last executing test programs: 1m46.272605082s ago: executing program 1 (id=1371): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m42.782725506s ago: executing program 1 (id=1382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000400)=0x2, 0x4) r2 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000540)={0x2, 0x100, 0x7, {0x9, 0xffffffff, 0x8, 0x4}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028ff0100ffdbdf25020000000900010073797a32000000001400020073797a42606c6c657231000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5330, 0x7fff, 0x5, 0xc, 0x1, 0x9, 0x1, 0x8000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$SNDCTL_TMR_METRONOME(r1, 0x40045407) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00022dbd7000fcdbdf2509000000240009800800010007000000080002000500000008000100020000000800010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x804) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20200) r10 = socket$inet(0xa, 0x801, 0x84) connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt(r10, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) listen(r10, 0x8) accept4$inet(r10, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1m41.108246387s ago: executing program 1 (id=1390): connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x400900, 0x64) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) (fail_nth: 5) 1m39.982210494s ago: executing program 1 (id=1391): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x1010480, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r1, 0x10c}, {r1, 0x4208}], 0x2, &(0x7f0000000100)={r2, r3+10000000}, 0x0, 0x0) write$vga_arbiter(r1, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r1, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8000000, 0x2, 0x8000000000000001, 0x0, 0x0, 0x4}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r4, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000040)=0x7738, 0x4) 1m39.029082103s ago: executing program 1 (id=1394): syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x3, 0xf0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x40, 0x92}, [@feature_unit={0xd, 0x24, 0x6, 0x5, 0x6, 0x3, [0x5, 0x5, 0x7], 0xff}, @processing_unit={0xc, 0x24, 0x7, 0x6, 0x3, 0x0, '\x00\x00\x00\x00\x00'}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x1, 0x0, 0x1, 0x0, 0x6}, @output_terminal={0x9, 0x24, 0x3, 0x9, 0x302, 0x3, 0x1, 0xf7}, @selector_unit={0x6, 0x24, 0x5, 0x1, 0x0, "80"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x0, 0x7, {0x7, 0x25, 0x1, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x5, 0x0, {0x7, 0x25, 0x1, 0xc2, 0xa, 0x7}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 1m38.462897993s ago: executing program 1 (id=1397): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 1m37.286180103s ago: executing program 32 (id=1397): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 13.285482534s ago: executing program 2 (id=1652): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x3f8, 0xffffffff, 0x98, 0x2b0, 0x98, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@uncond, 0x287, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@empty, [], @ipv6=@private0}, {@ipv6=@private1, [], @ipv6=@local}, {@ipv4=@dev, [], @ipv4=@private}, {@ipv4=@remote, [], @ipv4=@empty}], 0xb}}, @common=@icmp={{0x28}, {0x0, "e2fa"}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000e76a14661240678a62d1de33d0000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='f2fs_fiemap\x00', r1, 0x0, 0x3}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffdec) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='pids.current\x00', 0x26e1, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7dd8, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0xfffffffffffffffd) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100004b41460860163209ea8001020301090212000100000000090400000005100f001ecaa4248fb9c8eb5ce8894034f149fa61aaec7699a75b787df02a74"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010004200000000000000b0000000c000580040001"], 0x20}}, 0x0) read(r4, 0x0, 0xffffff0c) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$autofs(0xffffffffffffff9c, 0x0, 0x600802, 0x0) accept$packet(r2, 0x0, &(0x7f0000000240)) 11.536573577s ago: executing program 5 (id=1655): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x680000, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmsg$nl_netfilter(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[], 0xffffff70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) recvmmsg(r5, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000900), 0x3}, 0x17ba}], 0x1e, 0x2000, 0x0) r6 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(r6, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002480)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) syz_usb_control_io$printer(r6, 0x0, 0x0) io_setup(0x2, &(0x7f00000000c0)) 10.751203203s ago: executing program 3 (id=1659): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) syz_open_dev$sndmidi(0x0, 0x1, 0x40503) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f830ffffb702000008000000b7030000ffff000085000000"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @sack_perm, @timestamp, @window={0x3, 0xf9, 0x2}, @mss={0x2, 0xb8c}, @mss={0x2, 0x8}], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000400)="001d71d52a3879c9c7649475728f8a25a071a59c20c131e0364e8828e50cfb69d0561b1bf87522000e42847c81695082fb23c905f5713aa8cadb181f50020730a3af1cb5a2ec28f6a78f19956ad27fa369f8adf71664f8eaff", 0x59, 0x4044000, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x111, 0x4b4, 0x160, 0xd4feffff, 0x250, 0x20a, 0x278, 0x250, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x128, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'wg0\x00', {0x10, 0x9, 0x1004, 0x4, 0x6, 0x140, 0x4, 0x80, 0x78}, {0x2}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xffff, 0xfc}, {0xffffffffffffffff, 0xfe}, 0x3, 0x80000001}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {0x10000000}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 9.116186494s ago: executing program 3 (id=1662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind(r1, &(0x7f00000003c0)=@ieee802154={0x24, @short={0x2, 0x1, 0xaaa1}}, 0xfffffffffffffd72) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x24044884) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000440)="f2dd0c7e0715d164023b13fa", 0xc}], 0x1}}], 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa}) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x3, 0x1, 0x0, 0x2}, {0xa000, 0x6, 0x0, 0xda}, {0x101, 0x9, 0x1, 0x7}]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x2000, 0x4, 0xffffffffffffffff}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 9.072568271s ago: executing program 2 (id=1663): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb004800004800000007000000040000000500009301000000010000000900000000d22a0000030000000e00000001000000e700000002000007000000090000000461df80a966cd5e74d0541243e2cca1cf93eb0000000070a593f370f9d406eebcbaeff72c94174600"/119], &(0x7f0000000c40)=""/3, 0x67, 0x3, 0x1, 0x1, 0x0, @void, @value}, 0x28) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x3, 0x4, 0x205, 0x8, 0x8, 0x0, 0x9, 0x4, r3}, 0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r3, 0xffff, 0x3}, &(0x7f00000000c0)=0x8) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) 8.143567237s ago: executing program 2 (id=1665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000e80)={{0x2, 0xfffffdfb, 0x0, 0xf10f, 0xffffffff, 0xfffff592}, 0x1fe, [0x9, 0x7, 0x931, 0x4, 0x5, 0x9, 0xc, 0x0, 0x1, 0x4, 0x1, 0xfffffffa, 0x2, 0x8, 0x8dac, 0xc, 0xea92, 0x9, 0x1, 0x800, 0x7, 0x80000001, 0x9, 0x59b6, 0x0, 0x753, 0x10001, 0xe1, 0xbc, 0x3, 0x200, 0x1, 0x8, 0x6, 0x5, 0x553, 0x3, 0x4, 0x8, 0x5, 0x4, 0x0, 0x0, 0x60, 0x7, 0x3, 0x4971bbd1, 0x80000001, 0x8, 0xfffffffc, 0x8, 0xfffffffb, 0x1, 0x3, 0x9, 0x8001, 0x1, 0x2, 0x81, 0x1, 0x7, 0x6, 0x1, 0x1000, 0x9, 0x3, 0xf7, 0x4fd, 0x87a, 0x2, 0x5, 0xe, 0x2, 0x8, 0x20000, 0x9, 0x1, 0xfc, 0x5, 0x3, 0x0, 0x9, 0x3, 0x5, 0x4, 0xffff7fff, 0x0, 0x5, 0xafc, 0x1, 0x25, 0xfffffff7, 0xfffffe01, 0x8, 0xd, 0x101d, 0x40, 0x3, 0xe150, 0x8000, 0x6, 0x7, 0x0, 0x7fffffff, 0x4, 0x4, 0x0, 0x70, 0x8, 0x0, 0x0, 0x1000, 0x8, 0x3, 0x8b3, 0xaa, 0x5, 0x8, 0xad7, 0x1e58, 0x6, 0xfd3, 0x7, 0x837, 0x0, 0x7, 0x8ac, 0x3650, 0x3, 0x7, 0x10, 0x4, 0x5, 0x5, 0x8, 0x0, 0x4800, 0x1, 0x59, 0x3, 0x6, 0x495d, 0x1, 0x1, 0x7fff, 0xffff, 0x5, 0x13142430, 0x4b5, 0x3ff, 0x8, 0x8001, 0x1, 0x9, 0x6, 0x0, 0x10, 0x0, 0xc5b, 0x8, 0x80, 0x2, 0x6, 0x3, 0x6, 0x9, 0x9, 0xfff, 0x7, 0x3, 0x919, 0xfff, 0x7, 0xfffff68c, 0x4, 0xa, 0x2, 0x4, 0x1, 0x87f3, 0x80000000, 0x200, 0x0, 0xff, 0x3, 0x7, 0x1, 0x100, 0x7e, 0x2, 0x4, 0xffff, 0x8, 0x5, 0x40, 0x333, 0x7, 0x8, 0x80, 0x0, 0x0, 0x200, 0xdd3, 0x7, 0x8, 0x42cc, 0xd, 0x7, 0x3, 0x1000, 0x6, 0x55b, 0x7, 0x20, 0x80000000, 0x1, 0x1000, 0x28000, 0x1, 0x6, 0x2, 0x3, 0x6, 0x8, 0x8, 0xee6, 0x5, 0x20e7, 0x3, 0x7f, 0x4da, 0x6, 0x10, 0x4, 0x3, 0xfffffff9, 0x7, 0xaf1b, 0xf9, 0xf500, 0x8, 0x101, 0x5f, 0x8000, 0x80, 0xe9, 0x2, 0x1, 0x9, 0x0, 0x0, 0x8, 0x1, 0x9, 0x48000, 0x2, 0x3ff, 0xffffffff, 0x8, 0x80000000, 0x6, 0x1, 0x7, 0x7, 0xca, 0x7, 0x6, 0xd1, 0x8, 0x9, 0x7, 0xe8dd, 0x40, 0x6, 0x9, 0x9440, 0x3, 0x0, 0x2, 0x80000001, 0x2, 0x1ff, 0xfffff6c8, 0x4, 0x553f, 0x8, 0x3, 0x4, 0xffffffff, 0x0, 0xfff, 0x4, 0x1, 0x3ff, 0x9, 0x1, 0x503d, 0x4, 0x7, 0x5, 0x4, 0x9, 0x0, 0x7, 0x5, 0x3, 0x9, 0x48c8, 0x9, 0x2, 0x81, 0x1000, 0x5, 0x6, 0x2, 0x3, 0x8000, 0xfef, 0x7f, 0x3, 0xe4e8, 0xffffff1d, 0x8000, 0x2, 0x26, 0xc54, 0x5, 0xffffffff, 0x8000, 0x6, 0x3b, 0x5, 0x4b8, 0x7, 0x77, 0xabe2, 0x7ff, 0x6, 0x9, 0x0, 0x8, 0xa, 0x80, 0x9, 0x1, 0xb1, 0xfffffbff, 0x8, 0x6, 0x7, 0x3, 0x2, 0x7, 0x800, 0x32570fc6, 0x401, 0x8, 0x3ff, 0x9, 0x7, 0xffff, 0x8000, 0x8, 0xfffffffe, 0x1, 0x3, 0x2000000, 0xfe, 0xffff, 0x2, 0x3, 0x2, 0x2, 0x2, 0x7, 0x56, 0x3, 0x8, 0x8000, 0x1, 0x8, 0x1, 0x5, 0x0, 0x3ff, 0x3, 0x0, 0x9, 0x6, 0xa, 0x7d, 0x5e, 0x99, 0x7, 0xf526, 0x7, 0x0, 0x7, 0x5, 0x574a, 0x9, 0x6, 0xfffffc00, 0x3, 0xd9e, 0x10, 0x10001, 0x7f, 0xf, 0x2, 0xe83, 0x9, 0x4, 0x4, 0xf, 0xff, 0x400, 0xfff, 0x5, 0x7f, 0x3, 0x80000001, 0xffffffff, 0x3, 0x5, 0x2, 0x401, 0x98e0, 0x8, 0xfffffff3, 0x8, 0x0, 0x3, 0x0, 0x3241, 0x6, 0x1, 0x7, 0x4, 0x2, 0x436b8895, 0x1, 0x6, 0x3, 0x3ff, 0x4, 0x6, 0x5, 0x0, 0x10001, 0xe, 0x9, 0x8, 0x4ae998f6, 0x0, 0x6, 0x3, 0x8, 0x346, 0x9ff2, 0x8000, 0x8, 0x34, 0x9c, 0x12000000, 0x2, 0x8000, 0x3, 0x1, 0xffff9818, 0x5, 0x9, 0x6, 0x7, 0x4f9, 0x7, 0xfffffffa, 0x5, 0x1, 0x7, 0x6, 0x4, 0x3, 0x100, 0x7, 0x80000000, 0x5, 0x8, 0x3, 0x6b9, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x9, 0x3ff, 0x1, 0x13, 0x7fff, 0xcd, 0x0, 0xeddd, 0x0, 0xf, 0x52, 0x0, 0xf00, 0x5, 0xb, 0x3712, 0x5, 0x3, 0x0, 0x0, 0x5, 0x7, 0x2, 0x8, 0x7, 0x8cc9, 0x3, 0x6, 0x80000000, 0x3, 0x49f4c108, 0x8, 0x7143, 0xfff, 0x6, 0x5, 0xbed4, 0x3, 0x0, 0x1bc, 0x4471, 0x5, 0x1, 0xfc7b, 0x2, 0x6c1, 0x9, 0x5ff, 0x8, 0x101, 0x8, 0x8001, 0xdeaf, 0x6, 0x3, 0x6, 0x75, 0x3, 0x63, 0xd5, 0xb, 0x401, 0xb, 0x3ff, 0x3f5, 0x2, 0x9, 0x401, 0x9, 0x950e, 0x9, 0xd0, 0x3, 0x80, 0x4, 0x8, 0x4, 0xfff, 0x87, 0x9, 0x2, 0xffff, 0x8, 0x6, 0xfffffff7, 0x10, 0x8, 0x5, 0x1, 0xb, 0x1, 0x0, 0x4, 0x4, 0xc, 0x7, 0x0, 0x2, 0x57b492d5, 0x7, 0x6, 0x6, 0x3ff, 0x22, 0x3, 0x7, 0x2, 0x2, 0x9, 0x4, 0xd2b, 0xff, 0x6, 0x6, 0x3, 0x0, 0x401, 0x6, 0x6, 0xd7d, 0x9, 0x5, 0x3ff, 0x101, 0xad4, 0x0, 0x1f73, 0x1, 0x8000, 0x7, 0xb, 0x2, 0x4, 0x0, 0x7, 0x6, 0x9, 0x9, 0xc8e4, 0x5, 0x2, 0x4, 0x6, 0x5, 0x5, 0x9, 0x5, 0x3, 0x1ff, 0x9, 0x4, 0x0, 0xf, 0x4, 0x2, 0x10, 0x8001, 0xb7a, 0x120, 0x9, 0x8, 0xffffff7f, 0x400, 0x2, 0x4, 0xc, 0x9, 0x0, 0x8000, 0x10000, 0x7fff, 0x3, 0x4, 0x0, 0x1, 0xe, 0x1, 0x5, 0x7, 0x0, 0x3ab, 0xffff8000, 0x0, 0x8ed, 0xedd7, 0x2, 0x7fe, 0x7, 0x401, 0x9, 0x5, 0x2, 0x6, 0x8, 0x2, 0x7, 0x4, 0x7fffffff, 0x2, 0xffffff81, 0x1, 0x5, 0x9, 0x2, 0x7, 0xc, 0xfffffff7, 0x97b3, 0x0, 0x8b, 0x6, 0x3, 0xe, 0x1c4c, 0x80000000, 0x465, 0x7, 0x401, 0x40, 0x80, 0xb, 0x65, 0x4, 0x2, 0x4, 0x80000000, 0x7, 0x101, 0x4, 0x7, 0x1, 0x40, 0x6, 0x400, 0xc93, 0xffff, 0x2, 0x8, 0x2cb, 0x1000, 0xffffffff, 0x3, 0xb5, 0x8001, 0x8, 0x8000, 0x2, 0x2, 0x8, 0x4, 0x4, 0x3, 0x5, 0x7a, 0x7fffffff, 0xb, 0xfffffff7, 0x1, 0x9, 0xc, 0x2, 0x1, 0x0, 0x404, 0x8000, 0x0, 0xff, 0x1, 0x2, 0x6, 0x6, 0x4, 0x5, 0x1, 0x2, 0x2, 0x9, 0x101, 0x9, 0x0, 0x9, 0x401, 0x4, 0x2, 0x3, 0x8, 0x0, 0x6, 0x1, 0x3, 0x9, 0x8001, 0x0, 0x4, 0x100, 0x9ce2, 0x2, 0xe81, 0x401, 0x3d43, 0x0, 0x9, 0x5, 0x80, 0xffff, 0x400, 0xffffffff, 0x1, 0x9, 0x80000001, 0x33, 0x8001, 0x6112, 0x4, 0xa, 0xb57, 0xad4, 0x2400, 0x1, 0x8, 0x7, 0x0, 0x2, 0x96a, 0x0, 0x9, 0x44, 0xfffffffc, 0x5, 0x7, 0x2, 0x7, 0x5fcd9df3, 0x7fffffff, 0x2, 0xfffffff7, 0x7fff, 0x80000000, 0x1ff, 0x1ff, 0x7, 0x8, 0x5, 0x9, 0x8, 0x8, 0x2, 0x0, 0x5, 0x3, 0x6, 0x800, 0x9, 0x100, 0xb, 0x8, 0x8, 0x2, 0x2, 0x1000, 0x2, 0x1, 0x1, 0x8f, 0x401, 0xfffff000, 0x6, 0x8, 0x20000000, 0x1, 0x7, 0x3, 0x6, 0x5, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x4, 0x1, 0x40000, 0x410b, 0xbbeb, 0x6, 0x7, 0xdd0, 0x100, 0x7, 0x9, 0x2, 0x1, 0x100, 0x6, 0x200000, 0x40e8, 0x8, 0x792, 0x2, 0x6, 0x2, 0x3, 0x9, 0x5, 0x9, 0x7, 0x40000000, 0x9, 0x8, 0x8001, 0x2, 0x9, 0x3, 0x6a4, 0x1000, 0x2, 0x4, 0x8, 0x8, 0x80000001, 0x9, 0x9, 0x9000, 0x4297, 0xa4e, 0x8, 0x8001, 0x9, 0x5, 0x4, 0xc4, 0xc, 0x7, 0x1, 0x101, 0xe5d5, 0x4, 0x3ff, 0x4, 0x5, 0x81, 0x6, 0xe, 0x0, 0x5, 0xb, 0x4, 0x9, 0x1, 0x2, 0x6, 0xffff6d4a, 0x847, 0x4, 0x3ff, 0x421, 0x3, 0x2, 0xfffff001, 0x2, 0x35, 0x1, 0xfffffff7, 0xc, 0x5, 0xf, 0xffffffff, 0xb5f, 0x2, 0xf, 0x1, 0x8, 0x8, 0x7f, 0x4, 0xfffffffe, 0x2a, 0xffffff9d, 0xfffffff8, 0x1ff, 0x0, 0x4, 0x7, 0x80000000, 0xabdf, 0x2, 0x91, 0x9, 0x9, 0x301, 0xd, 0x1, 0x8, 0x7, 0x7, 0x40, 0x3, 0x0, 0x9, 0x6, 0x6, 0x6, 0x5fffffd, 0x100, 0x6, 0x3, 0x4, 0x1, 0x3, 0x0, 0x1, 0x7, 0x1, 0x2, 0xfffffffa, 0x3ff, 0x5, 0x7, 0x1, 0x7808, 0x6d76, 0x400, 0x1, 0x1, 0x0, 0xfffffff5, 0xd, 0x0, 0x9]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$peek(0x1, r3, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x11a) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac000904000001070000090905", @ANYBLOB="980e2d2e604b5f"], 0x0) 7.973316917s ago: executing program 5 (id=1666): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) syz_usb_connect(0x5, 0x164, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007af28810d30b55055b000000000109025201010000000009044000000e01000008240679e6549f558789f1a16d927c472d346a3e294d"], 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005080)=[{{&(0x7f00000000c0), 0x6e, &(0x7f0000001580)=[{&(0x7f00000001c0)=""/114, 0x72}, {&(0x7f0000000240)=""/144, 0x90}, {&(0x7f0000000300)=""/164, 0xa4}, {&(0x7f0000005240)=""/4097, 0x1001}, {&(0x7f00000013c0)=""/108, 0x6c}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f00000003c0)=""/13, 0xd}, {&(0x7f0000001480)=""/211, 0xd3}], 0x8, &(0x7f0000001600)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000001700), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001780)}], 0x1, &(0x7f0000001800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000002c00)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/184, 0xb8}, {&(0x7f0000002a40)=""/38, 0x26}, {&(0x7f0000002a80)=""/210, 0xd2}, {&(0x7f0000002b80)=""/99, 0x63}], 0x5, &(0x7f0000002c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000002d40), 0x6e, &(0x7f0000003300)=[{&(0x7f0000002dc0)=""/216, 0xd8}, {&(0x7f0000002ec0)}, {&(0x7f0000002f00)=""/204, 0xcc}, {&(0x7f0000003000)=""/64, 0x40}, {&(0x7f0000003040)=""/146, 0x92}, {&(0x7f0000003100)=""/142, 0x8e}, {&(0x7f00000031c0)=""/242, 0xf2}, {&(0x7f00000032c0)=""/25, 0x19}], 0x8}}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f0000003380)=""/247, 0xf7}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/35, 0x23}, {&(0x7f00000044c0)=""/69, 0x45}, {&(0x7f0000004540)=""/231, 0xe7}], 0x5}}, {{&(0x7f00000046c0)=@abs, 0x6e, &(0x7f0000004b80)=[{&(0x7f0000004740)=""/241, 0xf1}, {&(0x7f0000004840)=""/160, 0xa0}, {&(0x7f0000004900)=""/233, 0xe9}, {&(0x7f0000004a00)=""/215, 0xd7}, {&(0x7f0000004b00)=""/83, 0x53}], 0x5}}, {{&(0x7f0000004c00)=@abs, 0x6e, &(0x7f0000004f40)=[{&(0x7f0000004d40)=""/6, 0x6}, {&(0x7f0000004e00)=""/50, 0x32}, {&(0x7f0000004e40)=""/50, 0x32}, {&(0x7f0000004e80)=""/2, 0x2}, {&(0x7f0000004ec0)=""/88, 0x58}], 0x5, &(0x7f0000004fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}], 0x7, 0x0, 0x0) 7.058825613s ago: executing program 4 (id=1669): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009690342058200510f6b50102030109021b00020000000009043d0000518e3f00090462"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000fc0)='contention_end\x00', r1}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ff8}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xf7}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.885196285s ago: executing program 3 (id=1670): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, &(0x7f0000000080)={0x0, 0x2, 0x2, {0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="00150100000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.67233705s ago: executing program 0 (id=1671): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000001000000002000040"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x10002, 0x2, 0x2, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES16=r0]) r3 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x37, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 5.618525795s ago: executing program 5 (id=1672): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x22c}}, 0x0) 5.544649322s ago: executing program 0 (id=1673): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='kfree\x00', r1}, 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x24, 0x12, 0xa01, 0x70bd28, 0x0, {0xa}, [@generic="e4436c1236e7d0f5795c1ae66f"]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a32000000006c000000060a010400000000000000000100000208000b400000000050000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000180001800c00010062697477697365000800028001"], 0xe0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x9, 0x5}, 0xc) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x248) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='mpol=`tfault:,\x00']) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x9, 0x3, 0x390, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@hl={{0x28}, {0x3, 0x3b}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "0935a22b198546402d11db7c60ae51f18094b711bf408d0b2f67b3b7b8cc"}}, {{@uncond, 0x0, 0x120, 0x188, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e20, 0x4e20], [0x4e23, 0x4e21], 0xd, 0x6, 0x69bf, 0x5}}, @common=@hbh={{0x48}, {0x3, 0xe, 0x0, [0xff, 0x5, 0x7, 0xa3, 0x5, 0x7, 0xfff7, 0x1, 0xd3, 0x4, 0x7ff, 0x9, 0xffff, 0x4, 0xd4f, 0x101], 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x7, 0xfff, 0x3, 'syz1\x00', 'syz1\x00', {0x7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) r12 = openat$cgroup_ro(r11, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000200)=0x1, 0x12) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000bc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4e8, 0xe8, 0x0, 0x1a8, 0x390, 0x2a0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, &(0x7f00000000c0), {[{{@ip={@private=0xa010100, @local, 0x0, 0xffffff00, 'veth1_to_bond\x00', 'ip6gretap0\x00', {}, {}, 0xff, 0x3, 0x31}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "61fe", 0x1}}, @common=@ttl={{0x28}, {0x3, 0x2}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x6, 0x3}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @local, 0x0, 0xff000000, 'ip6gre0\x00', 'erspan0\x00', {0xff}, {}, 0x2e, 0x2, 0x20}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4, 0x1, 0x5, 0x5, 0x5], 0x1, 0x4}, {0x1, [0x2, 0x5, 0x4, 0x2, 0x2, 0x5], 0x4, 0x6}}}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xb, 0x2}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x6, @rand_addr=0x64010102, 0x4e20}}}, {{@ip={@multicast2, @empty, 0xff000080, 0x0, 'vlan0\x00', 'macvlan0\x00', {}, {0xff}, 0x16, 0x4, 0x10}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 5.509188636s ago: executing program 5 (id=1674): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) syz_open_dev$sndmidi(0x0, 0x1, 0x40503) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f830ffffb702000008000000b7030000ffff000085000000c800000095"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000400)="001d71d52a3879c9c7649475728f8a25a071a59c20c131e0364e8828e50cfb69d0561b1bf87522000e42847c81695082fb23c905f5713aa8cadb181f50020730a3af1cb5a2ec28f6a78f19956ad27fa369f8adf71664f8eaff", 