last executing test programs: 12.838299305s ago: executing program 2 (id=5679): syz_io_uring_setup(0x4a0e, &(0x7f0000000180)={0x0, 0x43bd, 0x400, 0x1, 0x3a6}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r2, 0xb000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 12.599154087s ago: executing program 2 (id=5681): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x40802) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0}) socket$inet6(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket(0x27, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, 0x4}) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0) fremovexattr(r7, &(0x7f0000002340)=@known='system.posix_acl_access\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001900010000000000000000001c142d00fe0000010000000005001300c3000000"], 0x24}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1eb) 12.543935268s ago: executing program 4 (id=5682): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x158, 0x5c, 0x160, 0x158, 0x3e0, 0x268, 0x228, 0x25a, 0x268, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a}, 0x5002, 0x118, 0x158, 0x52020000, {0x0, 0x6802000000000000}, [@common=@unspec=@limit={{0x48}, {0x10000, 0x80000000, 0x8, 0x9, 0x40, 0x5, 0x4}}, @common=@unspec=@state={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x7, 0x2, {0xfffffffffffffffa}}}}, {{@ipv6={@local, @empty, [], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xffffffff, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b8c2f000000fb718aef932f3889d1fdda5bc27c449ea2b1d6a6c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055794412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0xb6441a1659179bfc) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) bind$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x42800, 0x55007}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x48}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x8}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xe}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x2, 0x0, 0x0, {[@sack={0x5, 0x2}, @generic={0x22, 0x6, "963b4794"}]}}}}}}}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086d040ec20000000000010902"], 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0xffff, 0x5, 0xfffffffffffffff4, 0x7, 0x80000005, 0x1ff, 0x7fff}, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) readv(r7, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000040)=""/13, 0xd}], 0x2) write$sysctl(r5, &(0x7f0000000000)='2\x00', 0x2) 11.805896492s ago: executing program 3 (id=5683): setrlimit(0x1, &(0x7f0000000000)={0x0, 0x11}) r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r0, &(0x7f0000001940)=""/4086, 0xff6) 11.673889726s ago: executing program 3 (id=5684): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000040)={0xc0, 0x0, 0x8000}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c0001800800014000000003240001"], 0x140}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x10, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000140)={0x10002, 0x280, 0x280, &(0x7f0000000680)=[0x6, 0x8, 0x0, 0x1, 0x2, 0x0, 0x5, 0x5, 0x4, 0xfffffffffffffff8, 0x8, 0x101, 0x4, 0x1, 0x9, 0x7, 0x0, 0x8000, 0x800, 0xfffffffffffffffa, 0x3ff, 0xe, 0x34, 0xf330, 0x8a37, 0x6, 0x3, 0x200, 0x7ff, 0x200, 0x100, 0x2, 0x5, 0x4b, 0x0, 0x5, 0x7e, 0x1b, 0xde, 0x4, 0x6, 0xfffffffffffffffa, 0x5, 0x2, 0x70, 0x9, 0x5, 0x8, 0x8e9, 0x5, 0x2, 0x9, 0x93b, 0x57c1, 0x7, 0xa000, 0x2, 0x4, 0x0, 0x12, 0x7, 0x6, 0x3, 0x8, 0x3, 0x8, 0x2bce, 0xfffffffffffffff7, 0x4, 0xfffffffffffffffd, 0x2, 0x9, 0x1, 0x1, 0x7, 0x5, 0x0, 0x5, 0x819, 0x4, 0x9, 0xb112, 0x0, 0x4b4, 0x7f, 0x9, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x6, 0x8, 0x1, 0x4, 0x1, 0x3, 0xae2, 0x200, 0x9, 0x2c, 0x1, 0x3, 0x3, 0x2d, 0x3, 0x100000001, 0xe, 0x4, 0x2, 0x1, 0x80000001, 0x5, 0x8, 0x6, 0x0, 0x9, 0x9, 0xcc, 0xffff, 0x9, 0x1, 0x7, 0xa, 0x1, 0xfffffffffffffffb, 0x7fff, 0x6, 0x1]}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x28, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x2, 0x1, 0x1ff}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$BTRFS_IOC_DEV_INFO(r7, 0xd000941e, &(0x7f0000001300)={0x0, "bb0697ff48fc415372efe1a72bd5a934"}) 11.53538751s ago: executing program 0 (id=5685): r0 = syz_io_uring_setup(0x4a0e, &(0x7f0000000180)={0x0, 0x43bd, 0x400, 0x1, 0x3a6}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) fadvise64(r0, 0x9, 0x8, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 11.287514928s ago: executing program 0 (id=5687): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000280)=""/4096, 0x9005) (fail_nth: 17) 10.934705357s ago: executing program 0 (id=5688): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000006980)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="09525391a07848b09c4c69cce528728f33db995ea5bf6fd07472c50793af2d0c6266f6af556e6c40861b57a214f2134cd8355d19414888597a2877ce53f8c9d4da2c009989b759d73740692f4aa75105d31a24ea72cd42e791aaf76a763226de78f75bf0eb6e14d8af6c9608af48b5cdbfbac4bbac1efe82e21c4e1ea297d8241e50955d40f3d07babd28963c245c8385340c79b4e4f9fe4752559867eb5a596fa62ddf4ea006c857f21e6ae0e5a263fe408cc81ad5088751362dc206592053319fb88fd803af0ff9cae31fbfadb88c3dc9c674571cb7db44dd247ea46682f71223aeba42d98675cc4ff27b529083269b7125690018cfafe96ac8a", 0xfb}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000000140)="f7f9ce03a5f67e91c05d0d715be0d2cf4d", 0x11}], 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x270, 0x1}, {0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002700)="deba2d61d69d31bf7cb42c778ccc9a5cd2faa77365bc97ccd6fdd64e85ce4565e64277d5954339fbf8d71ceb57f4a210045696b3e39fd6820ffe988e42d55026ce12ff6029a0ffe3a2a7cd3e9440be87a55bb73e4804a73448039a93378fdeeb65ebf61e79ebfea2f9314c8c8c4082769ad9cf826c8d2860a01ab7fd01afdc8c1f69785c0bb798c25f363209", 0x8c}, {&(0x7f00000001c0)="78bc196515f830241fa883550778bb1b2497eff9bd7c480e2ded09b81d52cc15184576876901", 0x26}], 0x2, 0x0, 0x0, 0x20020004}, {0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002800)="0a0f7db198b89ef5f9c316ee11dee35bd79e50b0233225f0aaa2f5040c802ad1ea9c8acbce2d07a2a6826f1a010e5f3d980b66b0259c5abd741676f709329038eb3b6c4dee1c7e8e", 0x48}, {&(0x7f0000002880)="ee836db37c17dbe525cbb2f155bd2deb789750fd38b7944918f39df1fbdc314838f0baf87360265d5e133cc14aae886d9167e48389c005ddd2", 0x39}], 0x2, &(0x7f0000002900)=ANY=[@ANYBLOB="180000000000000017010000030000000100000000000000680000000000000017010000020000004d000000adfba72a7d92dd1f384763f64eae98dacb1df97ea6f504ac6440949b06ebd17f9c23b0270678cfebbfa2cd3854765940783318834d09012aaffd858256d93bacc424c2615cf7a60d15e58900000000000000980000000000000017010000020000007f00000059b696c36654a4c3faa95a8813ecd176bd9a3ae8ec277c1d243cd88023e87642ab497e0aae43fdf813cb5b05ca2c7f721c0cfcc0c5201ced58a220c53b7e681492d9ccaae6abbaf4370f21e8b9f1146b08a960c861bcd1ab16cf98e10c34bef6a9ab59edc25b5a67e4bcf02e10934330b19b23faa04e253f340f1d5f48a17000000000001800000000000000170100000400000005000000000000001800000000000000170100000300"/328], 0x148, 0x50}, {0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000002a80)="e2f7d54554deba3b332f3fdacdb40790dc5152b4138586b70be24ae0f77e4e8dd8dd7f33f2ebd22adb8fa0ca61281fb64a2c3af133eed65c0b46656a7bb11aa3c7c30bdc462439d5d8d501e3a89c887ba5ca167c268173856c0fd78658d80776edd373d8132a102726", 0x69}, {&(0x7f0000002b00)="e37903b90320e49c01c5532e8e5368c75d502afbf6339028e5a07802feea7470efe7c6752daaf2b8fd0b5aedb111d6e2c5017b0c5d2089187d44b81181c442d2523f054c874795a9720836bd6ba288bc152fd323a2c7df8b2709de650200425911627d1a2dd1eaf08d5602e283de4c9d830d640d278a304ecaabc13c", 0x7c}, {&(0x7f0000002b80)="3bc019d59358ec1a39f7260c702784cb37f6596cf3b756475ef1d2658363c50d4bd5f7317c96ea997bc7c3f8bc49936dd8e634652c2c370fc7ca8a7d8fe99c1b351c64cc3ca9566ce3442cd955978e0cb8a6464dea693b82f71f1f676eac087e1cfec4ca0e40b8bfe70d8f5c2a8fd048610a05fa9bb86615c5059312da69f098988b35abe969420c314867", 0x8b}, {&(0x7f0000002c40)="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", 0x1000}], 0x4, &(0x7f0000003c80)=[@op={0x18}, @op={0x18}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x100, 0x117, 0x2, 0xe6, "07f334d2470ab60461cec2b49e96750839324c8f733273ddfdfc62f20e80b47bb1e8c293602ef2865f416bcd5848168c46c3a3ac0724af9988f3ab0ab2c930c8eea85330d864518a867e49e0d6998892dda6b3da116b3b61d0d29531b39625c0a683b47b34754e247d70f126b7d47138b2baf33d815ab39866251806ba9e78a111e394f33485c88281dff25428e3d01387b09a67447e624994333978b734088ecf6b348029c9f7add3c0afe2d3c75764ec96c7ecfe77626bb64c9ec217a7915cf8a521275749956520fbc9e4a264e9fc8b851c40d47965ac84421da1111f2acebff4ae05fedc"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0xf}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x11d8}, {0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000004e80)="7dc244a3aad5f17a4e8aecf101522716060e8e68814f746c3ed8120e9e3e99ced22bbdd1b2b10ee9fa06e9950bd21a95211addacd3", 0x35}, {&(0x7f0000004ec0)="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", 0xf60}, {&(0x7f0000005ec0)="3ec402220ef47c03a4e1b4725c7e3d00d8134994014c103d71f6a929e958ebe91bcfafbf433344612ed150b5f7f42fd8ef931ccd0fdc9e7f5c0d03cb906d5c83cfb30a42e53e3cd73556594245fbb8d21c23cc51f52b2de3c4ffbc20494bc703947e6e0dd16822e000452887c405d7d42957154f347a1bfa57e3bb35f097b3cac36eabe7decca501815d554503bc3e20443a16098a027039d28745ec760cfa51815f7e0b12c69be040a7725bcb3a1dbdb8a4e4a62678e081a088e3b76763", 0xbe}, {&(0x7f0000005f80)}, {&(0x7f0000005fc0)="719c2fe03caa29b3aaf92b44140b254295b27c268fd3af2819f9ac3bd6f7b0b16fd86a21d4841eedf20725fabb212a914cecb8c0a30958c52b898d8f7f30f288795e08b3fe46ec0d50bd0494e54abf581e4be58e861a50c578e270655d2d026aa10af983938644ada10e82cecd98f7acfbbee564f6f5a19fcee071ef2bc827e5aa486c204116fe47432eb5be1a3d8126ebc3022823940dafda31f664e3b2def210247ae7e0f3cd6f71d6fca77805e73b5e17a95fe99a42a9e26bd2658645d42c00f82eae69a0f3b755eb6caccc1c87fbef8aee247cb53bcc3e7bca0970b1d45897744c5a69", 0xe5}, {&(0x7f00000060c0)="69135332d145a37938047a6a1da830cf9e1deeb8a56584ce3b759052633612de0354a74b9573d00475373b7423a8e675f0f7996d5fe2d2b62ff501c0936e7fe8db9f83ea2cd63d79aef64668c1506fdc", 0x50}], 0x6, &(0x7f00000061c0)=[@assoc={0x18, 0x117, 0x4, 0x3}], 0x18, 0x4000}, {0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000006200)="b8550f1645b0b2c8c7dd92de5cdbeb067ba845de6dbcfc5a4928e5a96be44bcd7a49061615c9adc3888137a92fcffbd56170c2b42319dc47ad89e9081b37ec4ea6bd154b18a9ab848cecf3831c608f1b67c7a609d807692e1732ce782c46", 0x5e}, {&(0x7f0000006280)="61ebde891db6c85dbf177727c52b6ea379d731394f3a9d1144c2f9a212e4099f", 0x20}, {0x0}, {&(0x7f0000006380)="14cb0de94466d43d081afba3b04a5759bb5c3726f9688921d13e43757edb01f64ec1", 0x22}], 0x4, 0x0, 0x0, 0x4801}, {0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006400)="6fcdd2d91d1a0f", 0x7}, {&(0x7f0000006440)="2188bd2d75bfb9a2b9b3aeb2da70897ae1fd4a303c5484b98886d1b2bd5b31990b2f14effead370526951aeb98d88eee997bb18d8abace14f1ee1261a7db785de4e7b5b17806d98829d5c1eee164eb86413c4a38bf3fb5730d452c65fc3989907dce83d005fa985c1329c4094909c24aee231a54b9b3f42f400349580537261bb8cffb30a8088af98ed9", 0x8a}, {&(0x7f0000006500)="2f8379f3216a6e1603bc3a9fb5e95246626bd570bbce66a04335a69977717579f1b1d51ad3cb4a6aa05c6efb11657fb278a056ec7497c109823a51267c6c5d6ac22c18df390269a06770010ceaeec1461bff2e192f7cfa8446d5bc7e56f8c9748326fbe0c56362333fbb0b3bd0fa474682d5bd7f6aa9225916", 0x79}, {&(0x7f0000006680)="cdff9cbc606352544bff4e73607f1834ea9bfd51caf00ef685e4cb83daa97f9b5136446ee1c97b2b15f408ac13042f72582ebda6e742f845cdc15c700b371b594d1aa846a5b7fa3f3d526574874df4c9d6a6d8465caef9e1a2a9a33860be8a74ae3e5c762fbee081469b2416f4f6a42cf66615e3a67bfaa25fd4e4e698a5c030dfb3cb1e9c43123b40ca7d", 0x8b}], 0x4, &(0x7f00000067c0)=ANY=[], 0x50, 0x4040000}, {0x0, 0x0, &(0x7f00000068c0)=[{&(0x7f0000006840)="29c9297ed2beccc81520f193648e2d1b2883647111d8355672c58d0f3d01c980cfe9d96b79852994bf6dc066e3b9dd45380e29bf9cf16d42d263f9dac4c9c5f0ff497a52e37e543c5ac0c5017476385d6b", 0x51}], 0x1, &(0x7f0000006900)=[@assoc={0x18, 0x117, 0x4, 0xc}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x8040}], 0x8, 0x20000044) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0xc4, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r9, {0x0, 0x2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xcb}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x3, 0x3059, 0xa, 0x1, 0x2, 0x6f3, 0x6}}, {0x10, 0x2, [0x2, 0x1, 0x81, 0x6, 0x0, 0x5]}}, {{0x1c, 0x1, {0x10, 0x1, 0x7, 0x0, 0x2, 0x0, 0xffffffff, 0x6}}, {0x10, 0x2, [0x6, 0x9, 0x6, 0x7fff, 0xb, 0x1]}}, {{0x1c, 0x1, {0x7f, 0x0, 0x6, 0x8, 0x0, 0x0, 0x8c000, 0x8}}, {0x14, 0x2, [0x4, 0x2cbc, 0xa5, 0x5, 0xb, 0x3, 0x9, 0xd62b]}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x3, 0x8, @remote, 0x7}, 0x1c) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f00000000c0)) flistxattr(r10, &(0x7f0000000700)=""/4096, 0x1000) sendto$packet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 10.881554775s ago: executing program 3 (id=5689): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x50, 0x1, 0x2, "a90037e7f30f000080df4832c305f70000000000004840080000000000008300", 0x7b143208}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @mss={0x2, 0x4}, @window, @sack_perm, @timestamp, @timestamp], 0x7) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) 9.321790993s ago: executing program 2 (id=5690): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf000) 9.125716509s ago: executing program 4 (id=5691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008", @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, 0x0, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, 0x0, 0x0) unshare(0x42000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x0) 8.619330867s ago: executing program 2 (id=5692): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) inotify_init1(0x80000) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x8, 0x0}) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x4d8, 0xf002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x3, 0x1, 0x0, 0x9, {0x9, 0x21, 0x8001, 0x7, 0x1, {0x22, 0xac9}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xb, 0x69, 0x9}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x3, 0x4, 0x0, 0x0, 0x4}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4, 0x1, 0x7}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x280a}}]}) timer_create(0x0, 0x0, &(0x7f0000000480)=0x0) timer_delete(r6) timer_settime(r6, 0x0, &(0x7f0000000840), &(0x7f0000000880)) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 7.759273166s ago: executing program 0 (id=5693): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) r7 = socket(0x18, 0x803, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x40010002}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0xfffffffffffffffc, {0x0, 0x0, 0x4}}, 0x18, &(0x7f0000000180)={0x0}, 0x3f, 0x0, 0x0, 0x40881}, 0x80488ee) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57d4"], 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103, 0x28820}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x118}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44801}, 0x48000) 7.579003003s ago: executing program 1 (id=5694): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20311}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0xba01, 0x0, 0x59b64538e080e552}, 0x810) (fail_nth: 10) 6.391290859s ago: executing program 3 (id=5695): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1], 0x28}}, 0x0) 6.3034516s ago: executing program 1 (id=5696): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB="c30c424700000000280012800a00010076786c616e000000180002801400", @ANYRES8=0x0], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000340)={0x3, 0x0, @c}, 0x29, 0xfffffffffffffff9) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x9f) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}) io_uring_enter(0xffffffffffffffff, 0x47f5, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) close(r6) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r7 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r10 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r10, 0x0, 0x0}) io_uring_enter(r7, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000003c0)=0x3, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) 5.896125613s ago: executing program 3 (id=5697): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ede000/0x2000)=nil, 0x2000, 0x0, 0x85, 0x4000) socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) syz_io_uring_complete(0x0) sendfile(r3, r3, 0x0, 0x7) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000007329c5ad5fdcaa41844dd311efe5696c1af48007f19196a2455c2214c4425908c2e485061828a480", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r5, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x4, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r5, 0x5501) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000002100050100000000000000000200000000000000020000000c000c4000000000"], 0x30}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x3, 0x800) 5.781343853s ago: executing program 4 (id=5698): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = syz_io_uring_setup(0x4bf8, &(0x7f0000000240)={0x0, 0x400985c, 0x8000, 0x100000, 0x1dc, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="39000000140081ae10003c000500018311001f9fca1be6eeff000000000000002bdbb7d553b4e9fa21ab55f0d5736253b4a2002b50e1b4a3daeb45000000000000000000007955430a72d9a6a9eccac33cac1d806c4c5f6cd59132e2bb2be5f1e2c4f5d457e6347ea2897a6586255d0034899cc890dc7aaba3281a1c237ea3233c6bdd24c7547c2c346d16eb9266", 0x8e}], 0x1}, 0x4000) (async) io_uring_enter(r2, 0x2ded, 0x9d2d, 0x0, 0x0, 0x0) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000100)={0x18, r7, 0x1, 0x0, &(0x7f00000000c0)=[{0x80000001, 0xfffffffffffffffa}]}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r7}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x480, 0x92) (async) r9 = syz_open_dev$video4linux(&(0x7f00000005c0), 0x6, 0x258200) ioctl$VIDIOC_QUERYMENU(r9, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x101c}) (async) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r10, 0xc02064b6, &(0x7f00000001c0)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r10, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r12}) ioctl$DRM_IOCTL_MODE_ATOMIC(r10, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r12], &(0x7f0000000200)=[0xfffffffc], &(0x7f0000000300)=[r13], &(0x7f0000000340)}) (async) write(r8, &(0x7f0000000340), 0x11000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) 5.227278458s ago: executing program 4 (id=5699): socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect(0x6, 0x7a, &(0x7f0000000080)=ANY=[], 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x2, 0x200080) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000140)=""/202) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_setup(0x4, &(0x7f0000000340)=0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000306010200000000008000000a0000010500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getflags(0xffffffffffffffff, 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth1_to_bond\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x98}}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x149282, 0x10) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="0880fc3670bb5a7c15d5be6af6cf01e6a61a0b38bf77ce0563fef59b8801f596240778c01359c9998935b48a076809ccd4a96c6c7aaf17faa73fbb1b3e31aee100b7260474777e8fb9bcad7251", 0x4d, 0x4, 0x0, 0x7}]) write$cgroup_int(r8, &(0x7f0000000040)=0x902, 0x12) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) 4.923703311s ago: executing program 2 (id=5700): socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect(0x6, 0x7a, &(0x7f0000000080)=ANY=[], 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x2, 0x200080) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000140)=""/202) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_setup(0x4, &(0x7f0000000340)=0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000306010200000000008000000a0000010500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getflags(0xffffffffffffffff, 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth1_to_bond\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x98}}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x149282, 0x10) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="0880fc3670bb5a7c15d5be6af6cf01e6a61a0b38bf77ce0563fef59b8801f596240778c01359c9998935b48a076809ccd4a96c6c7aaf17faa73fbb1b3e31aee100b7260474777e8fb9bcad7251", 0x4d, 0x4, 0x0, 0x7}]) write$cgroup_int(r8, &(0x7f0000000040)=0x902, 0x12) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) 4.635743214s ago: executing program 1 (id=5701): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00283b00fe800000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) 4.239340407s ago: executing program 1 (id=5702): bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf"], 