last executing test programs: 19m4.902860214s ago: executing program 3 (id=1971): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f00000000c0)=0x1, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="e9fa749dc62b40d9a421c234d28fcff4", 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x4000) 19m3.927625897s ago: executing program 3 (id=1973): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e24, 0x3, 'sh\x00', 0x29, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@private=0xa010101, 0x4e20, 0x10000, 0xf8}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x500, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 19m3.531109222s ago: executing program 3 (id=1975): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x7, 0x7, 0x9, 0x7}]}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f00000002c0)) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20044800) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0xffffffffffff6176, 0x80000) read$usbmon(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/unix\x00') prctl$PR_SET_FP_MODE(0x2d, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) fallocate(r6, 0x4a, 0x1000000, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x113c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x1104, 0x2, [@TCA_FLOW_EMATCHES={0x1100, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x10ec, 0x2, 0x0, 0x1, [@TCF_EM_META={0x78, 0x2, 0x0, 0x0, {{0x79, 0x4, 0x9}, [@TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="9762e10afa", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="42b9fae986e7", @TCF_META_TYPE_VAR="d1788f3e8e", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="3a51ddb4f9253d"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x6, 0x1}, {0x7, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="e3069a21", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR='{']}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR="1c97"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xb, 0x1}, {0x9, 0x85, 0xb4fc9c398722a3bf}}}]}}, @TCF_EM_IPT={0x105c, 0x3, 0x0, 0x0, {{0x2}, [@TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x30, 0x5, "a39c12090100d3994741cba4b65308e2a69ebe50d83356096e1529392214750d35c51a999555a00d358f74bb"}, @TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x65, 0x7, 0x7}, {{0x1, 0x0, 0x1}, {0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x113c}}, 0x4000000) 19m2.324750115s ago: executing program 3 (id=1981): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}, 0x4}, 0x1c) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0xa9, 0x7, 0xffff, 0x0, 0xb, 0x0, "ed92a66a7c45c67cde8c5fa2073387386c02f62d2a6b76d4aed97d915659091326fe24c4437fb8277cffbfa480a1479613bc3c1cbf75ef945621bab17a73188b06a08130f6ff0217edb1985a35332e3e77e67526cfc7da4650dba72f115821fb8f5a1f4152dab30c220ba9d25fe3db01dfb4d90cf93f9bbe63c3aada959e97cb8850ef19a2b2c8716deff9d112f4128cc3f612abac8526c4682b738dbcc43f99aff9c86ac49f24eaba"}}, 0x1c1) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x3d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r6, r6, &(0x7f0000000000)=0x2eb4, 0x2000007ff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x670, 0x5, 0x3b0, 0x0, 0xa8, 0xfeffffff, 0xa8, 0x178, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@ip={@private=0xa010102, @remote, 0x0, 0xffffffff, 'veth0_vlan\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @rand_addr=0x64010101, @loopback, @port=0x4e24, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x7}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0xb984, 0x1b, [0xd, 0x25, 0x22, 0xa, 0x1a, 0xb, 0x7, 0x30, 0x31, 0x0, 0x2e, 0x1d, 0x30, 0xb, 0x34, 0x17], 0x1, 0xfff, 0xcd0}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @rand_addr=0x64010102, @gre_key, @gre_key}}}}, {{@ip={@private, @rand_addr=0x64010101, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) 19m1.200080489s ago: executing program 3 (id=1988): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xd1}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0xc0045543, &(0x7f0000000080)=0xfdfdfffd) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x406, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000001c00)={0x2, &(0x7f0000000180)=[{0x80, 0x0, 0x0, 0x3fd}, {0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3, 0x0, 0xd}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000180)=0xffffffff) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x80) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x7c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x4c, 0x2, [@TCA_FLOW_EMATCHES={0x48, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}]}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x7, 0x0, 0x40}}}]}]}]}}]}, 0x7c}}, 0x20040054) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c000004"], 0x26c0}}, 0x4010) 19m0.315383567s ago: executing program 3 (id=1994): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b900000000109021200"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000d40)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x24, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "60d7d66e86"}, {0x5, 0x24, 0x0, 0xf58}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1c00, 0xb, 0xa}, {0x6, 0x24, 0x1a, 0x0, 0x50}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xa, 0x16, 0x32}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x2, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x10, 0x7f, 0xb}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x4, 0x2, 0x8, 0x8, 0xca}, 0x12, &(0x7f0000000c40)=ANY=[]}) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x62, &(0x7f0000000200)=0xad52, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r5, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff, 0x3}) socket$inet6(0xa, 0xeee1f5804a5b0510, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') futimesat(r7, 0x0, 0x0) write$apparmor_current(r6, &(0x7f0000000100)=@hat={'changehat ', 0x1}, 0x1d) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x383940, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 19m0.120417596s ago: executing program 32 (id=1994): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b900000000109021200"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000d40)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x24, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "60d7d66e86"}, {0x5, 0x24, 0x0, 0xf58}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1c00, 0xb, 0xa}, {0x6, 0x24, 0x1a, 0x0, 0x50}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xa, 0x16, 0x32}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x2, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x10, 0x7f, 0xb}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x4, 0x2, 0x8, 0x8, 0xca}, 0x12, &(0x7f0000000c40)=ANY=[]}) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x62, &(0x7f0000000200)=0xad52, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r5, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff, 0x3}) socket$inet6(0xa, 0xeee1f5804a5b0510, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') futimesat(r7, 0x0, 0x0) write$apparmor_current(r6, &(0x7f0000000100)=@hat={'changehat ', 0x1}, 0x1d) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x383940, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 5.821257815s ago: executing program 5 (id=6418): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = io_uring_setup(0x45a6, &(0x7f0000000500)={0x0, 0x0, 0x1, 0x0, 0x228}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r5 = add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffb) r6 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r6, r5}, &(0x7f00000005c0)=""/208, 0xd0, &(0x7f0000000580)={&(0x7f0000000340)={'md5\x00'}}) fstatfs(r4, &(0x7f0000000140)=""/166) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}, 0x20) socket$netlink(0x10, 0x3, 0x8000000004) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r8 = dup(r7) fallocate(r8, 0x10, 0x0, 0x72000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 5.477997144s ago: executing program 0 (id=6420): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$loop(0x0, 0x1c000, 0x440) fdatasync(r3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') r4 = fanotify_init(0x200, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_mark(r4, 0x39, 0x1a, r5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640), &(0x7f0000000680)=0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073799a4958047d1204af0e3b787a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4048015}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000408000440000008090900010073797a30000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x4804}, 0x40400c0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r8, &(0x7f0000000000)=""/38, 0x26) getdents(r8, 0xffffffffffffffff, 0x5a) 5.039135826s ago: executing program 1 (id=6422): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x82001) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000140)={0x9, 0xe8, 0x1, 'queue0\x00', 0x7ff}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x40012121, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00d18d5ea710587dd700003e000701fcffffff00000100017c0000040042800c00018006000600800a0000180002801400148008001380040001800800b700", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x28, 0x8001, 0x0, 0x800000000009, 0x8, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x2}}, 0xfffffffffffffea2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="980200001e0001002abd7000fddbdf25fe8000000000000000000000000000bb000004d302003c00fc0100000000000000000000000000010700000000350000080016000010000010000a"], 0x298}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)) mprotect(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f0000000080)={0x1, 0x20000006, 0x1}) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xdaf}}, './file0\x00'}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000c80)={0x8, {"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", 0x1000}}, 0x1006) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) 4.990213813s ago: executing program 2 (id=6423): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0503000000000000f6ff07"], 0x1c}}, 0x24044080) 4.989769811s ago: executing program 2 (id=6424): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0xd57e}], 0x1, 0x60010020, 0x0) getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000100)=""/211, &(0x7f0000000240)=0xd3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, 0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, {0x2}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000006900), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000006940)={0x1, 0x0, [{0xc0010117, 0x0, 0x6}]}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x20201) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000000c0)={0x51, 0x4d58, 0x5, {0x3, 0x401}, {0x6c83, 0x1}, @const={0x7, {0x249d, 0x1437, 0xf, 0x93a4}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x3, [0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7, 0x0, 0x0, r7], [0x2b8, 0x0, 0x0, 0xfffffffc], [0x1]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='memory.high\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r8, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 4.92848603s ago: executing program 5 (id=6425): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000202010200000000000000000100000308000940000000060400038094000a"], 0xcc}, 0x1, 0x0, 0x0, 0x91}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34}]}, 0x48}}, 0x80) r0 = socket$kcm(0x10, 0x2, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="02002cbd70319d25fb2026531200fcdbdf2521000000040084800800dc00030000000600f7000c2d0000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000011ac0)={'wlan0\x00'}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000100)={0xc4, 0x0, 0x800000}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r10 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001300010026bd7000ffdbdf257368613235360000000000000000000000000000ef00000000000000000000000000000000000000000000000000000000000000000000000000000000f26d1979"], 0xe0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b000000000000000000002739f46d9dcc1f000100000000000000ac7f17a45c197287a90800bea978a29228f11c519df7cb103abaa3ca8a32dcd60edd874e01b069e7c70624dd09000000b5f78f7367a27fe0c485045d2c32c4f0d868eeaa54156ff1bcd96cc2dfaabdcf646dd4e256c55aa01df304579b6a42a70317277df2875e79113b801a", @ANYRES32=r0, @ANYBLOB='\b\x00'/20, @ANYRES32=r3, @ANYRES32=r9, @ANYBLOB="05000000ed08936b45552eacfaf604f10200000000000000000200"/38, @ANYRES64, @ANYRESOCT=r8, @ANYRESOCT=r8, @ANYRESHEX=r10, @ANYRES32=r5], 0x50) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 4.537508159s ago: executing program 5 (id=6426): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0xa, 0x6, "0e0048", 0x44, 0x2f, 0x1, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x2}, {0x1}, {0x1}, {0x8, 0x88be, 0x2, {{0x4, 0x1, 0xfe, 0x0, 0x0, 0x2, 0x3, 0x4f}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x1, {{0xb, 0x2, 0x6, 0x0, 0x1, 0x1, 0x6, 0xf}, 0x2, {0x8, 0x0, 0x3, 0x1e}}}}}}}}}, 0x0) (fail_nth: 6) 3.937945173s ago: executing program 1 (id=6427): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') rt_sigaction(0x1, &(0x7f00000000c0)={&(0x7f0000000040)="642e3664400faeabe300000066430fefcf66400f3837a6ca680000660f168b000000803ef2400f1ed3c4c2e93be7f2262e669f8f88a4a2e100430f12957b280000653ed9fa", 0x48000004, 0x0, {[0xfffffffffffffff8]}}, 0x0, 0x8, &(0x7f0000000200)) read$FUSE(r1, &(0x7f00000060c0)={0x2020}, 0x2020) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x40000001, 0x8, 0x4, 0x2, 0x3, 0x4, 0x1000}, {0x8000000f, 0x0, 0x4, 0x2784, 0x6, 0x7, 0x2}]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x73, 0x0, 0x0, @tick, {0xfe}, {0x0, 0x3}, @raw32={[0x0, 0x200]}}], 0x1c) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000002680)={&(0x7f0000002140), 0xc, &(0x7f0000002640)={&(0x7f0000002180)={0x2c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x4, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004090}, 0x4004000) write$UHID_INPUT2(r2, &(0x7f0000000100)={0xc, {0x8a, "804a30f70cdd9e57d98a63d25a806afcf6843049e4aa19c1116cb4bda727526d050efb72293e520119ddff820ad7eeb3ab45540db7230241f23b965227fe387f6b0a945a75e4aa115863650cbed3f8aa4dcdffe28b763bb264476f119bdba115e67ce9bd3fbded7fe73ce08f302bd925e07c6f0180ca574e1be92b09c77462cfd5e15ccd336e051c0684"}}, 0x90) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000040)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) write$UHID_CREATE2(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYRES8=r2, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRES32=0x0], 0x118) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c00128009000100626f6e64000000003c000280080014000000000008000700", @ANYRES32=0x0, @ANYBLOB="08001e00", @ANYRES32=r5], 0x6c}, 0x1, 0xba01}, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000027c000004"], 0x528}}, 0xc000) syz_mount_image$fuse(&(0x7f0000000080), 0x0, 0x0, &(0x7f00000021c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f00000025c0)={0x50, 0x0, r8, {0x7, 0x8, 0x274acb0c, 0x238d117e435c155a, 0x401, 0x5, 0x83, 0x0, 0xc00, 0x0, 0x150, 0x5}}, 0x50) writev(r6, &(0x7f0000002580)=[{&(0x7f0000002340)="7529037fb73af51ff1f4a7c810a970a9da21edd6f57fb7b1043f6a3cb28ed4202118aa376bdb583adfd2ac", 0x2b}, {&(0x7f0000002380)="bf5e194bae50a8bc423d1b10e0a3cf0718556981f847dfca91b520cee05ef255b14b0f33138f19ae69046d9a28ff811f2023a025449d7dbff168848063f8a6a10b3a6b4cdc3e12cf0311423beaa346f77406e0b9c142fe6d375def0c032a71f6e518eaa2f9ab010e330953a0de2ec08b043b2b726adca2d8c18d9b19494c711ea7eb9069ea505ed525e1f9400b8c6d16bac26cabfd16cf9d18e238d8b2a482ebfd8be978f4379e72538cf67d9f7fe95c7f069f67ad608c84e438470d88fe7d612987d6f1776b43c3869b0b154ea2dd64a5cfde12f10e7c2e97546b8b68c45562e757972ae7aaa609a7fa2e", 0xeb}, {&(0x7f0000002480)="0762ab8a87d9a4f7ade43263f7594c215fb5cfc65cb86bd136a35ac445742d21e6d6fd18c17e586c24a0678f0a1bf26c1a0bba7d9dd993942280e07831098b201bdfd59887f0c244bbf3d34a80dc9ca8c9d96e3b0dcb2f0b12e08fc74ae04d9766acbe11be58ddfc61d81cac869ca127230473da995887e3f32bc7fc4a0faff67d9b8edb5d587270934dc9f8b902f58a95a0aff199fc696d71f2200961b0414ef9462387c42bec7cae67d6df2de2dc2d37d341faf97a5544c04e8cea1505b11aff7aaccffa8aab9f8e1dd5724e56b7a3ec", 0xd1}], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) unshare(0x2c020400) r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r10 = fsmount(r9, 0x0, 0x80) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r11, &(0x7f00000003c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r10}}, 0x18) 3.937269191s ago: executing program 0 (id=6428): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@hyper, 0x7}) pselect6(0x40, &(0x7f0000000080)={0x8001, 0x0, 0x100, 0x10000, 0x0, 0x3, 0xfa, 0x8e4}, &(0x7f00000000c0)={0x5, 0x5, 0x7, 0x4, 0x7, 0x4, 0x3, 0x5}, &(0x7f0000000100)={0xffffffffffffffff, 0x8, 0xb03c, 0xfffffffffffffffb, 0x1, 0x2, 0xffffffffffffffff, 0x80}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0xb, @sliced={0x7, [0x1, 0x100, 0x1, 0xb, 0x9, 0x8, 0x4, 0xfffe, 0x3, 0x2, 0x8e1, 0x7, 0x0, 0x1, 0x5c3c, 0xea, 0x9, 0xb65, 0x8, 0xb5, 0xd, 0xc74, 0x5, 0x5, 0x40, 0x7, 0x9, 0x9, 0x0, 0x0, 0x4, 0x8000, 0x4, 0x9, 0x1, 0x0, 0x2c93, 0x7, 0xa, 0x7, 0xfff4, 0x2, 0x1, 0x5, 0x4, 0x7, 0xc, 0x100], 0xf}}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000300), &(0x7f0000000340), 0x2, 0x2) r1 = accept$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14) rt_sigtimedwait(&(0x7f0000000400)={[0x5]}, &(0x7f0000000440), &(0x7f00000004c0)={0x77359400}, 0x8) rt_sigaction(0x18, &(0x7f0000000580)={&(0x7f0000000500)="410f3147d9e4c4c2c9928456587d0000c42298f50f36673e0f56b300000000d10836d301c4c26d2e372ef0450fbba5a3a10000429b", 0x5, &(0x7f0000000540)="f041297f0af30faec1660f29f7f3aac4c27d58d966430f83f3970000c482bda9480026640f127e08c4028d28b100e0ffff660f1a4ac9", {[0x1]}}, &(0x7f0000000640)={&(0x7f00000005c0)="c4e291a9d00f0ec4e1fe164e90430f01d68fa9b80209c4823da7c466440ff23f8f69e0996309440f9e3c5666460f3a09b50000010066", 0x0, &(0x7f0000000600)="6666f30f1efed218c402192dbb089a00008f4978e19704000000660f58da8fa978d7a6f624000064f3450fa7d0c4c20102fbc4c2690dc68f29709aed"}, 0x8, &(0x7f0000000680)) r2 = gettid() ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f00000006c0)={r2}) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000700), 0x40e000, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000740)=0x602e) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000780)={0x40000004}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000007c0)={'\x00', 0xb7, 0x1, 0x3, 0x5, 0x9, r2}) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000840)='ns/time\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000a80)={0x0, r6, "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", "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"}) mq_open(&(0x7f0000001a80)='ns/time\x00', 0x40, 0x44, &(0x7f0000001ac0)={0x79fbea72, 0x5, 0x7, 0x8}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000002, 0x4000010, r0, 0x10000000) landlock_create_ruleset(&(0x7f0000001b00)={0x3c88, 0x2, 0x3}, 0x18, 0x3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x100010, r0, 0x10000000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000001b40)={@my=0x1}) fsetxattr(r1, &(0x7f0000001b80)=@known='trusted.syz\x00', &(0x7f0000001bc0)='\x00', 0x1, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x8, &(0x7f0000001c00)={[0x4]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001c40)={'gre0\x00'}) r7 = socket(0xf, 0x6, 0x1000) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001cc0), r0) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x1c, r8, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000001e00)={0x7, 0x6d, 0x2}, 0x7) 3.912921378s ago: executing program 5 (id=6429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f00000003c0)=0x14) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp6\x00') bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001740)={r0, 0x20, &(0x7f00000004c0)={&(0x7f0000000680)=""/141, 0x8d, 0x0, &(0x7f0000000740)=""/4096, 0x1000}}, 0x10) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001780), 0x800, 0x0) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001800)=@generic={&(0x7f00000017c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0xe, 0xc, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000000000000d428000018400000fcffffff000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000007580500008000000850000003d0000009500000000000000e8b01ffdfd7193fe96c15984328f6578c82cff21c69fddccb0cc48464fd46d975353431101e437e36dc43953af8b87e757fd63e7d143f5a95233db2aac69b125dc66b0ebce1ca383b868289ecfff8b20f40028f1baee3cbe50591dd81b5c7c3e0e369ad611ce5600ae1045baed835dc1b64bac6963c4b3d76419c20359a76d6c796a02e3aa624b74e6cad02474c28f2cd1a31b81b8154aef9aa737be123c2ae3db27516ae6650619d3437f21d91fc7dded39fab17fe2718a63d0610552"], &(0x7f0000000280)='GPL\x00', 0x7f, 0x0, 0x0, 0x41000, 0xa5, '\x00', r3, @fallback=0x3c, r4, 0x8, &(0x7f0000000440)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x3, 0x3, 0x7}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f0000001840)=[r6, 0xffffffffffffffff, 0x1, r7], 0x0, 0x10, 0x667}, 0x94) open_by_handle_at(r2, &(0x7f0000000600)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x4, 0x9, 0x2, 0x8}, 0x5, 0xff}}, 0x82800) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="18deffffffffffffff000000ffffffff9500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000300)=0x100, 0x4) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000240)=r8, 0x4) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x4, &(0x7f0000006680)) modify_ldt$write(0x1, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x6}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x39da3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') sendmsg$nl_xfrm(r10, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000042abd70a2b9f0b52500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000801) socket$inet_sctp(0x2, 0x0, 0x84) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r11, 0x3b66, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r11, &(0x7f0000000540)={0x14, 0x88, 0xfa00, {r12, 0x30, 0x0, @in6={0xa, 0x4e24, 0x6, @mcast1, 0xb0000000}}}, 0x90) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x6f9cef9a46972e66) syz_emit_ethernet(0x108f, &(0x7f0000001b40)={@local, @broadcast, @val={@val={0x88a8, 0x5, 0x0, 0x1}, {0x8100, 0x2, 0x0, 0x3}}, {@ipv6={0x86dd, @dccp_packet={0x5, 0x6, "74b0f5", 0x1051, 0x21, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@fragment={0x2c, 0x0, 0x1, 0x0, 0x0, 0x9, 0x67}, @fragment={0x33, 0x0, 0x5, 0x1, 0x0, 0x13, 0x67}, @hopopts={0x2c, 0x201, '\x00', [@jumbo={0xc2, 0x4, 0x1abb}, @generic={0x0, 0x1000, "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"}, @pad1]}, @dstopts={0x5e, 0x1, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], {{0x4e23, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x9, 0x2, "677c92", 0x9, "d97067"}, "b3"}}}}}}, 0x0) 3.904628113s ago: executing program 2 (id=6430): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0xa, @pix_mp={0x0, 0x7, 0x32314d4e, 0x7, 0x1, [{}, {0xffffffff, 0x3}, {0x4}, {}, {}, {}, {0x0, 0xffffffff}], 0x4e, 0x0, 0x0, 0x0, 0x6}}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60004000003c3c01207fdd25ef0000000000000040000000ff0200000000000000000000000000010004000000000000c91000000000000000000000000000000001"], 0x0) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f00000000c0)={0x0, 0x0, @pic={0xff, 0xcf, 0xa2, 0x6, 0x1, 0x9, 0x5, 0x5, 0x5, 0x9, 0x7f, 0xed, 0x54, 0x8, 0x5, 0xc}}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x0) 3.654205576s ago: executing program 1 (id=6431): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d7dda4108911930800000102030109022400020000000009046802006e02c0000904680001253e5300090508", @ANYBLOB="79f5"], 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x8, r0, 0x0, 0x4, 0x0, 0x0, 0x2}) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xb305, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x18, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x2, 0xfd, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xd, 0x5, 0x2}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, &(0x7f0000000440)={0x40, 0x1, 0x7, {0x7, 0x23, "2088d0f2b1"}}, &(0x7f00000004c0)={0x0, 0x3, 0x5c, @string={0x5c, 0x3, "cbb80945036d14cdb4c18a079e0ea91ebafa01ce4a70d4b177bf56f68969c4bdd74d843e5a8e3a63cf7d336958fcd7442a5455532e0592175f278578693a73cace603edde4246066658508de0e6e523b246599ec2b578fdee42a"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 3.654021623s ago: executing program 2 (id=6432): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) (fail_nth: 6) listen(r1, 0x1) 3.532727989s ago: executing program 2 (id=6433): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, 0x0, 0xffdd) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfeffffffffffffff, 0xffffffffffffffff, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) r5 = syz_open_procfs(r3, &(0x7f00000001c0)='sched\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000001c0), 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r7, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}, 0xa, 0x0, 0xdd5, 0x7ff, 0x38fa8b00d923ddd5}, 0x9c) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)=@multiplanar_userptr={0x3, 0x1, 0x4, 0x100000, 0x10, {0x0, 0xea60}, {0x2, 