last executing test programs: 13.101917827s ago: executing program 2 (id=1747): r0 = syz_open_dev$dmmidi(&(0x7f0000000040), 0x7ff, 0x41) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000100)={0x1, 0xbb, 0x3, 0x1, 0x6}) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="120100009e173610ef171e7206de01020301090212000100000000090400000000000000f167fd53a7dfe166784bcb559dbc69bed79cbc37c40d01116a7fb3d2073f007d9fd7134bb904cfbfedc48fef48ed4a3241196c220d2d16b3c76ea219f5bd2dbe148ff9d98895ffed81faed3f90a83ba4d0f5cb65b16bd47d2ab368f01ed5502f6ab5396c6faa4668565908bdf9614237a71257fa04416314dfa43e500b3475416e95ce9fc5312c02c614b5d008093897efbb472c3b5fed4c7fbdca383205988313ffe7a915fa7e33a10ab8a01ffb7e06d0008c2c42491791978351916cfa566f1ccb453b4ffe19d9987c8154baab7fd8750df448f2a49f4ad9d7bf7c44c8a2a7388982132417a5246142c3a6cbe2dddf64f0512a343697833cc45837b88e215161b30e89be54ffb9658d26b1472bbbfc277860acb81f5c1ee6846186a39231845a8185a1e4f52f829c0ffb384f95b7efc608a0995acd73528562551f3232b173f74566c0145bb9504b98ae441e8d4b871f24ed10eb9c9c05e6d7f4756e6506fdd7504c93cb2274ba9d7af3d3ca32aae46c34423066086a885d92665ca74121572d88f068f492d807e0e03b7d3f3f4837988a4872d2216ab937e6fe459e0ec9bc2a7add8a9a53c42dda092d1709322232f83c604ddb73e77324cf85639a67db91933a572aca0ff61b53779ccd30e0990661448743fd13fbc7a9482fcb6dd4399f986ef6ec9603c34281c5842a2c4556570bb92c1efc5693bc4c247390cff4fe508385aac21c5d144b41c592b0ef9791f15c160a585edf615a10367d738e371cc7df8d036779dd4b9032a8d7ea542074672120cd48ccb7e3fe625190ca26ae00bd37d1e483365efd55af32e66c380301834d420ab95af6baeee34f503919a9325d44c1872d23e0239f736c000000000000000000"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) io_uring_setup(0x70c3, &(0x7f0000000200)={0x0, 0x0, 0x40, 0x1, 0xfffffffc}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) unshare(0x22000400) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13.100619803s ago: executing program 0 (id=1748): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="6112a000000000006113500000000000bf2000000000000007000000080000003d0301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x606e, &(0x7f0000000380)={0x0, 0x17ec, 0x400, 0xfffffffe, 0x3c0}, &(0x7f0000000580), &(0x7f0000000900)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, 0x0) r9 = inotify_add_watch(r8, 0x0, 0x4) openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) io_uring_register$IORING_UNREGISTER_NAPI(r0, 0x1c, 0x0, 0x1) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYRES64=r9, @ANYRES32, @ANYRES8, @ANYRES32=r1], 0x0) 9.968002454s ago: executing program 3 (id=1755): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x901}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000900)=""/196, 0xc4}, {&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000100)=""/85, 0x55}, {&(0x7f00000028c0)=""/4092, 0xffc}, {0x0}, {&(0x7f0000000a00)=""/249, 0xf9}], 0x6}, 0x80000000}], 0x4, 0x20, 0x0) 9.895574198s ago: executing program 0 (id=1756): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0xbe, 0x0, 0x1}, {0x8, 0x0, 0x1}]}}, @NHA_OIF={0x8}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000200)={0x0, "80a246be445c94f43a16d380ec570000aa2e5a00", 0x3, 0x0, 0x5, 0x7, 0x606020a, 0x2}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x3}, 0x1c) r5 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001b00)={0x2, {0x2, 0x13d, 0x0, 0x8, 0x1001}}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000005c0)={0x3, 0x2, 0x2, "0d159fe28bdca5a7951c5861adf99c93ee60aa816c78b6ef1a82e45b0ec1eb6e", 0x3147504d}) r6 = socket$nl_route(0x10, 0x3, 0x0) fchdir(0xffffffffffffffff) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYBLOB="08001b"], 0x44}}, 0x0) 9.735682948s ago: executing program 3 (id=1757): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000380)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000000) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="633656a4", 0x4}], 0x1}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x9, &(0x7f0000000000)=@raw=[@printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x96}}, @exit], &(0x7f0000000200)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0xa) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x25dfdbff, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 9.317396755s ago: executing program 1 (id=1759): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000380)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000000) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)="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", 0x7fe}], 0x1}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x25dfdbff, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 8.213560722s ago: executing program 3 (id=1760): r0 = socket(0x400000000010, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x8, 0x40, 0x6, 0x42, {{0x6, 0x4, 0x1, 0x1, 0x18, 0x68, 0x0, 0x7, 0x4, 0x0, @remote, @remote, {[@timestamp={0x44, 0x4, 0x61, 0x0, 0xf}]}}}}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x1) 7.500652166s ago: executing program 2 (id=1762): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x192) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) truncate(0x0, 0xb73d) truncate(0x0, 0xf000) close(r3) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000200000009000100"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f020082395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="1709005000000000000001000000050007000000000008060002000000000014001f0000"], 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000040000000000000000000085000000d000000085000000d00000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2401, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0xe) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newspdinfo={0x24, 0x24, 0x801, 0x70bd2c, 0x25dfdbfb, 0xc, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}}, 0x40) bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 7.398962162s ago: executing program 3 (id=1763): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000400)={r2, 0x80000000, 0x719627e6, 0x1}, &(0x7f0000000440)=0x10) 7.385141988s ago: executing program 1 (id=1764): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000b00)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x1201, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0xcc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x4f, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000540), 0x8, 0x1b, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000700)=ANY=[], 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) sendmsg$unix(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd0) getsockopt$inet6_buf(r1, 0x29, 0x8d, &(0x7f0000000440)=""/235, &(0x7f0000000040)=0xeb) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000780)='contention_end\x00', r10}, 0x10) r11 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r11, 0xc0045002, &(0x7f0000000040)=0x1f40) write$vga_arbiter(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="6465636f64657390696f2b6d656d00"], 0xb) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="2000f7fe000001020003000000000000000000060900010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x10040104}, 0x400c000) bind$tipc(r1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x6, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x4200, 0x0) 7.265448942s ago: executing program 0 (id=1765): pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000940), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 6.370430983s ago: executing program 4 (id=1766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$phonet(0x23, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000880)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'veth1_to_batadv\x00'}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000000c0)={0xa20000, 0x63, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9c0001, 0xbf09, '\x00', @value=0x5}}) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) shutdown(r3, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.192671109s ago: executing program 3 (id=1767): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x901}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000900)=""/196, 0xc4}, {&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000100)=""/85, 0x55}, {&(0x7f00000028c0)=""/4092, 0xffc}, {0x0}, {&(0x7f0000000a00)=""/249, 0xf9}], 0x6}, 0x80000000}], 0x4, 0x20, 0x0) 5.109745147s ago: executing program 2 (id=1768): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x80}, 'port0\x00'}) (async) syz_emit_ethernet(0x9e, &(0x7f00000000c0)={@random="ebaa9858fc6f", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x1d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x1f, 0x0, [@multicast2, @multicast2, @empty, @local, @remote, @private=0xa010100, @multicast2]}, @rr={0x7, 0x3, 0xc4}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000006}, {@dev}, {@dev}, {@remote}, {@private, 0x2}, {@remote}, {@rand_addr=0x64010101}]}]}}}}}}}, 0x0) (async) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000340), 0x4) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004001) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x4, &(0x7f0000000040)=0xd50, 0x4) (async) r3 = socket$pptp(0x18, 0x1, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) 5.00950161s ago: executing program 0 (id=1769): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0xbe, 0x0, 0x1}, {0x8, 0x0, 0x1}]}}, @NHA_OIF={0x8}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000200)={0x0, "80a246be445c94f43a16d380ec570000aa2e5a00", 0x3, 0x0, 0x5, 0x7, 0x606020a, 0x2}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x3}, 0x1c) r5 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001b00)={0x2, {0x2, 0x13d, 0x0, 0x8, 0x1001}}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000005c0)={0x3, 0x2, 0x2, "0d159fe28bdca5a7951c5861adf99c93ee60aa816c78b6ef1a82e45b0ec1eb6e", 0x3147504d}) r6 = socket$nl_route(0x10, 0x3, 0x0) fchdir(0xffffffffffffffff) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYBLOB="08001b"], 0x44}}, 0x0) 4.92878526s ago: executing program 2 (id=1770): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x83, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf26, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (fail_nth: 2) 4.928115295s ago: executing program 4 (id=1771): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x27, 0x25, 0x27, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5408, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8c}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x27, 0x25, 0x27, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TCSETSW2(r1, 0x5408, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8c}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) 4.92671121s ago: executing program 1 (id=1772): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x4, 0x0, &(0x7f0000000080)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x0, 0xf, 0x0, 0x0, 0x3}) close(0xffffffffffffffff) mprotect(&(0x7f000032a000/0x2000)=nil, 0x2000, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x1}, 0x1}) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6022040000202b00fc0100000000000001fc00000000000000000000000000000187000000000000003b0002000000000000000000001090780200000000000000"], 0x0) 4.344172086s ago: executing program 2 (id=1773): r0 = syz_open_dev$dmmidi(&(0x7f0000000040), 0x7ff, 0x41) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000100)={0x1, 0xbb, 0x3, 0x1, 0x6}) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) io_uring_setup(0x70c3, &(0x7f0000000200)={0x0, 0x0, 0x40, 0x1, 0xfffffffc}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) unshare(0x22000400) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.283943881s ago: executing program 4 (id=1774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESHEX], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000, @void, @value}, 0x94) timer_create(0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x13794b1b4f5f229f, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r2, 0x7}, 0x8) 4.276827569s ago: executing program 0 (id=1775): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000380)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000000) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)="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", 0xbfd}], 0x1}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x25dfdbff, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 4.276198036s ago: executing program 3 (id=1776): syz_usb_connect(0x2, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x6003) io_setup(0x81, &(0x7f0000000400)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x10000000}, &(0x7f0000000340), &(0x7f0000000280)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x4, 0x1, 0xff, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x10006, 0xc, 0x10001, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x0, 0x401, 0x9, 0xbdc7, 0x800000b, 0x6, 0x9, 0x6, 0x1, 0x6, 0x909, 0x5, 0x4d, 0x5, 0x65a, 0x40, 0x1, 0x1000, 0x3, 0x2, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0x36, 0x4, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x10001, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0x100, 0x9, 0xfff, 0x4, 0x0, 0x40000040, 0x101, 0x8, 0x5, 0x0, 0x0, 0x34f1, 0x1ff, 0x7, 0x1b2c5a97, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x0, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x5, 0x69d, 0x8, 0x10001, 0x0, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x4, 0x7, 0x9, 0x1, 0x8, 0x7, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0x8, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x1, 0x60a, 0x5, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0x1, 0x0, 0x2, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x201000, 0x3, 0x3, 0x15, 0x8080, 0x7, 0x3, 0x8, 0x6, 0x8, 0x4, 0x6, 0xeff]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000000500)={'syz1\x00', {0x7, 0x1, 0x4, 0x15}, 0x31, [0x0, 0x1, 0x7, 0x2, 0x9, 0x5, 0x0, 0x858, 0x5, 0x2, 0xcdb9, 0x2000c8c, 0x4, 0x9, 0x3, 0x5, 0x6, 0x3b8, 0xfffffff8, 0x7, 0x8000, 0x82, 0x10001, 0x1, 0xe, 0x8, 0x8, 0x1, 0x0, 0x4b0e880e, 0x80000000, 0xb, 0xbd92, 0x81, 0x7, 0x2, 0x6, 0x3e18b6be, 0x2, 0x7, 0x5b98, 0x1ff, 0x4, 0x6, 0x1, 0x1, 0x7ff, 0xffffff01, 0x8001, 0x8000, 0x2, 0xf8000000, 0x654, 0x729e4a8b, 0x1, 0x8, 0xffffffff, 0x6, 0x8, 0x3, 0xfffffffe, 0xffff43d0, 0x5, 0x400], [0x4, 0x4, 0x70, 0x3, 0x1, 0x6, 0x1, 0x5, 0x454, 0x80, 0x1, 0x6, 0x10000, 0x7, 0x9, 0x9, 0xffffff7f, 0x9, 0x6, 0x3, 0x5, 0x8, 0x2, 0x80000001, 0x1ff, 0x411, 0x201, 0x3, 0x9, 0x8001, 0x8, 0x100, 0x3, 0x3099, 0x374, 0x0, 0x40, 0x7ff, 0x3, 0x8, 0x9, 0xfa, 0x5, 0xce81, 0xd, 0x9, 0x1, 0x0, 0x7f, 0x10, 0x4f3b7fa9, 0x6, 0x4a6, 0x6, 0x0, 0x2, 0xeb, 0x0, 0x9, 0x7fff, 0xf, 0x1001, 0x401, 0x1], [0x81, 0x6, 0xd, 0x9, 0x1, 0x9, 0xfffff23f, 0x2, 0x401, 0x8, 0x2, 0xa9, 0x622, 0xb, 0x8, 0x3ff, 0xfffffffa, 0x7, 0x8, 0xffff8000, 0x200, 0x1, 0x0, 0x4, 0x3, 0x200, 0x1a40, 0xac22, 0x4, 0xe, 0xffffffff, 0x9, 0x4, 0x81, 0x6, 0xff, 0x2004, 0x3, 0x3, 0x6, 0x5, 0x5b04a85a, 0x1, 0x5, 0x9, 0xfffffff7, 0x6, 0x1, 0xfffffffb, 0xffff, 0x8, 0x2, 0x2, 0x800, 0x0, 0x8, 0x3, 0x80000001, 0x7, 0xfffff939, 0x2, 0x2, 0xb3, 0x9], [0x1, 0x2, 0x7fff, 0x3f1, 0x7, 0x8ba8, 0x40, 0x0, 0xfffffffd, 0xf4, 0x4, 0xdee, 0x5, 0x1, 0x1c, 0xa9bf, 0xffff8000, 0x0, 0x8, 0x40, 0xe, 0xfffffffd, 0x8, 0x3290, 0x5, 0x1, 0x0, 0x6, 0x4, 0x2, 0x4, 0xf, 0x4, 0x4dc, 0x6, 0xfffffff8, 0x200, 0x72, 0x4, 0xfffffffc, 0x3, 0xb, 0x37f, 0x4, 0x9, 0x3, 0x20, 0xfa91, 0x7, 0x401, 0x5, 0x81, 0x20000000, 0x603, 0x0, 0x2, 0x2, 0xd, 0xa, 0x7, 0x5, 0x627b6092, 0x6, 0x6]}, 0x45c) 3.698158201s ago: executing program 1 (id=1777): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000006c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYRES8]) bind$alg(r0, &(0x7f0000001740)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$can_raw(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@can={{0x0, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "305de43b341c4b94"}, 0x10}, 0x1, 0x0, 0x0, 0x480c0}, 0x801) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/155, 0x9b}], 0x1, &(0x7f0000000280)=""/145, 0x91}, 0x100) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x210, 0x9403, 0x3002, 0x210, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff], 'macvlan1\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0x1c8, 0x210, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x47b) read$alg(r5, &(0x7f0000000a00)=""/4096, 0x1000) 3.431964563s ago: executing program 4 (id=1778): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000380)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000000) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000540)="633656a4", 0x4}], 0x2}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x9, &(0x7f0000000000)=@raw=[@printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x96}}, @exit], &(0x7f0000000200)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0xa) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x25dfdbff, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 2.214647035s ago: executing program 0 (id=1779): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r1, 0x4b4b, &(0x7f0000000080)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000300)=ANY=[@ANYRES32], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) socket$kcm(0x2b, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x2) fadvise64(r0, 0xe10001, 0x4101, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18070000000000000000000000000000dc000000400000009500000000000000cd57d5b164befe393683e6f51e68818977787e28b47f0caa1495759b9be394e1538418db7bc3995022c94742141ed83a7a5c26615e61eab3381b33f4f38062d3ed9ee05f8a61cc845a8de56d8e58c45f0039c68e0e12a4ffb4e5af000000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r3) sendmsg$NFC_CMD_DEV_DOWN(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x3c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="1e5b8aac8113"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r5, @ANYRESOCT=r8, @ANYRES8=r5, @ANYRES8, @ANYRES8=0x0], 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x8881) 1.661592549s ago: executing program 1 (id=1780): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0xf0, 0x10, 0x1, 0x8000004, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in=@remote, {0x200000000, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x53f83abc, 0x4, 0xd, 0xa}, {}, 0x0, 0x0, 0xa, 0x5, 0x6}}, 0xf0}}, 0x20000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1.598345513s ago: executing program 4 (id=1781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$phonet(0x23, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000880)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'veth1_to_batadv\x00'}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000000c0)={0xa20000, 0x63, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9c0001, 0xbf09, '\x00', @value=0x5}}) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) shutdown(r3, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 866.898146ms ago: executing program 2 (id=1782): ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) dup3(0xffffffffffffffff, r0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x29, 0x2, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) (fail_nth: 1) 619.751729ms ago: executing program 1 (id=1783): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402", @ANYBLOB="94"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x752f) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 0s ago: executing program 4 (id=1784): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) rt_tgsigqueueinfo(r0, r0, 