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x4605, &(0x7f00000005c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@empty, @random="0300", @val, {@mpls_mc={0x8848, {[{0x0, 0x0, 0x1}, {0x80000, 0x0, 0x1}], @ipv4=@dccp={{0x1b, 0x4, 0x0, 0x5, 0xe1, 0x67, 0x0, 0x5, 0x21, 0x0, @multicast1, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x7c, 0x1, 0x7, [{@rand_addr=0x1, 0xb17e}]}, @lsrr={0x83, 0x1f, 0xcd, [@broadcast, @loopback, @private=0xa010102, @remote, @multicast2, @remote, @multicast2]}, @timestamp_prespec={0x44, 0x2c, 0xde, 0x3, 0x9, [{@rand_addr=0x64010100, 0x7}, {@private=0xa010100}, {@loopback, 0x7}, {@empty, 0x100}, {@rand_addr=0x64010100, 0x5}]}]}}, {{0x4e24, 0x4e23, 0x4, 0x1, 0x7, 0x0, 0x0, 0x7, 0x2, "82ef2b", 0x3, "b7e9a3"}, "3f1f7e119f735f24ee9cc80a38c810c24604b8bad4ca35ba85743da30611e3b8fa31aff876b4d097198b9c9cadd89a63b6962c478a0b6cbbc65a58d4f12b4528e0718ad22992c9f5386d105056d3f67c5ddaece44223fec9b33bd06ee3e2046b6082e2fae6"}}}}}}}, 0x103) 3.588176862s ago: executing program 1 (id=5703): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000006980)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="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", 0xfb}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000000140)="f7f9ce03a5f67e91c05d0d715be0d2cf4d", 0x11}], 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x270, 0x1}, {0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002700)="deba2d61d69d31bf7cb42c778ccc9a5cd2faa77365bc97ccd6fdd64e85ce4565e64277d5954339fbf8d71ceb57f4a210045696b3e39fd6820ffe988e42d55026ce12ff6029a0ffe3a2a7cd3e9440be87a55bb73e4804a73448039a93378fdeeb65ebf61e79ebfea2f9314c8c8c4082769ad9cf826c8d2860a01ab7fd01afdc8c1f69785c0bb798c25f363209", 0x8c}, {&(0x7f00000001c0)="78bc196515f830241fa883550778bb1b2497eff9bd7c480e2ded09b81d52cc15184576876901", 0x26}], 0x2, 0x0, 0x0, 0x20020004}, {0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002800)="0a0f7db198b89ef5f9c316ee11dee35bd79e50b0233225f0aaa2f5040c802ad1ea9c8acbce2d07a2a6826f1a010e5f3d980b66b0259c5abd741676f709329038eb3b6c4dee1c7e8e", 0x48}, {&(0x7f0000002880)="ee836db37c17dbe525cbb2f155bd2deb789750fd38b7944918f39df1fbdc314838f0baf87360265d5e133cc14aae886d9167e48389c005ddd2", 0x39}], 0x2, &(0x7f0000002900)=ANY=[@ANYBLOB="180000000000000017010000030000000100000000000000680000000000000017010000020000004d000000adfba72a7d92dd1f384763f64eae98dacb1df97ea6f504ac6440949b06ebd17f9c23b0270678cfebbfa2cd3854765940783318834d09012aaffd858256d93bacc424c2615cf7a60d15e58900000000000000980000000000000017010000020000007f00000059b696c36654a4c3faa95a8813ecd176bd9a3ae8ec277c1d243cd88023e87642ab497e0aae43fdf813cb5b05ca2c7f721c0cfcc0c5201ced58a220c53b7e681492d9ccaae6abbaf4370f21e8b9f1146b08a960c861bcd1ab16cf98e10c34bef6a9ab59edc25b5a67e4bcf02e10934330b19b23faa04e253f340f1d5f48a17000000000001800000000000000170100000400000005000000000000001800000000000000170100000300"/328], 0x148, 0x50}, {0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000002a80)="e2f7d54554deba3b332f3fdacdb40790dc5152b4138586b70be24ae0f77e4e8dd8dd7f33f2ebd22adb8fa0ca61281fb64a2c3af133eed65c0b46656a7bb11aa3c7c30bdc462439d5d8d501e3a89c887ba5ca167c268173856c0fd78658d80776edd373d8132a102726", 0x69}, {&(0x7f0000002b00)="e37903b90320e49c01c5532e8e5368c75d502afbf6339028e5a07802feea7470efe7c6752daaf2b8fd0b5aedb111d6e2c5017b0c5d2089187d44b81181c442d2523f054c874795a9720836bd6ba288bc152fd323a2c7df8b2709de650200425911627d1a2dd1eaf08d5602e283de4c9d830d640d278a304ecaabc13c", 0x7c}, {&(0x7f0000002b80)="3bc019d59358ec1a39f7260c702784cb37f6596cf3b756475ef1d2658363c50d4bd5f7317c96ea997bc7c3f8bc49936dd8e634652c2c370fc7ca8a7d8fe99c1b351c64cc3ca9566ce3442cd955978e0cb8a6464dea693b82f71f1f676eac087e1cfec4ca0e40b8bfe70d8f5c2a8fd048610a05fa9bb86615c5059312da69f098988b35abe969420c314867", 0x8b}, {&(0x7f0000002c40)="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", 0x1000}], 0x4, &(0x7f0000003c80)=[@op={0x18}, @op={0x18}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x100, 0x117, 0x2, 0xe6, "07f334d2470ab60461cec2b49e96750839324c8f733273ddfdfc62f20e80b47bb1e8c293602ef2865f416bcd5848168c46c3a3ac0724af9988f3ab0ab2c930c8eea85330d864518a867e49e0d6998892dda6b3da116b3b61d0d29531b39625c0a683b47b34754e247d70f126b7d47138b2baf33d815ab39866251806ba9e78a111e394f33485c88281dff25428e3d01387b09a67447e624994333978b734088ecf6b348029c9f7add3c0afe2d3c75764ec96c7ecfe77626bb64c9ec217a7915cf8a521275749956520fbc9e4a264e9fc8b851c40d47965ac84421da1111f2acebff4ae05fedc"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0xf}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x11d8}, {0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000004e80)="7dc244a3aad5f17a4e8aecf101522716060e8e68814f746c3ed8120e9e3e99ced22bbdd1b2b10ee9fa06e9950bd21a95211addacd3", 0x35}, {&(0x7f0000004ec0)="1b935dc23d4b94a20930084ea064f69be551987c73e775d8bd252112481ffcb808c7e6d970236326b262d6ef5274f3110eacec92cb918d1dc0c0c093a1d692be34bf7b08394de516a532436bd7a213326b1a49de320289493c42a61b49553244add848089dd9fef1c84dd42bd5cb1901531f6c139b47fcad7b2dbf0f4dcc98f1b7a8535da3dca8641a22bdc5a58fcba9600ec7e633c33a6cf5497328a6fb9daa7b343b38c7aed406835c877f2ec88993978fc2d0994efe07f75237c1c1d582496f1842a6742ce6891218d170e08733d531e0e1d7338cb05ba861ebf0c150c37137b579e564996ea708007d128d2db0bdb5a3f8301dafc1a715b15b26918f24ae78b3bd51f0fcbec33519e6ea1c74becc950fc8300948019903d7f2bded37d9fed5179e28f0a65a53d5b9871421c9d37869f08a7a3a9e16e986f4cda4489b8b8057d1509999f04127a5b36bcb456a065baddc13abe09e9f6f9c237c2441712aa61012cd24f09d3deb190ed7d7cedf7af3eb318dc43d1227236f393ffbe3aa3d51b30d12a994f6fa9414a146c6c9ec4439039a3c469229a52be5f91411ee885fde3010a82e2ab22583012882ebe0db042b7ae769bb6191a582da430c6953f620ee7f2d57afce10b069be44f1fad86866df41153a6afdbec14ca90de2b51345712f60b6fc21abadf25cdfeb7e8d02e07a91302c637ee340d000c1c4b72cf428528e33079c57cb826ffe9ae4e03763b1363e23cca4c5f295204894c98ef0d4407b93ddeb4113b7227e7f5c477b9c93deb12889c1099f7a18bc616264220863963512517cff28b9d36de81543c680565785858641675b6bb4856241835f3ebb2af822ee0a9e50f67540a99fa5721c88380d10f8a98f410b6576fb103b201ff7cb9882bad10afde7a039da854529926fd7bb4bfd9fa0dd3b2213bb55d534e79c5cab79f97ea27694773f4a5d2865ecb302bbcbf87aeedb31b3fb61c5a844cb401320b104c3ef069460836ecfae6fe1356cf7730dec40f2f7cabe2c977e543fc6705a1e879472de46a622db6e67d38745deeed13d279c30e4e61ae7a6531425889f8bf5c56b642b2db847535d4844e5f57ebbe91df6d835a5c98a6750d1a5a20ce5faa657667218f2d91f3261653a6f770715ac74bec274a0677e26e048383ced564fe9de03a76d39e9c0c561df76af361453eab549ad1cd87b7b829a706a570f7a05fd38449257582978bb7c286d7cb37af68d32b73aa899f80f438191625f536237e22796d17fe865b94cb5984f42e8cb440273454c449bfe8abfcf52ea722dfa57131d4d393acd7d49b96ec0a17951a3b758550c29831433e6dc6ed94ca65edea8ccdec69ede796e9e156f9d8012abbb060be291872d19bc83f2a80faa538b73beaa812096d5e9f25fd2cddd441d2b0baa5db9c4db0407ecd107d58378c110a4bc1fe2e656c7e20a6a1b10283ef4018ccb06dd2e27c6bdd33a219769b297db156d3b1675a5a746563348ab42cc7e0b73c43bbb91d070d6b325c940431b4db4e936766371e06e2192c45e125fd53a1c67e8801541818bae09ea818a190c6bd888a287f252a1789f487915677aa8cd0945b929c9dc0a85ed78720d850a1842bc2e0dd47873caf2ca17776b8bfc2ef63d058ac1a431354c98a5c71bb0d7a1b3d81ddd957e726e051809e69f0395d340c9b280de5484a9a4ee53e08b3cceff5da449c6a663f45d20f954dc8581e0f5d5df6befa0756d08a944ef6aaf5090bc77dd443dc1dced8e6fcd53960838d1a1192a47bfbc4a21fdd1f7fcadb5a801c4e17ad784a3dc5b3a6f7b47362f2f3a6f2cc4cc70b599d0c2877add6c30c354f47f07213ecfc9cc35bb2740420ad0074be704d2887b2757689c720482cac7008192ee65914cd02d701717f88f943014cb602ca2ba749effa1c4553b796ab126855ddaa85daeec7a6daf43f55d48c9cefe01e99471c07dcb88474229afc9e70d1db5b303eb108f3cf5fc5e0dabd473bf799049d2da81933be86a5a483e58b3c3391b4d8dee68c44b9f6e35586a29fa2687d7c82c0893df2c8f4680938b81106dede2bbcfb0b922e6dc01ce670f5cb3aa4bb2d79bd6f85d9d9cf61808985d16e43f4937164e163646edf00ffd3c1f47a0d2a4422146b10629322a6d5813655b2244ce14825add0a835bca4f41b51c75497b1684312fdaaf05df4fa36224a4087ce1ce0b6c984f7b38af3bf619f3dccd4466a03a0d2c216051fa4f78aa32ea197a5bd75bc27d0a9bbd2c518ed2d74fa80c1dad9d98c34b10ab327803e9ff6517a9d5db05e9c29c5bf4c784cfbf578993f01b86eaa5ae3add13412b827e17f5b17b66da1657cf88352272ce9d75725b0cb38b2828783fa6a260adcbaf84d7ec188e0c2d7980483df374aa0afc1ea750b789fe5683350d04aa46d64d7820d9f44206915f5f6bb3fbe681a52e8ef9a9f3fbb83bf62874f87a962c6bca7a40749467cbec08e0e4704f6c2790660e9073235a45da7d4fc2d8f2486c938595d619ecf6e854aac220b7c524742e4b3354f816fb2e620e819460ae62b3284a1e2fcdf2eb75a620604bd893ce0d26d8a380e7a685fe51c13afa0d0dbc83e2f42b60c9436c89bb44e478cf090fefc0c8a20eb36bbcba94861e1a7ec82b988f244d3c877f516ced9884223c9fa74b1baebf3a182fa087d599a7769e5c6d1d7c41623bef1bde887022a72975770713cf686bc488e7fdfd636aad9fd2f6df9ebfe4d32040395b8d467a8ebac410d41277c5c33e180800e3ef39d033f5e73d9439ff46768958773de6d8fee0e4fa7f18f51a43d568a3c341087bf4d12c30c66ec8e7573ec39100196deefa138588b78b28cad72514e753e05b36dabb66038b5492eaaf4ce927e79460270a3e2b9c3de7dbc9deff0014137ec01dd6cbb497f1b3baafdebfd50884e8111ddd314d83953fb5f6b12d8c809c36277dbb374335306a043fe03cdefe8ac44889d888114454aa74f1f2678011e43f2efe662a2ad53241192d20b5740f8d0089a80978f8894c8763de650358fcc9cd8372c9b4fceca5869abe10e4df20ab8156e1063fc51a941d58725b5518bd5f4429ab30d44bd6c8016247129eafa26258d5be2d2aa96db30cef4eb6aa70e845793ae3125105d5bb068a7baec3a330b1d6bff42292d050db041908bf9d001d4892c3d17eac1bc10ec04378995aca1a1e291c1ed2c35a6153393c665dca99cf448c4196663aba27e86556d84faf112d75600ed5b623f85978355f8e09569da1b0e5eae35d1842d5e2143453e9b8f4421ba4de20888ac69a1896e149a888b3d1c1bfdf3992d6ace4b001092f3625c2f34c893e08622b86b05dc1d112d0546038436541974bb07b59b0e73009c80b5376f939eaf11f1ef04e49618c4d8219cc703eef0e0a3d6a275a3c74d1820e32f543726fede3bda247caf9cc5f3e3ef88a641ffd4390db144d829e761183d3259984461b890d23ffdd5ac589c90556c6096c5cf6dff4d9abf3d50642303d8b3e2ac1553211be054ff1ac20d7b44ab6c6f243b7876f676bc0ee3e6e58467c44aeb9dea6b8b56bfbf42422d4de28af3d2142c8178293c9bda5b93900131e0f869d03f45c8b06d0512a4a8e3a602a1a1768b711106599df08ac0a36eeb134a50593af15de97bee9c34112c1eed82f7828515bb7842320d2f1b4ba8d08e17e39876c19b4ea2fadd94d175e636fd9cbe1554b0d15d4a8bf19c3c92f1105f0ab805eb97b47cca48d4cd5764cb9408bb10e09c81f66f5ba56c1bdd3b6e10104106b0c572151584f0dec3b8bedbc99f16a83af9ab3927a99eda81b01d87834fd0b3f7a1cf6152967861b19ec58a12c126804eb53367ec47519f0384dd40f9cdfb7eabbcbd5966de59fe86cd1353f5c6a219540e33bf38fd9a5db72013b9733ba95c42e95e79ec50d6876a730db835bc6cba2d25c6b1822cf63e53f46caed2437263b4dedc3a420ed41c0f467136d45ef62d4baf686486e976f192257ff0695c4dcd8deba9869e7cf5abb72d9fde63a08b9f44305b0f8a7a2693d96df0321823150c8d3f36b7ae0a041f3954b160ec64548db03203c5e402cc61413083e47c8c6b11b9066788276e37d763cbc23a747647fb5d7fc5a2b2db787ea64184c2fcd75df9ac6fd0b3a0bd3dadf4b846ece77e34eb9f4c029e31038899fc2e76f9dbda221a1a8728e001bb9a24fd4a2b13639050fdb93da553a7a6bfed2cb944508895c1b31103fca30b8ae67380e289c1e71282c3903873b14867cefdc52942b71b32eec2fc83627ad637cbd637dbacc346392f8d4bcb8f9069b089e448af4b379fa6d4a9ec76be1b233acdd87e51ca18f76ee3c7c015659209a00e11a6ce73c1ab0752ced13e5b8db7b8056746813041fdd4a0f929fd1fe50f15736c57c61176b3e8184fda2fce356b05c0d6431ba01d8ffaae08dea15bb83fc7469ff984f851621e454ce79071599e947fd173e5d9678a8f2e1c883487889e80fc2862246f211587c098448861138c2eca04b2c77da3a07fded08eb21b58f5e2ba5cc93061176b0f51cd5260d741312be11d7b7214bde77898476edb58762a9dad2651903b4b726e5866e950f2222de08b7d448184d86943a6b25f92fa6bfea0e6f240cc40a9d238294399125d9946494682b684050c5631eb19cca7cc9a2475025d864563200316ed273f1b3cd226d2224b730e396df8b637136f2fdeaa5284d9c15d5ba2c3d6f2dd8f748d7edc60639e84eeca1269884d10b6dd04ed847b4215bc876a3ab38da720f3d27866fc45d5aceddf658e57332092356590e14062514424dabfba7260f25e62e7aaebadc703e345d66acbccb0683b90fc5ff4f843058601f6f3e632c3d84cbbf831bb1605942cb355f1f2c2d1a12704d89f87eb9db2b29372a30995c6c58c6c0fc579c962fa01e3b18aa14d8bbf8d120f6626cb440d9d325dff56813a529a414dd6638fd4626500f223cabfb1ba59a5d6bef3a4fda66f31cec94471bfb74d43122056ab193c4edbba87a938280713c88f9ba08eacced342b13d7de0e6884bf5a0e587ce45be9a0f97a168c6b06414a664e46ee488d6cf4ef4c76eb1f3ba7948175bc2da2549086ab3e71d89e669c67dc7f84ec7443f6163be21813dac77100d3a4f8fb3cc47284d98343d80ecad346ccf6218d0bccfc9e59d2a9d1dfe07da8eac23ac148b2029c276a4c8b1e144ba2e785d4cf55dc5158a145a3c66c413271ccf47edbcb0486cdc933735e41764c166a90816ba2b890074896778b6aaf9e0f13496d4f2f16e8905bf12c0898074de5b0d6b8da980a999fb78a9dc036bd10c74a270cfb55fc3df01283766e100686f1285c55ef200d09ad7355154e0477252ae2e37d28fc3b7bb12094c7cf4f18e87cc053d894c9dd389081c1baf144789d4762966dce1ba8dec4eb4c5eb65598ecfaac1096bb25bf2e4eb9fd2ecdb3508cb0df757069cd5145413d0899fc805aa7cc8eb11b7c17b1c4b4926f480ffc20fbd5f80258185008ab227e7b33dd76f8780dca4f6d9a428de94ae92fb5430a7d9c46387fc444fb2df1b4cf3c68885d", 0xf60}, {&(0x7f0000005ec0)="3ec402220ef47c03a4e1b4725c7e3d00d8134994014c103d71f6a929e958ebe91bcfafbf433344612ed150b5f7f42fd8ef931ccd0fdc9e7f5c0d03cb906d5c83cfb30a42e53e3cd73556594245fbb8d21c23cc51f52b2de3c4ffbc20494bc703947e6e0dd16822e000452887c405d7d42957154f347a1bfa57e3bb35f097b3cac36eabe7decca501815d554503bc3e20443a16098a027039d28745ec760cfa51815f7e0b12c69be040a7725bcb3a1dbdb8a4e4a62678e081a088e3b76763", 0xbe}, {&(0x7f0000005f80)}, {&(0x7f0000005fc0)="719c2fe03caa29b3aaf92b44140b254295b27c268fd3af2819f9ac3bd6f7b0b16fd86a21d4841eedf20725fabb212a914cecb8c0a30958c52b898d8f7f30f288795e08b3fe46ec0d50bd0494e54abf581e4be58e861a50c578e270655d2d026aa10af983938644ada10e82cecd98f7acfbbee564f6f5a19fcee071ef2bc827e5aa486c204116fe47432eb5be1a3d8126ebc3022823940dafda31f664e3b2def210247ae7e0f3cd6f71d6fca77805e73b5e17a95fe99a42a9e26bd2658645d42c00f82eae69a0f3b755eb6caccc1c87fbef8aee247cb53bcc3e7bca0970b1d45897744c5a69", 0xe5}, {&(0x7f00000060c0)="69135332d145a37938047a6a1da830cf9e1deeb8a56584ce3b759052633612de0354a74b9573d00475373b7423a8e675f0f7996d5fe2d2b62ff501c0936e7fe8db9f83ea2cd63d79aef64668c1506fdc", 0x50}], 0x6, &(0x7f00000061c0)=[@assoc={0x18, 0x117, 0x4, 0x3}], 0x18, 0x4000}, {0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000006200)="b8550f1645b0b2c8c7dd92de5cdbeb067ba845de6dbcfc5a4928e5a96be44bcd7a49061615c9adc3888137a92fcffbd56170c2b42319dc47ad89e9081b37ec4ea6bd154b18a9ab848cecf3831c608f1b67c7a609d807692e1732ce782c46", 0x5e}, {&(0x7f0000006280)="61ebde891db6c85dbf177727c52b6ea379d731394f3a9d1144c2f9a212e4099f", 0x20}, {0x0}, {&(0x7f0000006380)="14cb0de94466d43d081afba3b04a5759bb5c3726f9688921d13e43757edb01f64ec1", 0x22}], 0x4, 0x0, 0x0, 0x4801}, {0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006400)="6fcdd2d91d1a0f", 0x7}, {&(0x7f0000006440)="2188bd2d75bfb9a2b9b3aeb2da70897ae1fd4a303c5484b98886d1b2bd5b31990b2f14effead370526951aeb98d88eee997bb18d8abace14f1ee1261a7db785de4e7b5b17806d98829d5c1eee164eb86413c4a38bf3fb5730d452c65fc3989907dce83d005fa985c1329c4094909c24aee231a54b9b3f42f400349580537261bb8cffb30a8088af98ed9", 0x8a}, {&(0x7f0000006500)="2f8379f3216a6e1603bc3a9fb5e95246626bd570bbce66a04335a69977717579f1b1d51ad3cb4a6aa05c6efb11657fb278a056ec7497c109823a51267c6c5d6ac22c18df390269a06770010ceaeec1461bff2e192f7cfa8446d5bc7e56f8c9748326fbe0c56362333fbb0b3bd0fa474682d5bd7f6aa9225916", 0x79}, {&(0x7f0000006680)="cdff9cbc606352544bff4e73607f1834ea9bfd51caf00ef685e4cb83daa97f9b5136446ee1c97b2b15f408ac13042f72582ebda6e742f845cdc15c700b371b594d1aa846a5b7fa3f3d526574874df4c9d6a6d8465caef9e1a2a9a33860be8a74ae3e5c762fbee081469b2416f4f6a42cf66615e3a67bfaa25fd4e4e698a5c030dfb3cb1e9c43123b40ca7d", 0x8b}], 0x4, &(0x7f00000067c0)=ANY=[], 0x50, 0x4040000}, {0x0, 0x0, &(0x7f00000068c0)=[{&(0x7f0000006840)="29c9297ed2beccc81520f193648e2d1b2883647111d8355672c58d0f3d01c980cfe9d96b79852994bf6dc066e3b9dd45380e29bf9cf16d42d263f9dac4c9c5f0ff497a52e37e543c5ac0c5017476385d6b", 0x51}], 0x1, &(0x7f0000006900)=[@assoc={0x18, 0x117, 0x4, 0xc}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x8040}], 0x8, 0x20000044) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0xc4, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r9, {0x0, 0x2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xcb}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x3, 0x3059, 0xa, 0x1, 0x2, 0x6f3, 0x6}}, {0x10, 0x2, [0x2, 0x1, 0x81, 0x6, 0x0, 0x5]}}, {{0x1c, 0x1, {0x10, 0x1, 0x7, 0x0, 0x2, 0x0, 0xffffffff, 0x6}}, {0x10, 0x2, [0x6, 0x9, 0x6, 0x7fff, 0xb, 0x1]}}, {{0x1c, 0x1, {0x7f, 0x0, 0x6, 0x8, 0x0, 0x0, 0x8c000, 0x8}}, {0x14, 0x2, [0x4, 0x2cbc, 0xa5, 0x5, 0xb, 0x3, 0x9, 0xd62b]}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x3, 0x8, @remote, 0x7}, 0x1c) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f00000000c0)) flistxattr(r10, &(0x7f0000000700)=""/4096, 0x1000) sendto$packet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 3.478353498s ago: executing program 0 (id=5704): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x81}, {{0x0, 0x0, 0x0}, 0xd5}], 0x2, 0x2000, 0x0) recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@migrate={0xac, 0x21, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@multicast2, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @policy_type={0xa}]}, 0xac}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/reserved_size', 0x440380, 0x40) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 1.591308045s ago: executing program 3 (id=5705): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x50, 0x1, 0x2, "a90037e7f30f000080df4832c305f70000000000004840080000000000008300", 0x7b143208}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @mss={0x2, 0x4}, @window, @sack_perm, @timestamp, @timestamp], 0x7) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) 455.426532ms ago: executing program 4 (id=5706): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x61, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x1, 0x53, 0x68, 0x0, 0x6, 0x2, 0x0, @loopback, @rand_addr=0x64010102, {[@end]}}, {0x16, 0x0, 0x0, @private=0xa010101, "ccfe234fa99d2e93b38cd3d129cbe054af4eda331ec37571f29274ffb55cd74db2ff43a353c5dfe1e3c37472da1721fb4ecc50"}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x6, 0x6}, 0x3c) 270.521243ms ago: executing program 0 (id=5707): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) listen(r1, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67866f75705f696401c26245289e90f37e304fb8b37ea1b93d", @ANYBLOB="de81fd194068ed350e329a30cc04e3e0a47f6a4da4e4c9d0d3b7d96d21ddfeb66f5c96c39b1b417ab7aab53f1e4682f0d9f5a0313fc37f7343a7f022e8528cd4aa81f28f6d833f93c322abcce4bbd675bbe388f28b54dcb75f3b4b3c4fc9fe9f40d3e45cb8eaa4afd12ca1b7714864f7ea99ec5843bbcd47fc478d1047921e7cf968991f6f27515436ae5c698e8898597fde77278054a7fcdc4637eea47622478c3a8c943bf4965582abd424355e33858b4d0f0614bc08456b113f2f985475a80ed89fea5264667e"]) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x1, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r6, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/170, 0xaa}, {0x0}], 0x2, 0xfffffff5, 0x2) r7 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r7, 0x5101) read$char_usb(r6, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(r5) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0xa7, 0x26, 0x4c, 0x20, 0x18c5, 0x12, 0x2b9f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf, 0x5, 0x0, 0x8, [{{0x9, 0x4, 0x6e, 0x0, 0x0, 0xff, 0x13, 0xf8, 0xca}}]}}]}}, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000200)=0x5) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) syz_emit_ethernet(0x86, &(0x7f0000000280)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x78, 0xfffc, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x4000000000000065, 0x4, 0x2, 0x0, 0xfffc, {[@sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xac}, @timestamp={0x8, 0xa, 0x200, 0xd}, @mptcp=@mp_join={0x1e, 0x0, 0x8}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x12, [0x5, 0x5, 0x4, 0x0]}, @generic={0x5, 0x2}, @md5sig={0x13, 0x12, "4d561d7ef6737b6a2efa8f86957f69a2"}]}}}}}}}, 0x0) 269.96048ms ago: executing program 4 (id=5708): socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect(0x6, 0x7a, &(0x7f0000000080)=ANY=[], 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x2, 0x200080) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000140)=""/202) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_setup(0x4, &(0x7f0000000340)=0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000306010200000000008000000a0000010500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getflags(0xffffffffffffffff, 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth1_to_bond\x00'}) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x38fe, &(0x7f00000003c0)={0x0, 0x1fffff, 0x10100, 0x800001}, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x149282, 0x10) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="0880fc3670bb5a7c15d5be6af6cf01e6a61a0b38bf77ce0563fef59b8801f596240778c01359c9998935b48a076809ccd4a96c6c7aaf17faa73fbb1b3e31aee100b7260474777e8fb9bcad7251", 0x4d, 0x4, 0x0, 0x7}]) write$cgroup_int(r6, &(0x7f0000000040)=0x902, 0x12) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) 202.777196ms ago: executing program 1 (id=5709): pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4091, 0xffb, 