0xc, 0x6, 0x8, 0x0, 0x1, "fb4ccd8f"}, 0x6, 0x2, {&(0x7f00000001c0)=[{0x4, 0x10000, {0x0}, 0x2e26}, {0x7, 0x7, {0x0}, 0x7c}]}, 0xd96, 0x0, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="4800020010000104000000000000000000020000", @ANYBLOB="eee0dceb79b08693cdedd5f6a064c9acc14fba95c0d1cfe95eddf28ca4459599c337e4a8db9e3d680b0d338bc578295639614db9e54820f0ca180f6d3baa14c8b47fb123dbee6c53e408b439ba7587f96292df0f4b737aace6cee49c2339ddf9b6bcc27a3143ecda956d160a1785bef5063a3a635a0a10698400597637cafa60d5b96d7a100f426ff2710911cb14571cfc5bbf7078f0b11e423092b634763d2f9647d0361730899f8fd4bc2684dfa4e2ac53", @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r8, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) pwritev(r9, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000002280)="2fe223062b20b43055a9dafe4340c47124ecd08f52a0c029f0a905035f10e9372aff2c7d2157544591840dd6c552a01e4ba3451745e9f6acf1ab492ec553c0a3a346a7aeb4ddec32ccc729701914fced53fda22078fda3fd9e1b0af51b28313480732979e4cd1840fc633c288bce242d33d7e3f261d3fe0b171ef6fda9219a2027ef44ddc97cc419e3383a31b1f5267e9a7381a10983c6e302a04311986e02c10795068e88c0f4c9fd102ac1c8555325f987f841b93ff8d248e9ac7340b7a8fa442bcba46626f609784da08ea2f72f31248b565a48990caecab054389a205965e86545fb133b4f1f7ea299132f4c545563cbcbf347256d8e65a1a19cfb9a6986e1af4f964218687b441a95ac50897e8985b939e5dae4facf50de8dc32d59d10a310afe7b8bf72d502a517af97dd21e60950510c291c4636adef9dffd5651fc004395e886a814edcbd672cfbfc1d50e7a16d3d5d83075ef1362e9e087defb7a107af5edc02ac5ecbb720affdbb2032bd2e4c046a949cdce18d90e8ac4d4af14723e8ff94ab24a89fb576081d6d3ebdd8943e796aa3c1eddba172161d57e214a0602b3c039c29f2f523046ea2d899540a20d81dfa3d326696c5a5876064dcc625f2ac8d023502428346fea4f5bb0d82c75ffb0c91940a232793467989f7d0503ca85c5b241e12af8e838799581cb678a4362d4b34569cc312c518cffd9941d821eed6da804158046a38a520c84ee7792193cc03b0851164a18a75ba265f0e13d3f4941052b7ceb8cc344a1ad231784e8165ba13a192d23d3740aa479b74e2730fd07cafd06b6683cb1d52cc09575c536ca34b2174e17bf18a20b8982f74dbd137be413dffee5f2b9829412e8c585319f2c0b0edd9e16a615a1f0806fc6b9b54ac44cd6effc61376107d33a76d41c381f73fcffaf41ef60e64e8f43ce96d21cb321f41e8f23a189d08d562ec927e8dd7522792268f2b4b790ad6c8e6758c34a5ae61adc93e3c3867f83a0714173627581a739ce408cd90f96e8634d88645dfbb97389e3b010676083c82558c12977dd8933bfa5f448a74f42775ac4623319ea6ebb0066db0ce56b577a296b6c753de9fb019b9c02ae939e413a6c88633746b7cde63e3547344a0b5542ebf0454fd93098e53a8d6dd1d0e21283ccbdef4eb1b97b1847802c917475bde022d455cef0e9478963ef304302caa38bd053ce5aa8a5118b1f987ee24167565aba7304c612e36a6305629c64b71ed893678fe138a412f4cc85dc190ea81521a1991ed09a1833afc8966b37850271f9f3cb37a455cdfb3675c4f8fff2d7d8e68f637c0ea509a2dc75f60399a6f77661010245422b10c864541df432e2e7a278bb73584ad962c2250dea46af78a40930c9506f8a1b81ec3a55574e417f1bd35a4832ed48e0c5ded28c5e666df4f8fe0ac0e60212d94bd9b308540aabf7fb68890416891792790317f7514009e98dc40e2ba092d8c7cdb4ee48cefefc2d7763c1915f95bcd32295127dbf6baa46e4132596e51e6a79b671cf16eb3e58f3968224f3adc5a628c8473a477fd1c48e6627ba26ac5401a65aefc2dcf60bf446c3496d2ededdd8bdd23bbf4d4b5aa1cff98b7ffeb65dd9f5a84f22b3a50b8d194f44e21d3515b2f9bd8c28506ec0f646327c892c4613d61fc24931b6939472eeee3e22ce1f8bcc191a04c56b28dc4616b2ef7bf219e6745b631c1ec089d6027e99b1f9f613ea0bc75db0f56f62fb924989fd43693ce31f038fac8672e4da4210af05100403c643a654a05f3655078f31df0222e98b01841bfd7800c6aaee8a0e7ec88b60efb02afab6c1fb2d2abcfc60ae8b15f5937de2dbddd4ea31d4e423cc6f0d48af9de2053a3d4f5c28170e8ad53d0d4b25dee8f91acfdb089b60707c12a668dc4aeea747e15740a48fbbdf860042d9f97fb810f8bf1237033aae5adda9fabea1e49219c93f9055f05e79f9b987e40484dab641141e759f22fe83928febdb4fce6aeefbacb22540355d4112dc5dfb62c7aeda256364b238a470d19b516abbef5cac019be1c60809d394a5c3d875b891caf322eee675bf2b8fe503a6be877d094a36661dac863ecd7f2323253bb99c71456085f523afda527d7b4c7b0a3b5eab9fdd870c7d38373e741dde1b5f4481a8f9db3ba71c11a28a16242e54f9660ac69285669aa78dbdd9eef6ca43948285dfca8ea632dc3bc31b1519215c9fe4022647884edd56449e03e2d577835dc7d5a0d6981e27fd872677a4b477588da6a898567e1227c8bff8a1676702ce647411b129c34d008093bb0b48f99967d68268ccde0f09cfa372c3292f547bb7436b6e08e942766ae097f47f9ebf5c752731eaa596e46f721536b4871ce1692ed973ff00e5b38858756324f556209b9a0573df20557574814d2cabed8023419529b7927616090103423cb6cbe6c99f99099bbe26c0a8d0faacb8b07e79da40a476b813fd0701943f1254d66181242fb03f8bfd7f8e7b7537eee03c02a3eb3c42c13cb7e8d7e5f05d2c3f8168f408b251094d83a477196708c1361568f53e01756bac5685b8ab6bdbf50aa9db9977cdccc22e347ed6dd78b2f93aebb88b7714b3a628e1468f836c6de1e6f12575c6afba940ccde6a4d95f62ce512886adfabb06896da9ca81e1809642c537f96712568ddce33d9c12187477fb3654b63873b596c7850d7ec1728debab8047ae5b04399f84b378b6b886257ca51de651a8b6cde74a653e36ca75cc698ce411bd237d52e64180dcdc4bd45ad03acca3c98412ff229a474cd99f0d856c405f63ae282e7e1f3e2375335aa922ca42d392a6295fc35921eda0430076eae5192157d37cfd6dcf905107e168f5fc40f238950bbec2360b0e3bedc52d69a0d99ba119e07374878dad7c2c1394d981d224344954fd9acb8ac6c2df4d979a074d7d8062a54df9e5bffde9b5a1bc1ec9186234d729ffbc9d08865f9f7ade5bd39b62d38d6934d7f31fef05d380231790e9a51824654354e20ffe15b4c6c1e0817b7371dc3eabdb4eb56d93343c50e87b2723009e26f03256eb1061c3072ab84a50b3be516ad059d0557acaab5407104fe42f4a832983d38896675a544f4ed6ae2203cb958b061f0e5b8df3fd94b4dd9c942885857925264bb75a5231059f98d5da64f5d7ecc21e79d6a402132be9a8dd28df04899202a4e6c28bad2c5f75d01403623753316685d4eb8a0b93372770e9ff1bcda974b4e62b47438f52ed94f14e71a3162eeb2c5a5c3b7eee5b423ba2eaed05468f9904b509b1453ff3431d95dcc30fdaff2f1e9c33d42684e89ff66894b4052effdc808d9d5c7810e7bca2505edc6d3896584d2e6ddc9383de2df55492c17c9ed63055701ab45ba7edab661475bc292781196ef6a5eb5c82b92ce029e942b189d9d17dac51ba62c319ece7bbc37131cddc389dbdfe181944e099e4a36b448b9e77dde2e50d767d5b103bd8737e31ca206ff9f0328d1ca23540f928ae397c742b514285c22698c937be7f763473df59607fed8b7bb3289a97ee431e1310d011b9ac0f5f78b4415bb280d59d769389a926b2e4963c436a760463e4e59a4db9214988fbe7336c1f51c9425eacf3d975e42d8acdf207cd6dc71f6b9dc1efc1893e47e0b7fe2c7cf683cbc7fa4fc00e2b4d69f4b7c883d448d4bb724dec3f601e97a197288ee2f654c2c7c8e915e14daed55d017cd9ed5d2ead80f14fb29e9150150244551b843a7b1780490c97962d2e63957f49a5dcfec73188bb8284e7e699f0727b7eb339806bae3cd051c6e77666c3142e27ca626c4ea41865d60ab1d425a609f6dcf53ac58477b8bebef4b83fcd181808acb4d504fc7b51dc3452685c2449ee86b34dd2418c3157fc02daaa29aced516afd1ed478942cfd730e68f25c97e0f8866f1fe266c3895d9e19fc6964c38f63237d682fcd2e0b070788e5ed5ac3d32c5036b71fd3abc4ca53b2bb93bd5085b6d58f1bf68ffa134f5ef63b498702fb69a6aff33dbe27bff9250b3696ca267e1534a2d1780221f997f7b0a32de9ee2fd6fbf75cae4560f5011ae81e0143c356ead3e7ae63cd806056feef5afee0697b7fd2b6630535a0bd006d86400110356743ee70af78c0b96a72c384ae81843374f22f84feaf8d430624ccd81760abf674f0a2991be60ea7f096dbc6ba5b9c7c95c2f0aeb568bee45e8bd40727688d415e3d62440a6217590855e6b413877abb6bef485d1cce8960a369fd4348c824864bca07f4a9f2be9e0eeb84dc2bc3ecdb35c723e7a96f8fda5846e95bca2c648d64bc30242c1efa80086af683bd67aef0620740056276a54b8a1c43dffb631e24e443264168453b76e005c47c60f510327cd6f85b51428e5832d1ced42baf29e1627a56322ba76658bfad3c441f4667dbdf2b25931b85b95ed37a6d942736b69214e2bb9234a019bc6559e600836bba640cdfe6ba1b1b821e49a2b4aae23474c496064cc4bd3072fcbf299e2f76028a4e7c47f6ec9c2c6f4485316d1345bcadd19c69aaf707d3f762ff7972b817787f4297f619307b113bd16fb880f1a7080971d9973fc99c12966c6450db87a5b8b9a243a2927ec845de2eda52617e4b41b5dd51eb39ee3a1a95bbe95eeb822b2f6215f8c649ba2e2a5e6cdade3d4bc4a12aaff064efed4a08bd34f2bd1cf40c9e510a965b99265ff2a37239c729eb3cfc35c7086ab3f5db6772219d67509547588867136bf67314aad16dcedc089e268aa1fd83e7d41730c9d6bb55a5e036c6874609d9e9e97614916af0b65ec739ae830af63f03a88ec3e9b4c565da02538181fa89bf651873b1074bde86b90ba29341bc3f1be26e01b1aa15966ea799f0f46a36702e3db540027c5832f6e534d4c640280864b0eac8649f4d69db7ce210402fabdda8986006a64d34ed64196191ba5b3bd62c6bddc89449919c276da8daf0887185f1ac4ea2cfd1b2546dd2d71b89b6ed20e6311242f689fe49a19dd60f00cf7429cf806f389dc75e9ce0b53603e3d725d6069a6064a13cd24e03b6a5f7a6601ebf72e013a45609fa1cbfc7c4435d9ae0b048f99fa389764bacc81f7b3c72b6b8a1b751c8d0c364c7158a9baa985e6cded3321b60a066d249e05853b933611366d7c5a7cf7d86bfa42e013f01aa622b15abc60a0d16940f12735aade184a15c736cfd7f080a0469353ee1a8bafdb79fa6dfcce5a781b8ed7e2ce44a356c97a3733916143dc043400348673c7cc59f1d4c99eb856fe0e768d517e03329531b2e1c07348a44054d1efd21e348100947f6c1c0bf632b95a6c00999474a1ae5fc75c048b51226f9e31768db3fdb188b0e654d088b3d710cd342ce727e0b024d1e13056a67dc1eaf6f66cd837b0eb11cccada111927977760c95295d15526e4e7b6219bdcd1fcbdb75dd0d410684a74dffb0d2f757b1aaafb7ed765f6d9a4f6afc173c2452da7768e967a426fe299ec67d2793098cf03f02ea5920b174761dd6c8c081d7997bd68ecac43f23bf969e7dd58bc3573cb4941a9344f396eb1d340d49b435ac065f306c0838814b3a83981d81d6247c1bb174e472778ad2a6313e0203000000000000002c895a4c09ece95cf739a1f720ea2b6d8919fb58ed4773434de5262682d5fb847252598b75a76cd7d725245b0adc1807ef02e362fce69c918b42808125d8d6dd9cf29e905252edad26b9b5db2a2414d7a3f9add683d8cb0cf545d57b46417e739aecbe00c731972dcf21b3f00d34a0f539bb90669175a77b6035b0f6ae8c617cacb008b4e78390ade1a359b489f521eed9aca972d35ecab5", 0x1006}], 0x2, 0xa, 0x1) write$vga_arbiter(r11, &(0x7f0000001140)=ANY=[], 0x1) 3.452582348s ago: executing program 5 (id=6434): socket$pppl2tp(0x18, 0x1, 0x1) migrate_pages(0x0, 0x200, &(0x7f0000000000)=0xffffffff7fffffff, &(0x7f00000000c0)=0x3) r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000008000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000010000000000000000000000000000000300000000000004000000000000000000000000000000001d00000000000400000000000000000000000000000000000000000000000000dd02000000000000000000000000000001000000000000004401050064010101000000000000000000000000000004d32b00000000000000ac14140c000000000000000000000000000000000500ff00feffffff0000000000000000fc020000000000000000000000000000000000003200000000000000ac1414aa000000000000000000000000000000000100000000000000ffffffffffffffff00000000000000000000000000000001000000003c"], 0x1fc}}, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f00000000c0)=""/50, 0x32) getdents(r4, 0xfffffffffffffffd, 0xbb) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000002c0)={'team0\x00', 0x809}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000080), 0x51) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e1e, 0x8, @rand_addr=' \x01\x00', 0x6}], 0x1c) setsockopt(r8, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014101000700036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x40000) r9 = epoll_create1(0x80000) r10 = fcntl$dupfd(r5, 0x406, r5) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000040)={0x40000000}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES64=r3, @ANYRESDEC=r0, @ANYBLOB="01310100f0ffffffffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x4000890}, 0x20004000) r11 = getpid() r12 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r11, r12, 0x7, r10, &(0x7f00000001c0)={r9, r10}) 2.990773554s ago: executing program 0 (id=6438): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000d80)=ANY=[@ANYRESHEX=r1, @ANYBLOB, @ANYRES32=0x0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = syz_io_uring_setup(0x4d5, &(0x7f0000000480)={0x0, 0x8484, 0x40, 0x2, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) syz_usb_control_io$hid(r1, &(0x7f0000000f40)={0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="000ed7000000d70ee95ca318f32f60547632f465f75a0381adb5e2051b0ee7b3a3066e93e5c414f4560d171c146394d6fccc06a929a66d959fab4ef84bf71120f2e54a84e4dc269624a7c764a139bee83106b744bed077090c5932281508948f66fdd2f10700f28a7705a745f3d52208e1b18787c13edbc6e6f08e5f48ff0000000000000022eff2a18b03a4a848d799ed274c424865c4966a966c5f8285687cad19a882fd4b06ba6200979c78e4d17089a8765a6ebefc62863d0cfffe591c134800b29e083568091e72848fc43dd9108d17de86e55d0e58368f53fbbde634329fb8fb7a300f3814660afec2f06254447f596b9baa8dbf4fda54a5aac9c9c23322cfa1f630b72d69c1d370f9488059c8e071c89799e08ad4b6582c37d38ebd0cf5233f69336a2d5cdbb79ca58e2ce95f"], &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}, &(0x7f0000000ec0)={0x0, 0x22, 0x4, {[@main=@item_012={0x2, 0x0, 0xa, "9f9c"}, @main=@item_012={0x0, 0x0, 0x9}]}}, &(0x7f0000000f00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x245}}}}, &(0x7f0000000dc0)={0x2c, &(0x7f0000001000)={0x20, 0x9, 0xc9, "de162aef7b64c54ba362cd925d797103938a2d569d1d58a59c42f1a3ce29030ec62c1f1cabe8602f843adef854ec703fcaa5c40e549f0fa67a435a78d404a984bd58f65c874949e3f25a2a79574723d7185d8ed34ede0f6809ef33df741551eeae4a462c247056743db3c7345fd97b2480debb45f07dab1186deaea7b7ea9971291be6bd0d4a06943b4db591bc63d50def92bb771df7429b453c5f09b3dc7625a1d73f26949c1965badbdf6d2b3dd1ef8c0608b3dd8974edcb431d229f7944bfe55d84c789166b83d8"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001100)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001140)={0x20, 0x1, 0x7d, "ec1a4a4cc4e113a284d1698da7e2f616f36eb9df10d3ab473a1779fa477883661b01f7066f8f1d1816c359ad37f0a2ef7905a2e1f59c6deb4bc38c6431e270963e91e0ab7f4d31558fa921ed85a00fed6f7422ba58d26df4f93fd57cafd21ad88cb223cc585b3c62f68f1b2e1a2dab48e335838b278efa44e86e1afc0f"}, &(0x7f0000001200)={0x20, 0x3, 0x1, 0x8}}) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r2, 0x0, 0x0, 0x1, 0x1}) (async) io_uring_enter(r2, 0x400022d0, 0xda40, 0x1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f00000002c0), 0x3, 0x2) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000080)=0x100) (async) ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000100)={0x7, @raw_data="8a93a9bca2e7a34fd42cad7a27db2244182edb88bfb1f531061fff7f8e2167ccf1cb11a2bc849e7071c7dc5809a0e1e7a322fb50414f35f9a64a7a24e6eac6339fe77f834b71d14670185f2b582edd96ac12667b94ce5d1dab41c7702b0dd2df2800fe8ca0eb607aace9f42c6f82b97820cb0686ff8279996467f64732144e6d8a36e8848dcbc0be0fe8c515128a63995eba99cf70e5db63cb5a10703d334e05c4fcbf9910e795abe501acb4bc4ae4b30c5e2679214f982efdb31aed3ae4392d31b7177aee45dd8c"}) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000001280)={0x2, 0x2, 0x5, {0xfff, 0x1, 0x9, 0x5}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r6 = syz_usb_connect(0x3, 0x805, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x70, 0x44, 0x1a, 0x20, 0x103c, 0x1629, 0x6a81, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f3, 0x3, 0x7, 0xe, 0x0, 0x81, [{{0x9, 0x4, 0xa, 0xfe, 0x9, 0xff, 0xff, 0xff, 0xff, [@generic={0x3, 0xf, '8'}], [{{0x9, 0x5, 0xb, 0x0, 0x40, 0x9, 0x3, 0x81, [@generic={0xb9, 0x21, "3c5920d21b7eb572ccea33cfa320d06061170c10e49ae890d55392af3e0de3e0007a5ec4214d6d8791a28bbf768cf6e5a52685ff7219880402c4a068c12b3e9e8940e10f526aeb244556be8d323689f50ee8f171416ff6ba8995b6435b0d831d40958505e287017b41236060422d3e6e650591ddeaf6698799aafd78dad097ed82cd751cfbc9ba7c96cc15d973228725e2d9e70cfea8ba1700cf716ca7dfd86fe9d00c19b63dc1e80da4fbbba586b697a0c740ebde44f4"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x20, 0x0, 0x8d, 0x7d, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}]}}, {{0x9, 0x5, 0x9, 0xc, 0x20, 0xa2, 0x10, 0x44, [@generic={0x72, 0x10, "7f470166afaf6de1ccab3618c261ee1c7a18995544f89d0cab9c4eaedde2688fd4e811d074b6e54d2f0ae9abdce926e59df8fd313b1f6d2c298817fbb87fdc1f73c2fd7240c63875e4118bbc792112caa4e67e970c71d9f64b57de4d83d779d26d94f2d37963f68dd96e046a3b664e10"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0x2, 0x0, 0xb, [@generic={0x56, 0x4, "00786a561f9c2266a2248ed2ad0716525bc8f5f3345e3851e521b94e4164ee200a7964fa013d319ac6bd108d0a191d1aa607652024608cdb200b408660e43d9438b1b936ab334e0a4d0d2806abb4182948985b9b"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x3ff}]}}, {{0x9, 0x5, 0xa, 0xc, 0x20, 0x3, 0x3, 0x4, [@generic={0xd, 0x1, "0c5c5179e6f8794f3d19ee"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x3ff, 0xa, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x9, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x31, 0x5}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x5, 0x1, 0x4, [@generic={0x32, 0xf, "991e82533592efbffe10e2b9da4886afea2f807a87a7494266c22d0ae94177e50d05a459990e1b1d1e1667c366c893c2"}]}}, {{0x9, 0x5, 0x0, 0x2, 0xde724e74991c5714, 0xb, 0x5, 0x4a, [@generic={0x12, 0x1, "4152463b128f6945911da151b6cd25b9"}]}}]}}, {{0x9, 0x4, 0x4, 0x8, 0xc, 0x78, 0x53, 0x93, 0x0, [@hid_hid={0x9, 0x21, 0x2, 0x5, 0x1, {0x22, 0xf19}}], [{{0x9, 0x5, 0x2, 0xc, 0x400, 0x5, 0xbf, 0x6d, [@uac_iso={0x7, 0x25, 0x1, 0x1decc3f740c5fe41, 0xf, 0xff77}]}}, {{0x9, 0x5, 0xd, 0x3, 0x400, 0x4, 0x2, 0xc, [@generic={0xca, 0x23, "756540a488f2de7ddeaa5a02aa1de1785ff33278613c4742f263915750520f4a4bdd7b8079cab622a8b726468981b3014da97c392d067243ee7b7490c304757e1167b0fd2ebfe6c04082029b4d37cd6b90439a9f564745e58570fa79353182bf43a439716ddfe51d851af771408b0fc1d12e3a47c5be6adcee9b187e0e0465d13f804063c854f8cf674c54f939cd2d66475216c929ceb1d9036f04d0ed290effef3b7245e096a22fef2e0a8f835c28581a5f5b2724ce3217117222318cc8ecd929813d90f7a41314"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x7, 0x8d, 0x7f, [@generic={0xd3, 0x8, "31c5cb3306e63fa90b25500010e308c71bd6e553e52a8ab24514aeac582ac3433ad153e168571c1587309356e8dc2d47b82d2a0cb115a869d03d884fc3bb2847407d021dbb816f63cfba8c48876795f6493ecf89bf6aae1abcf10505a56bdbb7dd4d752a6a66c78c045ec90b0db121b04305fd33fdf04de3c92959e9d4b512e86d674aba0d9ab61998d9903d2a1504c9f284dedef110c357885f42d1ab6dcd0375b4f85b88ea783e2850e2d4fc437c33ef94513c58400edcb77d5c0812ec0a482567b3a13bd9a253c6332d0f5d4d600c9d"}, @uac_iso={0x7, 0x25, 0x1, 0x24b8adc007e92e2f, 0x0, 0x1000}]}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0xe6, 0x6, 0xbb, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x4}]}}, {{0x9, 0x5, 0x0, 0x3, 0x40, 0x7, 0xc, 0x9, [@generic={0x80, 0x21, "3a1dcebf9a32a8e6fb1e5dafd52383802d13e1d09408d1fd4dc20f6d3e63ddac8c8a6fc859b71c9bd50db266662c438e19b25d45446bafb9cbb62b929a103737759439378fd62dbab03927c45d344be2ca34d751d9c25000d7c6abc805179b00170cf883064604d3d294b0e34c14dd65f68948d0387fab527d213411e7c4"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0xf0, 0xf, 0x1, [@generic={0x19, 0x23, "d233044e0d52f961698addcde6fac867f06c479de02dca"}]}}, {{0x9, 0x5, 0x6, 0x6, 0x10, 0xff, 0x6, 0x0, [@generic={0xea, 0xb, "b9ba4dec1c3fe1b3e4609ace92ba8dc59111b5c0f454370a09a24e3b199380184b7713327d8adf940933613876e94df975656647e09beeb78613528adcb959d20e31cbd68915493192b614220e6d65c9f4ffd1f6a0377f24f671cf72cd74fe06a1a8e3724bc83a43e98b3ca307cd5e7c7d6b626e05da37699d4ca33b21934f98883e5ba11244e625c082ba133ff84c09793e7068c1998a07d05c50d4d59749b7602f42e454edc2662be2e0844f1dba114d8b502cdc30d684aebfc634579a6a1e55b455b24ea6bda971784841653175d6f97b20fdd71e833856d172078f414e1b9a23aafded58a43d"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x6, 0x10, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xfff7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x8001}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x9, 0x0, 0x6, [@generic={0xd4, 0x3, "28a275913486142e4906d2bb4287560e73e236ff68b2274d35bc9619805faf1801cfb81cb56031f45d4a553471086a067d0efc73007561b84bd7d5b0b35a9bdb1a3892885a647c7f1d3743f3919d5b97ac9a05eff073af304b13ca5c9321162ba4d6950427a4ba2da1943f8551156d8bc2ddf48c2537fa6419705a7cd86b4b7450ad612813a0b886109ff6a79b42e5017d5ac9eaa7d5b66afb4e876a05486baa5e6c12b48379c19ea1ab873b93cb3cce3491c2208696d0914fe82c3933c8a95668178a512758ccddd7c5ac946d57ca76f168"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x5, 0x1, 0x6, [@generic={0x15, 0x23, "700e9dd7190b42769215de1a5900b525301ac4"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0xa, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x7}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x2, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x3}, @generic={0x29, 0x10, "9f6e093e8bf3be51fd0da52fd00fc33707213db9f956d6aee255889891b0ed5cc1323246402381"}]}}]}}, {{0x9, 0x4, 0x6a, 0x41, 0x4, 0xc7, 0x52, 0x5d, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0xf001, 0x1}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x304, 0x6, 0x6}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x0, 0x3, "ededdaa55ecc"}]}], [{{0x9, 0x5, 0xc, 0x3, 0x3d6, 0x1, 0x7d, 0x3f, [@generic={0x36, 0x24, "b2b0953b4438e42adb9f9560e5a119a5a074df26496b39e1527008605e8cadacf05a16234d8d1c3d865cbcbe665d64d36724e8a4"}, @uac_iso={0x7, 0x25, 0x1, 0x86, 0x9, 0xf}]}}, {{0x9, 0x5, 0x6, 0x0, 0xe1b720f5d542bd2b, 0xd, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xb, 0x3ff}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x0, 0xf, 0x1, [@generic={0x27, 0x31, "91216f1cde5296f4a3a7e46d5a018f5c283208d5fb5998c5897af22ab59f77bb5369eadfba"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x0, 0x0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x5}]}}]}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x8, 0x7, 0x8, 0x10}, 0x42, &(0x7f0000000080)={0x5, 0xf, 0x42, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "839bdd4445294e6a47cc2a9f9b2bfc49"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x75, 0x9, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x1, 0xff00, 0xe, [0xffff00, 0xff00, 0xc000, 0xde00]}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1c01}}, {0x1e, &(0x7f0000000140)=ANY=[@ANYBLOB="1e03d7f92f7cfe0bffeb1d5b654e161fdad9681919a23a1df7e8398fb0bd"]}]}) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000240)={0x14, &(0x7f00000001c0)={0x40, 0x11, 0x19, {0x19, 0xd, "2fa556b8f9a1b085a10086c642b03aca4ecde2ee933994"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f0000000280)={0x20, 0x5, 0x46, "b2b25e4a8fb52d03c97b08b6c5a2bcc4222c42aeb620a1f367793d835098473feec9642ea1e308a36c86bdca538d41839f82cd4654c0cd10ed02243d44646ec0f123e0fcfced"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000340)={0x0, 0x8, 0x1}}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.54618571s ago: executing program 5 (id=6440): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r2], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r3, &(0x7f00000008c0)={0x2020}, 0xfffffef0) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r3, 0x8044610a, &(0x7f0000000200)) renameat2(r3, 0x0, 0xffffffffffffffff, 0x0, 0x2) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x6, 0x7, 0x0, 0x0, 0x8}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ptrace$ARCH_GET_GS(0x1e, 0xffffffffffffffff, &(0x7f00000001c0), 0x1004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) unshare(0x20000400) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 2.381409282s ago: executing program 4 (id=6441): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9f", 0x1, 0x51, &(0x7f0000000240)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendto$inet6(r0, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000400)='U', 0x1}], 0x1) writev(r0, &(0x7f00000003c0), 0x0) 2.257900707s ago: executing program 4 (id=6442): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x3, 0x801}}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f00000001c0)=""/4068, 0xfe4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x200000000622c, 0x8) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002ac0)={0x0, &(0x7f0000002880)=[@code={0x1, 0x4f, {"0f01846fa4980000f30f21920f3acc80070000000866440f388094da0b000000def666660f388147d1410f1624b766ba4000edc44179d7d9660f3a17c86f"}}], 0x4f}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) fsopen(&(0x7f0000000080)='nfs\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="26e0f587876cf1557ac264299db1f6bb110bf690af9df713074a7db720cf2983b73e9b8a0d1e32c23d2315b301a3d6b2378f2ab17216459a", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) r10 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) 2.028137536s ago: executing program 0 (id=6443): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x40000105, 0x0, 0x0, 0xfffffd30}) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.010517398s ago: executing program 1 (id=6444): r0 = syz_io_uring_setup(0x4d5, &(0x7f0000000480)={0x0, 0x404525, 0x81, 0x2, 0x12a}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000002080)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f40)=@alg={0xe0, 0x10, 0x2090a1265e0c2ff, 0x70bd25, 0x25dfdbfc, {{'ecb(camellia)\x00'}, '\x00', '\x00', 0x2400}}, 0xe0}}, 0x8000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xffffff00, 0x0, 0xffffffff], 0x4e22, 0x4e20, 0x4e22, 0x4e24, 0x1, 0x7fff, 0x80000000, 0x101, 0xe83}}}, {{@ip={@multicast2, @multicast2, 0x0, 0xff000000, 'geneve0\x00', 'sit0\x00', {0xff}, {0xe86dc949c1c17c3f}, 0x4, 0x0, 0x71}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x9, 0x6, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r4, 0x0, &(0x7f0000000080)="5c60de3001b00c0142fa30fc9c0ecfa268cb59e5b66a27d31a5fea6cae4775d847f3131e925c4be1cd3e3f7299e3953bd3f5f6b4f5cee0", 0x37, 0x4000, 0x0, {0x0, r5}}) io_uring_enter(r0, 0x22d8, 0x20, 0x9, 0x0, 0x0) 1.729981057s ago: executing program 0 (id=6445): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) (async) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a0725ce9403b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x60, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @local, [], "1b8d2069162baf34"}}}}}}}, 0x0) (async) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/188, 0xbc) (async) read$char_usb(r3, &(0x7f0000000100)=""/67, 0x43) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x1, @pix_mp={0x0, 0x0, 0x30314247, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x2}, {}, {0x10}], 0x0, 0x0, 0x2}}) 1.702731667s ago: executing program 1 (id=6446): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = socket(0x2a, 0x80803, 0xfffffffe) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={r2, 