T6004] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 625.117963][ T5955] as10x_usb: device has been disconnected [ 625.260904][ T6004] usb 5-1: Using ep0 maxpacket: 8 [ 625.268458][ T6004] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 625.278179][ T6004] usb 5-1: config 179 has no interface number 0 [ 625.285941][ T6004] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 625.297528][ T6004] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 625.309224][ T6004] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 625.321076][ T6004] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 625.335841][ T6004] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 625.345458][ T6004] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.363702][T13722] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 625.460920][ T919] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 625.587170][ T6004] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input43 [ 625.655506][ T919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 625.679220][ T919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 625.711652][ T919] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 625.737438][ T919] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 625.776900][ T919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.803567][ T919] usb 2-1: config 0 descriptor?? [ 625.817329][T13729] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 625.864348][ T3096] usb 5-1: USB disconnect, device number 74 [ 625.864411][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 625.879075][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 626.142683][T13732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 626.303182][ T919] usbhid 2-1:0.0: can't add hid device: -71 [ 626.323600][ T919] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 626.338046][ T919] usb 2-1: USB disconnect, device number 67 [ 626.391498][ T6004] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 626.542378][ T6004] usb 4-1: Using ep0 maxpacket: 16 [ 626.596187][ T6004] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 626.639434][ T6004] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.729163][ T6004] usb 4-1: Product: syz [ 626.734580][ T6004] usb 4-1: Manufacturer: syz [ 626.740630][ T6004] usb 4-1: SerialNumber: syz [ 626.760995][ T6004] usb 4-1: config 0 descriptor?? [ 627.184240][ T6004] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 627.209953][ T6004] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 627.233903][ T6004] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 627.254385][ T6004] usb 4-1: media controller created [ 627.308600][ T6004] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 627.448737][T13732] dtv5100: wlen = 0, aborting. [ 627.477992][T13732] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2361'. [ 627.593256][ T6004] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 627.610815][ T6004] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 627.856902][ T10] usb 4-1: USB disconnect, device number 61 [ 627.964758][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 628.395388][T13765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 628.862568][T13771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2373'. [ 629.386299][T13355] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 629.592773][T13355] usb 6-1: Using ep0 maxpacket: 8 [ 629.600438][T13355] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 629.609321][T13355] usb 6-1: config 179 has no interface number 0 [ 629.640116][T13355] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 629.671432][T13355] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 629.800553][T13355] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 629.908233][T13355] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 629.954231][T13355] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 629.986931][T13355] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.028067][T13779] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 630.245732][T13355] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input44 [ 630.517801][ T10] usb 6-1: USB disconnect, device number 51 [ 630.524096][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 630.524153][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 630.740851][ T45] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 630.903024][ T45] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 630.913009][ T45] usb 2-1: config 0 has no interface number 0 [ 630.927038][ T45] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0xD has an invalid bInterval 104, changing to 10 [ 630.962943][ T45] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 630.997424][ T45] usb 2-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 631.007077][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.046898][ T45] usb 2-1: Product: syz [ 631.056435][ T45] usb 2-1: Manufacturer: syz [ 631.096909][ T45] usb 2-1: SerialNumber: syz [ 631.142740][ T45] usb 2-1: config 0 descriptor?? [ 631.199904][T13799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2383'. [ 631.230437][T13799] input: syz0 as /devices/virtual/input/input45 [ 631.421103][ T10] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 631.470950][ T45] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state. [ 631.514995][ T45] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 631.568546][ T45] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB) [ 631.574308][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.595849][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 631.602036][ T45] usb 2-1: media controller created [ 631.608197][ T10] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 631.623494][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.646152][ T10] usb 6-1: config 0 descriptor?? [ 631.659273][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 631.666677][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 631.684989][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 631.715212][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 631.790909][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 631.808458][ T10] usb 6-1: media controller created [ 631.857380][T13806] ------------[ cut here ]------------ [ 631.863106][T13806] usb 2-1: BOGUS control dir, pipe 80004480 doesn't match bRequestType c0 [ 631.881445][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 631.881540][T13806] WARNING: CPU: 1 PID: 13806 at drivers/usb/core/urb.c:413 usb_submit_urb+0x112b/0x1830 [ 631.900201][T13806] Modules linked in: [ 631.904968][T13806] CPU: 1 UID: 0 PID: 13806 Comm: syz.5.2384 Not tainted syzkaller #0 PREEMPT(full) [ 631.914819][T13806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 631.925560][T13806] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 631.931907][T13806] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 60 00 35 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 66 36 57 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 631.951762][T13806] RSP: 0018:ffffc90004b97850 EFLAGS: 00010246 [ 631.957879][T13806] RAX: e7e9f8f15ae09d00 RBX: ffff888068450d00 RCX: 0000000000080000 [ 631.966045][T13806] RDX: ffffc9000c62c000 RSI: 00000000000037f1 RDI: 00000000000037f2 [ 631.974507][T13806] RBP: 1ffff110041d4524 R08: 0000000000000003 R09: 0000000000000004 [ 631.983130][T13806] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: dffffc0000000000 [ 631.991189][T13806] R13: ffff888020ea2920 R14: 0000000080004480 R15: ffff8881473ea340 [ 631.999311][T13806] FS: 00007f16646846c0(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000 [ 632.008316][T13806] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 632.014988][T13806] CR2: 00007f3557ef56c0 CR3: 000000006d740000 CR4: 00000000003526f0 [ 632.023330][T13806] Call Trace: [ 632.026680][T13806] [ 632.029645][T13806] usb_start_wait_urb+0x114/0x4c0 [ 632.035036][T13806] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 632.040785][T13806] usb_control_msg+0x232/0x3e0 [ 632.045696][T13806] dib0700_i2c_xfer+0xba7/0xf70 [ 632.049881][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 632.050695][T13806] __i2c_transfer+0x874/0x2170 [ 632.061258][T13806] ? lockdep_hardirqs_on+0x9c/0x150 [ 632.066565][T13806] ? __pfx___i2c_transfer+0x10/0x10 [ 632.072008][T13806] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 632.076385][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 632.077539][T13806] ? i2c_transfer+0x11d/0x3a0 [ 632.077574][T13806] i2c_transfer+0x25b/0x3a0 [ 632.077600][T13806] ? __pfx_i2c_transfer+0x10/0x10 [ 632.087141][T13792] netlink: 'syz.1.2379': attribute type 2 has an invalid length. [ 632.089809][T13806] ? _copy_from_user+0x94/0xb0 [ 632.103124][T13792] netlink: 'syz.1.2379': attribute type 2 has an invalid length. [ 632.108544][T13806] i2cdev_ioctl_rdwr+0x460/0x740 [ 632.126486][T13806] i2cdev_ioctl+0x64b/0x7f0 [ 632.127370][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2379'. [ 632.131136][T13806] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 632.131173][T13806] ? __fget_files+0x3a0/0x420 [ 632.143621][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input46 [ 632.145111][T13806] ? __fget_files+0x2a/0x420 [ 632.163463][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 632.165921][T13806] ? bpf_lsm_file_ioctl+0x9/0x20 [ 632.178000][T13806] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 632.183807][T13806] __se_sys_ioctl+0xfc/0x170 [ 632.188418][T13806] do_syscall_64+0xfa/0x3b0 [ 632.193116][T13806] ? lockdep_hardirqs_on+0x9c/0x150 [ 632.198361][T13806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.204550][T13806] ? clear_bhb_loop+0x60/0xb0 [ 