0x59, 0x4044000, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x111, 0x4b4, 0x160, 0xd4feffff, 0x250, 0x20a, 0x278, 0x250, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x128, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'wg0\x00', {0x10, 0x9, 0x1004, 0x4, 0x6, 0x140, 0x4, 0x80, 0x78}, {0x2}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xffff, 0xfc}, {0xffffffffffffffff, 0xfe}, 0x3, 0x80000001}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {0x10000000}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 4.291725614s ago: executing program 4 (id=1675): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb004800004800000007000000040000000500009301000000010000000900000000d22a0000030000000e00000001000000e700000002000007000000090000000461df80a966cd5e74d0541243e2cca1cf93eb0000000070a593f370f9d406eebcbaeff72c94174600"/119], &(0x7f0000000c40)=""/3, 0x67, 0x3, 0x1, 0x1, 0x0, @void, @value}, 0x28) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x3, 0x4, 0x205, 0x8, 0x8, 0x0, 0x9, 0x4, r3}, 0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r3, 0xffff, 0x3}, &(0x7f00000000c0)=0x8) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) 4.161280074s ago: executing program 5 (id=1676): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x680000, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmsg$nl_netfilter(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[], 0xffffff70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) recvmmsg(r5, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000900), 0x3}, 0x17ba}], 0x1e, 0x2000, 0x0) r6 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(r6, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002480)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) syz_usb_control_io$printer(r6, 0x0, 0x0) io_setup(0x2, &(0x7f00000000c0)) 3.277996591s ago: executing program 0 (id=1677): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.277460103s ago: executing program 4 (id=1678): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b7, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) munmap(&(0x7f00001f6000/0x3000)=nil, 0x3000) getgid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x81) 2.777660675s ago: executing program 2 (id=1679): setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x8, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) 2.692841202s ago: executing program 3 (id=1680): socket(0x1e, 0x805, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.609740208s ago: executing program 0 (id=1681): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) sendmmsg(r2, &(0x7f0000000600)=[{{&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x1, 0x1, 0x0, 0x4}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000280)="adcb81a67cbc4d2a417aa740f2ffbe2ed4069d8fb57e23a965f4cbc5de6c4efc3324a21b4c6531f11df73345a62b4ca085164778ee3f9a6093a8ee26ec15c356c5f05b4e8ed1580c1d0badc59fbe174fac4d4d876207527eb083479e5ce3f6084a6a9831133839b38eb4cc", 0x6b}], 0x1, &(0x7f0000000d40)=[{0x1010, 0x10c, 0x498f, "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"}, {0x98, 0x6, 0x8, "d1a1ce0c28a233ee31654f4eb5c84b2dc42cab061447591dfeb955e71a4f9b24d72d34b9abdcca61d224884e606fb45ced5e11fc3c90fa515b2e3172a78bdfdf7ebec3b10a36a55b2e0b99f38e9366a8a7075e63e08c3b938813c73cdb5057f20510a2687b8f3d34282b48c2845248320b37bd44bfbeb961fc926c383c462931e2f75a"}, {0x68, 0x117, 0x4, "329e536ec2c207596a018b7aa40d067b4be735cb1f35fc73e0321fe9f80f1bc93f7d45bdde803498760aa88afd601d004cef2bc39cf927ded60d2c466882e389dcaaffbf5dd49eec4a9386ade92381cd6acffcde"}, {0xc8, 0x84, 0xf7, "ed338e8e56154938ddd688d20be98fe1a7c6993f47ca4abfd813e87657d0adabc5239e0f9c4757844bc172dafc566ce1b6c1f0ae5538a280f882d0f0ea9b8e128efe1d7d84dd0203bd52ae67c8a3f37654d25077aebb8d40bcec04bb2b7668923f01c65cbc1c9d95922c8ea6d457323885907d29c1a3160bbe1bf3eb86317a2365dacb799ce322fb49da0da866f044b132a92ba9a72a53d2025804afbe0bfcc19fc80b2c233dcfc6ab70a88ded1dd4d21d2c55cdf9"}], 0x11d8}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)="72bb7bb74142fecd2d4d596d7e336129a9486bdea0ad3c3310ca70cb8bd299ab4bbcca2ced90d43548626396bfdc423903f3c5b6594aeba145cdc6a603c0a54066368d95b27f29ded7602261c3ccc0bf1bb155e0d5e67432e54f60863fe9793d9c3bd4cda432a38f2249910d13f5e92dfd7b139bc72c7605dd7b7af190438b2785e8a3f9d9ea8ba23bdf978a6636c73d4b24133365", 0x95}, {&(0x7f0000000400)="5ef85e0eebb8d7036d9c0e08aa91f5a5da1f1b0198e4646bd79fba374d14", 0x1e}, {&(0x7f0000000440)="2ac9453fc9805ef4f6230dfa84b354aad5c7b85d65db1aad406e4ccabf8ab1f9ae558ffec5abad3231b550b4658f9789baa367e4cc53b332e031b287a17f47c9efd447066c069fb327e0ab6838c6d35d2c5ce9c9c5e9dfa83af85708993504ddcfb5d5fcbb678a54", 0x68}, {&(0x7f00000004c0)="30e8e0476ace0f2f8a4533963eb7f4077317c1b62ca3238f9a078edcd4c2d31ae9f89e5a6308d52010054c20e5743c09e099b5f5fd0d5d9542f6ecaab82acd1e20522c31106683f9fc4991043bfc58d41a945d672c1c7070e321222f957f5e9d77712c3563b119673c24c93910a8697064a9e76a01f3f4719d135f3f62e095c820994a6a74744297ebc140aa0e572cf0af712b35eda469dbd9abcddbc3a74c65fc71b3d26fb0824d91013b5b5b4b6205c3bc7461a9e27747b0e035cc0448ce80dbc8dc0835d6b0594d51741375d6242ba586b606454548e424d1d10fdea849c4f28968db03e68d6ada32faac740b5919", 0xf0}], 0x4, &(0x7f0000002500)=[{0xf0, 0x11, 0xfffffffa, "b51bbce264aea1c1f2b11fd6c90ff14536bc22da1489ee9522e131e24ae25449b4b6a63b22eeda6a73e93b0bb01cc9f196a537154e6c546c456075669abedc602c7d4cdf66e242577adbc8a31f95f224086dcc5c863cfc80320fcc95f5ddc005294564eecaa6ca90b3304c265a25225a35b8e86312720329571d28e16530709e3d1bef8d88beca2354b83e5dd37af0b7c16baf94cb2fbad5fa818065ffdce5e324d12253014e7e7eb27dd1c3d8ca56d74213927276904deaa112911d28c043fe443cef4f5fb041416ddd7e781e81f1187b343cb7e63a0094e49b"}, {0x1010, 0x10b, 0x6, "2c90266147e1c9893ca9af98e097d9b55bd006cd2bcc335b91efa39719549ee44d60c55cb9a1ce83ff6615d4277fdb47935e5df750f176cb83fb41a695ea21b2719e4491fc06ae85957cc386fc3c572682ecdeaeb1795641ab6443aa9dfedefee9ab98b0550f255f4543f9d5b7341681e443b2f82d76962f2e7487fd153956aca3f00b0cafbc55ff2c3495b50c9c5c26a4f749ed204e38da022fe7f6741eb087bd767ad94a682274024aa4ada81eb4a58386cc28b896ae2a088ca5bed6e1bedbc6db963dcef7cb11693bd93db73e667fbb2e6beeee969ff4f26e49b574ba85bea8d9426751dd375a573969ac6fa8e6d6b960a336b30bf1ddb7806186e19ccd86215bae422bcf5d53ce6339dc748f40e9d01935903d208d96640051fbfedc088c88cb80881bbdcd6fb6ed3a059ddc111245f7433da46981045004afe4540247b74fc9340d509d42ebdef9d266d23a70d7b8b7e38d7621d8809574250c4aeec5bf0186d26b198cac51ee1f6f9cc4cef794ee7eaddb19fdf5df33ab1eaef174167b308505a4a94c4d5f3f1fb9bdb937136a3692852dede19f9fe2807d496bb3d87f157f61bdd75b5ae8f7cc207e9bac34fef311e3c039c0cfbd33deabd12bf4fe1b87c6dd4603813acec0fab1ae2ba23d4418c35cc84d9a8dc1ee2a4102821b2c302685be1e1e3abcf91915c87f6d5d1d9830ac029a8479bf9c8bc7d7a6c75f366e958483f8eef169c558a83823f1903198b6db30a9c4ab345c30b3465dae97e242374e98e70d0fe46660bad7940e904e7e1dd6b5229aacdaf630f9ec7f428c2b70c38738b11b22e1a085411c2b1991ba2ef24f5e19a963c297cd8e7db1358fd59c68df192a6f3faa1529440d05a424a320900754fe384ce73e4091b789f162b244f5b4da667ce780f445497f452dccbcaad98d7c56952017d15b80c54fa8dbe985087b2482349c66351ca6077985c2da5b6bf32d13372d9d054c3a76be7d79aa1eaa8cc238cf5f1f15012cb363054276e25e3abf0abd99b0684248f7c6e7814fe13423cf0b85a39ab9f584df4d9fdf42d1277072df6d5615bf29010b3d9e1ee4db0eaa854d03a6edc1e62f7480c57c04baf461ac3c8e9c1c7151fd660f04af6bf7744c19ffa08fbd9e9709f1fe9b14179d70a23d877dac03d6d4aa704b4e944ff757603d07ffd206312f9aa65b282863e4d067bdebbc0d009920e7c8fec7e618db89a09289e906b691fb066bf1407679a5b69e6f564bfcd50e157b3f0be2acb02cec10906fbb06bc9e2b7b9754650275f83b39f17ed0feebd1f9f52dd44875830b730e9bcdf4d80bf6ca2de6988a18b3a23cec089aa30c1cfcaa42b352684a82dbe13d5f469fe47e8b25bcd63a8c740e999c5767dc35c43e53c01fdaa4d81cbda76864de68570af9f088fc06b1fefbec8574ba51bdec24437d3a73cd4a01785e5750892d4a3bc73f0c8b497fa6e9d21dd7edf26abe0dd264219f9200a075c3978b80d2a8afbdc96add6b03ab92b142f383bbd015679a2d50acc9d80b7419c8443d232fc15cc23aa61deb9d29dea86c2c7fa35afbc180bf6e91f907406eba5f97f869545facdd25d25942590ab98ef87fceb6b94a56351e63e6454163198923b8b0f44e867d662f6236c9ec0f4e9c312ace02a1332b1b96fced9817fadae09173387f74ea0da1b29e70131620466502a3755bd1274430b66fd98548df1c285fb51b81551777da4d214640b74857760c6b12e3353c97938722bf1ddc45c89d3eb9044d76bee4c3b6b9849c4065087094c69734e4ba74896fdc55714e4bae8ce780f501983c8559535a5f2441ed530ddbd3ca4b7e9c6577d8cd8b470108fc2094f0c863b02a3a1e2ce7654d53f506e2eba6f6c53fdd65496e31ad2663c99213012428a78adc9a0a34e74630a826ab535c996cad950e2eb3d7f9d01ef7dac7fc8d473b2a28a7fe686e8055c16e8706ebbe198c5a1591ee48fa962456a9680f69f9f0f41bd0b8eae5f2bcfaef363fff2da0c1295331d60429690636e139385ee2eb28822e3fa832fd22c72c873e722302447644a03d5fa61aa24bbf58db14e72d7ede2c16ed5b104be6486adff03a1f92a1056cb9f0ac6374b05c36c180c22a032638572373a5f79e50254d3ab430abca1236f53d3ff58ee3af88b379ca15ae7df49f3aa5d0b2ae4c9565a78358e6d5c73f8abce10933df92764f04a2d793559d8fb7b508abc53b49f664f2481d3c94712e2d8d20cb8c5fff5c7fa88528f7ce22a0920e5aa4a83570425ebaa92c15c78e008698e2f847c9bf4db221b9fdf32823b2b4eaf5dbdf49f6f2e484199d9dc49a1965352d95e7b5d1cc8f1fe7c20efcc9824a995f02c44fb7b3d80227013b1a515d7dabc530375218369f85d3fbaa59c872dde458148d983ed086f2d30a17e1ca0f6bcbdc2a0029f16bb3c134c8ad2d829a3cdf99ffe93dccecfb8e196295a2e0ad4d95e66043912eaecc8dac430ac3424b51fabb406d1292d6e62623d1ce5f5b2ef53af9569ec08d9b3dbe65358e113c3e4bb669274c9740811f9bc99a117bb12169fb0ccd14e265bc6eeaef62740e357c5b0b12f9810d2db4bc90bcea2e096109a29aeb444358c36bb581ce8de6d9d22a327b03deb04f16b9e11ce9eb306862e937c7f3151932a44c98d008f5daa1af0ef587301e7ea01c19add662a6500004f67cff6891405722c37e2c86229abe588be2c8e557cf05e1b932dd72ddc8f0e8707910d93d670dbde960fe66f0944f1b75852536a1cb4287ff7dcf2efaa7feb662de8a7a6743407037a0a4e9aed2146e124a95f38428699872c0752fbcce98eb9b2697f42aed3238621051378171ff9cd1a268659f4b2983eba9bcc3ec4338630374a42b9144977b990cc8605b30b14a84b02479a1899be255c7c5fcd8589156b283ebf4c9ce66398c417877dd813ff98f4e80e868de60c9ad274edb298107af3be914fcbe5cf5bd8aea7e107e1531309961c50e903ce1a9e9b9f036ff38b1ec09206fbaf96c93ff9e6c5be7fe9aae5c0223dd97a5c366c809f31b28efcba1e039cbd79164fe11166c1e4faef6fcee90bbab85ab2dcd894d86b5c649c3b60cec8618029471b7ce616161b7056aaceb907b7ed4b48172d8501ca3092b7bb8224fa20d681d7d6a8a903a2136cd2222cab16a4cd4665ab1393355bcba4287726c2ed347772adb39fa362892a8373eb9981a36358599b979a4e510643753729cc25c1a7d67999df2645f22717db86e460baa41e7ccb9b9298268028be0d2783cfac0b54f8d4e7aca7b079617fc8da905db2c93921ceadd069a52351a5ada0d8062ed462534e12bf90d0e963ad491e6edc4520135a4556ad1efcca4b00d50dfde715f25d35a1bad50ca7ce7a71e25c51175ef37bf89970690ac151f3a35f5f8794bcfc6fd30abac88292336f4e37d9cfd011e3c45ded113712cc5d3fcda3adc005ef8335696c9ee8690f503078453309d88371f011ce044c1cd87437e4aa336d20ed4c84272e9ceb31624e8ecacff051c6731452a3e879c1e87a43d1184dd1e2227c12e6ab566a6b1d3fcb18143dcdd45caf7109c2dcff9e01bb368050586002ea20894460ec201c6378d460fca28e7c1b738e23fb30964df7964dcf29f775f6dfc6e89cc6134fcfa99ba09a7758ea58caa0d0b4a431177e363edc80b46b85c42f076522a8646d8103efd638651dc4c0c1c338faf8ad42d547df8b852fec1d51e50c7c7a6613599024d88d96c1169809128f5104a4dfba549322044aca4f67e5667287222b352656cca395697b113773772db1e46e698890c51d64a85d00dffa3ad3c0750429c2d092eb6af520d594f0e30f759f8652605d03079aef33d838ce18992578fbc154cd8c06cf49f65493de52f11f8a6da18ad347c201804149bcaa7fda1fc1cbca285ad34f4c28dbf7ada0db3e36cb315e23330ff59b277cb0693e932511012319e86c8427d15200b6f32ecbf1d8768fb9035d9175331503a46e00a115a464a5d3174ef6fb48513bfc19a291e67ba5e32bce5352dee76c4eafc0111bb7e5482751e4b711a8b7f70438472f45c26acd8c43fc07cf54f619bdac4780e6937b1f74927c691b49f69350b6d08e1c992af945f1b5f1b6b4f14b93f89a57a52de449d98c7c62050c837413a4efc5a83faba8f0d915900bfff53b071bf93d925b90052281291961be7111f17b6fac3f6af72aca5ac6e1dd5d267bda2ec37c06d56cbb3141277d04c1721cd19039502d0c151e026c2a6f9eddfa629945ec289b5f50f295186a1d657b214fc82b199cbc539e6daedcf14b17208f19dc79b7b3805e639037c0369c425036136cbfba31c2151532cf27660545085fb60c4424241c18860f951c9444bfe0040dd4f3f62483b568485d1f94ffc93adc509f1dde4c1eb4cd170c4d86db832de6fb9a1c741cb09cb1a82526efe6624829084f644b314fcf06dba9bc606f70a3c5e2cc3c18630474b766400ae0740f6919209ad6ada054f535e11c85c15f8d574f68948e41650885d2987ae10ab290d18d47dfa9690ecd0d52540d6e5a197fd2386a48cbdcbb00db4688b2655660e8fd43a10e1ecd54b8bbd55d4e13fafbba6af3f7827227d5fb57da119afb95ba9f091c4c5c4985afd2a43e405338c2f70324476583c0b963564d33cf5c1db93f2aca238e40981554608cd8a28771bd94368225afef617a9ab305edf9f2a82d4993ed4f69fb958dc2dae78e00f413f4e20c0442461a901287152b92f3a12fefdc06b1704547819e75fe93873412857a784f0553a8584cbea98a457ffe653f8096d12e4553bc034b1731d19de4b20d83741e439a39cf4293073318459684bd09f1d4b3b8c9872a4cc978a8d96d395749d76f47ba551cb4894f86c0ab190cdad9142e74c39e08549f6d1cedde09ea6fa81c5b58c8918026c8bed137daee980966297e65fbe606805cc34e7beabb1b3ede71baef90a457de9cd9fdd3a52b5ef415a1a0aba697e02cc9dcf3efa1a3ae075d9ac7227d2fe13c0f2ddf8e4d2f1968c8cee7086f5e817d0e5bbee652664075372afdabec14f9b04454bf57b7930d5e538af16cfe0fceb2dd81702fb11f4b1a15220b15fa110a24f5aaceeff5907d1e8393c00676eb9c06b8add6662e281c1b3d454738013860611e5ad99cf1361103c09198ce1f20220ff04ef7fde5b7beabcbc2e70731a21366350d2c57046d1c1802d88c7e09967df366af2fc927eaa318f1b9e1e8b19dbd8d5ec07ee0f1368cde5703024ba85972fb00a7f453d7a76693b66c3215706daa8c715009de95f320da561a64845117f5cb68088de813849af878e6dd3458c8122ef3613805e23ab5fba2dddad4003b7b058ef1df23b4b1a11053a308f0144b162181d252d6782c94a8c9fe7c447a4cc95a4adc3b21d25a8d738248a11f62a81a5e380f37056f14dba6e62018314cea23c704fd0094b4f5b6f84a0de5e5548071f688d8e95a415c1ad0d4b42b2752565a9fc4c84f0d2058c9401586c8076c0aac556a0efb0a257a45c55a681f7ab651c085b58ee7b23f78b7cea7f713ce7e0e91acaab344e5e7d85febe56fb026713d4791291fe4aa67f871010a1eecceb41436907a7bcab2bcd90a92f4f87b522e091f5bf35d54062503bbf746960855e3f09621948aed74424cd6e72a878a87792c60e593b331a7b357f0b44e645e0ece205a88d29b20c37e983194fa4d9a95fddff25ee86c1a11731b920fc3122595292ce0045515b27a4cc18c7a247227dc8e2c9fb59eaec030d0528c4cc5254744d5fa7382091c1406007a63f"}, {0x1010, 0x110, 0x5, "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"}, {0x78, 0x112, 0x0, "22d234a35994bd978a35637b121b826e22fcc326f70fe0542ed87a78a57ea9f7d4367deec11552f845b2babefb67f103046ec8a9d0ff84593a80d79a1dbaf7e53090016e0269a723b0059ee97ce69c8be6353c96983adddda3700ee9a94f2f997ae9fa5907"}], 0x2188}}], 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000040), 0x12) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x4000, 0x0, 0x5, 0x2}, 0x20) 2.402151881s ago: executing program 2 (id=1682): r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r3, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r3, 0x5, 0xc}, &(0x7f0000000040)=0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r9}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) keyctl$chown(0x11, r7, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r13}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r12}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.893862201s ago: executing program 0 (id=1683): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.354817198s ago: executing program 3 (id=1684): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x22c}}, 0x0) 1.292875281s ago: executing program 0 (id=1685): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a) write$char_usb(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1380, &(0x7f0000003700)=ANY=[]) 1.172447245s ago: executing program 4 (id=1686): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="09840000000000003c0012800b00010062726964676500002c000280060027000300000006000600fcff000008001d000000000005002600000000000500250074"], 0x64}}, 0x0) 1.129982511s ago: executing program 2 (id=1687): close(0xffffffffffffffff) inotify_init1(0x800) openat$tun(0xffffffffffffff9c, 0x0, 0x284300, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x6}) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="03c9007986c3b619eb3906ef74e7e1b092754fdff60fc08a5054c0e1d37df3121f3e311ad1c1fed555420beda3e1e7b0ca9a7d6fd12e81707d6973ba802383618f6bf7652255e73f17bfd6d20bd9ba12cbc995bc78470f5e187e9781f99a5aaf7e10deb7c2f0f153ea04445c40560af1ba1ecbaf89e718b0d1976a82ed4f06df4474c4801b46d879"], 0x7d) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) read(r1, &(0x7f0000000740)=""/230, 0xe6) 1.097177935s ago: executing program 3 (id=1688): socket(0xa, 0x3, 0x3a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4000800, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000180), 0x7fffffff, 0x80001) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) r7 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r7, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000300)={0x1f, 0x1, 0x3}, 0x6) write$bt_hci(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) ftruncate(r7, 0x0) socket(0x40000000015, 0x5, 0x0) socket(0x15, 0x5, 0x0) 1.050980032s ago: executing program 4 (id=1689): close(0xffffffffffffffff) inotify_init1(0x800) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (fail_nth: 1) 49.602032ms ago: executing program 5 (id=1690): openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000840003, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r1, 0x6000000) copy_file_range(r1, 0x0, r1, 0x0, 0x9, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x26, &(0x7f0000000340), 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$tipc(0x1e, 0x2, 0x0) 0s ago: executing program 4 (id=1691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000e80)={{0x2, 0xfffffdfb, 0x0, 0xf10f, 0xffffffff, 0xfffff592}, 0x1fe, [0x9, 0x7, 0x931, 0x4, 0x5, 0x9, 0xc, 0x0, 0x1, 0x4, 0x1, 0xfffffffa, 0x2, 0x8, 0x8dac, 0xc, 0xea92, 0x9, 0x1, 0x800, 0x7, 0x80000001, 0x9, 0x59b6, 0x0, 0x753, 0x10001, 0xe1, 0xbc, 0x3, 0x200, 0x1, 0x8, 0x6, 0x5, 0x553, 0x3, 0x4, 0x8, 0x5, 0x4, 0x0, 0x0, 0x60, 0x7, 0x3, 0x4971bbd1, 0x80000001, 0x8, 0xfffffffc, 0x8, 0xfffffffb, 0x1, 0x3, 0x9, 0x8001, 0x1, 0x2, 0x81, 0x1, 0x7, 0x6, 0x1, 0x1000, 0x9, 0x3, 0xf7, 0x4fd, 0x87a, 0x2, 0x5, 0xe, 0x2, 0x8, 0x20000, 0x9, 0x1, 0xfc, 0x5, 0x3, 0x0, 0x9, 0x3, 0x5, 0x4, 0xffff7fff, 0x0, 0x5, 0xafc, 0x1, 0x25, 0xfffffff7, 0xfffffe01, 0x8, 0xd, 0x101d, 0x40, 0x3, 0xe150, 0x8000, 0x6, 0x7, 0x0, 0x7fffffff, 0x4, 0x4, 0x0, 0x70, 0x8, 0x0, 0x0, 0x1000, 0x8, 0x3, 0x8b3, 0xaa, 0x5, 0x8, 0xad7, 0x1e58, 0x6, 0xfd3, 0x7, 0x837, 0x0, 0x7, 0x8ac, 0x3650, 0x3, 0x7, 0x10, 0x4, 0x5, 0x5, 0x8, 0x0, 0x4800, 0x1, 0x59, 0x3, 0x6, 0x495d, 0x1, 0x1, 0x7fff, 0xffff, 0x5, 0x13142430, 0x4b5, 0x3ff, 0x8, 0x8001, 0x1, 0x9, 0x6, 0x0, 0x10, 0x0, 0xc5b, 0x8, 0x80, 0x2, 0x6, 0x3, 0x6, 0x9, 0x9, 0xfff, 0x7, 0x3, 0x919, 0xfff, 0x7, 0xfffff68c, 0x4, 0xa, 0x2, 0x4, 0x1, 0x87f3, 0x80000000, 0x200, 0x0, 0xff, 0x3, 0x7, 0x1, 0x100, 0x7e, 0x2, 0x4, 0xffff, 0x8, 0x5, 0x40, 0x333, 0x7, 0x8, 0x80, 0x0, 0x0, 0x200, 0xdd3, 0x7, 0x8, 0x42cc, 0xd, 0x7, 0x3, 0x1000, 0x6, 0x55b, 0x7, 0x20, 0x80000000, 0x1, 0x1000, 0x28000, 0x1, 0x6, 0x2, 0x3, 0x6, 0x8, 0x8, 0xee6, 0x5, 0x20e7, 0x3, 0x7f, 0x4da, 0x6, 0x10, 0x4, 0x3, 0xfffffff9, 0x7, 0xaf1b, 0xf9, 0xf500, 0x8, 0x101, 0x5f, 0x8000, 0x80, 0xe9, 0x2, 0x1, 0x9, 0x0, 0x0, 0x8, 0x1, 0x9, 0x48000, 0x2, 0x3ff, 0xffffffff, 0x8, 0x80000000, 0x6, 0x1, 0x7, 0x7, 0xca, 0x7, 0x6, 0xd1, 0x8, 0x9, 0x7, 0xe8dd, 0x40, 0x6, 0x9, 0x9440, 0x3, 0x0, 0x2, 0x80000001, 0x2, 0x1ff, 0xfffff6c8, 0x4, 0x553f, 0x8, 0x3, 0x4, 0xffffffff, 0x0, 0xfff, 0x4, 0x1, 0x3ff, 0x9, 0x1, 0x503d, 0x4, 0x7, 0x5, 0x4, 0x9, 0x0, 0x7, 0x5, 0x3, 0x9, 0x48c8, 0x9, 0x2, 0x81, 0x1000, 0x5, 0x6, 0x2, 0x3, 0x8000, 0xfef, 0x7f, 0x3, 0xe4e8, 0xffffff1d, 0x8000, 0x2, 0x26, 0xc54, 0x5, 0xffffffff, 0x8000, 0x6, 0x3b, 0x5, 0x4b8, 0x7, 0x77, 0xabe2, 0x7ff, 0x6, 0x9, 0x0, 0x8, 0xa, 0x80, 0x9, 0x1, 0xb1, 0xfffffbff, 0x8, 0x6, 0x7, 0x3, 0x2, 0x7, 0x800, 0x32570fc6, 0x401, 0x8, 0x3ff, 0x9, 0x7, 0xffff, 0x8000, 0x8, 0xfffffffe, 0x1, 0x3, 0x2000000, 0xfe, 0xffff, 0x2, 0x3, 0x2, 0x2, 0x2, 0x7, 0x56, 0x3, 0x8, 0x8000, 0x1, 0x8, 0x1, 0x5, 0x0, 0x3ff, 0x3, 0x0, 0x9, 0x6, 0xa, 0x7d, 0x5e, 0x99, 0x7, 0xf526, 0x7, 0x0, 0x7, 0x5, 0x574a, 0x9, 0x6, 0xfffffc00, 0x3, 0xd9e, 0x10, 0x10001, 0x7f, 0xf, 0x2, 0xe83, 0x9, 0x4, 0x4, 0xf, 0xff, 0x400, 0xfff, 0x5, 0x7f, 0x3, 0x80000001, 0xffffffff, 0x3, 0x5, 0x2, 0x401, 0x98e0, 0x8, 0xfffffff3, 0x8, 0x0, 0x3, 0x0, 0x3241, 0x6, 0x1, 0x7, 0x4, 0x2, 0x436b8895, 0x1, 0x6, 0x3, 0x3ff, 0x4, 0x6, 0x5, 0x0, 0x10001, 0xe, 0x9, 0x8, 0x4ae998f6, 0x0, 0x6, 0x3, 0x8, 0x346, 0x9ff2, 0x8000, 0x8, 0x34, 0x9c, 0x12000000, 0x2, 0x8000, 0x3, 0x1, 0xffff9818, 0x5, 0x9, 0x6, 0x7, 0x4f9, 0x7, 0xfffffffa, 0x5, 0x1, 0x7, 0x6, 0x4, 0x3, 0x100, 0x7, 0x80000000, 0x5, 0x8, 0x3, 0x6b9, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x9, 0x3ff, 0x1, 0x13, 0x7fff, 0xcd, 0x0, 0xeddd, 0x0, 0xf, 0x52, 0x0, 0xf00, 0x5, 0xb, 0x3712, 0x5, 0x3, 0x0, 0x0, 0x5, 0x7, 0x2, 0x8, 0x7, 0x8cc9, 0x3, 0x6, 0x80000000, 0x3, 0x49f4c108, 0x8, 0x7143, 0xfff, 0x6, 0x5, 0xbed4, 0x3, 0x0, 0x1bc, 0x4471, 0x5, 0x1, 0xfc7b, 0x2, 0x6c1, 0x9, 0x5ff, 0x8, 0x101, 0x8, 0x8001, 0xdeaf, 0x6, 0x3, 0x6, 0x75, 0x3, 0x63, 0xd5, 0xb, 0x401, 0xb, 0x3ff, 0x3f5, 0x2, 0x9, 0x401, 0x9, 0x950e, 0x9, 0xd0, 0x3, 0x80, 0x4, 0x8, 0x4, 0xfff, 0x87, 0x9, 0x2, 0xffff, 0x8, 0x6, 0xfffffff7, 0x10, 0x8, 0x5, 0x1, 0xb, 0x1, 0x0, 0x4, 0x4, 0xc, 0x7, 0x0, 0x2, 0x57b492d5, 0x7, 0x6, 0x6, 0x3ff, 0x22, 0x3, 0x7, 0x2, 0x2, 0x9, 0x4, 0xd2b, 0xff, 0x6, 0x6, 0x3, 0x0, 0x401, 0x6, 0x6, 0xd7d, 0x9, 0x5, 0x3ff, 0x101, 0xad4, 0x0, 0x1f73, 0x1, 0x8000, 0x7, 0xb, 0x2, 0x4, 0x0, 0x7, 0x6, 0x9, 0x9, 0xc8e4, 0x5, 0x2, 0x4, 0x6, 0x5, 0x5, 0x9, 0x5, 0x3, 0x1ff, 0x9, 0x4, 0x0, 0xf, 0x4, 0x2, 0x10, 0x8001, 0xb7a, 0x120, 0x9, 0x8, 0xffffff7f, 0x400, 0x2, 0x4, 0xc, 0x9, 0x0, 0x8000, 0x10000, 0x7fff, 0x3, 0x4, 0x0, 0x1, 0xe, 0x1, 0x5, 0x7, 0x0, 0x3ab, 0xffff8000, 0x0, 0x8ed, 0xedd7, 0x2, 0x7fe, 0x7, 0x401, 0x9, 0x5, 0x2, 0x6, 0x8, 0x2, 0x7, 0x4, 0x7fffffff, 0x2, 0xffffff81, 0x1, 0x5, 0x9, 0x2, 0x7, 0xc, 0xfffffff7, 0x97b3, 0x0, 0x8b, 0x6, 0x3, 0xe, 0x1c4c, 0x80000000, 0x465, 0x7, 0x401, 0x40, 0x80, 0xb, 0x65, 0x4, 0x2, 0x4, 0x80000000, 0x7, 0x101, 0x4, 0x7, 0x1, 0x40, 0x6, 0x400, 0xc93, 0xffff, 0x2, 0x8, 0x2cb, 0x1000, 0xffffffff, 0x3, 0xb5, 0x8001, 0x8, 0x8000, 0x2, 0x2, 0x8, 0x4, 0x4, 0x3, 0x5, 0x7a, 0x7fffffff, 0xb, 0xfffffff7, 0x1, 0x9, 0xc, 0x2, 0x1, 0x0, 0x404, 0x8000, 0x0, 0xff, 0x1, 0x2, 0x6, 0x6, 0x4, 0x5, 0x1, 0x2, 0x2, 0x9, 0x101, 0x9, 0x0, 0x9, 0x401, 0x4, 0x2, 0x3, 0x8, 0x0, 0x6, 0x1, 0x3, 0x9, 0x8001, 0x0, 0x4, 0x100, 0x9ce2, 0x2, 0xe81, 0x401, 0x3d43, 0x0, 0x9, 0x5, 0x80, 0xffff, 0x400, 0xffffffff, 0x1, 0x9, 0x80000001, 0x33, 0x8001, 0x6112, 0x4, 0xa, 0xb57, 0xad4, 0x2400, 0x1, 0x8, 0x7, 0x0, 0x2, 0x96a, 0x0, 0x9, 0x44, 0xfffffffc, 0x5, 0x7, 0x2, 0x7, 0x5fcd9df3, 0x7fffffff, 0x2, 0xfffffff7, 0x7fff, 0x80000000, 0x1ff, 0x1ff, 0x7, 0x8, 0x5, 0x9, 0x8, 0x8, 0x2, 0x0, 0x5, 0x3, 0x6, 0x800, 0x9, 0x100, 0xb, 0x8, 0x8, 0x2, 0x2, 0x1000, 0x2, 0x1, 0x1, 0x8f, 0x401, 0xfffff000, 0x6, 0x8, 0x20000000, 0x1, 0x7, 0x3, 0x6, 0x5, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x4, 0x1, 0x40000, 0x410b, 0xbbeb, 0x6, 0x7, 0xdd0, 0x100, 0x7, 0x9, 0x2, 0x1, 0x100, 0x6, 0x200000, 0x40e8, 0x8, 0x792, 0x2, 0x6, 0x2, 0x3, 0x9, 0x5, 0x9, 0x7, 0x40000000, 0x9, 0x8, 0x8001, 0x2, 0x9, 0x3, 0x6a4, 0x1000, 0x2, 0x4, 0x8, 0x8, 0x80000001, 0x9, 0x9, 0x9000, 0x4297, 0xa4e, 0x8, 0x8001, 0x9, 0x5, 0x4, 0xc4, 0xc, 0x7, 0x1, 0x101, 0xe5d5, 0x4, 0x3ff, 0x4, 0x5, 0x81, 0x6, 0xe, 0x0, 0x5, 0xb, 0x4, 0x9, 0x1, 0x2, 0x6, 0xffff6d4a, 0x847, 0x4, 0x3ff, 0x421, 0x3, 0x2, 0xfffff001, 0x2, 0x35, 0x1, 0xfffffff7, 0xc, 0x5, 0xf, 0xffffffff, 0xb5f, 0x2, 0xf, 0x1, 0x8, 0x8, 0x7f, 0x4, 0xfffffffe, 0x2a, 0xffffff9d, 0xfffffff8, 0x1ff, 0x0, 0x4, 0x7, 0x80000000, 0xabdf, 0x2, 0x91, 0x9, 0x9, 0x301, 0xd, 0x1, 0x8, 0x7, 0x7, 0x40, 0x3, 0x0, 0x9, 0x6, 0x6, 0x6, 0x5fffffd, 0x100, 0x6, 0x3, 0x4, 0x1, 0x3, 0x0, 0x1, 0x7, 0x1, 0x2, 0xfffffffa, 0x3ff, 0x5, 0x7, 0x1, 0x7808, 0x6d76, 0x400, 0x1, 0x1, 0x0, 0xfffffff5, 0xd, 0x0, 0x9]}) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$peek(0x1, r3, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x11a) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac000904000001070000090905", @ANYBLOB="980e2d2e604b5f"], 0x0) kernel console output (not intermixed with test programs): ts on: batadv_slave_1 [ 537.957031][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.969912][T10174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.984478][T10174] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.997846][T10174] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.119421][ T5817] usb 4-1: device descriptor read/64, error -71 [ 538.128623][T10174] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.137727][T10174] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.189745][T10074] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 538.207187][T10074] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 538.284635][T10315] input: syz1 as /devices/virtual/input/input64 [ 538.833252][ T5817] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 538.896306][T10074] usb 1-1: USB disconnect, device number 60 [ 538.998530][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.040735][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.078508][ T5817] usb 4-1: device descriptor read/64, error -71 [ 539.952167][ T5817] usb usb4-port1: attempt power cycle [ 540.302356][ T5817] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 540.326768][ T5817] usb 4-1: device descriptor read/8, error -71 [ 540.381242][T10324] loop6: detected capacity change from 0 to 7 [ 540.426735][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 540.436085][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 540.453608][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 540.462806][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 540.473838][ T6995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.493477][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 540.502672][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 540.554955][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 540.564150][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 540.572147][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 540.581350][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 540.589790][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 540.598961][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 540.599100][ T6995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.615501][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 540.624691][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 540.632595][ T5828] ldm_validate_partition_table(): Disk read failed. [ 540.778299][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 540.787591][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 540.795801][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 540.804965][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 540.812928][T10074] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 540.821431][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 540.830606][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 540.875311][ T5828] Dev loop6: unable to read RDB block 0 [ 540.910545][ T5828] loop6: unable to read partition table [ 540.979711][ T5828] loop6: partition table beyond EOD, truncated [ 541.432443][T10333] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 541.653091][T10074] usb 3-1: Using ep0 maxpacket: 32 [ 541.843471][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 541.843489][ T30] audit: type=1800 audit(1745658080.011:1547): pid=10334 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1443" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=11520 res=0 errno=0 [ 541.938450][T10324] ldm_validate_partition_table(): Disk read failed. [ 541.953867][T10074] usb 3-1: config 0 has an invalid interface number: 61 but max is 1 [ 541.962147][T10074] usb 3-1: config 0 has an invalid interface number: 98 but max is 1 [ 541.970858][T10074] usb 3-1: config 0 has no interface number 0 [ 542.042915][T10338] Cannot find add_set index 0 as target [ 542.731890][T10074] usb 3-1: config 0 has no interface number 1 [ 542.745984][T10074] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 542.755829][T10074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.766857][T10324] Dev loop6: unable to read RDB block 0 [ 542.775445][T10074] usb 3-1: Product: syz [ 542.782585][T10074] usb 3-1: Manufacturer: syz [ 542.792920][T10074] usb 3-1: SerialNumber: syz [ 542.798904][T10324] loop6: unable to read partition table [ 542.834612][T10074] usb 3-1: config 0 descriptor?? [ 542.842551][T10324] loop6: partition table beyond EOD, truncated [ 542.859640][T10324] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà–() failed (rc=-5) [ 542.982815][T10074] viperboard 3-1:0.61: version 0.00 found at bus 003 address 072 [ 543.026861][T10074] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 543.026886][T10074] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 543.036085][T10074] viperboard 3-1:0.98: version 0.00 found at bus 003 address 072 [ 543.055446][T10352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1447'. [ 543.073960][T10074] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 543.073982][T10074] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 543.091855][ T30] audit: type=1326 audit(1745658081.361:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe820f8e969 code=0x7ffc0000 [ 543.226113][ T30] audit: type=1326 audit(1745658081.361:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe820f8e969 code=0x7ffc0000 [ 543.226175][ T30] audit: type=1326 audit(1745658081.371:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe820f8e969 code=0x7ffc0000 [ 543.226238][ T30] audit: type=1326 audit(1745658081.371:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe820f8e969 code=0x7ffc0000 [ 543.226295][ T30] audit: type=1326 audit(1745658081.371:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe820f8e969 code=0x7ffc0000 [ 543.273726][ T5867] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 543.285565][ T5817] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 543.351216][ T30] audit: type=1326 audit(1745658081.631:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe820f8e969 code=0x7ffc0000 [ 543.371460][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.432485][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 543.449081][T10074] usb 3-1: USB disconnect, device number 72 [ 543.456773][ T30] audit: type=1326 audit(1745658081.631:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe820f8e969 code=0x7ffc0000 [ 543.487575][ T5867] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 543.500894][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.512602][ T5817] usb 6-1: device descriptor read/64, error -71 [ 543.523371][ T5867] usb 1-1: Product: syz [ 543.527652][ T5867] usb 1-1: Manufacturer: syz [ 543.548707][ T5867] usb 1-1: SerialNumber: syz [ 543.609452][T10361] xt_TCPMSS: Only works on TCP SYN packets [ 543.668639][ T5867] usb 1-1: config 0 descriptor?? [ 543.752478][ T5817] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 543.766318][ T5867] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 543.917318][T10364] FAULT_INJECTION: forcing a failure. [ 543.917318][T10364] name failslab, interval 1, probability 0, space 0, times 0 [ 543.930244][T10364] CPU: 1 UID: 0 PID: 10364 Comm: syz.4.1453 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 543.930266][T10364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 543.930275][T10364] Call Trace: [ 543.930281][T10364] [ 543.930287][T10364] dump_stack_lvl+0x189/0x250 [ 543.930308][T10364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 543.930326][T10364] ? __pfx__printk+0x10/0x10 [ 543.930349][T10364] ? __pfx___might_resched+0x10/0x10 [ 543.930366][T10364] ? fs_reclaim_acquire+0x7d/0x100 [ 543.930382][T10364] should_fail_ex+0x414/0x560 [ 543.930404][T10364] should_failslab+0xa8/0x100 [ 543.930424][T10364] __kmalloc_cache_noprof+0x70/0x3d0 [ 543.930442][T10364] ? drm_atomic_state_alloc+0xa9/0x100 [ 543.930464][T10364] drm_atomic_state_alloc+0xa9/0x100 [ 543.930483][T10364] drm_mode_atomic_ioctl+0x437/0xcb0 [ 543.930507][T10364] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 543.930535][T10364] ? do_raw_spin_unlock+0x122/0x240 [ 543.930550][T10364] ? _raw_spin_unlock+0x28/0x50 [ 543.930567][T10364] ? drm_is_current_master+0x19f/0x200 [ 543.930583][T10364] drm_ioctl_kernel+0x2cc/0x390 [ 543.930599][T10364] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 543.930613][T10364] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 543.930634][T10364] drm_ioctl+0x67f/0xb10 [ 543.930651][T10364] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 543.930668][T10364] ? __pfx_drm_ioctl+0x10/0x10 [ 543.930691][T10364] ? __fget_files+0x3a0/0x420 [ 543.930709][T10364] ? __fget_files+0x2a/0x420 [ 543.930729][T10364] ? bpf_lsm_file_ioctl+0x9/0x20 [ 543.930744][T10364] ? __pfx_drm_ioctl+0x10/0x10 [ 543.930759][T10364] __se_sys_ioctl+0xf9/0x170 [ 543.930775][T10364] do_syscall_64+0xf6/0x210 [ 543.930789][T10364] ? clear_bhb_loop+0x45/0xa0 [ 543.930805][T10364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.930817][T10364] RIP: 0033:0x7fe1e858e969 [ 543.930828][T10364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.930839][T10364] RSP: 002b:00007fe1e9402038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 543.930853][T10364] RAX: ffffffffffffffda RBX: 00007fe1e87b5fa0 RCX: 00007fe1e858e969 [ 543.930863][T10364] RDX: 0000200000000840 RSI: 00000000c03864bc RDI: 0000000000000003 [ 543.930872][T10364] RBP: 00007fe1e9402090 R08: 0000000000000000 R09: 0000000000000000 [ 543.930880][T10364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.930887][T10364] R13: 0000000000000000 R14: 00007fe1e87b5fa0 R15: 00007ffe1d12f0c8 [ 543.930906][T10364] [ 544.191313][ T5867] usb 1-1: setting power ON [ 544.208548][ T5867] dvb-usb: bulk message failed: -22 (2/0) [ 544.259910][ T5867] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 545.142401][ T5817] usb 6-1: device descriptor read/64, error -71 [ 545.175635][ T5867] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 545.202667][ T5867] usb 1-1: media controller created [ 545.326749][ T5817] usb usb6-port1: attempt power cycle [ 545.419700][T10371] Cannot find add_set index 0 as target [ 546.262758][T10373] XFS (nullb0): Invalid superblock magic number [ 546.381598][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 546.474931][T10385] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 546.929938][ T5867] usb 1-1: selecting invalid altsetting 6 [ 546.944580][ T5867] usb 1-1: digital interface selection failed (-22) [ 546.953229][ T5867] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 546.980106][ T5867] usb 1-1: setting power OFF [ 546.987869][ T30] audit: type=1800 audit(1745658085.261:1555): pid=10383 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1456" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=9669 res=0 errno=0 [ 546.987889][ T5867] dvb-usb: bulk message failed: -22 (2/0) [ 546.987909][ T5867] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 547.018867][ C0] vkms_vblank_simulate: vblank timer overrun [ 547.042350][ T5867] (NULL device *): no alternate interface [ 547.090624][ T5867] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 547.116909][ T5867] usb 1-1: USB disconnect, device number 61 [ 547.121449][ T5817] usb usb6-port1: Cannot enable. Maybe the USB cable is bad? [ 547.344939][ T5868] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 547.974911][ T5817] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 547.976022][T10398] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 548.173284][ T5817] usb 6-1: Using ep0 maxpacket: 32 [ 548.329912][ T5817] usb 6-1: config 0 has an invalid interface number: 211 but max is 0 [ 548.403714][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 548.437280][ T5817] usb 6-1: config 0 has no interface number 0 [ 548.481428][ T5868] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 548.551888][ T5817] usb 6-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 3.f9 [ 548.566581][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.571840][T10403] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 548.585694][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.598874][ T5868] usb 3-1: config 0 has no interface number 0 [ 548.672398][ T5817] usb 6-1: Product: syz [ 548.676588][ T5817] usb 6-1: Manufacturer: syz [ 548.681334][ T5868] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 548.694475][ T5817] usb 6-1: SerialNumber: syz [ 548.699185][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.828659][ T5817] usb 6-1: config 0 descriptor?? [ 548.836016][ T5868] usb 3-1: config 0 descriptor?? [ 548.856454][ T5868] usb 3-1: Found UVC 0.00 device (0bd3:0555) [ 548.864151][ T5868] usb 3-1: No valid video chain found. [ 548.991167][T10410] input: syz1 as /devices/virtual/input/input65 [ 549.483775][ T5868] usb 3-1: USB disconnect, device number 73 [ 549.495339][ T5817] mdc800 6-1:0.211: probe fails -> wrong Interface [ 549.524800][ T30] audit: type=1800 audit(1745658087.191:1556): pid=10397 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1461" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=11922 res=0 errno=0 [ 549.628728][ T5817] usb 6-1: USB disconnect, device number 5 [ 551.094432][T10422] Cannot find add_set index 0 as target [ 551.182312][ T5817] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 552.014922][T10430] input: syz1 as /devices/virtual/input/input66 [ 552.025214][ T5817] usb 1-1: Using ep0 maxpacket: 8 [ 552.555731][ T5817] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 552.612721][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.623098][ T5867] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 552.775207][ T5817] usb 1-1: Product: syz [ 552.779490][ T5817] usb 1-1: Manufacturer: syz [ 552.785223][ T5817] usb 1-1: SerialNumber: syz [ 552.797984][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 552.809058][ T5817] usb 1-1: config 0 descriptor?? [ 552.834806][ T5817] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 552.846768][ T5867] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 552.862302][ T5867] usb 4-1: config 0 has no interface number 0 [ 552.862330][ T5817] usb 1-1: setting power ON [ 552.880712][ T5867] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 552.900018][ T5817] dvb-usb: bulk message failed: -22 (2/0) [ 552.902387][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.919634][ T5817] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 552.959020][ T5867] usb 4-1: Product: syz [ 552.965038][ T5817] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 552.982186][ T5817] usb 1-1: media controller created [ 552.983499][ T5867] usb 4-1: Manufacturer: syz [ 553.002969][ T5867] usb 4-1: SerialNumber: syz [ 553.029542][T10419] dvb-usb: bulk message failed: -22 (3/0) [ 553.032946][ T5867] usb 4-1: config 0 descriptor?? [ 553.044176][T10419] usb 1-1: gpio_write failed. [ 553.058351][T10419] cxusb: i2c rd: len=8192 is too big! [ 553.058351][T10419] [ 553.156557][ T5867] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 553.473102][ T5867] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 553.533979][ T5868] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 553.611830][ T5867] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 553.641341][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 554.065409][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 554.134730][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 554.135162][T10074] usb 4-1: USB disconnect, device number 76 [ 554.190197][T10074] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 554.205193][ T5817] usb 1-1: selecting invalid altsetting 6 [ 554.210966][ T5817] usb 1-1: digital interface selection failed (-22) [ 554.228711][ T5868] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 554.239690][T10074] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 554.251129][ T5868] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 554.262778][ T5817] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 554.274267][ T5817] usb 1-1: setting power OFF [ 554.278971][ T5817] dvb-usb: bulk message failed: -22 (2/0) [ 554.296961][ T5817] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 554.307270][T10074] quatech2 4-1:0.51: device disconnected [ 554.313940][ T5868] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 554.315042][T10458] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 554.330754][ T5817] (NULL device *): no alternate interface [ 554.338478][ T5868] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 554.495349][ T840] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 554.530122][ T5868] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 554.653955][ T5868] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 554.657500][ T840] usb 3-1: Using ep0 maxpacket: 16 [ 554.662493][ T5868] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 554.762959][ T5868] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 554.776914][ T840] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 554.784385][ T5817] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 554.816104][ T5868] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 554.846226][T10462] Cannot find add_set index 0 as target [ 554.851911][ T840] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.862420][ T840] usb 3-1: config 0 has no interface number 0 [ 554.869330][ T840] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 554.891363][ T840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.955891][ T840] usb 3-1: config 0 descriptor?? [ 554.962947][ T5817] usb 1-1: USB disconnect, device number 62 [ 554.969377][ T5868] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 554.986518][ T5868] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 555.026805][ T840] usb 3-1: Found UVC 0.00 device (0bd3:0555) [ 555.042342][ T5868] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 555.044160][ T840] usb 3-1: No valid video chain found. [ 555.097536][ T5868] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 555.135348][ T5868] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 555.188206][ T5868] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 555.200800][T10470] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1484'. [ 555.224603][ T5868] usb 5-1: string descriptor 0 read error: -22 [ 555.231600][ T5868] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 555.232671][ T840] usb 3-1: USB disconnect, device number 74 [ 555.245282][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.426768][ T5868] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 555.502542][ T5817] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 556.253807][T10477] netlink: 'syz.4.1475': attribute type 10 has an invalid length. [ 556.261843][T10477] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1475'. [ 556.278281][T10477] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.287517][T10477] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.296697][T10477] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.312466][T10477] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.433834][T10478] xt_hashlimit: max too large, truncated to 1048576 [ 556.447401][T10478] CUSE: unknown device info "ÿ" [ 556.452479][T10478] CUSE: zero length info key specified [ 556.700184][T10477] team0: Port device geneve0 added [ 558.072335][ T5817] usb 6-1: device descriptor read/64, error -71 [ 558.194245][T10481] FAULT_INJECTION: forcing a failure. [ 558.194245][T10481] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 558.217304][T10481] CPU: 0 UID: 0 PID: 10481 Comm: syz.0.1486 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 558.217329][T10481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 558.217341][T10481] Call Trace: [ 558.217349][T10481] [ 558.217358][T10481] dump_stack_lvl+0x189/0x250 [ 558.217379][T10481] ? __lock_acquire+0xaac/0xd20 [ 558.217396][T10481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.217413][T10481] ? __pfx__printk+0x10/0x10 [ 558.217432][T10481] ? __might_fault+0xb0/0x130 [ 558.217458][T10481] should_fail_ex+0x414/0x560 [ 558.217480][T10481] _copy_from_user+0x2d/0xb0 [ 558.217496][T10481] __sys_bpf+0x1ed/0x860 [ 558.217511][T10481] ? __pfx___sys_bpf+0x10/0x10 [ 558.217533][T10481] ? ksys_write+0x1f0/0x250 [ 558.217557][T10481] __x64_sys_bpf+0x7c/0x90 [ 558.217570][T10481] do_syscall_64+0xf6/0x210 [ 558.217583][T10481] ? clear_bhb_loop+0x45/0xa0 [ 558.217599][T10481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.217610][T10481] RIP: 0033:0x7fdc2038e969 [ 558.217626][T10481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.217637][T10481] RSP: 002b:00007fdc21266038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 558.217651][T10481] RAX: ffffffffffffffda RBX: 00007fdc205b5fa0 RCX: 00007fdc2038e969 [ 558.217660][T10481] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 558.217669][T10481] RBP: 00007fdc21266090 R08: 0000000000000000 R09: 0000000000000000 [ 558.217676][T10481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.217684][T10481] R13: 0000000000000001 R14: 00007fdc205b5fa0 R15: 00007ffd418cb778 [ 558.217702][T10481] [ 558.492451][ T5817] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 558.510734][ T5868] usb 5-1: USB disconnect, device number 68 [ 558.842557][ T5869] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 558.873789][ T52] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 558.985114][T10502] FAULT_INJECTION: forcing a failure. [ 558.985114][T10502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.998333][T10502] CPU: 1 UID: 0 PID: 10502 Comm: syz.5.1496 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 558.998354][T10502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 558.998363][T10502] Call Trace: [ 558.998369][T10502] [ 558.998376][T10502] dump_stack_lvl+0x189/0x250 [ 558.998398][T10502] ? __lock_acquire+0xaac/0xd20 [ 558.998419][T10502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.998439][T10502] ? __pfx__printk+0x10/0x10 [ 558.998461][T10502] ? __might_fault+0xb0/0x130 [ 558.998490][T10502] should_fail_ex+0x414/0x560 [ 558.998515][T10502] _copy_from_user+0x2d/0xb0 [ 558.998535][T10502] __sys_bpf+0x1ed/0x860 [ 558.998553][T10502] ? __pfx___sys_bpf+0x10/0x10 [ 558.998577][T10502] ? ksys_write+0x1f0/0x250 [ 558.998604][T10502] __x64_sys_bpf+0x7c/0x90 [ 558.998619][T10502] do_syscall_64+0xf6/0x210 [ 558.998636][T10502] ? clear_bhb_loop+0x45/0xa0 [ 558.998654][T10502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.998667][T10502] RIP: 0033:0x7f90bf38e969 [ 558.998680][T10502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.998692][T10502] RSP: 002b:00007f90c010e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 558.998707][T10502] RAX: ffffffffffffffda RBX: 00007f90bf5b5fa0 RCX: 00007f90bf38e969 [ 558.998717][T10502] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 558.998726][T10502] RBP: 00007f90c010e090 R08: 0000000000000000 R09: 0000000000000000 [ 558.998735][T10502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.998744][T10502] R13: 0000000000000001 R14: 00007f90bf5b5fa0 R15: 00007fff91b257f8 [ 558.998764][T10502] [ 559.003363][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 559.028975][ T5868] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 559.039505][ T5869] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 559.064024][ T52] usb 3-1: config 0 has no interfaces? [ 559.085341][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.122579][ T52] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 559.168533][ T5869] usb 1-1: Product: syz [ 559.207662][T10506] FAULT_INJECTION: forcing a failure. [ 559.207662][T10506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.219246][ T5869] usb 1-1: Manufacturer: syz [ 559.224027][ T5868] usb 5-1: Using ep0 maxpacket: 32 [ 559.234401][ T5868] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 559.244470][ T5869] usb 1-1: SerialNumber: syz [ 559.252611][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.262747][T10506] CPU: 0 UID: 0 PID: 10506 Comm: syz.3.1499 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 559.262774][T10506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 559.262788][T10506] Call Trace: [ 559.262797][T10506] [ 559.262805][T10506] dump_stack_lvl+0x189/0x250 [ 559.262835][T10506] ? __lock_acquire+0xaac/0xd20 [ 559.262864][T10506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.262891][T10506] ? __pfx__printk+0x10/0x10 [ 559.262922][T10506] ? __might_fault+0xb0/0x130 [ 559.262963][T10506] should_fail_ex+0x414/0x560 [ 559.262998][T10506] _copy_from_user+0x2d/0xb0 [ 559.263024][T10506] ___sys_sendmsg+0x158/0x2a0 [ 559.263050][T10506] ? __pfx____sys_sendmsg+0x10/0x10 [ 559.263108][T10506] ? __fget_files+0x2a/0x420 [ 559.263137][T10506] ? __fget_files+0x3a0/0x420 [ 559.263178][T10506] __x64_sys_sendmsg+0x19b/0x260 [ 559.263203][T10506] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 559.263241][T10506] ? do_syscall_64+0xba/0x210 [ 559.263267][T10506] do_syscall_64+0xf6/0x210 [ 559.263287][T10506] ? clear_bhb_loop+0x45/0xa0 [ 559.263312][T10506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.263332][T10506] RIP: 0033:0x7f405678e969 [ 559.263349][T10506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.263367][T10506] RSP: 002b:00007f4057549038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.263388][T10506] RAX: ffffffffffffffda RBX: 00007f40569b5fa0 RCX: 00007f405678e969 [ 559.263403][T10506] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 559.263415][T10506] RBP: 00007f4057549090 R08: 0000000000000000 R09: 0000000000000000 [ 559.263428][T10506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.263440][T10506] R13: 0000000000000000 R14: 00007f40569b5fa0 R15: 00007ffc1197fb78 [ 559.263470][T10506] [ 559.344633][ T5869] usb 1-1: config 0 descriptor?? [ 559.347328][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.365286][ T5869] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 559.367236][ T52] usb 3-1: Product: syz [ 559.370922][ T5869] usb 1-1: setting power ON [ 559.382634][ T52] usb 3-1: Manufacturer: syz [ 559.382652][ T52] usb 3-1: SerialNumber: syz [ 559.416806][ T52] usb 3-1: config 0 descriptor?? [ 559.423060][ T5868] usb 5-1: config 0 descriptor?? [ 559.480564][ T5869] dvb-usb: bulk message failed: -22 (2/0) [ 559.517711][ T5868] gspca_main: sunplus-2.14.0 probing 041e:400b [ 559.856878][ T5817] usb usb6-port1: attempt power cycle [ 560.184355][ T5868] gspca_sunplus: reg_w_riv err -110 [ 560.232440][ T5868] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 560.339791][ T5869] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 560.349923][T10487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.361750][ T5869] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 560.362743][T10487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.373864][ T5869] usb 1-1: media controller created [ 560.411336][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 560.418027][ T5907] usb 3-1: USB disconnect, device number 75 [ 560.446984][ T5869] usb 1-1: selecting invalid altsetting 6 [ 560.452675][ T5817] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 560.454183][ T5869] usb 1-1: digital interface selection failed (-22) [ 560.467181][ T5869] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 560.480093][ T5817] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 560.480181][ T5869] usb 1-1: setting power OFF [ 560.494161][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.494404][ T5869] dvb-usb: bulk message failed: -22 (2/0) [ 560.509566][ T5869] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 560.519030][ T5869] (NULL device *): no alternate interface [ 560.521660][ T5817] usb 6-1: config 0 descriptor?? [ 560.551011][ T5869] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 560.632610][ T5868] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 560.743771][T10508] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1498'. [ 560.756135][ T5817] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 560.765537][ T5817] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 560.775650][ T5817] [drm:udl_init] *ERROR* Selecting channel failed [ 560.792356][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 560.799303][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.813143][ T5817] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 560.819851][ T5817] [drm] Initialized udl on minor 2 [ 560.825078][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.835895][ T5868] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 560.845143][ T5817] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 560.853031][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.862573][ T5817] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 560.868113][ T5869] usb 1-1: USB disconnect, device number 63 [ 560.870757][ T5907] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 560.887650][ T5907] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 560.898796][ T5817] usb 6-1: USB disconnect, device number 8 [ 560.905118][ T5907] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 560.928229][ T5868] usb 4-1: config 0 descriptor?? [ 560.965043][ T5868] hub 4-1:0.0: USB hub found [ 560.970704][ T30] audit: type=1326 audit(1745658099.241:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10493 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 561.019029][ T30] audit: type=1326 audit(1745658099.241:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10493 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 561.041453][ T30] audit: type=1326 audit(1745658099.241:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10493 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 561.063270][T10518] netlink: 'syz.2.1502': attribute type 1 has an invalid length. [ 561.071560][ T30] audit: type=1326 audit(1745658099.241:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10493 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 561.096536][ T30] audit: type=1326 audit(1745658099.241:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10493 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 561.097344][T10518] GUP no longer grows the stack in syz.2.1502 (10518): 200000004000-200000008000 (200000002000) [ 561.119442][ T30] audit: type=1326 audit(1745658099.241:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10493 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 561.151669][ T30] audit: type=1326 audit(1745658099.241:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10493 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 561.155955][T10518] CPU: 0 UID: 0 PID: 10518 Comm: syz.2.1502 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 561.155984][T10518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 561.155999][T10518] Call Trace: [ 561.156007][T10518] [ 561.156016][T10518] dump_stack_lvl+0x189/0x250 [ 561.156050][T10518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.156077][T10518] ? __pfx__printk+0x10/0x10 [ 561.156105][T10518] ? find_vma+0xe7/0x160 [ 561.156145][T10518] __get_user_pages+0x24e4/0x2a40 [ 561.156203][T10518] ? __pfx___get_user_pages+0x10/0x10 [ 561.156240][T10518] get_user_pages_remote+0x2f9/0xaa0 [ 561.156267][T10518] ? __pfx_mtree_load+0x10/0x10 [ 561.156292][T10518] ? __pfx_get_user_pages_remote+0x10/0x10 [ 561.156329][T10518] __access_remote_vm+0x1f7/0x580 [ 561.156367][T10518] ? __pfx___access_remote_vm+0x10/0x10 [ 561.156405][T10518] ? set_page_refcounted+0xa0/0x1e0 [ 561.156437][T10518] ? alloc_pages_noprof+0xbe/0x190 [ 561.156470][T10518] proc_pid_cmdline_read+0x440/0x840 [ 561.156498][T10518] ? __asan_memset+0x22/0x50 [ 561.156532][T10518] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 561.156564][T10518] ? rw_verify_area+0x258/0x650 [ 561.156593][T10518] vfs_readv+0x5a2/0x840 [ 561.156610][T10518] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 561.156642][T10518] ? __pfx_vfs_readv+0x10/0x10 [ 561.156676][T10518] ? __fget_files+0x2a/0x420 [ 561.156709][T10518] ? __fget_files+0x3a0/0x420 [ 561.156736][T10518] ? __fget_files+0x2a/0x420 [ 561.156774][T10518] __x64_sys_preadv+0x197/0x2a0 [ 561.156801][T10518] ? rcu_is_watching+0x15/0xb0 [ 561.156830][T10518] ? __pfx___x64_sys_preadv+0x10/0x10 [ 561.156862][T10518] ? do_syscall_64+0xba/0x210 [ 561.156886][T10518] do_syscall_64+0xf6/0x210 [ 561.156907][T10518] ? clear_bhb_loop+0x45/0xa0 [ 561.156930][T10518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.156950][T10518] RIP: 0033:0x7fe820f8e969 [ 561.156966][T10518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.156984][T10518] RSP: 002b:00007fe821d81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 561.157004][T10518] RAX: ffffffffffffffda RBX: 00007fe8211b5fa0 RCX: 00007fe820f8e969 [ 561.157018][T10518] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 561.157031][T10518] RBP: 00007fe821010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 561.157044][T10518] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 561.157055][T10518] R13: 0000000000000000 R14: 00007fe8211b5fa0 R15: 00007ffce6749da8 [ 561.157085][T10518] [ 561.352909][ T5869] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 561.438107][ T5868] hub 4-1:0.0: 1 port detected [ 561.460214][ T30] audit: type=1326 audit(1745658099.241:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10493 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 561.487547][ T30] audit: type=1326 audit(1745658099.241:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10493 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 561.515825][ T30] audit: type=1326 audit(1745658099.241:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10493 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 561.639250][ T5868] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 561.646470][ T5868] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 561.661455][ T5868] usbhid 4-1:0.0: can't add hid device: -71 [ 561.667713][ T5868] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 561.668481][ T5869] usb 1-1: config 0 has no interfaces? [ 561.699219][ T5869] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 561.709670][ T5868] usb 4-1: USB disconnect, device number 77 [ 561.711810][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.731387][ T5869] usb 1-1: Product: syz [ 561.736008][ T5869] usb 1-1: Manufacturer: syz [ 561.740710][ T5869] usb 1-1: SerialNumber: syz [ 561.755811][ T5869] usb 1-1: config 0 descriptor?? [ 561.807851][T10531] FAULT_INJECTION: forcing a failure. [ 561.807851][T10531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.821218][ T5867] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 561.821839][T10531] CPU: 1 UID: 0 PID: 10531 Comm: syz.2.1508 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 561.821869][T10531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 561.821884][T10531] Call Trace: [ 561.821893][T10531] [ 561.821903][T10531] dump_stack_lvl+0x189/0x250 [ 561.821937][T10531] ? __lock_acquire+0xaac/0xd20 [ 561.821969][T10531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.822001][T10531] ? __pfx__printk+0x10/0x10 [ 561.822036][T10531] ? __might_fault+0xb0/0x130 [ 561.822082][T10531] should_fail_ex+0x414/0x560 [ 561.822123][T10531] _copy_from_user+0x2d/0xb0 [ 561.822153][T10531] __sys_bpf+0x1ed/0x860 [ 561.822181][T10531] ? __pfx___sys_bpf+0x10/0x10 [ 561.822226][T10531] ? ksys_write+0x1f0/0x250 [ 561.822269][T10531] __x64_sys_bpf+0x7c/0x90 [ 561.822292][T10531] do_syscall_64+0xf6/0x210 [ 561.822317][T10531] ? clear_bhb_loop+0x45/0xa0 [ 561.822352][T10531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.822374][T10531] RIP: 0033:0x7fe820f8e969 [ 561.822394][T10531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.822413][T10531] RSP: 002b:00007fe821d81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 561.822437][T10531] RAX: ffffffffffffffda RBX: 00007fe8211b5fa0 RCX: 00007fe820f8e969 [ 561.822453][T10531] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 561.822468][T10531] RBP: 00007fe821d81090 R08: 0000000000000000 R09: 0000000000000000 [ 561.822483][T10531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.822495][T10531] R13: 0000000000000000 R14: 00007fe8211b5fa0 R15: 00007ffce6749da8 [ 561.822531][T10531] [ 562.045022][ T5869] usb 5-1: USB disconnect, device number 69 [ 562.046231][T10515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.066782][T10515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.100523][ T840] usb 1-1: USB disconnect, device number 64 [ 562.212287][ T5867] usb 6-1: Using ep0 maxpacket: 32 [ 562.225756][ T5867] usb 6-1: config 0 has an invalid interface number: 61 but max is 1 [ 562.258668][ T5867] usb 6-1: config 0 has an invalid interface number: 98 but max is 1 [ 562.280755][ T5867] usb 6-1: config 0 has no interface number 0 [ 562.315709][ T5867] usb 6-1: config 0 has no interface number 1 [ 562.418551][ T5867] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 562.495620][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.565177][ T5867] usb 6-1: Product: syz [ 562.600731][ T5867] usb 6-1: Manufacturer: syz [ 562.631693][ T5867] usb 6-1: SerialNumber: syz [ 562.640293][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.742447][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.853149][ T5867] usb 6-1: config 0 descriptor?? [ 563.013388][T10541] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1512'. [ 563.049118][T10541] macvlan1: entered promiscuous mode [ 563.058376][T10541] macvlan1: entered allmulticast mode [ 563.107513][ T5867] viperboard 6-1:0.61: version 0.00 found at bus 006 address 009 [ 563.195732][ T5867] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 563.264359][ T5867] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 563.284725][T10553] FAULT_INJECTION: forcing a failure. [ 563.284725][T10553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.321168][T10553] CPU: 1 UID: 0 PID: 10553 Comm: syz.2.1518 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 563.321201][T10553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 563.321213][T10553] Call Trace: [ 563.321221][T10553] [ 563.321229][T10553] dump_stack_lvl+0x189/0x250 [ 563.321256][T10553] ? __lock_acquire+0xaac/0xd20 [ 563.321281][T10553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 563.321305][T10553] ? __pfx__printk+0x10/0x10 [ 563.321333][T10553] ? __might_fault+0xb0/0x130 [ 563.321370][T10553] should_fail_ex+0x414/0x560 [ 563.321402][T10553] _copy_from_user+0x2d/0xb0 [ 563.321426][T10553] ___sys_sendmsg+0x158/0x2a0 [ 563.321492][T10553] ? __pfx____sys_sendmsg+0x10/0x10 [ 563.321546][T10553] ? __fget_files+0x2a/0x420 [ 563.321571][T10553] ? __fget_files+0x3a0/0x420 [ 563.321607][T10553] __x64_sys_sendmsg+0x19b/0x260 [ 563.321629][T10553] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 563.321664][T10553] ? do_syscall_64+0xba/0x210 [ 563.321687][T10553] do_syscall_64+0xf6/0x210 [ 563.321705][T10553] ? clear_bhb_loop+0x45/0xa0 [ 563.321728][T10553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.321746][T10553] RIP: 0033:0x7fe820f8e969 [ 563.321762][T10553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.321778][T10553] RSP: 002b:00007fe821d81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.321797][T10553] RAX: ffffffffffffffda RBX: 00007fe8211b5fa0 RCX: 00007fe820f8e969 [ 563.321811][T10553] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 563.321822][T10553] RBP: 00007fe821d81090 R08: 0000000000000000 R09: 0000000000000000 [ 563.321834][T10553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.321844][T10553] R13: 0000000000000000 R14: 00007fe8211b5fa0 R15: 00007ffce6749da8 [ 563.321872][T10553] [ 563.542070][T10555] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 563.822383][ T5869] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 563.935144][ T5867] viperboard 6-1:0.98: version 0.00 found at bus 006 address 009 [ 563.996560][ T5867] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 564.093302][T10562] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 564.464894][ T5867] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 564.482318][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 564.489303][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 564.551296][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 564.586562][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 564.652791][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 564.698051][ T5869] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 564.721657][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.756625][ T5869] usb 1-1: Product: syz [ 564.763484][ T5867] usb 6-1: USB disconnect, device number 9 [ 564.772656][ T5869] usb 1-1: Manufacturer: syz [ 564.786773][ T5869] usb 1-1: SerialNumber: syz [ 564.804835][ T5869] usb 1-1: config 0 descriptor?? [ 564.992401][ T5868] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 565.113237][ T5869] appledisplay 1-1:0.0: Error while getting initial brightness: -110 [ 565.134300][ T5869] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -110 [ 565.145171][ T5868] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.146224][T10546] syzkaller0: entered promiscuous mode [ 565.164557][ T5868] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 565.166237][T10546] syzkaller0: entered allmulticast mode [ 565.219891][ T5868] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 565.240328][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.263463][ T5868] usb 4-1: config 0 descriptor?? [ 565.312525][ T5817] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 565.484091][ T5817] usb 3-1: config 0 has no interfaces? [ 565.495781][ T5868] usb 4-1: USB disconnect, device number 78 [ 565.505439][ T5817] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 565.531811][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.558211][ T5817] usb 3-1: Product: syz [ 565.572102][ T5817] usb 3-1: Manufacturer: syz [ 565.593433][ T5817] usb 3-1: SerialNumber: syz [ 565.607798][ T5817] usb 3-1: config 0 descriptor?? [ 565.694741][T10584] FAULT_INJECTION: forcing a failure. [ 565.694741][T10584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.709713][T10584] CPU: 0 UID: 0 PID: 10584 Comm: syz.5.1529 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 565.709735][T10584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 565.709747][T10584] Call Trace: [ 565.709754][T10584] [ 565.709762][T10584] dump_stack_lvl+0x189/0x250 [ 565.709787][T10584] ? __lock_acquire+0xaac/0xd20 [ 565.709813][T10584] ? __pfx_dump_stack_lvl+0x10/0x10 [ 565.709837][T10584] ? __pfx__printk+0x10/0x10 [ 565.709863][T10584] ? __might_fault+0xb0/0x130 [ 565.709899][T10584] should_fail_ex+0x414/0x560 [ 565.709930][T10584] _copy_from_user+0x2d/0xb0 [ 565.709954][T10584] ___sys_sendmsg+0x158/0x2a0 [ 565.709990][T10584] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.710043][T10584] ? __fget_files+0x2a/0x420 [ 565.710068][T10584] ? __fget_files+0x3a0/0x420 [ 565.710103][T10584] __x64_sys_sendmsg+0x19b/0x260 [ 565.710126][T10584] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 565.710160][T10584] ? do_syscall_64+0xba/0x210 [ 565.710182][T10584] do_syscall_64+0xf6/0x210 [ 565.710201][T10584] ? clear_bhb_loop+0x45/0xa0 [ 565.710223][T10584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.710246][T10584] RIP: 0033:0x7f90bf38e969 [ 565.710262][T10584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.710276][T10584] RSP: 002b:00007f90c010e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 565.710295][T10584] RAX: ffffffffffffffda RBX: 00007f90bf5b5fa0 RCX: 00007f90bf38e969 [ 565.710308][T10584] RDX: 0000000000000000 RSI: 0000200000002b80 RDI: 0000000000000004 [ 565.710320][T10584] RBP: 00007f90c010e090 R08: 0000000000000000 R09: 0000000000000000 [ 565.710331][T10584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.710341][T10584] R13: 0000000000000000 R14: 00007f90bf5b5fa0 R15: 00007fff91b257f8 [ 565.710368][T10584] [ 565.898496][ C0] vkms_vblank_simulate: vblank timer overrun [ 565.914880][T10573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.923717][T10573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.932335][ T5868] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 566.058062][ T5867] usb 3-1: USB disconnect, device number 76 [ 566.114455][ T5868] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.125062][ T5868] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 566.135236][ T5868] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 566.147905][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.179306][ T5868] usb 4-1: config 0 descriptor?? [ 568.403961][ T5867] usb 4-1: USB disconnect, device number 79 [ 568.550871][T10601] overlayfs: workdir and upperdir must be separate subtrees [ 569.763439][T10614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.854481][ T5817] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 570.019823][ T5817] usb 6-1: unable to get BOS descriptor or descriptor too short [ 570.028548][ T5817] usb 6-1: not running at top speed; connect to a high speed hub [ 570.037332][ T5817] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 570.047610][ T5817] usb 6-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 570.058607][ T5817] usb 6-1: config 1 interface 0 has no altsetting 0 [ 570.067554][ T5817] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.40 [ 570.076900][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.084985][ T5817] usb 6-1: Product: syz [ 570.089189][ T5817] usb 6-1: Manufacturer: syz [ 570.093911][ T5817] usb 6-1: SerialNumber: syz [ 570.109491][T10607] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 570.361602][T10607] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 570.405151][ T5817] usbhid 6-1:1.0: can't add hid device: -22 [ 570.414144][ T5817] usbhid 6-1:1.0: probe with driver usbhid failed with error -22 [ 570.424992][ T5817] usb 6-1: USB disconnect, device number 10 [ 570.707854][ T5907] usb 1-1: USB disconnect, device number 65 [ 571.607743][ T5817] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 572.264328][T10634] FAULT_INJECTION: forcing a failure. [ 572.264328][T10634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.321613][T10634] CPU: 0 UID: 0 PID: 10634 Comm: syz.2.1545 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 572.321639][T10634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 572.321650][T10634] Call Trace: [ 572.321658][T10634] [ 572.321665][T10634] dump_stack_lvl+0x189/0x250 [ 572.321693][T10634] ? __lock_acquire+0xaac/0xd20 [ 572.321718][T10634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 572.321742][T10634] ? __pfx__printk+0x10/0x10 [ 572.321769][T10634] ? __might_fault+0xb0/0x130 [ 572.321806][T10634] should_fail_ex+0x414/0x560 [ 572.321838][T10634] _copy_from_user+0x2d/0xb0 [ 572.321862][T10634] tipc_setsockopt+0x4b2/0x970 [ 572.321894][T10634] ? __pfx_tipc_setsockopt+0x10/0x10 [ 572.321927][T10634] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 572.321945][T10634] ? __pfx_tipc_setsockopt+0x10/0x10 [ 572.321972][T10634] do_sock_setsockopt+0x257/0x3e0 [ 572.321994][T10634] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 572.322010][T10634] ? __fget_files+0x2a/0x420 [ 572.322041][T10634] ? __fget_files+0x3a0/0x420 [ 572.322065][T10634] ? __fget_files+0x2a/0x420 [ 572.322099][T10634] __x64_sys_setsockopt+0x18b/0x220 [ 572.322123][T10634] do_syscall_64+0xf6/0x210 [ 572.322142][T10634] ? clear_bhb_loop+0x45/0xa0 [ 572.322164][T10634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.322181][T10634] RIP: 0033:0x7fe820f8e969 [ 572.322197][T10634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.322217][T10634] RSP: 002b:00007fe821d81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 572.322235][T10634] RAX: ffffffffffffffda RBX: 00007fe8211b5fa0 RCX: 00007fe820f8e969 [ 572.322249][T10634] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 572.322260][T10634] RBP: 00007fe821d81090 R08: 0000000000000043 R09: 0000000000000000 [ 572.322271][T10634] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 572.322282][T10634] R13: 0000000000000000 R14: 00007fe8211b5fa0 R15: 00007ffce6749da8 [ 572.322309][T10634] [ 572.400051][ T5817] usb 5-1: Using ep0 maxpacket: 32 [ 572.614448][ T5817] usb 5-1: config 0 has an invalid interface number: 61 but max is 1 [ 572.622952][ T5817] usb 5-1: config 0 has an invalid interface number: 98 but max is 1 [ 572.632466][ T5817] usb 5-1: config 0 has no interface number 0 [ 572.672473][ T5817] usb 5-1: config 0 has no interface number 1 [ 572.690671][ T5817] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 572.700012][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.719129][ T5817] usb 5-1: Product: syz [ 572.723475][ T5868] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 572.741297][ T5817] usb 5-1: Manufacturer: syz [ 572.842756][ T5817] usb 5-1: SerialNumber: syz [ 572.911579][ T5868] usb 1-1: config 0 has no interfaces? [ 572.927808][ T5868] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 572.943448][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.961716][ T5868] usb 1-1: Product: syz [ 572.968215][ T5868] usb 1-1: Manufacturer: syz [ 572.974451][ T5817] usb 5-1: config 0 descriptor?? [ 572.986058][ T5868] usb 1-1: SerialNumber: syz [ 572.998712][ T5868] usb 1-1: config 0 descriptor?? [ 573.104803][ T5817] viperboard 5-1:0.61: version 0.00 found at bus 005 address 070 [ 573.287100][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 573.287115][ T30] audit: type=1326 audit(1745658111.561:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10620 comm="syz.4.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 573.319959][T10632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.378332][ T5817] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 573.387888][ T5817] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 573.408794][ T5817] viperboard 5-1:0.98: version 0.00 found at bus 005 address 070 [ 573.417062][T10632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.451576][ T5868] usb 1-1: USB disconnect, device number 66 [ 573.468750][ T5817] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 573.500859][ T30] audit: type=1326 audit(1745658111.561:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10620 comm="syz.4.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 573.511254][ T5817] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 573.572443][ T30] audit: type=1326 audit(1745658111.561:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10620 comm="syz.4.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 573.600291][ T30] audit: type=1326 audit(1745658111.561:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10620 comm="syz.4.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 573.636889][T10657] ..@ÿ: renamed from bond_slave_0 (while UP) [ 573.797500][ T30] audit: type=1326 audit(1745658112.081:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10620 comm="syz.4.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 573.880829][ T30] audit: type=1326 audit(1745658112.081:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10620 comm="syz.4.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 573.882718][ T5869] usb 5-1: USB disconnect, device number 70 [ 574.032372][ T5868] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 574.214125][ T5868] usb 6-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 574.284540][ T5868] usb 6-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 574.382356][ T5868] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x88 is Bulk; changing to Interrupt [ 574.396463][ T5868] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 574.406216][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.416010][T10677] netlink: 'syz.0.1555': attribute type 5 has an invalid length. [ 574.488970][T10664] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 574.601689][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1555'. [ 575.073190][T10688] FAULT_INJECTION: forcing a failure. [ 575.073190][T10688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.200591][T10688] CPU: 1 UID: 0 PID: 10688 Comm: syz.0.1559 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 575.200616][T10688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 575.200627][T10688] Call Trace: [ 575.200635][T10688] [ 575.200642][T10688] dump_stack_lvl+0x189/0x250 [ 575.200668][T10688] ? __lock_acquire+0xaac/0xd20 [ 575.200694][T10688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.200721][T10688] ? __pfx__printk+0x10/0x10 [ 575.200748][T10688] ? __might_fault+0xb0/0x130 [ 575.200784][T10688] should_fail_ex+0x414/0x560 [ 575.200815][T10688] _copy_from_user+0x2d/0xb0 [ 575.200838][T10688] __sys_bpf+0x1ed/0x860 [ 575.200860][T10688] ? __pfx___sys_bpf+0x10/0x10 [ 575.200891][T10688] ? ksys_write+0x1f0/0x250 [ 575.200913][T10688] ? rcu_is_watching+0x15/0xb0 [ 575.200946][T10688] __x64_sys_bpf+0x7c/0x90 [ 575.200963][T10688] do_syscall_64+0xf6/0x210 [ 575.200982][T10688] ? clear_bhb_loop+0x45/0xa0 [ 575.201004][T10688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.201022][T10688] RIP: 0033:0x7fdc2038e969 [ 575.201037][T10688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.201052][T10688] RSP: 002b:00007fdc21245038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 575.201071][T10688] RAX: ffffffffffffffda RBX: 00007fdc205b6080 RCX: 00007fdc2038e969 [ 575.201084][T10688] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000009 [ 575.201095][T10688] RBP: 00007fdc21245090 R08: 0000000000000000 R09: 0000000000000000 [ 575.201106][T10688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.201116][T10688] R13: 0000000000000000 R14: 00007fdc205b6080 R15: 00007ffd418cb778 [ 575.201142][T10688] [ 576.701795][T10690] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 576.715628][T10690] Error validating options; rc = [-22] [ 577.340826][T10706] vivid-000: ================= START STATUS ================= [ 577.348628][T10706] vivid-000: Generate PTS: true [ 577.355239][T10706] vivid-000: Generate SCR: true [ 577.360198][T10706] tpg source WxH: 320x180 (R'G'B) [ 577.365319][T10706] tpg field: 1 [ 577.368737][T10706] tpg crop: (0,0)/320x180 [ 577.373167][T10706] tpg compose: (0,0)/320x180 [ 577.377816][T10706] tpg colorspace: 8 [ 577.381658][T10706] tpg transfer function: 0/0 [ 577.386388][T10706] tpg quantization: 0/0 [ 577.390565][T10706] tpg RGB range: 0/2 [ 577.395054][T10706] vivid-000: ================== END STATUS ================== [ 578.438325][T10710] overlayfs: failed to resolve './file0': -2 [ 578.849305][ T5868] usb 6-1: string descriptor 0 read error: -71 [ 579.008909][ T5868] usb 6-1: USB disconnect, device number 11 [ 579.272592][ T5869] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 579.581388][ T5869] usb 4-1: config 0 has no interfaces? [ 579.620041][T10726] Cannot find add_set index 0 as target [ 580.126837][ T5868] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 580.369724][ T5869] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 580.382691][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.390758][ T5869] usb 4-1: Product: syz [ 580.396976][ T5869] usb 4-1: Manufacturer: syz [ 580.405192][ T5869] usb 4-1: SerialNumber: syz [ 580.412956][ T5869] usb 4-1: config 0 descriptor?? [ 580.624937][T10715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.632374][ T5868] usb 6-1: Using ep0 maxpacket: 32 [ 580.643550][ T5868] usb 6-1: config 0 has an invalid interface number: 61 but max is 1 [ 580.651651][ T5868] usb 6-1: config 0 has an invalid interface number: 98 but max is 1 [ 580.663630][ T5868] usb 6-1: config 0 has no interface number 0 [ 580.669796][ T5868] usb 6-1: config 0 has no interface number 1 [ 580.705331][ T5868] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 580.727217][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.736682][T10715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.783660][ T5868] usb 6-1: Product: syz [ 580.809984][ T5868] usb 6-1: Manufacturer: syz [ 580.829231][ T5868] usb 6-1: SerialNumber: syz [ 580.845274][ T5869] usb 4-1: USB disconnect, device number 80 [ 580.913906][ T5868] usb 6-1: config 0 descriptor?? [ 580.941180][ T12] bridge_slave_1: left allmulticast mode [ 581.141609][ T12] bridge_slave_1: left promiscuous mode [ 581.150459][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.167925][ T12] bridge_slave_0: left allmulticast mode [ 581.174316][ T12] bridge_slave_0: left promiscuous mode [ 581.247819][T10740] input: syz1 as /devices/virtual/input/input70 [ 581.273005][ T5868] viperboard 6-1:0.61: version 0.00 found at bus 006 address 012 [ 581.831791][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.852289][ T30] audit: type=1326 audit(1745658120.121:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10720 comm="syz.5.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bf38e969 code=0x7ffc0000 [ 581.854661][ T5868] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 581.910563][ T30] audit: type=1326 audit(1745658120.121:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10720 comm="syz.5.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bf38e969 code=0x7ffc0000 [ 581.925140][ T5868] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 582.020714][ T30] audit: type=1326 audit(1745658120.281:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10720 comm="syz.5.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f90bf38e969 code=0x7ffc0000 [ 582.065838][ T5868] viperboard 6-1:0.98: version 0.00 found at bus 006 address 012 [ 582.129923][T10755] xt_policy: output policy not valid in PREROUTING and INPUT [ 582.151277][ T5868] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 582.236474][T10759] vivid-000: ================= START STATUS ================= [ 582.244388][T10759] vivid-000: Generate PTS: true [ 582.249505][T10759] vivid-000: Generate SCR: true [ 582.254593][T10759] tpg source WxH: 320x180 (R'G'B) [ 582.259726][T10759] tpg field: 1 [ 582.263249][T10759] tpg crop: (0,0)/320x180 [ 582.267655][T10759] tpg compose: (0,0)/320x180 [ 582.272368][T10759] tpg colorspace: 8 [ 582.276262][T10759] tpg transfer function: 0/0 [ 582.280898][T10759] tpg quantization: 0/0 [ 582.285178][T10759] tpg RGB range: 0/2 [ 582.289135][T10759] vivid-000: ================== END STATUS ================== [ 582.582482][T10743] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 582.644190][ T840] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 582.869512][ T840] usb 1-1: Using ep0 maxpacket: 8 [ 583.030562][ T5868] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 583.044787][ T840] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 583.080241][ T30] audit: type=1326 audit(1745658121.351:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10720 comm="syz.5.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bf38e969 code=0x7ffc0000 [ 583.104594][ T840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.147711][ T30] audit: type=1326 audit(1745658121.351:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10720 comm="syz.5.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bf38e969 code=0x7ffc0000 [ 583.156217][ T5869] usb 6-1: USB disconnect, device number 12 [ 583.193906][ T840] usb 1-1: Product: syz [ 583.198089][ T840] usb 1-1: Manufacturer: syz [ 583.225506][T10743] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 583.255744][T10743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.282820][ T840] usb 1-1: SerialNumber: syz [ 583.291402][T10743] usb 4-1: config 0 descriptor?? [ 583.356800][T10765] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 583.420340][ T840] usb 1-1: config 0 descriptor?? [ 583.653394][ T840] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 583.678833][ T840] usb 1-1: setting power ON [ 583.762322][ T840] dvb-usb: bulk message failed: -22 (2/0) [ 583.793134][ T840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 583.804057][T10755] dvb-usb: bulk message failed: -22 (3/0) [ 583.833016][T10755] usb 1-1: gpio_write failed. [ 583.833996][ T840] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 583.847622][T10755] cxusb: i2c rd: len=8192 is too big! [ 583.847622][T10755] [ 583.866977][ T840] usb 1-1: media controller created [ 583.902673][ T840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 583.945783][ T840] usb 1-1: selecting invalid altsetting 6 [ 583.968309][ T840] usb 1-1: digital interface selection failed (-22) [ 583.975290][ T840] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 583.984673][ T840] usb 1-1: setting power OFF [ 583.996897][ T840] dvb-usb: bulk message failed: -22 (2/0) [ 584.003898][ T840] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 584.013608][ T840] (NULL device *): no alternate interface [ 584.136624][T10771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.188354][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.199012][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.209268][ T12] bond0 (unregistering): Released all slaves [ 584.240334][T10749] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1572'. [ 584.428204][ T840] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 584.528182][ T840] usb 1-1: USB disconnect, device number 67 [ 584.630863][T10743] usb 4-1: Cannot set autoneg [ 584.652838][T10743] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 584.942566][T10743] usb 4-1: USB disconnect, device number 81 [ 585.261173][T10801] hub 2-0:1.0: USB hub found [ 585.269468][T10801] hub 2-0:1.0: 1 port detected [ 586.083032][ T12] hsr_slave_0: left promiscuous mode [ 586.089596][ T12] hsr_slave_1: left promiscuous mode [ 586.090526][T10812] FAULT_INJECTION: forcing a failure. [ 586.090526][T10812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.099636][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.125892][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.143136][ T840] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 586.163109][T10812] CPU: 0 UID: 0 PID: 10812 Comm: syz.0.1584 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 586.163134][T10812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 586.163146][T10812] Call Trace: [ 586.163154][T10812] [ 586.163161][T10812] dump_stack_lvl+0x189/0x250 [ 586.163188][T10812] ? __lock_acquire+0xaac/0xd20 [ 586.163226][T10812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 586.163250][T10812] ? __pfx__printk+0x10/0x10 [ 586.163276][T10812] ? __might_fault+0xb0/0x130 [ 586.163313][T10812] should_fail_ex+0x414/0x560 [ 586.163349][T10812] _copy_from_user+0x2d/0xb0 [ 586.163373][T10812] __sys_bpf+0x1ed/0x860 [ 586.163395][T10812] ? __pfx___sys_bpf+0x10/0x10 [ 586.163427][T10812] ? ksys_write+0x1f0/0x250 [ 586.163449][T10812] ? rcu_is_watching+0x15/0xb0 [ 586.163483][T10812] __x64_sys_bpf+0x7c/0x90 [ 586.163502][T10812] do_syscall_64+0xf6/0x210 [ 586.163523][T10812] ? clear_bhb_loop+0x45/0xa0 [ 586.163545][T10812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.163562][T10812] RIP: 0033:0x7fdc2038e969 [ 586.163578][T10812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.163594][T10812] RSP: 002b:00007fdc21266038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 586.163613][T10812] RAX: ffffffffffffffda RBX: 00007fdc205b5fa0 RCX: 00007fdc2038e969 [ 586.163626][T10812] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000001 [ 586.163638][T10812] RBP: 00007fdc21266090 R08: 0000000000000000 R09: 0000000000000000 [ 586.163649][T10812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.163660][T10812] R13: 0000000000000000 R14: 00007fdc205b5fa0 R15: 00007ffd418cb778 [ 586.163687][T10812] [ 586.346071][T10815] vivid-000: ================= START STATUS ================= [ 586.354045][T10815] vivid-000: Generate PTS: true [ 586.359187][T10815] vivid-000: Generate SCR: true [ 586.364338][T10815] tpg source WxH: 320x180 (R'G'B) [ 586.369636][T10815] tpg field: 1 [ 586.373298][T10815] tpg crop: (0,0)/320x180 [ 586.377896][T10815] tpg compose: (0,0)/320x180 [ 586.382605][T10815] tpg colorspace: 8 [ 586.386514][T10815] tpg transfer function: 0/0 [ 586.391242][T10815] tpg quantization: 0/0 [ 586.395531][T10815] tpg RGB range: 0/2 [ 586.399534][T10815] vivid-000: ================== END STATUS ================== [ 586.751197][ T5868] usb 5-1: new low-speed USB device number 71 using dummy_hcd [ 586.776953][ T840] usb 6-1: config 0 has no interfaces? [ 586.851367][ T840] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 586.972868][ T840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.012123][ T840] usb 6-1: Product: syz [ 587.036653][ T840] usb 6-1: Manufacturer: syz [ 587.051774][ T840] usb 6-1: SerialNumber: syz [ 587.072876][ T840] usb 6-1: config 0 descriptor?? [ 587.080283][T10820] xt_policy: output policy not valid in PREROUTING and INPUT [ 587.116601][ T5868] usb 5-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 587.127462][ T5868] usb 5-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 587.139787][ T5868] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x88 is Bulk; changing to Interrupt [ 587.150899][ T5868] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 587.161173][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.175632][T10806] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 587.262513][ T5869] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 587.288969][T10805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.312553][T10805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.325948][ T840] usb 6-1: USB disconnect, device number 13 [ 587.372449][T10074] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 587.552403][T10074] usb 3-1: Using ep0 maxpacket: 8 [ 587.608573][T10074] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 587.651300][T10074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.700562][T10074] usb 3-1: Product: syz [ 587.710227][T10074] usb 3-1: Manufacturer: syz [ 587.715795][T10074] usb 3-1: SerialNumber: syz [ 587.720614][ T5869] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 587.728772][T10074] usb 3-1: config 0 descriptor?? [ 587.730299][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.740021][T10074] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 587.754611][ T5869] usb 4-1: Product: syz [ 587.758803][ T5869] usb 4-1: Manufacturer: syz [ 587.763356][T10074] usb 3-1: setting power ON [ 587.763652][ T5869] usb 4-1: SerialNumber: syz [ 587.768349][T10074] dvb-usb: bulk message failed: -22 (2/0) [ 587.786343][ T5869] usb 4-1: config 0 descriptor?? [ 587.793797][T10074] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 587.795939][ T5869] ch341 4-1:0.0: ch341-uart converter detected [ 587.804340][T10074] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 587.828795][T10074] usb 3-1: media controller created [ 587.860406][T10074] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 587.916718][T10074] usb 3-1: selecting invalid altsetting 6 [ 587.936819][T10074] usb 3-1: digital interface selection failed (-22) [ 587.955695][T10074] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 587.960515][T10820] dvb-usb: bulk message failed: -22 (3/0) [ 587.975171][T10074] usb 3-1: setting power OFF [ 587.981752][T10820] usb 3-1: gpio_write failed. [ 587.998403][T10074] dvb-usb: bulk message failed: -22 (2/0) [ 588.010491][T10820] cxusb: i2c rd: len=8192 is too big! [ 588.010491][T10820] [ 588.018541][T10074] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 588.095486][T10074] (NULL device *): no alternate interface [ 588.115738][T10828] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 588.120901][T10829] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1590'. [ 588.446857][T10829] netlink: zone id is out of range [ 588.504149][T10829] netlink: get zone limit has 8 unknown bytes [ 588.592544][ T12] team0 (unregistering): Port device team_slave_1 removed [ 588.599499][T10832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.634606][ T12] team0 (unregistering): Port device team_slave_0 removed [ 588.654393][T10074] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 588.682125][T10074] usb 3-1: USB disconnect, device number 77 [ 588.890125][ T5868] usb 5-1: string descriptor 0 read error: -71 [ 588.916020][ T5869] ch341-uart ttyUSB0: failed to read break control: -71 [ 588.929101][ T5869] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 588.983103][ T5869] usb 4-1: USB disconnect, device number 82 [ 589.003386][ T5869] ch341 4-1:0.0: device disconnected [ 589.005374][ T5868] usb 5-1: USB disconnect, device number 71 [ 589.176323][T10841] vivid-000: disconnect [ 589.815823][T10854] input: syz1 as /devices/virtual/input/input71 [ 591.561891][T10883] netlink: 'syz.2.1601': attribute type 13 has an invalid length. [ 591.565184][T10881] xt_policy: output policy not valid in PREROUTING and INPUT [ 591.582130][T10074] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 591.861939][T10892] program syz.3.1604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 591.911539][T10074] usb 6-1: config 0 has no interfaces? [ 591.930936][T10074] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 591.957196][T10896] input: syz1 as /devices/virtual/input/input72 [ 592.009187][ T52] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 592.200814][T10074] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.224324][ T52] usb 1-1: Using ep0 maxpacket: 8 [ 592.394588][ T52] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 592.409057][T10074] usb 6-1: Product: syz [ 592.419758][T10074] usb 6-1: Manufacturer: syz [ 592.430189][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.459218][T10074] usb 6-1: SerialNumber: syz [ 592.474659][ T52] usb 1-1: Product: syz [ 592.481901][T10074] usb 6-1: config 0 descriptor?? [ 592.512542][ T52] usb 1-1: Manufacturer: syz [ 592.517171][ T52] usb 1-1: SerialNumber: syz [ 592.551719][ T52] usb 1-1: config 0 descriptor?? [ 592.590355][ T52] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 592.605177][T10883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.605654][ T52] usb 1-1: setting power ON [ 592.620861][ T52] dvb-usb: bulk message failed: -22 (2/0) [ 592.629529][T10902] netlink: zone id is out of range [ 592.633822][ T52] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 592.646941][T10883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.647647][T10902] netlink: zone id is out of range [ 592.660304][T10902] netlink: zone id is out of range [ 592.666868][ T52] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 592.675795][T10902] netlink: zone id is out of range [ 592.680924][T10902] netlink: zone id is out of range [ 592.686184][ T52] usb 1-1: media controller created [ 592.708224][T10902] netlink: zone id is out of range [ 592.721875][ T52] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 592.736529][T10873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.756600][T10873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.816354][ T5869] usb 6-1: USB disconnect, device number 14 [ 592.830563][T10881] dvb-usb: bulk message failed: -22 (3/0) [ 592.861318][T10881] usb 1-1: gpio_write failed. [ 592.947608][T10881] cxusb: i2c rd: len=8192 is too big! [ 592.947608][T10881] [ 593.207359][T10883] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.221270][T10883] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.249807][T10883] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.271096][T10883] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.301933][ T52] usb 1-1: selecting invalid altsetting 6 [ 593.308836][ T52] usb 1-1: digital interface selection failed (-22) [ 593.333735][T10903] netlink: 'syz.3.1605': attribute type 1 has an invalid length. [ 593.341543][T10903] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1605'. [ 593.351618][T10903] NCSI netlink: No device for ifindex 0 [ 593.659412][ T52] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 593.672334][ T52] usb 1-1: setting power OFF [ 593.676960][ T52] dvb-usb: bulk message failed: -22 (2/0) [ 593.686827][ T52] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 593.696648][ T52] (NULL device *): no alternate interface [ 593.843266][ T52] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 593.893338][ T52] usb 1-1: USB disconnect, device number 68 [ 593.928430][T10914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.941442][T10908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.954227][ T12] IPVS: stop unused estimator thread 0... [ 594.382930][ T52] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 594.623085][ T52] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 594.726120][ T52] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 594.853265][ T52] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 594.957495][ T52] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 594.998236][T10925] netlink: 'syz.2.1613': attribute type 39 has an invalid length. [ 595.006233][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.021165][ T52] usb 1-1: Product: syz [ 595.037849][ T52] usb 1-1: Manufacturer: syz [ 595.072633][ T52] usb 1-1: SerialNumber: syz [ 595.192321][ T840] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 595.737661][ T30] audit: type=1326 audit(1745658134.021:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10938 comm="syz.4.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 596.087259][ T30] audit: type=1326 audit(1745658134.051:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10938 comm="syz.4.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 596.211729][ T30] audit: type=1326 audit(1745658134.131:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10938 comm="syz.4.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 596.233451][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.636981][ T30] audit: type=1326 audit(1745658134.131:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10938 comm="syz.4.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 596.662750][ T30] audit: type=1326 audit(1745658134.131:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10938 comm="syz.4.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 596.682398][ T10] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 596.689732][ T52] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 69 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 596.726712][ T840] usb 6-1: Using ep0 maxpacket: 16 [ 596.738752][ T30] audit: type=1326 audit(1745658134.131:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10938 comm="syz.4.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 596.766011][ T840] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 596.787854][ T840] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.827342][ T840] usb 6-1: config 0 has no interface number 0 [ 596.834307][ T30] audit: type=1326 audit(1745658134.151:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10938 comm="syz.4.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 596.865696][ T840] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 596.884639][ T840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.911235][ T10] usb 3-1: config 0 has no interfaces? [ 596.919241][T10743] usb 1-1: USB disconnect, device number 69 [ 596.926589][ T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 596.936289][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.944680][ T30] audit: type=1326 audit(1745658134.151:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10938 comm="syz.4.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 596.948714][T10952] xt_policy: output policy not valid in PREROUTING and INPUT [ 596.968922][ T10] usb 3-1: Product: syz [ 596.985751][ T10] usb 3-1: Manufacturer: syz [ 596.990464][ T10] usb 3-1: SerialNumber: syz [ 596.996236][ T30] audit: type=1326 audit(1745658134.151:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10938 comm="syz.4.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 597.018941][ T840] usb 6-1: config 0 descriptor?? [ 597.041826][ T10] usb 3-1: config 0 descriptor?? [ 597.076799][ T840] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 597.092132][ T30] audit: type=1326 audit(1745658134.151:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10938 comm="syz.4.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 597.114533][ T840] usb 6-1: No valid video chain found. [ 597.257340][ T840] usb 6-1: USB disconnect, device number 15 [ 597.280885][T10943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.292332][ T52] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 597.301519][T10943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.315191][ T10] usb 3-1: USB disconnect, device number 78 [ 597.465397][ T52] usb 4-1: Using ep0 maxpacket: 8 [ 597.481372][ T52] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 597.491144][T10743] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 597.499629][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.509208][ T52] usb 4-1: Product: syz [ 597.515579][ T52] usb 4-1: Manufacturer: syz [ 597.520277][ T52] usb 4-1: SerialNumber: syz [ 597.532886][ T52] usb 4-1: config 0 descriptor?? [ 597.541599][ T52] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 597.550021][ T52] usb 4-1: setting power ON [ 597.554823][ T52] dvb-usb: bulk message failed: -22 (2/0) [ 597.565481][ T52] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 597.579241][ T52] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 597.588299][ T52] usb 4-1: media controller created [ 597.612865][ T52] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 597.642871][ T52] usb 4-1: selecting invalid altsetting 6 [ 597.648626][ T52] usb 4-1: digital interface selection failed (-22) [ 597.666983][T10743] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 597.682035][ T52] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 597.693263][T10743] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 597.703816][T10743] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 597.717464][ T52] usb 4-1: setting power OFF [ 597.722088][ T52] dvb-usb: bulk message failed: -22 (2/0) [ 597.744454][T10952] dvb-usb: bulk message failed: -22 (3/0) [ 597.750510][ T52] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 597.760214][T10743] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 597.769779][T10952] usb 4-1: gpio_write failed. [ 597.779553][T10743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.782657][T10952] cxusb: i2c rd: len=8192 is too big! [ 597.782657][T10952] [ 597.788856][ T52] (NULL device *): no alternate interface [ 597.802121][T10743] usb 1-1: Product: syz [ 597.824981][T10743] usb 1-1: Manufacturer: syz [ 597.829688][T10743] usb 1-1: SerialNumber: syz [ 598.280491][T10910] usblp0: removed [ 598.355319][ T52] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 598.557435][T10743] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 70 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 598.760097][T10994] Cannot find add_set index 0 as target [ 599.108759][ T52] usb 4-1: USB disconnect, device number 83 [ 599.120405][T10743] usb 1-1: USB disconnect, device number 70 [ 599.131397][T10743] usblp0: removed [ 600.434428][T11006] input: syz1 as /devices/virtual/input/input73 [ 601.236684][T11017] FAULT_INJECTION: forcing a failure. [ 601.236684][T11017] name failslab, interval 1, probability 0, space 0, times 0 [ 601.272786][T11017] CPU: 1 UID: 0 PID: 11017 Comm: syz.0.1629 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 601.272810][T11017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 601.272821][T11017] Call Trace: [ 601.272828][T11017] [ 601.272837][T11017] dump_stack_lvl+0x189/0x250 [ 601.272868][T11017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 601.272892][T11017] ? __pfx__printk+0x10/0x10 [ 601.272934][T11017] ? __pfx___might_resched+0x10/0x10 [ 601.272959][T11017] ? fs_reclaim_acquire+0x7d/0x100 [ 601.272982][T11017] should_fail_ex+0x414/0x560 [ 601.273013][T11017] should_failslab+0xa8/0x100 [ 601.273041][T11017] __kmalloc_noprof+0xcb/0x4f0 [ 601.273065][T11017] ? kfree+0x4d/0x440 [ 601.273085][T11017] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 601.273113][T11017] tomoyo_realpath_from_path+0xe3/0x5d0 [ 601.273136][T11017] ? tomoyo_domain+0xda/0x130 [ 601.273164][T11017] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 601.273181][T11017] tomoyo_path_number_perm+0x1e8/0x5a0 [ 601.273202][T11017] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 601.273235][T11017] ? __lock_acquire+0xaac/0xd20 [ 601.273275][T11017] ? __fget_files+0x2a/0x420 [ 601.273322][T11017] ? __fget_files+0x3a0/0x420 [ 601.273360][T11017] ? __fget_files+0x2a/0x420 [ 601.273390][T11017] security_file_ioctl+0xcb/0x2d0 [ 601.273411][T11017] __se_sys_ioctl+0x47/0x170 [ 601.273434][T11017] do_syscall_64+0xf6/0x210 [ 601.273454][T11017] ? clear_bhb_loop+0x45/0xa0 [ 601.273476][T11017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.273494][T11017] RIP: 0033:0x7fdc2038e969 [ 601.273509][T11017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.273524][T11017] RSP: 002b:00007fdc21266038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 601.273543][T11017] RAX: ffffffffffffffda RBX: 00007fdc205b5fa0 RCX: 00007fdc2038e969 [ 601.273556][T11017] RDX: 0000200000000080 RSI: 000000004008af12 RDI: 0000000000000003 [ 601.273568][T11017] RBP: 00007fdc21266090 R08: 0000000000000000 R09: 0000000000000000 [ 601.273579][T11017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.273589][T11017] R13: 0000000000000000 R14: 00007fdc205b5fa0 R15: 00007ffd418cb778 [ 601.273616][T11017] [ 601.273635][T11017] ERROR: Out of memory at tomoyo_realpath_from_path. [ 601.472461][ T840] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 601.702500][ T840] usb 5-1: Using ep0 maxpacket: 8 [ 601.709996][ T840] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 601.739746][ T840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.763167][ T840] usb 5-1: config 0 descriptor?? [ 601.913251][ T52] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 602.036994][T11039] xt_policy: output policy not valid in PREROUTING and INPUT [ 602.072307][ T52] usb 1-1: Using ep0 maxpacket: 16 [ 602.090163][ T52] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 602.132533][ T52] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.133486][T11042] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 602.152757][ T52] usb 1-1: config 0 has no interface number 0 [ 602.172965][ T52] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 602.241531][ T840] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 602.245768][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.373247][ T5869] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 602.562981][ T52] usb 1-1: config 0 descriptor?? [ 602.590694][ T52] usb 1-1: Found UVC 0.00 device (0bd3:0555) [ 602.605446][ T52] usb 1-1: No valid video chain found. [ 602.655555][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 602.655570][ T30] audit: type=1800 audit(1745658140.931:1650): pid=11041 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1635" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=13622 res=0 errno=0 [ 602.714024][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 602.728741][ T5869] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 602.741004][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.789202][ T5869] usb 4-1: Product: syz [ 602.794291][ T52] usb 1-1: USB disconnect, device number 71 [ 602.799224][ T5869] usb 4-1: Manufacturer: syz [ 602.819519][ T5869] usb 4-1: SerialNumber: syz [ 602.855440][ T5869] usb 4-1: config 0 descriptor?? [ 602.906787][ T5869] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 602.922153][ T5869] usb 4-1: setting power ON [ 602.929436][ T5869] dvb-usb: bulk message failed: -22 (2/0) [ 603.800339][ T5869] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 603.812641][ T5869] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 603.827498][ T5869] usb 4-1: media controller created [ 603.852014][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 603.917909][ T5869] usb 4-1: selecting invalid altsetting 6 [ 603.942401][ T5869] usb 4-1: digital interface selection failed (-22) [ 603.959123][ T5869] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 604.094299][ T5869] usb 4-1: setting power OFF [ 604.108107][ T5869] dvb-usb: bulk message failed: -22 (2/0) [ 604.191054][T11070] input: syz1 as /devices/virtual/input/input74 [ 604.755353][ T5869] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 604.764861][ T5869] (NULL device *): no alternate interface [ 604.784830][T11074] mmap: syz.5.1641 (11074) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 604.883230][ T5867] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 604.949938][ T840] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 604.978448][ T840] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 604.999071][ T5869] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 605.019017][ T840] asix 5-1:0.0: probe with driver asix failed with error -71 [ 605.057686][T11079] FAULT_INJECTION: forcing a failure. [ 605.057686][T11079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.078288][ T840] usb 5-1: USB disconnect, device number 72 [ 605.086899][ T5869] usb 4-1: USB disconnect, device number 84 [ 605.102996][T11079] CPU: 1 UID: 0 PID: 11079 Comm: syz.4.1643 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 605.103020][T11079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 605.103030][T11079] Call Trace: [ 605.103038][T11079] [ 605.103045][T11079] dump_stack_lvl+0x189/0x250 [ 605.103071][T11079] ? __lock_acquire+0xaac/0xd20 [ 605.103097][T11079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 605.103119][T11079] ? __pfx__printk+0x10/0x10 [ 605.103146][T11079] ? __might_fault+0xb0/0x130 [ 605.103179][T11079] should_fail_ex+0x414/0x560 [ 605.103210][T11079] _copy_from_user+0x2d/0xb0 [ 605.103233][T11079] ___sys_recvmsg+0x12e/0x510 [ 605.103258][T11079] ? __pfx____sys_recvmsg+0x10/0x10 [ 605.103300][T11079] ? __fget_files+0x3a0/0x420 [ 605.103335][T11079] __x64_sys_recvmsg+0x198/0x260 [ 605.103357][T11079] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 605.103392][T11079] ? do_syscall_64+0xba/0x210 [ 605.103414][T11079] do_syscall_64+0xf6/0x210 [ 605.103432][T11079] ? clear_bhb_loop+0x45/0xa0 [ 605.103452][T11079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.103469][T11079] RIP: 0033:0x7fe1e858e969 [ 605.103484][T11079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.103500][T11079] RSP: 002b:00007fe1e9402038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 605.103518][T11079] RAX: ffffffffffffffda RBX: 00007fe1e87b5fa0 RCX: 00007fe1e858e969 [ 605.103531][T11079] RDX: 0000000040020100 RSI: 0000200000000000 RDI: 0000000000000003 [ 605.103543][T11079] RBP: 00007fe1e9402090 R08: 0000000000000000 R09: 0000000000000000 [ 605.103554][T11079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.103565][T11079] R13: 0000000000000000 R14: 00007fe1e87b5fa0 R15: 00007ffe1d12f0c8 [ 605.103591][T11079] [ 605.152304][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 605.346604][T11081] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 605.359752][ T5867] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 605.371485][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.391101][ T5867] usb 3-1: config 0 descriptor?? [ 605.402666][ T5867] gspca_main: sunplus-2.14.0 probing 041e:400b [ 605.651065][ T840] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 605.727203][T11097] FAULT_INJECTION: forcing a failure. [ 605.727203][T11097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.740838][T11097] CPU: 1 UID: 0 PID: 11097 Comm: syz.3.1648 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 605.740863][T11097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 605.740875][T11097] Call Trace: [ 605.740882][T11097] [ 605.740890][T11097] dump_stack_lvl+0x189/0x250 [ 605.740918][T11097] ? __lock_acquire+0xaac/0xd20 [ 605.740944][T11097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 605.740967][T11097] ? __pfx__printk+0x10/0x10 [ 605.740994][T11097] ? __might_fault+0xb0/0x130 [ 605.741031][T11097] should_fail_ex+0x414/0x560 [ 605.741063][T11097] _copy_from_user+0x2d/0xb0 [ 605.741087][T11097] ___sys_recvmsg+0x12e/0x510 [ 605.741113][T11097] ? __pfx____sys_recvmsg+0x10/0x10 [ 605.741157][T11097] ? __fget_files+0x3a0/0x420 [ 605.741193][T11097] __x64_sys_recvmsg+0x198/0x260 [ 605.741216][T11097] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 605.741251][T11097] ? do_syscall_64+0xba/0x210 [ 605.741273][T11097] do_syscall_64+0xf6/0x210 [ 605.741292][T11097] ? clear_bhb_loop+0x45/0xa0 [ 605.741314][T11097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.741332][T11097] RIP: 0033:0x7f405678e969 [ 605.741348][T11097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.741364][T11097] RSP: 002b:00007f4057549038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 605.741382][T11097] RAX: ffffffffffffffda RBX: 00007f40569b5fa0 RCX: 00007f405678e969 [ 605.741395][T11097] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 605.741406][T11097] RBP: 00007f4057549090 R08: 0000000000000000 R09: 0000000000000000 [ 605.741417][T11097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.741428][T11097] R13: 0000000000000000 R14: 00007f40569b5fa0 R15: 00007ffc1197fb78 [ 605.741456][T11097] [ 605.741713][T11097] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1648'. [ 605.823350][ T840] usb 5-1: Using ep0 maxpacket: 32 [ 605.826891][ T840] usb 5-1: config 0 has an invalid interface number: 61 but max is 1 [ 606.029494][ T30] audit: type=1326 audit(1745658144.311:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe820f8e969 code=0x7ffc0000 [ 606.058919][ T5867] gspca_sunplus: reg_r err -71 [ 606.074871][ T5867] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 606.095727][ T5867] usb 3-1: USB disconnect, device number 79 [ 606.125744][ T30] audit: type=1326 audit(1745658144.311:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe820f8e969 code=0x7ffc0000 [ 606.148722][ T840] usb 5-1: config 0 has an invalid interface number: 98 but max is 1 [ 606.159073][ T840] usb 5-1: config 0 has no interface number 0 [ 606.167994][ T840] usb 5-1: config 0 has no interface number 1 [ 606.178519][ T30] audit: type=1326 audit(1745658144.311:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe820f8e969 code=0x7ffc0000 [ 606.201295][ T30] audit: type=1326 audit(1745658144.311:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe820f8e969 code=0x7ffc0000 [ 606.234493][ T30] audit: type=1326 audit(1745658144.311:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe820f8e969 code=0x7ffc0000 [ 606.234647][ T840] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 606.270146][ T30] audit: type=1326 audit(1745658144.311:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe820f8e969 code=0x7ffc0000 [ 606.292906][ T840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.301074][ T840] usb 5-1: Product: syz [ 606.305618][ T30] audit: type=1326 audit(1745658144.311:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe820f8e969 code=0x7ffc0000 [ 606.327576][ T840] usb 5-1: Manufacturer: syz [ 606.334419][ T840] usb 5-1: SerialNumber: syz [ 606.342630][ T840] usb 5-1: config 0 descriptor?? [ 606.348951][ T30] audit: type=1326 audit(1745658144.311:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe820f8e969 code=0x7ffc0000 [ 606.374711][ T30] audit: type=1326 audit(1745658144.311:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe820f8e969 code=0x7ffc0000 [ 606.462616][ T5869] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 606.483303][ T840] viperboard 5-1:0.61: version 0.00 found at bus 005 address 073 [ 606.517146][ T840] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 606.543671][ T840] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 606.614594][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 606.653651][ T5869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.675289][T11116] fuse: Bad value for 'fd' [ 606.717701][ T840] viperboard 5-1:0.98: version 0.00 found at bus 005 address 073 [ 606.766362][ T5869] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 606.874915][ T5869] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 607.110679][ T840] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 607.119711][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.170385][ T840] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 607.240763][T11119] FAULT_INJECTION: forcing a failure. [ 607.240763][T11119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.257661][ T5869] usb 4-1: config 0 descriptor?? [ 607.380066][T11119] CPU: 0 UID: 0 PID: 11119 Comm: syz.5.1651 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 607.380091][T11119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 607.380102][T11119] Call Trace: [ 607.380109][T11119] [ 607.380117][T11119] dump_stack_lvl+0x189/0x250 [ 607.380143][T11119] ? __lock_acquire+0xaac/0xd20 [ 607.380169][T11119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.380193][T11119] ? __pfx__printk+0x10/0x10 [ 607.380221][T11119] ? __might_fault+0xb0/0x130 [ 607.380260][T11119] should_fail_ex+0x414/0x560 [ 607.380293][T11119] _copy_from_user+0x2d/0xb0 [ 607.380317][T11119] __sys_connect+0x123/0x440 [ 607.380346][T11119] ? __fget_files+0x3a0/0x420 [ 607.380381][T11119] ? __pfx___sys_connect+0x10/0x10 [ 607.380428][T11119] __x64_sys_connect+0x7a/0x90 [ 607.380458][T11119] do_syscall_64+0xf6/0x210 [ 607.380478][T11119] ? clear_bhb_loop+0x45/0xa0 [ 607.380500][T11119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.380517][T11119] RIP: 0033:0x7f90bf38e969 [ 607.380533][T11119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.380549][T11119] RSP: 002b:00007f90bd1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 607.380568][T11119] RAX: ffffffffffffffda RBX: 00007f90bf5b6080 RCX: 00007f90bf38e969 [ 607.380581][T11119] RDX: 0000000000000026 RSI: 0000200000000000 RDI: 0000000000000006 [ 607.380593][T11119] RBP: 00007f90bd1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 607.380604][T11119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.380615][T11119] R13: 0000000000000000 R14: 00007f90bf5b6080 R15: 00007fff91b257f8 [ 607.380643][T11119] [ 607.625080][T11121] xt_policy: output policy not valid in PREROUTING and INPUT [ 607.863128][T11126] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 607.923921][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 607.923963][ T30] audit: type=1326 audit(1745658146.191:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11083 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 608.113182][ T5869] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 608.131924][ T30] audit: type=1326 audit(1745658146.191:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11083 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e858e969 code=0x7ffc0000 [ 608.136082][ T840] usb 5-1: USB disconnect, device number 73 [ 608.253828][ T30] audit: type=1800 audit(1745658146.501:1673): pid=11124 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1653" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=11922 res=0 errno=0 [ 608.282496][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 608.317095][ T5869] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 608.343088][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.361371][ T5869] usb 3-1: Product: syz [ 608.381626][ T5869] usb 3-1: Manufacturer: syz [ 608.411991][ T5869] usb 3-1: SerialNumber: syz [ 608.433047][ T5869] usb 3-1: config 0 descriptor?? [ 608.452080][ T5869] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 608.490636][ T5869] usb 3-1: setting power ON [ 608.501947][ T5869] dvb-usb: bulk message failed: -22 (2/0) [ 608.535576][ T5869] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 608.548667][ T5869] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 608.567533][ T5869] usb 3-1: media controller created [ 608.626029][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 609.014371][T11121] dvb-usb: bulk message failed: -22 (3/0) [ 609.020165][T11121] usb 3-1: gpio_write failed. [ 609.062661][T11121] cxusb: i2c rd: len=8192 is too big! [ 609.062661][T11121] [ 609.075649][ T5869] usb 3-1: selecting invalid altsetting 6 [ 609.090321][ T5869] usb 3-1: digital interface selection failed (-22) [ 609.113793][ T5869] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 609.127865][ T5869] usb 3-1: setting power OFF [ 609.132848][ T5869] dvb-usb: bulk message failed: -22 (2/0) [ 609.140470][ T5869] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 609.156103][ T5869] (NULL device *): no alternate interface [ 609.212423][ T9] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 609.273383][ T5867] usb 4-1: USB disconnect, device number 85 [ 609.410873][ T9] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 610.255884][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.269130][ T9] usb 6-1: config 0 descriptor?? [ 610.372589][ T5869] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 610.429914][T11162] Cannot find add_set index 0 as target [ 610.684442][ T9] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 610.827179][ T5869] usb 3-1: USB disconnect, device number 80 [ 610.851118][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 611.160169][T11173] fuse: Bad value for 'fd' [ 611.947508][ T5868] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 612.065133][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 612.089506][ T9] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 612.096280][ T9] [drm] Initialized udl on minor 2 [ 612.102065][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 612.111798][ T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 612.119182][ T5869] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 612.127173][ T5869] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 612.136294][ T9] usb 6-1: USB disconnect, device number 16 [ 612.252296][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 612.264083][ T5868] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 612.293750][ T30] audit: type=1800 audit(1745658150.571:1674): pid=11174 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1661" name="bus" dev="overlay" ino=1775 res=0 errno=0 [ 612.318124][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.838430][T10743] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 612.884182][ T5868] usb 4-1: config 0 descriptor?? [ 612.916468][ T5868] gspca_main: sunplus-2.14.0 probing 041e:400b [ 613.084629][T10743] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 613.094835][T10743] usb 3-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 613.106512][T10743] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x88 is Bulk; changing to Interrupt [ 613.116599][T10743] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 613.126754][T10743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.138230][T11184] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 613.182301][ T5869] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 613.192555][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 613.242409][ T5867] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 613.342410][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 613.377976][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 613.387541][ T5869] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 613.396783][ T9] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 613.404977][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.413090][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 613.418264][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.428593][ T5869] usb 1-1: Product: syz [ 613.434137][ T5869] usb 1-1: Manufacturer: syz [ 613.438828][ T9] usb 6-1: config 0 has no interface number 0 [ 613.445660][ T5869] usb 1-1: SerialNumber: syz [ 613.450377][ T9] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 613.460940][ T5867] usb 5-1: config 0 has an invalid interface number: 61 but max is 1 [ 613.469919][ T5869] usb 1-1: config 0 descriptor?? [ 613.475129][ T5867] usb 5-1: config 0 has an invalid interface number: 98 but max is 1 [ 613.483342][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.493524][ T5867] usb 5-1: config 0 has no interface number 0 [ 613.501223][ T5869] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 613.510896][ T9] usb 6-1: config 0 descriptor?? [ 613.516116][ T5867] usb 5-1: config 0 has no interface number 1 [ 613.528475][ T5867] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 613.537825][ T9] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 613.545551][ T30] audit: type=1326 audit(1745658151.821:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11168 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405678e969 code=0x7ffc0000 [ 613.547331][ T5868] gspca_sunplus: reg_r err -71 [ 613.567291][ T9] usb 6-1: No valid video chain found. [ 613.569427][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.586216][ T5868] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 613.594881][ T5867] usb 5-1: Product: syz [ 613.599235][ T30] audit: type=1326 audit(1745658151.821:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11168 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405678e969 code=0x7ffc0000 [ 613.614714][ T5868] usb 4-1: USB disconnect, device number 86 [ 613.623443][ T5867] usb 5-1: Manufacturer: syz [ 613.631457][ T5867] usb 5-1: SerialNumber: syz [ 613.639746][ T30] audit: type=1326 audit(1745658151.821:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11168 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f405678e969 code=0x7ffc0000 [ 613.663085][ T5867] usb 5-1: config 0 descriptor?? [ 613.676771][ T30] audit: type=1326 audit(1745658151.821:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11168 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405678e969 code=0x7ffc0000 [ 613.703821][ T30] audit: type=1326 audit(1745658151.821:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11168 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f405678e969 code=0x7ffc0000 [ 613.728729][ T30] audit: type=1326 audit(1745658151.821:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11168 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405678e969 code=0x7ffc0000 [ 613.756814][ T30] audit: type=1326 audit(1745658151.821:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11168 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f405678e969 code=0x7ffc0000 [ 613.772753][ T5867] viperboard 5-1:0.61: version 0.00 found at bus 005 address 074 [ 613.787493][ T30] audit: type=1326 audit(1745658151.821:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11168 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405678e969 code=0x7ffc0000 [ 613.798008][ T5869] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 613.817100][ T30] audit: type=1326 audit(1745658151.821:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11168 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f405678e969 code=0x7ffc0000 [ 613.837928][ T5867] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 613.845539][ T30] audit: type=1326 audit(1745658151.821:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11168 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405678e969 code=0x7ffc0000 [ 613.855349][ T9] usb 6-1: USB disconnect, device number 17 [ 613.887931][ T5869] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 613.895378][ T5867] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 613.916392][ T5869] usb 1-1: USB disconnect, device number 72 [ 613.956152][ T5867] viperboard 5-1:0.98: version 0.00 found at bus 005 address 074 [ 614.021861][ T5867] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 614.041808][ T5867] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 614.078930][ T5867] usb 5-1: USB disconnect, device number 74 [ 614.379304][T11209] program syz.0.1671 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 614.452347][ T5868] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 614.633647][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 614.642809][ T5868] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.642874][ T5868] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 614.642976][ T5868] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 614.643059][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.731321][ T5868] usb 4-1: config 0 descriptor?? [ 614.849755][T11221] Cannot find add_set index 0 as target [ 615.815389][T10743] usb 3-1: string descriptor 0 read error: -71 [ 615.888629][T10743] usb 3-1: USB disconnect, device number 81 [ 615.934715][T11235] fuse: Bad value for 'fd' [ 617.356116][T10743] usb 4-1: USB disconnect, device number 87 [ 617.402701][ T5867] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 617.597885][ T5867] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 617.662689][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.040619][ T5867] usb 6-1: config 0 descriptor?? [ 618.065540][T11265] sctp: [Deprecated]: syz.2.1682 (pid 11265) Use of struct sctp_assoc_value in delayed_ack socket option. [ 618.065540][T11265] Use struct sctp_sack_info instead [ 618.338590][ T5867] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 618.355166][ T5867] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 618.937932][T11281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1686'. [ 619.095311][T11287] FAULT_INJECTION: forcing a failure. [ 619.095311][T11287] name failslab, interval 1, probability 0, space 0, times 0 [ 619.108088][T11287] CPU: 0 UID: 0 PID: 11287 Comm: syz.4.1689 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 619.108105][T11287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 619.108114][T11287] Call Trace: [ 619.108119][T11287] [ 619.108124][T11287] dump_stack_lvl+0x189/0x250 [ 619.108147][T11287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 619.108164][T11287] ? __pfx__printk+0x10/0x10 [ 619.108190][T11287] ? __pfx___might_resched+0x10/0x10 [ 619.108208][T11287] ? fs_reclaim_acquire+0x7d/0x100 [ 619.108224][T11287] should_fail_ex+0x414/0x560 [ 619.108247][T11287] should_failslab+0xa8/0x100 [ 619.108266][T11287] __kmalloc_noprof+0xcb/0x4f0 [ 619.108284][T11287] ? kfree+0x4d/0x440 [ 619.108298][T11287] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 619.108318][T11287] tomoyo_realpath_from_path+0xe3/0x5d0 [ 619.108334][T11287] ? tomoyo_domain+0xda/0x130 [ 619.108353][T11287] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 619.108374][T11287] tomoyo_path_number_perm+0x1e8/0x5a0 [ 619.108388][T11287] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 619.108412][T11287] ? __lock_acquire+0xaac/0xd20 [ 619.108440][T11287] ? __fget_files+0x2a/0x420 [ 619.108461][T11287] ? __fget_files+0x3a0/0x420 [ 619.108479][T11287] ? __fget_files+0x2a/0x420 [ 619.108500][T11287] security_file_ioctl+0xcb/0x2d0 [ 619.108515][T11287] __se_sys_ioctl+0x47/0x170 [ 619.108532][T11287] do_syscall_64+0xf6/0x210 [ 619.108545][T11287] ? clear_bhb_loop+0x45/0xa0 [ 619.108562][T11287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.108574][T11287] RIP: 0033:0x7fe1e858e969 [ 619.108585][T11287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.108595][T11287] RSP: 002b:00007fe1e9402038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 619.108609][T11287] RAX: ffffffffffffffda RBX: 00007fe1e87b5fa0 RCX: 00007fe1e858e969 [ 619.108618][T11287] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000005 [ 619.108626][T11287] RBP: 00007fe1e9402090 R08: 0000000000000000 R09: 0000000000000000 [ 619.108634][T11287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.108641][T11287] R13: 0000000000000000 R14: 00007fe1e87b5fa0 R15: 00007ffe1d12f0c8 [ 619.108661][T11287] [ 619.108680][T11287] ERROR: Out of memory at tomoyo_realpath_from_path. [ 619.348858][T10743] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 619.584860][T10743] usb 1-1: Using ep0 maxpacket: 8 [ 619.807770][T10743] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 619.881105][T10743] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 619.950285][T10743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.987585][ T5867] [drm:udl_init] *ERROR* Selecting channel failed [ 620.031678][T10743] usb 1-1: config 0 descriptor?? [ 620.033782][ T5867] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 620.081282][ T5867] [drm] Initialized udl on minor 2 [ 620.119077][ T5867] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 620.144453][ T5867] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 620.192848][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 620.203996][ T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 620.230170][ T5867] usb 6-1: USB disconnect, device number 18 [ 620.295784][T11296] ------------[ cut here ]------------ [ 620.301821][T11296] WARNING: CPU: 0 PID: 11296 at ./include/linux/memcontrol.h:361 folio_memcg+0x1a8/0x310 [ 620.312038][T11296] Modules linked in: [ 620.316117][T11296] CPU: 0 UID: 0 PID: 11296 Comm: syz.5.1690 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 620.328460][T11296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 620.338575][T11296] RIP: 0010:folio_memcg+0x1a8/0x310 [ 620.343850][T11296] Code: 80 3c 28 00 74 08 4c 89 f7 e8 e4 cd 1a 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 69 fe ba ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 620.363662][T11296] RSP: 0018:ffffc9001d2d7270 EFLAGS: 00010283 [ 620.369745][T11296] RAX: ffffffff8204bf47 RBX: 0000000000000000 RCX: 0000000000080000 [ 620.377786][T11296] RDX: ffffc900045f1000 RSI: 0000000000001c1f RDI: 0000000000001c20 [ 620.386187][T11296] RBP: 0000000000000000 R08: ffffea0001b1e3c7 R09: 1ffffd4000363c78 [ 620.394406][T11296] R10: dffffc0000000000 R11: fffff94000363c79 R12: ffffea0001b1e3f0 [ 620.402842][T11296] R13: dffffc0000000000 R14: ffff8880265d8a80 R15: 0000000000000002 [ 620.410829][T11296] FS: 00007f90c010e6c0(0000) GS:ffff888126103000(0000) knlGS:0000000000000000 [ 620.420380][T11296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 620.427093][T11296] CR2: 0000000000000000 CR3: 000000006b0c6000 CR4: 00000000003526f0 [ 620.435098][T11296] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 620.443119][T11296] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 620.451096][T11296] Call Trace: [ 620.454395][T11296] [ 620.457350][T11296] workingset_activation+0x5f/0x4a0 [ 620.462601][T11296] ? folio_mark_accessed+0x321/0x4a0 [ 620.467904][T11296] folio_mark_accessed+0x3b5/0x4a0 [ 620.473343][T11296] kvm_release_page_clean+0x9a/0xe0 [ 620.478563][T11296] kvm_tdp_page_fault+0x2dd/0x370 [ 620.483622][T11296] kvm_mmu_do_page_fault+0x2c5/0x640 [ 620.488928][T11296] ? vmx_vcpu_run+0xdad/0x2610 [ 620.493745][T11296] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 620.499594][T11296] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 620.505716][T11296] kvm_mmu_page_fault+0x22f/0xb70 [ 620.510768][T11296] ? __pfx_handle_ept_violation+0x10/0x10 [ 620.516862][T11296] vmx_handle_exit+0x103b/0x1850 [ 620.521813][T11296] ? vcpu_run+0x34f6/0x6b20 [ 620.526378][T11296] vcpu_run+0x41c3/0x6b20 [ 620.530717][T11296] ? sched_clock+0x3f/0x60 [ 620.535174][T11296] ? vcpu_run+0x34f6/0x6b20 [ 620.539724][T11296] ? __pfx_vcpu_run+0x10/0x10 [ 620.544436][T11296] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 620.550167][T11296] ? rcu_is_watching+0x15/0xb0 [ 620.554970][T11296] kvm_arch_vcpu_ioctl_run+0xfca/0x1940 [ 620.560544][T11296] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 620.566308][T11296] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 620.572325][T11296] ? rcu_is_watching+0x15/0xb0 [ 620.577103][T11296] ? trace_contention_end+0x39/0x120 [ 620.582410][T11296] ? look_up_lock_class+0x74/0x170 [ 620.587528][T11296] ? register_lock_class+0x51/0x320 [ 620.592786][T11296] ? __lock_acquire+0xaac/0xd20 [ 620.597671][T11296] kvm_vcpu_ioctl+0x95a/0xe90 [ 620.602409][T11296] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 620.607917][T11296] ? __lock_acquire+0xaac/0xd20 [ 620.613037][T11296] ? __asan_memset+0x22/0x50 [ 620.617642][T11296] ? smack_file_ioctl+0x302/0x340 [ 620.622711][T11296] ? __pfx_smack_file_ioctl+0x10/0x10 [ 620.628114][T11296] ? __fget_files+0x3a0/0x420 [ 620.632847][T11296] ? __fget_files+0x2a/0x420 [ 620.637455][T11296] ? bpf_lsm_file_ioctl+0x9/0x20 [ 620.642442][T11296] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 620.647661][T11296] __se_sys_ioctl+0xf9/0x170 [ 620.652314][T11296] do_syscall_64+0xf6/0x210 [ 620.656833][T11296] ? clear_bhb_loop+0x45/0xa0 [ 620.661511][T11296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.667431][T11296] RIP: 0033:0x7f90bf38e969 [ 620.671842][T11296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.691482][T11296] RSP: 002b:00007f90c010e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 620.699905][T11296] RAX: ffffffffffffffda RBX: 00007f90bf5b5fa0 RCX: 00007f90bf38e969 [ 620.707907][T11296] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000003 [ 620.716324][T11296] RBP: 00007f90bf410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 620.724598][T11296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.732603][T11296] R13: 0000000000000000 R14: 00007f90bf5b5fa0 R15: 00007fff91b257f8 [ 620.740600][T11296] [ 620.743661][T11296] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 620.750936][T11296] CPU: 0 UID: 0 PID: 11296 Comm: syz.5.1690 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 620.763000][T11296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 620.773058][T11296] Call Trace: [ 620.776343][T11296] [ 620.779277][T11296] dump_stack_lvl+0x99/0x250 [ 620.783874][T11296] ? __asan_memcpy+0x40/0x70 [ 620.788465][T11296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 620.793679][T11296] ? __pfx__printk+0x10/0x10 [ 620.798296][T11296] panic+0x2db/0x790 [ 620.802212][T11296] ? __pfx_panic+0x10/0x10 [ 620.806670][T11296] __warn+0x31b/0x4b0 [ 620.810673][T11296] ? folio_memcg+0x1a8/0x310 [ 620.815271][T11296] ? folio_memcg+0x1a8/0x310 [ 620.819872][T11296] report_bug+0x2be/0x4f0 [ 620.824203][T11296] ? folio_memcg+0x1a8/0x310 [ 620.828807][T11296] ? folio_memcg+0x1a8/0x310 [ 620.833388][T11296] ? folio_memcg+0x1aa/0x310 [ 620.837993][T11296] handle_bug+0x84/0x160 [ 620.842240][T11296] exc_invalid_op+0x1a/0x50 [ 620.846753][T11296] asm_exc_invalid_op+0x1a/0x20 [ 620.851592][T11296] RIP: 0010:folio_memcg+0x1a8/0x310 [ 620.856807][T11296] Code: 80 3c 28 00 74 08 4c 89 f7 e8 e4 cd 1a 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 69 fe ba ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 620.876411][T11296] RSP: 0018:ffffc9001d2d7270 EFLAGS: 00010283 [ 620.882485][T11296] RAX: ffffffff8204bf47 RBX: 0000000000000000 RCX: 0000000000080000 [ 620.890465][T11296] RDX: ffffc900045f1000 RSI: 0000000000001c1f RDI: 0000000000001c20 [ 620.898434][T11296] RBP: 0000000000000000 R08: ffffea0001b1e3c7 R09: 1ffffd4000363c78 [ 620.906420][T11296] R10: dffffc0000000000 R11: fffff94000363c79 R12: ffffea0001b1e3f0 [ 620.914384][T11296] R13: dffffc0000000000 R14: ffff8880265d8a80 R15: 0000000000000002 [ 620.922368][T11296] ? folio_memcg+0x1a7/0x310 [ 620.926975][T11296] workingset_activation+0x5f/0x4a0 [ 620.932174][T11296] ? folio_mark_accessed+0x321/0x4a0 [ 620.937476][T11296] folio_mark_accessed+0x3b5/0x4a0 [ 620.942610][T11296] kvm_release_page_clean+0x9a/0xe0 [ 620.947818][T11296] kvm_tdp_page_fault+0x2dd/0x370 [ 620.952870][T11296] kvm_mmu_do_page_fault+0x2c5/0x640 [ 620.958188][T11296] ? vmx_vcpu_run+0xdad/0x2610 [ 620.962967][T11296] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 620.968824][T11296] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 620.974373][T11296] kvm_mmu_page_fault+0x22f/0xb70 [ 620.979410][T11296] ? __pfx_handle_ept_violation+0x10/0x10 [ 620.985153][T11296] vmx_handle_exit+0x103b/0x1850 [ 620.990465][T11296] ? vcpu_run+0x34f6/0x6b20 [ 620.995004][T11296] vcpu_run+0x41c3/0x6b20 [ 620.999337][T11296] ? sched_clock+0x3f/0x60 [ 621.003763][T11296] ? vcpu_run+0x34f6/0x6b20 [ 621.008371][T11296] ? __pfx_vcpu_run+0x10/0x10 [ 621.013062][T11296] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 621.018838][T11296] ? rcu_is_watching+0x15/0xb0 [ 621.023633][T11296] kvm_arch_vcpu_ioctl_run+0xfca/0x1940 [ 621.029208][T11296] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 621.034931][T11296] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 621.040927][T11296] ? rcu_is_watching+0x15/0xb0 [ 621.045692][T11296] ? trace_contention_end+0x39/0x120 [ 621.050982][T11296] ? look_up_lock_class+0x74/0x170 [ 621.056094][T11296] ? register_lock_class+0x51/0x320 [ 621.061311][T11296] ? __lock_acquire+0xaac/0xd20 [ 621.066193][T11296] kvm_vcpu_ioctl+0x95a/0xe90 [ 621.070885][T11296] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 621.076078][T11296] ? __lock_acquire+0xaac/0xd20 [ 621.080926][T11296] ? __asan_memset+0x22/0x50 [ 621.085556][T11296] ? smack_file_ioctl+0x302/0x340 [ 621.090592][T11296] ? __pfx_smack_file_ioctl+0x10/0x10 [ 621.095978][T11296] ? __fget_files+0x3a0/0x420 [ 621.100659][T11296] ? __fget_files+0x2a/0x420 [ 621.105265][T11296] ? bpf_lsm_file_ioctl+0x9/0x20 [ 621.110214][T11296] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 621.115416][T11296] __se_sys_ioctl+0xf9/0x170 [ 621.120013][T11296] do_syscall_64+0xf6/0x210 [ 621.124519][T11296] ? clear_bhb_loop+0x45/0xa0 [ 621.129217][T11296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.135119][T11296] RIP: 0033:0x7f90bf38e969 [ 621.139543][T11296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.159145][T11296] RSP: 002b:00007f90c010e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 621.167567][T11296] RAX: ffffffffffffffda RBX: 00007f90bf5b5fa0 RCX: 00007f90bf38e969 [ 621.175538][T11296] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000003 [ 621.183496][T11296] RBP: 00007f90bf410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 621.191460][T11296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.199442][T11296] R13: 0000000000000000 R14: 00007f90bf5b5fa0 R15: 00007fff91b257f8 [ 621.207438][T11296] [ 621.210822][T11296] Kernel Offset: disabled [ 621.215146][T11296] Rebooting in 86400 seconds..