0x1000}, &(0x7f0000000100)=0x8) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = eventfd(0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000305000000000000000000000020", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800e00010069703665727370616e0000001c000280050016000200000006000200300000000500170001000000"], 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000002c0)=r3) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40000042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) link(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs/../file0\x00', &(0x7f0000000240)='./file1\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="73656375726974792e2f000000806675736500f9c725fce1e94e8ab3a57021feef0870381d989b64f43757926d998f2fbf221ad94937b9c81c5dde32d62006df3d451fb66b4a046c279e473a38d5ee62fc5940273f3f02459466e1b56601ad73c0d4a42099d1f48070c7d46b22fdb15f14bed32f64ae81940dee7cbf40b3d0a4400231fb655716f8a4a2fb3428472488658b7733bc9458a61ec084a8dfe45e83accbcd51cb946fa1a373b645e1651961fef97d68f5f53fb6e9c318a117e2a22d503ed06039d2a6ded0e8366ae3b8c1c1"]) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1412ee6d60098fa63c3ec64b2ea86ca607c4ff4a828800e2ff7fb716037d0135413d795f996ef592385c7db03b98d0c3f076dce54d4bbdb31b6b4705b67f17b66bc89c11073aba677b1bf4017eaff259e2e01ba6250b0117ea00000000924dc113f48342bd2dc541b5de5924b55562bfa112a491ed59b0854abfdd9b9e2ad3ba24515016db0a5e777b37a2d6062e0fcbba40cc0b496a77b196926578434a46645a58629e172781f93b59de269c6604ecf924ef51507391f3737ec89220ad2ff19bf2cc2b769115a459fdd7ee91e8f449c79d791e647cd36ec088dececbe4c70c87956fbdae9056d946f031cbc85dcd2a81aa0ad42574b7598e6abc09d82c9a85ba6e426c6c06dae96b08ca618c1d65c7654bbf300ecb25dcb46c0d79ccbcca41cc050fd85cc95e0dc340e0835442b551", @ANYRES16=0x0, @ANYBLOB="000304000000ffdbdf250cf40000"], 0x14}, 0x1, 0x0, 0x0, 0x20004084}, 0x1) set_mempolicy_home_node(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0) 1.581633037s ago: executing program 0 (id=6447): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40890}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r0 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{}, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x100000008, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x3}, 0x10) bind$tipc(r4, 0x0, 0x0) write(r5, 0x0, 0x0) dup2(r3, r4) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r7, 0xffffffffffffffff}) close(0x3) ppoll(&(0x7f0000000000)=[{r8}], 0x1, 0x0, 0x0, 0x0) close_range(r1, r8, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120110035bc1281057a2132034ab010203010902120001080840070904"], &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x5, 0xe8}) 1.370080194s ago: executing program 4 (id=6448): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5d, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x27, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x1, "122b472e41e24b11f34b608816"}]}}}}}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x2f126000) cachestat(r0, &(0x7f0000000100)={0xe6af, 0x3}, &(0x7f0000002280), 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x9) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) 974.281155ms ago: executing program 4 (id=6449): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = socket(0x2b, 0x80801, 0x1) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) clock_gettime(0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000000c0)={0xd7, 0x1c6, 0x6, 0x7, 0x7, 0x1, 0x6, 0x8}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x1e, &(0x7f0000000040)=0x5, 0x4) r1 = getpgrp(0x0) waitid(0x2, r1, &(0x7f0000000100), 0x40000000, &(0x7f0000000240)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) 748.388717ms ago: executing program 1 (id=6450): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x3fe, 0x0, 0x13, {[@window={0xb, 0x3}, @timestamp={0x5, 0xa, 0x46000040, 0x4000}, @generic={0x0, 0x4, "d588"}]}}}}}}, 0x4a) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20c0}, 0x0) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r2 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a2401080000020102"], 0x0) syz_usb_control_io(r2, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x8c, @string={0x8c, 0x3, "98b9e132f93996d778d7d409800713f49dab143ca499909a8cc986103acc1aa391fbf832068274f8fda06d8625edd0a00ee9b6fd72b02ced70c9be0ed57540bbf3dcdf7bd583e8dda3a0218cb9d55dda89539d620abdda78f16aa82718f8fc35471f25422d512835efdb881b124124ff282d236f49007ccb56ea1b85a670bdf01d616e3f47fb70f940de"}}, 0x0, 0x0, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r3) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 402.944814ms ago: executing program 2 (id=6451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001200)=""/150, 0x96}], 0x1) ioctl$TCSETS(r4, 0x5402, &(0x7f00000014c0)={0xfffffffd, 0xffffffcb, 0x1c02, 0x2, 0x7f, "cc33101d3f0000002000"}) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) r5 = syz_open_pts(r4, 0x42) r6 = dup3(r5, r4, 0x0) write$UHID_INPUT(r6, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b05"], 0x40}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) r9 = syz_io_uring_setup(0x223d, &(0x7f0000000100)={0x0, 0xb050, 0x100, 0x2, 0x5cc}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x30, 0x21, 0x0, 0x2}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r9}) io_uring_enter(r9, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) ioctl$KVM_X86_SET_MSR_FILTER(r8, 0x4188aec6, &(0x7f0000002a00)={0x0, [{0x1, 0x258, 0x0, &(0x7f0000000040)="58f2cc516fe3da03c48cfd7393d15e876a462574d7cfd37d124f507684431f69d22eb6ebb6f9070df71c415becefabffc59093fe616c6392d4e64d3a975031a8869a56acaeb7f8c16632a9"}, {0x2, 0x228, 0xb, &(0x7f0000000200)="8ac1f70c0c918f2d021d7de6243255cb8556b63934c17dc0a7f97d0396b0674a05836777a85c587241c84ceae3bc269e50f417ee85caf145fd2ed147cceccfda453ed1a218"}, {0x1, 0x7f8, 0x7ff, &(0x7f0000000280)="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"}, {0x2, 0x598, 0x8000, &(0x7f0000000380)="4dbe042650c65e82519fed3cd95e7b57e73e1456d4abcb11d87792a6d191ad0e8c96982c8818effb84c899500ef1e696eec85c01456fbad03f0c0e97938ce063bc2910dbafe4e9153087adf286dd17c628c9dd2f6b7ef6a43bc6e751aff08c5f9de58d0ff8184ea4cc5ff8289269c3ffa1d45ec775720fe9dfb6ea1dcc13e0922a6552e4e1dfee119465ff183af7ac736cc85cd2098a2c9d489c88d2f5085be7843c9eba88ee5aa6f23e5dcda6d13f289f4222"}, {0x2, 0x700, 0x1, &(0x7f0000000440)="affc249018269af21e9a213e0933403ab3de5deb9d8575e2f3f09a906bbbf71beebc48a0e783f92c986227046375a9a46842bcba086323e5ad64f8e8d1b089105f59892afa9579190531ec817f82e7f7bfdc86e8505486dee2e3ce8f9a6dc8157318fbbc33b8442185c4fd12618a728647c04350b5692b532fb739066adcc3a12dde993e69f7c14c00696233324de9f1964bf1e26f116d45b9fd77fbfd1dbcadd188a0b08d10725c0ec5bdcb4ccd9caf5e04df56bbd1bca59ef0943edef5d38e55c7a52baec59b1e7e20f5d59d49dfb5e8c6f2cd7e3af649b19e83f84e619379"}, {0x3, 0x448, 0x8, &(0x7f0000000540)="e40e4ff2c71d59473b4d909bff5f84c0c410d01a557ec267574ff8bf4ebbb325435d48d37796bd9c1f786bb2b790fbff10efd5c669cea77749ed42fc268ec52e2a521651bbbb4f8efa7bfe09ede8cd48d1cec354651c5c7a6ffc69382dfa74ce3be864b8a9ac59274b993b5b31263763e847e73677e40dde2941a603ec60b0d6a71b3e1883b6f4f919"}, {0x2, 0x228, 0x7, &(0x7f0000000600)="33a7d8ebfea73cff4e28675a82144874e8ebde1e4970e99ca03c8c52d1c987bea90032575ea11f6b9a5c55f7d5e68babe3cd78a7c9c2a23c8cb8f14024658e5e94d3b3c241"}, {0x3, 0x550, 0x6a, &(0x7f0000000680)="c9f6cb2eb16d471a5a871d47dc22ef6375d293aaa4c7bb372292a2fa81b54aa3309aa136d7c248ebb28e6a108c41c785c11b289d588c5d985fd6035ece2ae0b7ae7d20d51c91731e628d8fb69abe21551c949abdce07c1006081cc563d6ad94aa1da24cb60797cde439f77c26dd8448f7260eb41463384bbecc601cec4d112bee47b9f92f0bc269b7de28c5c416118d2b2444c2f7b9fd6fe53f502fb38f3c70beb887df8ce5da16e6418"}, {0x0, 0x120, 0x4, &(0x7f0000000740)="fad13b33a52852cc6b30d7f91be73c9fba6633eb9c8026e368adbde0695b2e4cee3482e2"}, {0x2, 0x7b8, 0x4, &(0x7f0000000780)="d33dab838e52e5e46f7c53993ec414bcfbbdb22d4ad20b87d5657ee467b113bdb4761e01f20c5da4f891cb477855d00d082919d700250edb1b01e43603285b4fcf7680d34110c3f056529482e5836829a44083e1fc3f0993859028183be44bc396726ba4e76662ce69fabe3438622e240e599178a9c8dd4735bd80dadd58ab8ee85d40c2c7d91c4efcb894fdc71d811333f0139ce0bff02d208fd58b7171db170c9d52636310ef11c1f7a08313a5f1a84178e1ea0cdd085a4a4f01a0fa151af2d005f35bce64fe657021c280bac3655c87064ec78c6346a84802ce21a4631b0b31481f40845293726e1c37aaf18e58ded2eae9e0969a84"}, {0x0, 0x450, 0x3, &(0x7f0000000880)="639236695dfe50d0f59aeba30bc614d0be3c52bf8ea10e4bc9ff68e1b3acff9b1a072216e77247132837476c265a13f00bd4bf205da7bafaf066b2d224389d86aff3db793cb2c6cd5c2549c562bc2f0392b7d24fc24c0df6069fc24cb09cb6ca64449bee0c1971f5ae4a09a359e833d22509693dce94a6cc14c4b50066139c6c29b31895f0a5ff369833"}, {0x2, 0x8000, 0x6, &(0x7f0000000940)="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"}, {0x1, 0x0, 0x3, &(0x7f0000001940)}, {0x1, 0x8000, 0x7a, &(0x7f0000001980)="8e6a3485d1b4b3476125d6140858370ec82978455ea5dc5f13ce5ad8a70c599195fd1e7b3dedc7d23d7fc80d09106f553538c7bb5580bc2a146734bef7dfcd296cfea8a063287d57f8bd88f9af80130e973cb2c7bfc13a261b4abf2ee1b40ef2e069690bd8aa6c6ec7e0afd3194d76a677ed90113270f08cdfaa7459dd60471ce2dfbee92284b3004fadca1ccf1d4f7c46a9bb6e24403360cf3cdbe38552950894afe54e7ec1cfda1b3add1e42cd95548d9865d798a55ff8bd0b9e5008e618fb50171ebc4c7c03b1a83773aec970903987d0300e9fdb0d78da2c23eea83296c49759fe4fc9a5c4d5fd7f918f217113104e20ad7bb2c9c6fb30f7d615551e6879aa749295e0f7365fdb959a9ab1f8b9dd06c1c940d6221acba12618abfc564958a44df3a03d364249ee45d9d680d2ce319456764f547de32ab1a7fe62abb8b27953b067dbe527f98e6e420e7c3c894927cc77a515aa3e3b7604805f1cb40498385e1caa868a235cc3da254d73578d68bb71291812d4581394f5a98893525e766d88b89b935b31c3752b52473ae0ca2efd6a1e112383066b10c09d1a634ff45d721064a63296655550512ac5ed6dfbba0477ebe4794f39be535e62d3d4263b2a0621c1aa5281a7669aadcca8585e916c7054e571b17a9b03dd629838db6eab545eced6b4ff42be3d761faae278550ac9699313a176c7423958e8d4b830d1a1a7d32b894a31d5710a2c785d4ce06c447bb0a2428fc4e1bbfe108563eac251afc3149b7409aef56ff3e54273be5423f1c69c0229535a5d6548b0dec92cffe795cfb97eccbe905f3589f3469c737cac3f6ddc38f17239fa2ee8a8b85b2bcd25c1bfd79200fc77c95d869d9cdb946774eb126062d661092c66836f9235fef47fb11efdb88fa555009b2a5014beb692a4c2b3aca54f74f114185cd7dd5f113e19adf49afb12be744c015e63ce4997c9e46302f4afc32b66f3d18c719a1059a7a17ced9b6ee1f6bd24bca886340e35ec219ce2a1f4b2d3ddc372334644212586b9a5ad4f4f13ce94352e9c528a2cb508f9bd289b078944d93f761e0cb3fb8e67caea135e1878612038971c5592c6f3fbfe66f5356b9061e3d6346ac73716ad55c7843fcbc8c1ffdb41e56da647f911b432e2e94be5cc82a98a02e8ce1165616786bab65ef501781cff213a452f70584e71faa61dda2c4771592630b9ea1cb1c89b14b81851ca865331308dc33d52f5ddc6de9ec6985c40d39ae42827c3b48691bebe43b7ae56779e3f6eb072b56b0b7ec74ee3b2542fdef9d3e3c6dcf81220624a563b065c0c2b59180da6ca1aebdb4dc763d5c012a12868b3877863e42d654bce7c9b6110594ab68a4f946696e783b0340a375ec487f3ca1538509e30bda2884a98096a5990462f0e86e75f988b5b0551e7a2186d6137529ba03f5df0a49005fc573039ffaebbdb3e95c7703778e9fb6284ef8a49fdf2b059f6eb7bb7659a1936296d17f715e3e28a3dce1794e06e0be733f494b13a72797744c2cf3f7fd5805f8740b7229acbc567c8790779f3ddb771502349719777405e3879231ae7a12aef19ced1a7245d1de36352a81637fc1d0c17c55b5ae08f680e2f4013262814478c8af33a3aa20b35438ec96a9a8108aa82845a46e001b0d404871e8f3ce26af3149607627f13bf3e2e5cd60c786b8fcca1b83274f7cf46258701b65e2546b9000f873a68c00e19f1c53924143e7895da36e1ddfd387263761d0dbf269b94dc03625307efed69ddf3664089645ce74f474afd44afb9cd815a486a5dc5bea9ca75b345829e2b2bd68354f9040ea6876e7468ff4bdffd2b15afacca06618090208b77501f5e6c3fba166c017d1f89ec52bcb519cb61c9cbf3a654be831338ba6628b1958244a780cea7a813974dfcf588cf3d8822484166730b3c86d52c02075ba7a185ae3cc2d2b7afd87b8d0ce90de2a091e44e3962080834514d2b8abfc48dc4a14be38e1c59bbd14d7bd6880d38dc472976d6d906bd4b95382b5cdacffce98f6439e25047591eb0f53fcc4eff9530dbeebab4e18ec78419645f16c0292a342ae15ad0833f7e23775615c4f4b11a2380dfad4dd3c401e2b3d5ee61e8c9c50a53987a988c53af11a2e5ce807492a713a35146065c1fcc62b0d62d1c81777c4a9a9d8604a1bce4279a68ee3578b09af792d8890694405394890bcc5de83b0bd33cf104615c3847e29fff41319d4904415495aeaee4e5600acf4ebc9faedd2c759c54bf8324f10ffa012c3c1d1c9f93c0b71053adefa6dfd26948e87088f28cfa84266dc122f7fd42b2a103f60ca5ec02be2c9110f739b48210a6c3f64571842619c9fefc454f45eb93712064bf6b2dd074f796e094c88ed332150f4b1507e3b83ccf6a2ef873d282b35eb133d5ceadb45adf888354e7bf997ce96f62e636a0bf1ff4bc8b5b06ece4687db7072df826474141a7b52b63cfe631a79729eb1cc661b00ad3e88875cf3625429f59fc6ad16f8cd7f3c1798d04841629045dbc57fc9a273a58a9866fdf0a910dad3994ed0649eb52d0fbfb70020aae9b1e4d5abe6a9b061913f2c7a359455ac230e19b61d1e50a1dcf0299cf9cbeffadbe68cc312607a4a89d9e9c4dc254710fd721fc952c73bf9a986e3df2726a426c8a01dcc5690973fc92f1d91b7c6326634df6161060006384724dbe4e0cadee7da764779dc5777a0e4cef7c37f3caef1224e38031c440dc32945fc61042eb3f51f5349d7ad15681097adb881496357c46ad5d470a8fb2f6c4f2b26f5fe7ddbe3933de36dd295555e08ec445269e6e71f8777b4cf41840510443f5ed640e2135b6a942c6f285eae98d2535d1851fa033ad7d1f3624f80e8b26e1acee46c1656e519f7a29f95361d4c6ba4309d2abb47a55f6525c5287d888e1ef3a384df4f86ff0246d62be21312a4623543a7a937a60c46012ff75e1ea7bb367e6b6c8860d1a492318aa606b247e85b65b5648e13ea4ce2d33fa7345c959eaaef9bd68b0722a9e2c599878dfc611469e3a2a221a0dd231a102b277bdfbe2fd0327322cb0066ef3c0363222e39df167e5cf860630abac2fae44ad7cde1a0c28bc30d4dc42c219acb2d2c0aca760959bb6b951d60b44187c6f11d3313a8866d4b76a8267e6007e65b6354fd30514d8648515a96da19a7fc2303f8422dfe881e7f086fdf9a9af1534eebcedd11a320a4f018944334fa193561a69adf4c2fae1806db9fe5f5952b643f8932719dd34ddf554d920c1c875c31f847448d6adae415c490e2ac86b289de9b8dd88fc11a7cd446d4b4024315c7627f8526688066273d2fb4fb80a60c521f8ed4c2fc5d691f54e9cef5c86feac4fbaa21f837cd0f8fc71462fe85acdf868a82bea8af60d6c04b19334689d734180d8d8c0469fc1cb19e2419aaa2d2cc8a8f07ffcc11c12c315f5efcaca8b710bc89fd45b970308edbbc0697e9e22c430596b987b76d48483c2a9c7587e9731b3d2f1cdae68ed2066fa2e0af4acc3404db1a37e4cd73d3aae85f8c69085fecb0d63cb5bcd45b0d468994ab14463b51a90172626a7dd49995af6ced66cbdf1c498c139186eedb112f7659eafc79a871e8ff3888ab7e37e4a44045b5cf5cd9595d69863a0409eb7cbd3f9d0a8c438079f87aff7febb52722b028ecf218f35c837dc20146405d1a13d63ac10395aaf4f4667121f6abe44ec73f0f09808cdd5d8aa94739f17237027d461b8d6fb8b351eeb6cfdee34cb18d6dda5bfb7b45001940f474d5ffb883c12cf964ef3ebcc825c95e331a4463a7f68d0ec123d367b143ea78d8d08037e71a3078d777cdba69250998c54ecb77ebc03278672711bbfc7806068fe879e92eebb9ddd6e71a385c12e0a5c52fe4a662747b431ad99683516c6d1127f53a630c394391cab881ff9bd3605390023018ef0294ec5cf7f19374a9461c7c0c66bd423bb64a682b2ffab49ffb3dd44730bd81b9412a7921c58009da5cb370b639a5de91d07b118bbc5de5db495133b4f98f013a3cca4377fe55131daa11e49df3682dd315aadea7f551f88de774d110fd052d7ecd447b2ad997e8dfff1d9bd2d8817b307e654715d51072c2e2a61d86c323f3d4d5cb1570cb01b4cfe93af8c82637da2c5851e0208c6df196dbcac30063c84854eb99cdabb3e2cf1b3b90c0a2af6acc386cb44bf0d8def867504c8857a5432444835fcdc136c382c91fde846f60c3bfa8dfc24f8b9a104199478c9112a722989fc28a28e02a60b2234708a342abf9105e813cd13ee331362438f7903fe4f674dd5584f129b53ea842f41cdd8d47f9991f816098639feb8590ec4bb325841e2a8a73f274f4a0b7d427bb386cf122273c63bfb0dd59d1004c4ddf37cda89af719b23cb8da9df4c4bdd28c1f9df961ddea0e70b65efe9c348074c6ab945708614cc778b517cc1ec13104c7739862a7ebe03e9e339e661753406ac8ee46247e56c96fe4beab0cd521f9cc205c3c479acd0f609205681ffd1e922eb8642a68b3eb5f0cdc814ee2397fba7514addc1950c0e26c2b166ad1416ee7b371acc2b74e83a983676bbdcc7db62c7300a77679d9ec55a18aaedd3d79ea25618fefad77bc22511d732bbdbac0aa39828dbc6280cb2ae3b589276967ace2868b817a12e7a653ffad6d5250b4a6a485109d01c82067dc10a5463cfcbed42e53b1dbb96ba90533c9db97f897ba2f8c539ba77c342d1ea309d4684ad98f2d0ccac4cd705851a7849bb7a6da8a63ed226cb95f073cf80b97206d4407715c9d80982e261c21ce1250e07eeaddbe509200ddc69142a7fb045aacf301d0e037b6d3613c42abcad92039a53159176553e6213dad1e49948fca5ce899daf63a676acafd332d640135d69c074c2ad58d5665102c3c409d021dd0d1be74a7bb393434220da1f9e5bed92e7e4fbfa0a64144793a4ed6c11d8f9b48c9c417f8be7182ece0891f192e2e39adcdc12b7ca01fa84f2eba1e9c88b7d3af865eb97f634c3a18b231055d50ccd659138fdf4f46d32d5a6bfdc21c422cc252629c5c51a94339939f0be56d25697d738c1093f513fe338256e763806028cc6cb4dca99dd77421da7125ab28388eeb4fa732dc6e913af3ffef2001cd70b3045ab7e32cf488197da51356a5a0ef3711fe807485e23521368b45d38c4b03a979c7bb6061ef83415e3c27a1ca1244682c192ee520f576d590ef9afb1c64bf9cecf06c9d54f236613654326f1cd4ebe23f76e40f2552a5943f3c28ad8952bb5d7313c0aa880289d4198af584f2d7d4e41a8f1d992739cf7747f57536d515824866b51ebcdde33f0c6897b99517b51731fdf20229b8c6a3cb56b4d6bca97b5575c8f6ad2e5330d4c00cb6d15d6282c6f16bbf0e933b3abe4585b9d33745a3397a1da73b7faaf5ba28248c321f6f7edf096b460bf603c81f75c0efb0021c8cd3af3359c93dab32c251782db7c877533dd7d4fecdd25fc54b9234cc0403b3678ac95a16335cbc03d7f8e7d6866ab18be06859685a65407f453cb0123a33f3b7791faeee0f25bac2eef40554eef7bf45a6bcbead9186f86a774d60da9fb35936567186cf13035d7bcf06029dba5fc88ccd0134618c14343f8c9a5e68c0ebbe1401e3fdd6a741532cd40231cfd456d3a574897fc3f44f9555b0da662a58bc26358fdff8652c10ab0829f73e1b56a17970d05b68905a4015e55892f289d556b35159970c5aeaac04af011b3611b219da0d7c8b4c54fdf95938ce2b251ce30d9e0f84d4d23d7d734ae673e289a7c775312b6202a89be6eb105136fe915edb08e"}, {0x2, 0x88, 0x682, &(0x7f0000002980)="af4aa4b427a9096d7d665000b11876b4d7"}, {0x2, 0x140, 0x8, &(0x7f00000029c0)="ec05f1e1f911910e6833b0e931adec112866c4c52882f7e6329738a3b14dfdea917d1f03adb81c53"}]}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x0) 86.137937ms ago: executing program 4 (id=6452): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9f", 0x1, 0x51, &(0x7f0000000240)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendto$inet6(r0, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000400)='U', 0x1}], 0x1) writev(r0, &(0x7f00000003c0), 0x0) 0s ago: executing program 4 (id=6453): socket$igmp(0x2, 0x3, 0x2) clock_nanosleep(0x2, 0x0, &(0x7f0000000140), 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000140)={0x1, 0x0, {0x10, 0x7, 0x1, 0x975}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x20, 0x19, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x8004) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x50, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0xa8840) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x2e, 0xff, 0xf}, 0x2c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xfffffffc, @empty, 0x4}, 0x1c) syz_emit_ethernet(0xa3, &(0x7f0000001580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "00a300", 0x6d, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, {[], {0x4e1d, 0x4e20, 0xf, 0x0, @opaque="fb4cd34f03a96ec14215afd410ddca69d6d0a3ad44b9f63c859f12552237d9106e5e4baf752ab659b64907c89840dd82ff0417fdeec72a89fc50132e7072c5d7da3272e64acee0f0dcbb5c51cdd37ca44ab0471e55f11ac5564e2d122280fe3603e5d63b18"}}}}}}, 0x0) readv(r5, &(0x7f0000002680)=[{0x0}, {&(0x7f0000000380)=""/100, 0x64}], 0x2) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x6031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): -1:1.0: skipping garbage [ 1615.881108][ T5907] cdc_wdm 6-1:1.0: skipping garbage [ 1615.893348][ T5907] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1615.900758][ T5907] cdc_wdm 6-1:1.0: Unknown control protocol [ 1615.977627][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1615.984910][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1615.998631][ T10] usb 1-1: config 179 has no interface number 0 [ 1616.019812][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1616.036897][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1616.042560][T27957] overlayfs: missing 'lowerdir' [ 1616.059092][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1616.075167][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1616.090710][T27957] netlink: 'syz.4.6104': attribute type 30 has an invalid length. [ 1616.099082][ T10] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1616.099134][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1616.099184][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.102987][T27950] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1616.148120][T27957] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6104'. [ 1616.159579][T27959] netlink: 1296 bytes leftover after parsing attributes in process `syz.4.6104'. [ 1616.347482][ C0] cdc_wdm 6-1:1.0: Unexpected error -71 [ 1616.347937][ T5908] usb 6-1: USB disconnect, device number 33 [ 1616.353133][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1616.365555][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1616.371632][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1616.516014][T27968] loop6: detected capacity change from 0 to 524288000 [ 1616.754329][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input86 [ 1616.840855][T27973] netlink: 'syz.2.6108': attribute type 1 has an invalid length. [ 1616.920663][ T10] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 1616.954255][ T10] hid-generic 0000:0000:0000.0058: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1617.526539][T27990] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6112'. [ 1617.548218][T27990] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6112'. [ 1618.514880][T28000] overlayfs: missing 'lowerdir' [ 1618.561633][T28000] netlink: 'syz.1.6115': attribute type 30 has an invalid length. [ 1618.579563][T28000] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6115'. [ 1618.796075][T28001] netlink: 1296 bytes leftover after parsing attributes in process `syz.1.6115'. [ 1618.943966][ T5908] usb 1-1: USB disconnect, device number 91 [ 1618.944095][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1618.959311][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1619.163500][T28011] bond4: entered allmulticast mode [ 1619.209353][T28011] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1619.518855][ T9] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1620.026976][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1620.040137][ T9] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 1620.146930][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1620.156529][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1620.190756][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24941, setting to 1024 [ 1620.207670][ T10] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 1620.238564][ T10] hid-generic 0000:0000:0000.0059: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1620.265415][ T5907] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1620.308736][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1620.373057][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1620.405658][ T9] usb 6-1: Product: syz [ 1620.428579][ T9] usb 6-1: Manufacturer: syz [ 1620.435219][ T5907] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1620.444192][ T5907] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1620.491515][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 1620.500445][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 1620.508069][ T5907] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1620.525352][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1620.538389][ T5907] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1620.551670][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 1620.582417][ T5907] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1620.604781][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1620.621382][ T5907] usb 1-1: Product: syz [ 1620.626135][ T5907] usb 1-1: Manufacturer: syz [ 1620.641039][ T5907] cdc_wdm 1-1:1.0: skipping garbage [ 1620.648724][ T5907] cdc_wdm 1-1:1.0: skipping garbage [ 1620.657338][ T5907] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1620.663723][ T5907] cdc_wdm 1-1:1.0: Unknown control protocol [ 1620.954060][ C0] cdc_wdm 6-1:1.0: Unexpected error -71 [ 1620.959734][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1620.966332][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1620.973085][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1620.979702][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1620.986823][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1620.993440][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1620.999851][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1621.006452][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1621.012914][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1621.019520][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1621.026249][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1621.032853][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1621.039697][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1621.046390][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1621.053597][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1621.060198][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1621.067254][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1621.073853][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1621.080581][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1621.087175][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1621.142489][ T5907] usb 6-1: USB disconnect, device number 34 [ 1621.142553][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1621.445412][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1621.628777][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.639499][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1621.658680][ T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1621.762871][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.790357][ T9] usb 3-1: config 0 descriptor?? [ 1621.798810][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1621.806830][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1621.814705][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1621.824478][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1621.862673][ T9] usb 3-1: media controller created [ 1621.882877][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1621.933959][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1621.968823][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1621.997009][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input87 [ 1622.076983][ T5908] usb 1-1: USB disconnect, device number 92 [ 1622.089789][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 1622.115100][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1622.275356][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1622.281662][ T9] dvb-usb: error while querying for an remote control event. [ 1622.456084][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1622.458406][T28038] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6126'. [ 1622.461849][ T5907] dvb-usb: error while querying for an remote control event. [ 1622.493151][T28038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1622.538434][T28038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1622.539053][T20088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1622.570435][T20088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1622.580637][ T5908] usb 3-1: USB disconnect, device number 4 [ 1622.590576][T20088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1622.606239][T20088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1622.613979][T20088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1622.645217][T21283] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 1622.672998][ T5908] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1622.819392][T21283] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1622.837850][T21283] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1622.850486][T21283] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1622.861504][T21283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.866697][T22685] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1622.883107][T22685] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1622.886344][T21283] usb 2-1: config 0 descriptor?? [ 1622.946214][T21283] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1622.967783][T21283] dvb-usb: bulk message failed: -22 (3/0) [ 1622.990250][T21283] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1623.003804][T21283] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1623.011683][T21283] usb 2-1: media controller created [ 1623.019517][T21283] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1623.021694][T22685] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1623.042316][T22685] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.054829][T21283] dvb-usb: bulk message failed: -22 (6/0) [ 1623.062820][T21283] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1623.103668][T21283] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input88 [ 1623.152411][T21283] dvb-usb: schedule remote query interval to 150 msecs. [ 1623.176886][T21283] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1623.239825][T22685] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1623.261413][T22685] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.335198][T21283] dvb-usb: bulk message failed: -22 (1/0) [ 1623.342964][T21283] dvb-usb: error while querying for an remote control event. [ 1623.344813][T22685] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1623.362913][T22685] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.380512][T28057] FAULT_INJECTION: forcing a failure. [ 1623.380512][T28057] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.393637][T28057] CPU: 1 UID: 0 PID: 28057 Comm: syz.1.6133 Not tainted syzkaller #0 PREEMPT(full) [ 1623.393662][T28057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1623.393674][T28057] Call Trace: [ 1623.393682][T28057] [ 1623.393690][T28057] dump_stack_lvl+0x189/0x250 [ 1623.393714][T28057] ? __pfx____ratelimit+0x10/0x10 [ 1623.393737][T28057] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1623.393755][T28057] ? __pfx__printk+0x10/0x10 [ 1623.393780][T28057] ? __pfx___might_resched+0x10/0x10 [ 1623.393800][T28057] ? fs_reclaim_acquire+0x7d/0x100 [ 1623.393832][T28057] should_fail_ex+0x414/0x560 [ 1623.393860][T28057] should_failslab+0xa8/0x100 [ 1623.393881][T28057] __kmalloc_noprof+0xcb/0x7f0 [ 1623.393905][T28057] ? tomoyo_encode+0x28b/0x550 [ 1623.393934][T28057] tomoyo_encode+0x28b/0x550 [ 1623.393961][T28057] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1623.393993][T28057] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1623.394013][T28057] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1623.394035][T28057] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1623.394086][T28057] ? __fget_files+0x2a/0x420 [ 1623.394105][T28057] ? __fget_files+0x3a0/0x420 [ 1623.394119][T28057] ? __fget_files+0x2a/0x420 [ 1623.394137][T28057] security_file_ioctl+0xcb/0x2d0 [ 1623.394157][T28057] __se_sys_ioctl+0x47/0x170 [ 1623.394179][T28057] do_syscall_64+0xfa/0xfa0 [ 1623.394198][T28057] ? lockdep_hardirqs_on+0x9c/0x150 [ 1623.394217][T28057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.394234][T28057] ? clear_bhb_loop+0x60/0xb0 [ 1623.394257][T28057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.394273][T28057] RIP: 0033:0x7fca9d78eec9 [ 1623.394288][T28057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1623.394303][T28057] RSP: 002b:00007fca9e634038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1623.394321][T28057] RAX: ffffffffffffffda RBX: 00007fca9d9e5fa0 RCX: 00007fca9d78eec9 [ 1623.394334][T28057] RDX: 0000200000000140 RSI: 0000000040084504 RDI: 0000000000000004 [ 1623.394345][T28057] RBP: 00007fca9e634090 R08: 0000000000000000 R09: 0000000000000000 [ 1623.394356][T28057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1623.394366][T28057] R13: 00007fca9d9e6038 R14: 00007fca9d9e5fa0 R15: 00007fca9db0fa28 [ 1623.394393][T28057] [ 1623.394425][T28057] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1623.511413][T28080] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6133'. [ 1623.511988][T21283] dvb-usb: bulk message failed: -22 (1/0) [ 1623.552771][T28080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1623.555176][T21283] dvb-usb: error while querying for an remote control event. [ 1623.574452][ T5907] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1623.583885][T28080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.682813][T21283] usb 2-1: USB disconnect, device number 116 [ 1623.716348][T21283] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1623.788925][ T5907] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1623.798871][ T5907] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 1623.806852][ T5907] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1623.818613][ T5907] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1623.823458][T28064] chnl_net:caif_netlink_parms(): no params data found [ 1623.831081][ T5907] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24941, setting to 1024 [ 1623.869221][T22685] bridge_slave_1: left allmulticast mode [ 1623.875220][T22685] bridge_slave_1: left promiscuous mode [ 1623.881237][T22685] bridge0: port 2(bridge_slave_1) entered disabled state [ 1623.881773][ T5907] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1623.899626][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1623.908878][ T5907] usb 3-1: Product: syz [ 1623.913195][ T5907] usb 3-1: Manufacturer: syz [ 1623.914340][T22685] bridge_slave_0: left allmulticast mode [ 1623.924122][ T5907] cdc_wdm 3-1:1.0: skipping garbage [ 1623.929777][ T5907] cdc_wdm 3-1:1.0: skipping garbage [ 1623.930090][T22685] bridge_slave_0: left promiscuous mode [ 1623.940965][ T5907] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1623.948492][T22685] bridge0: port 1(bridge_slave_0) entered disabled state [ 1623.948568][ T5907] cdc_wdm 3-1:1.0: Unknown control protocol [ 1624.273315][T22685] dvmrp1 (unregistering): left allmulticast mode [ 1624.394317][ C0] cdc_wdm 3-1:1.0: Unexpected error -71 [ 1624.402325][ T5909] usb 3-1: USB disconnect, device number 5 [ 1624.408284][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1624.460806][T28091] netlink: zone id is out of range [ 1624.656388][T20088] Bluetooth: hci0: command tx timeout [ 1624.721248][T22685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1624.737905][T22685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1624.751441][T22685] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1624.764366][T22685] bond0 (unregistering): Released all slaves [ 1624.964488][T22685] bond1 (unregistering): Released all slaves [ 1624.989392][T22685] bond2 (unregistering): Released all slaves [ 1625.009621][T22685] bond3 (unregistering): Released all slaves [ 1625.066671][T28100] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6147'. [ 1625.175407][ T5907] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1625.308147][T22685] tipc: Left network mode [ 1625.410709][T28109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6148'. [ 1625.419764][T28109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6148'. [ 1625.449883][ T5907] usb 2-1: config 0 has an invalid interface number: 197 but max is 4 [ 1625.469992][ T5907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1625.495403][ T5907] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 1625.515574][ T5907] usb 2-1: config 0 has no interface number 0 [ 1625.521925][ T5907] usb 2-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 1625.544729][ T5907] usb 2-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1625.692795][ T5907] usb 2-1: config 0 interface 197 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1625.828811][T28113] netlink: 'syz.5.6149': attribute type 1 has an invalid length. [ 1626.014820][ T5907] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 1626.024476][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.034487][T28116] debugfs: '!' already exists in 'ieee80211' [ 1626.069634][T28064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1626.092878][T28064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.100738][ T5907] usb 2-1: Product: syz [ 1626.106748][T28064] bridge_slave_0: entered allmulticast mode [ 1626.113740][ T5907] usb 2-1: Manufacturer: syz [ 1626.118812][T28064] bridge_slave_0: entered promiscuous mode [ 1626.126767][ T5907] usb 2-1: SerialNumber: syz [ 1626.187264][ T5907] usb 2-1: config 0 descriptor?? [ 1626.451156][T28102] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1626.706099][T28100] netlink: 124 bytes leftover after parsing attributes in process `syz.1.6147'. [ 1626.735252][T28064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1626.743790][T28064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.759386][T28064] bridge_slave_1: entered allmulticast mode [ 1626.772338][T20088] Bluetooth: hci0: command tx timeout [ 1626.801192][T28064] bridge_slave_1: entered promiscuous mode [ 1627.056499][T22685] hsr_slave_0: left promiscuous mode [ 1627.064111][T22685] hsr_slave_1: left promiscuous mode [ 1627.075646][T22685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1627.099278][T22685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1627.151488][T22685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1627.159919][T22685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1627.199020][T22685] veth1_macvtap: left promiscuous mode [ 1627.209896][T22685] veth1_vlan: left promiscuous mode [ 1627.217867][T22685] veth0_vlan: left promiscuous mode [ 1627.451568][T28132] binder_alloc: 28131: pid 28131 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1627.582826][T22685] team0 (unregistering): Port device vlan4 removed [ 1627.855497][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1628.017960][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1628.033043][T14201] usb 2-1: USB disconnect, device number 117 [ 1628.051483][ T9] usb 3-1: config 1 has no interface number 1 [ 1628.067959][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1628.101134][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1628.123628][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.134536][ T9] usb 3-1: Product: syz [ 1628.139090][ T9] usb 3-1: Manufacturer: syz [ 1628.143766][ T9] usb 3-1: SerialNumber: syz [ 1628.370118][ T9] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1628.378901][ T9] usb 3-1: 2:1 : sample bitwidth 64 in over sample bytes 1 [ 1628.386559][ T9] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1628.448125][ T9] usb 3-1: USB disconnect, device number 6 [ 1628.517388][T16721] udevd[16721]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1628.790817][T22685] team0 (unregistering): Port device team_slave_1 removed [ 1628.827877][T20088] Bluetooth: hci0: command tx timeout [ 1628.834553][T22685] team0 (unregistering): Port device team_slave_0 removed [ 1629.259901][T28142] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6153'. [ 1629.269824][T28143] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6153'. [ 1629.367609][T14201] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1629.403048][T28064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1629.457847][T28064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1629.538239][T28064] team0: Port device team_slave_0 added [ 1629.550143][T28064] team0: Port device team_slave_1 added [ 1629.557443][T14201] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1629.574725][T14201] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 1629.606200][T14201] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1629.630931][T14201] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1629.662817][T28064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1629.670544][T14201] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24941, setting to 1024 [ 1629.693184][T14201] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1629.697809][T28064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1629.713028][T14201] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1629.737182][T28064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1629.770655][T28064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1629.776993][T14201] usb 3-1: Product: syz [ 1629.783451][T14201] usb 3-1: Manufacturer: syz [ 1629.783968][T28064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1629.815455][T28064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1629.843619][T22685] IPVS: stop unused estimator thread 0... [ 1629.856437][T14201] cdc_wdm 3-1:1.0: skipping garbage [ 1629.862998][T14201] cdc_wdm 3-1:1.0: skipping garbage [ 1629.885259][T14201] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1629.898091][T14201] cdc_wdm 3-1:1.0: Unknown control protocol [ 1629.990854][T28064] hsr_slave_0: entered promiscuous mode [ 1629.999693][T28064] hsr_slave_1: entered promiscuous mode [ 1630.019557][T28064] debugfs: 'hsr0' already exists in 'hsr' [ 1630.026111][T28064] Cannot create hsr debugfs directory [ 1630.304725][ C0] cdc_wdm 3-1:1.0: Unexpected error -71 [ 1630.310390][ C0] wdm_int_callback: 172 callbacks suppressed [ 1630.310410][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1630.322983][ C0] wdm_int_callback: 172 callbacks suppressed [ 1630.323006][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1630.336925][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1630.343530][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1630.350073][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1630.356681][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1630.363458][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1630.370064][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1630.376682][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1630.383282][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1630.389657][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1630.396697][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1630.403383][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1630.409996][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1630.416570][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1630.423167][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1630.429874][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1630.436452][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1630.443056][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1630.449636][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1630.457460][ T5907] usb 3-1: USB disconnect, device number 7 [ 1630.463332][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1630.725788][T28197] FAULT_INJECTION: forcing a failure. [ 1630.725788][T28197] name failslab, interval 1, probability 0, space 0, times 0 [ 1630.738954][T28197] CPU: 1 UID: 0 PID: 28197 Comm: syz.1.6166 Not tainted syzkaller #0 PREEMPT(full) [ 1630.738970][T28197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1630.738977][T28197] Call Trace: [ 1630.738982][T28197] [ 1630.738987][T28197] dump_stack_lvl+0x189/0x250 [ 1630.739010][T28197] ? __pfx____ratelimit+0x10/0x10 [ 1630.739024][T28197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1630.739035][T28197] ? __pfx__printk+0x10/0x10 [ 1630.739045][T28197] ? kasan_save_track+0x4f/0x80 [ 1630.739060][T28197] ? io_req_rw_complete+0x388/0x570 [ 1630.739073][T28197] ? tctx_task_work_run+0x99/0x370 [ 1630.739084][T28197] ? tctx_task_work+0x3f/0x90 [ 1630.739094][T28197] ? task_work_run+0x1d4/0x260 [ 1630.739109][T28197] ? look_up_lock_class+0x74/0x170 [ 1630.739124][T28197] should_fail_ex+0x414/0x560 [ 1630.739139][T28197] should_failslab+0xa8/0x100 [ 1630.739150][T28197] __kmalloc_noprof+0xcb/0x7f0 [ 1630.739164][T28197] ? io_alloc_ocqe+0xd4/0x5c0 [ 1630.739177][T28197] ? io_cqe_cache_refill+0x29b/0x490 [ 1630.739190][T28197] io_alloc_ocqe+0xd4/0x5c0 [ 1630.739204][T28197] ? io_get_cqe_overflow+0x6bb/0x730 [ 1630.739221][T28197] io_cqe_overflow_locked+0x26/0x40 [ 1630.739236][T28197] __io_submit_flush_completions+0x28a/0xfc0 [ 1630.739256][T28197] io_handle_tw_list+0x44e/0x4c0 [ 1630.739270][T28197] tctx_task_work_run+0x99/0x370 [ 1630.739283][T28197] tctx_task_work+0x3f/0x90 [ 1630.739294][T28197] task_work_run+0x1d4/0x260 [ 1630.739310][T28197] ? __pfx_task_work_run+0x10/0x10 [ 1630.739331][T28197] get_signal+0x11ec/0x1340 [ 1630.739342][T28197] ? ksys_write+0x1cb/0x250 [ 1630.739358][T28197] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1630.739372][T28197] ? __pfx_vfs_write+0x10/0x10 [ 1630.739389][T28197] arch_do_signal_or_restart+0xa0/0x790 [ 1630.739405][T28197] ? __fget_files+0x3a0/0x420 [ 1630.739415][T28197] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1630.739439][T28197] ? exit_to_user_mode_loop+0x40/0x130 [ 1630.739458][T28197] exit_to_user_mode_loop+0x72/0x130 [ 1630.739474][T28197] do_syscall_64+0x2bd/0xfa0 [ 1630.739486][T28197] ? lockdep_hardirqs_on+0x9c/0x150 [ 1630.739498][T28197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1630.739508][T28197] ? clear_bhb_loop+0x60/0xb0 [ 1630.739520][T28197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1630.739530][T28197] RIP: 0033:0x7fca9d78eec9 [ 1630.739542][T28197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1630.739551][T28197] RSP: 002b:00007fca9e634038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1630.739563][T28197] RAX: 0000000000000001 RBX: 00007fca9d9e5fa0 RCX: 00007fca9d78eec9 [ 1630.739570][T28197] RDX: 0000000000000000 RSI: 0000000000007a98 RDI: 0000000000000004 [ 1630.739577][T28197] RBP: 00007fca9e634090 R08: 0000000000000000 R09: 0000000000000000 [ 1630.739583][T28197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1630.739589][T28197] R13: 00007fca9d9e6038 R14: 00007fca9d9e5fa0 R15: 00007fca9db0fa28 [ 1630.739606][T28197] [ 1630.806022][ T5909] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1630.917360][T20088] Bluetooth: hci0: command tx timeout [ 1631.383178][T28207] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6167'. [ 1631.413911][T28207] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6167'. [ 1631.438217][ T5909] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1631.452537][ T5909] usb 6-1: config 1 has no interface number 1 [ 1631.475709][ T5909] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1631.506444][ T5909] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1631.539250][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.549342][ T5909] usb 6-1: Product: syz [ 1631.559002][ T5909] usb 6-1: Manufacturer: syz [ 1631.567405][ T5909] usb 6-1: SerialNumber: syz [ 1631.597052][T28064] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1631.612095][T28064] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1631.626714][T28064] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1631.642098][T28064] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1631.649300][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1631.778037][T28064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1631.799838][ T5909] usb 6-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1631.810427][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1631.822488][ T5909] usb 6-1: 2:1 : sample bitwidth 64 in over sample bytes 1 [ 1631.832309][ T9] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 1631.844173][ T5909] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1631.858417][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.902307][T28064] 8021q: adding VLAN 0 to HW filter on device team0 [ 1631.954626][ T9] usb 3-1: config 0 descriptor?? [ 1631.975048][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.982147][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1632.012979][ T5909] usb 6-1: USB disconnect, device number 35 [ 1632.039167][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.046647][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1632.211478][T28208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1632.404454][T28208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1632.494713][T28064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1632.642191][T28064] veth0_vlan: entered promiscuous mode [ 1633.026515][ T9] usb 3-1: string descriptor 0 read error: -71 [ 1633.033241][ T9] uclogic 0003:5543:006E.005A: failed retrieving string descriptor #200: -71 [ 1633.044969][T28064] veth1_vlan: entered promiscuous mode [ 1633.052272][ T9] uclogic 0003:5543:006E.005A: failed retrieving pen parameters: -71 [ 1633.052289][ T9] uclogic 0003:5543:006E.005A: failed probing pen v2 parameters: -71 [ 1633.052321][ T9] uclogic 0003:5543:006E.005A: failed probing parameters: -71 [ 1633.052379][ T9] uclogic 0003:5543:006E.005A: probe with driver uclogic failed with error -71 [ 1633.200494][T28064] veth0_macvtap: entered promiscuous mode [ 1633.209341][T28064] veth1_macvtap: entered promiscuous mode [ 1633.221595][T28064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1633.232885][ T9] usb 3-1: USB disconnect, device number 8 [ 1633.253096][T28064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1633.273793][T21851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.456995][T22685] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.467621][T28237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6170'. [ 1633.487876][T22685] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.100489][T28249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6172'. [ 1634.201701][T28249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6172'. [ 1634.864558][T22685] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.897670][ T10] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1635.085152][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1635.110411][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1635.150349][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1635.185342][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1635.193596][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1635.195915][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 1635.240772][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.313861][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1635.316035][ T10] usb 2-1: config 0 descriptor?? [ 1635.328806][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1635.458004][T28272] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1876317852 (240168685056 ns) > initial count (238957770112 ns). Using initial count to start timer. [ 1635.495541][ T5907] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1635.677034][ T5907] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1635.694186][ T5907] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 1635.730331][ T5907] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1635.749236][ T5907] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1635.774663][ T5907] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24941, setting to 1024 [ 1635.787745][ T10] logitech 0003:046D:C286.005B: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.1-1/input0 [ 1635.803383][ T10] logitech 0003:046D:C286.005B: no inputs found [ 1635.812757][ T5907] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1635.842721][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1635.905510][ T5907] usb 1-1: Product: syz [ 1635.909876][ T5907] usb 1-1: Manufacturer: syz [ 