0x1010000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) creat(&(0x7f0000000040)='./file0\x00', 0x1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000280)=0x2) r3 = socket(0x840000000002, 0x3, 0x100) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x236, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x4be}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0xa0, 0x4}}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0xd, 0x42, 0x44, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="841a6fa7fa000000660000000000000016000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 0s ago: executing program 2 (id=5710): socket$l2tp(0x2, 0x2, 0x73) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@fd={0x9, 0xd, 0x4, 0x8, 0x4, {0x0, 0x0}, {0x1, 0x0, 0x9, 0x5, 0xc7, 0x4, '\b\x00\x00\b'}, 0xfffffff7, 0x4, {}, 0xfff}) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000017000b63d25a80648c2594f91341a3c9", 0x14}]}, 0x4080) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8042, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a00030700000000000000fcdbdf2505001a0064010100000000000000000000000000ac1414aa000000000000000500000080ffffff"], 0x38}}, 0x44040) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000001240)={0xfe, "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"}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000100000022bf000094000100", @ANYRES32=r1, @ANYBLOB="0d0e000000000000000000000000002cf2000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/24, @ANYRES32=r3, @ANYBLOB], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0d0000000a000000040000000400000000000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\n\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d0000000a000000040000000500000000000000", @ANYRES32=r7], 0x48) socket$inet_smc(0x2b, 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x9000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x82}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r9 = io_uring_setup(0x25e, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r9, 0x1b, &(0x7f0000003900)=[{0x0, 0x700, 0x0, 0x0, 0x0}], 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb29}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r11) close(r11) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x3}, &(0x7f0000000340), &(0x7f0000000280)) kernel console output (not intermixed with test programs): aller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1707.191339][T24687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1707.191351][T24687] Call Trace: [ 1707.191361][T24687] [ 1707.191369][T24687] dump_stack_lvl+0x189/0x250 [ 1707.191405][T24687] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1707.191426][T24687] ? __pfx__printk+0x10/0x10 [ 1707.191445][T24687] ? __pfx___might_resched+0x10/0x10 [ 1707.191459][T24687] ? fs_reclaim_acquire+0x7d/0x100 [ 1707.191485][T24687] should_fail_ex+0x414/0x560 [ 1707.191511][T24687] should_failslab+0xa8/0x100 [ 1707.191533][T24687] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1707.191552][T24687] ? alloc_empty_file+0x55/0x1d0 [ 1707.191577][T24687] alloc_empty_file+0x55/0x1d0 [ 1707.191600][T24687] path_openat+0x107/0x3830 [ 1707.191615][T24687] ? arch_stack_walk+0xfc/0x150 [ 1707.191643][T24687] ? stack_trace_save+0x9c/0xe0 [ 1707.191661][T24687] ? stack_depot_save_flags+0x40/0x910 [ 1707.191683][T24687] ? kasan_save_track+0x4f/0x80 [ 1707.191699][T24687] ? __kasan_slab_alloc+0x6c/0x80 [ 1707.191716][T24687] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1707.191733][T24687] ? getname_flags+0xb8/0x540 [ 1707.191754][T24687] ? __pfx_path_openat+0x10/0x10 [ 1707.191768][T24687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.191796][T24687] do_filp_open+0x1fa/0x410 [ 1707.191813][T24687] ? __pfx_do_filp_open+0x10/0x10 [ 1707.191844][T24687] ? _raw_spin_unlock+0x28/0x50 [ 1707.191860][T24687] ? alloc_fd+0x64c/0x6c0 [ 1707.191886][T24687] do_sys_openat2+0x121/0x1c0 [ 1707.191902][T24687] ? __pfx_do_sys_openat2+0x10/0x10 [ 1707.191919][T24687] ? ksys_write+0x1f0/0x250 [ 1707.191935][T24687] ? rcu_is_watching+0x15/0xb0 [ 1707.191953][T24687] __x64_sys_openat+0x138/0x170 [ 1707.191971][T24687] do_syscall_64+0xf6/0x210 [ 1707.191992][T24687] ? clear_bhb_loop+0x60/0xb0 [ 1707.192011][T24687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.192025][T24687] RIP: 0033:0x7f45edf8e969 [ 1707.192038][T24687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1707.192052][T24687] RSP: 002b:00007f45eed38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1707.192068][T24687] RAX: ffffffffffffffda RBX: 00007f45ee1b5fa0 RCX: 00007f45edf8e969 [ 1707.192079][T24687] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1707.192090][T24687] RBP: 00007f45eed38090 R08: 0000000000000000 R09: 0000000000000000 [ 1707.192099][T24687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1707.192108][T24687] R13: 0000000000000000 R14: 00007f45ee1b5fa0 R15: 00007f45ee2dfa28 [ 1707.192129][T24687] [ 1707.528054][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1707.744535][ T24] usb 2-1: config 0 has no interface number 0 [ 1707.763556][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1707.795740][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1707.829335][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1707.856218][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.875606][ T24] usb 2-1: config 0 descriptor?? [ 1707.880773][ T1206] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1707.900799][T24680] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1707.923382][ T24] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1708.020829][T24694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5397'. [ 1708.054743][ T1206] usb 1-1: config 0 has no interfaces? [ 1708.104664][T10248] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1708.132245][ T1206] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1708.142411][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.150736][ T1206] usb 1-1: Product: syz [ 1708.155276][ T1206] usb 1-1: Manufacturer: syz [ 1708.160181][ T1206] usb 1-1: SerialNumber: syz [ 1708.173529][ T1206] usb 1-1: config 0 descriptor?? [ 1708.279592][T10248] usb 4-1: device descriptor read/64, error -71 [ 1708.529589][T10248] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1708.609582][ T1206] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1708.669807][T10248] usb 4-1: device descriptor read/64, error -71 [ 1708.761695][ T1206] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1708.771293][ T1206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.783855][ T1206] usb 3-1: config 0 descriptor?? [ 1708.790048][T10248] usb usb4-port1: attempt power cycle [ 1709.139673][T10248] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1709.160923][T10248] usb 4-1: device descriptor read/8, error -71 [ 1709.334213][ T1206] [drm:udl_init] *ERROR* Selecting channel failed [ 1709.361452][ T5893] usb 5-1: USB disconnect, device number 75 [ 1709.406153][ T1206] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1709.416098][ T1206] [drm] Initialized udl on minor 2 [ 1709.423182][T10248] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1709.426251][ T1206] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1709.445427][ T1206] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1709.456005][ T24] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1709.472788][ T1206] usb 3-1: USB disconnect, device number 103 [ 1709.472929][T10248] usb 4-1: device descriptor read/8, error -71 [ 1709.485543][ T24] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1709.610582][T10248] usb usb4-port1: unable to enumerate USB device [ 1709.729070][T10248] usb 2-1: USB disconnect, device number 117 [ 1710.313682][ T5893] usb 1-1: USB disconnect, device number 38 [ 1710.402412][T10248] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1710.561906][T10248] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1710.582295][T24714] FAULT_INJECTION: forcing a failure. [ 1710.582295][T24714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1710.595652][T10248] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1710.619333][T10248] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1710.628704][T10248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.633866][T24714] CPU: 1 UID: 0 PID: 24714 Comm: syz.2.5402 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1710.633906][T24714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1710.633922][T24714] Call Trace: [ 1710.633934][T24714] [ 1710.633945][T24714] dump_stack_lvl+0x189/0x250 [ 1710.633990][T24714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1710.634025][T24714] ? __pfx__printk+0x10/0x10 [ 1710.634063][T24714] should_fail_ex+0x414/0x560 [ 1710.634095][T24714] _copy_to_user+0x31/0xb0 [ 1710.634133][T24714] simple_read_from_buffer+0xe1/0x170 [ 1710.634170][T24714] proc_fail_nth_read+0x1df/0x250 [ 1710.634209][T24714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1710.634248][T24714] ? rw_verify_area+0x258/0x650 [ 1710.634276][T24714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1710.634312][T24714] vfs_read+0x1fd/0x980 [ 1710.634346][T24714] ? __pfx___mutex_lock+0x10/0x10 [ 1710.634380][T24714] ? __pfx_vfs_read+0x10/0x10 [ 1710.634411][T24714] ? __fget_files+0x2a/0x420 [ 1710.634460][T24714] ? __fget_files+0x3a0/0x420 [ 1710.634490][T24714] ? __fget_files+0x2a/0x420 [ 1710.634530][T24714] ksys_read+0x145/0x250 [ 1710.634578][T24714] ? __pfx_ksys_read+0x10/0x10 [ 1710.634624][T24714] ? do_syscall_64+0xba/0x210 [ 1710.634660][T24714] do_syscall_64+0xf6/0x210 [ 1710.634692][T24714] ? clear_bhb_loop+0x60/0xb0 [ 1710.634721][T24714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.634743][T24714] RIP: 0033:0x7f45edf8d37c [ 1710.634765][T24714] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1710.634785][T24714] RSP: 002b:00007f45eed17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1710.634810][T24714] RAX: ffffffffffffffda RBX: 00007f45ee1b6080 RCX: 00007f45edf8d37c [ 1710.634828][T24714] RDX: 000000000000000f RSI: 00007f45eed170a0 RDI: 0000000000000006 [ 1710.634842][T24714] RBP: 00007f45eed17090 R08: 0000000000000000 R09: 0000000000000000 [ 1710.634857][T24714] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1710.634871][T24714] R13: 0000000000000000 R14: 00007f45ee1b6080 R15: 00007f45ee2dfa28 [ 1710.634912][T24714] [ 1710.899661][T10248] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1711.033927][T10248] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1711.309321][T24721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5406'. [ 1711.512917][T24732] FAULT_INJECTION: forcing a failure. [ 1711.512917][T24732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1711.599778][T24732] CPU: 0 UID: 0 PID: 24732 Comm: syz.0.5407 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1711.599809][T24732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1711.599830][T24732] Call Trace: [ 1711.599839][T24732] [ 1711.599849][T24732] dump_stack_lvl+0x189/0x250 [ 1711.599883][T24732] ? __lock_acquire+0xaac/0xd20 [ 1711.599917][T24732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1711.599948][T24732] ? __pfx__printk+0x10/0x10 [ 1711.599969][T24732] ? __might_fault+0xb0/0x130 [ 1711.600009][T24732] should_fail_ex+0x414/0x560 [ 1711.600037][T24732] _copy_from_user+0x2d/0xb0 [ 1711.600068][T24732] video_usercopy+0x354/0x14f0 [ 1711.600111][T24732] ? __pfx___video_do_ioctl+0x10/0x10 [ 1711.600142][T24732] ? __pfx_video_usercopy+0x10/0x10 [ 1711.600193][T24732] ? __fget_files+0x3a0/0x420 [ 1711.600226][T24732] v4l2_ioctl+0x18a/0x1e0 [ 1711.600256][T24732] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1711.600286][T24732] __se_sys_ioctl+0xf9/0x170 [ 1711.600312][T24732] do_syscall_64+0xf6/0x210 [ 1711.600342][T24732] ? clear_bhb_loop+0x60/0xb0 [ 1711.600368][T24732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.600389][T24732] RIP: 0033:0x7fb4e418e969 [ 1711.600407][T24732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1711.600427][T24732] RSP: 002b:00007fb4e50c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1711.600450][T24732] RAX: ffffffffffffffda RBX: 00007fb4e43b6080 RCX: 00007fb4e418e969 [ 1711.600466][T24732] RDX: 0000200000000100 RSI: 00000000c0745645 RDI: 0000000000000006 [ 1711.600481][T24732] RBP: 00007fb4e50c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1711.600494][T24732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1711.600507][T24732] R13: 0000000000000000 R14: 00007fb4e43b6080 R15: 00007fb4e44dfa28 [ 1711.600539][T24732] [ 1711.794811][ C0] vkms_vblank_simulate: vblank timer overrun [ 1712.169797][T24738] kvm: kvm [24734]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 1712.279728][T10248] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1712.526751][T10248] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1712.547318][T10248] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1712.919906][T24748] vivid-007: ================= START STATUS ================= [ 1712.928143][T24748] vivid-007: Enable Output Cropping: true [ 1712.934553][T24748] vivid-007: Enable Output Composing: true [ 1712.940600][T24748] vivid-007: Enable Output Scaler: true [ 1712.946270][T24748] vivid-007: Tx RGB Quantization Range: Automatic [ 1712.952869][T24748] vivid-007: Transmit Mode: HDMI [ 1712.957916][T24748] vivid-007: Hotplug Present: 0x00000000 [ 1712.963819][T24748] vivid-007: RxSense Present: 0x00000000 [ 1712.969652][T24748] vivid-007: EDID Present: 0x00000000 [ 1712.984722][T24748] vivid-007: ================== END STATUS ================== [ 1713.029632][T10248] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1713.116608][T10248] usb 3-1: config 1 has no interface number 0 [ 1713.315062][T10248] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1713.345661][T10248] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1713.519427][ T24] usb 2-1: USB disconnect, device number 118 [ 1713.535702][T24702] delete_channel: no stack [ 1713.636926][T10248] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1713.655095][T10248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.697837][T10248] usb 3-1: Product: syz [ 1713.708203][T10248] usb 3-1: Manufacturer: syz [ 1713.724176][T10248] usb 3-1: SerialNumber: syz [ 1713.753570][T10248] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1713.779697][T10248] cdc_ncm 3-1:1.1: bind() failure [ 1713.971990][ T30] audit: type=1326 audit(1747436652.181:11301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.0.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e418e969 code=0x7ffc0000 [ 1714.049163][ T30] audit: type=1326 audit(1747436652.191:11302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.0.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fb4e418e969 code=0x7ffc0000 [ 1714.071848][ C0] vkms_vblank_simulate: vblank timer overrun [ 1714.114810][ T30] audit: type=1326 audit(1747436652.191:11303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.0.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e418e969 code=0x7ffc0000 [ 1714.137360][ C0] vkms_vblank_simulate: vblank timer overrun [ 1714.250906][T10248] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1714.282769][ T30] audit: type=1326 audit(1747436652.221:11304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.0.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb4e418d2d0 code=0x7ffc0000 [ 1714.305313][ C0] vkms_vblank_simulate: vblank timer overrun [ 1714.366408][T24759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5416'. [ 1714.412198][ T30] audit: type=1326 audit(1747436652.221:11305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.0.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4e418e56b code=0x7ffc0000 [ 1714.441403][T10248] usb 1-1: too many configurations: 253, using maximum allowed: 8 [ 1714.539797][ T30] audit: type=1326 audit(1747436652.221:11306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.0.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4e418e56b code=0x7ffc0000 [ 1714.579824][ T24] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1714.674279][ T30] audit: type=1326 audit(1747436652.221:11307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.0.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4e418e56b code=0x7ffc0000 [ 1714.782531][ T24] usb 4-1: too many configurations: 253, using maximum allowed: 8 [ 1714.814324][ T30] audit: type=1326 audit(1747436652.221:11308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.0.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4e418e56b code=0x7ffc0000 [ 1715.351211][ T30] audit: type=1326 audit(1747436652.331:11309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.0.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4e418e56b code=0x7ffc0000 [ 1715.381868][ T30] audit: type=1326 audit(1747436652.401:11310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.0.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4e418e56b code=0x7ffc0000 [ 1715.516371][ T1206] usb 3-1: USB disconnect, device number 104 [ 1717.696584][ T5893] IPVS: starting estimator thread 0... [ 1717.783536][T24784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5420'. [ 1717.802021][T24783] IPVS: using max 26 ests per chain, 62400 per kthread [ 1718.411191][T10248] usb 1-1: string descriptor 0 read error: -71 [ 1718.417553][T10248] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1718.453144][T10248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.493622][T10248] usb 1-1: can't set config #1, error -71 [ 1718.589792][T10248] usb 1-1: USB disconnect, device number 39 [ 1718.713564][ T24] usb 4-1: string descriptor 0 read error: -71 [ 1718.723003][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1718.752799][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.910004][ T24] usb 4-1: can't set config #1, error -71 [ 1718.917658][ T24] usb 4-1: USB disconnect, device number 98 [ 1719.024984][T24801] netlink: 316 bytes leftover after parsing attributes in process `syz.3.5424'. [ 1719.110249][ T1206] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1719.276470][ T1206] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1719.318624][ T1206] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1719.362795][ T1206] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1719.386648][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.428581][ T1206] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1719.670178][ T1206] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1719.684032][T24228] udevd[24228]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1719.929031][T24809] FAULT_INJECTION: forcing a failure. [ 1719.929031][T24809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1720.030536][T24809] CPU: 1 UID: 0 PID: 24809 Comm: syz.3.5427 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1720.030567][T24809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1720.030581][T24809] Call Trace: [ 1720.030590][T24809] [ 1720.030599][T24809] dump_stack_lvl+0x189/0x250 [ 1720.030638][T24809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1720.030667][T24809] ? __pfx__printk+0x10/0x10 [ 1720.030700][T24809] should_fail_ex+0x414/0x560 [ 1720.030727][T24809] _copy_to_user+0x31/0xb0 [ 1720.030760][T24809] simple_read_from_buffer+0xe1/0x170 [ 1720.030791][T24809] proc_fail_nth_read+0x1df/0x250 [ 1720.030825][T24809] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1720.030858][T24809] ? rw_verify_area+0x258/0x650 [ 1720.030881][T24809] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1720.030912][T24809] vfs_read+0x1fd/0x980 [ 1720.030941][T24809] ? __pfx___mutex_lock+0x10/0x10 [ 1720.030969][T24809] ? __pfx_vfs_read+0x10/0x10 [ 1720.030997][T24809] ? __fget_files+0x2a/0x420 [ 1720.031029][T24809] ? __fget_files+0x3a0/0x420 [ 1720.031055][T24809] ? __fget_files+0x2a/0x420 [ 1720.031091][T24809] ksys_read+0x145/0x250 [ 1720.031114][T24809] ? rcu_is_watching+0x15/0xb0 [ 1720.031135][T24809] ? __pfx_ksys_read+0x10/0x10 [ 1720.031162][T24809] ? do_syscall_64+0xba/0x210 [ 1720.031193][T24809] do_syscall_64+0xf6/0x210 [ 1720.031222][T24809] ? clear_bhb_loop+0x60/0xb0 [ 1720.031247][T24809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1720.031266][T24809] RIP: 0033:0x7f77df38d37c [ 1720.031285][T24809] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1720.031320][T24809] RSP: 002b:00007f77e02d2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1720.031351][T24809] RAX: ffffffffffffffda RBX: 00007f77df5b5fa0 RCX: 00007f77df38d37c [ 1720.031367][T24809] RDX: 000000000000000f RSI: 00007f77e02d20a0 RDI: 0000000000000004 [ 1720.031381][T24809] RBP: 00007f77e02d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1720.031395][T24809] R10: 000000000000003a R11: 0000000000000246 R12: 0000000000000001 [ 1720.031408][T24809] R13: 0000000000000000 R14: 00007f77df5b5fa0 R15: 