632.209231][T13806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.215267][T13806] RIP: 0033:0x7f166378ebe9 [ 632.219794][T13806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.239478][T13806] RSP: 002b:00007f1664684038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 632.248043][T13806] RAX: ffffffffffffffda RBX: 00007f16639c5fa0 RCX: 00007f166378ebe9 [ 632.256564][T13806] RDX: 0000200000002580 RSI: 0000000000000707 RDI: 0000000000000004 [ 632.264677][T13806] RBP: 00007f1663811e19 R08: 0000000000000000 R09: 0000000000000000 [ 632.272817][T13806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.281030][T13806] R13: 00007f16639c6038 R14: 00007f16639c5fa0 R15: 00007f1663aefa28 [ 632.289290][T13806] [ 632.292404][T13806] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 632.299704][T13806] CPU: 1 UID: 0 PID: 13806 Comm: syz.5.2384 Not tainted syzkaller #0 PREEMPT(full) [ 632.309266][T13806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 632.319525][T13806] Call Trace: [ 632.322915][T13806] [ 632.325856][T13806] dump_stack_lvl+0x99/0x250 [ 632.330451][T13806] ? __asan_memcpy+0x40/0x70 [ 632.335039][T13806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 632.340262][T13806] ? __pfx__printk+0x10/0x10 [ 632.344886][T13806] vpanic+0x281/0x750 [ 632.348973][T13806] ? __pfx__printk+0x10/0x10 [ 632.353643][T13806] ? __pfx_vpanic+0x10/0x10 [ 632.358146][T13806] ? is_bpf_text_address+0x292/0x2b0 [ 632.363454][T13806] panic+0xb9/0xc0 [ 632.367179][T13806] ? __pfx_panic+0x10/0x10 [ 632.371627][T13806] __warn+0x31b/0x4b0 [ 632.375863][T13806] ? usb_submit_urb+0x112b/0x1830 [ 632.380925][T13806] ? usb_submit_urb+0x112b/0x1830 [ 632.385974][T13806] report_bug+0x2be/0x4f0 [ 632.390331][T13806] ? usb_submit_urb+0x112b/0x1830 [ 632.395390][T13806] ? usb_submit_urb+0x112b/0x1830 [ 632.400445][T13806] ? usb_submit_urb+0x112d/0x1830 [ 632.405502][T13806] handle_bug+0x84/0x160 [ 632.409768][T13806] exc_invalid_op+0x1a/0x50 [ 632.414474][T13806] asm_exc_invalid_op+0x1a/0x20 [ 632.419409][T13806] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 632.425059][T13806] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 60 00 35 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 66 36 57 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 632.445173][T13806] RSP: 0018:ffffc90004b97850 EFLAGS: 00010246 [ 632.451358][T13806] RAX: e7e9f8f15ae09d00 RBX: ffff888068450d00 RCX: 0000000000080000 [ 632.459530][T13806] RDX: ffffc9000c62c000 RSI: 00000000000037f1 RDI: 00000000000037f2 [ 632.467523][T13806] RBP: 1ffff110041d4524 R08: 0000000000000003 R09: 0000000000000004 [ 632.475516][T13806] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: dffffc0000000000 [ 632.483592][T13806] R13: ffff888020ea2920 R14: 0000000080004480 R15: ffff8881473ea340 [ 632.491626][T13806] usb_start_wait_urb+0x114/0x4c0 [ 632.496813][T13806] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 632.502486][T13806] usb_control_msg+0x232/0x3e0 [ 632.507338][T13806] dib0700_i2c_xfer+0xba7/0xf70 [ 632.512249][T13806] __i2c_transfer+0x874/0x2170 [ 632.517786][T13806] ? lockdep_hardirqs_on+0x9c/0x150 [ 632.528057][T13806] ? __pfx___i2c_transfer+0x10/0x10 [ 632.533285][T13806] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 632.538786][T13806] ? i2c_transfer+0x11d/0x3a0 [ 632.543490][T13806] i2c_transfer+0x25b/0x3a0 [ 632.548071][T13806] ? __pfx_i2c_transfer+0x10/0x10 [ 632.553150][T13806] ? _copy_from_user+0x94/0xb0 [ 632.558168][T13806] i2cdev_ioctl_rdwr+0x460/0x740 [ 632.563173][T13806] i2cdev_ioctl+0x64b/0x7f0 [ 632.567712][T13806] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 632.572868][T13806] ? __fget_files+0x3a0/0x420 [ 632.577577][T13806] ? __fget_files+0x2a/0x420 [ 632.582163][T13806] ? bpf_lsm_file_ioctl+0x9/0x20 [ 632.587128][T13806] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 632.592189][T13806] __se_sys_ioctl+0xfc/0x170 [ 632.596924][T13806] do_syscall_64+0xfa/0x3b0 [ 632.601575][T13806] ? lockdep_hardirqs_on+0x9c/0x150 [ 632.606947][T13806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.613055][T13806] ? clear_bhb_loop+0x60/0xb0 [ 632.617761][T13806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.623847][T13806] RIP: 0033:0x7f166378ebe9 [ 632.628371][T13806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.648177][T13806] RSP: 002b:00007f1664684038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 632.656731][T13806] RAX: ffffffffffffffda RBX: 00007f16639c5fa0 RCX: 00007f166378ebe9 [ 632.664743][T13806] RDX: 0000200000002580 RSI: 0000000000000707 RDI: 0000000000000004 [ 632.673008][T13806] RBP: 00007f1663811e19 R08: 0000000000000000 R09: 0000000000000000 [ 632.681079][T13806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.689416][T13806] R13: 00007f16639c6038 R14: 00007f16639c5fa0 R15: 00007f1663aefa28 [ 632.697522][T13806] [ 632.700935][T13806] Kernel Offset: disabled [ 632.705348][T13806] Rebooting in 86400 seconds..