1635.956604][T21283] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1635.958897][ T5907] cdc_wdm 1-1:1.0: skipping garbage [ 1636.058446][ T5907] cdc_wdm 1-1:1.0: skipping garbage [ 1636.371817][T21283] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.384165][T21283] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1636.406814][T21283] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1636.418236][ T5907] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1636.419708][ T5894] usb 2-1: USB disconnect, device number 118 [ 1636.444790][ T5907] cdc_wdm 1-1:1.0: Unknown control protocol [ 1636.453644][T21283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.626186][T28285] fido_id[28285]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1636.653633][ T5907] usb 1-1: USB disconnect, device number 93 [ 1636.654260][T21283] usb 5-1: config 0 descriptor?? [ 1636.752724][T21283] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1636.776310][T21283] dvb-usb: bulk message failed: -22 (3/0) [ 1636.809484][T21283] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1636.852252][T21283] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1636.865266][T21283] usb 5-1: media controller created [ 1636.873035][T21283] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1636.942315][T21283] dvb-usb: bulk message failed: -22 (6/0) [ 1636.957223][T21283] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1636.984754][T21283] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input89 [ 1637.063301][T21283] dvb-usb: schedule remote query interval to 150 msecs. [ 1637.084250][T21283] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1637.239191][T21283] dvb-usb: bulk message failed: -22 (1/0) [ 1637.259655][T21283] dvb-usb: error while querying for an remote control event. [ 1637.274001][T28300] dvmrp1: entered allmulticast mode [ 1637.334352][T28280] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6128'. [ 1637.344064][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1637.356813][T28280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1637.581378][T28280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1637.589737][T21283] dvb-usb: bulk message failed: -22 (1/0) [ 1637.605332][T21283] dvb-usb: error while querying for an remote control event. [ 1637.630151][ T10] usb 5-1: USB disconnect, device number 78 [ 1637.638502][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1637.657158][ T9] usb 3-1: config 1 has no interface number 1 [ 1637.677686][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1637.701407][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1637.718776][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.816263][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1637.846134][ T9] usb 3-1: Product: syz [ 1637.863430][ T9] usb 3-1: Manufacturer: syz [ 1637.894271][ T9] usb 3-1: SerialNumber: syz [ 1638.159075][ T9] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1638.168987][ T9] usb 3-1: 2:1 : sample bitwidth 64 in over sample bytes 1 [ 1638.192398][ T9] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1638.234832][ T9] usb 3-1: USB disconnect, device number 9 [ 1638.318616][T16721] udevd[16721]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1638.451187][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1638.451201][ T30] audit: type=1326 audit(1760054775.779:4463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28321 comm="syz.4.6185" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f688698eec9 code=0x0 [ 1638.501490][T28323] vivid-004: disconnect [ 1639.250570][T28321] vivid-004: reconnect [ 1639.505782][ T5823] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1639.554456][T28349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6190'. [ 1639.568147][T28349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6190'. [ 1639.594218][T28349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6190'. [ 1639.609698][T28351] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6194'. [ 1639.619350][T28349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6190'. [ 1639.709361][T21283] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1639.787200][ T5823] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1639.803896][ T5823] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1639.840903][ T5823] usb 6-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 1639.861963][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.873738][T21283] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1639.882694][T21283] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 1639.896095][ T5823] usb 6-1: config 0 descriptor?? [ 1639.906439][T21283] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1639.924546][T21283] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1639.952635][T21283] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24941, setting to 1024 [ 1639.974508][T21283] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1639.983811][T21283] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1639.992285][T21283] usb 1-1: Product: syz [ 1639.997018][T21283] usb 1-1: Manufacturer: syz [ 1640.007656][T21283] cdc_wdm 1-1:1.0: skipping garbage [ 1640.015572][T21283] cdc_wdm 1-1:1.0: skipping garbage [ 1640.025990][T21283] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1640.032059][T21283] cdc_wdm 1-1:1.0: Unknown control protocol [ 1640.065205][ T5894] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1640.225261][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 1640.245670][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1640.345137][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1640.385382][ T5894] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1640.407946][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.453342][ T5894] usb 5-1: config 0 descriptor?? [ 1640.461490][ C0] cdc_wdm 1-1:1.0: Unexpected error -71 [ 1640.467158][ C0] wdm_int_callback: 4 callbacks suppressed [ 1640.467174][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1640.479548][ C0] wdm_int_callback: 4 callbacks suppressed [ 1640.479569][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1640.492492][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1640.499093][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1640.506735][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1640.513331][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1640.519574][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1640.526165][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1640.532847][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1640.539448][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1640.546198][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1640.553072][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1640.559599][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1640.560875][ T5823] usb 1-1: USB disconnect, device number 94 [ 1640.566287][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1640.566307][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1640.689270][ T5894] usbhid 5-1:0.0: can't add hid device: -71 [ 1640.696346][ T5894] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1640.730648][ T5894] usb 5-1: USB disconnect, device number 79 [ 1641.932102][ T9] usb 6-1: USB disconnect, device number 36 [ 1642.791449][T28403] FAULT_INJECTION: forcing a failure. [ 1642.791449][T28403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1642.849056][T28403] CPU: 1 UID: 0 PID: 28403 Comm: syz.4.6203 Not tainted syzkaller #0 PREEMPT(full) [ 1642.849073][T28403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1642.849081][T28403] Call Trace: [ 1642.849086][T28403] [ 1642.849092][T28403] dump_stack_lvl+0x189/0x250 [ 1642.849111][T28403] ? __pfx____ratelimit+0x10/0x10 [ 1642.849124][T28403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1642.849135][T28403] ? __pfx__printk+0x10/0x10 [ 1642.849152][T28403] should_fail_ex+0x414/0x560 [ 1642.849167][T28403] _copy_to_user+0x31/0xb0 [ 1642.849180][T28403] simple_read_from_buffer+0xe1/0x170 [ 1642.849198][T28403] proc_fail_nth_read+0x1b3/0x220 [ 1642.849212][T28403] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1642.849227][T28403] ? rw_verify_area+0x2a6/0x4d0 [ 1642.849240][T28403] ? __lock_acquire+0xab9/0xd20 [ 1642.849249][T28403] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1642.849262][T28403] vfs_read+0x200/0xa30 [ 1642.849275][T28403] ? fdget_pos+0x247/0x320 [ 1642.849287][T28403] ? __pfx___mutex_lock+0x10/0x10 [ 1642.849302][T28403] ? __pfx_vfs_read+0x10/0x10 [ 1642.849317][T28403] ? __fget_files+0x2a/0x420 [ 1642.849328][T28403] ? __fget_files+0x3a0/0x420 [ 1642.849337][T28403] ? __fget_files+0x2a/0x420 [ 1642.849351][T28403] ksys_read+0x145/0x250 [ 1642.849366][T28403] ? __pfx_ksys_read+0x10/0x10 [ 1642.849382][T28403] ? do_syscall_64+0xbe/0xfa0 [ 1642.849396][T28403] do_syscall_64+0xfa/0xfa0 [ 1642.849408][T28403] ? lockdep_hardirqs_on+0x9c/0x150 [ 1642.849420][T28403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.849430][T28403] ? clear_bhb_loop+0x60/0xb0 [ 1642.849443][T28403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.849453][T28403] RIP: 0033:0x7f688698d8dc [ 1642.849463][T28403] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1642.849473][T28403] RSP: 002b:00007f688776c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1642.849485][T28403] RAX: ffffffffffffffda RBX: 00007f6886be5fa0 RCX: 00007f688698d8dc [ 1642.849493][T28403] RDX: 000000000000000f RSI: 00007f688776c0a0 RDI: 0000000000000007 [ 1642.849499][T28403] RBP: 00007f688776c090 R08: 0000000000000000 R09: 0000000000000000 [ 1642.849506][T28403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1642.849512][T28403] R13: 00007f6886be6038 R14: 00007f6886be5fa0 R15: 00007f6886d0fa28 [ 1642.849529][T28403] [ 1643.119541][T28408] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6204'. [ 1643.537090][ T5823] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1643.716114][ T5823] usb 3-1: config 0 has an invalid interface number: 197 but max is 4 [ 1643.735409][T21283] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1643.746834][ T5823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.775069][ T5823] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 1643.794244][ T5823] usb 3-1: config 0 has no interface number 0 [ 1643.817280][ T5823] usb 3-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 1643.857894][ T5823] usb 3-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1643.921812][T21283] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1643.966346][T21283] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 1643.988186][ T5823] usb 3-1: config 0 interface 197 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1644.005184][T21283] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1644.057697][T21283] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1644.087999][ T5823] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 1644.132545][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.157630][T21283] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24941, setting to 1024 [ 1644.176637][T28431] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6210'. [ 1644.200481][ T5823] usb 3-1: Product: syz [ 1644.204645][ T5823] usb 3-1: Manufacturer: syz [ 1644.227799][T28431] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6210'. [ 1644.235182][ T5823] usb 3-1: SerialNumber: syz [ 1644.301317][ T5823] usb 3-1: config 0 descriptor?? [ 1644.333274][T21283] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1644.353846][T28408] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1644.361480][T21283] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1644.522858][T21283] usb 2-1: Product: syz [ 1644.543490][T21283] usb 2-1: Manufacturer: syz [ 1644.580469][T21283] cdc_wdm 2-1:1.0: skipping garbage [ 1644.586383][T21283] cdc_wdm 2-1:1.0: skipping garbage [ 1644.600290][T21283] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1644.608455][T21283] cdc_wdm 2-1:1.0: Unknown control protocol [ 1645.056907][ C1] cdc_wdm 2-1:1.0: Unexpected error -71 [ 1645.062569][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1645.069161][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1645.076114][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1645.082784][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1645.089342][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1645.095948][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1645.135926][ T5823] usb 2-1: USB disconnect, device number 119 [ 1645.142079][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1645.324162][T28440] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20000 [ 1645.985778][ T5909] usb 3-1: USB disconnect, device number 10 [ 1646.025652][ T9] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1646.155198][T21283] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1646.175499][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1646.185110][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1646.228376][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1646.271353][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1646.309650][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.319213][ T9] usb 6-1: Product: syz [ 1646.323393][ T9] usb 6-1: Manufacturer: syz [ 1646.329570][ T9] usb 6-1: SerialNumber: syz [ 1646.383031][T28475] team0: Device vlan3 failed to change mtu [ 1646.575812][ T9] usb 6-1: 0:2 : does not exist [ 1646.633786][ T9] usb 6-1: USB disconnect, device number 37 [ 1646.881726][T16721] udevd[16721]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1647.275116][ T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1647.504478][T28498] tipc: Enabling of bearer rejected, media not registered [ 1647.514496][T28498] syzkaller0: entered promiscuous mode [ 1647.520080][T28498] syzkaller0: entered allmulticast mode [ 1647.595381][T21283] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1647.640921][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1647.661523][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1647.673349][ T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1647.694017][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.713294][ T9] usb 3-1: config 0 descriptor?? [ 1647.857387][T21283] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1647.948022][T21283] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 1647.967843][T21283] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1648.109519][T21283] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1648.156579][T21283] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24941, setting to 1024 [ 1648.174475][ T10] usb 3-1: USB disconnect, device number 11 [ 1648.241006][T21283] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1648.275782][T21283] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1648.409107][T21283] usb 6-1: Product: syz [ 1648.413316][T21283] usb 6-1: Manufacturer: syz [ 1648.453467][T21283] cdc_wdm 6-1:1.0: skipping garbage [ 1648.461333][T21283] cdc_wdm 6-1:1.0: skipping garbage [ 1648.497650][T21283] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1648.543529][T21283] cdc_wdm 6-1:1.0: Unknown control protocol [ 1648.556700][T28510] FAULT_INJECTION: forcing a failure. [ 1648.556700][T28510] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1648.708137][T28510] CPU: 1 UID: 0 PID: 28510 Comm: syz.1.6232 Not tainted syzkaller #0 PREEMPT(full) [ 1648.708165][T28510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1648.708178][T28510] Call Trace: [ 1648.708185][T28510] [ 1648.708193][T28510] dump_stack_lvl+0x189/0x250 [ 1648.708219][T28510] ? __pfx____ratelimit+0x10/0x10 [ 1648.708242][T28510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1648.708261][T28510] ? __pfx__printk+0x10/0x10 [ 1648.708283][T28510] ? fs_reclaim_acquire+0x7d/0x100 [ 1648.708319][T28510] should_fail_ex+0x414/0x560 [ 1648.708348][T28510] prepare_alloc_pages+0x213/0x610 [ 1648.708385][T28510] __alloc_frozen_pages_noprof+0x123/0x370 [ 1648.708400][T28510] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1648.708414][T28510] ? policy_nodemask+0x27c/0x720 [ 1648.708430][T28510] ? __pfx_process_measurement+0x10/0x10 [ 1648.708451][T28510] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 1648.708478][T28510] alloc_pages_mpol+0x232/0x4a0 [ 1648.708515][T28510] alloc_pages_noprof+0xa9/0x190 [ 1648.708536][T28510] __pud_alloc+0x3f/0x450 [ 1648.708556][T28510] __handle_mm_fault+0x3372/0x5400 [ 1648.708573][T28510] ? mt_find+0x46f/0x5e0 [ 1648.708590][T28510] ? __pfx___handle_mm_fault+0x10/0x10 [ 1648.708628][T28510] ? find_vma+0xe7/0x160 [ 1648.708653][T28510] ? __pfx_find_vma+0x10/0x10 [ 1648.708681][T28510] handle_mm_fault+0x40a/0x8e0 [ 1648.708704][T28510] do_user_addr_fault+0x764/0x1380 [ 1648.708723][T28510] exc_page_fault+0x82/0x100 [ 1648.708737][T28510] asm_exc_page_fault+0x26/0x30 [ 1648.708747][T28510] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1648.708777][T28510] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 35 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1648.708794][T28510] RSP: 0018:ffffc90002ed7b78 EFLAGS: 00050202 [ 1648.708813][T28510] RAX: 00007ffffffff001 RBX: 0000000000000018 RCX: 0000000000000018 [ 1648.708828][T28510] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: ffffc90002ed7c00 [ 1648.708839][T28510] RBP: ffffc90002ed7de0 R08: ffffc90002ed7c17 R09: 1ffff920005daf82 [ 1648.708847][T28510] R10: dffffc0000000000 R11: fffff520005daf83 R12: 0000000000000018 [ 1648.708854][T28510] R13: dffffc0000000000 R14: ffffc90002ed7c00 R15: 00002000000000c0 [ 1648.708872][T28510] _copy_from_user+0x7a/0xb0 [ 1648.708883][T28510] do_ip_vs_set_ctl+0x2d3/0xa60 [ 1648.708906][T28510] ? rcu_is_watching+0x15/0xb0 [ 1648.708928][T28510] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 1648.708953][T28510] ? trace_contention_end+0x39/0x120 [ 1648.708990][T28510] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1648.709008][T28510] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1648.709027][T28510] ? __pfx_aa_sk_perm+0x10/0x10 [ 1648.709043][T28510] nf_setsockopt+0x26f/0x290 [ 1648.709070][T28510] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1648.709102][T28510] do_sock_setsockopt+0x179/0x1b0 [ 1648.709128][T28510] __x64_sys_setsockopt+0x13f/0x1b0 [ 1648.709156][T28510] do_syscall_64+0xfa/0xfa0 [ 1648.709179][T28510] ? lockdep_hardirqs_on+0x9c/0x150 [ 1648.709202][T28510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.709220][T28510] ? clear_bhb_loop+0x60/0xb0 [ 1648.709244][T28510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.709262][T28510] RIP: 0033:0x7fca9d78eec9 [ 1648.709278][T28510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1648.709295][T28510] RSP: 002b:00007fca9e634038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1648.709316][T28510] RAX: ffffffffffffffda RBX: 00007fca9d9e5fa0 RCX: 00007fca9d78eec9 [ 1648.709332][T28510] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 1648.709344][T28510] RBP: 00007fca9e634090 R08: 0000000000000018 R09: 0000000000000000 [ 1648.709358][T28510] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1648.709371][T28510] R13: 00007fca9d9e6038 R14: 00007fca9d9e5fa0 R15: 00007fca9db0fa28 [ 1648.709405][T28510] [ 1649.096345][ C0] cdc_wdm 6-1:1.0: Unexpected error -71 [ 1649.102085][ C0] wdm_int_callback: 178 callbacks suppressed [ 1649.102108][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1649.114654][ C0] wdm_int_callback: 178 callbacks suppressed [ 1649.114675][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1649.135672][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1649.142301][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1649.148786][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1649.155399][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1649.161984][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1649.168763][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1649.175373][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1649.181981][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1649.189290][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1649.195906][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1649.202451][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1649.209051][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1649.215558][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1649.222145][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1649.228372][ T10] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1649.236218][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1649.236233][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1649.242976][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1649.242990][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1649.335653][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1649.344527][ T9] usb 6-1: USB disconnect, device number 38 [ 1649.449455][ T10] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1649.458091][ T10] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1649.516068][T28517] PKCS7: Unknown OID: [5] (bad) [ 1649.521629][T28517] PKCS7: Only support pkcs7_signedData type [ 1649.533134][ T10] usb 1-1: config 220 has no interface number 2 [ 1649.590077][ T10] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1649.608549][ T10] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1649.616477][ T10] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1649.623343][ T10] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1649.636330][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1649.648372][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.660793][ T10] usb 1-1: Product: syz [ 1649.665572][ T10] usb 1-1: Manufacturer: syz [ 1649.675539][ T10] usb 1-1: SerialNumber: syz [ 1649.889930][T28506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1649.900140][T28506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1649.910442][T28506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1649.920591][T28506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1649.938761][ T10] usb 1-1: selecting invalid altsetting 0 [ 1649.954640][ T10] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1649.962941][ T10] uvcvideo 1-1:220.0: No valid video chain found. [ 1649.974486][ T10] usb 1-1: selecting invalid altsetting 0 [ 1649.982961][ T10] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1649.993634][ T10] usb 1-1: USB disconnect, device number 96 [ 1650.468795][T28527] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6236'. [ 1650.755470][T21283] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1650.800990][T28531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6238'. [ 1650.811645][T28531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6238'. [ 1650.929636][T21283] usb 3-1: config 0 has an invalid interface number: 197 but max is 4 [ 1650.949692][T21283] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1650.973656][T21283] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 1651.002704][T21283] usb 3-1: config 0 has no interface number 0 [ 1651.027514][T21283] usb 3-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 1651.060823][T21283] usb 3-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1651.095464][T21283] usb 3-1: config 0 interface 197 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1651.149430][T21283] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 1651.164619][T21283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.175614][ T10] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1651.202108][T21283] usb 3-1: Product: syz [ 1651.211263][T21283] usb 3-1: Manufacturer: syz [ 1651.220432][T21283] usb 3-1: SerialNumber: syz [ 1651.233236][T21283] usb 3-1: config 0 descriptor?? [ 1651.247201][T28527] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1651.325773][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1651.332854][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1651.344391][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1651.355462][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1651.383026][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1651.392459][ T10] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1651.401100][ T10] usb 1-1: Product: syz [ 1651.405681][ T10] usb 1-1: Manufacturer: syz [ 1651.417133][ T10] usb 1-1: SerialNumber: syz [ 1651.443868][ T10] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input90 [ 1652.199825][ T5823] usb 1-1: USB disconnect, device number 97 [ 1652.210068][ T5823] appletouch 1-1:1.0: input: appletouch disconnected [ 1652.493811][T28550] vcan1: entered promiscuous mode [ 1652.508159][T28550] team0: Device vcan1 is of different type [ 1652.725344][ T10] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1652.994470][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1653.054107][ T10] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 1653.080454][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1653.103572][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1653.148769][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24941, setting to 1024 [ 1653.188454][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1653.226365][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1653.239434][T28559] FAULT_INJECTION: forcing a failure. [ 1653.239434][T28559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1653.266383][T28559] CPU: 1 UID: 0 PID: 28559 Comm: syz.5.6247 Not tainted syzkaller #0 PREEMPT(full) [ 1653.266409][T28559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1653.266422][T28559] Call Trace: [ 1653.266430][T28559] [ 1653.266440][T28559] dump_stack_lvl+0x189/0x250 [ 1653.266465][T28559] ? __pfx____ratelimit+0x10/0x10 [ 1653.266489][T28559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1653.266510][T28559] ? __pfx__printk+0x10/0x10 [ 1653.266544][T28559] should_fail_ex+0x414/0x560 [ 1653.266573][T28559] _copy_to_user+0x31/0xb0 [ 1653.266595][T28559] simple_read_from_buffer+0xe1/0x170 [ 1653.266629][T28559] proc_fail_nth_read+0x1b3/0x220 [ 1653.266657][T28559] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1653.266684][T28559] ? rw_verify_area+0x2a6/0x4d0 [ 1653.266709][T28559] ? __lock_acquire+0xab9/0xd20 [ 1653.266736][T28559] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1653.266762][T28559] vfs_read+0x200/0xa30 [ 1653.266786][T28559] ? fdget_pos+0x247/0x320 [ 1653.266812][T28559] ? __pfx___mutex_lock+0x10/0x10 [ 1653.266838][T28559] ? __pfx_vfs_read+0x10/0x10 [ 1653.266865][T28559] ? __fget_files+0x2a/0x420 [ 1653.266888][T28559] ? __fget_files+0x3a0/0x420 [ 1653.266904][T28559] ? __fget_files+0x2a/0x420 [ 1653.266931][T28559] ksys_read+0x145/0x250 [ 1653.266960][T28559] ? __pfx_ksys_read+0x10/0x10 [ 1653.266988][T28559] ? do_syscall_64+0xbe/0xfa0 [ 1653.267016][T28559] do_syscall_64+0xfa/0xfa0 [ 1653.267038][T28559] ? lockdep_hardirqs_on+0x9c/0x150 [ 1653.267062][T28559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1653.267082][T28559] ? clear_bhb_loop+0x60/0xb0 [ 1653.267106][T28559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1653.267125][T28559] RIP: 0033:0x7fc6d978d8dc [ 1653.267143][T28559] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1653.267160][T28559] RSP: 002b:00007fc6da64e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1653.267181][T28559] RAX: ffffffffffffffda RBX: 00007fc6d99e5fa0 RCX: 00007fc6d978d8dc [ 1653.267196][T28559] RDX: 000000000000000f RSI: 00007fc6da64e0a0 RDI: 0000000000000007 [ 1653.267209][T28559] RBP: 00007fc6da64e090 R08: 0000000000000000 R09: 0000000000000000 [ 1653.267221][T28559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1653.267234][T28559] R13: 00007fc6d99e6038 R14: 00007fc6d99e5fa0 R15: 00007fc6d9b0fa28 [ 1653.267267][T28559] [ 1653.282199][ T10] usb 1-1: Product: syz [ 1653.289722][T21283] usb 3-1: USB disconnect, device number 12 [ 1653.547512][ T10] usb 1-1: Manufacturer: syz [ 1653.580545][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 1653.595378][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 1653.618489][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1653.644755][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 1654.031565][ C0] cdc_wdm 1-1:1.0: Unexpected error -71 [ 1654.032873][T14201] usb 1-1: USB disconnect, device number 98 [ 1654.038490][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1654.333557][T28579] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1654.464329][T28581] overlayfs: missing 'lowerdir' [ 1654.480709][T28581] netlink: 'syz.1.6254': attribute type 30 has an invalid length. [ 1654.500708][T28581] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6254'. [ 1654.540921][T28583] netlink: 1296 bytes leftover after parsing attributes in process `syz.1.6254'. [ 1655.624151][T28600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6258'. [ 1655.633149][T28600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6258'. [ 1655.657573][T28600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6258'. [ 1655.666658][T28600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6258'. [ 1656.467524][T28618] FAULT_INJECTION: forcing a failure. [ 1656.467524][T28618] name failslab, interval 1, probability 0, space 0, times 0 [ 1656.496248][T28618] CPU: 0 UID: 0 PID: 28618 Comm: syz.5.6264 Not tainted syzkaller #0 PREEMPT(full) [ 1656.496274][T28618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1656.496300][T28618] Call Trace: [ 1656.496309][T28618] [ 1656.496317][T28618] dump_stack_lvl+0x189/0x250 [ 1656.496342][T28618] ? __pfx____ratelimit+0x10/0x10 [ 1656.496366][T28618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1656.496387][T28618] ? __pfx__printk+0x10/0x10 [ 1656.496415][T28618] ? __pfx___might_resched+0x10/0x10 [ 1656.496436][T28618] ? fs_reclaim_acquire+0x7d/0x100 [ 1656.496479][T28618] should_fail_ex+0x414/0x560 [ 1656.496508][T28618] should_failslab+0xa8/0x100 [ 1656.496529][T28618] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1656.496557][T28618] ? alloc_io_context+0x27/0x290 [ 1656.496591][T28618] alloc_io_context+0x27/0x290 [ 1656.496620][T28618] __copy_io+0xac/0x1c0 [ 1656.496648][T28618] copy_process+0x17af/0x3c00 [ 1656.496688][T28618] ? copy_process+0x97f/0x3c00 [ 1656.496719][T28618] ? __pfx_copy_process+0x10/0x10 [ 1656.496756][T28618] vhost_task_create+0x1ce/0x320 [ 1656.496782][T28618] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1656.496810][T28618] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1656.496837][T28618] ? __pfx_vhost_task_create+0x10/0x10 [ 1656.496869][T28618] ? __pfx_vhost_task_fn+0x10/0x10 [ 1656.496916][T28618] kvm_mmu_post_init_vm+0x14c/0x300 [ 1656.496949][T28618] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 1656.496983][T28618] ? __mutex_trylock_common+0x153/0x260 [ 1656.497010][T28618] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1656.497035][T28618] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1656.497061][T28618] ? rcu_is_watching+0x15/0xb0 [ 1656.497084][T28618] ? trace_contention_end+0x39/0x120 [ 1656.497108][T28618] ? look_up_lock_class+0x74/0x170 [ 1656.497135][T28618] ? register_lock_class+0x51/0x320 [ 1656.497161][T28618] ? __lock_acquire+0xab9/0xd20 [ 1656.497213][T28618] kvm_vcpu_ioctl+0x95c/0xe90 [ 1656.497242][T28618] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1656.497288][T28618] ? __fget_files+0x2a/0x420 [ 1656.497312][T28618] ? __fget_files+0x3a0/0x420 [ 1656.497328][T28618] ? __fget_files+0x2a/0x420 [ 1656.497349][T28618] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1656.497370][T28618] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1656.497392][T28618] __se_sys_ioctl+0xfc/0x170 [ 1656.497419][T28618] do_syscall_64+0xfa/0xfa0 [ 1656.497441][T28618] ? lockdep_hardirqs_on+0x9c/0x150 [ 1656.497471][T28618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.497491][T28618] ? clear_bhb_loop+0x60/0xb0 [ 1656.497516][T28618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.497535][T28618] RIP: 0033:0x7fc6d978eec9 [ 1656.497554][T28618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1656.497572][T28618] RSP: 002b:00007fc6da64e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1656.497593][T28618] RAX: ffffffffffffffda RBX: 00007fc6d99e5fa0 RCX: 00007fc6d978eec9 [ 1656.497609][T28618] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1656.497622][T28618] RBP: 00007fc6da64e090 R08: 0000000000000000 R09: 0000000000000000 [ 1656.497635][T28618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1656.497647][T28618] R13: 00007fc6d99e6038 R14: 00007fc6d99e5fa0 R15: 00007fc6d9b0fa28 [ 1656.497680][T28618] [ 1657.607281][T28634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6267'. [ 1657.621329][T28634] input: syz0 as /devices/virtual/input/input91 [ 1657.895624][ T9] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1658.047054][ T9] usb 6-1: device descriptor read/64, error -71 [ 1658.127692][T14201] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 1658.295407][ T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1658.345644][ T5894] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1658.357829][T14201] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1658.376783][T14201] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1658.458583][T14201] usb 2-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc [ 1658.485095][ T9] usb 6-1: device descriptor read/64, error -71 [ 1658.494613][T14201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.525190][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 1658.532425][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1658.545928][T14201] usb 2-1: config 0 descriptor?? [ 1658.568548][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1658.595968][ T9] usb usb6-port1: attempt power cycle [ 1658.613530][ T5894] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1658.650485][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.729401][ T5894] usb 3-1: config 0 descriptor?? [ 1658.935384][ T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1658.965633][ T9] usb 6-1: device descriptor read/8, error -71 [ 1659.205094][ T9] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1659.234458][ T9] usb 6-1: device descriptor read/8, error -71 [ 1659.341059][T14201] usbhid 2-1:0.0: can't add hid device: -71 [ 1659.363037][ T9] usb usb6-port1: unable to enumerate USB device [ 1659.422797][T14201] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1659.502299][T14201] usb 2-1: USB disconnect, device number 120 [ 1659.508331][T28663] FAULT_INJECTION: forcing a failure. [ 1659.508331][T28663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1659.508364][T28663] CPU: 0 UID: 0 PID: 28663 Comm: syz.4.6278 Not tainted syzkaller #0 PREEMPT(full) [ 1659.508386][T28663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1659.508399][T28663] Call Trace: [ 1659.508407][T28663] [ 1659.508416][T28663] dump_stack_lvl+0x189/0x250 [ 1659.508441][T28663] ? __pfx____ratelimit+0x10/0x10 [ 1659.508465][T28663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1659.508486][T28663] ? __pfx__printk+0x10/0x10 [ 1659.508506][T28663] ? __might_fault+0xb0/0x130 [ 1659.508543][T28663] should_fail_ex+0x414/0x560 [ 1659.508572][T28663] _copy_from_user+0x2d/0xb0 [ 1659.508593][T28663] ___sys_recvmsg+0x12e/0x510 [ 1659.508625][T28663] ? __pfx____sys_recvmsg+0x10/0x10 [ 1659.508675][T28663] ? __might_fault+0xb0/0x130 [ 1659.508703][T28663] do_recvmmsg+0x307/0x770 [ 1659.508733][T28663] ? __pfx_do_recvmmsg+0x10/0x10 [ 1659.508767][T28663] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1659.508810][T28663] __x64_sys_recvmmsg+0x190/0x240 [ 1659.508835][T28663] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1659.508862][T28663] ? do_syscall_64+0xbe/0xfa0 [ 1659.508889][T28663] do_syscall_64+0xfa/0xfa0 [ 1659.508911][T28663] ? lockdep_hardirqs_on+0x9c/0x150 [ 1659.508933][T28663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.508952][T28663] ? clear_bhb_loop+0x60/0xb0 [ 1659.508975][T28663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.508994][T28663] RIP: 0033:0x7f688698eec9 [ 1659.509011][T28663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1659.509027][T28663] RSP: 002b:00007f688776c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1659.509048][T28663] RAX: ffffffffffffffda RBX: 00007f6886be5fa0 RCX: 00007f688698eec9 [ 1659.509063][T28663] RDX: 0000000000000032 RSI: 0000200000000480 RDI: 0000000000000004 [ 1659.509076][T28663] RBP: 00007f688776c090 R08: 0000000000000000 R09: 0000000000000000 [ 1659.509088][T28663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1659.509100][T28663] R13: 00007f6886be6038 R14: 00007f6886be5fa0 R15: 00007f6886d0fa28 [ 1659.509130][T28663] [ 1659.755304][ T5894] letsketch 0003:6161:4D15.005C: Device info: à° [ 1659.899521][T28651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.980945][T28651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1660.168214][T28673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1660.179636][T28673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1660.445636][ T5909] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1661.356276][T28682] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1661.420264][T28682] bond1 (unregistering): Released all slaves [ 1661.428469][ T5894] usb 3-1: Max retries (5) exceeded reading string descriptor 201 [ 1661.436492][ T5894] letsketch 0003:6161:4D15.005C: probe with driver letsketch failed with error -71 [ 1661.464299][ T5894] usb 3-1: USB disconnect, device number 13 [ 1661.745434][T14201] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1661.916403][T14201] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1661.929162][T14201] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1661.960657][T14201] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1662.010656][T14201] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1662.065950][T14201] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1662.067918][ T9] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1662.081258][T14201] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1662.113628][T14201] usb 5-1: Product: syz [ 1662.124338][T14201] usb 5-1: Manufacturer: syz [ 1662.180093][T14201] cdc_wdm 5-1:1.0: skipping garbage [ 1662.200302][T14201] cdc_wdm 5-1:1.0: skipping garbage [ 1662.226734][T14201] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1662.245563][T14201] cdc_wdm 5-1:1.0: Unknown control protocol [ 1662.386634][ T5909] usb 5-1: USB disconnect, device number 80 [ 1662.896390][T28726] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6299'. [ 1663.292778][T28741] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1663.335396][ T9] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1663.485095][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1663.493590][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1663.502557][ T9] usb 6-1: config 0 has no interface number 0 [ 1663.518253][ T9] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1663.528335][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.540903][ T9] usb 6-1: Product: syz [ 1663.545415][ T9] usb 6-1: Manufacturer: syz [ 1663.560092][ T9] usb 6-1: SerialNumber: syz [ 1663.576875][ T9] usb 6-1: config 0 descriptor?? [ 1663.620793][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1663.644779][ T10] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1664.015480][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1664.186980][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1664.205921][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1664.215385][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.230843][ T10] usb 5-1: Product: syz [ 1664.237842][ T10] usb 5-1: Manufacturer: syz [ 1664.245916][ T10] usb 5-1: SerialNumber: syz [ 1664.426114][ T10] usb 5-1: config 0 descriptor?? [ 1664.431702][T28763] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1664.446637][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1664.470366][ T10] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1664.505287][T28763] bond6 (unregistering): Released all slaves [ 1664.725733][ T10] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1664.957523][T28778] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6313'. [ 1664.998553][ T10] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1665.007807][ T10] em28xx 5-1:0.0: board has no eeprom [ 1665.125628][ T10] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1665.135620][ T10] em28xx 5-1:0.0: dvb set to bulk mode. [ 1665.142107][ T5907] em28xx 5-1:0.0: Binding DVB extension [ 1665.276906][ T10] usb 5-1: USB disconnect, device number 81 [ 1665.302868][ T10] em28xx 5-1:0.0: Disconnecting em28xx [ 1665.361074][ T5907] em28xx 5-1:0.0: Registering input extension [ 1665.375775][ T10] em28xx 5-1:0.0: Closing input extension [ 1665.463429][ T10] em28xx 5-1:0.0: Freeing device [ 1665.816350][ T9] gspca_spca1528: reg_r err -110 [ 1665.821468][ T9] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 1666.265510][T20088] Bluetooth: hci3: command 0x0405 tx timeout [ 1666.265580][T28759] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1666.979311][T28759] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1666.986709][T28759] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1666.993485][T28759] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1667.001886][T28759] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1667.008869][T28759] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1667.017814][T28759] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1667.109144][ T9] usb 6-1: USB disconnect, device number 44 [ 1667.221009][T28789] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1667.234346][T28789] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1667.265160][ T5894] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1667.275439][ T5823] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1667.528880][ T5894] usb 5-1: config 0 has an invalid interface number: 197 but max is 4 [ 1667.567785][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1667.852190][ T5894] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 1667.892444][T28805] netlink: 'syz.1.6320': attribute type 10 has an invalid length. [ 1667.907288][ T5894] usb 5-1: config 0 has no interface number 0 [ 1667.915803][T28805] macvlan0: entered promiscuous mode [ 1667.921285][T28805] macvlan0: entered allmulticast mode [ 1667.932006][ T5894] usb 5-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 1667.959287][ T5894] usb 5-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1667.972753][T28805] veth1_vlan: entered allmulticast mode [ 1667.994458][ T5894] usb 5-1: config 0 interface 197 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1668.196075][T28805] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1668.214341][ T5894] usb 5-1: string descriptor 0 read error: -71 [ 1668.302152][ T5894] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 1668.344025][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.369941][T20088] Bluetooth: hci4: command 0x0405 tx timeout [ 1668.453716][ T5894] usb 5-1: config 0 descriptor?? [ 1668.511816][ T5894] usb 5-1: can't set config #0, error -71 [ 1668.556774][ T5894] usb 5-1: USB disconnect, device number 82 [ 1668.738693][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.745377][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.067776][T20088] Bluetooth: hci0: command 0x0c1a tx timeout [ 1669.073867][T28781] Bluetooth: hci1: command 0x0405 tx timeout [ 1669.093061][T28781] Bluetooth: hci5: command 0x0405 tx timeout [ 1669.424290][T28841] kAFS: unparsable volume name [ 1669.470477][T28842] kAFS: unparsable volume name [ 1669.543688][T28847] loop6: detected capacity change from 0 to 7 [ 1669.571415][T28847] Dev loop6: unable to read RDB block 7 [ 1669.584015][T28847] loop6: AHDI p2 p3 p4 [ 1669.603542][T28847] loop6: partition table partially beyond EOD, truncated [ 1669.635368][T28847] loop6: p2 size 47 extends beyond EOD, truncated [ 1669.689816][T28847] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1669.802120][T16721] udevd[16721]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1669.894978][T28852] FAULT_INJECTION: forcing a failure. [ 1669.894978][T28852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1669.985723][T28852] CPU: 0 UID: 0 PID: 28852 Comm: syz.4.6330 Not tainted syzkaller #0 PREEMPT(full) [ 1669.985752][T28852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1669.985765][T28852] Call Trace: [ 1669.985773][T28852] [ 1669.985782][T28852] dump_stack_lvl+0x189/0x250 [ 1669.985808][T28852] ? __pfx____ratelimit+0x10/0x10 [ 1669.985833][T28852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1669.985854][T28852] ? __pfx__printk+0x10/0x10 [ 1669.985887][T28852] should_fail_ex+0x414/0x560 [ 1669.985916][T28852] _copy_to_user+0x31/0xb0 [ 1669.985938][T28852] simple_read_from_buffer+0xe1/0x170 [ 1669.985972][T28852] proc_fail_nth_read+0x1b3/0x220 [ 1669.986000][T28852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1669.986028][T28852] ? rw_verify_area+0x2a6/0x4d0 [ 1669.986053][T28852] ? __lock_acquire+0xab9/0xd20 [ 1669.986070][T28852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1669.986096][T28852] vfs_read+0x200/0xa30 [ 1669.986125][T28852] ? fdget_pos+0x247/0x320 [ 1669.986148][T28852] ? __pfx___mutex_lock+0x10/0x10 [ 1669.986173][T28852] ? __pfx_vfs_read+0x10/0x10 [ 1669.986200][T28852] ? __fget_files+0x2a/0x420 [ 1669.986223][T28852] ? __fget_files+0x3a0/0x420 [ 1669.986239][T28852] ? __fget_files+0x2a/0x420 [ 1669.986266][T28852] ksys_read+0x145/0x250 [ 1669.986295][T28852] ? __pfx_ksys_read+0x10/0x10 [ 1669.986325][T28852] ? do_syscall_64+0xbe/0xfa0 [ 1669.986353][T28852] do_syscall_64+0xfa/0xfa0 [ 1669.986375][T28852] ? lockdep_hardirqs_on+0x9c/0x150 [ 1669.986399][T28852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.986419][T28852] ? clear_bhb_loop+0x60/0xb0 [ 1669.986449][T28852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.986469][T28852] RIP: 0033:0x7f688698d8dc [ 1669.986488][T28852] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1669.986505][T28852] RSP: 002b:00007f688776c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1669.986527][T28852] RAX: ffffffffffffffda RBX: 00007f6886be5fa0 RCX: 00007f688698d8dc [ 1669.986543][T28852] RDX: 000000000000000f RSI: 00007f688776c0a0 RDI: 0000000000000005 [ 1669.986556][T28852] RBP: 00007f688776c090 R08: 0000000000000000 R09: 0000000000000000 [ 1669.986569][T28852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1669.986581][T28852] R13: 00007f6886be6038 R14: 00007f6886be5fa0 R15: 00007f6886d0fa28 [ 1669.986615][T28852] [ 1670.367943][T28858] overlayfs: missing 'lowerdir' [ 1670.377691][T28858] netlink: 'syz.5.6334': attribute type 30 has an invalid length. [ 1670.388603][T28858] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6334'. [ 1670.475590][T28858] netlink: 1296 bytes leftover after parsing attributes in process `syz.5.6334'. [ 1670.569868][T28867] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6331'. [ 1670.872567][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1671.135144][T28781] Bluetooth: hci0: command 0x0c1a tx timeout [ 1671.900472][ T9] usb 3-1: config 0 has an invalid interface number: 197 but max is 4 [ 1671.922490][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1672.010722][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 1672.024880][ T9] usb 3-1: config 0 has no interface number 0 [ 1672.035383][ T9] usb 3-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 1672.078679][ T9] usb 3-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1672.106466][ T9] usb 3-1: config 0 interface 197 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1672.281310][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 1672.396107][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.435296][ T9] usb 3-1: Product: syz [ 1672.476813][ T9] usb 3-1: Manufacturer: syz [ 1672.510437][ T9] usb 3-1: SerialNumber: syz [ 1672.710697][ T9] usb 3-1: config 0 descriptor?? [ 1672.766206][T28898] FAULT_INJECTION: forcing a failure. [ 1672.766206][T28898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1672.862854][T28867] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1672.935528][T28898] CPU: 1 UID: 0 PID: 28898 Comm: syz.0.6343 Not tainted syzkaller #0 PREEMPT(full) [ 1672.935544][T28898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1672.935552][T28898] Call Trace: [ 1672.935557][T28898] [ 1672.935562][T28898] dump_stack_lvl+0x189/0x250 [ 1672.935578][T28898] ? __pfx____ratelimit+0x10/0x10 [ 1672.935592][T28898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1672.935602][T28898] ? __pfx__printk+0x10/0x10 [ 1672.935613][T28898] ? __might_fault+0xb0/0x130 [ 1672.935634][T28898] should_fail_ex+0x414/0x560 [ 1672.935650][T28898] _copy_from_user+0x2d/0xb0 [ 1672.935660][T28898] ___sys_sendmsg+0x158/0x2a0 [ 1672.935675][T28898] ? __pfx____sys_sendmsg+0x10/0x10 [ 1672.935709][T28898] ? __might_fault+0xb0/0x130 [ 1672.935725][T28898] __sys_sendmmsg+0x227/0x430 [ 1672.935744][T28898] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1672.935760][T28898] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1672.935783][T28898] ? ksys_write+0x22a/0x250 [ 1672.935799][T28898] ? __pfx_ksys_write+0x10/0x10 [ 1672.935816][T28898] __x64_sys_sendmmsg+0xa0/0xc0 [ 1672.935829][T28898] do_syscall_64+0xfa/0xfa0 [ 1672.935841][T28898] ? lockdep_hardirqs_on+0x9c/0x150 [ 1672.935854][T28898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1672.935864][T28898] ? clear_bhb_loop+0x60/0xb0 [ 1672.935876][T28898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1672.935886][T28898] RIP: 0033:0x7f4a6c58eec9 [ 1672.935896][T28898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1672.935906][T28898] RSP: 002b:00007f4a6d3cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1672.935918][T28898] RAX: ffffffffffffffda RBX: 00007f4a6c7e5fa0 RCX: 00007f4a6c58eec9 [ 1672.935926][T28898] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1672.935932][T28898] RBP: 00007f4a6d3cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1672.935939][T28898] R10: 0000000000008004 R11: 0000000000000246 R12: 0000000000000001 [ 1672.935946][T28898] R13: 00007f4a6c7e6038 R14: 00007f4a6c7e5fa0 R15: 00007f4a6c90fa28 [ 1672.935963][T28898] [ 1673.266769][T28867] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6331'. [ 1673.385810][T28781] Bluetooth: hci0: command 0x0c1a tx timeout [ 1673.410801][ T30] audit: type=1326 audit(1760054810.719:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28904 comm="syz.4.6345" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f688698eec9 code=0x0 [ 