00007f77df6dfa28 [ 1720.031441][T24809] [ 1720.549215][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 1720.549251][ T30] audit: type=1800 audit(1747436658.761:11410): pid=24814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5429" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1720.831923][ T30] audit: type=1326 audit(1747436659.051:11411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24820 comm="syz.2.5432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45edf8e969 code=0x7ffc0000 [ 1720.866750][ T30] audit: type=1326 audit(1747436659.071:11412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24820 comm="syz.2.5432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f45edf8e969 code=0x7ffc0000 [ 1720.895758][ T30] audit: type=1326 audit(1747436659.071:11413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24820 comm="syz.2.5432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45edf8e969 code=0x7ffc0000 [ 1720.923561][ T30] audit: type=1326 audit(1747436659.071:11414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24820 comm="syz.2.5432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f45edf8d2d0 code=0x7ffc0000 [ 1720.950498][ T30] audit: type=1326 audit(1747436659.071:11415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24820 comm="syz.2.5432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45edf8e56b code=0x7ffc0000 [ 1720.975073][ T30] audit: type=1326 audit(1747436659.071:11416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24820 comm="syz.2.5432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45edf8e56b code=0x7ffc0000 [ 1720.998220][ T30] audit: type=1326 audit(1747436659.071:11417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24820 comm="syz.2.5432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45edf8e56b code=0x7ffc0000 [ 1721.021019][ T1206] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1721.030239][ T30] audit: type=1326 audit(1747436659.071:11418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24820 comm="syz.2.5432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45edf8e56b code=0x7ffc0000 [ 1721.093280][ T30] audit: type=1326 audit(1747436659.191:11419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24820 comm="syz.2.5432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45edf8e56b code=0x7ffc0000 [ 1721.116445][ T24] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1721.191234][ T1206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1721.204067][ T1206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1721.214584][ T1206] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1721.223953][ T1206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.243547][ T1206] usb 5-1: config 0 descriptor?? [ 1721.280746][ T24] usb 3-1: too many configurations: 253, using maximum allowed: 8 [ 1721.329659][T10248] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1721.917498][T24827] syzkaller0: entered allmulticast mode [ 1722.007413][T10248] usb 4-1: Using ep0 maxpacket: 8 [ 1722.020628][T24827] syzkaller0 (unregistering): left allmulticast mode [ 1722.028723][T10248] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.039836][T10248] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 1722.269800][T10248] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 1722.310972][T10248] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1722.322388][T10248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.338230][T10248] usb 4-1: Product: syz [ 1722.347688][T10248] usb 4-1: Manufacturer: syz [ 1722.360259][T10248] usb 4-1: SerialNumber: syz [ 1722.371623][ T1206] usbhid 5-1:0.0: can't add hid device: -71 [ 1722.387285][T10248] usb 4-1: config 0 descriptor?? [ 1722.391852][ T1206] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1722.412905][T24815] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1722.433313][ T1206] usb 5-1: USB disconnect, device number 76 [ 1722.579116][T10248] usb 1-1: USB disconnect, device number 40 [ 1722.597455][T24793] delete_channel: no stack [ 1723.764629][ T5893] usb 4-1: USB disconnect, device number 99 [ 1723.902372][ T24] usb 3-1: string descriptor 0 read error: -71 [ 1723.908712][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1723.936109][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.955012][ T24] usb 3-1: can't set config #1, error -71 [ 1723.963101][ T24] usb 3-1: USB disconnect, device number 105 [ 1724.229788][T10248] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 1724.403252][T10248] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1724.442168][T10248] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1724.484038][T10248] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1724.518087][T10248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.535004][T10248] usb 5-1: Product: syz [ 1724.539323][T10248] usb 5-1: Manufacturer: syz [ 1724.544222][T10248] usb 5-1: SerialNumber: syz [ 1724.712967][T24858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5440'. [ 1724.765350][T10248] usb 5-1: 0:2 : does not exist [ 1724.791134][T10248] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1724.841634][T10248] usb 5-1: USB disconnect, device number 77 [ 1724.924700][T24228] udevd[24228]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1725.562311][T24864] FAULT_INJECTION: forcing a failure. [ 1725.562311][T24864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1725.580367][T24864] CPU: 1 UID: 0 PID: 24864 Comm: syz.4.5443 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1725.580390][T24864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1725.580400][T24864] Call Trace: [ 1725.580406][T24864] [ 1725.580414][T24864] dump_stack_lvl+0x189/0x250 [ 1725.580439][T24864] ? __lock_acquire+0xaac/0xd20 [ 1725.580464][T24864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1725.580487][T24864] ? __pfx__printk+0x10/0x10 [ 1725.580502][T24864] ? __might_fault+0xb0/0x130 [ 1725.580531][T24864] should_fail_ex+0x414/0x560 [ 1725.580552][T24864] _copy_to_iter+0x3f5/0x15a0 [ 1725.580580][T24864] ? __pfx__copy_to_iter+0x10/0x10 [ 1725.580600][T24864] ? rep_movs_alternative+0x11/0x90 [ 1725.580618][T24864] ? _copy_to_iter+0x4c3/0x15a0 [ 1725.580645][T24864] __skb_datagram_iter+0x100/0x960 [ 1725.580669][T24864] ? __pfx__copy_to_iter+0x10/0x10 [ 1725.580687][T24864] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1725.580712][T24864] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1725.580735][T24864] skb_copy_datagram_iter+0xc5/0x230 [ 1725.580761][T24864] tun_do_read+0x136e/0x1e70 [ 1725.580799][T24864] ? __pfx_tun_do_read+0x10/0x10 [ 1725.580824][T24864] ? tun_get+0x1c/0x2f0 [ 1725.580879][T24864] ? __pfx_default_wake_function+0x10/0x10 [ 1725.580903][T24864] ? tun_get+0x1c/0x2f0 [ 1725.580923][T24864] ? tun_get+0x1c/0x2f0 [ 1725.580948][T24864] tun_chr_read_iter+0x13b/0x260 [ 1725.580973][T24864] do_iter_readv_writev+0x56e/0x7f0 [ 1725.580995][T24864] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1725.581018][T24864] ? bpf_lsm_file_permission+0x9/0x20 [ 1725.581037][T24864] ? security_file_permission+0x75/0x290 [ 1725.581062][T24864] ? rw_verify_area+0x258/0x650 [ 1725.581082][T24864] vfs_readv+0x257/0x840 [ 1725.581108][T24864] ? __pfx_vfs_readv+0x10/0x10 [ 1725.581139][T24864] ? __fget_files+0x2a/0x420 [ 1725.581163][T24864] ? __fget_files+0x3a0/0x420 [ 1725.581182][T24864] ? __fget_files+0x2a/0x420 [ 1725.581208][T24864] do_readv+0x14d/0x2d0 [ 1725.581231][T24864] ? __pfx_do_readv+0x10/0x10 [ 1725.581255][T24864] ? do_syscall_64+0xba/0x210 [ 1725.581278][T24864] do_syscall_64+0xf6/0x210 [ 1725.581298][T24864] ? clear_bhb_loop+0x60/0xb0 [ 1725.581317][T24864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.581332][T24864] RIP: 0033:0x7fb31538e969 [ 1725.581344][T24864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1725.581358][T24864] RSP: 002b:00007fb31619d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1725.581374][T24864] RAX: ffffffffffffffda RBX: 00007fb3155b5fa0 RCX: 00007fb31538e969 [ 1725.581385][T24864] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1725.581394][T24864] RBP: 00007fb31619d090 R08: 0000000000000000 R09: 0000000000000000 [ 1725.581404][T24864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1725.581413][T24864] R13: 0000000000000000 R14: 00007fb3155b5fa0 R15: 00007fb3156dfa28 [ 1725.581434][T24864] [ 1726.289797][ T24] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1726.451718][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1726.484619][ T24] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1726.506076][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.538989][ T24] usb 5-1: config 0 descriptor?? [ 1726.566459][T24873] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1726.615934][T24887] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5451'. [ 1727.019119][ T24] elan 0003:04F3:0755.0035: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 1727.196907][T10248] usb 5-1: USB disconnect, device number 78 [ 1727.240766][T24892] fido_id[24892]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1728.079568][T10248] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1728.239970][T10248] usb 5-1: Using ep0 maxpacket: 16 [ 1728.247177][T24911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1728.273999][T24911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1728.318962][T10248] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1728.335944][T10248] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1728.360846][T10248] usb 5-1: can't read configurations, error -71 [ 1728.592391][T24918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5460'. [ 1729.109236][T24927] can: request_module (can-proto-4) failed. [ 1729.960186][T24942] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.5466' sets config #0 [ 1729.970283][T24942] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.5466' sets config #1 [ 1730.243922][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.250308][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.769716][ T5893] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1731.074634][T24951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5468'. [ 1731.149602][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 1731.161597][ T5893] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 1731.210804][ T5893] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 1731.219257][ T5893] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1731.310576][ T5893] usb 3-1: config 250 has no interface number 0 [ 1731.430403][ T5893] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1731.489567][T10248] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1731.874203][T10248] usb 2-1: Using ep0 maxpacket: 16 [ 1731.879433][ T5893] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1731.973134][ T5893] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1731.989060][T10248] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1732.036403][T10248] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1732.045721][ T5893] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1732.123236][ T5893] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1732.211515][ T5893] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1732.470629][T10248] usb 2-1: string descriptor 0 read error: -22 [ 1732.476976][T10248] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 1732.528551][ T5893] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1732.597599][T10248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.608349][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1732.646025][ T5893] usb 3-1: Product: syz [ 1732.664644][ T5893] usb 3-1: SerialNumber: syz [ 1732.714836][ T5893] hub 3-1:250.228: bad descriptor, ignoring hub [ 1732.725198][ T5893] hub 3-1:250.228: probe with driver hub failed with error -5 [ 1732.850542][T24956] syz.0.5469: attempt to access beyond end of device [ 1732.850542][T24956] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1732.917274][ T5893] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 106 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1733.239859][ T5893] usb 3-1: USB disconnect, device number 106 [ 1733.455035][ T5893] usblp0: removed [ 1733.610051][T24953] syzkaller1: entered allmulticast mode [ 1733.829940][ T24] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1733.992199][ T24] usb 4-1: config 2 has an invalid interface number: 86 but max is 0 [ 1734.007925][ T24] usb 4-1: config 2 has no interface number 0 [ 1734.018030][ T24] usb 4-1: config 2 interface 86 has no altsetting 0 [ 1734.033553][ T24] usb 4-1: New USB device found, idVendor=12d1, idProduct=142f, bcdDevice= 0.00 [ 1734.047290][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.062848][ T24] usb 4-1: Product: syz [ 1734.067282][ T24] usb 4-1: Manufacturer: syz [ 1734.073347][ T24] usb 4-1: SerialNumber: syz [ 1734.347701][ T24] usb-storage 4-1:2.86: USB Mass Storage device detected [ 1734.397991][ T24] option 4-1:2.86: GSM modem (1-port) converter detected [ 1734.420998][ T24] usb 4-1: USB disconnect, device number 100 [ 1734.428669][ T24] option 4-1:2.86: device disconnected [ 1734.669764][T10248] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1734.857135][T10248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1734.886266][T10248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1734.901342][T10248] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1734.914707][T10248] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1734.936126][T10248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.948231][T10248] usb 3-1: config 0 descriptor?? [ 1735.399750][ T5893] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1735.524973][ T24] usb 2-1: USB disconnect, device number 119 [ 1735.562123][ T5893] usb 4-1: device descriptor read/64, error -71 [ 1735.823187][ T5893] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1735.984281][ T5893] usb 4-1: device descriptor read/64, error -71 [ 1736.100051][ T5893] usb usb4-port1: attempt power cycle [ 1736.259719][ T24] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1736.412189][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1736.421884][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1736.439554][ T5893] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1736.466103][ T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1736.490290][ T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1736.500463][ T5893] usb 4-1: device descriptor read/8, error -71 [ 1736.513390][ T24] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 1736.542405][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1736.557465][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.582076][ T24] usb 2-1: Product: syz [ 1736.586796][ T24] usb 2-1: Manufacturer: syz [ 1736.602614][ T24] usb 2-1: SerialNumber: syz [ 1736.739803][ T5893] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1736.780477][ T5893] usb 4-1: device descriptor read/8, error -71 [ 1736.908898][ T24] usb 2-1: USB disconnect, device number 120 [ 1736.910104][ T5893] usb usb4-port1: unable to enumerate USB device [ 1737.005430][T24228] udevd[24228]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1737.327669][T10248] usbhid 3-1:0.0: can't add hid device: -71 [ 1737.349787][T10248] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1737.390904][T10248] usb 3-1: USB disconnect, device number 107 [ 1737.471652][ T5893] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1737.689557][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 1737.696911][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1737.716657][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1737.726621][ T5893] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1737.742942][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.786957][ T5893] usb 1-1: config 0 descriptor?? [ 1737.835120][T25020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5487'. [ 1737.844733][T25020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5487'. [ 1738.297007][ T24] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 1738.390984][ T5893] playstation 0003:054C:05C4.0036: invalid report_count 1553694380 [ 1738.495020][ T5893] playstation 0003:054C:05C4.0036: item 0 4 1 9 parsing failed [ 1738.570267][ T5893] playstation 0003:054C:05C4.0036: Parse failed [ 1738.604350][ T5893] playstation 0003:054C:05C4.0036: probe with driver playstation failed with error -22 [ 1738.704750][ T24] usb 5-1: config 0 has no interfaces? [ 1738.725591][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1738.738097][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.819579][ T24] usb 5-1: Product: syz [ 1738.823801][ T24] usb 5-1: Manufacturer: syz [ 1738.867969][ T24] usb 5-1: SerialNumber: syz [ 1738.888720][ T24] usb 5-1: config 0 descriptor?? [ 1739.039792][ T24] usb 1-1: USB disconnect, device number 41 [ 1739.990007][ T24] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 1740.157340][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1740.220997][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1740.268588][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1740.359700][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1740.378604][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1740.474914][ T24] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1740.490885][T25042] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1740.510998][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.566235][ T24] usb 3-1: Product: syz [ 1740.595623][ T24] usb 3-1: Manufacturer: syz [ 1740.630374][ T24] usb 3-1: SerialNumber: syz [ 1740.690941][ T24] usb 3-1: config 0 descriptor?? [ 1740.778416][ T24] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input90 [ 1740.965394][T25055] FAULT_INJECTION: forcing a failure. [ 1740.965394][T25055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1741.003542][T25038] netlink: 'syz.2.5493': attribute type 1 has an invalid length. [ 1741.034117][T25055] CPU: 0 UID: 0 PID: 25055 Comm: syz.1.5497 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1741.034147][T25055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1741.034161][T25055] Call Trace: [ 1741.034170][T25055] [ 1741.034181][T25055] dump_stack_lvl+0x189/0x250 [ 1741.034214][T25055] ? __lock_acquire+0xaac/0xd20 [ 1741.034250][T25055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1741.034281][T25055] ? __pfx__printk+0x10/0x10 [ 1741.034304][T25055] ? __might_fault+0xb0/0x130 [ 1741.034345][T25055] should_fail_ex+0x414/0x560 [ 1741.034375][T25055] strncpy_from_user+0x36/0x290 [ 1741.034401][T25055] getname_flags+0xf3/0x540 [ 1741.034446][T25055] __x64_sys_unlink+0x3a/0x50 [ 1741.034468][T25055] do_syscall_64+0xf6/0x210 [ 1741.034496][T25055] ? clear_bhb_loop+0x60/0xb0 [ 1741.034522][T25055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.034552][T25055] RIP: 0033:0x7f710df8e969 [ 1741.034571][T25055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1741.034588][T25055] RSP: 002b:00007f710ed74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 1741.034610][T25055] RAX: ffffffffffffffda RBX: 00007f710e1b6160 RCX: 00007f710df8e969 [ 1741.034626][T25055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 1741.034638][T25055] RBP: 00007f710ed74090 R08: 0000000000000000 R09: 0000000000000000 [ 1741.034651][T25055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1741.034663][T25055] R13: 0000000000000000 R14: 00007f710e1b6160 R15: 00007f710e2dfa28 [ 1741.034694][T25055] [ 1741.323469][ T24] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1741.457443][ T5893] usb 5-1: USB disconnect, device number 81 [ 1741.529929][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1741.540524][ T24] usb 4-1: config 0 has an invalid interface number: 40 but max is 0 [ 1741.555403][ T24] usb 4-1: config 0 has no interface number 0 [ 1741.574434][ T24] usb 4-1: config 0 interface 40 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1741.604719][ T24] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1741.614302][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.631801][ T24] usb 4-1: Product: syz [ 1741.638096][ T24] usb 4-1: Manufacturer: syz [ 1741.648107][ T24] usb 4-1: SerialNumber: syz [ 1741.710222][ T24] usb 4-1: config 0 descriptor?? [ 1741.733823][T25054] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1741.793827][ T24] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1741.883031][T25068] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5502'. [ 1742.235620][T25054] tipc: Failed to remove unknown binding: 66,1,1/6:868238398/868238400 [ 1742.244647][T25054] tipc: Failed to remove unknown binding: 66,1,1/6:868238398/868238400 [ 1742.890027][ T53] usb 4-1: Failed to submit usb control message: -110 [ 1742.904880][ T53] usb 4-1: unable to send the bmi data to the device: -110 [ 1742.943179][ T53] usb 4-1: unable to get target info from device [ 1742.973874][ T53] usb 4-1: could not get target info (-110) [ 1743.038534][ T53] usb 4-1: could not probe fw (-110) [ 1743.387226][T25091] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1743.400419][T25091] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1744.156521][T25097] FAULT_INJECTION: forcing a failure. [ 1744.156521][T25097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1744.175222][ T5893] usb 3-1: USB disconnect, device number 108 [ 1744.219180][ T24] usb 4-1: USB disconnect, device number 105 [ 1744.243325][T25099] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5508'. [ 1744.251759][T25097] CPU: 1 UID: 0 PID: 25097 Comm: syz.0.5507 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1744.251794][T25097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1744.251809][T25097] Call Trace: [ 1744.251819][T25097] [ 1744.251828][T25097] dump_stack_lvl+0x189/0x250 [ 1744.251871][T25097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1744.251906][T25097] ? __pfx__printk+0x10/0x10 [ 1744.251942][T25097] should_fail_ex+0x414/0x560 [ 1744.251982][T25097] _copy_to_user+0x31/0xb0 [ 1744.252018][T25097] simple_read_from_buffer+0xe1/0x170 [ 1744.252054][T25097] proc_fail_nth_read+0x1df/0x250 [ 1744.252092][T25097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1744.252129][T25097] ? rw_verify_area+0x258/0x650 [ 1744.252155][T25097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1744.252190][T25097] vfs_read+0x1fd/0x980 [ 1744.252222][T25097] ? __pfx___mutex_lock+0x10/0x10 [ 1744.252254][T25097] ? __pfx_vfs_read+0x10/0x10 [ 1744.252283][T25097] ? __fget_files+0x2a/0x420 [ 1744.252316][T25097] ? __fget_files+0x3a0/0x420 [ 1744.252342][T25097] ? __fget_files+0x2a/0x420 [ 1744.252380][T25097] ksys_read+0x145/0x250 [ 1744.252407][T25097] ? __pfx_ksys_read+0x10/0x10 [ 1744.252436][T25097] ? do_syscall_64+0xba/0x210 [ 1744.252472][T25097] do_syscall_64+0xf6/0x210 [ 1744.252505][T25097] ? clear_bhb_loop+0x60/0xb0 [ 1744.252536][T25097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1744.252559][T25097] RIP: 0033:0x7fb4e418d37c [ 1744.252580][T25097] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1744.252601][T25097] RSP: 002b:00007fb4e50e2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1744.252624][T25097] RAX: ffffffffffffffda RBX: 00007fb4e43b5fa0 RCX: 00007fb4e418d37c [ 1744.252641][T25097] RDX: 000000000000000f RSI: 00007fb4e50e20a0 RDI: 0000000000000015 [ 1744.252656][T25097] RBP: 00007fb4e50e2090 R08: 0000000000000000 R09: 0000000000000000 [ 1744.252671][T25097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1744.252685][T25097] R13: 0000000000000000 R14: 00007fb4e43b5fa0 R15: 00007fb4e44dfa28 [ 1744.252719][T25097] [ 1744.499807][T25099] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5508'. [ 1744.909789][ T5893] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1744.941051][T10248] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1745.020783][T25124] binder: BINDER_SET_CONTEXT_MGR already set [ 1745.033256][T25124] binder: 25122:25124 ioctl 4018620d 200000000100 returned -16 [ 1745.089764][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 1745.107455][T10248] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1745.139124][ T5893] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1745.157531][ T5893] usb 3-1: config 0 has no interface number 0 [ 1745.169568][T10248] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1745.218035][ T5893] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1745.233250][T10248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.241644][ T5893] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1745.253516][T10248] usb 1-1: config 0 descriptor?? [ 1745.265717][ T5893] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1745.269313][T25130] netlink: 'syz.3.5520': attribute type 39 has an invalid length. [ 1745.283317][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.294358][T10248] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1745.381477][ T5893] usb 3-1: Product: syz [ 1745.395903][ T5893] usb 3-1: Manufacturer: syz [ 1745.400045][ T24] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1745.413197][ T5893] usb 3-1: SerialNumber: syz [ 1745.425051][ T5893] usb 3-1: config 0 descriptor?? [ 1745.565532][ T24] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1745.578722][ T24] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1745.598263][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1745.634781][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.650876][ T5893] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1745.715908][ T5893] cx231xx 3-1:0.1: Not found matching IAD interface [ 1745.756291][ T5893] usb 3-1: USB disconnect, device number 109 [ 1745.766034][T25134] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5521'. [ 1745.873897][T25127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1745.882870][T25127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1745.947871][T25127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1745.959372][T25127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1746.043115][T25137] FAULT_INJECTION: forcing a failure. [ 1746.043115][T25137] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1746.084256][T25137] CPU: 0 UID: 0 PID: 25137 Comm: syz.3.5522 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1746.084289][T25137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1746.084303][T25137] Call Trace: [ 1746.084313][T25137] [ 1746.084323][T25137] dump_stack_lvl+0x189/0x250 [ 1746.084364][T25137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1746.084397][T25137] ? __pfx__printk+0x10/0x10 [ 1746.084422][T25137] ? fs_reclaim_acquire+0x7d/0x100 [ 1746.084467][T25137] should_fail_ex+0x414/0x560 [ 1746.084497][T25137] prepare_alloc_pages+0x213/0x610 [ 1746.084539][T25137] __alloc_frozen_pages_noprof+0x123/0x370 [ 1746.084565][T25137] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1746.084598][T25137] ? policy_nodemask+0x27c/0x720 [ 1746.084635][T25137] alloc_pages_mpol+0x232/0x4a0 [ 1746.084671][T25137] vma_alloc_folio_noprof+0xe4/0x200 [ 1746.084705][T25137] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1746.084750][T25137] folio_prealloc+0x30/0x180 [ 1746.084784][T25137] do_wp_page+0x123a/0x5760 [ 1746.084835][T25137] ? __pfx_do_wp_page+0x10/0x10 [ 1746.084859][T25137] ? do_raw_spin_lock+0x121/0x290 [ 1746.084888][T25137] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1746.084927][T25137] __handle_mm_fault+0x1028/0x5380 [ 1746.084976][T25137] ? __pfx___handle_mm_fault+0x10/0x10 [ 1746.085021][T25137] ? follow_page_pte+0xdee/0x13c0 [ 1746.085061][T25137] handle_mm_fault+0x3f6/0x8c0 [ 1746.085107][T25137] __get_user_pages+0x16f0/0x2a40 [ 1746.085170][T25137] ? __pfx___get_user_pages+0x10/0x10 [ 1746.085198][T25137] ? __gup_longterm_locked+0xbf7/0x15b0 [ 1746.085226][T25137] ? down_read_killable+0x1d1/0x350 [ 1746.085258][T25137] ? try_get_folio+0x633/0x660 [ 1746.085291][T25137] __gup_longterm_locked+0xd66/0x15b0 [ 1746.085336][T25137] ? try_grab_folio_fast+0x337/0x4d0 [ 1746.085372][T25137] ? sanity_check_pinned_pages+0x119b/0x1290 [ 1746.085426][T25137] gup_fast_fallback+0x1843/0x1d60 [ 1746.085453][T25137] ? is_bpf_text_address+0x292/0x2b0 [ 1746.085521][T25137] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1746.085550][T25137] ? stack_depot_save_flags+0x40/0x910 [ 1746.085582][T25137] ? pin_user_pages_fast+0x4d/0xb0 [ 1746.085614][T25137] iov_iter_extract_pages+0x35a/0x5e0 [ 1746.085657][T25137] extract_iter_to_sg+0xdeb/0x2480 [ 1746.085701][T25137] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 1746.085750][T25137] ? __asan_memset+0x22/0x50 [ 1746.085776][T25137] af_alg_get_rsgl+0x436/0x810 [ 1746.085821][T25137] skcipher_recvmsg+0x3c0/0x11c0 [ 1746.085853][T25137] ? aa_sk_perm+0x81e/0x950 [ 1746.085890][T25137] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1746.085920][T25137] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1746.085946][T25137] ? security_socket_recvmsg+0x7e/0x2e0 [ 1746.085978][T25137] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1746.086004][T25137] sock_recvmsg+0x229/0x270 [ 1746.086034][T25137] ____sys_recvmsg+0x1c9/0x460 [ 1746.086075][T25137] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1746.086132][T25137] ? import_iovec+0x74/0xa0 [ 1746.086168][T25137] ___sys_recvmsg+0x1b5/0x510 [ 1746.086208][T25137] ? __pfx____sys_recvmsg+0x10/0x10 [ 1746.086270][T25137] ? __fget_files+0x3a0/0x420 [ 1746.086313][T25137] __x64_sys_recvmsg+0x198/0x260 [ 1746.086349][T25137] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1746.086400][T25137] ? do_syscall_64+0xba/0x210 [ 1746.086435][T25137] do_syscall_64+0xf6/0x210 [ 1746.086466][T25137] ? clear_bhb_loop+0x60/0xb0 [ 1746.086494][T25137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1746.086516][T25137] RIP: 0033:0x7f77df38e969 [ 1746.086536][T25137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1746.086555][T25137] RSP: 002b:00007f77e02d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1746.086579][T25137] RAX: ffffffffffffffda RBX: 00007f77df5b5fa0 RCX: 00007f77df38e969 [ 1746.086596][T25137] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000005 [ 1746.086610][T25137] RBP: 00007f77e02d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1746.086624][T25137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1746.086636][T25137] R13: 0000000000000000 R14: 00007f77df5b5fa0 R15: 00007f77df6dfa28 [ 1746.086670][T25137] [ 1746.489092][ C0] vkms_vblank_simulate: vblank timer overrun [ 1746.584010][ T24] usb 2-1: USB disconnect, device number 121 [ 1747.389687][T10248] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1747.402282][T25154] Unknown options in mask 5 [ 1747.661553][T10248] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1747.678913][T10248] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1747.727580][ T5893] usb 1-1: USB disconnect, device number 42 [ 1747.742676][T10248] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1747.782924][T10248] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1747.831275][T10248] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1747.853353][T10248] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.897223][T10248] usb 4-1: config 0 descriptor?? [ 1748.259942][ T5893] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1748.671931][ T5893] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 1748.680316][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1748.691071][ T5893] usb 5-1: config 0 has no interface number 0 [ 1748.705029][T10248] usbhid 4-1:0.0: can't add hid device: -71 [ 1748.723769][T10248] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1748.732376][ T5893] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 65372, setting to 64 [ 1748.762183][T10248] usb 4-1: USB disconnect, device number 106 [ 1748.775454][ T5893] usb 5-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1748.821778][ T5893] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1748.843417][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.847580][T25182] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) ! [ 1748.859509][ T5893] usb 5-1: Product: syz [ 1748.867822][ T5893] usb 5-1: Manufacturer: syz [ 1748.880320][ T5893] usb 5-1: SerialNumber: syz [ 1748.970757][ T5893] usb 5-1: config 0 descriptor?? [ 1749.000771][T25168] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1749.037764][ T5893] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1749.048819][ T5893] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1749.062610][ T5893] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1749.154458][T25166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5529'. [ 1749.244290][ T5893] usb 5-1: USB disconnect, device number 82 [ 1749.289509][ T5893] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1749.369549][ T5893] cyberjack 5-1:0.69: device disconnected [ 1749.809724][ T24] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1750.011282][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1750.022800][ T24] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 1750.054844][ T24] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 1750.233975][ T24] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1750.328107][ T24] usb 2-1: config 250 has no interface number 0 [ 1750.384362][ T24] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1750.416899][ T24] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1750.433851][ T24] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1750.481876][ T24] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1750.578227][ T24] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1750.785035][ T24] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1750.813714][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1750.830117][ T24] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1750.845114][ T24] usb 2-1: Product: syz [ 1750.849331][ T24] usb 2-1: SerialNumber: syz [ 1750.867556][ T24] hub 2-1:250.228: bad descriptor, ignoring hub [ 1750.891597][ T24] hub 2-1:250.228: probe with driver hub failed with error -5 [ 1750.929755][T10248] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 1751.093399][ T24] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 122 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1751.113356][T10248] usb 1-1: config 0 has no interfaces? [ 1751.126634][T10248] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1751.166628][T10248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.296825][T10248] usb 1-1: Product: syz [ 1751.328453][T10248] usb 1-1: Manufacturer: syz [ 1751.357987][T10248] usb 1-1: SerialNumber: syz [ 1751.400851][T25211] bridge5: entered allmulticast mode [ 1751.428204][T25210] bridge5: left allmulticast mode [ 1751.533360][T10248] usb 1-1: config 0 descriptor?? [ 1751.875211][T25193] usb 2-1: reset high-speed USB device number 122 using dummy_hcd [ 1752.409693][T10248] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1752.573271][T10248] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1752.582650][T10248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.606348][T10248] usb 3-1: Product: syz [ 1752.620530][T10248] usb 3-1: Manufacturer: syz [ 1752.628586][T25190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1752.647343][T10248] usb 3-1: SerialNumber: syz [ 1752.663809][T10248] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1752.695961][T25190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1752.716227][ T5893] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1752.786475][T25190] loop2: detected capacity change from 0 to 7 [ 1752.832130][T24228] Dev loop2: unable to read RDB block 7 [ 1752.849293][T24228] loop2: unable to read partition table [ 1752.991690][T24228] loop2: partition table beyond EOD, truncated [ 1753.101269][T25190] Dev loop2: unable to read RDB block 7 [ 1753.129679][T25190] loop2: unable to read partition table [ 1753.135791][T25190] loop2: partition table beyond EOD, truncated [ 1753.148632][T10248] usb 3-1: USB disconnect, device number 110 [ 1753.240936][T25190] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1753.484930][ T24] usb 2-1: USB disconnect, device number 122 [ 1753.506671][ T24] usblp0: removed [ 1753.822978][ T5893] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1753.862692][ T5893] ath9k_htc: Failed to initialize the device [ 1753.886102][T10248] usb 3-1: ath9k_htc: USB layer deinitialized [ 1753.891564][T25228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5545'. [ 1754.409660][T23932] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1754.480287][T10248] usb 1-1: USB disconnect, device number 43 [ 1754.824498][T25245] loop8: detected capacity change from 0 to 1 [ 1754.834520][T25245] Dev loop8: unable to read RDB block 1 [ 1755.116904][T25245] loop8: unable to read partition table [ 1755.564097][T25245] loop8: partition table beyond EOD, truncated [ 1755.570640][T25245] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1755.839531][T23932] usb 2-1: device descriptor read/64, error -71 [ 1756.089735][T23932] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1756.742673][T25263] ip6t_srh: unknown srh match flags B153 [ 1757.509657][ T24] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1757.816825][ T24] usb 5-1: config 0 has no interfaces? [ 1758.003848][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1758.067613][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.112746][ T24] usb 5-1: Product: syz [ 1758.116964][ T24] usb 5-1: Manufacturer: syz [ 1758.192324][ T24] usb 5-1: SerialNumber: syz [ 1758.241033][ T24] usb 5-1: config 0 descriptor?? [ 1758.679604][ T24] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1758.750359][T25283] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5561'. [ 1758.839794][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1758.850209][ T24] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1758.912021][T25287] loop7: detected capacity change from 0 to 7 [ 1758.948900][T25287] Dev loop7: unable to read RDB block 7 [ 1758.972058][T25287] loop7: AHDI p1 p2 [ 1759.051445][ T24] usb 4-1: config 0 has no interface number 0 [ 1759.077420][T25287] loop7: partition table partially beyond EOD, truncated [ 1759.090033][T25287] loop7: p1 start 1702000233 is beyond EOD, truncated [ 1759.114505][ T24] usb 4-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1759.170052][ T24] usb 4-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1759.209788][ T24] usb 4-1: config 0 interface 8 has no altsetting 0 [ 1759.225712][ T24] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1759.248313][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.324707][ T24] usb 4-1: config 0 descriptor?? [ 1759.974612][ T24] usbhid 4-1:0.8: can't add hid device: -71 [ 1759.983523][ T24] usbhid 4-1:0.8: probe with driver usbhid failed with error -71 [ 1760.039242][ T24] usb 4-1: USB disconnect, device number 107 [ 1760.360710][T23932] usb 5-1: USB disconnect, device number 83 [ 1760.587057][T25312] FAULT_INJECTION: forcing a failure. [ 1760.587057][T25312] name failslab, interval 1, probability 0, space 0, times 0 [ 1760.609626][ T24] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1760.620012][T25312] CPU: 1 UID: 0 PID: 25312 Comm: syz.4.5570 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1760.620042][T25312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1760.620056][T25312] Call Trace: [ 1760.620065][T25312] [ 1760.620074][T25312] dump_stack_lvl+0x189/0x250 [ 1760.620114][T25312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1760.620144][T25312] ? __pfx__printk+0x10/0x10 [ 1760.620180][T25312] should_fail_ex+0x414/0x560 [ 1760.620209][T25312] should_failslab+0xa8/0x100 [ 1760.620240][T25312] __kmalloc_cache_noprof+0x70/0x3d0 [ 1760.620269][T25312] ? sctp_add_bind_addr+0x8c/0x370 [ 1760.620304][T25312] sctp_add_bind_addr+0x8c/0x370 [ 1760.620339][T25312] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1760.620373][T25312] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1760.620403][T25312] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1760.620435][T25312] ? sctp_v6_is_any+0x64/0x80 [ 1760.620456][T25312] ? sctp_copy_one_addr+0x93/0x360 [ 1760.620489][T25312] sctp_bind_addr_copy+0xb3/0x3c0 [ 1760.620520][T25312] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1760.620551][T25312] sctp_connect_new_asoc+0x2e0/0x690 [ 1760.620577][T25312] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1760.620598][T25312] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1760.620635][T25312] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1760.620662][T25312] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1760.620700][T25312] sctp_sendmsg+0x155c/0x2810 [ 1760.620735][T25312] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1760.620761][T25312] ? aa_sk_perm+0x81e/0x950 [ 1760.620789][T25312] ? __pfx_aa_sk_perm+0x10/0x10 [ 1760.620815][T25312] ? sock_rps_record_flow+0x19/0x400 [ 1760.620851][T25312] ? inet_sendmsg+0x2f4/0x370 [ 1760.620888][T25312] __sock_sendmsg+0x19c/0x270 [ 1760.620916][T25312] ____sys_sendmsg+0x505/0x830 [ 1760.620952][T25312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1760.620992][T25312] ? import_iovec+0x74/0xa0 [ 1760.621027][T25312] ___sys_sendmsg+0x21f/0x2a0 [ 1760.621060][T25312] ? __pfx____sys_sendmsg+0x10/0x10 [ 1760.621130][T25312] ? __fget_files+0x2a/0x420 [ 1760.621157][T25312] ? __fget_files+0x3a0/0x420 [ 1760.621198][T25312] __x64_sys_sendmsg+0x19b/0x260 [ 1760.621230][T25312] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1760.621279][T25312] ? do_syscall_64+0xba/0x210 [ 1760.621312][T25312] do_syscall_64+0xf6/0x210 [ 1760.621342][T25312] ? clear_bhb_loop+0x60/0xb0 [ 1760.621368][T25312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.621388][T25312] RIP: 0033:0x7fb31538e969 [ 1760.621408][T25312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1760.621426][T25312] RSP: 002b:00007fb31619d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1760.621449][T25312] RAX: ffffffffffffffda RBX: 00007fb3155b5fa0 RCX: 00007fb31538e969 [ 1760.621465][T25312] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 1760.621479][T25312] RBP: 00007fb31619d090 R08: 0000000000000000 R09: 0000000000000000 [ 1760.621492][T25312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1760.621505][T25312] R13: 0000000000000000 R14: 00007fb3155b5fa0 R15: 00007fb3156dfa28 [ 1760.621537][T25312] [ 1761.126213][ T24] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1761.139552][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.147577][ T24] usb 1-1: Product: syz [ 1761.152954][ T24] usb 1-1: Manufacturer: syz [ 1761.157553][ T24] usb 1-1: SerialNumber: syz [ 1761.164689][ T24] usb 1-1: config 0 descriptor?? [ 1761.239867][T23932] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1761.509554][T23932] usb 4-1: Using ep0 maxpacket: 16 [ 1761.523616][ T24] hso 1-1:0.0: Failed to find BULK IN ep [ 1761.528611][T23932] usb 4-1: config 1 interface 0 altsetting 44 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1761.945074][T23932] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1761.957615][T23932] usb 4-1: language id specifier not provided by device, defaulting to English [ 1761.973025][T25318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5573'. [ 1761.992005][T23932] usb 4-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.40 [ 1762.010879][T23932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.041244][T23932] usb 4-1: Product: syz [ 1762.046901][T23932] usb 4-1: SerialNumber: syz [ 1762.073335][ T24] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1762.733946][ T24] usb 1-1: USB disconnect, device number 44 [ 1762.991837][T25316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1763.001082][T25316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1763.011538][T25316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1763.060477][T25316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1763.285600][T25316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1763.294972][T25316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1763.610060][T25316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1763.618835][T25316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1763.721793][T23932] usbhid 4-1:1.0: can't add hid device: -71 [ 1763.736469][T23932] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1763.790704][T23932] usb 4-1: USB disconnect, device number 108 [ 1763.959639][ T24] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1764.121691][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1764.131328][ T24] usb 1-1: config 13 has an invalid interface number: 50 but max is 3 [ 1764.152864][ T24] usb 1-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1764.182285][ T24] usb 1-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 1764.223920][ T24] usb 1-1: config 13 has no interface number 0 [ 1764.264570][ T24] usb 1-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 1764.329640][ T24] usb 1-1: config 13 interface 50 has no altsetting 0 [ 1764.349183][ T24] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 1764.365803][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.388356][ T24] usb 1-1: Product: syz [ 1764.406674][ T24] usb 1-1: Manufacturer: syz [ 1764.416789][ T24] usb 1-1: SerialNumber: syz [ 1764.704993][ T13] usb 1-1: Failed to submit usb control message: -71 [ 1764.722532][ T13] usb 1-1: unable to send the bmi data to the device: -71 [ 1764.729802][ T13] usb 1-1: unable to get target info from device [ 1764.737953][ T24] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1764.739551][ T13] usb 1-1: could not get target info (-71) [ 1764.753598][ T13] usb 1-1: could not probe fw (-71) [ 1764.929317][ T24] usb 1-1: USB disconnect, device number 45 [ 1765.229561][T23932] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1765.498791][T23932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1765.593534][T23932] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1765.603626][T10248] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1765.671677][T25366] fuse: Unknown parameter 'rootm' [ 1765.695048][T25367] loop8: detected capacity change from 0 to 1 [ 1765.709350][T25367] Dev loop8: unable to read RDB block 1 [ 1765.715625][T25367] loop8: unable to read partition table [ 1765.723117][T25367] loop8: partition table beyond EOD, truncated [ 1765.739871][T25367] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1765.759584][T23932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1765.819958][ T24] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1766.060790][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1766.079004][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1766.167690][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1766.169606][T23932] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1766.186651][ T24] usb 2-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 1766.207690][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.208863][T10248] usb 3-1: config 0 has no interfaces? [ 1766.239074][ T24] usb 2-1: config 0 descriptor?? [ 1766.276003][T23932] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1766.316386][T10248] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1766.336964][T10248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.345338][T23932] usb 5-1: Manufacturer: syz [ 1766.368711][T23932] usb 5-1: config 0 descriptor?? [ 1766.418426][T10248] usb 3-1: Product: syz [ 1766.431534][T23932] smsusb:smsusb_probe: board id=9, interface number 0 [ 1766.444409][T10248] usb 3-1: Manufacturer: syz [ 1766.453040][T10248] usb 3-1: SerialNumber: syz [ 1766.459420][T23932] smsusb:smsusb_probe: Device initialized with return code -19 [ 1766.475962][T10248] usb 3-1: config 0 descriptor?? [ 1766.804115][ T24] smartjoyplus 0003:0925:8866.0037: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.1-1/input0 [ 1766.829046][ T24] smartjoyplus 0003:0925:8866.0037: Force feedback for SmartJoy PLUS PS2/USB adapter [ 1766.867793][ T24] usb 2-1: USB disconnect, device number 125 [ 1766.924233][T25359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.934541][T25359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1767.097904][T25373] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5582'. [ 1767.107076][T25373] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5582'. [ 1767.129584][T23932] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1767.222524][T25372] fido_id[25372]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1767.331977][T23932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1767.375212][T23932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1767.681145][T23932] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1767.693255][T23932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.728868][T23932] usb 1-1: config 0 descriptor?? [ 1768.149712][T10248] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1768.159233][T25371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1768.202256][T25371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1768.376180][T10248] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1768.382083][ T1206] usb 5-1: USB disconnect, device number 84 [ 1768.388454][T10248] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1768.408629][T10248] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1768.418738][T10248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.444885][T10248] usb 4-1: Product: ࠾ [ 1768.449295][T10248] usb 4-1: Manufacturer: 蕚ﴐţꃌꊅ⃩ꐊ䵷锿ᦰਜ਼䠃啺끺ꜱ根﮶㖫뒨墉٩턵눷蒇֋㱂ᦾ熯ᡂ릫䮀洟箦୴䨠拳抬栟櫷睭蛇끟爹踗쮽ᗤ戺䤣쵽櫁ꏓ䡛㓗䯛潳ଣ畓ᝏᄡ珞炧锹㚻뚛쑻߂暃s컻ﳘꚌs嬧麚韮駩岏뚵쿙㟡⨥쁷瞬祏谉궬䴂ꘝ衪䚠갏痱쵦聙밇댃ș嫺ᆖ橘㨙뉼㐲⮳審짲㴳⸥蔡減抨橑✌ [ 1768.498026][T10248] usb 4-1: SerialNumber: ꧐ਯꗜ廈텢ᵼ喿㧙눿࣌紪혃큎怉豝螭平Ὼ㢁뼆∳䡗ᓌ郎ᕂ㧆壢ꯒ⋨⚕⌇ᖞ兗ᮥ醥䍈瓘㪴=ᰝ颱锖ꄲ䔀덻涿忲焂Ʋ劧䱀奭ㅅΈធᮟ왖뜟৷ꛉꊕ踥ᚹ䬈綶굁᷷♋姳Ⱙ [ 1768.596408][T25377] netlink: 'syz.1.5586': attribute type 10 has an invalid length. [ 1768.618983][T25377] macvlan0: entered allmulticast mode [ 1768.638048][T25377] veth1_vlan: entered allmulticast mode [ 1768.674076][T25377] team0: Port device macvlan0 added [ 1769.070342][T25379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1769.100109][T25379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1769.312569][T10248] usb 4-1: 0:2 : does not exist [ 1769.384995][T10248] usb 4-1: USB disconnect, device number 109 [ 1769.464400][ T5893] usb 3-1: USB disconnect, device number 111 [ 1769.531792][T24228] udevd[24228]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1769.667695][T25397] ip6t_srh: unknown srh match flags B153 [ 1769.737655][T25398] ip6t_srh: unknown srh match flags B153 [ 1769.785559][T23932] usbhid 1-1:0.0: can't add hid device: -71 [ 1769.831121][T23932] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1770.050222][T23932] usb 1-1: USB disconnect, device number 46 [ 1772.489673][T23932] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1772.527655][T25443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5602'. [ 1772.669549][T23932] usb 1-1: Using ep0 maxpacket: 8 [ 1772.687008][T23932] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 1772.706289][T23932] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1772.733955][T23932] usb 1-1: config 0 has no interfaces? [ 1772.744808][T23932] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1772.772354][T23932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.795709][T23932] usb 1-1: config 0 descriptor?? [ 1772.819771][T10248] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1772.979622][T10248] usb 2-1: Using ep0 maxpacket: 32 [ 1773.122780][T10248] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1773.257220][T10248] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1773.292633][T10248] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1773.311801][T10248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.336978][T10248] usb 2-1: config 0 descriptor?? [ 1773.391225][T23932] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1773.405146][T10248] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1773.711599][T23932] usb 5-1: config 0 has no interfaces? [ 1773.770517][T23932] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1773.844554][T23932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.944957][T23932] usb 5-1: Product: syz [ 1773.963603][T23932] usb 5-1: Manufacturer: syz [ 1773.978229][T23932] usb 5-1: SerialNumber: syz [ 1774.066671][T23932] usb 5-1: config 0 descriptor?? [ 1774.488613][T25454] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5607'. [ 1774.499093][T25454] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5607'. [ 1774.624898][T23932] usb 1-1: USB disconnect, device number 47 [ 1775.631788][ T1206] usb 2-1: USB disconnect, device number 126 [ 1776.596358][ T24] usb 5-1: USB disconnect, device number 85 [ 1776.610036][T23932] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 1776.719657][ T1206] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1776.769641][T23932] usb 2-1: device descriptor read/64, error -71 [ 1776.787072][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 1776.787086][ T30] audit: type=1326 audit(1747436715.001:11473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25499 comm="syz.0.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e418e969 code=0x50000 [ 1776.820996][ T30] audit: type=1326 audit(1747436715.001:11474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25499 comm="syz.0.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e418e969 code=0x50000 [ 1776.848362][ T30] audit: type=1326 audit(1747436715.001:11475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25499 comm="syz.0.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e418e969 code=0x50000 [ 1776.884496][ T1206] usb 3-1: Using ep0 maxpacket: 32 [ 1776.889226][ T30] audit: type=1326 audit(1747436715.001:11476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25499 comm="syz.0.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e418e969 code=0x50000 [ 1776.906686][ T1206] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1776.932640][ T30] audit: type=1326 audit(1747436715.001:11477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25499 comm="syz.0.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e418e969 code=0x50000 [ 1776.958554][ T30] audit: type=1326 audit(1747436715.001:11478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25499 comm="syz.0.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e418e969 code=0x50000 [ 1777.003506][ T1206] usb 3-1: config 0 has an invalid interface number: 192 but max is 0 [ 1777.003902][ T30] audit: type=1326 audit(1747436715.001:11479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25499 comm="syz.0.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e418e969 code=0x50000 [ 1777.039791][ T1206] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 1777.059605][ T1206] usb 3-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 1777.059609][T23932] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 1777.078580][ T1206] usb 3-1: config 0 has no interface number 0 [ 1777.085048][ T1206] usb 3-1: config 0 has no interface number 1 [ 1777.091651][ T1206] usb 3-1: config 0 has no interface number 2 [ 1777.112606][ T1206] usb 3-1: config 0 interface 51 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1777.135451][ T1206] usb 3-1: config 0 interface 51 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1777.165824][ T1206] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0xD has an invalid bInterval 129, changing to 11 [ 1777.199609][T23932] usb 2-1: device descriptor read/64, error -71 [ 1777.319684][T23932] usb usb2-port1: attempt power cycle [ 1777.469307][ T1206] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0xE has invalid maxpacket 1040, setting to 64 [ 1777.485374][ T30] audit: type=1326 audit(1747436715.001:11480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25499 comm="syz.0.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e418e969 code=0x50000 [ 1777.522609][ T1206] usb 3-1: config 0 interface 51 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 1777.566065][ T30] audit: type=1326 audit(1747436715.001:11481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25499 comm="syz.0.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e418e969 code=0x50000 [ 1777.589284][ T1206] usb 3-1: too many endpoints for config 0 interface 192 altsetting 66: 65, using maximum allowed: 30 [ 1777.602647][T25510] netlink: 'syz.3.5627': attribute type 21 has an invalid length. [ 1777.611120][T25510] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5627'. [ 1777.620496][ T1206] usb 3-1: config 0 interface 192 altsetting 66 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1777.634995][T25510] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5627'. [ 1777.715197][ T30] audit: type=1326 audit(1747436715.001:11482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25499 comm="syz.0.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e418e969 code=0x50000 [ 1777.740164][T23932] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 1777.748370][ T1206] usb 3-1: too many endpoints for config 0 interface 6 altsetting 199: 95, using maximum allowed: 30 [ 1777.785597][ T1206] usb 3-1: config 0 interface 6 altsetting 199 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1777.826238][ T1206] usb 3-1: config 0 interface 6 altsetting 199 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1777.884345][T23932] usb 2-1: device descriptor read/8, error -71 [ 1777.891451][ T1206] usb 3-1: config 0 interface 6 altsetting 199 has 3 endpoint descriptors, different from the interface descriptor's value: 95 [ 1777.935145][ T1206] usb 3-1: config 0 interface 192 has no altsetting 0 [ 1777.984798][ T1206] usb 3-1: config 0 interface 6 has no altsetting 0 [ 1778.003896][ T1206] usb 3-1: New USB device found, idVendor=0bda, idProduct=0179, bcdDevice=68.38 [ 1778.036528][ T1206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.064770][ T1206] usb 3-1: config 0 descriptor?? [ 1778.190042][T23932] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 1778.285564][T23932] usb 2-1: device descriptor read/8, error -71 [ 1778.294686][ T1206] usb 3-1: string descriptor 0 read error: -71 [ 1778.374508][ T1206] usb 3-1: USB disconnect, device number 112 [ 1778.463507][T25512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5628'. [ 1778.552194][T23932] usb usb2-port1: unable to enumerate USB device [ 1779.327200][T25491] delete_channel: no stack [ 1779.369576][T23932] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1779.439356][T25523] loop6: detected capacity change from 0 to 524287999 [ 1779.446641][T25523] buffer_io_error: 154 callbacks suppressed [ 1779.446654][T25523] Buffer I/O error on dev loop6, logical block 0, async page read [ 1779.484706][T25523] Buffer I/O error on dev loop6, logical block 0, async page read [ 1779.547298][T25523] Buffer I/O error on dev loop6, logical block 0, async page read [ 1779.549236][T25530] Buffer I/O error on dev loop6, logical block 1048575, async page read [ 1779.594830][T25523] Buffer I/O error on dev loop6, logical block 0, async page read [ 1779.619608][T23932] usb 3-1: config 0 has no interfaces? [ 1779.641861][T25523] Buffer I/O error on dev loop6, logical block 0, async page read [ 1779.643138][T23932] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1779.699673][T25523] Buffer I/O error on dev loop6, logical block 0, async page read [ 1779.707763][T25523] Buffer I/O error on dev loop6, logical block 0, async page read [ 1779.723971][T23932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.735394][T25523] Buffer I/O error on dev loop6, logical block 0, async page read [ 1779.779631][T25523] ldm_validate_partition_table(): Disk read failed. [ 1779.794382][T25523] Buffer I/O error on dev loop6, logical block 0, async page read [ 1779.836969][T23932] usb 3-1: Product: syz [ 1779.849695][T25523] Dev loop6: unable to read RDB block 0 [ 1779.867471][T23932] usb 3-1: Manufacturer: syz [ 1779.874243][T23932] usb 3-1: SerialNumber: syz [ 1779.886614][T23932] usb 3-1: config 0 descriptor?? [ 1779.896911][T25523] loop6: unable to read partition table [ 1779.909139][T25523] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1780.691707][T25542] FAULT_INJECTION: forcing a failure. [ 1780.691707][T25542] name failslab, interval 1, probability 0, space 0, times 0 [ 1780.710086][T25542] CPU: 1 UID: 0 PID: 25542 Comm: syz.3.5636 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1780.710108][T25542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1780.710117][T25542] Call Trace: [ 1780.710123][T25542] [ 1780.710130][T25542] dump_stack_lvl+0x189/0x250 [ 1780.710157][T25542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1780.710178][T25542] ? __pfx__printk+0x10/0x10 [ 1780.710196][T25542] ? __pfx___might_resched+0x10/0x10 [ 1780.710209][T25542] ? fs_reclaim_acquire+0x7d/0x100 [ 1780.710234][T25542] should_fail_ex+0x414/0x560 [ 1780.710252][T25542] should_failslab+0xa8/0x100 [ 1780.710272][T25542] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1780.710294][T25542] ? alloc_empty_file+0x55/0x1d0 [ 1780.710319][T25542] alloc_empty_file+0x55/0x1d0 [ 1780.710340][T25542] path_openat+0x107/0x3830 [ 1780.710353][T25542] ? arch_stack_walk+0xfc/0x150 [ 1780.710380][T25542] ? stack_trace_save+0x9c/0xe0 [ 1780.710397][T25542] ? stack_depot_save_flags+0x40/0x910 [ 1780.710438][T25542] ? kasan_save_track+0x4f/0x80 [ 1780.710454][T25542] ? __kasan_slab_alloc+0x6c/0x80 [ 1780.710471][T25542] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1780.710489][T25542] ? getname_flags+0xb8/0x540 [ 1780.710510][T25542] ? __pfx_path_openat+0x10/0x10 [ 1780.710523][T25542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1780.710552][T25542] do_filp_open+0x1fa/0x410 [ 1780.710569][T25542] ? __pfx_do_filp_open+0x10/0x10 [ 1780.710600][T25542] ? _raw_spin_unlock+0x28/0x50 [ 1780.710616][T25542] ? alloc_fd+0x64c/0x6c0 [ 1780.710643][T25542] do_sys_openat2+0x121/0x1c0 [ 1780.710658][T25542] ? __pfx_do_sys_openat2+0x10/0x10 [ 1780.710673][T25542] ? ksys_write+0x1f0/0x250 [ 1780.710689][T25542] ? rcu_is_watching+0x15/0xb0 [ 1780.710709][T25542] __x64_sys_creat+0x8f/0xc0 [ 1780.710726][T25542] do_syscall_64+0xf6/0x210 [ 1780.710747][T25542] ? clear_bhb_loop+0x60/0xb0 [ 1780.710765][T25542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1780.710779][T25542] RIP: 0033:0x7f77df38e969 [ 1780.710792][T25542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1780.710805][T25542] RSP: 002b:00007f77e02b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1780.710821][T25542] RAX: ffffffffffffffda RBX: 00007f77df5b6080 RCX: 00007f77df38e969 [ 1780.710832][T25542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 1780.710842][T25542] RBP: 00007f77e02b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1780.710851][T25542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1780.710860][T25542] R13: 0000000000000000 R14: 00007f77df5b6080 R15: 00007f77df6dfa28 [ 1780.710887][T25542] [ 1781.189929][T25546] loop8: detected capacity change from 0 to 1 [ 1781.351102][T25546] Dev loop8: unable to read RDB block 1 [ 1781.356786][T25546] loop8: unable to read partition table [ 1781.586460][T25546] loop8: partition table beyond EOD, truncated [ 1781.614669][T25546] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1781.847324][T25556] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5640'. [ 1781.893178][T25558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5642'. [ 1782.093799][T23932] usb 3-1: USB disconnect, device number 113 [ 1782.207429][ T1206] hid-generic C990:0003:0000.0038: unknown main item tag 0x0 [ 1782.234487][ T1206] hid-generic C990:0003:0000.0038: unknown main item tag 0x0 [ 1782.260885][ T1206] hid-generic C990:0003:0000.0038: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1782.457472][ T30] kauditd_printk_skb: 1931 callbacks suppressed [ 1782.457492][ T30] audit: type=1326 audit(1747436720.671:13414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25565 comm="syz.4.