0x2b, &(0x7f0000000140)={0x3a, 0x3, 0xfffffff9}) ptrace$peeksig(0x4209, r0, &(0x7f0000000ac0)={0x5692, 0x0, 0x6}, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}]) setxattr$security_ima(0x0, 0x0, &(0x7f00000013c0)=ANY=[], 0x700, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x72, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x3, 0x5, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7f, 0x7, 0x8}}]}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000007c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x0, 0x1, 0x4}}) syz_usb_control_io(r4, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x11, 0xd7, {0xd7, 0xe, "7291442733fd5d18f79c18ae485a460f80db82ae2d07a871234c2582c93d6f5895b3d816c00f71c611eb56c20a6c5c0a79821652379ab5d5047d6b2e9b5fa894b654a77d265bb280050754cf55b3535b09558f005d4bdd663cf11a680f0d67549ae928841ffb87fa9057a51f6c33a8c15bd24f472fd173ffea15265a3d64861ae6578358f1006589e69afe1b186b8df71cb7d46f7d7749aa215c9c0c43d14c27a96dbb0c16c12e914d7e73200bb07a616bc5b9f4ad3dc9016ccc4ab90e3eb9df9e35ab6c84bdf440c06e1400323c0447d6808908c3"}}, &(0x7f00000005c0)={0x0, 0x3, 0x9a, @string={0x9a, 0x3, "a2b77375ee7a9cf1db1b23789c8d15145004292477db709c4b4613abd34044bde673c1986a8f8ac0c76690ee4479162eef3a3ec4dfc750344aa60c7c98c511d810b0c002b9e11537ed09af8cb930c58f39d856a282f349e6779fe1e63623254217b5b2181628953347d8e08787e6fdc50106111ea983a1d4dc6133f3b27215a3aced79b2f546e8cf22cfa0706e811b978dc5b0d12f511585"}}, &(0x7f0000000040)={0x0, 0xf, 0x44, {0x5, 0xf, 0x44, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "4379202e8afc4cf59c340df514f3186b"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xd2, 0x2, 0x6, 0x1, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2, 0x1, 0x9}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x7f, 0x4, 0x9, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x4, 0xea, 0x8da, 0xf5}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x8, 0x4, 0x3, "40843e76", "83a79a07"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0xc, 0x4, 0x1, 0x9, 0x3}}}, &(0x7f0000001100)={0x84, &(0x7f0000000740)={0x20, 0x0, 0xbf, "9c25ff5cc23c5e304a29316d13bcfb3680c29701caa0b17824b053c0ff08e2fb0b9a9f38abdbbb014830f460f1b935642ad7be6f8687bae7cb85e078bb2df9efa92976387709273d37df6951864ac8c53ca3bc3941f612f7749cb258bdca287491ab14a74eff0a144fae907202afcfceef73f74a25c4c67ef3568032b5512e1c431b6d4b65cbbf88fafe73e3b3e591c4f8b1d8b7374bf8a4c621cea18e1664b0f676425866b35798cc1907568592de875fc3aeab8cd82cf1c0975f41d87184"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x12}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000900)={0x20, 0x0, 0x8, {0x8, 0x0, [0xff00]}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x46d9}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x3}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "8514"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0xbf7b}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000fc0)={0x40, 0x19, 0x2, "0e60"}, &(0x7f0000001000)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000001040)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000001080)={0x40, 0x1e, 0x1, 0x8}, &(0x7f00000010c0)={0x40, 0x21, 0x1}}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): /0x10 [ 536.655414][ T9713] should_fail_ex+0x414/0x560 [ 536.655453][ T9713] should_failslab+0xa8/0x100 [ 536.655487][ T9713] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 536.655522][ T9713] ? __alloc_skb+0x112/0x2d0 [ 536.655550][ T9713] __alloc_skb+0x112/0x2d0 [ 536.655577][ T9713] netlink_sendmsg+0x5c6/0xb30 [ 536.655608][ T9713] ? is_bpf_text_address+0x26/0x2b0 [ 536.655657][ T9713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.655685][ T9713] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 536.655705][ T9713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.655727][ T9713] __sock_sendmsg+0x219/0x270 [ 536.655771][ T9713] ____sys_sendmsg+0x505/0x830 [ 536.655808][ T9713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 536.655841][ T9713] ? import_iovec+0x74/0xa0 [ 536.655875][ T9713] ___sys_sendmsg+0x21f/0x2a0 [ 536.655902][ T9713] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.655962][ T9713] ? __fget_files+0x2a/0x420 [ 536.655991][ T9713] ? __fget_files+0x3a0/0x420 [ 536.656031][ T9713] __x64_sys_sendmsg+0x19b/0x260 [ 536.656060][ T9713] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 536.656097][ T9713] ? rcu_is_watching+0x15/0xb0 [ 536.656136][ T9713] do_syscall_64+0xf6/0x210 [ 536.656163][ T9713] ? clear_bhb_loop+0x45/0xa0 [ 536.656188][ T9713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.656207][ T9713] RIP: 0033:0x7f1d5818e969 [ 536.656226][ T9713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.656243][ T9713] RSP: 002b:00007f1d58f43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.656265][ T9713] RAX: ffffffffffffffda RBX: 00007f1d583b5fa0 RCX: 00007f1d5818e969 [ 536.656279][ T9713] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000f [ 536.656292][ T9713] RBP: 00007f1d58f43090 R08: 0000000000000000 R09: 0000000000000000 [ 536.656303][ T9713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.656315][ T9713] R13: 0000000000000000 R14: 00007f1d583b5fa0 R15: 00007ffe48c85e78 [ 536.656346][ T9713] [ 536.898082][ C0] vkms_vblank_simulate: vblank timer overrun [ 536.904721][ T7906] usb 4-1: Using ep0 maxpacket: 16 [ 536.914205][ T7906] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 536.922182][ T7906] usb 4-1: can't read configurations, error -61 [ 536.975146][ T7906] usb usb4-port1: attempt power cycle [ 537.027242][ T9719] FAULT_INJECTION: forcing a failure. [ 537.027242][ T9719] name failslab, interval 1, probability 0, space 0, times 0 [ 537.041879][ T9719] CPU: 1 UID: 0 PID: 9719 Comm: syz.4.1134 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 537.041909][ T9719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 537.041922][ T9719] Call Trace: [ 537.041931][ T9719] [ 537.041939][ T9719] dump_stack_lvl+0x189/0x250 [ 537.041979][ T9719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.042004][ T9719] ? __pfx__printk+0x10/0x10 [ 537.042037][ T9719] ? __pfx___might_resched+0x10/0x10 [ 537.042070][ T9719] should_fail_ex+0x414/0x560 [ 537.042106][ T9719] should_failslab+0xa8/0x100 [ 537.042138][ T9719] kmem_cache_alloc_noprof+0x73/0x3c0 [ 537.042164][ T9719] ? getname_flags+0xb8/0x540 [ 537.042180][ T9719] ? bpf_trace_run2+0x186/0x4b0 [ 537.042202][ T9719] getname_flags+0xb8/0x540 [ 537.042223][ T9719] user_path_at+0x24/0x60 [ 537.042245][ T9719] do_utimes+0x131/0x2a0 [ 537.042265][ T9719] ? bpf_trace_run2+0x322/0x4b0 [ 537.042282][ T9719] ? __pfx_do_utimes+0x10/0x10 [ 537.042308][ T9719] ? bpf_trace_run2+0x186/0x4b0 [ 537.042334][ T9719] __x64_sys_utime+0x13e/0x200 [ 537.042386][ T9719] ? __pfx___x64_sys_utime+0x10/0x10 [ 537.042422][ T9719] ? rcu_is_watching+0x15/0xb0 [ 537.042454][ T9719] do_syscall_64+0xf6/0x210 [ 537.042481][ T9719] ? clear_bhb_loop+0x45/0xa0 [ 537.042505][ T9719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.042522][ T9719] RIP: 0033:0x7f1d5818e969 [ 537.042540][ T9719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.042556][ T9719] RSP: 002b:00007f1d58f43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 537.042577][ T9719] RAX: ffffffffffffffda RBX: 00007f1d583b5fa0 RCX: 00007f1d5818e969 [ 537.042590][ T9719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 537.042602][ T9719] RBP: 00007f1d58f43090 R08: 0000000000000000 R09: 0000000000000000 [ 537.042614][ T9719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.042624][ T9719] R13: 0000000000000000 R14: 00007f1d583b5fa0 R15: 00007ffe48c85e78 [ 537.042654][ T9719] [ 537.251053][ T5890] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 537.515708][ T5890] usb 1-1: Using ep0 maxpacket: 8 [ 537.522892][ T5890] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 537.533500][ T5890] usb 1-1: config 0 interface 0 has no altsetting 0 [ 537.535707][ T7906] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 537.559260][ T5890] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 537.571764][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.590072][ T7906] usb 4-1: Using ep0 maxpacket: 16 [ 537.595425][ T5890] usb 1-1: Product: syz [ 537.603889][ T5890] usb 1-1: Manufacturer: syz [ 537.604012][ T7906] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 537.621385][ T5890] usb 1-1: SerialNumber: syz [ 537.627609][ T7906] usb 4-1: can't read configurations, error -61 [ 537.632885][ T5890] usb 1-1: config 0 descriptor?? [ 537.662185][ T5890] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 537.775739][ T7906] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 537.808897][ T7906] usb 4-1: Using ep0 maxpacket: 16 [ 537.819807][ T7906] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 537.870334][ T7906] usb 4-1: can't read configurations, error -61 [ 537.878378][ T7906] usb usb4-port1: unable to enumerate USB device [ 537.901134][ T5890] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 537.929803][ T5890] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 537.950555][ T5890] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 538.491414][ T9735] FAULT_INJECTION: forcing a failure. [ 538.491414][ T9735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.530886][ T9735] CPU: 1 UID: 0 PID: 9735 Comm: syz.2.1138 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 538.530920][ T9735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 538.530933][ T9735] Call Trace: [ 538.530942][ T9735] [ 538.530951][ T9735] dump_stack_lvl+0x189/0x250 [ 538.530987][ T9735] ? __lock_acquire+0xaac/0xd20 [ 538.531018][ T9735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.531045][ T9735] ? __pfx__printk+0x10/0x10 [ 538.531095][ T9735] ? __might_fault+0xb0/0x130 [ 538.531137][ T9735] should_fail_ex+0x414/0x560 [ 538.531177][ T9735] _copy_from_user+0x2d/0xb0 [ 538.531208][ T9735] ___sys_sendmsg+0x158/0x2a0 [ 538.531247][ T9735] ? __pfx____sys_sendmsg+0x10/0x10 [ 538.531324][ T9735] ? __fget_files+0x2a/0x420 [ 538.531352][ T9735] ? __fget_files+0x3a0/0x420 [ 538.531392][ T9735] __x64_sys_sendmsg+0x19b/0x260 [ 538.531421][ T9735] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 538.531457][ T9735] ? rcu_is_watching+0x15/0xb0 [ 538.531495][ T9735] do_syscall_64+0xf6/0x210 [ 538.531521][ T9735] ? clear_bhb_loop+0x45/0xa0 [ 538.531546][ T9735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.531564][ T9735] RIP: 0033:0x7f818e18e969 [ 538.531582][ T9735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.531600][ T9735] RSP: 002b:00007f818eff5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.531622][ T9735] RAX: ffffffffffffffda RBX: 00007f818e3b5fa0 RCX: 00007f818e18e969 [ 538.531636][ T9735] RDX: 00000000040040d0 RSI: 0000200000000100 RDI: 0000000000000003 [ 538.531649][ T9735] RBP: 00007f818eff5090 R08: 0000000000000000 R09: 0000000000000000 [ 538.531660][ T9735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.531670][ T9735] R13: 0000000000000000 R14: 00007f818e3b5fa0 R15: 00007ffca2d48fa8 [ 538.531699][ T9735] [ 538.765894][ T5890] usb 1-1: USB disconnect, device number 21 [ 539.303456][ T9748] netlink: 'syz.3.1141': attribute type 3 has an invalid length. [ 539.724845][ T9751] bpq0: left promiscuous mode [ 540.811946][ T7902] usb 2-1: USB disconnect, device number 21 [ 541.019411][ T9765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 541.430698][ T9773] tipc: Enabled bearer , priority 0 [ 542.313602][ T9784] FAULT_INJECTION: forcing a failure. [ 542.313602][ T9784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.327128][ T9773] syzkaller0: entered promiscuous mode [ 542.327180][ T9773] syzkaller0: entered allmulticast mode [ 542.328350][ T9773] tipc: Resetting bearer [ 542.334828][ T9784] CPU: 0 UID: 0 PID: 9784 Comm: syz.2.1154 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 542.334859][ T9784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 542.334874][ T9784] Call Trace: [ 542.334884][ T9784] [ 542.334895][ T9784] dump_stack_lvl+0x189/0x250 [ 542.334941][ T9784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 542.334971][ T9784] ? __pfx__printk+0x10/0x10 [ 542.335021][ T9784] should_fail_ex+0x414/0x560 [ 542.335062][ T9784] _copy_to_user+0x31/0xb0 [ 542.335097][ T9784] simple_read_from_buffer+0xe1/0x170 [ 542.335137][ T9784] proc_fail_nth_read+0x1df/0x250 [ 542.335164][ T9784] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 542.335190][ T9784] ? rw_verify_area+0x258/0x650 [ 542.335217][ T9784] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 542.335241][ T9784] vfs_read+0x1fd/0x980 [ 542.335289][ T9784] ? __pfx___mutex_lock+0x10/0x10 [ 542.335330][ T9784] ? __pfx_vfs_read+0x10/0x10 [ 542.335359][ T9784] ? __fget_files+0x2a/0x420 [ 542.335398][ T9784] ? __fget_files+0x3a0/0x420 [ 542.335428][ T9784] ? __fget_files+0x2a/0x420 [ 542.335471][ T9784] ksys_read+0x145/0x250 [ 542.335505][ T9784] ? rcu_is_watching+0x15/0xb0 [ 542.335538][ T9784] ? __pfx_ksys_read+0x10/0x10 [ 542.335570][ T9784] ? do_syscall_64+0xba/0x210 [ 542.335601][ T9784] do_syscall_64+0xf6/0x210 [ 542.335629][ T9784] ? clear_bhb_loop+0x45/0xa0 [ 542.335659][ T9784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.335681][ T9784] RIP: 0033:0x7f818e18d37c [ 542.335703][ T9784] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 542.335723][ T9784] RSP: 002b:00007f818eff5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 542.335746][ T9784] RAX: ffffffffffffffda RBX: 00007f818e3b5fa0 RCX: 00007f818e18d37c [ 542.335761][ T9784] RDX: 000000000000000f RSI: 00007f818eff50a0 RDI: 0000000000000003 [ 542.335780][ T9784] RBP: 00007f818eff5090 R08: 0000000000000000 R09: 0000000000000000 [ 542.335793][ T9784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.335806][ T9784] R13: 0000000000000000 R14: 00007f818e3b5fa0 R15: 00007ffca2d48fa8 [ 542.335842][ T9784] [ 542.623395][ T9770] tipc: Resetting bearer [ 542.785890][ T10] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 542.913583][ T7906] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 543.148827][ T7906] usb 5-1: config 0 has an invalid interface number: 154 but max is 0 [ 543.214064][ T7906] usb 5-1: config 0 has no interface number 0 [ 543.268264][ T7906] usb 5-1: config 0 interface 154 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 543.334383][ T7906] usb 5-1: config 0 interface 154 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 543.345844][ T7906] usb 5-1: config 0 interface 154 has no altsetting 0 [ 543.355353][ T7906] usb 5-1: New USB device found, idVendor=050d, idProduct=0004, bcdDevice=dc.bb [ 543.364730][ T7906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.380690][ T7906] usb 5-1: Product: syz [ 543.384946][ T7906] usb 5-1: Manufacturer: syz [ 543.389651][ T7906] usb 5-1: SerialNumber: syz [ 543.415418][ T7906] usb 5-1: config 0 descriptor?? [ 543.422047][ T9780] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 543.422755][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 543.430229][ T9780] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 543.461767][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 543.474931][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 543.514302][ T10] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 543.523571][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.533261][ T10] usb 4-1: Product: syz [ 543.537570][ T10] usb 4-1: Manufacturer: syz [ 543.542238][ T10] usb 4-1: SerialNumber: syz [ 543.550237][ T10] usb 4-1: config 0 descriptor?? [ 543.560582][ T9789] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 543.568433][ T9789] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 543.584622][ T10] usb 4-1: ucan: probing device on interface #0 [ 544.998085][ T9770] tipc: Disabling bearer [ 545.010501][ T9775] tipc: Started in network mode [ 545.015664][ T9775] tipc: Node identity 1ea8dc386ad6, cluster identity 4711 [ 545.023134][ T9775] tipc: Enabled bearer , priority 0 [ 545.306239][ T9796] o2cb: This node has not been configured. [ 545.312219][ T9796] o2cb: Cluster check failed. Fix errors before retrying. [ 545.320512][ T9796] (syz.2.1156,9796,1):user_dlm_register:674 ERROR: status = -22 [ 545.328433][ T9796] (syz.2.1156,9796,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 545.617813][ T7872] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 545.898820][ T9778] syzkaller0: entered promiscuous mode [ 545.916384][ T9778] syzkaller0: entered allmulticast mode [ 546.910472][ T9778] tipc: Resetting bearer [ 546.959901][ T7879] tipc: Node number set to 1954470968 [ 546.974299][ T9798] FAT-fs (nullb0): bogus number of reserved sectors [ 546.981172][ T9798] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 547.011365][ T7872] usb 3-1: Using ep0 maxpacket: 32 [ 547.121697][ T7872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.298178][ T7872] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 547.432628][ T7872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.852049][ T7872] usb 3-1: config 0 descriptor?? [ 548.399072][ T7906] cdc_subset 5-1:0.154: probe with driver cdc_subset failed with error -71 [ 548.680879][ T10] ucan 4-1:0.0 can0: registered device [ 548.781951][ T9778] tipc: Resetting bearer [ 548.974270][ T7906] usb 5-1: USB disconnect, device number 23 [ 549.301987][ T10] ucan 4-1:0.0 can0: firmware string: unknown [ 549.356673][ T10] usb 4-1: USB disconnect, device number 31 [ 549.386319][ T7872] usbhid 3-1:0.0: can't add hid device: -71 [ 549.392403][ T7872] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 549.653356][ T7872] usb 3-1: USB disconnect, device number 22 [ 551.280484][ T9815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 551.823490][ T9827] No control pipe specified [ 554.819763][ T9778] tipc: Disabling bearer [ 554.964643][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1166'. [ 555.407329][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 556.015772][ T10] usb 4-1: device descriptor read/64, error -71 [ 556.054695][ T9850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1172'. [ 558.477148][ T9876] FAULT_INJECTION: forcing a failure. [ 558.477148][ T9876] name failslab, interval 1, probability 0, space 0, times 0 [ 558.526508][ T9876] CPU: 1 UID: 0 PID: 9876 Comm: syz.1.1181 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 558.526543][ T9876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 558.526556][ T9876] Call Trace: [ 558.526565][ T9876] [ 558.526575][ T9876] dump_stack_lvl+0x189/0x250 [ 558.526615][ T9876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.526643][ T9876] ? __pfx__printk+0x10/0x10 [ 558.526692][ T9876] ? __pfx___might_resched+0x10/0x10 [ 558.526721][ T9876] ? fs_reclaim_acquire+0x7d/0x100 [ 558.526749][ T9876] should_fail_ex+0x414/0x560 [ 558.526787][ T9876] should_failslab+0xa8/0x100 [ 558.526821][ T9876] __kmalloc_noprof+0xcb/0x4f0 [ 558.526847][ T9876] ? kfree+0x4d/0x440 [ 558.526871][ T9876] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 558.526903][ T9876] tomoyo_realpath_from_path+0xe3/0x5d0 [ 558.526930][ T9876] ? tomoyo_domain+0xda/0x130 [ 558.526962][ T9876] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 558.526982][ T9876] tomoyo_path_number_perm+0x1e8/0x5a0 [ 558.527006][ T9876] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 558.527045][ T9876] ? __lock_acquire+0xaac/0xd20 [ 558.527091][ T9876] ? __fget_files+0x2a/0x420 [ 558.527127][ T9876] ? __fget_files+0x3a0/0x420 [ 558.527162][ T9876] ? __fget_files+0x2a/0x420 [ 558.527196][ T9876] security_file_ioctl+0xcb/0x2d0 [ 558.527222][ T9876] __se_sys_ioctl+0x47/0x170 [ 558.527250][ T9876] do_syscall_64+0xf6/0x210 [ 558.527277][ T9876] ? clear_bhb_loop+0x45/0xa0 [ 558.527302][ T9876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.527321][ T9876] RIP: 0033:0x7f484678e969 [ 558.527341][ T9876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.527358][ T9876] RSP: 002b:00007f4847570038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 558.527380][ T9876] RAX: ffffffffffffffda RBX: 00007f48469b5fa0 RCX: 00007f484678e969 [ 558.527395][ T9876] RDX: 0000000000000000 RSI: 0000000040384708 RDI: 0000000000000003 [ 558.527406][ T9876] RBP: 00007f4847570090 R08: 0000000000000000 R09: 0000000000000000 [ 558.527419][ T9876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.527434][ T9876] R13: 0000000000000000 R14: 00007f48469b5fa0 R15: 00007ffe694e02e8 [ 558.527466][ T9876] [ 558.527499][ T9876] ERROR: Out of memory at tomoyo_realpath_from_path. [ 559.133016][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1182'. [ 561.205768][ T7906] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 561.835661][ T7906] usb 4-1: device descriptor read/64, error -71 [ 562.149827][ T7906] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 563.756529][ T7906] usb 4-1: device descriptor read/64, error -71 [ 564.116688][ T7906] usb usb4-port1: attempt power cycle [ 564.121006][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.132094][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.415153][ T9922] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 564.575940][ T7906] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 564.770404][ T7906] usb 4-1: Using ep0 maxpacket: 8 [ 564.783620][ T7906] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 564.823747][ T7906] usb 4-1: config 0 interface 0 has no altsetting 0 [ 564.881378][ T7906] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 564.948997][ T7906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.981227][ T7906] usb 4-1: Product: syz [ 564.993694][ T7906] usb 4-1: Manufacturer: syz [ 565.026598][ T7906] usb 4-1: SerialNumber: syz [ 565.064287][ T7906] usb 4-1: config 0 descriptor?? [ 565.099517][ T7906] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 565.909176][ T7906] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 565.942424][ T7906] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 566.150603][ T7879] usb 4-1: USB disconnect, device number 36 [ 566.861402][ T9943] FAULT_INJECTION: forcing a failure. [ 566.861402][ T9943] name failslab, interval 1, probability 0, space 0, times 0 [ 566.914002][ T9943] CPU: 0 UID: 0 PID: 9943 Comm: syz.3.1201 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 566.914036][ T9943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 566.914049][ T9943] Call Trace: [ 566.914059][ T9943] [ 566.914069][ T9943] dump_stack_lvl+0x189/0x250 [ 566.914113][ T9943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 566.914139][ T9943] ? __pfx__printk+0x10/0x10 [ 566.914170][ T9943] ? __pfx___might_resched+0x10/0x10 [ 566.914200][ T9943] ? fs_reclaim_acquire+0x7d/0x100 [ 566.914228][ T9943] should_fail_ex+0x414/0x560 [ 566.914267][ T9943] should_failslab+0xa8/0x100 [ 566.914299][ T9943] __kmalloc_noprof+0xcb/0x4f0 [ 566.914326][ T9943] ? tomoyo_encode+0x28b/0x550 [ 566.914357][ T9943] tomoyo_encode+0x28b/0x550 [ 566.914387][ T9943] tomoyo_realpath_from_path+0x58d/0x5d0 [ 566.914414][ T9943] ? tomoyo_domain+0xda/0x130 [ 566.914444][ T9943] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 566.914464][ T9943] tomoyo_path_number_perm+0x1e8/0x5a0 [ 566.914487][ T9943] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 566.914525][ T9943] ? __lock_acquire+0xaac/0xd20 [ 566.914570][ T9943] ? __fget_files+0x2a/0x420 [ 566.914604][ T9943] ? __fget_files+0x3a0/0x420 [ 566.914630][ T9943] ? __fget_files+0x2a/0x420 [ 566.914661][ T9943] security_file_ioctl+0xcb/0x2d0 [ 566.914686][ T9943] __se_sys_ioctl+0x47/0x170 [ 566.914722][ T9943] do_syscall_64+0xf6/0x210 [ 566.914748][ T9943] ? clear_bhb_loop+0x45/0xa0 [ 566.914772][ T9943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.914789][ T9943] RIP: 0033:0x7f8e9c78e969 [ 566.914806][ T9943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.914822][ T9943] RSP: 002b:00007f8e9d5e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 566.914842][ T9943] RAX: ffffffffffffffda RBX: 00007f8e9c9b5fa0 RCX: 00007f8e9c78e969 [ 566.914854][ T9943] RDX: 0000200000000040 RSI: 0000000000008982 RDI: 0000000000000003 [ 566.914866][ T9943] RBP: 00007f8e9d5e8090 R08: 0000000000000000 R09: 0000000000000000 [ 566.914876][ T9943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.914886][ T9943] R13: 0000000000000000 R14: 00007f8e9c9b5fa0 R15: 00007fffab4adc88 [ 566.914915][ T9943] [ 566.914942][ T9943] ERROR: Out of memory at tomoyo_realpath_from_path. [ 567.270382][ T9941] FAT-fs (nullb0): bogus number of reserved sectors [ 567.372706][ T9941] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 567.397646][ T9952] usb usb8: usbfs: process 9952 (syz.4.1204) did not claim interface 0 before use [ 568.785866][ T7906] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 568.925740][ T7906] usb 4-1: device descriptor read/64, error -71 [ 569.080331][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 570.044678][ T10] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xB8, changing to 0x88 [ 570.063491][ T9974] FAT-fs (nullb0): bogus number of reserved sectors [ 570.074042][ T9974] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 570.088986][ T10] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 570.100298][ T7906] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 570.112157][ T10] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 570.193205][ T10] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 570.235794][ T7906] usb 4-1: device descriptor read/64, error -71 [ 570.237786][ T10] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 570.440012][ T7906] usb usb4-port1: attempt power cycle [ 570.835854][ T10] usb 2-1: Manufacturer: syz [ 570.840554][ T10] usb 2-1: SerialNumber: syz [ 571.868084][ T9993] FAT-fs (nullb0): bogus number of reserved sectors [ 571.874821][ T9993] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 572.367747][ T9984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 572.669224][ T10] yealink 2-1:36.0: invalid payload size 0, expected 16 [ 572.700940][ T10] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input6 [ 572.765236][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 572.772591][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 572.779851][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 572.790591][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 572.798007][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 572.805594][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 572.812784][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 572.826108][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 572.832919][ C0] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 572.897070][ T10] usb 2-1: USB disconnect, device number 22 [ 573.875309][ T7906] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 574.609885][T10012] FAULT_INJECTION: forcing a failure. [ 574.609885][T10012] name failslab, interval 1, probability 0, space 0, times 0 [ 574.676012][T10012] CPU: 0 UID: 0 PID: 10012 Comm: syz.2.1217 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 574.676046][T10012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 574.676057][T10012] Call Trace: [ 574.676065][T10012] [ 574.676075][T10012] dump_stack_lvl+0x189/0x250 [ 574.676114][T10012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.676139][T10012] ? __pfx__printk+0x10/0x10 [ 574.676170][T10012] ? __pfx___might_resched+0x10/0x10 [ 574.676199][T10012] ? fs_reclaim_acquire+0x7d/0x100 [ 574.676224][T10012] should_fail_ex+0x414/0x560 [ 574.676261][T10012] should_failslab+0xa8/0x100 [ 574.676335][T10012] __kmalloc_noprof+0xcb/0x4f0 [ 574.676374][T10012] ? tomoyo_encode+0x28b/0x550 [ 574.676403][T10012] tomoyo_encode+0x28b/0x550 [ 574.676432][T10012] tomoyo_realpath_from_path+0x58d/0x5d0 [ 574.676458][T10012] ? tomoyo_domain+0xda/0x130 [ 574.676486][T10012] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 574.676506][T10012] tomoyo_path_number_perm+0x1e8/0x5a0 [ 574.676528][T10012] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 574.676564][T10012] ? __lock_acquire+0xaac/0xd20 [ 574.676603][T10012] ? __fget_files+0x2a/0x420 [ 574.676633][T10012] ? __fget_files+0x3a0/0x420 [ 574.676656][T10012] ? __fget_files+0x2a/0x420 [ 574.676685][T10012] security_file_ioctl+0xcb/0x2d0 [ 574.676708][T10012] __se_sys_ioctl+0x47/0x170 [ 574.676734][T10012] do_syscall_64+0xf6/0x210 [ 574.676757][T10012] ? clear_bhb_loop+0x45/0xa0 [ 574.676780][T10012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.676795][T10012] RIP: 0033:0x7f818e18e969 [ 574.676813][T10012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.676829][T10012] RSP: 002b:00007f818eff5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 574.676850][T10012] RAX: ffffffffffffffda RBX: 00007f818e3b5fa0 RCX: 00007f818e18e969 [ 574.676864][T10012] RDX: 0000200000000000 RSI: 0000000000008922 RDI: 0000000000000006 [ 574.676875][T10012] RBP: 00007f818eff5090 R08: 0000000000000000 R09: 0000000000000000 [ 574.676886][T10012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.676897][T10012] R13: 0000000000000000 R14: 00007f818e3b5fa0 R15: 00007ffca2d48fa8 [ 574.676926][T10012] [ 574.676948][T10012] ERROR: Out of memory at tomoyo_realpath_from_path. [ 574.699560][ T7906] usb 5-1: Using ep0 maxpacket: 32 [ 574.942442][ T7906] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 574.951812][ T7906] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 574.963516][ T7906] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 575.002190][ T7906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 575.029697][ T7906] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 575.056211][ T7906] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 575.095473][ T7906] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 575.116239][ T7906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.167620][ T7906] usb 5-1: config 0 descriptor?? [ 575.500622][ T7906] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 576.112987][ T7906] usb 5-1: USB disconnect, device number 24 [ 576.173385][ T7906] usblp0: removed [ 576.644071][ T7906] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 576.715645][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 576.835569][ T7906] usb 5-1: Using ep0 maxpacket: 32 [ 576.843536][ T7906] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 576.957202][ T10] usb 2-1: device descriptor read/64, error -71 [ 577.249392][ T7906] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 577.281152][ T7906] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 577.320559][ T7906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 577.343842][ T7906] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 577.362297][ T7906] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 577.410133][ T7906] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 577.425109][ T7906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.443873][ T7906] usb 5-1: config 0 descriptor?? [ 577.584466][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 578.411287][T10038] FAT-fs (nullb0): bogus number of reserved sectors [ 578.418246][T10038] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 578.594492][ T7906] usb 5-1: can't set config #0, error -71 [ 578.628470][ T7906] usb 5-1: USB disconnect, device number 25 [ 579.459606][ T10] usb 2-1: device descriptor read/64, error -71 [ 579.537538][T10045] fuse: Unknown parameter '' [ 579.584549][ T10] usb usb2-port1: attempt power cycle [ 580.875677][ T5890] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 581.105694][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 581.129833][ T5890] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 581.154816][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.171926][ T5890] usb 1-1: Product: syz [ 581.176473][ T5890] usb 1-1: Manufacturer: syz [ 581.181186][ T5890] usb 1-1: SerialNumber: syz [ 581.791884][ T5890] r8152-cfgselector 1-1: Unknown version 0x0000 [ 581.807699][ T5890] r8152-cfgselector 1-1: config 0 descriptor?? [ 584.218366][ T5890] r8152-cfgselector 1-1: Unknown version 0x0000 [ 584.237432][ T6885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.289059][ T5890] r8152-cfgselector 1-1: bad CDC descriptors [ 584.315183][ T6885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.362135][ T5890] r8152-cfgselector 1-1: USB disconnect, device number 22 [ 585.378570][T10086] gre1: entered allmulticast mode [ 585.911630][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 586.079993][ T10] usb 2-1: device descriptor read/64, error -71 [ 586.291268][T10100] ifb1: left promiscuous mode [ 586.325705][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 586.375896][ T7879] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 586.465694][ T10] usb 2-1: device descriptor read/64, error -71 [ 586.564701][ T7879] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.587823][ T10] usb usb2-port1: attempt power cycle [ 586.604512][ T7879] usb 3-1: config 0 interface 0 has no altsetting 0 [ 586.640374][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888031b6f400: rx timeout, send abort [ 586.658007][ T7879] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 586.767301][ T7879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.032614][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 587.045641][ T7879] usb 3-1: config 0 descriptor?? [ 587.140845][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805d12e000: rx timeout, send abort [ 587.155710][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888031b6f400: abort rx timeout. Force session deactivation [ 587.262143][T10109] xt_ipcomp: unknown flags 12 [ 587.417322][ T10] usb 2-1: device not accepting address 28, error -71 [ 587.621352][ T7879] apple 0003:05AC:027A.000C: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.2-1/input0 [ 587.649248][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805d12e000: abort rx timeout. Force session deactivation [ 588.222488][ T7879] usb 3-1: USB disconnect, device number 23 [ 588.553398][T10118] fido_id[10118]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 588.764569][T10120] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 589.779063][T10137] Cannot find del_set index 4 as target [ 589.886444][T10140] FAULT_INJECTION: forcing a failure. [ 589.886444][T10140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.920545][T10140] CPU: 0 UID: 0 PID: 10140 Comm: syz.3.1253 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 589.920606][T10140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 589.920620][T10140] Call Trace: [ 589.920629][T10140] [ 589.920639][T10140] dump_stack_lvl+0x189/0x250 [ 589.920681][T10140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 589.920710][T10140] ? __pfx__printk+0x10/0x10 [ 589.920756][T10140] should_fail_ex+0x414/0x560 [ 589.920797][T10140] strncpy_from_user+0x36/0x290 [ 589.920833][T10140] getname_flags+0xf3/0x540 [ 589.920861][T10140] __x64_sys_rename+0x5d/0x90 [ 589.920892][T10140] do_syscall_64+0xf6/0x210 [ 589.920920][T10140] ? clear_bhb_loop+0x45/0xa0 [ 589.920946][T10140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.920965][T10140] RIP: 0033:0x7f8e9c78e969 [ 589.920985][T10140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.921002][T10140] RSP: 002b:00007f8e9d5c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 589.921025][T10140] RAX: ffffffffffffffda RBX: 00007f8e9c9b6080 RCX: 00007f8e9c78e969 [ 589.921040][T10140] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000200000000100 [ 589.921053][T10140] RBP: 00007f8e9d5c7090 R08: 0000000000000000 R09: 0000000000000000 [ 589.921066][T10140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.921078][T10140] R13: 0000000000000001 R14: 00007f8e9c9b6080 R15: 00007fffab4adc88 [ 589.921110][T10140] [ 590.335973][ T5874] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 590.705801][ T7906] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 590.730396][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 590.756954][ T5874] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 590.813065][ T5874] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 590.885650][ T7906] usb 5-1: device descriptor read/64, error -71 [ 590.950371][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 591.043833][ T5874] usb 1-1: Product: syz [ 591.166304][ T5874] usb 1-1: Manufacturer: syz [ 591.259530][ T5874] usb 1-1: SerialNumber: syz [ 591.290031][ T7906] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 591.519261][ T5874] usb 1-1: config 0 descriptor?? [ 591.676217][ T7906] usb 5-1: device descriptor read/64, error -71 [ 591.863881][T10146] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 592.214381][ T7906] usb usb5-port1: attempt power cycle [ 592.616447][ T7906] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 593.476274][ T7906] usb 5-1: device descriptor read/8, error -71 [ 593.697091][ T5889] usb 1-1: USB disconnect, device number 23 [ 594.075793][ T7902] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 594.259805][ T7902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 594.277272][ T7902] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 594.309928][ T7902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 594.333746][ T7902] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 594.385757][ T10] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 594.404069][ T7902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.445223][ T7902] usb 4-1: Product: syz [ 594.476512][ T7902] usb 4-1: Manufacturer: syz [ 594.481475][ T7902] usb 4-1: SerialNumber: syz [ 594.517236][ T7902] usb 4-1: config 0 descriptor?? [ 594.536119][T10169] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 594.565806][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 594.575978][T10169] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 594.609107][ T7902] usb 4-1: ucan: probing device on interface #0 [ 594.628228][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 594.666081][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 594.723908][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 595.637944][ T10] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 595.795854][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.830930][ T10] usb 3-1: Product: syz [ 595.859753][ T7902] ucan 4-1:0.0 can0: registered device [ 595.875938][ T10] usb 3-1: Manufacturer: syz [ 595.916204][ T10] usb 3-1: SerialNumber: syz [ 595.959461][ T10] usb 3-1: config 0 descriptor?? [ 596.327899][ T7902] ucan 4-1:0.0 can0: firmware string: ÛLÜ [ 596.459258][ T10] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 596.699883][T10187] input: syz1 as /devices/virtual/input/input7 [ 597.468390][ T10] usb 3-1: USB disconnect, device number 24 [ 597.628967][ T7879] usb 4-1: USB disconnect, device number 40 [ 601.716759][T10204] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1275'. [ 605.520233][T10242] netlink: 'syz.1.1285': attribute type 10 has an invalid length. [ 605.561121][T10242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.633218][T10242] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 605.974656][T10242] syz.1.1285 (10242) used greatest stack depth: 19288 bytes left [ 606.598319][T10246] FAULT_INJECTION: forcing a failure. [ 606.598319][T10246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.632853][T10246] CPU: 0 UID: 0 PID: 10246 Comm: syz.2.1288 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 606.632889][T10246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 606.632903][T10246] Call Trace: [ 606.632926][T10246] [ 606.632944][T10246] dump_stack_lvl+0x189/0x250 [ 606.633053][T10246] ? __lock_acquire+0xaac/0xd20 [ 606.633105][T10246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 606.633131][T10246] ? __pfx__printk+0x10/0x10 [ 606.633169][T10246] ? __might_fault+0xb0/0x130 [ 606.633249][T10246] should_fail_ex+0x414/0x560 [ 606.633316][T10246] _copy_from_iter+0x1db/0x15a0 [ 606.633362][T10246] ? __pfx__copy_from_iter+0x10/0x10 [ 606.633382][T10246] ? kernfs_fop_write_iter+0x158/0x4f0 [ 606.633429][T10246] ? rcu_is_watching+0x15/0xb0 [ 606.633478][T10246] ? trace_kmalloc+0x1f/0xd0 [ 606.633512][T10246] ? kernfs_fop_write_iter+0x158/0x4f0 [ 606.633541][T10246] kernfs_fop_write_iter+0x19f/0x4f0 [ 606.633574][T10246] vfs_write+0x548/0xa90 [ 606.633629][T10246] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 606.633654][T10246] ? __pfx_vfs_write+0x10/0x10 [ 606.633692][T10246] ? __fget_files+0x2a/0x420 [ 606.633739][T10246] ksys_write+0x145/0x250 [ 606.633763][T10246] ? rcu_is_watching+0x15/0xb0 [ 606.633791][T10246] ? __pfx_ksys_write+0x10/0x10 [ 606.633821][T10246] ? do_syscall_64+0xba/0x210 [ 606.633882][T10246] do_syscall_64+0xf6/0x210 [ 606.633909][T10246] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 606.633945][T10246] ? clear_bhb_loop+0x45/0xa0 [ 606.633990][T10246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.634009][T10246] RIP: 0033:0x7f818e18e969 [ 606.634037][T10246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.634060][T10246] RSP: 002b:00007f818efd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 606.634095][T10246] RAX: ffffffffffffffda RBX: 00007f818e3b6080 RCX: 00007f818e18e969 [ 606.634110][T10246] RDX: 0000000000000002 RSI: 0000200000000640 RDI: 0000000000000004 [ 606.634122][T10246] RBP: 00007f818efd4090 R08: 0000000000000000 R09: 0000000000000000 [ 606.634135][T10246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.634146][T10246] R13: 0000000000000000 R14: 00007f818e3b6080 R15: 00007ffca2d48fa8 [ 606.634179][T10246] [ 606.881228][T10252] FAULT_INJECTION: forcing a failure. [ 606.881228][T10252] name failslab, interval 1, probability 0, space 0, times 0 [ 606.967478][T10252] CPU: 1 UID: 0 PID: 10252 Comm: syz.3.1291 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 606.967505][T10252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 606.967515][T10252] Call Trace: [ 606.967523][T10252] [ 606.967530][T10252] dump_stack_lvl+0x189/0x250 [ 606.967562][T10252] ? __pfx_dump_stack_lvl+0x10/0x10 [ 606.967582][T10252] ? __pfx__printk+0x10/0x10 [ 606.967609][T10252] ? __pfx___might_resched+0x10/0x10 [ 606.967642][T10252] ? fs_reclaim_acquire+0x7d/0x100 [ 606.967662][T10252] should_fail_ex+0x414/0x560 [ 606.967705][T10252] should_failslab+0xa8/0x100 [ 606.967740][T10252] __kmalloc_noprof+0xcb/0x4f0 [ 606.967760][T10252] ? bpf_test_init+0xc2/0x170 [ 606.967799][T10252] bpf_test_init+0xc2/0x170 [ 606.967817][T10252] bpf_prog_test_run_skb+0x1e9/0x1560 [ 606.967831][T10252] ? __fget_files+0x2a/0x420 [ 606.967865][T10252] ? __fget_files+0x2a/0x420 [ 606.967891][T10252] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 606.967907][T10252] bpf_prog_test_run+0x2a9/0x340 [ 606.967959][T10252] __sys_bpf+0x4a4/0x860 [ 606.967977][T10252] ? __pfx___sys_bpf+0x10/0x10 [ 606.968003][T10252] ? ksys_write+0x1f0/0x250 [ 606.968021][T10252] ? rcu_is_watching+0x15/0xb0 [ 606.968052][T10252] __x64_sys_bpf+0x7c/0x90 [ 606.968067][T10252] do_syscall_64+0xf6/0x210 [ 606.968087][T10252] ? clear_bhb_loop+0x45/0xa0 [ 606.968106][T10252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.968121][T10252] RIP: 0033:0x7f8e9c78e969 [ 606.968135][T10252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.968148][T10252] RSP: 002b:00007f8e9d5e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 606.968164][T10252] RAX: ffffffffffffffda RBX: 00007f8e9c9b5fa0 RCX: 00007f8e9c78e969 [ 606.968175][T10252] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 606.968184][T10252] RBP: 00007f8e9d5e8090 R08: 0000000000000000 R09: 0000000000000000 [ 606.968193][T10252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.968202][T10252] R13: 0000000000000000 R14: 00007f8e9c9b5fa0 R15: 00007fffab4adc88 [ 606.968224][T10252] [ 607.231348][T10255] Cannot find del_set index 4 as target [ 607.275721][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 607.461156][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.496154][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 607.958488][ T10] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 608.555544][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.583722][ T10] usb 2-1: config 0 descriptor?? [ 608.643726][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 610.426207][T10289] FAULT_INJECTION: forcing a failure. [ 610.426207][T10289] name failslab, interval 1, probability 0, space 0, times 0 [ 610.459625][T10289] CPU: 0 UID: 0 PID: 10289 Comm: syz.4.1303 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 610.459671][T10289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 610.459685][T10289] Call Trace: [ 610.459695][T10289] [ 610.459704][T10289] dump_stack_lvl+0x189/0x250 [ 610.459745][T10289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 610.459771][T10289] ? __pfx__printk+0x10/0x10 [ 610.459803][T10289] ? __pfx___might_resched+0x10/0x10 [ 610.459834][T10289] ? fs_reclaim_acquire+0x7d/0x100 [ 610.459860][T10289] should_fail_ex+0x414/0x560 [ 610.459898][T10289] should_failslab+0xa8/0x100 [ 610.459931][T10289] __kmalloc_noprof+0xcb/0x4f0 [ 610.459958][T10289] ? tomoyo_encode+0x28b/0x550 [ 610.460011][T10289] tomoyo_encode+0x28b/0x550 [ 610.460046][T10289] tomoyo_realpath_from_path+0x58d/0x5d0 [ 610.460073][T10289] ? tomoyo_domain+0xda/0x130 [ 610.460102][T10289] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 610.460124][T10289] tomoyo_path_number_perm+0x1e8/0x5a0 [ 610.460155][T10289] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 610.460193][T10289] ? __lock_acquire+0xaac/0xd20 [ 610.460239][T10289] ? __fget_files+0x2a/0x420 [ 610.460274][T10289] ? __fget_files+0x3a0/0x420 [ 610.460300][T10289] ? __fget_files+0x2a/0x420 [ 610.460331][T10289] security_file_ioctl+0xcb/0x2d0 [ 610.460369][T10289] __se_sys_ioctl+0x47/0x170 [ 610.460398][T10289] do_syscall_64+0xf6/0x210 [ 610.460423][T10289] ? clear_bhb_loop+0x45/0xa0 [ 610.460451][T10289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.460467][T10289] RIP: 0033:0x7f1d5818e969 [ 610.460485][T10289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.460501][T10289] RSP: 002b:00007f1d58f43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 610.460522][T10289] RAX: ffffffffffffffda RBX: 00007f1d583b5fa0 RCX: 00007f1d5818e969 [ 610.460535][T10289] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 610.460547][T10289] RBP: 00007f1d58f43090 R08: 0000000000000000 R09: 0000000000000000 [ 610.460559][T10289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.460575][T10289] R13: 0000000000000000 R14: 00007f1d583b5fa0 R15: 00007ffe48c85e78 [ 610.460605][T10289] [ 610.460671][T10289] ERROR: Out of memory at tomoyo_realpath_from_path. [ 610.755743][ T7902] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 611.041359][ T7902] usb 4-1: Using ep0 maxpacket: 16 [ 611.284264][ T7902] usb 4-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 611.301594][ T7902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.334208][ T7902] usb 4-1: config 0 descriptor?? [ 611.434229][T10300] Cannot find del_set index 4 as target [ 611.790967][ T7902] asus 0003:0B05:1A30.000D: hidraw0: USB HID v0.00 Device [HID 0b05:1a30] on usb-dummy_hcd.3-1/input0 [ 611.816527][ T7902] asus 0003:0B05:1A30.000D: Asus input not registered [ 611.835050][ T7902] asus 0003:0B05:1A30.000D: probe with driver asus failed with error -12 [ 611.955824][ T7879] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 612.013090][T10309] 9pnet_fd: Insufficient options for proto=fd [ 612.068669][ T7902] usb 4-1: USB disconnect, device number 41 [ 612.116768][ T7879] usb 5-1: Using ep0 maxpacket: 8 [ 612.132722][ T7879] usb 5-1: config 0 has an invalid interface number: 163 but max is 0 [ 612.155853][ T7879] usb 5-1: config 0 has no interface number 0 [ 612.179408][ T7879] usb 5-1: config 0 interface 163 altsetting 0 endpoint 0xA has invalid maxpacket 27776, setting to 64 [ 612.191351][ T5889] usb 2-1: USB disconnect, device number 30 [ 612.226271][ T7879] usb 5-1: config 0 interface 163 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 612.261649][ T7879] usb 5-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 1.01 [ 612.277967][ T7879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.296077][ T7879] usb 5-1: Product: syz [ 612.305538][ T7879] usb 5-1: Manufacturer: syz [ 612.310277][ T7879] usb 5-1: SerialNumber: syz [ 612.335980][ T7879] usb 5-1: config 0 descriptor?? [ 612.339461][T10318] netlink: 'syz.2.1314': attribute type 1 has an invalid length. [ 612.367442][ T7879] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 612.370415][T10318] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1314'. [ 612.466724][T10318] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1314'. [ 612.590746][T10304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.656243][T10304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.709167][T10328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1314'. [ 612.732046][ T7879] usb 5-1: USB disconnect, device number 30 [ 613.789159][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.163/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 614.415933][T10338] FAT-fs (nullb0): bogus number of reserved sectors [ 614.422616][T10338] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 614.647323][T10337] FAT-fs (nullb0): bogus number of reserved sectors [ 614.654139][T10337] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 616.229908][T10345] No control pipe specified [ 616.271273][T10341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1320'. [ 616.350970][T10344] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 616.359972][T10347] Cannot find del_set index 4 as target [ 618.143528][T10345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1322'. [ 619.011409][T10382] FAT-fs (nullb0): bogus number of reserved sectors [ 619.018234][T10382] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 619.041372][ T7902] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 619.221617][T10385] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 619.250475][ T7902] usb 3-1: Using ep0 maxpacket: 32 [ 619.265172][ T7902] usb 3-1: config 0 has no interfaces? [ 619.281325][ T7902] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 619.309743][ T7902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.526809][ T7902] usb 3-1: config 0 descriptor?? [ 620.205746][ T5932] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 620.295615][ T7906] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 620.358030][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.375372][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.394837][ T5932] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 620.411740][ T5932] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 620.420978][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.509495][ T5932] usb 5-1: config 0 descriptor?? [ 620.615924][ T7906] usb 2-1: Using ep0 maxpacket: 32 [ 620.638172][ T7906] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 620.649858][ T7906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 620.660869][ T7906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 620.672874][ T7906] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 620.682149][ T7906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.909934][ T7906] usb 2-1: config 0 descriptor?? [ 621.036454][T10392] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 621.272926][ T7906] hub 2-1:0.0: USB hub found [ 621.383853][ T5932] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 621.407178][ T7906] hub 2-1:0.0: 1 port detected [ 621.471763][ T5932] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 621.497876][ T10] usb 3-1: USB disconnect, device number 25 [ 621.621609][T10385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.651883][T10385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.698541][T10405] FAULT_INJECTION: forcing a failure. [ 621.698541][T10405] name failslab, interval 1, probability 0, space 0, times 0 [ 621.710341][ T10] usb 5-1: USB disconnect, device number 31 [ 621.778976][T10405] CPU: 0 UID: 0 PID: 10405 Comm: syz.0.1341 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 621.779012][T10405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 621.779025][T10405] Call Trace: [ 621.779034][T10405] [ 621.779044][T10405] dump_stack_lvl+0x189/0x250 [ 621.779091][T10405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.779121][T10405] ? __pfx__printk+0x10/0x10 [ 621.779158][T10405] ? __pfx___might_resched+0x10/0x10 [ 621.779196][T10405] should_fail_ex+0x414/0x560 [ 621.779242][T10405] should_failslab+0xa8/0x100 [ 621.779278][T10405] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 621.779310][T10405] ? __alloc_skb+0x112/0x2d0 [ 621.779366][T10405] __alloc_skb+0x112/0x2d0 [ 621.779394][T10405] netlink_sendmsg+0x5c6/0xb30 [ 621.779422][T10405] ? is_bpf_text_address+0x26/0x2b0 [ 621.779468][T10405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.779500][T10405] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 621.779539][T10405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.779562][T10405] __sock_sendmsg+0x219/0x270 [ 621.779602][T10405] ____sys_sendmsg+0x505/0x830 [ 621.779639][T10405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 621.779676][T10405] ? import_iovec+0x74/0xa0 [ 621.779713][T10405] ___sys_sendmsg+0x21f/0x2a0 [ 621.779742][T10405] ? __pfx____sys_sendmsg+0x10/0x10 [ 621.779815][T10405] ? __fget_files+0x2a/0x420 [ 621.779846][T10405] ? __fget_files+0x3a0/0x420 [ 621.779887][T10405] __x64_sys_sendmsg+0x19b/0x260 [ 621.779917][T10405] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 621.779962][T10405] ? do_syscall_64+0xba/0x210 [ 621.779994][T10405] do_syscall_64+0xf6/0x210 [ 621.780019][T10405] ? clear_bhb_loop+0x45/0xa0 [ 621.780045][T10405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.780064][T10405] RIP: 0033:0x7fe8da98e969 [ 621.780098][T10405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.780122][T10405] RSP: 002b:00007fe8db8df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 621.780145][T10405] RAX: ffffffffffffffda RBX: 00007fe8dabb5fa0 RCX: 00007fe8da98e969 [ 621.780160][T10405] RDX: 000000002000c800 RSI: 0000200000000380 RDI: 0000000000000003 [ 621.780173][T10405] RBP: 00007fe8db8df090 R08: 0000000000000000 R09: 0000000000000000 [ 621.780185][T10405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.780196][T10405] R13: 0000000000000000 R14: 00007fe8dabb5fa0 R15: 00007ffe7a09fe08 [ 621.780226][T10405] [ 622.738006][ T7906] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 622.745182][ T7906] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 622.758471][ T7906] usbhid 2-1:0.0: can't add hid device: -32 [ 623.008858][ T7906] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 623.139284][ T7906] usb 2-1: USB disconnect, device number 31 [ 624.836098][ T7906] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 625.411741][ T7906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.504231][ T7906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.596671][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.603092][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.636973][ T7906] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 625.650692][ T7906] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 625.671419][ T7906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.880781][ T7906] usb 1-1: config 0 descriptor?? [ 626.389620][ T7906] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 626.406053][ T7906] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 626.508738][ T7872] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 626.702670][ T7872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 627.138758][ T7906] usb 1-1: USB disconnect, device number 24 [ 627.155364][ T7872] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 627.238498][ T7872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 627.275013][ T7872] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 627.291061][ T7872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.299709][ T7872] usb 2-1: Product: syz [ 627.304083][ T7872] usb 2-1: Manufacturer: syz [ 627.310462][ T7872] usb 2-1: SerialNumber: syz [ 627.320125][ T7872] usb 2-1: config 0 descriptor?? [ 627.358897][T10448] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 627.394042][T10448] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 627.542871][ T7872] usb 2-1: ucan: probing device on interface #0 [ 627.704469][T10468] Cannot find del_set index 4 as target [ 627.721934][T10465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1361'. [ 628.049040][ T10] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 628.284171][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.347006][ T7872] ucan 2-1:0.0 can0: registered device [ 628.359661][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 628.384813][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 628.437474][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.449629][ T10] usb 3-1: Product: syz [ 628.453564][T10472] input: syz1 as /devices/virtual/input/input10 [ 628.457551][ T10] usb 3-1: Manufacturer: syz [ 628.476318][ T10] usb 3-1: SerialNumber: syz [ 628.532460][ T7872] ucan 2-1:0.0 can0: firmware string: ÛLÜ [ 628.716033][ T30] audit: type=1326 audit(1746986963.342:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10463 comm="syz.2.1361" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f818e18e969 code=0x0 [ 628.818994][ T5922] usb 2-1: USB disconnect, device number 32 [ 630.755652][ T5922] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 631.216292][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 631.236511][ T5922] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 631.247140][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.255302][ T5922] usb 1-1: Product: syz [ 631.283591][ T5922] usb 1-1: Manufacturer: syz [ 631.297592][ T5922] usb 1-1: SerialNumber: syz [ 631.331682][ T5922] r8152-cfgselector 1-1: Unknown version 0x0000 [ 631.339739][ T5922] r8152-cfgselector 1-1: config 0 descriptor?? [ 631.512936][ T10] usb 3-1: 0:2 : does not exist [ 631.547842][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 631.732658][T10504] FAULT_INJECTION: forcing a failure. [ 631.732658][T10504] name failslab, interval 1, probability 0, space 0, times 0 [ 631.805583][T10504] CPU: 1 UID: 0 PID: 10504 Comm: syz.1.1373 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 631.805620][T10504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 631.805634][T10504] Call Trace: [ 631.805644][T10504] [ 631.805654][T10504] dump_stack_lvl+0x189/0x250 [ 631.805695][T10504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 631.805726][T10504] ? __pfx__printk+0x10/0x10 [ 631.805759][T10504] ? __pfx___might_resched+0x10/0x10 [ 631.805789][T10504] ? fs_reclaim_acquire+0x7d/0x100 [ 631.805818][T10504] should_fail_ex+0x414/0x560 [ 631.805857][T10504] should_failslab+0xa8/0x100 [ 631.805891][T10504] __kmalloc_noprof+0xcb/0x4f0 [ 631.805927][T10504] ? tomoyo_encode+0x28b/0x550 [ 631.805959][T10504] tomoyo_encode+0x28b/0x550 [ 631.805991][T10504] tomoyo_realpath_from_path+0x58d/0x5d0 [ 631.806020][T10504] ? tomoyo_domain+0xda/0x130 [ 631.806053][T10504] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 631.806074][T10504] tomoyo_path_number_perm+0x1e8/0x5a0 [ 631.806099][T10504] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 631.806139][T10504] ? __lock_acquire+0xaac/0xd20 [ 631.806187][T10504] ? __fget_files+0x2a/0x420 [ 631.806223][T10504] ? __fget_files+0x3a0/0x420 [ 631.806251][T10504] ? __fget_files+0x2a/0x420 [ 631.806285][T10504] security_file_ioctl+0xcb/0x2d0 [ 631.806319][T10504] __se_sys_ioctl+0x47/0x170 [ 631.806358][T10504] do_syscall_64+0xf6/0x210 [ 631.806385][T10504] ? clear_bhb_loop+0x45/0xa0 [ 631.806410][T10504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.806429][T10504] RIP: 0033:0x7f484678e969 [ 631.806447][T10504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.806465][T10504] RSP: 002b:00007f4847570038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 631.806485][T10504] RAX: ffffffffffffffda RBX: 00007f48469b5fa0 RCX: 00007f484678e969 [ 631.806500][T10504] RDX: 00002000000001c0 RSI: 0000000000008924 RDI: 0000000000000003 [ 631.806512][T10504] RBP: 00007f4847570090 R08: 0000000000000000 R09: 0000000000000000 [ 631.806524][T10504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.806536][T10504] R13: 0000000000000000 R14: 00007f48469b5fa0 R15: 00007ffe694e02e8 [ 631.806566][T10504] [ 631.806653][T10504] ERROR: Out of memory at tomoyo_realpath_from_path. [ 631.823774][ T10] usb 3-1: USB disconnect, device number 26 [ 632.204087][ T5931] udevd[5931]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 632.329423][ T7902] r8152-cfgselector 1-1: USB disconnect, device number 25 [ 633.045814][T10516] Cannot find del_set index 4 as target [ 636.216762][T10546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1384'. [ 636.707443][T10552] FAULT_INJECTION: forcing a failure. [ 636.707443][T10552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.911394][T10552] CPU: 0 UID: 0 PID: 10552 Comm: syz.4.1387 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 636.911432][T10552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 636.911451][T10552] Call Trace: [ 636.911459][T10552] [ 636.911466][T10552] dump_stack_lvl+0x189/0x250 [ 636.911499][T10552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.911519][T10552] ? __pfx__printk+0x10/0x10 [ 636.911550][T10552] should_fail_ex+0x414/0x560 [ 636.911580][T10552] _copy_to_user+0x31/0xb0 [ 636.911607][T10552] simple_read_from_buffer+0xe1/0x170 [ 636.911637][T10552] proc_fail_nth_read+0x1df/0x250 [ 636.911659][T10552] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 636.911675][T10552] ? rw_verify_area+0x258/0x650 [ 636.911699][T10552] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 636.911713][T10552] vfs_read+0x1fd/0x980 [ 636.911733][T10552] ? map_update_elem+0x526/0x7a0 [ 636.911755][T10552] ? __pfx_vfs_read+0x10/0x10 [ 636.911773][T10552] ? __sys_bpf+0x6a9/0x860 [ 636.911790][T10552] ? __pfx___sys_bpf+0x10/0x10 [ 636.911816][T10552] ksys_read+0x145/0x250 [ 636.911834][T10552] ? rcu_is_watching+0x15/0xb0 [ 636.911859][T10552] ? __pfx_ksys_read+0x10/0x10 [ 636.911880][T10552] ? do_syscall_64+0xba/0x210 [ 636.911901][T10552] do_syscall_64+0xf6/0x210 [ 636.911919][T10552] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 636.911934][T10552] ? clear_bhb_loop+0x45/0xa0 [ 636.911951][T10552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.911965][T10552] RIP: 0033:0x7f1d5818d37c [ 636.911979][T10552] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 636.911991][T10552] RSP: 002b:00007f1d58f43030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 636.912007][T10552] RAX: ffffffffffffffda RBX: 00007f1d583b5fa0 RCX: 00007f1d5818d37c [ 636.912018][T10552] RDX: 000000000000000f RSI: 00007f1d58f430a0 RDI: 0000000000000004 [ 636.912027][T10552] RBP: 00007f1d58f43090 R08: 0000000000000000 R09: 0000000000000000 [ 636.912041][T10552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.912050][T10552] R13: 0000000000000000 R14: 00007f1d583b5fa0 R15: 00007ffe48c85e78 [ 636.912072][T10552] [ 639.299400][T10586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.341814][T10586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.759584][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 639.792086][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 639.866005][T10586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.883082][T10586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.010932][T10586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.116116][ T10] usb 5-1: device descriptor read/64, error -32 [ 640.123653][T10586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.283660][T10597] input: syz1 as /devices/virtual/input/input11 [ 640.784534][T10586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.803179][T10586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.873200][T10586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.886293][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 640.923958][T10586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.058370][ T10] usb 5-1: config 8 has an invalid interface number: 7 but max is 3 [ 641.070123][ T10] usb 5-1: config 8 has an invalid interface number: 163 but max is 3 [ 641.094725][ T10] usb 5-1: config 8 has an invalid interface number: 8 but max is 3 [ 641.104037][ T10] usb 5-1: config 8 has an invalid interface number: 83 but max is 3 [ 641.115922][ T7872] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 641.124180][ T10] usb 5-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 641.138474][ T10] usb 5-1: config 8 has an invalid interface number: 145 but max is 3 [ 641.153202][ T10] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 641.170217][ T10] usb 5-1: config 8 has an invalid interface number: 181 but max is 3 [ 641.180233][ T10] usb 5-1: config 8 has an invalid interface number: 207 but max is 3 [ 641.192179][ T10] usb 5-1: config 8 has an invalid interface number: 196 but max is 3 [ 641.205183][ T10] usb 5-1: config 8 has 8 interfaces, different from the descriptor's value: 4 [ 641.220326][ T10] usb 5-1: config 8 has no interface number 0 [ 641.229694][ T10] usb 5-1: config 8 has no interface number 1 [ 641.238452][ T10] usb 5-1: config 8 has no interface number 2 [ 641.245334][ T10] usb 5-1: config 8 has no interface number 3 [ 641.253322][ T10] usb 5-1: config 8 has no interface number 4 [ 641.262794][ T10] usb 5-1: config 8 has no interface number 5 [ 641.269896][ T10] usb 5-1: config 8 has no interface number 6 [ 641.275704][ T7872] usb 1-1: device descriptor read/64, error -71 [ 641.283851][ T10] usb 5-1: config 8 interface 7 altsetting 1 endpoint 0x9 has invalid maxpacket 49607, setting to 1024 [ 641.299264][ T10] usb 5-1: config 8 interface 7 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 641.313036][ T10] usb 5-1: config 8 interface 7 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 9 [ 641.334460][ T10] usb 5-1: too many endpoints for config 8 interface 163 altsetting 23: 93, using maximum allowed: 30 [ 641.354518][ T10] usb 5-1: config 8 interface 163 altsetting 23 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 641.369594][ T10] usb 5-1: config 8 interface 163 altsetting 23 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 641.382485][ T10] usb 5-1: config 8 interface 163 altsetting 23 has a duplicate endpoint with address 0xD, skipping [ 641.399074][ T10] usb 5-1: config 8 interface 163 altsetting 23 has 6 endpoint descriptors, different from the interface descriptor's value: 93 [ 641.418236][ T10] usb 5-1: config 8 interface 8 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 641.508546][ T10] usb 5-1: config 8 interface 8 altsetting 127 has a duplicate endpoint with address 0x9, skipping [ 641.566055][ T7872] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 641.580631][ T10] usb 5-1: config 8 interface 8 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 641.624092][ T10] usb 5-1: config 8 interface 8 altsetting 127 has a duplicate endpoint with address 0x2, skipping [ 641.679884][ T10] usb 5-1: config 8 interface 8 altsetting 127 has a duplicate endpoint with address 0xF, skipping [ 641.715778][ T7872] usb 1-1: device descriptor read/64, error -71 [ 641.719263][ T10] usb 5-1: config 8 interface 8 altsetting 127 has a duplicate endpoint with address 0x8, skipping [ 641.792481][ T10] usb 5-1: config 8 interface 8 altsetting 127 has 9 endpoint descriptors, different from the interface descriptor's value: 13 [ 641.817242][ T10] usb 5-1: too many endpoints for config 8 interface 83 altsetting 227: 65, using maximum allowed: 30 [ 641.835089][ T10] usb 5-1: config 8 interface 83 altsetting 227 has a duplicate endpoint with address 0x8, skipping [ 641.846733][ T10] usb 5-1: config 8 interface 83 altsetting 227 has a duplicate endpoint with address 0x9, skipping [ 641.885161][ T10] usb 5-1: config 8 interface 83 altsetting 227 has a duplicate endpoint with address 0x2, skipping [ 641.885836][ T7872] usb usb1-port1: attempt power cycle [ 641.939015][ T10] usb 5-1: config 8 interface 83 altsetting 227 has a duplicate endpoint with address 0x6, skipping [ 641.987085][ T10] usb 5-1: config 8 interface 83 altsetting 227 has 4 endpoint descriptors, different from the interface descriptor's value: 65 [ 642.046534][ T10] usb 5-1: config 8 interface 145 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 642.083669][ T10] usb 5-1: config 8 interface 145 altsetting 7 endpoint 0xA has an invalid bInterval 74, changing to 7 [ 642.114858][ T10] usb 5-1: config 8 interface 145 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 642.141649][ T10] usb 5-1: config 8 interface 145 altsetting 7 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 642.176219][ T10] usb 5-1: config 8 interface 145 altsetting 7 has a duplicate endpoint with address 0x81, skipping [ 642.206551][ T10] usb 5-1: config 8 interface 145 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 642.237960][ T10] usb 5-1: config 8 interface 145 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 642.265834][ T7872] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 642.267032][ T10] usb 5-1: config 8 interface 145 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 642.326674][ T7872] usb 1-1: device descriptor read/8, error -71 [ 642.359524][ T10] usb 5-1: config 8 interface 145 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 642.411688][ T10] usb 5-1: config 8 interface 145 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 642.444609][ T10] usb 5-1: config 8 interface 145 altsetting 7 has an endpoint descriptor with address 0x66, changing to 0x6 [ 642.482417][ T10] usb 5-1: config 8 interface 145 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 642.540313][ T10] usb 5-1: config 8 interface 145 altsetting 7 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 642.635753][ T7872] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 642.642709][ T10] usb 5-1: config 8 interface 181 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 642.682135][ T7872] usb 1-1: device descriptor read/8, error -71 [ 642.707655][ T10] usb 5-1: config 8 interface 181 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 642.749513][ T10] usb 5-1: config 8 interface 181 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 642.840775][ T10] usb 5-1: too many endpoints for config 8 interface 207 altsetting 171: 39, using maximum allowed: 30 [ 643.844114][ T10] usb 5-1: config 8 interface 207 altsetting 171 has a duplicate endpoint with address 0x1, skipping [ 643.870513][ T10] usb 5-1: config 8 interface 207 altsetting 171 has a duplicate endpoint with address 0x6, skipping [ 644.122966][ T10] usb 5-1: config 8 interface 207 altsetting 171 has 2 endpoint descriptors, different from the interface descriptor's value: 39 [ 644.123047][ T7872] usb usb1-port1: unable to enumerate USB device [ 644.136460][ T10] usb 5-1: too many endpoints for config 8 interface 196 altsetting 62: 46, using maximum allowed: 30 [ 644.209418][ T10] usb 5-1: config 8 interface 196 altsetting 62 has an invalid descriptor for endpoint zero, skipping [ 644.305407][ T10] usb 5-1: config 8 interface 196 altsetting 62 has a duplicate endpoint with address 0x2, skipping [ 644.399333][ T10] usb 5-1: config 8 interface 196 altsetting 62 has a duplicate endpoint with address 0xA, skipping [ 644.412382][ T10] usb 5-1: config 8 interface 196 altsetting 62 has 3 endpoint descriptors, different from the interface descriptor's value: 46 [ 644.430301][ T10] usb 5-1: config 8 interface 7 has no altsetting 0 [ 644.437145][ T10] usb 5-1: config 8 interface 163 has no altsetting 0 [ 644.449262][ T10] usb 5-1: config 8 interface 8 has no altsetting 0 [ 644.469894][ T10] usb 5-1: config 8 interface 83 has no altsetting 0 [ 644.612497][ T10] usb 5-1: config 8 interface 145 has no altsetting 0 [ 645.172506][ T10] usb 5-1: config 8 interface 181 has no altsetting 0 [ 645.179414][ T10] usb 5-1: config 8 interface 207 has no altsetting 0 [ 645.186920][ T10] usb 5-1: config 8 interface 196 has no altsetting 0 [ 645.194475][ T10] usb 5-1: string descriptor 0 read error: -71 [ 645.201691][ T10] usb 5-1: New USB device found, idVendor=0403, idProduct=a549, bcdDevice=e6.0c [ 645.241531][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.347815][ T10] usb 5-1: can't set config #8, error -71 [ 645.384861][ T10] usb 5-1: USB disconnect, device number 33 [ 645.639105][T10636] o2cb: This node has not been configured. [ 645.645091][T10636] o2cb: Cluster check failed. Fix errors before retrying. [ 645.652553][T10636] (syz.0.1413,10636,0):user_dlm_register:674 ERROR: status = -22 [ 645.660477][T10636] (syz.0.1413,10636,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 647.295718][ T5932] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 647.317630][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 647.895611][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 647.907109][ T5932] usb 1-1: Using ep0 maxpacket: 32 [ 647.917479][ T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 647.934198][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.950799][ T10] usb 5-1: Product: syz [ 647.955124][ T10] usb 5-1: Manufacturer: syz [ 647.961044][ T10] usb 5-1: SerialNumber: syz [ 648.115290][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.139451][ T5932] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 648.150735][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.190324][ T10] r8152-cfgselector 5-1: Unknown version 0x0000 [ 648.197100][ T10] r8152-cfgselector 5-1: config 0 descriptor?? [ 648.232825][ T5932] usb 1-1: config 0 descriptor?? [ 648.542506][T10651] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.912805][ T5932] usbhid 1-1:0.0: can't add hid device: -71 [ 648.922603][ T5932] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 648.933409][ T5932] usb 1-1: USB disconnect, device number 30 [ 649.092245][ T7872] r8152-cfgselector 5-1: USB disconnect, device number 34 [ 650.724124][T10677] o2cb: This node has not been configured. [ 650.730172][T10677] o2cb: Cluster check failed. Fix errors before retrying. [ 650.737645][T10677] (syz.4.1425,10677,1):user_dlm_register:674 ERROR: status = -22 [ 650.745934][T10677] (syz.4.1425,10677,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 652.856960][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 652.945623][ T7872] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 652.979756][T10683] Cannot find del_set index 4 as target [ 653.019617][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.053331][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 653.071076][ T10] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 653.083496][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.096734][ T7872] usb 5-1: Using ep0 maxpacket: 32 [ 653.120445][ T7872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.120517][ T10] usb 2-1: config 0 descriptor?? [ 653.141355][ T7872] usb 5-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 653.162926][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 653.334392][ T7872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.487498][ T7872] usb 5-1: config 0 descriptor?? [ 654.256621][ T7872] usbhid 5-1:0.0: can't add hid device: -71 [ 654.287088][ T7872] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 654.557277][ T7872] usb 5-1: USB disconnect, device number 35 [ 654.698139][T10698] binder: BINDER_SET_CONTEXT_MGR already set [ 654.706030][T10698] binder: 10697:10698 ioctl 4018620d 200000000040 returned -16 [ 655.563716][T10712] o2cb: This node has not been configured. [ 655.570281][T10712] o2cb: Cluster check failed. Fix errors before retrying. [ 655.577822][T10712] (syz.2.1437,10712,1):user_dlm_register:674 ERROR: status = -22 [ 655.585698][T10712] (syz.2.1437,10712,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 655.965778][ T7872] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 656.257343][ T7872] usb 3-1: Using ep0 maxpacket: 32 [ 656.349167][ T7872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.474010][ T7872] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 656.604648][ T7872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.015779][ T7872] usb 3-1: config 0 descriptor?? [ 658.047204][T10726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1440'. [ 658.701587][ T7872] usbhid 3-1:0.0: can't add hid device: -71 [ 658.771888][ T7872] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 658.785235][ T7872] usb 3-1: USB disconnect, device number 27 [ 659.063596][ T7906] usb 2-1: USB disconnect, device number 33 [ 660.535684][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 662.322068][T10760] Cannot find del_set index 4 as target [ 662.503776][T10761] input: syz1 as /devices/virtual/input/input12 [ 663.666564][T10766] binder: BINDER_SET_CONTEXT_MGR already set [ 663.672713][T10766] binder: 10764:10766 ioctl 4018620d 200000000040 returned -16 [ 665.835864][ T5922] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 666.487192][T10795] Cannot find del_set index 4 as target [ 666.525682][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 666.542516][ T5922] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 666.560204][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.589217][ T5922] usb 1-1: Product: syz [ 666.597292][T10797] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1465'. [ 666.607614][ T5922] usb 1-1: Manufacturer: syz [ 666.614661][ T5922] usb 1-1: SerialNumber: syz [ 666.682164][ T5922] r8152-cfgselector 1-1: Unknown version 0x0000 [ 666.861148][ T5922] r8152-cfgselector 1-1: config 0 descriptor?? [ 669.551066][T10826] No control pipe specified [ 669.730666][ T5922] r8152-cfgselector 1-1: USB disconnect, device number 31 [ 673.178672][ T5922] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 673.227928][T10826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1476'. [ 673.396543][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.474115][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 673.509985][ T5922] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 673.523973][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.536388][ T5922] usb 1-1: config 0 descriptor?? [ 673.547152][ T5922] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 674.865714][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 674.984420][T10877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1491'. [ 675.365794][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 676.131581][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 676.145780][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.153857][ T10] usb 4-1: Product: syz [ 676.175545][ T10] usb 4-1: Manufacturer: syz [ 676.180239][ T10] usb 4-1: SerialNumber: syz [ 676.221860][ T10] r8152-cfgselector 4-1: Unknown version 0x0000 [ 676.235171][ T5922] usb 1-1: USB disconnect, device number 32 [ 676.245551][ T10] r8152-cfgselector 4-1: config 0 descriptor?? [ 677.510000][T10908] No control pipe specified [ 677.554885][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888045e7c400: rx timeout, send abort [ 678.055201][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888045e7d000: rx timeout, send abort [ 678.066212][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888045e7c400: abort rx timeout. Force session deactivation [ 678.179851][ T5922] r8152-cfgselector 4-1: USB disconnect, device number 42 [ 678.563615][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888045e7d000: abort rx timeout. Force session deactivation [ 678.581010][T10919] Cannot find del_set index 4 as target [ 679.677150][T10929] o2cb: This node has not been configured. [ 679.683143][T10929] o2cb: Cluster check failed. Fix errors before retrying. [ 679.690943][T10929] (syz.4.1508,10929,0):user_dlm_register:674 ERROR: status = -22 [ 679.698844][T10929] (syz.4.1508,10929,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 681.375703][ T5922] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 681.639625][T10932] input: syz1 as /devices/virtual/input/input14 [ 682.216145][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 682.404217][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.428506][ T5922] usb 5-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 682.444090][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.293053][ T5922] usb 5-1: config 0 descriptor?? [ 683.401315][ T5922] usb 5-1: can't set config #0, error -71 [ 683.445429][ T5922] usb 5-1: USB disconnect, device number 37 [ 683.787351][ T7872] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 683.955901][ T7872] usb 4-1: Using ep0 maxpacket: 16 [ 684.279805][ T7872] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 684.311798][ T7872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.619441][ T7872] usb 4-1: Product: syz [ 684.624107][ T7872] usb 4-1: Manufacturer: syz [ 684.629209][ T7872] usb 4-1: SerialNumber: syz [ 684.808328][ T7872] r8152-cfgselector 4-1: Unknown version 0x0000 [ 684.814671][ T7872] r8152-cfgselector 4-1: config 0 descriptor?? [ 685.046073][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888021f86000: rx timeout, send abort [ 685.546273][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888021f86800: rx timeout, send abort [ 685.554663][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888021f86000: abort rx timeout. Force session deactivation [ 686.054667][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888021f86800: abort rx timeout. Force session deactivation [ 686.147341][T10965] Cannot find del_set index 4 as target [ 687.079707][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.088329][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.162397][T10979] o2cb: This node has not been configured. [ 687.168497][T10979] o2cb: Cluster check failed. Fix errors before retrying. [ 687.176051][T10979] (syz.0.1523,10979,1):user_dlm_register:674 ERROR: status = -22 [ 687.183889][T10979] (syz.0.1523,10979,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 688.144111][T10975] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1521'. [ 688.565681][ T7872] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 688.757546][ T7872] usb 1-1: Using ep0 maxpacket: 32 [ 688.803616][ T7872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.900097][ T7872] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 688.976564][ T7872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.108366][ T7872] usb 1-1: config 0 descriptor?? [ 689.889265][ T7872] usbhid 1-1:0.0: can't add hid device: -71 [ 689.928710][ T10] r8152-cfgselector 4-1: USB disconnect, device number 43 [ 689.964800][ T7872] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 690.014014][T10991] No control pipe specified [ 690.014858][ T7872] usb 1-1: USB disconnect, device number 33 [ 693.637044][T11028] o2cb: This node has not been configured. [ 693.642977][T11028] o2cb: Cluster check failed. Fix errors before retrying. [ 693.650818][T11028] (syz.0.1538,11028,1):user_dlm_register:674 ERROR: status = -22 [ 693.658989][T11028] (syz.0.1538,11028,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 695.016191][ T7872] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 695.466535][ T7872] usb 1-1: Using ep0 maxpacket: 32 [ 695.600989][T11032] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1539'. [ 695.792790][ T7872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.864965][ T7872] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 695.875327][ T7872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.258411][ T7872] usb 1-1: config 0 descriptor?? [ 696.889546][ T7872] usbhid 1-1:0.0: can't add hid device: -71 [ 696.896553][ T7872] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 696.918527][ T7872] usb 1-1: USB disconnect, device number 34 [ 698.415809][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 698.451624][T11062] No control pipe specified [ 699.755569][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 699.767519][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 699.788345][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 699.803454][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 699.940336][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1552'. [ 700.077599][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.115537][ T10] usb 5-1: Product: syz [ 700.119782][ T10] usb 5-1: Manufacturer: syz [ 700.141103][ T10] usb 5-1: SerialNumber: syz [ 700.160817][ T10] usb 5-1: config 0 descriptor?? [ 700.845672][ T10] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 700.955385][T11084] usb usb1: usbfs: process 11084 (syz.4.1547) did not claim interface 0 before use [ 700.991001][ T10] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110 [ 703.307062][T11100] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 703.428017][ T5922] usb 5-1: USB disconnect, device number 38 [ 703.528473][T11107] o2cb: This node has not been configured. [ 703.534465][T11107] o2cb: Cluster check failed. Fix errors before retrying. [ 703.541942][T11107] (syz.1.1562,11107,1):user_dlm_register:674 ERROR: status = -22 [ 703.549826][T11107] (syz.1.1562,11107,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 703.847936][ T7872] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 704.162236][ T7872] usb 2-1: Using ep0 maxpacket: 32 [ 704.251303][ T7872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.416585][ T7872] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 704.561254][ T7872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.735976][ T7902] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 704.799744][ T7872] usb 2-1: config 0 descriptor?? [ 706.015996][ T7902] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.252606][ T7902] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 706.397887][ T7902] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 706.645667][ T7872] usbhid 2-1:0.0: can't add hid device: -71 [ 706.652859][ T7872] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 706.662150][ T7902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.678548][ T7902] usb 4-1: config 0 descriptor?? [ 706.710189][ T7872] usb 2-1: USB disconnect, device number 34 [ 706.719335][ T7902] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 707.453911][ T5932] usb 4-1: USB disconnect, device number 44 [ 708.298468][T11126] No control pipe specified [ 710.455776][ T7872] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 710.627370][T11137] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 711.164064][ T7872] usb 2-1: Using ep0 maxpacket: 16 [ 711.184983][ T7872] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 711.212617][ T7872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.236481][ T7872] usb 2-1: Product: syz [ 711.245563][ T7872] usb 2-1: Manufacturer: syz [ 711.253418][ T7872] usb 2-1: SerialNumber: syz [ 711.279684][ T7872] r8152-cfgselector 2-1: Unknown version 0x0000 [ 711.298011][ T7872] r8152-cfgselector 2-1: config 0 descriptor?? [ 712.170746][ T5922] r8152-cfgselector 2-1: USB disconnect, device number 35 [ 712.686335][ T5932] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 712.887822][ T5932] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.065527][T11171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1579'. [ 714.197948][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 714.211062][ T5932] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 714.220241][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.231769][ T5932] usb 1-1: config 0 descriptor?? [ 714.240147][ T5932] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 714.387842][T11179] o2cb: This node has not been configured. [ 714.393799][T11179] o2cb: Cluster check failed. Fix errors before retrying. [ 714.401206][T11179] (syz.3.1581,11179,0):user_dlm_register:674 ERROR: status = -22 [ 714.409106][T11179] (syz.3.1581,11179,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 715.131869][ T5922] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 715.985822][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 715.995493][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.017676][ T5922] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 716.118011][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.216029][ T5922] usb 4-1: config 0 descriptor?? [ 717.621269][ T10] usb 1-1: USB disconnect, device number 35 [ 717.977450][ T5922] usbhid 4-1:0.0: can't add hid device: -71 [ 717.983522][ T5922] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 718.090768][ T5922] usb 4-1: USB disconnect, device number 45 [ 719.065516][T11203] input: syz1 as /devices/virtual/input/input15 [ 721.482870][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1592'. [ 725.011708][ T5922] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 726.119637][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.130402][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 726.143653][ T5922] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 726.153797][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.573431][ T5922] usb 1-1: config 0 descriptor?? [ 726.587968][ T5922] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 726.888562][T11258] FAULT_INJECTION: forcing a failure. [ 726.888562][T11258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.902035][T11258] CPU: 0 UID: 0 PID: 11258 Comm: syz.3.1604 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 726.902066][T11258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 726.902079][T11258] Call Trace: [ 726.902088][T11258] [ 726.902099][T11258] dump_stack_lvl+0x189/0x250 [ 726.902143][T11258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 726.902171][T11258] ? __pfx__printk+0x10/0x10 [ 726.902215][T11258] should_fail_ex+0x414/0x560 [ 726.902256][T11258] strncpy_from_user+0x36/0x290 [ 726.902305][T11258] getname_flags+0xf3/0x540 [ 726.902335][T11258] __x64_sys_mknod+0x79/0xa0 [ 726.902363][T11258] do_syscall_64+0xf6/0x210 [ 726.902396][T11258] ? clear_bhb_loop+0x45/0xa0 [ 726.902422][T11258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.902441][T11258] RIP: 0033:0x7f8e9c78e969 [ 726.902460][T11258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.902479][T11258] RSP: 002b:00007f8e9d5e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 726.902502][T11258] RAX: ffffffffffffffda RBX: 00007f8e9c9b5fa0 RCX: 00007f8e9c78e969 [ 726.902517][T11258] RDX: 0000000000000706 RSI: 00000000ffffc000 RDI: 00002000000002c0 [ 726.902537][T11258] RBP: 00007f8e9d5e8090 R08: 0000000000000000 R09: 0000000000000000 [ 726.902550][T11258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.902562][T11258] R13: 0000000000000000 R14: 00007f8e9c9b5fa0 R15: 00007fffab4adc88 [ 726.902594][T11258] [ 727.206700][T11264] FAULT_INJECTION: forcing a failure. [ 727.206700][T11264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.220517][T11264] CPU: 0 UID: 0 PID: 11264 Comm: syz.2.1606 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 727.220549][T11264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 727.220563][T11264] Call Trace: [ 727.220585][T11264] [ 727.220595][T11264] dump_stack_lvl+0x189/0x250 [ 727.220637][T11264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 727.220666][T11264] ? __pfx__printk+0x10/0x10 [ 727.220712][T11264] should_fail_ex+0x414/0x560 [ 727.220752][T11264] _copy_to_user+0x31/0xb0 [ 727.220784][T11264] simple_read_from_buffer+0xe1/0x170 [ 727.220825][T11264] proc_fail_nth_read+0x1df/0x250 [ 727.220851][T11264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 727.220875][T11264] ? rw_verify_area+0x258/0x650 [ 727.220901][T11264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 727.220922][T11264] vfs_read+0x1fd/0x980 [ 727.220954][T11264] ? __pfx___mutex_lock+0x10/0x10 [ 727.220988][T11264] ? __pfx_vfs_read+0x10/0x10 [ 727.221016][T11264] ? __fget_files+0x2a/0x420 [ 727.221052][T11264] ? __fget_files+0x3a0/0x420 [ 727.221081][T11264] ? __fget_files+0x2a/0x420 [ 727.221121][T11264] ksys_read+0x145/0x250 [ 727.221151][T11264] ? __pfx_ksys_read+0x10/0x10 [ 727.221182][T11264] ? do_syscall_64+0xba/0x210 [ 727.221212][T11264] do_syscall_64+0xf6/0x210 [ 727.221238][T11264] ? clear_bhb_loop+0x45/0xa0 [ 727.221264][T11264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.221283][T11264] RIP: 0033:0x7f818e18d37c [ 727.221303][T11264] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 727.221320][T11264] RSP: 002b:00007f818efd4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 727.221343][T11264] RAX: ffffffffffffffda RBX: 00007f818e3b6080 RCX: 00007f818e18d37c [ 727.221357][T11264] RDX: 000000000000000f RSI: 00007f818efd40a0 RDI: 0000000000000003 [ 727.221370][T11264] RBP: 00007f818efd4090 R08: 0000000000000000 R09: 0000000000000000 [ 727.221383][T11264] R10: 0000200000003000 R11: 0000000000000246 R12: 0000000000000001 [ 727.221396][T11264] R13: 0000000000000001 R14: 00007f818e3b6080 R15: 00007ffca2d48fa8 [ 727.221429][T11264] [ 728.332554][T11266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1605'. [ 729.354603][T11283] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 729.476238][ T5922] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 729.483978][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 729.970542][ T5922] usb 2-1: device descriptor read/64, error -71 [ 730.023832][ T10] usb 3-1: device descriptor read/64, error -71 [ 730.285807][ T5922] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 730.299140][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 730.396040][ T5932] usb 1-1: USB disconnect, device number 36 [ 734.729637][T11331] netlink: 1980 bytes leftover after parsing attributes in process `syz.4.1624'. [ 734.742132][T11331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1624'. [ 735.775633][ T7902] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 735.945617][ T7902] usb 2-1: device descriptor read/64, error -71 [ 736.040298][T11345] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1630'. [ 736.335714][ T7902] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 737.716534][ T7902] usb 2-1: device descriptor read/64, error -71 [ 738.873348][ T7902] usb usb2-port1: attempt power cycle [ 741.341077][T11384] FAULT_INJECTION: forcing a failure. [ 741.341077][T11384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.376401][T11384] CPU: 1 UID: 0 PID: 11384 Comm: syz.4.1642 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 741.376435][T11384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 741.376448][T11384] Call Trace: [ 741.376458][T11384] [ 741.376468][T11384] dump_stack_lvl+0x189/0x250 [ 741.376514][T11384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 741.376540][T11384] ? __pfx__printk+0x10/0x10 [ 741.376578][T11384] should_fail_ex+0x414/0x560 [ 741.376617][T11384] strncpy_from_user+0x36/0x290 [ 741.376652][T11384] getname_flags+0xf3/0x540 [ 741.376679][T11384] user_path_at+0x24/0x60 [ 741.376702][T11384] do_utimes+0x131/0x2a0 [ 741.376750][T11384] ? __pfx_do_utimes+0x10/0x10 [ 741.376769][T11384] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 741.376807][T11384] __x64_sys_utimes+0x142/0x220 [ 741.376831][T11384] ? __pfx___x64_sys_utimes+0x10/0x10 [ 741.376854][T11384] ? rcu_is_watching+0x15/0xb0 [ 741.376895][T11384] ? do_syscall_64+0xba/0x210 [ 741.376924][T11384] do_syscall_64+0xf6/0x210 [ 741.376948][T11384] ? clear_bhb_loop+0x45/0xa0 [ 741.376974][T11384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.376994][T11384] RIP: 0033:0x7f1d5818e969 [ 741.377013][T11384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.377031][T11384] RSP: 002b:00007f1d58f43038 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 741.377054][T11384] RAX: ffffffffffffffda RBX: 00007f1d583b5fa0 RCX: 00007f1d5818e969 [ 741.377068][T11384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 741.377080][T11384] RBP: 00007f1d58f43090 R08: 0000000000000000 R09: 0000000000000000 [ 741.377092][T11384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.377104][T11384] R13: 0000000000000000 R14: 00007f1d583b5fa0 R15: 00007ffe48c85e78 [ 741.377134][T11384] [ 741.571959][ C1] vkms_vblank_simulate: vblank timer overrun [ 742.820535][T11396] input: syz1 as /devices/virtual/input/input16 [ 743.125658][ T7902] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 743.419236][ T7902] usb 5-1: device descriptor read/64, error -71 [ 744.157635][ T7902] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 745.607271][T11415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1651'. [ 747.721143][T11433] o2cb: This node has not been configured. [ 747.727355][T11433] o2cb: Cluster check failed. Fix errors before retrying. [ 747.734991][T11433] (syz.1.1656,11433,1):user_dlm_register:674 ERROR: status = -22 [ 747.743025][T11433] (syz.1.1656,11433,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 748.495750][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.502230][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.775991][ T7902] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 748.985825][ T7902] usb 2-1: Using ep0 maxpacket: 32 [ 749.089410][ T7902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.205869][ T7902] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 749.321271][ T7902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.744613][ T7902] usb 2-1: config 0 descriptor?? [ 749.966283][ T7902] usb 2-1: can't set config #0, error -71 [ 750.019890][ T7902] usb 2-1: USB disconnect, device number 41 [ 753.007542][T11468] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 753.125716][ T5922] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 753.575902][ T5922] usb 3-1: device descriptor read/64, error -71 [ 755.842907][T11508] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 755.899982][T11512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1682'. [ 755.914212][T11510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 756.021642][T11518] input: syz0 as /devices/virtual/input/input17 [ 756.816553][ T5874] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 756.997891][ T5874] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 757.006311][ T5874] usb 3-1: config 0 has an invalid interface number: 7 but max is 2 [ 757.014351][ T5874] usb 3-1: config 0 has no interface number 0 [ 757.020665][ T5874] usb 3-1: config 0 has no interface number 1 [ 757.026966][ T5874] usb 3-1: too many endpoints for config 0 interface 7 altsetting 255: 255, using maximum allowed: 30 [ 757.174682][ T5874] usb 3-1: config 0 interface 7 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 757.225388][ T5874] usb 3-1: config 0 interface 7 has no altsetting 0 [ 757.828027][ T5874] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 757.852799][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.868472][ T7906] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 757.881604][ T5874] usb 3-1: config 0 descriptor?? [ 758.015612][ T7906] usb 4-1: device descriptor read/64, error -71 [ 758.160075][ T5874] usb 3-1: Could not set interface, error -71 [ 758.192799][ T5874] usb 3-1: selecting invalid altsetting 0 [ 758.245787][ T5874] usb 3-1: Could not set interface, error -22 [ 758.276109][ T7906] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 758.429232][ T5874] usb 3-1: USB disconnect, device number 32 [ 758.457727][ T7906] usb 4-1: device descriptor read/64, error -71 [ 758.508946][T11544] Cannot find del_set index 4 as target [ 758.577935][ T7906] usb usb4-port1: attempt power cycle [ 758.955621][ T7906] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 758.988269][ T7906] usb 4-1: device descriptor read/8, error -71 [ 759.275709][ T7906] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 759.332673][ T7906] usb 4-1: device descriptor read/8, error -71 [ 759.410965][T11552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.512058][ T7906] usb usb4-port1: unable to enumerate USB device [ 759.785563][ T5874] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 760.045733][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 760.077590][ T5874] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 760.087043][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.095080][ T5874] usb 3-1: Product: syz [ 760.099486][ T5874] usb 3-1: Manufacturer: syz [ 760.105120][ T5874] usb 3-1: SerialNumber: syz [ 760.129280][ T5874] r8152-cfgselector 3-1: Unknown version 0x0000 [ 760.139748][ T5874] r8152-cfgselector 3-1: config 0 descriptor?? [ 760.979932][ T10] r8152-cfgselector 3-1: USB disconnect, device number 33 [ 763.052759][ T7872] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 763.074908][ T7872] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 763.115715][ T5130] Bluetooth: hci2: command 0x0406 tx timeout [ 763.183068][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1704'. [ 765.463302][ T7872] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 765.469942][ T5130] Bluetooth: hci3: command 0x0406 tx timeout [ 765.518958][ T7872] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 765.748828][ T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 765.898954][ T10] usb 4-1: device descriptor read/64, error -71 [ 765.935602][ T5922] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 766.345580][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 766.395926][ T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 766.598992][ T5922] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 766.608522][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.622321][ T5922] usb 2-1: Product: syz [ 766.626807][ T5922] usb 2-1: Manufacturer: syz [ 766.631611][ T5922] usb 2-1: SerialNumber: syz [ 766.659941][ T5922] r8152-cfgselector 2-1: Unknown version 0x0000 [ 766.689224][ T5922] r8152-cfgselector 2-1: config 0 descriptor?? [ 766.851118][ T10] usb 4-1: device descriptor read/64, error -71 [ 767.540040][ T10] usb usb4-port1: attempt power cycle [ 767.795561][ T5130] Bluetooth: hci4: command 0x0406 tx timeout [ 767.801725][ T7872] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 767.822675][ T7872] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 768.731193][ T5922] r8152-cfgselector 2-1: USB disconnect, device number 42 [ 770.545579][T11633] FAULT_INJECTION: forcing a failure. [ 770.545579][T11633] name failslab, interval 1, probability 0, space 0, times 0 [ 770.553824][T11632] FAULT_INJECTION: forcing a failure. [ 770.553824][T11632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.576839][T11632] CPU: 0 UID: 0 PID: 11632 Comm: syz.4.1722 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 770.576881][T11632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 770.576910][T11632] Call Trace: [ 770.576918][T11632] [ 770.576941][T11632] dump_stack_lvl+0x189/0x250 [ 770.576973][T11632] ? __lock_acquire+0xaac/0xd20 [ 770.577003][T11632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 770.577028][T11632] ? __pfx__printk+0x10/0x10 [ 770.577057][T11632] ? __might_fault+0xb0/0x130 [ 770.577100][T11632] should_fail_ex+0x414/0x560 [ 770.577136][T11632] _copy_from_iter+0x1db/0x15a0 [ 770.577170][T11632] ? policy_nodemask+0x27c/0x720 [ 770.577208][T11632] ? __pfx__copy_from_iter+0x10/0x10 [ 770.577244][T11632] ? set_page_refcounted+0xa0/0x1e0 [ 770.577273][T11632] ? page_copy_sane+0x4e/0x280 [ 770.577301][T11632] copy_page_from_iter+0x7b/0x100 [ 770.577327][T11632] tun_get_user+0x1b13/0x3c20 [ 770.577383][T11632] ? tun_get_user+0x687/0x3c20 [ 770.577423][T11632] ? __pfx_tun_get_user+0x10/0x10 [ 770.577457][T11632] ? __lock_acquire+0xaac/0xd20 [ 770.577485][T11632] ? ref_tracker_alloc+0x318/0x460 [ 770.577507][T11632] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 770.577531][T11632] ? tun_get+0x1c/0x2f0 [ 770.577561][T11632] ? tun_get+0x1c/0x2f0 [ 770.577585][T11632] ? tun_get+0x1c/0x2f0 [ 770.577614][T11632] tun_chr_write_iter+0x113/0x200 [ 770.577641][T11632] vfs_write+0x548/0xa90 [ 770.577672][T11632] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 770.577698][T11632] ? __pfx_vfs_write+0x10/0x10 [ 770.577732][T11632] ? __fget_files+0x2a/0x420 [ 770.577769][T11632] ksys_write+0x145/0x250 [ 770.577792][T11632] ? rcu_is_watching+0x15/0xb0 [ 770.577834][T11632] ? __pfx_ksys_write+0x10/0x10 [ 770.577880][T11632] ? do_syscall_64+0xba/0x210 [ 770.577910][T11632] do_syscall_64+0xf6/0x210 [ 770.577949][T11632] ? clear_bhb_loop+0x45/0xa0 [ 770.577975][T11632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.577996][T11632] RIP: 0033:0x7f1d5818d41f [ 770.578016][T11632] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 770.578034][T11632] RSP: 002b:00007f1d58f43000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 770.578057][T11632] RAX: ffffffffffffffda RBX: 00007f1d583b5fa0 RCX: 00007f1d5818d41f [ 770.578073][T11632] RDX: 000000000000009e RSI: 0000200000000440 RDI: 00000000000000c8 [ 770.578086][T11632] RBP: 00007f1d58f43090 R08: 0000000000000000 R09: 0000000000000000 [ 770.578099][T11632] R10: 000000000000009e R11: 0000000000000293 R12: 0000000000000001 [ 770.578111][T11632] R13: 0000000000000000 R14: 00007f1d583b5fa0 R15: 00007ffe48c85e78 [ 770.578143][T11632] [ 770.578513][T11633] CPU: 0 UID: 0 PID: 11633 Comm: syz.1.1721 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 770.578549][T11633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 770.578563][T11633] Call Trace: [ 770.578571][T11633] [ 770.578580][T11633] dump_stack_lvl+0x189/0x250 [ 770.578617][T11633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 770.578645][T11633] ? __pfx__printk+0x10/0x10 [ 770.578682][T11633] ? __pfx___might_resched+0x10/0x10 [ 770.578719][T11633] should_fail_ex+0x414/0x560 [ 770.578758][T11633] should_failslab+0xa8/0x100 [ 770.578793][T11633] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 770.578826][T11633] ? __alloc_skb+0x112/0x2d0 [ 770.578858][T11633] __alloc_skb+0x112/0x2d0 [ 770.578885][T11633] netlink_sendmsg+0x5c6/0xb30 [ 770.578909][T11633] ? is_bpf_text_address+0x26/0x2b0 [ 770.578953][T11633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 770.578981][T11633] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 770.579004][T11633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 770.579026][T11633] __sock_sendmsg+0x219/0x270 [ 770.579074][T11633] ____sys_sendmsg+0x505/0x830 [ 770.579104][T11633] ? __pfx_____sys_sendmsg+0x10/0x10 [ 770.579139][T11633] ? import_iovec+0x74/0xa0 [ 770.579168][T11633] ___sys_sendmsg+0x21f/0x2a0 [ 770.579205][T11633] ? __pfx____sys_sendmsg+0x10/0x10 [ 770.579268][T11633] ? __fget_files+0x2a/0x420 [ 770.579297][T11633] ? __fget_files+0x3a0/0x420 [ 770.579336][T11633] __x64_sys_sendmsg+0x19b/0x260 [ 770.579365][T11633] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 770.579407][T11633] ? do_syscall_64+0xba/0x210 [ 770.579436][T11633] do_syscall_64+0xf6/0x210 [ 770.579460][T11633] ? clear_bhb_loop+0x45/0xa0 [ 770.579485][T11633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.579503][T11633] RIP: 0033:0x7f484678e969 [ 770.579522][T11633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.579537][T11633] RSP: 002b:00007f4847570038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 770.579558][T11633] RAX: ffffffffffffffda RBX: 00007f48469b5fa0 RCX: 00007f484678e969 [ 770.579577][T11633] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 770.579590][T11633] RBP: 00007f4847570090 R08: 0000000000000000 R09: 0000000000000000 [ 770.579602][T11633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.579614][T11633] R13: 0000000000000000 R14: 00007f48469b5fa0 R15: 00007ffe694e02e8 [ 770.579645][T11633] [ 772.001291][T11643] o2cb: This node has not been configured. [ 772.008019][T11643] o2cb: Cluster check failed. Fix errors before retrying. [ 772.015325][T11643] (syz.4.1724,11643,0):user_dlm_register:674 ERROR: status = -22 [ 772.018320][T11644] o2cb: This node has not been configured. [ 772.029381][T11644] o2cb: Cluster check failed. Fix errors before retrying. [ 772.037391][T11644] (syz.3.1725,11644,1):user_dlm_register:674 ERROR: status = -22 [ 772.045528][T11644] (syz.3.1725,11644,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 772.055992][T11643] (syz.4.1724,11643,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 772.325543][ T5922] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 773.459964][ T7902] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 774.205808][ T7902] usb 4-1: Using ep0 maxpacket: 32 [ 775.312803][ T7902] usb 4-1: device descriptor read/all, error -71 [ 776.089126][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 776.186576][ T7872] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 776.307834][ T10] usb 3-1: device descriptor read/64, error -71 [ 776.495742][ T7872] usb 1-1: Using ep0 maxpacket: 16 [ 776.560866][ T7872] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 776.578245][ T7872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.590552][ T7872] usb 1-1: Product: syz [ 776.594815][ T7872] usb 1-1: Manufacturer: syz [ 776.606275][ T7872] usb 1-1: SerialNumber: syz [ 776.615608][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 776.619296][ T7872] r8152-cfgselector 1-1: Unknown version 0x0000 [ 776.630974][ T7872] r8152-cfgselector 1-1: config 0 descriptor?? [ 776.765789][ T10] usb 3-1: device descriptor read/64, error -71 [ 776.878852][ T10] usb usb3-port1: attempt power cycle [ 777.144484][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1734'. [ 777.715736][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 777.757067][ T10] usb 3-1: device descriptor read/8, error -71 [ 777.932255][ T5890] r8152-cfgselector 1-1: USB disconnect, device number 37 [ 778.066323][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 778.107506][ T10] usb 3-1: device descriptor read/8, error -71 [ 778.537335][ T10] usb usb3-port1: unable to enumerate USB device [ 780.642374][T11697] o2cb: This node has not been configured. [ 780.648400][T11697] o2cb: Cluster check failed. Fix errors before retrying. [ 780.655826][T11697] (syz.1.1740,11697,1):user_dlm_register:674 ERROR: status = -22 [ 780.663717][T11697] (syz.1.1740,11697,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 781.588063][ T7902] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 781.879908][ T7902] usb 2-1: Using ep0 maxpacket: 32 [ 782.104993][ T7902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.238994][ T7902] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 782.369302][ T7902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.649210][ T7902] usb 2-1: config 0 descriptor?? [ 783.046752][T11701] virtio-fs: tag not found [ 783.078327][T11701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1741'. [ 783.284300][T11707] Cannot find del_set index 4 as target [ 783.295242][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1741'. [ 783.874992][ T7902] usbhid 2-1:0.0: can't add hid device: -71 [ 783.891269][ T7902] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 783.912351][ T7902] usb 2-1: USB disconnect, device number 43 [ 784.557633][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1746'. [ 785.496765][T11727] FAULT_INJECTION: forcing a failure. [ 785.496765][T11727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.693102][T11727] CPU: 1 UID: 0 PID: 11727 Comm: syz.3.1749 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 785.693137][T11727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 785.693165][T11727] Call Trace: [ 785.693174][T11727] [ 785.693185][T11727] dump_stack_lvl+0x189/0x250 [ 785.693232][T11727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 785.693261][T11727] ? __pfx__printk+0x10/0x10 [ 785.693306][T11727] should_fail_ex+0x414/0x560 [ 785.693347][T11727] _copy_to_user+0x31/0xb0 [ 785.693378][T11727] simple_read_from_buffer+0xe1/0x170 [ 785.693415][T11727] proc_fail_nth_read+0x1df/0x250 [ 785.693442][T11727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 785.693465][T11727] ? rw_verify_area+0x258/0x650 [ 785.693492][T11727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 785.693514][T11727] vfs_read+0x1fd/0x980 [ 785.693553][T11727] ? __pfx___mutex_lock+0x10/0x10 [ 785.693584][T11727] ? __pfx_vfs_read+0x10/0x10 [ 785.693612][T11727] ? __fget_files+0x2a/0x420 [ 785.693648][T11727] ? __fget_files+0x3a0/0x420 [ 785.693677][T11727] ? __fget_files+0x2a/0x420 [ 785.693717][T11727] ksys_read+0x145/0x250 [ 785.693742][T11727] ? rcu_is_watching+0x15/0xb0 [ 785.693774][T11727] ? __pfx_ksys_read+0x10/0x10 [ 785.693805][T11727] ? do_syscall_64+0xba/0x210 [ 785.693835][T11727] do_syscall_64+0xf6/0x210 [ 785.693860][T11727] ? clear_bhb_loop+0x45/0xa0 [ 785.693886][T11727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.693906][T11727] RIP: 0033:0x7f8e9c78d37c [ 785.693925][T11727] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 785.693943][T11727] RSP: 002b:00007f8e9d5c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 785.693966][T11727] RAX: ffffffffffffffda RBX: 00007f8e9c9b6080 RCX: 00007f8e9c78d37c [ 785.693981][T11727] RDX: 000000000000000f RSI: 00007f8e9d5c70a0 RDI: 0000000000000004 [ 785.693994][T11727] RBP: 00007f8e9d5c7090 R08: 0000000000000000 R09: 0000000000000000 [ 785.694007][T11727] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 785.694020][T11727] R13: 0000000000000001 R14: 00007f8e9c9b6080 R15: 00007fffab4adc88 [ 785.694053][T11727] [ 785.994194][ T5932] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 786.215698][ T7902] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 786.235857][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 786.376015][ T7902] usb 1-1: device descriptor read/64, error -71 [ 786.425353][ T5932] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 786.487346][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.552531][ T5932] usb 3-1: Product: syz [ 786.562487][ T5932] usb 3-1: Manufacturer: syz [ 786.755571][ T7902] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 786.793117][ T5932] usb 3-1: SerialNumber: syz [ 787.066551][ T5932] r8152-cfgselector 3-1: Unknown version 0x0000 [ 787.074107][ T5932] r8152-cfgselector 3-1: config 0 descriptor?? [ 787.176278][ T7902] usb 1-1: device descriptor read/64, error -71 [ 787.998542][ T7902] usb usb1-port1: attempt power cycle [ 788.676972][T11753] FAULT_INJECTION: forcing a failure. [ 788.676972][T11753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.700998][T11753] CPU: 0 UID: 0 PID: 11753 Comm: syz.4.1758 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 788.701034][T11753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 788.701048][T11753] Call Trace: [ 788.701057][T11753] [ 788.701067][T11753] dump_stack_lvl+0x189/0x250 [ 788.701110][T11753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 788.701139][T11753] ? __pfx__printk+0x10/0x10 [ 788.701184][T11753] should_fail_ex+0x414/0x560 [ 788.701223][T11753] _copy_to_user+0x31/0xb0 [ 788.701255][T11753] simple_read_from_buffer+0xe1/0x170 [ 788.701292][T11753] proc_fail_nth_read+0x1df/0x250 [ 788.701338][T11753] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 788.701361][T11753] ? rw_verify_area+0x258/0x650 [ 788.701386][T11753] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 788.701408][T11753] vfs_read+0x1fd/0x980 [ 788.701448][T11753] ? tomoyo_socket_bind_permission+0x1af/0x290 [ 788.701478][T11753] ? __pfx_unix_bind+0x10/0x10 [ 788.701517][T11753] ? __pfx_vfs_read+0x10/0x10 [ 788.701543][T11753] ? bpf_lsm_socket_bind+0x9/0x20 [ 788.701569][T11753] ? __sys_bind+0x2e9/0x3e0 [ 788.701592][T11753] ? __pfx___sys_bind+0x10/0x10 [ 788.701618][T11753] ksys_read+0x145/0x250 [ 788.701646][T11753] ? __pfx_ksys_read+0x10/0x10 [ 788.701676][T11753] ? do_syscall_64+0xba/0x210 [ 788.701704][T11753] do_syscall_64+0xf6/0x210 [ 788.701729][T11753] ? clear_bhb_loop+0x45/0xa0 [ 788.701754][T11753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.701773][T11753] RIP: 0033:0x7f1d5818d37c [ 788.701797][T11753] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 788.701820][T11753] RSP: 002b:00007f1d58f43030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 788.701842][T11753] RAX: ffffffffffffffda RBX: 00007f1d583b5fa0 RCX: 00007f1d5818d37c [ 788.701857][T11753] RDX: 000000000000000f RSI: 00007f1d58f430a0 RDI: 0000000000000005 [ 788.701870][T11753] RBP: 00007f1d58f43090 R08: 0000000000000000 R09: 0000000000000000 [ 788.701882][T11753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.701893][T11753] R13: 0000000000000000 R14: 00007f1d583b5fa0 R15: 00007ffe48c85e78 [ 788.701924][T11753] [ 790.175087][ T10] r8152-cfgselector 3-1: USB disconnect, device number 38 [ 794.265956][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 794.616147][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 794.643589][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 794.658548][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.666857][ T10] usb 3-1: Product: syz [ 794.671058][ T10] usb 3-1: Manufacturer: syz [ 794.676389][ T10] usb 3-1: SerialNumber: syz [ 794.718058][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 794.836109][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 795.528988][T11817] Cannot find del_set index 4 as target [ 796.674012][T11826] input: syz1 as /devices/virtual/input/input18 [ 797.482273][ T10] r8152-cfgselector 3-1: USB disconnect, device number 39 [ 798.538419][T11841] FAULT_INJECTION: forcing a failure. [ 798.538419][T11841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.540605][T11841] [ 798.540620][T11841] ====================================================== [ 798.540634][T11841] WARNING: possible circular locking dependency detected [ 798.540650][T11841] 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 Not tainted [ 798.540666][T11841] ------------------------------------------------------ [ 798.540674][T11841] syz.2.1782/11841 is trying to acquire lock: [ 798.540685][T11841] ffffffff8df2fa20 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 798.540760][T11841] [ 798.540760][T11841] but task is already holding lock: [ 798.540767][T11841] ffff8880b88399d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 798.540822][T11841] [ 798.540822][T11841] which lock already depends on the new lock. [ 798.540822][T11841] [ 798.540829][T11841] [ 798.540829][T11841] the existing dependency chain (in reverse order) is: [ 798.540837][T11841] [ 798.540837][T11841] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 798.540876][T11841] lock_acquire+0x120/0x360 [ 798.540901][T11841] _raw_spin_lock_nested+0x32/0x50 [ 798.540922][T11841] raw_spin_rq_lock_nested+0x2a/0x140 [ 798.540948][T11841] task_rq_lock+0xbc/0x470 [ 798.540972][T11841] cgroup_move_task+0x9a/0x590 [ 798.540996][T11841] css_set_move_task+0x658/0x9e0 [ 798.541034][T11841] cgroup_post_fork+0x1ef/0x790 [ 798.541061][T11841] copy_process+0x37e6/0x3b80 [ 798.541078][T11841] kernel_clone+0x224/0x7f0 [ 798.541095][T11841] user_mode_thread+0xdd/0x140 [ 798.541112][T11841] rest_init+0x23/0x300 [ 798.541137][T11841] start_kernel+0x470/0x4f0 [ 798.541180][T11841] x86_64_start_reservations+0x2a/0x30 [ 798.541205][T11841] x86_64_start_kernel+0x66/0x70 [ 798.541223][T11841] common_startup_64+0x13e/0x147 [ 798.541257][T11841] [ 798.541257][T11841] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 798.541286][T11841] lock_acquire+0x120/0x360 [ 798.541309][T11841] _raw_spin_lock_irqsave+0xa7/0xf0 [ 798.541326][T11841] try_to_wake_up+0x6e/0x1290 [ 798.541345][T11841] __wake_up_common_lock+0x134/0x1f0 [ 798.541370][T11841] tty_port_default_wakeup+0xa2/0xf0 [ 798.541397][T11841] serial8250_tx_chars+0x72e/0x970 [ 798.541427][T11841] serial8250_handle_irq+0x633/0xbb0 [ 798.541445][T11841] serial8250_default_handle_irq+0xbf/0x1b0 [ 798.541471][T11841] serial8250_interrupt+0xa2/0x1d0 [ 798.541506][T11841] __handle_irq_event_percpu+0x289/0x980 [ 798.541530][T11841] handle_irq_event+0x8b/0x1e0 [ 798.541547][T11841] handle_edge_irq+0x24d/0xb60 [ 798.541578][T11841] __common_interrupt+0x140/0x250 [ 798.541607][T11841] common_interrupt+0xb6/0xe0 [ 798.541632][T11841] asm_common_interrupt+0x26/0x40 [ 798.541651][T11841] pv_native_safe_halt+0x13/0x20 [ 798.541670][T11841] default_idle+0x13/0x20 [ 798.541693][T11841] default_idle_call+0x74/0xb0 [ 798.541716][T11841] do_idle+0x1e8/0x510 [ 798.541749][T11841] cpu_startup_entry+0x44/0x60 [ 798.541776][T11841] rest_init+0x2de/0x300 [ 798.541800][T11841] start_kernel+0x470/0x4f0 [ 798.541824][T11841] x86_64_start_reservations+0x2a/0x30 [ 798.541844][T11841] x86_64_start_kernel+0x66/0x70 [ 798.541863][T11841] common_startup_64+0x13e/0x147 [ 798.541887][T11841] [ 798.541887][T11841] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 798.541917][T11841] lock_acquire+0x120/0x360 [ 798.541939][T11841] _raw_spin_lock_irqsave+0xa7/0xf0 [ 798.541969][T11841] __wake_up_common_lock+0x2f/0x1f0 [ 798.541989][T11841] tty_port_default_wakeup+0xa2/0xf0 [ 798.542008][T11841] serial8250_tx_chars+0x72e/0x970 [ 798.542025][T11841] serial8250_handle_irq+0x633/0xbb0 [ 798.542041][T11841] serial8250_default_handle_irq+0xbf/0x1b0 [ 798.542063][T11841] serial8250_interrupt+0xa2/0x1d0 [ 798.542087][T11841] __handle_irq_event_percpu+0x289/0x980 [ 798.542105][T11841] handle_irq_event+0x8b/0x1e0 [ 798.542122][T11841] handle_edge_irq+0x24d/0xb60 [ 798.542147][T11841] __common_interrupt+0x140/0x250 [ 798.542174][T11841] common_interrupt+0xb6/0xe0 [ 798.542199][T11841] asm_common_interrupt+0x26/0x40 [ 798.542215][T11841] pv_native_safe_halt+0x13/0x20 [ 798.542233][T11841] default_idle+0x13/0x20 [ 798.542255][T11841] default_idle_call+0x74/0xb0 [ 798.542277][T11841] do_idle+0x1e8/0x510 [ 798.542301][T11841] cpu_startup_entry+0x44/0x60 [ 798.542327][T11841] rest_init+0x2de/0x300 [ 798.542350][T11841] start_kernel+0x470/0x4f0 [ 798.542374][T11841] x86_64_start_reservations+0x2a/0x30 [ 798.542393][T11841] x86_64_start_kernel+0x66/0x70 [ 798.542412][T11841] common_startup_64+0x13e/0x147 [ 798.542435][T11841] [ 798.542435][T11841] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 798.542473][T11841] lock_acquire+0x120/0x360 [ 798.542538][T11841] _raw_spin_lock_irqsave+0xa7/0xf0 [ 798.542554][T11841] serial8250_console_write+0x17e/0x1ba0 [ 798.542573][T11841] console_flush_all+0x728/0xc40 [ 798.542589][T11841] console_unlock+0xc4/0x270 [ 798.542615][T11841] vprintk_emit+0x5b7/0x7a0 [ 798.542640][T11841] _printk+0xcf/0x120 [ 798.542667][T11841] register_console+0xa8b/0xf90 [ 798.542684][T11841] univ8250_console_init+0x52/0x90 [ 798.542713][T11841] console_init+0x1a1/0x670 [ 798.542746][T11841] start_kernel+0x2cb/0x4f0 [ 798.542770][T11841] x86_64_start_reservations+0x2a/0x30 [ 798.542789][T11841] x86_64_start_kernel+0x66/0x70 [ 798.542808][T11841] common_startup_64+0x13e/0x147 [ 798.542831][T11841] [ 798.542831][T11841] -> #0 (console_owner){-.-.}-{0:0}: [ 798.542856][T11841] validate_chain+0xb9b/0x2140 [ 798.542885][T11841] __lock_acquire+0xaac/0xd20 [ 798.542907][T11841] lock_acquire+0x120/0x360 [ 798.542945][T11841] console_flush_all+0x6d2/0xc40 [ 798.542962][T11841] console_unlock+0xc4/0x270 [ 798.542987][T11841] vprintk_emit+0x5b7/0x7a0 [ 798.543014][T11841] _printk+0xcf/0x120 [ 798.543043][T11841] should_fail_ex+0x3f5/0x560 [ 798.543072][T11841] strncpy_from_user+0x36/0x290 [ 798.543099][T11841] strncpy_from_user_nofault+0x72/0x140 [ 798.543122][T11841] bpf_probe_read_compat_str+0xe2/0x180 [ 798.543151][T11841] bpf_prog_c1796171ffc7efef+0x3e/0x40 [ 798.543166][T11841] bpf_trace_run4+0x28b/0x4a0 [ 798.543186][T11841] __bpf_trace_sched_switch+0x17a/0x1e0 [ 798.543206][T11841] __traceiter_sched_switch+0x9a/0xd0 [ 798.543231][T11841] __schedule+0x22b0/0x4c70 [ 798.543248][T11841] preempt_schedule_irq+0xb5/0x150 [ 798.543267][T11841] irqentry_exit+0x6f/0x90 [ 798.543286][T11841] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 798.543305][T11841] lock_release+0x44/0x3e0 [ 798.543326][T11841] __mutex_unlock_slowpath+0xc7/0x700 [ 798.543348][T11841] ksys_write+0x1cb/0x250 [ 798.543373][T11841] do_syscall_64+0xf6/0x210 [ 798.543394][T11841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.543412][T11841] [ 798.543412][T11841] other info that might help us debug this: [ 798.543412][T11841] [ 798.543419][T11841] Chain exists of: [ 798.543419][T11841] console_owner --> &p->pi_lock --> &rq->__lock [ 798.543419][T11841] [ 798.543454][T11841] Possible unsafe locking scenario: [ 798.543454][T11841] [ 798.543464][T11841] CPU0 CPU1 [ 798.543478][T11841] ---- ---- [ 798.543488][T11841] lock(&rq->__lock); [ 798.543506][T11841] lock(&p->pi_lock); [ 798.543520][T11841] lock(&rq->__lock); [ 798.543533][T11841] lock(console_owner); [ 798.543546][T11841] [ 798.543546][T11841] *** DEADLOCK *** [ 798.543546][T11841] [ 798.543551][T11841] 5 locks held by syz.2.1782/11841: [ 798.543572][T11841] #0: ffff88802faad7b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 798.543619][T11841] #1: ffff8880b88399d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 798.543672][T11841] #2: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 798.543716][T11841] #3: ffffffff8df2fa80 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 798.543769][T11841] #4: ffffffff8de17350 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 798.543813][T11841] [ 798.543813][T11841] stack backtrace: [ 798.543825][T11841] CPU: 0 UID: 0 PID: 11841 Comm: syz.2.1782 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 798.543849][T11841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 798.543861][T11841] Call Trace: [ 798.543869][T11841] [ 798.543878][T11841] dump_stack_lvl+0x189/0x250 [ 798.543908][T11841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 798.543935][T11841] ? __pfx__printk+0x10/0x10 [ 798.543966][T11841] ? print_lock_name+0xde/0x100 [ 798.543996][T11841] print_circular_bug+0x2ee/0x310 [ 798.544029][T11841] check_noncircular+0x134/0x160 [ 798.544062][T11841] validate_chain+0xb9b/0x2140 [ 798.544101][T11841] __lock_acquire+0xaac/0xd20 [ 798.544132][T11841] ? console_flush_all+0x13a/0xc40 [ 798.544155][T11841] lock_acquire+0x120/0x360 [ 798.544178][T11841] ? console_flush_all+0x13a/0xc40 [ 798.544201][T11841] ? do_raw_spin_unlock+0x122/0x240 [ 798.544221][T11841] ? console_flush_all+0x13a/0xc40 [ 798.544241][T11841] console_flush_all+0x6d2/0xc40 [ 798.544259][T11841] ? console_flush_all+0x13a/0xc40 [ 798.544279][T11841] ? console_flush_all+0x13a/0xc40 [ 798.544301][T11841] ? __pfx_console_flush_all+0x10/0x10 [ 798.544326][T11841] ? is_printk_cpu_sync_owner+0x32/0x40 [ 798.544350][T11841] console_unlock+0xc4/0x270 [ 798.544380][T11841] ? __pfx_console_unlock+0x10/0x10 [ 798.544411][T11841] ? is_printk_cpu_sync_owner+0x32/0x40 [ 798.544435][T11841] vprintk_emit+0x5b7/0x7a0 [ 798.544465][T11841] ? __pfx_vprintk_emit+0x10/0x10 [ 798.544499][T11841] ? kernelmode_fixup_or_oops+0x7c/0xf0 [ 798.544540][T11841] ? __bad_area_nosemaphore+0x11a/0x780 [ 798.544577][T11841] _printk+0xcf/0x120 [ 798.544604][T11841] ? exc_page_fault+0x46/0x110 [ 798.544626][T11841] ? __pfx__printk+0x10/0x10 [ 798.544662][T11841] should_fail_ex+0x3f5/0x560 [ 798.544694][T11841] strncpy_from_user+0x36/0x290 [ 798.544725][T11841] strncpy_from_user_nofault+0x72/0x140 [ 798.544748][T11841] bpf_probe_read_compat_str+0xe2/0x180 [ 798.544776][T11841] bpf_prog_c1796171ffc7efef+0x3e/0x40 [ 798.544792][T11841] bpf_trace_run4+0x28b/0x4a0 [ 798.544811][T11841] ? bpf_trace_run4+0x322/0x4a0 [ 798.544829][T11841] ? bpf_trace_run4+0x19c/0x4a0 [ 798.544848][T11841] ? __pfx_bpf_trace_run4+0x10/0x10 [ 798.544870][T11841] ? __pfx_rcu_qs+0x10/0x10 [ 798.544896][T11841] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 798.544921][T11841] __bpf_trace_sched_switch+0x17a/0x1e0 [ 798.544944][T11841] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 798.544966][T11841] ? rcu_read_lock_sched_held+0x89/0x100 [ 798.545000][T11841] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 798.545029][T11841] ? plist_check_list+0x308/0x330 [ 798.545054][T11841] ? task_psi_group+0x50/0x1a0 [ 798.545084][T11841] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 798.545108][T11841] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 798.545130][T11841] __traceiter_sched_switch+0x9a/0xd0 [ 798.545155][T11841] __schedule+0x22b0/0x4c70 [ 798.545180][T11841] ? __lock_acquire+0x9c1/0xd20 [ 798.545206][T11841] ? preempt_schedule_irq+0xb5/0x150 [ 798.545229][T11841] ? __pfx___schedule+0x10/0x10 [ 798.545260][T11841] ? _parse_integer_limit+0x1ae/0x1f0 [ 798.545287][T11841] ? preempt_schedule_irq+0xaa/0x150 [ 798.545308][T11841] preempt_schedule_irq+0xb5/0x150 [ 798.545331][T11841] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 798.545356][T11841] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 798.545384][T11841] irqentry_exit+0x6f/0x90 [ 798.545407][T11841] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 798.545424][T11841] RIP: 0010:lock_release+0x44/0x3e0 [ 798.545444][T11841] Code: 8b 05 90 d2 d3 10 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 93 d2 d3 10 83 f8 08 0f 83 9a 02 00 00 89 c0 48 0f a3 05 bc 7b df 0d <73> 16 e8 c5 c8 08 00 84 c0 75 0d f6 05 73 79 c9 0d 01 0f 84 ad 02 [ 798.545457][T11841] RSP: 0018:ffffc9001ad27cb8 EFLAGS: 00000293 [ 798.545470][T11841] RAX: 0000000000000000 RBX: ffff88802faad6c3 RCX: dffffc0000000000 [ 798.545481][T11841] RDX: 0000000000000000 RSI: ffffffff822f84cb RDI: ffff88802faad7b8 [ 798.545500][T11841] RBP: ffffc9001ad27e30 R08: ffff888030555a2b R09: 1ffff110060aab45 [ 798.545511][T11841] R10: dffffc0000000000 R11: ffffed10060aab46 R12: dffffc0000000000 [ 798.545527][T11841] R13: ffffffff822f84cb R14: ffff88802faad7b8 R15: ffff88802faad750 [ 798.545539][T11841] ? ksys_write+0x1cb/0x250 [ 798.545562][T11841] ? ksys_write+0x1cb/0x250 [ 798.545583][T11841] ? vfs_write+0x8d8/0xa90 [ 798.545604][T11841] __mutex_unlock_slowpath+0xc7/0x700 [ 798.545621][T11841] ? __pfx_vfs_write+0x10/0x10 [ 798.545642][T11841] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 798.545661][T11841] ? __fget_files+0x3a0/0x420 [ 798.545684][T11841] ? __fget_files+0x2a/0x420 [ 798.545709][T11841] ksys_write+0x1cb/0x250 [ 798.545730][T11841] ? __pfx_ksys_write+0x10/0x10 [ 798.545754][T11841] do_syscall_64+0xf6/0x210 [ 798.545772][T11841] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 798.545787][T11841] ? clear_bhb_loop+0x45/0xa0 [ 798.545804][T11841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.545818][T11841] RIP: 0033:0x7f818e18d41f [ 798.545831][T11841] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 798.545844][T11841] RSP: 002b:00007f818efb3030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 798.545859][T11841] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007f818e18d41f [ 798.545869][T11841] RDX: 0000000000000001 RSI: 00007f818efb3090 RDI: 000000000000000a [ 798.545878][T11841] RBP: 00007f818efb3090 R08: 0000000000000000 R09: 00007f818efb2df7 [ 798.545888][T11841] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 798.545897][T11841] R13: 0000000000000000 R14: 00007f818e3b6160 R15: 00007ffca2d48fa8 [ 798.545914][T11841] [ 799.898853][T11841] CPU: 0 UID: 0 PID: 11841 Comm: syz.2.1782 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 799.898876][T11841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 799.898886][T11841] Call Trace: [ 799.898897][T11841] [ 799.898907][T11841] dump_stack_lvl+0x189/0x250 [ 799.898936][T11841] ? exc_page_fault+0x46/0x110 [ 799.898953][T11841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 799.898971][T11841] ? __pfx__printk+0x10/0x10 [ 799.898997][T11841] should_fail_ex+0x414/0x560 [ 799.899023][T11841] strncpy_from_user+0x36/0x290 [ 799.899045][T11841] strncpy_from_user_nofault+0x72/0x140 [ 799.899072][T11841] bpf_probe_read_compat_str+0xe2/0x180 [ 799.899094][T11841] bpf_prog_c1796171ffc7efef+0x3e/0x40 [ 799.899107][T11841] bpf_trace_run4+0x28b/0x4a0 [ 799.899121][T11841] ? bpf_trace_run4+0x322/0x4a0 [ 799.899133][T11841] ? bpf_trace_run4+0x19c/0x4a0 [ 799.899145][T11841] ? __pfx_bpf_trace_run4+0x10/0x10 [ 799.899160][T11841] ? __pfx_rcu_qs+0x10/0x10 [ 799.899180][T11841] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 799.899200][T11841] __bpf_trace_sched_switch+0x17a/0x1e0 [ 799.899216][T11841] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 799.899231][T11841] ? rcu_read_lock_sched_held+0x89/0x100 [ 799.899252][T11841] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 799.899272][T11841] ? plist_check_list+0x308/0x330 [ 799.899287][T11841] ? task_psi_group+0x50/0x1a0 [ 799.899309][T11841] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 799.899342][T11841] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 799.899358][T11841] __traceiter_sched_switch+0x9a/0xd0 [ 799.899376][T11841] __schedule+0x22b0/0x4c70 [ 799.899406][T11841] ? __lock_acquire+0x9c1/0xd20 [ 799.899426][T11841] ? preempt_schedule_irq+0xb5/0x150 [ 799.899443][T11841] ? __pfx___schedule+0x10/0x10 [ 799.899456][T11841] ? _parse_integer_limit+0x1ae/0x1f0 [ 799.899475][T11841] ? preempt_schedule_irq+0xaa/0x150 [ 799.899491][T11841] preempt_schedule_irq+0xb5/0x150 [ 799.899506][T11841] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 799.899524][T11841] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 799.899545][T11841] irqentry_exit+0x6f/0x90 [ 799.899561][T11841] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 799.899577][T11841] RIP: 0010:lock_release+0x44/0x3e0 [ 799.899597][T11841] Code: 8b 05 90 d2 d3 10 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 93 d2 d3 10 83 f8 08 0f 83 9a 02 00 00 89 c0 48 0f a3 05 bc 7b df 0d <73> 16 e8 c5 c8 08 00 84 c0 75 0d f6 05 73 79 c9 0d 01 0f 84 ad 02 [ 799.899610][T11841] RSP: 0018:ffffc9001ad27cb8 EFLAGS: 00000293 [ 799.899624][T11841] RAX: 0000000000000000 RBX: ffff88802faad6c3 RCX: dffffc0000000000 [ 799.899634][T11841] RDX: 0000000000000000 RSI: ffffffff822f84cb RDI: ffff88802faad7b8 [ 799.899644][T11841] RBP: ffffc9001ad27e30 R08: ffff888030555a2b R09: 1ffff110060aab45 [ 799.899654][T11841] R10: dffffc0000000000 R11: ffffed10060aab46 R12: dffffc0000000000 [ 799.899665][T11841] R13: ffffffff822f84cb R14: ffff88802faad7b8 R15: ffff88802faad750 [ 799.899681][T11841] ? ksys_write+0x1cb/0x250 [ 799.899703][T11841] ? ksys_write+0x1cb/0x250 [ 799.899723][T11841] ? vfs_write+0x8d8/0xa90 [ 799.899743][T11841] __mutex_unlock_slowpath+0xc7/0x700 [ 799.899761][T11841] ? __pfx_vfs_write+0x10/0x10 [ 799.899779][T11841] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 799.899798][T11841] ? __fget_files+0x3a0/0x420 [ 799.899819][T11841] ? __fget_files+0x2a/0x420 [ 799.899842][T11841] ksys_write+0x1cb/0x250 [ 799.899862][T11841] ? __pfx_ksys_write+0x10/0x10 [ 799.899883][T11841] do_syscall_64+0xf6/0x210 [ 799.899904][T11841] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 799.899917][T11841] ? clear_bhb_loop+0x45/0xa0 [ 799.899932][T11841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.899946][T11841] RIP: 0033:0x7f818e18d41f [ 799.899961][T11841] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 799.899973][T11841] RSP: 002b:00007f818efb3030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 799.899990][T11841] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007f818e18d41f [ 799.900000][T11841] RDX: 0000000000000001 RSI: 00007f818efb3090 RDI: 000000000000000a [ 799.900009][T11841] RBP: 00007f818efb3090 R08: 0000000000000000 R09: 00007f818efb2df7 [ 799.900019][T11841] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 799.900027][T11841] R13: 0000000000000000 R14: 00007f818e3b6160 R15: 00007ffca2d48fa8 [ 799.900042][T11841] [ 800.587084][ T7902] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 800.768608][ T7902] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 800.777049][ T7902] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 800.785222][ T7902] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 800.794153][ T7902] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 800.795530][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 800.805029][ T7902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 800.822448][ T7902] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 800.842083][ T7902] usb 2-1: string descriptor 0 read error: -22 [ 800.848421][ T7902] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 800.857517][ T7902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.867255][ T7902] usb 2-1: config 0 descriptor?? [ 800.872903][T11845] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 800.881325][ T7902] hub 2-1:0.0: bad descriptor, ignoring hub [ 800.887481][ T7902] hub 2-1:0.0: probe with driver hub failed with error -5 [ 800.896580][ T7902] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input19 [ 800.967521][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 800.976886][ T10] usb 5-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 32 [ 800.987201][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 800.997988][ T10] usb 5-1: string descriptor 0 read error: -22 [ 801.004260][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 801.013516][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.023492][T11838] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 801.088819][ T7902] usb 2-1: USB disconnect, device number 44 [ 801.233685][ T10] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 64 proto 2 vid 0x0525 pid 0xA4A8 [ 802.841001][ T7902] usb 5-1: USB disconnect, device number 42 [ 802.857293][ T7902] usblp0: removed