1673.923427][T28926] FAULT_INJECTION: forcing a failure. [ 1673.923427][T28926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1673.944638][T28926] CPU: 1 UID: 0 PID: 28926 Comm: syz.4.6348 Not tainted syzkaller #0 PREEMPT(full) [ 1673.944663][T28926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1673.944670][T28926] Call Trace: [ 1673.944676][T28926] [ 1673.944681][T28926] dump_stack_lvl+0x189/0x250 [ 1673.944697][T28926] ? __pfx____ratelimit+0x10/0x10 [ 1673.944711][T28926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1673.944721][T28926] ? __pfx__printk+0x10/0x10 [ 1673.944739][T28926] should_fail_ex+0x414/0x560 [ 1673.944754][T28926] _copy_to_user+0x31/0xb0 [ 1673.944766][T28926] simple_read_from_buffer+0xe1/0x170 [ 1673.944785][T28926] proc_fail_nth_read+0x1b3/0x220 [ 1673.944800][T28926] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1673.944814][T28926] ? rw_verify_area+0x2a6/0x4d0 [ 1673.944828][T28926] ? __lock_acquire+0xab9/0xd20 [ 1673.944837][T28926] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1673.944851][T28926] vfs_read+0x200/0xa30 [ 1673.944871][T28926] ? fdget_pos+0x247/0x320 [ 1673.944883][T28926] ? __pfx___mutex_lock+0x10/0x10 [ 1673.944897][T28926] ? __pfx_vfs_read+0x10/0x10 [ 1673.944912][T28926] ? __fget_files+0x2a/0x420 [ 1673.944923][T28926] ? __fget_files+0x3a0/0x420 [ 1673.944932][T28926] ? __fget_files+0x2a/0x420 [ 1673.944945][T28926] ksys_read+0x145/0x250 [ 1673.944961][T28926] ? __pfx_ksys_read+0x10/0x10 [ 1673.944976][T28926] ? do_syscall_64+0xbe/0xfa0 [ 1673.945003][T28926] do_syscall_64+0xfa/0xfa0 [ 1673.945022][T28926] ? lockdep_hardirqs_on+0x9c/0x150 [ 1673.945043][T28926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.945062][T28926] ? clear_bhb_loop+0x60/0xb0 [ 1673.945085][T28926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.945103][T28926] RIP: 0033:0x7f688698d8dc [ 1673.945119][T28926] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1673.945135][T28926] RSP: 002b:00007f688776c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1673.945155][T28926] RAX: ffffffffffffffda RBX: 00007f6886be5fa0 RCX: 00007f688698d8dc [ 1673.945171][T28926] RDX: 000000000000000f RSI: 00007f688776c0a0 RDI: 0000000000000004 [ 1673.945183][T28926] RBP: 00007f688776c090 R08: 0000000000000000 R09: 0000000000000000 [ 1673.945195][T28926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1673.945209][T28926] R13: 00007f6886be6038 R14: 00007f6886be5fa0 R15: 00007f6886d0fa28 [ 1673.945244][T28926] [ 1673.946173][ T9] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1674.459018][T28932] IPv6: addrconf: prefix option has invalid lifetime [ 1674.557925][ T5823] usb 3-1: USB disconnect, device number 15 [ 1674.865406][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1674.897307][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1674.909423][ T9] usb 1-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 1674.992689][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1675.016670][ T9] usb 1-1: config 1 has no interface number 1 [ 1675.033001][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1675.076111][ T9] usb 1-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x2E, changing to 0xE [ 1675.112426][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0xE has an invalid bInterval 101, changing to 7 [ 1675.151742][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0xE has invalid maxpacket 26214, setting to 1024 [ 1675.181403][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1675.195559][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.213637][ T9] usb 1-1: Product: syz [ 1675.226984][ T9] usb 1-1: Manufacturer: syz [ 1675.235599][ T9] usb 1-1: SerialNumber: syz [ 1675.315508][T28956] FAULT_INJECTION: forcing a failure. [ 1675.315508][T28956] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1675.332460][T28956] CPU: 1 UID: 0 PID: 28956 Comm: syz.4.6359 Not tainted syzkaller #0 PREEMPT(full) [ 1675.332476][T28956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1675.332483][T28956] Call Trace: [ 1675.332488][T28956] [ 1675.332493][T28956] dump_stack_lvl+0x189/0x250 [ 1675.332509][T28956] ? __pfx____ratelimit+0x10/0x10 [ 1675.332522][T28956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1675.332533][T28956] ? __pfx__printk+0x10/0x10 [ 1675.332545][T28956] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1675.332564][T28956] should_fail_ex+0x414/0x560 [ 1675.332579][T28956] get_futex_key+0xffc/0x1660 [ 1675.332599][T28956] ? __pfx_get_futex_key+0x10/0x10 [ 1675.332611][T28956] ? __hrtimer_setup+0x187/0x210 [ 1675.332622][T28956] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1675.332640][T28956] futex_wait_requeue_pi+0x221/0x850 [ 1675.332654][T28956] ? __pfx_futex_wait_requeue_pi+0x10/0x10 [ 1675.332667][T28956] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1675.332679][T28956] ? fpu__restore_sig+0x978/0x1100 [ 1675.332694][T28956] ? fpu__restore_sig+0x4ab/0x1100 [ 1675.332718][T28956] ? __lock_acquire+0xab9/0xd20 [ 1675.332740][T28956] ? __pfx_futex_wake_mark+0x10/0x10 [ 1675.332761][T28956] do_futex+0x181/0x420 [ 1675.332778][T28956] ? __pfx_do_futex+0x10/0x10 [ 1675.332797][T28956] __se_sys_futex+0x36f/0x400 [ 1675.332816][T28956] ? __pfx___se_sys_futex+0x10/0x10 [ 1675.332830][T28956] ? __task_pid_nr_ns+0x28/0x490 [ 1675.332847][T28956] ? __x64_sys_futex+0x21/0xf0 [ 1675.332863][T28956] do_syscall_64+0xfa/0xfa0 [ 1675.332875][T28956] ? lockdep_hardirqs_on+0x9c/0x150 [ 1675.332887][T28956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.332897][T28956] ? clear_bhb_loop+0x60/0xb0 [ 1675.332909][T28956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.332919][T28956] RIP: 0033:0x7f688698eec9 [ 1675.332930][T28956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1675.332939][T28956] RSP: 002b:00007f688776c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1675.332952][T28956] RAX: ffffffffffffffda RBX: 00007f6886be5fa0 RCX: 00007f688698eec9 [ 1675.332960][T28956] RDX: 0000000000000002 RSI: 000000000000000b RDI: 00002000000002c0 [ 1675.332966][T28956] RBP: 00007f688776c090 R08: 00002000000004c0 R09: 0000000000000002 [ 1675.332976][T28956] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000002 [ 1675.332982][T28956] R13: 00007f6886be6038 R14: 00007f6886be5fa0 R15: 00007f6886d0fa28 [ 1675.332999][T28956] [ 1675.577146][ C1] vkms_vblank_simulate: vblank timer overrun [ 1675.935425][ T5823] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1676.165353][ T5823] usb 2-1: Using ep0 maxpacket: 32 [ 1676.183308][T28962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6360'. [ 1676.194291][ T5823] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1676.203182][ T5823] usb 2-1: config 0 has no interface number 0 [ 1676.216960][ T5823] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1676.226732][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.234864][ T5823] usb 2-1: Product: syz [ 1676.238501][T28963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1676.252881][ T5823] usb 2-1: Manufacturer: syz [ 1676.267477][T28963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1676.269949][ T5823] usb 2-1: SerialNumber: syz [ 1676.291371][ T5823] usb 2-1: config 0 descriptor?? [ 1676.324906][ T5823] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1676.768729][ T9] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 1676.790700][ T9] usb 1-1: found format II with max.bitrate = 0, frame size=0 [ 1676.813849][ T9] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1676.888904][ T9] usb 1-1: USB disconnect, device number 100 [ 1676.935801][T28970] xt_policy: output policy not valid in PREROUTING and INPUT [ 1677.487880][T28978] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1678.020778][ T10] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1678.290034][T28987] netlink: 'syz.4.6365': attribute type 21 has an invalid length. [ 1678.315963][ T5823] usb 2-1: qt2_attach - failed to power on unit: -71 [ 1678.328478][ T5823] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 1678.352205][ T5823] usb 2-1: USB disconnect, device number 121 [ 1678.448586][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1678.459953][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1678.503539][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1678.546083][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.654937][T28999] netlink: 'syz.1.6366': attribute type 1 has an invalid length. [ 1678.680587][ T10] usb 1-1: config 0 descriptor?? [ 1679.083684][T28999] bond3: entered promiscuous mode [ 1679.110168][T28999] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1679.192849][T28991] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1679.232664][T28991] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 1679.253087][T28991] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1679.318168][T28991] bond3: (slave gre1): making interface the new active one [ 1679.345560][T28991] gre1: entered promiscuous mode [ 1679.370077][T28991] bond3: (slave gre1): Enslaving as an active interface with an up link [ 1679.416803][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 1679.429014][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1679.462398][T29014] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1679.476607][T29014] bond1 (unregistering): Released all slaves [ 1679.507007][ T10] usb 1-1: USB disconnect, device number 101 [ 1679.789976][T29019] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6370'. [ 1679.801121][T29019] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6370'. [ 1680.438333][T29038] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1680.501200][T29038] bond6 (unregistering): Released all slaves [ 1680.524357][ T10] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1680.975621][ T10] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 1680.988146][ T10] usb 1-1: config 8 has no interface number 0 [ 1681.020414][ T10] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1681.166504][T29050] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6378'. [ 1681.204819][ T10] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1681.235399][ T5907] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1681.297648][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.323858][ T10] usb 1-1: Product: syz [ 1681.332134][ T10] usb 1-1: Manufacturer: syz [ 1681.336824][ T10] usb 1-1: SerialNumber: syz [ 1681.675366][ T5909] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1681.835608][ T5909] usb 5-1: Using ep0 maxpacket: 8 [ 1681.843496][ T5909] usb 5-1: config index 0 descriptor too short (expected 61708, got 18) [ 1681.870010][ T5909] usb 5-1: config 47 has an invalid descriptor of length 205, skipping remainder of the config [ 1681.887235][ T5909] usb 5-1: config 47 has 0 interfaces, different from the descriptor's value: 27 [ 1681.909000][ T5909] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1681.925613][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.885517][T19953] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1682.935524][ T5823] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1683.126480][T19953] usb 2-1: config 0 has no interfaces? [ 1683.140120][ T5823] usb 6-1: device descriptor read/64, error -71 [ 1683.142396][T19953] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1683.161588][T19953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.177578][T19953] usb 2-1: Product: syz [ 1683.194856][T19953] usb 2-1: Manufacturer: syz [ 1683.205753][ T10] usb 1-1: USB disconnect, device number 102 [ 1683.225063][T19953] usb 2-1: SerialNumber: syz [ 1683.300711][T19953] usb 2-1: config 0 descriptor?? [ 1683.395359][ T5823] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1683.624594][ T5823] usb 6-1: device descriptor read/64, error -71 [ 1683.751570][ T5823] usb usb6-port1: attempt power cycle [ 1684.105122][ T5823] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1684.125722][ T5823] usb 6-1: device descriptor read/8, error -71 [ 1684.350236][ T5894] usb 5-1: USB disconnect, device number 83 [ 1684.454793][ T5823] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1684.496420][T29074] kvm: user requested TSC rate below hardware speed [ 1684.505698][ T5823] usb 6-1: device descriptor read/8, error -71 [ 1684.625968][ T5823] usb usb6-port1: unable to enumerate USB device [ 1684.730463][T29083] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6388'. [ 1684.740647][T29083] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6388'. [ 1685.474455][T29095] vivid-000: disconnect [ 1685.738728][T19953] usb 2-1: USB disconnect, device number 122 [ 1685.946390][T29090] vivid-000: reconnect [ 1686.245437][T19953] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1686.395777][T19953] usb 3-1: Using ep0 maxpacket: 16 [ 1686.403523][T19953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1686.437878][T19953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1686.448404][T19953] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1686.459262][T29104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6393'. [ 1686.468349][T19953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.480747][T19953] usb 3-1: config 0 descriptor?? [ 1686.591708][T29120] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6398'. [ 1686.767832][T29121] team0: Failed to send port change of device vlan2 via netlink (err -105) [ 1686.781165][T29121] team0: Failed to send options change via netlink (err -105) [ 1686.824118][T29121] team0: Port device vlan2 added [ 1687.264199][T19953] mcp2221 0003:04D8:00DD.005D: unknown main item tag 0x0 [ 1687.280077][T19953] mcp2221 0003:04D8:00DD.005D: unknown main item tag 0x0 [ 1687.469750][T19953] mcp2221 0003:04D8:00DD.005D: unknown main item tag 0x0 [ 1687.514404][T19953] mcp2221 0003:04D8:00DD.005D: unknown main item tag 0x0 [ 1687.557623][T19953] mcp2221 0003:04D8:00DD.005D: unknown main item tag 0x0 [ 1687.651044][T19953] mcp2221 0003:04D8:00DD.005D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1688.359890][T29107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1688.371144][T29107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1688.420702][T29107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1688.440835][T29154] FAULT_INJECTION: forcing a failure. [ 1688.440835][T29154] name failslab, interval 1, probability 0, space 0, times 0 [ 1688.456852][T29154] CPU: 0 UID: 0 PID: 29154 Comm: syz.1.6406 Not tainted syzkaller #0 PREEMPT(full) [ 1688.456878][T29154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1688.456890][T29154] Call Trace: [ 1688.456898][T29154] [ 1688.456907][T29154] dump_stack_lvl+0x189/0x250 [ 1688.456932][T29154] ? __pfx____ratelimit+0x10/0x10 [ 1688.456954][T29154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1688.456973][T29154] ? __pfx__printk+0x10/0x10 [ 1688.456997][T29154] ? __pfx___might_resched+0x10/0x10 [ 1688.457021][T29154] should_fail_ex+0x414/0x560 [ 1688.457046][T29154] should_failslab+0xa8/0x100 [ 1688.457065][T29154] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1688.457090][T29154] ? __alloc_skb+0x112/0x2d0 [ 1688.457113][T29154] __alloc_skb+0x112/0x2d0 [ 1688.457135][T29154] netlink_ack+0x146/0xa50 [ 1688.457151][T29154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1688.457168][T29154] ? ref_tracker_free+0x63a/0x7d0 [ 1688.457191][T29154] ? __asan_memcpy+0x40/0x70 [ 1688.457213][T29154] ? __pfx_ref_tracker_free+0x10/0x10 [ 1688.457234][T29154] ? __skb_clone+0x63/0x7a0 [ 1688.457264][T29154] netlink_rcv_skb+0x28c/0x470 [ 1688.457283][T29154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1688.457303][T29154] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1688.457332][T29154] ? netlink_deliver_tap+0x2e/0x1b0 [ 1688.457358][T29154] netlink_unicast+0x82f/0x9e0 [ 1688.457391][T29154] ? __pfx_netlink_unicast+0x10/0x10 [ 1688.457420][T29154] ? netlink_sendmsg+0x642/0xb30 [ 1688.457439][T29154] ? skb_put+0x11b/0x210 [ 1688.457462][T29154] netlink_sendmsg+0x805/0xb30 [ 1688.457492][T29154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1688.457516][T29154] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1688.457543][T29154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1688.457562][T29154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1688.457583][T29154] __sock_sendmsg+0x21c/0x270 [ 1688.457612][T29154] ____sys_sendmsg+0x505/0x830 [ 1688.457641][T29154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1688.457670][T29154] ? import_iovec+0x74/0xa0 [ 1688.457690][T29154] ___sys_sendmsg+0x21f/0x2a0 [ 1688.457713][T29154] ? __pfx____sys_sendmsg+0x10/0x10 [ 1688.457776][T29154] ? __fget_files+0x2a/0x420 [ 1688.457792][T29154] ? __fget_files+0x3a0/0x420 [ 1688.457820][T29154] __x64_sys_sendmsg+0x19b/0x260 [ 1688.457844][T29154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1688.457875][T29154] ? __pfx_ksys_write+0x10/0x10 [ 1688.457905][T29154] ? do_syscall_64+0xbe/0xfa0 [ 1688.457932][T29154] do_syscall_64+0xfa/0xfa0 [ 1688.457954][T29154] ? lockdep_hardirqs_on+0x9c/0x150 [ 1688.457977][T29154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1688.457997][T29154] ? clear_bhb_loop+0x60/0xb0 [ 1688.458019][T29154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1688.458039][T29154] RIP: 0033:0x7fca9d78eec9 [ 1688.458055][T29154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1688.458072][T29154] RSP: 002b:00007fca9e634038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1688.458094][T29154] RAX: ffffffffffffffda RBX: 00007fca9d9e5fa0 RCX: 00007fca9d78eec9 [ 1688.458108][T29154] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 1688.458120][T29154] RBP: 00007fca9e634090 R08: 0000000000000000 R09: 0000000000000000 [ 1688.458132][T29154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1688.458143][T29154] R13: 00007fca9d9e6038 R14: 00007fca9d9e5fa0 R15: 00007fca9db0fa28 [ 1688.458175][T29154] [ 1688.459226][T29107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1688.925413][ T10] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1689.076609][ T10] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1689.085399][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1689.096513][ T10] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1689.105971][ T10] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1689.113969][ T10] usb 1-1: Manufacturer: syz [ 1689.120698][ T10] usb 1-1: config 0 descriptor?? [ 1689.179196][ T10] rc_core: IR keymap rc-hauppauge not found [ 1689.185461][ T10] Registered IR keymap rc-empty [ 1689.191887][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1689.208373][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input93 [ 1689.238740][ T5823] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1689.285198][ T5894] usb 2-1: new low-speed USB device number 123 using dummy_hcd [ 1689.327934][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 1689.337213][ T10] usb 1-1: USB disconnect, device number 103 [ 1689.395131][ T5823] usb 5-1: device descriptor read/64, error -71 [ 1689.454202][ T5894] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1689.464247][ T5894] usb 2-1: config 0 has no interface number 0 [ 1689.472151][ T5894] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1689.485358][ T5894] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1689.498236][ T5894] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1689.509002][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.526528][ T5894] usb 2-1: config 0 descriptor?? [ 1689.532355][T29168] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1689.551292][ T5894] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1689.570207][ T5907] usb 3-1: USB disconnect, device number 17 [ 1689.645692][ T5823] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1689.775499][ T5823] usb 5-1: device descriptor read/64, error -71 [ 1689.812377][ T5907] usb 2-1: USB disconnect, device number 123 [ 1689.895440][ T5823] usb usb5-port1: attempt power cycle [ 1690.237098][ T5823] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1690.373834][ T5823] usb 5-1: device descriptor read/8, error -71 [ 1690.416305][T29196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6420'. [ 1690.635201][ T5823] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1690.647411][ T30] audit: type=1326 audit(1760054827.979:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29204 comm="syz.1.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9d78eec9 code=0x7ffc0000 [ 1690.672914][T29208] netlink: 576 bytes leftover after parsing attributes in process `syz.1.6422'. [ 1690.684007][ T5823] usb 5-1: device descriptor read/8, error -71 [ 1690.726440][ T30] audit: type=1326 audit(1760054827.979:4466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29204 comm="syz.1.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9d78eec9 code=0x7ffc0000 [ 1690.748886][ C0] vkms_vblank_simulate: vblank timer overrun [ 1690.758109][ T30] audit: type=1326 audit(1760054827.979:4467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29204 comm="syz.1.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca9d78eec9 code=0x7ffc0000 [ 1690.781115][ C0] vkms_vblank_simulate: vblank timer overrun [ 1690.788742][ T30] audit: type=1326 audit(1760054827.979:4468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29204 comm="syz.1.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9d78eec9 code=0x7ffc0000 [ 1690.811235][ C0] vkms_vblank_simulate: vblank timer overrun [ 1690.875172][ T30] audit: type=1326 audit(1760054827.979:4469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29204 comm="syz.1.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9d78eec9 code=0x7ffc0000 [ 1690.883851][ T5823] usb usb5-port1: unable to enumerate USB device [ 1690.897796][ C0] vkms_vblank_simulate: vblank timer overrun [ 1690.898988][ T30] audit: type=1326 audit(1760054827.979:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29204 comm="syz.1.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fca9d78eec9 code=0x7ffc0000 [ 1691.094461][ T30] audit: type=1326 audit(1760054827.979:4471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29204 comm="syz.1.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9d78eec9 code=0x7ffc0000 [ 1691.121064][T29214] FAULT_INJECTION: forcing a failure. [ 1691.121064][T29214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1691.158163][ T30] audit: type=1326 audit(1760054827.979:4472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29204 comm="syz.1.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9d78eec9 code=0x7ffc0000 [ 1691.171388][T29214] CPU: 1 UID: 0 PID: 29214 Comm: syz.5.6426 Not tainted syzkaller #0 PREEMPT(full) [ 1691.171415][T29214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1691.171428][T29214] Call Trace: [ 1691.171436][T29214] [ 1691.171445][T29214] dump_stack_lvl+0x189/0x250 [ 1691.171470][T29214] ? __pfx____ratelimit+0x10/0x10 [ 1691.171498][T29214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1691.171518][T29214] ? __pfx__printk+0x10/0x10 [ 1691.171550][T29214] should_fail_ex+0x414/0x560 [ 1691.171577][T29214] _copy_to_user+0x31/0xb0 [ 1691.171598][T29214] simple_read_from_buffer+0xe1/0x170 [ 1691.171636][T29214] proc_fail_nth_read+0x1b3/0x220 [ 1691.171662][T29214] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1691.171689][T29214] ? rw_verify_area+0x2a6/0x4d0 [ 1691.171713][T29214] ? __lock_acquire+0xab9/0xd20 [ 1691.171731][T29214] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1691.171756][T29214] vfs_read+0x200/0xa30 [ 1691.171780][T29214] ? fdget_pos+0x247/0x320 [ 1691.171802][T29214] ? __pfx___mutex_lock+0x10/0x10 [ 1691.171828][T29214] ? __pfx_vfs_read+0x10/0x10 [ 1691.171855][T29214] ? __fget_files+0x2a/0x420 [ 1691.171875][T29214] ? __fget_files+0x3a0/0x420 [ 1691.171892][T29214] ? __fget_files+0x2a/0x420 [ 1691.171918][T29214] ksys_read+0x145/0x250 [ 1691.171945][T29214] ? __pfx_ksys_read+0x10/0x10 [ 1691.171974][T29214] ? do_syscall_64+0xbe/0xfa0 [ 1691.172000][T29214] do_syscall_64+0xfa/0xfa0 [ 1691.172022][T29214] ? lockdep_hardirqs_on+0x9c/0x150 [ 1691.172044][T29214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1691.172063][T29214] ? clear_bhb_loop+0x60/0xb0 [ 1691.172087][T29214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1691.172106][T29214] RIP: 0033:0x7fc6d978d8dc [ 1691.172123][T29214] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1691.172140][T29214] RSP: 002b:00007fc6da62d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1691.172161][T29214] RAX: ffffffffffffffda RBX: 00007fc6d99e6090 RCX: 00007fc6d978d8dc [ 1691.172176][T29214] RDX: 000000000000000f RSI: 00007fc6da62d0a0 RDI: 0000000000000004 [ 1691.172188][T29214] RBP: 00007fc6da62d090 R08: 0000000000000000 R09: 0000000000000000 [ 1691.172201][T29214] R10: 000000000000007a R11: 0000000000000246 R12: 0000000000000001 [ 1691.172213][T29214] R13: 00007fc6d99e6128 R14: 00007fc6d99e6090 R15: 00007fc6d9b0fa28 [ 1691.172244][T29214] [ 1691.180699][ C0] vkms_vblank_simulate: vblank timer overrun [ 1691.432035][ T30] audit: type=1326 audit(1760054827.979:4473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29204 comm="syz.1.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fca9d78eec9 code=0x7ffc0000 [ 1691.465081][ T30] audit: type=1326 audit(1760054827.979:4474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29204 comm="syz.1.