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31538e969 code=0x50000 [ 1782.539732][ T30] audit: type=1326 audit(1747436720.711:13415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25565 comm="syz.4.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31538e969 code=0x50000 [ 1782.625097][T25574] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5647'. [ 1782.661155][T25569] fido_id[25569]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1782.699658][ T30] audit: type=1326 audit(1747436720.711:13416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25565 comm="syz.4.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31538e969 code=0x50000 [ 1782.773995][ T30] audit: type=1326 audit(1747436720.711:13417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25565 comm="syz.4.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31538e969 code=0x50000 [ 1782.904207][ T30] audit: type=1326 audit(1747436720.711:13418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25565 comm="syz.4.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31538e969 code=0x50000 [ 1782.976564][ T30] audit: type=1326 audit(1747436720.711:13419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25565 comm="syz.4.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31538e969 code=0x50000 [ 1782.999722][ C1] vkms_vblank_simulate: vblank timer overrun [ 1783.066003][ T30] audit: type=1326 audit(1747436720.711:13420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25565 comm="syz.4.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31538e969 code=0x50000 [ 1783.089545][T23932] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 1783.133249][ T30] audit: type=1326 audit(1747436720.711:13421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25565 comm="syz.4.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31538e969 code=0x50000 [ 1783.186803][ T30] audit: type=1326 audit(1747436720.711:13422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25565 comm="syz.4.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31538e969 code=0x50000 [ 1783.218901][ T30] audit: type=1326 audit(1747436720.711:13423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25565 comm="syz.4.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31538e969 code=0x50000 [ 1783.349598][T23932] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1783.386380][T23932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.474665][T23932] usb 4-1: config 0 descriptor?? [ 1783.961770][T23932] [drm:udl_init] *ERROR* Selecting channel failed [ 1783.996646][T23932] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1784.057883][T23932] [drm] Initialized udl on minor 2 [ 1784.097011][T23932] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1784.116127][T23932] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1784.124926][T10248] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1784.150330][T10248] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1784.159913][T23932] usb 4-1: USB disconnect, device number 110 [ 1784.198982][T10248] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1784.205188][T25594] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5651'. [ 1784.859817][T25601] binder: BINDER_SET_CONTEXT_MGR already set [ 1784.881336][T25601] binder: 25600:25601 ioctl 4018620d 2000000000c0 returned -16 [ 1785.219304][T25608] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5657'. [ 1785.254305][T25608] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1785.625173][T25625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5661'. [ 1785.634709][T25625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5661'. [ 1785.669676][T23932] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 1785.895379][T23932] usb 3-1: config 0 has no interfaces? [ 1785.943062][T23932] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1786.014083][T10248] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1786.021167][T25631] netlink: 'syz.0.5662': attribute type 4 has an invalid length. [ 1786.048596][T23932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.147636][T23932] usb 3-1: Product: syz [ 1786.154228][T23932] usb 3-1: Manufacturer: syz [ 1786.159110][T23932] usb 3-1: SerialNumber: syz [ 1786.229052][T23932] usb 3-1: config 0 descriptor?? [ 1786.309549][T10248] usb 5-1: Using ep0 maxpacket: 16 [ 1786.395153][T10248] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1786.406060][T10248] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1786.418899][T10248] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1786.428786][T10248] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1786.453945][T10248] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1786.549029][T10248] usb 5-1: config 0 has no interface number 0 [ 1786.583618][T10248] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1786.605946][T10248] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1786.617332][T10248] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1786.646701][T10248] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1786.722850][T10248] usb 5-1: config 0 interface 125 has no altsetting 0 [ 1786.752190][T10248] usb 5-1: config 0 interface 125 has no altsetting 2 [ 1786.773165][T10248] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1786.794253][T10248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.812853][T10248] usb 5-1: Product: syz [ 1786.824956][T10248] usb 5-1: Manufacturer: syz [ 1786.831495][T10248] usb 5-1: SerialNumber: syz [ 1786.840527][T10248] usb 5-1: config 0 descriptor?? [ 1786.856427][T10248] usb 5-1: selecting invalid altsetting 2 [ 1787.264381][T25625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1787.289102][T25625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1787.489167][T25646] netlink: 39 bytes leftover after parsing attributes in process `syz.0.5664'. [ 1787.566711][T25648] netlink: 'syz.3.5665': attribute type 10 has an invalid length. [ 1787.580902][T25648] batman_adv: batadv0: Adding interface: wlan1 [ 1787.591691][T25648] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1787.655372][T25648] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 1787.919834][T10248] get_1284_register timeout [ 1787.943541][ C0] usb 5-1: async_complete: urb error -104 [ 1787.949386][ C0] usb 5-1: async_complete: urb error -104 [ 1787.955205][ C0] usb 5-1: async_complete: urb error -104 [ 1788.040046][T10248] uss720 5-1:0.125: probe with driver uss720 failed with error -5 [ 1788.451564][ T1206] usb 3-1: USB disconnect, device number 114 [ 1788.538903][T10248] usb 5-1: USB disconnect, device number 86 [ 1788.797609][ T30] kauditd_printk_skb: 2303 callbacks suppressed [ 1788.797628][ T30] audit: type=1326 audit(1747436727.011:15727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25664 comm="syz.2.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45edf8e969 code=0x50000 [ 1788.949707][T10248] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1788.999588][T23932] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1789.033908][ T30] audit: type=1326 audit(1747436727.011:15728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25664 comm="syz.2.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45edf8e969 code=0x50000 [ 1789.088346][ T30] audit: type=1326 audit(1747436727.011:15729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25664 comm="syz.2.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45edf8e969 code=0x50000 [ 1789.219147][T10248] usb 5-1: config 0 has no interfaces? [ 1789.236126][T10248] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1789.426252][T23932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1789.446040][ T30] audit: type=1326 audit(1747436727.011:15730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25664 comm="syz.2.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45edf8e969 code=0x50000 [ 1789.475900][T10248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.484302][T23932] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1789.698952][T10248] usb 5-1: Product: syz [ 1789.722469][T10248] usb 5-1: Manufacturer: syz [ 1789.727120][T10248] usb 5-1: SerialNumber: syz [ 1789.744021][ T30] audit: type=1326 audit(1747436727.011:15731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25664 comm="syz.2.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45edf8e969 code=0x50000 [ 1789.773017][T23932] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1789.839512][T10248] usb 5-1: config 0 descriptor?? [ 1789.859513][T23932] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1789.990344][T23932] usb 2-1: Manufacturer: syz [ 1790.004389][ T30] audit: type=1326 audit(1747436727.011:15732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25664 comm="syz.2.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45edf8e969 code=0x50000 [ 1790.019882][ T1206] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1790.055756][T23932] usb 2-1: config 0 descriptor?? [ 1790.113030][T23932] smsusb:smsusb_probe: board id=9, interface number 0 [ 1790.130756][T23932] smsusb:smsusb_probe: Device initialized with return code -19 [ 1790.138548][ T30] audit: type=1326 audit(1747436727.011:15733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25664 comm="syz.2.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45edf8e969 code=0x50000 [ 1790.209527][ T30] audit: type=1326 audit(1747436727.011:15734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25664 comm="syz.2.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45edf8e969 code=0x50000 [ 1790.303913][ T1206] usb 1-1: config 0 has no interfaces? [ 1790.316464][ T1206] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1790.331740][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.353089][ T30] audit: type=1326 audit(1747436727.011:15735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25664 comm="syz.2.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45edf8e969 code=0x50000 [ 1790.369667][ T1206] usb 1-1: Product: syz [ 1790.409725][ T1206] usb 1-1: Manufacturer: syz [ 1790.428082][ T1206] usb 1-1: SerialNumber: syz [ 1790.464264][ T1206] usb 1-1: config 0 descriptor?? [ 1790.485803][ T30] audit: type=1326 audit(1747436727.011:15736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25664 comm="syz.2.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45edf8e969 code=0x50000 [ 1790.728037][T25676] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5674'. [ 1790.816966][ T1206] usb 2-1: USB disconnect, device number 5 [ 1791.694253][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.700604][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.800255][ T1206] usb 5-1: USB disconnect, device number 87 [ 1792.215727][T25692] syzkaller1: left allmulticast mode [ 1792.257848][T23932] usb 1-1: USB disconnect, device number 48 [ 1792.337500][T25692] 8021q: VLANs not supported on syzkaller1 [ 1792.522443][T25702] xt_limit: Overflow, try lower: 65536/2147483648 [ 1792.754832][T25707] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1792.949551][ T1206] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 1793.102296][ T1206] usb 3-1: config 0 has no interfaces? [ 1793.115158][ T1206] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1793.125561][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.154674][ T1206] usb 3-1: Product: syz [ 1793.214130][ T1206] usb 3-1: Manufacturer: syz [ 1793.234378][ T1206] usb 3-1: SerialNumber: syz [ 1793.285857][ T1206] usb 3-1: config 0 descriptor?? [ 1793.299680][T10248] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1793.469633][T10248] usb 5-1: Using ep0 maxpacket: 8 [ 1793.470040][T25714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5684'. [ 1793.491973][T10248] usb 5-1: config 1 has too many interfaces: 252, using maximum allowed: 32 [ 1793.503269][T25714] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5684'. [ 1793.519056][T10248] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 252 [ 1793.574404][T25714] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5684'. [ 1793.607011][T10248] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1793.643461][T10248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.708063][T25721] FAULT_INJECTION: forcing a failure. [ 1793.708063][T25721] name failslab, interval 1, probability 0, space 0, times 0 [ 1793.724599][T25721] CPU: 1 UID: 0 PID: 25721 Comm: syz.0.5687 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1793.724631][T25721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1793.724646][T25721] Call Trace: [ 1793.724656][T25721] [ 1793.724666][T25721] dump_stack_lvl+0x189/0x250 [ 1793.724715][T25721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1793.724748][T25721] ? __pfx__printk+0x10/0x10 [ 1793.724777][T25721] ? __pfx___might_resched+0x10/0x10 [ 1793.724803][T25721] should_fail_ex+0x414/0x560 [ 1793.724830][T25721] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1793.724862][T25721] should_failslab+0xa8/0x100 [ 1793.724894][T25721] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1793.724926][T25721] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 1793.724956][T25721] ? proc_alloc_inode+0x2a/0xc0 [ 1793.724993][T25721] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1793.725026][T25721] proc_alloc_inode+0x2a/0xc0 [ 1793.725060][T25721] alloc_inode+0x67/0x1b0 [ 1793.725091][T25721] new_inode+0x22/0x170 [ 1793.725126][T25721] proc_pid_make_inode+0x21/0x130 [ 1793.725153][T25721] proc_pident_instantiate+0x6d/0x2b0 [ 1793.725185][T25721] proc_fill_cache+0x2cd/0x3d0 [ 1793.725209][T25721] ? __lock_acquire+0xaac/0xd20 [ 1793.725242][T25721] ? __pfx_proc_pident_instantiate+0x10/0x10 [ 1793.725269][T25721] ? __pfx_proc_fill_cache+0x10/0x10 [ 1793.725311][T25721] ? filldir+0x475/0x690 [ 1793.725349][T25721] proc_pident_readdir+0x370/0x4b0 [ 1793.725385][T25721] iterate_dir+0x5ac/0x770 [ 1793.725417][T25721] __se_sys_getdents+0xe4/0x250 [ 1793.725446][T25721] ? __pfx___se_sys_getdents+0x10/0x10 [ 1793.725469][T25721] ? ksys_write+0x1f0/0x250 [ 1793.725492][T25721] ? __pfx_filldir+0x10/0x10 [ 1793.725539][T25721] ? do_syscall_64+0xba/0x210 [ 1793.725573][T25721] do_syscall_64+0xf6/0x210 [ 1793.725602][T25721] ? clear_bhb_loop+0x60/0xb0 [ 1793.725628][T25721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.725650][T25721] RIP: 0033:0x7fb4e418e969 [ 1793.725669][T25721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1793.725688][T25721] RSP: 002b:00007fb4e50e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 1793.725718][T25721] RAX: ffffffffffffffda RBX: 00007fb4e43b5fa0 RCX: 00007fb4e418e969 [ 1793.725734][T25721] RDX: 0000000000009005 RSI: 0000200000000280 RDI: 0000000000000004 [ 1793.725748][T25721] RBP: 00007fb4e50e2090 R08: 0000000000000000 R09: 0000000000000000 [ 1793.725762][T25721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1793.725775][T25721] R13: 0000000000000000 R14: 00007fb4e43b5fa0 R15: 00007fb4e44dfa28 [ 1793.725808][T25721] [ 1794.122095][ T30] kauditd_printk_skb: 1997 callbacks suppressed [ 1794.122116][ T30] audit: type=1326 audit(1747436732.341:17734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25718 comm="syz.1.5686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710df8e969 code=0x50000 [ 1794.151436][ T30] audit: type=1326 audit(1747436732.341:17735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25718 comm="syz.1.5686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710df8e969 code=0x50000 [ 1794.174689][ T30] audit: type=1326 audit(1747436732.341:17736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25718 comm="syz.1.5686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710df8e969 code=0x50000 [ 1794.197264][ T30] audit: type=1326 audit(1747436732.341:17737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25718 comm="syz.1.5686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710df8e969 code=0x50000 [ 1794.219780][ T30] audit: type=1326 audit(1747436732.341:17738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25718 comm="syz.1.5686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710df8e969 code=0x50000 [ 1794.242464][ T30] audit: type=1326 audit(1747436732.341:17739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25718 comm="syz.1.5686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710df8e969 code=0x50000 [ 1794.276374][ T30] audit: type=1326 audit(1747436732.341:17740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25718 comm="syz.1.5686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710df8e969 code=0x50000 [ 1794.299037][ T30] audit: type=1326 audit(1747436732.341:17741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25718 comm="syz.1.5686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710df8e969 code=0x50000 [ 1794.322227][ T30] audit: type=1326 audit(1747436732.341:17742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25718 comm="syz.1.5686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710df8e969 code=0x50000 [ 1794.345661][ T30] audit: type=1326 audit(1747436732.341:17743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25718 comm="syz.1.5686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710df8e969 code=0x50000 [ 1794.589783][ T1206] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1794.771161][ T1206] usb 1-1: config 0 has no interfaces? [ 1794.857446][ T1206] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1795.103671][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.125413][ T1206] usb 1-1: Product: syz [ 1795.137667][ T1206] usb 1-1: Manufacturer: syz [ 1795.167832][ T1206] usb 1-1: SerialNumber: syz [ 1795.210118][ T1206] usb 1-1: config 0 descriptor?? [ 1795.624374][T23932] usb 3-1: USB disconnect, device number 115 [ 1795.873482][T10248] usb 5-1: USB disconnect, device number 88 [ 1797.174951][ T1206] usb 1-1: USB disconnect, device number 49 [ 1797.919532][ T1206] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1797.952767][T25753] FAULT_INJECTION: forcing a failure. [ 1797.952767][T25753] name failslab, interval 1, probability 0, space 0, times 0 [ 1798.068141][T25753] CPU: 0 UID: 0 PID: 25753 Comm: syz.1.5694 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1798.068173][T25753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1798.068187][T25753] Call Trace: [ 1798.068196][T25753] [ 1798.068206][T25753] dump_stack_lvl+0x189/0x250 [ 1798.068247][T25753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1798.068279][T25753] ? __pfx__printk+0x10/0x10 [ 1798.068315][T25753] ? __pfx___might_resched+0x10/0x10 [ 1798.068337][T25753] ? fs_reclaim_acquire+0x7d/0x100 [ 1798.068378][T25753] should_fail_ex+0x414/0x560 [ 1798.068408][T25753] should_failslab+0xa8/0x100 [ 1798.068440][T25753] __kmalloc_cache_noprof+0x70/0x3d0 [ 1798.068468][T25753] ? alloc_netdev_mqs+0xbd5/0x11e0 [ 1798.068486][T25753] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 1798.068520][T25753] alloc_netdev_mqs+0xbd5/0x11e0 [ 1798.068548][T25753] rtnl_create_link+0x31f/0xd10 [ 1798.068581][T25753] rtnl_newlink_create+0x258/0xaf0 [ 1798.068618][T25753] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1798.068648][T25753] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1798.068692][T25753] ? rtnl_newlink+0x8db/0x1c70 [ 1798.068721][T25753] ? __pfx___mutex_lock+0x10/0x10 [ 1798.068762][T25753] ? ns_capable+0x8a/0xf0 [ 1798.068789][T25753] rtnl_newlink+0x16d6/0x1c70 [ 1798.068834][T25753] ? __pfx_rtnl_newlink+0x10/0x10 [ 1798.068861][T25753] ? is_bpf_text_address+0x26/0x2b0 [ 1798.068900][T25753] ? is_bpf_text_address+0x292/0x2b0 [ 1798.068937][T25753] ? __lock_acquire+0xaac/0xd20 [ 1798.068983][T25753] ? __lock_acquire+0xaac/0xd20 [ 1798.069036][T25753] ? is_bpf_text_address+0x26/0x2b0 [ 1798.069072][T25753] ? is_bpf_text_address+0x292/0x2b0 [ 1798.069103][T25753] ? is_bpf_text_address+0x26/0x2b0 [ 1798.069143][T25753] ? aa_get_newest_label+0xf7/0x5d0 [ 1798.069173][T25753] ? __lock_acquire+0xaac/0xd20 [ 1798.069231][T25753] ? __pfx_rtnl_newlink+0x10/0x10 [ 1798.069257][T25753] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1798.069282][T25753] ? kasan_save_track+0x4f/0x80 [ 1798.069310][T25753] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1798.069336][T25753] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1798.069363][T25753] ? __lock_acquire+0xaac/0xd20 [ 1798.069409][T25753] netlink_rcv_skb+0x21c/0x490 [ 1798.069438][T25753] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1798.069465][T25753] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1798.069512][T25753] ? netlink_deliver_tap+0x2e/0x1b0 [ 1798.069538][T25753] ? netlink_deliver_tap+0x2e/0x1b0 [ 1798.069569][T25753] netlink_unicast+0x758/0x8d0 [ 1798.069613][T25753] netlink_sendmsg+0x805/0xb30 [ 1798.069650][T25753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1798.069682][T25753] ? aa_sock_msg_perm+0x94/0x160 [ 1798.069710][T25753] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1798.069736][T25753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1798.069765][T25753] __sock_sendmsg+0x219/0x270 [ 1798.069793][T25753] ____sys_sendmsg+0x505/0x830 [ 1798.069832][T25753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1798.069874][T25753] ? import_iovec+0x74/0xa0 [ 1798.069910][T25753] ___sys_sendmsg+0x21f/0x2a0 [ 1798.069945][T25753] ? __pfx____sys_sendmsg+0x10/0x10 [ 1798.070017][T25753] ? __fget_files+0x2a/0x420 [ 1798.070047][T25753] ? __fget_files+0x3a0/0x420 [ 1798.070101][T25753] __x64_sys_sendmsg+0x19b/0x260 [ 1798.070135][T25753] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1798.070185][T25753] ? do_syscall_64+0xba/0x210 [ 1798.070219][T25753] do_syscall_64+0xf6/0x210 [ 1798.070249][T25753] ? clear_bhb_loop+0x60/0xb0 [ 1798.070276][T25753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.070298][T25753] RIP: 0033:0x7f710df8e969 [ 1798.070317][T25753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1798.070335][T25753] RSP: 002b:00007f710edb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1798.070358][T25753] RAX: ffffffffffffffda RBX: 00007f710e1b5fa0 RCX: 00007f710df8e969 [ 1798.070374][T25753] RDX: 0000000000000810 RSI: 0000200000000080 RDI: 0000000000000003 [ 1798.070388][T25753] RBP: 00007f710edb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1798.070402][T25753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1798.070414][T25753] R13: 0000000000000000 R14: 00007f710e1b5fa0 R15: 00007f710e2dfa28 [ 1798.070447][T25753] [ 1798.473401][ C0] vkms_vblank_simulate: vblank timer overrun [ 1798.622549][ T1206] usb 1-1: Using ep0 maxpacket: 16 [ 1798.928797][ T1206] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1798.978012][T25756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5695'. [ 1798.994099][ T1206] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1799.075145][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1799.255346][ T1206] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1799.349534][T23932] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1799.680043][ T30] kauditd_printk_skb: 2535 callbacks suppressed [ 1799.680064][ T30] audit: type=1800 audit(1747436737.881:20279): pid=25758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5696" name="bus" dev="ramfs" ino=122234 res=0 errno=0 [ 1799.773352][ T1206] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1799.782799][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.801453][T23932] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1799.816401][T23932] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1799.827076][ T1206] usb 1-1: Product: syz [ 1799.836147][T23932] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1799.849189][T23932] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1799.867864][ T1206] usb 1-1: Manufacturer: syz [ 1799.888209][ T1206] usb 1-1: SerialNumber: syz [ 1799.893312][T23932] usb 4-1: Product: syz [ 1799.905448][T23932] usb 4-1: Manufacturer: syz [ 1799.924560][T23932] usb 4-1: SerialNumber: syz [ 1799.951059][ T1206] usb 1-1: config 0 descriptor?? [ 1799.972735][T23932] usb 4-1: config 0 descriptor?? [ 1800.025030][T23932] usb 4-1: selecting invalid altsetting 0 [ 1800.275113][ T1206] rc_core: IR keymap rc-xbox-dvd not found [ 1800.294345][ T1206] Registered IR keymap rc-empty [ 1800.325868][ T1206] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1800.412912][ T1206] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input93 [ 1800.795448][T25782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1800.994664][T25782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1801.071179][T25764] input: syz0 as /devices/virtual/input/input94 [ 1801.102266][T25764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5697'. [ 1801.192123][T25785] 8021q: VLANs not supported on syzkaller1 [ 1801.507930][ C1] xbox_remote 1-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 1801.507938][T23932] usb 1-1: USB disconnect, device number 50 [ 1801.718085][ T30] audit: type=1326 audit(1747436739.931:20280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25791 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e418e969 code=0x50000 [ 1801.833598][ T30] audit: type=1326 audit(1747436739.931:20281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25791 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e418e969 code=0x50000 [ 1801.896463][ T30] audit: type=1326 audit(1747436739.931:20282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25791 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e418e969 code=0x50000 [ 1801.924212][ T1206] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1801.966995][ T30] audit: type=1326 audit(1747436739.931:20283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25791 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e418e969 code=0x50000 [ 1802.027181][ T30] audit: type=1326 audit(1747436739.931:20284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25791 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e418e969 code=0x50000 [ 1802.339543][ T30] audit: type=1326 audit(1747436739.931:20285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25791 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e418e969 code=0x50000 [ 1802.390079][ T1206] usb 2-1: config 0 has no interfaces? [ 1802.404500][ T1206] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1802.429578][ T1206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.437683][ T1206] usb 2-1: Product: syz [ 1802.463760][ T30] audit: type=1326 audit(1747436739.931:20286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25791 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e418e969 code=0x50000 [ 1802.497687][ T1206] usb 2-1: Manufacturer: syz [ 1802.510390][ T1206] usb 2-1: SerialNumber: syz [ 1802.524361][ T1206] usb 2-1: config 0 descriptor?? [ 1802.552167][ T30] audit: type=1326 audit(1747436739.931:20287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25791 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e418e969 code=0x50000 [ 1802.602978][T25788] syz.4.5699: attempt to access beyond end of device [ 1802.602978][T25788] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1802.751056][ T30] audit: type=1326 audit(1747436739.931:20288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25791 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e418e969 code=0x50000 [ 1803.195669][T23932] usb 4-1: USB disconnect, device number 111 [ 1803.259229][T25779] syz.2.5700: attempt to access beyond end of device [ 1803.259229][T25779] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1804.601715][T25802] bridge1: entered allmulticast mode [ 1804.622879][T25801] bridge1: left allmulticast mode [ 1804.630278][T23932] usb 2-1: USB disconnect, device number 6 [ 1804.934809][T25811] fuse: Unknown parameter 'goup_idbE(~0O~' [ 1805.109820][T25815] netlink: 'syz.1.5709': attribute type 12 has an invalid length. [ 1805.269650][ T1206] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1805.360763][ T24] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1805.419647][ T5891] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1805.432823][ T1206] usb 1-1: Using ep0 maxpacket: 32 [ 1805.452644][ T1206] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1805.467931][ T1206] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1805.478953][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1805.489328][ T1206] usb 1-1: Product: syz [ 1805.495682][ T1206] usb 1-1: Manufacturer: syz [ 1805.502507][ T1206] usb 1-1: SerialNumber: syz [ 1805.521766][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1805.531748][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1805.549825][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 1805.569523][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 1805.577676][ T1206] usb 1-1: config 0 descriptor?? [ 1805.588368][ T5891] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1805.598521][ T5891] usb 2-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1805.624044][T25811] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1805.639510][ T5891] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1805.646425][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1805.680129][ T1206] hub 1-1:0.0: bad descriptor, ignoring hub [ 1805.686085][ T1206] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1805.708594][ T5891] usb 2-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 1805.717993][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.726378][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1805.735736][ T24] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1805.743930][ T5891] usb 2-1: Product: syz [ 1805.749690][ T5891] usb 2-1: Manufacturer: syz [ 1805.754347][ T5891] usb 2-1: SerialNumber: syz [ 1805.759048][ T24] usb 3-1: Manufacturer: syz [ 1805.792471][ T24] usb 3-1: config 0 descriptor?? [ 1805.802666][T25814] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1805.826488][ T24] smsusb:smsusb_probe: board id=9, interface number 0 [ 1805.844818][ T1206] usb 1-1: USB disconnect, device number 51 [ 1805.875598][ T24] smsusb:siano_media_device_register: media controller created [ 1805.905069][ T24] ------------[ cut here ]------------ [ 1805.910799][ T24] usb 3-1: BOGUS urb xfer, pipe 3 != type 1 [ 1805.919366][ T24] WARNING: CPU: 1 PID: 24 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc37/0x1870 [ 1805.929168][ T24] Modules linked in: [ 1805.933466][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1805.945671][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1805.955860][ T24] Workqueue: usb_hub_wq hub_event [ 1805.961008][ T24] RIP: 0010:usb_submit_urb+0xc37/0x1870 [ 1805.966620][ T24] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 73 08 00 00 45 8b 04 24 48 c7 c7 00 6d 12 8c 4c 89 f6 4c 89 fa e8 aa 1c 6f fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 10 ed bc 8e e8 80 [ 1805.986450][ T24] RSP: 0018:ffffc900001e6b70 EFLAGS: 00010246 [ 1805.992623][ T24] RAX: a419752036a1ac00 RBX: ffff888058fa7c00 RCX: 0000000000100000 [ 1806.000704][ T24] RDX: ffffc900190a6000 RSI: 000000000003132d RDI: 000000000003132e [ 1806.008698][ T24] RBP: 0000000000000000 R08: ffffc900001e6847 R09: 1ffff9200003cd08 [ 1806.016853][ T24] R10: dffffc0000000000 R11: fffff5200003cd09 R12: ffffffff8c126aec [ 1806.024921][ T24] R13: dffffc0000000000 R14: ffffffff8c12d5e0 R15: ffff88802dfd8040 [ 1806.032954][ T24] FS: 0000000000000000(0000) GS:ffff8881261c7000(0000) knlGS:0000000000000000 [ 1806.041993][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1806.048610][ T24] CR2: 0000000000000000 CR3: 0000000033c16000 CR4: 00000000003526f0 [ 1806.056677][ T24] Call Trace: [ 1806.060013][ T24] [ 1806.062967][ T24] smsusb_start_streaming+0x22/0x340 [ 1806.068278][ T24] smsusb_probe+0x18f6/0x2060 [ 1806.073008][ T24] ? __pfx_smsusb_probe+0x10/0x10 [ 1806.078059][ T24] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1806.083704][ T24] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1806.089656][ T24] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1806.096011][ T24] ? __pm_runtime_set_status+0x785/0xa50 [ 1806.101718][ T24] usb_probe_interface+0x641/0xbc0 [ 1806.106865][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 1806.112537][ T24] really_probe+0x26a/0x9a0 [ 1806.117072][ T24] __driver_probe_device+0x18c/0x2f0 [ 1806.122436][ T24] driver_probe_device+0x4f/0x430 [ 1806.127488][ T24] __device_attach_driver+0x2ce/0x530 [ 1806.132931][ T24] bus_for_each_drv+0x251/0x2e0 [ 1806.137801][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 1806.143765][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1806.149169][ T24] __device_attach+0x2b8/0x400 [ 1806.153999][ T24] ? __pfx___device_attach+0x10/0x10 [ 1806.159310][ T24] ? do_raw_spin_unlock+0x122/0x240 [ 1806.165018][ T24] bus_probe_device+0x185/0x260 [ 1806.169927][ T24] device_add+0x7b6/0xb50 [ 1806.174286][ T24] usb_set_configuration+0x1a87/0x20e0 [ 1806.179842][ T24] usb_generic_driver_probe+0x8d/0x150 [ 1806.185413][ T24] usb_probe_device+0x1c4/0x390 [ 1806.190333][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 1806.195719][ T24] really_probe+0x26a/0x9a0 [ 1806.200285][ T24] __driver_probe_device+0x18c/0x2f0 [ 1806.205593][ T24] driver_probe_device+0x4f/0x430 [ 1806.210687][ T24] __device_attach_driver+0x2ce/0x530 [ 1806.216084][ T24] bus_for_each_drv+0x251/0x2e0 [ 1806.221001][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 1806.226921][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1806.232350][ T24] __device_attach+0x2b8/0x400 [ 1806.237137][ T24] ? __pfx___device_attach+0x10/0x10 [ 1806.242774][ T24] ? do_raw_spin_unlock+0x122/0x240 [ 1806.247998][ T24] bus_probe_device+0x185/0x260 [ 1806.252905][ T24] device_add+0x7b6/0xb50 [ 1806.257258][ T24] usb_new_device+0xa39/0x16c0 [ 1806.262092][ T24] ? __pfx_usb_new_device+0x10/0x10 [ 1806.267312][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 1806.272553][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 1806.277777][ T24] hub_event+0x2941/0x4a00 [ 1806.282339][ T24] ? __pfx_hub_event+0x10/0x10 [ 1806.287132][ T24] ? process_scheduled_works+0x9ec/0x17a0 [ 1806.292913][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 1806.298130][ T24] ? process_scheduled_works+0x9ec/0x17a0 [ 1806.303895][ T24] ? process_scheduled_works+0x9ec/0x17a0 [ 1806.309691][ T24] process_scheduled_works+0xade/0x17a0 [ 1806.315281][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 1806.321547][ T24] worker_thread+0x8a0/0xda0 [ 1806.326203][ T24] kthread+0x711/0x8a0 [ 1806.330317][ T24] ? __pfx_worker_thread+0x10/0x10 [ 1806.335447][ T24] ? __pfx_kthread+0x10/0x10 [ 1806.340113][ T24] ? __pfx_kthread+0x10/0x10 [ 1806.344730][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 1806.349983][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 1806.355205][ T24] ? __pfx_kthread+0x10/0x10 [ 1806.359871][ T24] ret_from_fork+0x4b/0x80 [ 1806.364304][ T24] ? __pfx_kthread+0x10/0x10 [ 1806.368993][ T24] ret_from_fork_asm+0x1a/0x30 [ 1806.373873][ T24] [ 1806.376928][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1806.384206][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 1806.396096][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1806.406152][ T24] Workqueue: usb_hub_wq hub_event [ 1806.411191][ T24] Call Trace: [ 1806.414480][ T24] [ 1806.417406][ T24] dump_stack_lvl+0x99/0x250 [ 1806.422003][ T24] ? __asan_memcpy+0x40/0x70 [ 1806.426598][ T24] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1806.431898][ T24] ? __pfx__printk+0x10/0x10 [ 1806.436500][ T24] panic+0x2db/0x790 [ 1806.440410][ T24] ? __pfx_panic+0x10/0x10 [ 1806.444853][ T24] ? ret_from_fork_asm+0x1a/0x30 [ 1806.449803][ T24] __warn+0x31b/0x4b0 [ 1806.453792][ T24] ? usb_submit_urb+0xc37/0x1870 [ 1806.458741][ T24] ? usb_submit_urb+0xc37/0x1870 [ 1806.463702][ T24] report_bug+0x2be/0x4f0 [ 1806.468041][ T24] ? usb_submit_urb+0xc37/0x1870 [ 1806.472981][ T24] ? usb_submit_urb+0xc37/0x1870 [ 1806.477921][ T24] ? usb_submit_urb+0xc39/0x1870 [ 1806.482864][ T24] handle_bug+0x84/0x160 [ 1806.487116][ T24] exc_invalid_op+0x1a/0x50 [ 1806.491625][ T24] asm_exc_invalid_op+0x1a/0x20 [ 1806.496472][ T24] RIP: 0010:usb_submit_urb+0xc37/0x1870 [ 1806.502020][ T24] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 73 08 00 00 45 8b 04 24 48 c7 c7 00 6d 12 8c 4c 89 f6 4c 89 fa e8 aa 1c 6f fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 10 ed bc 8e e8 80 [ 1806.521629][ T24] RSP: 0018:ffffc900001e6b70 EFLAGS: 00010246 [ 1806.527699][ T24] RAX: a419752036a1ac00 RBX: ffff888058fa7c00 RCX: 0000000000100000 [ 1806.535681][ T24] RDX: ffffc900190a6000 RSI: 000000000003132d RDI: 000000000003132e [ 1806.543679][ T24] RBP: 0000000000000000 R08: ffffc900001e6847 R09: 1ffff9200003cd08 [ 1806.551652][ T24] R10: dffffc0000000000 R11: fffff5200003cd09 R12: ffffffff8c126aec [ 1806.559629][ T24] R13: dffffc0000000000 R14: ffffffff8c12d5e0 R15: ffff88802dfd8040 [ 1806.567636][ T24] smsusb_start_streaming+0x22/0x340 [ 1806.572934][ T24] smsusb_probe+0x18f6/0x2060 [ 1806.577626][ T24] ? __pfx_smsusb_probe+0x10/0x10 [ 1806.582669][ T24] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1806.588233][ T24] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1806.594134][ T24] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1806.600473][ T24] ? __pm_runtime_set_status+0x785/0xa50 [ 1806.606116][ T24] usb_probe_interface+0x641/0xbc0 [ 1806.611237][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 1806.616868][ T24] really_probe+0x26a/0x9a0 [ 1806.621385][ T24] __driver_probe_device+0x18c/0x2f0 [ 1806.626677][ T24] driver_probe_device+0x4f/0x430 [ 1806.631717][ T24] __device_attach_driver+0x2ce/0x530 [ 1806.637102][ T24] bus_for_each_drv+0x251/0x2e0 [ 1806.641951][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 1806.647849][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1806.653228][ T24] __device_attach+0x2b8/0x400 [ 1806.657995][ T24] ? __pfx___device_attach+0x10/0x10 [ 1806.663301][ T24] ? do_raw_spin_unlock+0x122/0x240 [ 1806.668505][ T24] bus_probe_device+0x185/0x260 [ 1806.673361][ T24] device_add+0x7b6/0xb50 [ 1806.677698][ T24] usb_set_configuration+0x1a87/0x20e0 [ 1806.683190][ T24] usb_generic_driver_probe+0x8d/0x150 [ 1806.688661][ T24] usb_probe_device+0x1c4/0x390 [ 1806.693516][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 1806.698887][ T24] really_probe+0x26a/0x9a0 [ 1806.703403][ T24] __driver_probe_device+0x18c/0x2f0 [ 1806.708693][ T24] driver_probe_device+0x4f/0x430 [ 1806.713723][ T24] __device_attach_driver+0x2ce/0x530 [ 1806.719100][ T24] bus_for_each_drv+0x251/0x2e0 [ 1806.723948][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 1806.729853][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1806.735234][ T24] __device_attach+0x2b8/0x400 [ 1806.740001][ T24] ? __pfx___device_attach+0x10/0x10 [ 1806.745293][ T24] ? do_raw_spin_unlock+0x122/0x240 [ 1806.750514][ T24] bus_probe_device+0x185/0x260 [ 1806.755379][ T24] device_add+0x7b6/0xb50 [ 1806.759711][ T24] usb_new_device+0xa39/0x16c0 [ 1806.764501][ T24] ? __pfx_usb_new_device+0x10/0x10 [ 1806.769707][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 1806.774901][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 1806.780102][ T24] hub_event+0x2941/0x4a00 [ 1806.784558][ T24] ? __pfx_hub_event+0x10/0x10 [ 1806.789350][ T24] ? process_scheduled_works+0x9ec/0x17a0 [ 1806.795084][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 1806.800297][ T24] ? process_scheduled_works+0x9ec/0x17a0 [ 1806.806009][ T24] ? process_scheduled_works+0x9ec/0x17a0 [ 1806.811730][ T24] process_scheduled_works+0xade/0x17a0 [ 1806.817296][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 1806.823294][ T24] worker_thread+0x8a0/0xda0 [ 1806.827899][ T24] kthread+0x711/0x8a0 [ 1806.831979][ T24] ? __pfx_worker_thread+0x10/0x10 [ 1806.837085][ T24] ? __pfx_kthread+0x10/0x10 [ 1806.841677][ T24] ? __pfx_kthread+0x10/0x10 [ 1806.846265][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 1806.851471][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 1806.856669][ T24] ? __pfx_kthread+0x10/0x10 [ 1806.861257][ T24] ret_from_fork+0x4b/0x80 [ 1806.865685][ T24] ? __pfx_kthread+0x10/0x10 [ 1806.870275][ T24] ret_from_fork_asm+0x1a/0x30 [ 1806.875049][ T24] [ 1806.878470][ T24] Kernel Offset: disabled [ 1806.882807][ T24] Rebooting in 86400 seconds..