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9d78eec9 code=0x7ffc0000 [ 1691.594912][T29217] overlayfs: missing 'lowerdir' [ 1691.606041][T29217] netlink: 'syz.1.6427': attribute type 30 has an invalid length. [ 1691.613876][T29217] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6427'. [ 1691.659494][T29224] netlink: 1296 bytes leftover after parsing attributes in process `syz.1.6427'. [ 1692.095287][ T5823] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1692.185895][T29243] team0: Device vlan2 failed to change mtu [ 1692.224671][T29244] netlink: 'syz.2.6433': attribute type 13 has an invalid length. [ 1692.265941][T29248] netlink: 'syz.5.6434': attribute type 21 has an invalid length. [ 1692.275508][ T5823] usb 2-1: Using ep0 maxpacket: 16 [ 1692.286447][ T5823] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 1692.298869][ T5823] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 1692.324884][ T5823] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1692.353072][ T5823] usb 2-1: config 0 has no interface number 0 [ 1692.380289][ T5823] usb 2-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 1692.407315][ T5823] usb 2-1: config 0 interface 104 has no altsetting 1 [ 1692.449635][T29244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1692.455648][ T5823] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1692.456834][T29244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1692.466908][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.473279][T29244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1692.488160][T29244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1692.523657][ T5823] usb 2-1: Product: syz [ 1692.529989][ T5823] usb 2-1: Manufacturer: syz [ 1692.534602][ T5823] usb 2-1: SerialNumber: syz [ 1692.546790][T29244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1692.567995][ T5823] usb 2-1: config 0 descriptor?? [ 1692.581272][T29248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6434'. [ 1692.793268][T29229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1692.812558][T29229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1692.821614][ T5894] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1692.837109][ T5823] asix 2-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1692.849603][ T5823] asix 2-1:0.104: probe with driver asix failed with error -71 [ 1692.900970][ T5823] usb 2-1: USB disconnect, device number 124 [ 1693.010820][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 1693.156947][ T5894] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1693.170923][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.194585][ T5894] usb 1-1: config 0 descriptor?? [ 1693.211871][ T5894] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1693.365253][T29271] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6442'. [ 1693.426178][T29272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1693.435976][T29272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1693.507923][ T5894] gspca_sonixj: reg_r err -71 [ 1693.519432][ T5894] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 1693.527240][ T10] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 1693.580054][ T5894] usb 1-1: USB disconnect, device number 104 [ 1693.698337][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1693.732120][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1693.797825][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1693.853046][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.909951][ T10] usb 6-1: Product: syz [ 1693.928110][ T10] usb 6-1: Manufacturer: syz [ 1693.947504][ T10] usb 6-1: SerialNumber: syz [ 1694.445189][ T5907] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1694.605114][ T5907] usb 1-1: Using ep0 maxpacket: 16 [ 1694.612663][ T5907] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1694.622661][ T5907] usb 1-1: config 8 has an invalid interface number: 101 but max is 0 [ 1694.630932][ T5907] usb 1-1: config 8 has no interface number 0 [ 1694.637566][ T5907] usb 1-1: too many endpoints for config 8 interface 101 altsetting 114: 112, using maximum allowed: 30 [ 1694.649235][ T5907] usb 1-1: config 8 interface 101 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 112 [ 1694.663354][ T5907] usb 1-1: config 8 interface 101 has no altsetting 0 [ 1694.673806][ T5907] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=ab.34 [ 1694.683112][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.691843][ T5907] usb 1-1: Product: syz [ 1694.696549][ T5907] usb 1-1: Manufacturer: syz [ 1694.701161][ T5907] usb 1-1: SerialNumber: syz [ 1695.015102][ T9] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1695.175610][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1695.184934][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1695.202015][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1695.216293][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1695.225857][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.234030][ T9] usb 2-1: Product: syz [ 1695.246157][ T9] usb 2-1: Manufacturer: syz [ 1695.251242][ T9] usb 2-1: SerialNumber: syz [ 1695.540788][T29311] [ 1695.540801][T29311] ===================================================== [ 1695.540809][T29311] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1695.540826][T29311] syzkaller #0 Not tainted [ 1695.540835][T29311] ----------------------------------------------------- [ 1695.540843][T29311] syz.4.6453/29311 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1695.576508][T29311] ffff8880323f5468 (&tty->flow.lock){....}-{3:3}, at: stop_tty+0x2f/0x150 [ 1695.576561][T29311] [ 1695.576561][T29311] and this task is already holding: [ 1695.576568][T29311] ffffffff8e96ee78 (kbd_event_lock){..-.}-{3:3}, at: kbd_event+0xd2/0x3f70 [ 1695.600977][T29311] which would create a new lock dependency: [ 1695.606849][T29311] (kbd_event_lock){..-.}-{3:3} -> (&tty->flow.lock){....}-{3:3} [ 1695.614576][T29311] [ 1695.614576][T29311] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1695.624009][T29311] (kbd_event_lock){..-.}-{3:3} [ 1695.624045][T29311] [ 1695.624045][T29311] ... which became SOFTIRQ-irq-safe at: [ 1695.636581][T29311] lock_acquire+0x120/0x360 [ 1695.641246][T29311] _raw_spin_lock+0x2e/0x40 [ 1695.645823][T29311] kbd_event+0xd2/0x3f70 [ 1695.650140][T29311] input_handle_events_default+0xd4/0x1a0 [ 1695.655948][T29311] input_pass_values+0x285/0x890 [ 1695.660963][T29311] input_event_dispose+0x3e5/0x6b0 [ 1695.666167][T29311] input_event+0x89/0xe0 [ 1695.670483][T29311] hidinput_hid_event+0x1362/0x1ca0 [ 1695.675746][T29311] hid_process_event+0x4be/0x620 [ 1695.680935][T29311] hid_report_raw_event+0xe91/0x16d0 [ 1695.686295][T29311] hid_input_report+0x43e/0x520 [ 1695.691216][T29311] hid_irq_in+0x47e/0x6d0 [ 1695.695609][T29311] __usb_hcd_giveback_urb+0x373/0x540 [ 1695.701068][T29311] dummy_timer+0x85f/0x44c0 [ 1695.705648][T29311] __hrtimer_run_queues+0x52c/0xc60 [ 1695.710917][T29311] hrtimer_run_softirq+0x187/0x2b0 [ 1695.716099][T29311] handle_softirqs+0x283/0x870 [ 1695.720948][T29311] __irq_exit_rcu+0xca/0x1f0 [ 1695.725603][T29311] irq_exit_rcu+0x9/0x30 [ 1695.729915][T29311] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1695.735622][T29311] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1695.741672][T29311] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1695.747558][T29311] raw_process_ep_io+0x27a/0xbc0 [ 1695.752574][T29311] raw_ioctl+0x23d1/0x3c90 [ 1695.757073][T29311] __se_sys_ioctl+0xfc/0x170 [ 1695.761730][T29311] do_syscall_64+0xfa/0xfa0 [ 1695.766302][T29311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.772260][T29311] [ 1695.772260][T29311] to a SOFTIRQ-irq-unsafe lock: [ 1695.779258][T29311] (tasklist_lock){.+.+}-{3:3} [ 1695.779278][T29311] [ 1695.779278][T29311] ... which became SOFTIRQ-irq-unsafe at: [ 1695.791881][T29311] ... [ 1695.791890][T29311] lock_acquire+0x120/0x360 [ 1695.799020][T29311] _raw_read_lock+0x36/0x50 [ 1695.803594][T29311] __do_wait+0xde/0x740 [ 1695.807823][T29311] do_wait+0x1f8/0x510 [ 1695.811976][T29311] kernel_wait+0xab/0x170 [ 1695.816378][T29311] call_usermodehelper_exec_work+0xbe/0x230 [ 1695.822338][T29311] process_scheduled_works+0xae1/0x17b0 [ 1695.828128][T29311] worker_thread+0x8a0/0xda0 [ 1695.832806][T29311] kthread+0x711/0x8a0 [ 1695.836961][T29311] ret_from_fork+0x4bc/0x870 [ 1695.841632][T29311] ret_from_fork_asm+0x1a/0x30 [ 1695.846476][T29311] [ 1695.846476][T29311] other info that might help us debug this: [ 1695.846476][T29311] [ 1695.856691][T29311] Chain exists of: [ 1695.856691][T29311] kbd_event_lock --> &tty->flow.lock --> tasklist_lock [ 1695.856691][T29311] [ 1695.869459][T29311] Possible interrupt unsafe locking scenario: [ 1695.869459][T29311] [ 1695.877874][T29311] CPU0 CPU1 [ 1695.883235][T29311] ---- ---- [ 1695.889099][T29311] lock(tasklist_lock); [ 1695.893523][T29311] local_irq_disable(); [ 1695.900265][T29311] lock(kbd_event_lock); [ 1695.907127][T29311] lock(&tty->flow.lock); [ 1695.914310][T29311] [ 1695.917757][T29311] lock(kbd_event_lock); [ 1695.922254][T29311] [ 1695.922254][T29311] *** DEADLOCK *** [ 1695.922254][T29311] [ 1695.930389][T29311] 5 locks held by syz.4.6453/29311: [ 1695.935572][T29311] #0: ffff8880298a8118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1695.944716][T29311] #1: ffff888146b64230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1695.954807][T29311] #2: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1695.964547][T29311] #3: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1695.974116][T29311] #4: ffffffff8e96ee78 (kbd_event_lock){..-.}-{3:3}, at: kbd_event+0xd2/0x3f70 [ 1695.983244][T29311] [ 1695.983244][T29311] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1695.993633][T29311] -> (kbd_event_lock){..-.}-{3:3} { [ 1695.998832][T29311] IN-SOFTIRQ-W at: [ 1696.002798][T29311] lock_acquire+0x120/0x360 [ 1696.008935][T29311] _raw_spin_lock+0x2e/0x40 [ 1696.015079][T29311] kbd_event+0xd2/0x3f70 [ 1696.020975][T29311] input_handle_events_default+0xd4/0x1a0 [ 1696.028341][T29311] input_pass_values+0x285/0x890 [ 1696.034919][T29311] input_event_dispose+0x3e5/0x6b0 [ 1696.041668][T29311] input_event+0x89/0xe0 [ 1696.047807][T29311] hidinput_hid_event+0x1362/0x1ca0 [ 1696.054640][T29311] hid_process_event+0x4be/0x620 [ 1696.061211][T29311] hid_report_raw_event+0xe91/0x16d0 [ 1696.068141][T29311] hid_input_report+0x43e/0x520 [ 1696.074636][T29311] hid_irq_in+0x47e/0x6d0 [ 1696.080602][T29311] __usb_hcd_giveback_urb+0x373/0x540 [ 1696.087616][T29311] dummy_timer+0x85f/0x44c0 [ 1696.093767][T29311] __hrtimer_run_queues+0x52c/0xc60 [ 1696.100860][T29311] hrtimer_run_softirq+0x187/0x2b0 [ 1696.107608][T29311] handle_softirqs+0x283/0x870 [ 1696.114008][T29311] __irq_exit_rcu+0xca/0x1f0 [ 1696.120233][T29311] irq_exit_rcu+0x9/0x30 [ 1696.126296][T29311] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1696.133579][T29311] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1696.141205][T29311] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1696.148571][T29311] raw_process_ep_io+0x27a/0xbc0 [ 1696.155149][T29311] raw_ioctl+0x23d1/0x3c90 [ 1696.161206][T29311] __se_sys_ioctl+0xfc/0x170 [ 1696.167440][T29311] do_syscall_64+0xfa/0xfa0 [ 1696.173581][T29311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.181109][T29311] INITIAL USE at: [ 1696.184993][T29311] lock_acquire+0x120/0x360 [ 1696.191049][T29311] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1696.197801][T29311] vt_reset_unicode+0x2b/0x160 [ 1696.204289][T29311] reset_vc+0x68/0x1b0 [ 1696.209914][T29311] vc_init+0x70/0x4a0 [ 1696.215451][T29311] con_init+0x385/0x9c0 [ 1696.221525][T29311] console_init+0x10e/0x430 [ 1696.227632][T29311] start_kernel+0x254/0x410 [ 1696.233701][T29311] x86_64_start_reservations+0x24/0x30 [ 1696.241009][T29311] x86_64_start_kernel+0x143/0x1c0 [ 1696.247676][T29311] common_startup_64+0x13e/0x147 [ 1696.254183][T29311] } [ 1696.256664][T29311] ... key at: [] kbd_event_lock+0x18/0xa0 [ 1696.264973][T29311] [ 1696.264973][T29311] the dependencies between the lock to be acquired [ 1696.264984][T29311] and SOFTIRQ-irq-unsafe lock: [ 1696.278468][T29311] -> (tasklist_lock){.+.+}-{3:3} { [ 1696.283935][T29311] HARDIRQ-ON-R at: [ 1696.288163][T29311] lock_acquire+0x120/0x360 [ 1696.294833][T29311] _raw_read_lock+0x36/0x50 [ 1696.301497][T29311] __do_wait+0xde/0x740 [ 1696.308415][T29311] do_wait+0x1f8/0x510 [ 1696.314667][T29311] kernel_wait+0xab/0x170 [ 1696.321164][T29311] call_usermodehelper_exec_work+0xbe/0x230 [ 1696.329219][T29311] process_scheduled_works+0xae1/0x17b0 [ 1696.336932][T29311] worker_thread+0x8a0/0xda0 [ 1696.344040][T29311] kthread+0x711/0x8a0 [ 1696.350280][T29311] ret_from_fork+0x4bc/0x870 [ 1696.357033][T29311] ret_from_fork_asm+0x1a/0x30 [ 1696.363960][T29311] SOFTIRQ-ON-R at: [ 1696.368187][T29311] lock_acquire+0x120/0x360 [ 1696.374847][T29311] _raw_read_lock+0x36/0x50 [ 1696.381518][T29311] __do_wait+0xde/0x740 [ 1696.387849][T29311] do_wait+0x1f8/0x510 [ 1696.394084][T29311] kernel_wait+0xab/0x170 [ 1696.400669][T29311] call_usermodehelper_exec_work+0xbe/0x230 [ 1696.408729][T29311] process_scheduled_works+0xae1/0x17b0 [ 1696.416432][T29311] worker_thread+0x8a0/0xda0 [ 1696.423182][T29311] kthread+0x711/0x8a0 [ 1696.429440][T29311] ret_from_fork+0x4bc/0x870 [ 1696.436191][T29311] ret_from_fork_asm+0x1a/0x30 [ 1696.443209][T29311] INITIAL USE at: [ 1696.447350][T29311] lock_acquire+0x120/0x360 [ 1696.453923][T29311] _raw_write_lock_irq+0xa2/0xf0 [ 1696.460934][T29311] copy_process+0x224f/0x3c00 [ 1696.467683][T29311] kernel_clone+0x21e/0x840 [ 1696.474260][T29311] user_mode_thread+0xdd/0x140 [ 1696.481123][T29311] rest_init+0x23/0x300 [ 1696.487357][T29311] start_kernel+0x3ae/0x410 [ 1696.493932][T29311] x86_64_start_reservations+0x24/0x30 [ 1696.501460][T29311] x86_64_start_kernel+0x143/0x1c0 [ 1696.508644][T29311] common_startup_64+0x13e/0x147 [ 1696.515653][T29311] INITIAL READ USE at: [ 1696.520224][T29311] lock_acquire+0x120/0x360 [ 1696.527320][T29311] _raw_read_lock+0x36/0x50 [ 1696.534339][T29311] __do_wait+0xde/0x740 [ 1696.541008][T29311] do_wait+0x1f8/0x510 [ 1696.547595][T29311] kernel_wait+0xab/0x170 [ 1696.554438][T29311] call_usermodehelper_exec_work+0xbe/0x230 [ 1696.562841][T29311] process_scheduled_works+0xae1/0x17b0 [ 1696.570906][T29311] worker_thread+0x8a0/0xda0 [ 1696.578003][T29311] kthread+0x711/0x8a0 [ 1696.584584][T29311] ret_from_fork+0x4bc/0x870 [ 1696.591674][T29311] ret_from_fork_asm+0x1a/0x30 [ 1696.599043][T29311] } [ 1696.601783][T29311] ... key at: [] tasklist_lock+0x18/0x40 [ 1696.609857][T29311] ... acquired at: [ 1696.613915][T29311] lock_acquire+0x120/0x360 [ 1696.618578][T29311] _raw_read_lock+0x36/0x50 [ 1696.623241][T29311] send_sigio+0x101/0x370 [ 1696.627729][T29311] dnotify_handle_event+0x169/0x440 [ 1696.633087][T29311] fsnotify+0x1671/0x1a80 [ 1696.637582][T29311] __fsnotify_parent+0x3fe/0x540 [ 1696.642692][T29311] vfs_writev+0x77d/0x960 [ 1696.647196][T29311] __se_sys_pwritev2+0x179/0x290 [ 1696.652306][T29311] do_syscall_64+0xfa/0xfa0 [ 1696.656977][T29311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.663034][T29311] [ 1696.665351][T29311] -> (&f_owner->lock){....}-{3:3} { [ 1696.670730][T29311] INITIAL USE at: [ 1696.674789][T29311] lock_acquire+0x120/0x360 [ 1696.681190][T29311] _raw_write_lock_irq+0xa2/0xf0 [ 1696.688028][T29311] __f_setown+0x67/0x370 [ 1696.694169][T29311] generic_setlease+0xd60/0x1240 [ 1696.701094][T29311] fcntl_setlease+0x3a2/0x4c0 [ 1696.707675][T29311] do_fcntl+0x6a9/0x1910 [ 1696.713829][T29311] __se_sys_fcntl+0xc8/0x150 [ 1696.720318][T29311] do_syscall_64+0xfa/0xfa0 [ 1696.726724][T29311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.734517][T29311] INITIAL READ USE at: [ 1696.739005][T29311] lock_acquire+0x120/0x360 [ 1696.745934][T29311] _raw_read_lock_irqsave+0xaf/0x100 [ 1696.753554][T29311] send_sigio+0x38/0x370 [ 1696.760131][T29311] kill_fasync+0x24d/0x4d0 [ 1696.766879][T29311] lease_break_callback+0x26/0x30 [ 1696.774244][T29311] __break_lease+0x6a2/0x1620 [ 1696.781284][T29311] do_dentry_open+0x8b7/0x13f0 [ 1696.788386][T29311] vfs_open+0x3b/0x340 [ 1696.794823][T29311] path_openat+0x2ee5/0x3830 [ 1696.801750][T29311] do_filp_open+0x1fa/0x410 [ 1696.809214][T29311] do_sys_openat2+0x121/0x1c0 [ 1696.816237][T29311] __x64_sys_openat+0x138/0x170 [ 1696.823423][T29311] do_syscall_64+0xfa/0xfa0 [ 1696.830264][T29311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.838494][T29311] } [ 1696.841153][T29311] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1696.850166][T29311] ... acquired at: [ 1696.854129][T29311] lock_acquire+0x120/0x360 [ 1696.858793][T29311] _raw_read_lock_irqsave+0xaf/0x100 [ 1696.864241][T29311] send_sigio+0x38/0x370 [ 1696.869162][T29311] kill_fasync+0x24d/0x4d0 [ 1696.873740][T29311] lease_break_callback+0x26/0x30 [ 1696.878941][T29311] __break_lease+0x6a2/0x1620 [ 1696.883798][T29311] do_dentry_open+0x8b7/0x13f0 [ 1696.888825][T29311] vfs_open+0x3b/0x340 [ 1696.893062][T29311] path_openat+0x2ee5/0x3830 [ 1696.897823][T29311] do_filp_open+0x1fa/0x410 [ 1696.902501][T29311] do_sys_openat2+0x121/0x1c0 [ 1696.907349][T29311] __x64_sys_openat+0x138/0x170 [ 1696.912369][T29311] do_syscall_64+0xfa/0xfa0 [ 1696.917048][T29311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.923106][T29311] [ 1696.925417][T29311] -> (&new->fa_lock){....}-{3:3} { [ 1696.930621][T29311] INITIAL USE at: [ 1696.934588][T29311] lock_acquire+0x120/0x360 [ 1696.940829][T29311] _raw_write_lock_irq+0xa2/0xf0 [ 1696.947496][T29311] fasync_remove_entry+0xf1/0x1c0 [ 1696.954249][T29311] lease_modify+0x1ca/0x3c0 [ 1696.960590][T29311] locks_remove_file+0x4bf/0xea0 [ 1696.967256][T29311] __fput+0x3ab/0xa70 [ 1696.972964][T29311] task_work_run+0x1d4/0x260 [ 1696.979289][T29311] exit_to_user_mode_loop+0xe9/0x130 [ 1696.986311][T29311] do_syscall_64+0x2bd/0xfa0 [ 1696.992642][T29311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.000255][T29311] INITIAL READ USE at: [ 1697.004653][T29311] lock_acquire+0x120/0x360 [ 1697.011311][T29311] _raw_read_lock_irqsave+0xaf/0x100 [ 1697.018755][T29311] kill_fasync+0x199/0x4d0 [ 1697.025331][T29311] lease_break_callback+0x26/0x30 [ 1697.032518][T29311] __break_lease+0x6a2/0x1620 [ 1697.039364][T29311] do_dentry_open+0x8b7/0x13f0 [ 1697.046390][T29311] vfs_open+0x3b/0x340 [ 1697.052631][T29311] path_openat+0x2ee5/0x3830 [ 1697.059381][T29311] do_filp_open+0x1fa/0x410 [ 1697.066045][T29311] do_sys_openat2+0x121/0x1c0 [ 1697.072882][T29311] __x64_sys_openat+0x138/0x170 [ 1697.079976][T29311] do_syscall_64+0xfa/0xfa0 [ 1697.086751][T29311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.094812][T29311] } [ 1697.097478][T29311] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1697.106234][T29311] ... acquired at: [ 1697.110117][T29311] lock_acquire+0x120/0x360 [ 1697.114785][T29311] _raw_read_lock_irqsave+0xaf/0x100 [ 1697.120235][T29311] kill_fasync+0x199/0x4d0 [ 1697.125336][T29311] __start_tty+0x189/0x220 [ 1697.129918][T29311] start_tty+0x2b/0x70 [ 1697.134144][T29311] n_tty_set_termios+0xa7c/0x1090 [ 1697.139344][T29311] tty_set_termios+0xda4/0x17e0 [ 1697.144382][T29311] set_termios+0x516/0x6c0 [ 1697.148970][T29311] tty_mode_ioctl+0x47e/0x740 [ 1697.153814][T29311] tty_ioctl+0x9c3/0xde0 [ 1697.158218][T29311] __se_sys_ioctl+0xfc/0x170 [ 1697.162975][T29311] do_syscall_64+0xfa/0xfa0 [ 1697.167644][T29311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.173699][T29311] [ 1697.176018][T29311] -> (&tty->flow.lock){....}-{3:3} { [ 1697.181307][T29311] INITIAL USE at: [ 1697.185186][T29311] lock_acquire+0x120/0x360 [ 1697.191253][T29311] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1697.198272][T29311] start_tty+0x20/0x70 [ 1697.203891][T29311] n_tty_set_termios+0xa7c/0x1090 [ 1697.210474][T29311] tty_set_termios+0xda4/0x17e0 [ 1697.216886][T29311] set_termios+0x516/0x6c0 [ 1697.223026][T29311] tty_mode_ioctl+0x47e/0x740 [ 1697.229249][T29311] tty_ioctl+0x9c3/0xde0 [ 1697.235220][T29311] __se_sys_ioctl+0xfc/0x170 [ 1697.241387][T29311] do_syscall_64+0xfa/0xfa0 [ 1697.247448][T29311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.254899][T29311] } [ 1697.257388][T29311] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 1697.266057][T29311] ... acquired at: [ 1697.269844][T29311] lock_acquire+0x120/0x360 [ 1697.274505][T29311] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1697.279867][T29311] stop_tty+0x2f/0x150 [ 1697.284094][T29311] kbd_event+0x2b6f/0x3f70 [ 1697.288672][T29311] input_handle_events_default+0xd4/0x1a0 [ 1697.294574][T29311] input_pass_values+0x285/0x890 [ 1697.299678][T29311] input_event_dispose+0x330/0x6b0 [ 1697.304970][T29311] input_inject_event+0x1dd/0x340 [ 1697.310158][T29311] evdev_write+0x2fc/0x480 [ 1697.314738][T29311] vfs_write+0x27b/0xb30 [ 1697.319143][T29311] ksys_write+0x145/0x250 [ 1697.323633][T29311] do_syscall_64+0xfa/0xfa0 [ 1697.328298][T29311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.334359][T29311] [ 1697.336665][T29311] [ 1697.336665][T29311] stack backtrace: [ 1697.342535][T29311] CPU: 0 UID: 0 PID: 29311 Comm: syz.4.6453 Not tainted syzkaller #0 PREEMPT(full) [ 1697.342554][T29311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1697.342565][T29311] Call Trace: [ 1697.342573][T29311] [ 1697.342580][T29311] dump_stack_lvl+0x189/0x250 [ 1697.342600][T29311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1697.342617][T29311] ? __pfx__printk+0x10/0x10 [ 1697.342636][T29311] validate_chain+0x1f05/0x2140 [ 1697.342664][T29311] __lock_acquire+0xab9/0xd20 [ 1697.342682][T29311] ? stop_tty+0x2f/0x150 [ 1697.342697][T29311] lock_acquire+0x120/0x360 [ 1697.342711][T29311] ? stop_tty+0x2f/0x150 [ 1697.342731][T29311] ? __lock_acquire+0xab9/0xd20 [ 1697.342749][T29311] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1697.342768][T29311] ? stop_tty+0x2f/0x150 [ 1697.342781][T29311] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1697.342801][T29311] ? atomic_notifier_call_chain+0x26/0x180 [ 1697.342823][T29311] stop_tty+0x2f/0x150 [ 1697.342838][T29311] kbd_event+0x2b6f/0x3f70 [ 1697.342860][T29311] ? __pfx_kbd_event+0x10/0x10 [ 1697.342878][T29311] ? look_up_lock_class+0x74/0x170 [ 1697.342901][T29311] ? __lock_acquire+0xab9/0xd20 [ 1697.342918][T29311] ? do_raw_spin_lock+0x121/0x290 [ 1697.342944][T29311] ? do_raw_spin_unlock+0x122/0x240 [ 1697.342968][T29311] ? __lock_acquire+0xab9/0xd20 [ 1697.342986][T29311] ? input_pass_values+0x8d/0x890 [ 1697.343007][T29311] ? input_pass_values+0x8d/0x890 [ 1697.343029][T29311] input_handle_events_default+0xd4/0x1a0 [ 1697.343055][T29311] ? input_pass_values+0x8d/0x890 [ 1697.343076][T29311] input_pass_values+0x285/0x890 [ 1697.343098][T29311] ? input_handle_event+0x70c/0xf30 [ 1697.343117][T29311] input_event_dispose+0x330/0x6b0 [ 1697.343135][T29311] input_inject_event+0x1dd/0x340 [ 1697.343153][T29311] ? input_inject_event+0xb6/0x340 [ 1697.343172][T29311] evdev_write+0x2fc/0x480 [ 1697.343193][T29311] ? futex_private_hash_put+0x245/0x280 [ 1697.343216][T29311] ? __pfx_evdev_write+0x10/0x10 [ 1697.343239][T29311] ? bpf_lsm_file_permission+0x9/0x20 [ 1697.343258][T29311] ? security_file_permission+0x75/0x290 [ 1697.343277][T29311] ? rw_verify_area+0x255/0x4d0 [ 1697.343297][T29311] ? __lock_acquire+0xab9/0xd20 [ 1697.343312][T29311] ? __pfx_evdev_write+0x10/0x10 [ 1697.343334][T29311] vfs_write+0x27b/0xb30 [ 1697.343359][T29311] ? __pfx_vfs_write+0x10/0x10 [ 1697.343380][T29311] ? __fget_files+0x2a/0x420 [ 1697.343395][T29311] ? __fget_files+0x2a/0x420 [ 1697.343409][T29311] ? __fget_files+0x3a0/0x420 [ 1697.343422][T29311] ? __fget_files+0x2a/0x420 [ 1697.343439][T29311] ksys_write+0x145/0x250 [ 1697.343461][T29311] ? __pfx_ksys_write+0x10/0x10 [ 1697.343484][T29311] ? do_syscall_64+0xbe/0xfa0 [ 1697.343505][T29311] do_syscall_64+0xfa/0xfa0 [ 1697.343524][T29311] ? lockdep_hardirqs_on+0x9c/0x150 [ 1697.343543][T29311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.343560][T29311] ? clear_bhb_loop+0x60/0xb0 [ 1697.343578][T29311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.343594][T29311] RIP: 0033:0x7f688698eec9 [ 1697.343611][T29311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1697.343626][T29311] RSP: 002b:00007f688776c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1697.343644][T29311] RAX: ffffffffffffffda RBX: 00007f6886be5fa0 RCX: 00007f688698eec9 [ 1697.343657][T29311] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000007 [ 1697.343669][T29311] RBP: 00007f6886a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1697.343680][T29311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1697.343691][T29311] R13: 00007f6886be6038 R14: 00007f6886be5fa0 R15: 00007f6886d0fa28 [ 1697.343710][T29311] [ 1697.747875][ T5907] usb 1-1: USB disconnect, device number 105 [ 1697.831569][ T5894] IPVS: starting estimator thread 0... [ 1697.840041][T29311] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1697.945160][T29315] IPVS: using max 78 ests per chain, 187200 per kthread [ 1698.065414][ T10] usb 6-1: 0:2 : does not exist [ 1698.079099][ T10] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1698.099809][ T10] usb 6-1: USB disconnect, device number 49 [ 1698.107419][ T9] usb 2-1: 0:2 : does not exist [ 1698.116554][ T9] usb 2-1: USB disconnect, device number 125 [ 1698.137251][T16721] udevd[16721]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1698.172457][T27543] udevd[27543]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory