last executing test programs: 9.638496138s ago: executing program 4 (id=1069): socket$kcm(0xa, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000003ebe000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000140028000000060a010400000000000000000100000008000b40000000000900010073797a3000000000140000001100010004000000000000000000000a"], 0x9c}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r6, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioprio_get$uid(0x3, 0x0) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) bind$can_j1939(r8, 0x0, 0x0) io_uring_setup(0x2917, &(0x7f0000000100)={0x0, 0x6cf6, 0x100, 0x3, 0x26f}) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000280)=@req={0xffffffc0, 0xfd7b, 0x6, 0x8}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x18, 0x800000000004}, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x300, 0x0, 0x3, 0x1}, 0x8) syz_genetlink_get_family_id$devlink(0x0, r8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f00000000c0)={0x6, 'ip6gre0\x00', {0x4}, 0x6}) 8.638299133s ago: executing program 4 (id=1077): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef00090599"], 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f00000030c0)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x800, @mcast2, 0xac7}, 0x1c, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x4001c00) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e74657200140001800900"], 0xdc}}, 0x0) 7.917678947s ago: executing program 2 (id=1082): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x200000000000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$GIO_SCRNMAP(r7, 0x4b40, &(0x7f0000000140)=""/158) sendmmsg$unix(r6, &(0x7f00000bd000), 0x0, 0x0) socket(0x22, 0x2, 0x24) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) 6.740321994s ago: executing program 3 (id=1087): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0xa20000, 0x1, 0x0, r2, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @value=0x6}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0xce, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@timestamp={0x44, 0xc, 0x8, 0x0, 0x0, [0x0, 0x0]}, @rr={0x7, 0x3, 0xd7}]}}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x38, 0x54, 0x93d, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}]}, 0x38}}, 0x0) futex(&(0x7f000000cffc), 0x3, 0x2, 0x0, &(0x7f0000000040), 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) 5.558156493s ago: executing program 2 (id=1090): r0 = socket(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x715a9d1e7a68469f, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)={0x24, r6, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x14}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x800) sendmmsg$alg(r5, &(0x7f000000a600)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="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", 0xa61}], 0x1, 0x0, 0x0, 0xc010}], 0x1, 0x1) r7 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) syz_usb_connect$uac1(0x0, 0xa6, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x10, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0x1, 0x5}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x0, 0x0, "d885700585"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x3, 0x1, 0x1, 'b', 'Qq\t'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x14, 0x4, 0xcc, {0x7, 0x25, 0x1, 0x1, 0x7f, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1002}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6896, 0x8, 0x0, "78f4cd9535ca"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x4, 0x3, {0x7, 0x25, 0x1, 0x2, 0xf8}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xfffffffffffffede) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f0300000000000003763022fafe4eba0d0000009ee5010000000100000052a705250e6182949a3651f60a84c9f5d1938037e786a6d4bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040044) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) 5.025011773s ago: executing program 4 (id=1091): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x80000, 0x2f0c07f996e5f8c, 0xc, 0x0, 0x0, 0x1000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x1, 0x0, 0xc, 0x0, 0x8000000, 0xbc5, {0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x8, 0x1, 0x0, 0x6000, 0x3, 0x0, r3, 0x0, 0x32a1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000000000)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000140)=""/176, 0xb0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xe) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x5f7, 0x4100) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x38}, 0x3ff}]}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x2, 0x8208, 0x8, 0x1, r5}, 0x10) 4.875395669s ago: executing program 3 (id=1092): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x29, 0x9, 0x70bd2b, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x844) syz_open_dev$video4linux(0x0, 0x1, 0x2080) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) dup(r2) syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x2, 0x400000, 0x20000}, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pipe2$watch_queue(&(0x7f0000000080), 0x80) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x7}, 0x0, 0x0) inotify_init1(0x0) 4.720467456s ago: executing program 4 (id=1094): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="1080", 0x2, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x12, 0x4) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0400"}]}}, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000300)={0x40, 0xa, 0x8, "a207000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x4}, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x30, &(0x7f0000000040), &(0x7f0000cab000)=0x7) 4.082360781s ago: executing program 0 (id=1097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (fail_nth: 4) 3.568897321s ago: executing program 1 (id=1098): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) unshare(0x22020600) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0xa) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10}, 0x50) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r9, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r11, &(0x7f0000006380)=""/1024, 0x400) syz_fuse_handle_req(r9, &(0x7f0000006780), 0x2000, &(0x7f0000008780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008800)={0x30, 0x0, 0x0, [{0x0, 0x0, 0x4, 0x0, '#,,-'}]}, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x10bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x8, 0x213200) close_range(r0, 0xffffffffffffffff, 0x0) 3.479210735s ago: executing program 0 (id=1099): openat$vhost_vsock(0xffffff9c, 0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x1) stat(&(0x7f0000001040)='./file0\x00', 0x0) write$P9_RLINK(r0, 0x0, 0x0) 3.443645763s ago: executing program 3 (id=1100): r0 = socket(0x1e, 0x805, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) syz_clone3(&(0x7f0000000900)={0x40000800, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0xae) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r2, 0x0, 0x0) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f00000001c0)) sendto$packet(r0, 0x0, 0x0, 0x1, &(0x7f0000000200)={0x11, 0xf5, 0x0, 0x1, 0x7}, 0x14) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') r4 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000000), &(0x7f0000000140)) setrlimit(0xc, &(0x7f00000022c0)={0xfffffffd, 0x3}) read$snddsp(0xffffffffffffffff, &(0x7f0000000240), 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/reserved_size', 0x149a82, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x1}}, 0x20) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0xf0f003, 0x4}) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000300)={0x1, "d1f079dd373a99defa3738f414da987206795b581585b78009fac5c7601793b70087f83918502e915eaf40a06d70f76f126ebe42cb4d4574dfe0993dd045c864", {0xa, 0x7}}) syz_io_uring_setup(0x3936, &(0x7f0000000040)={0x0, 0x103fb8, 0x0, 0x3, 0x11c, 0x0, r4}, &(0x7f00000000c0), &(0x7f0000000100)) 3.314868522s ago: executing program 0 (id=1101): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="1080", 0x2, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x12, 0x4) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0400"}]}}, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000300)={0x40, 0xa, 0x8, "a207000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x4}, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x30, &(0x7f0000000040), &(0x7f0000cab000)=0x7) 3.313158941s ago: executing program 3 (id=1102): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0xa20000, 0x1, 0x0, r2, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @value=0x6}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0xce, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@timestamp={0x44, 0xc, 0x8, 0x0, 0x0, [0x0, 0x0]}, @rr={0x7, 0x3, 0xd7}]}}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x38, 0x54, 0x93d, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}]}, 0x38}}, 0x0) futex(&(0x7f000000cffc), 0x3, 0x2, 0x0, &(0x7f0000000040), 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) 2.396591949s ago: executing program 1 (id=1103): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) (fail_nth: 6) 2.302738079s ago: executing program 4 (id=1104): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x1, 0x4) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1c, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000d4}, 0x44000) 1.724013796s ago: executing program 1 (id=1105): syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000004c0)='./file0\x00', 0x80000000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 1.598768954s ago: executing program 4 (id=1106): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x82001) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x22000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x7f, 0x800000, 0x3, 0x7, 0xc3ad, 0x4}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001240)={0x44, &(0x7f0000000e00)={0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.55303873s ago: executing program 3 (id=1107): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1f85, &(0x7f0000000080)={0x0, 0x1a87, 0x20000, 0x0, 0x185}, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1a, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x8, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@private0, 0x3, r3}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x3c, r3}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x24) epoll_create1(0x0) 1.515396726s ago: executing program 2 (id=1108): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f00000003c0)={0x46b3, [0x1, 0x7, 0x3, 0x0, 0x8, 0x400, 0x3ff, 0x2a, 0x1, 0x3, 0x4, 0x8, 0x517, 0x1, 0x5, 0xd36, 0x1, 0x1, 0x1, 0x0, 0x1, 0x9, 0x7, 0x8, 0x40, 0xc, 0xd31, 0x2, 0xe, 0x13, 0x7, 0x3ff, 0x5, 0x5fb, 0xfff8, 0x78ff, 0xa20d, 0x2, 0xe, 0x2c, 0x2, 0xd17, 0x1, 0x7, 0x100, 0xff, 0x2], 0x1}) 1.436845853s ago: executing program 1 (id=1109): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200), 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000102, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x2) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x14}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r3, 0x0, 0x800) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x4000000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="eb54734f7291b065417b54d3c125c82a9732a89632fd68080877164c76ce8d6f3905712b890369d752faa80cbec17169c49e1fcc1374a59c0f82be4e983823bb6f9e2ea1e84c77a1e7de6c38184ee01ebaecf434f9736be2b07a273363d731250f0697bd8d53fa8cf993bd3ff77c8d4cf43cfcd27b3eb29738aa6eb5bfc786fff6c56306ff2f6fec36fe00b9a82c3369a6f9dafaf46cb15edc23cb28d59867dec31166b8c861e06c4f39648d885a5a747c5fd8c2495942f6f3c0ba8118", 0xbd, 0x1, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x80, 0x37e, 0x28, @empty, @remote, 0x7, 0x7, 0x10000, 0xb6b2}}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000340)={r4, 0x1, 0x6, @random="b9c2d51af5eb"}, 0x10) r5 = openat$udambuf(0xffffff9c, &(0x7f0000000440), 0x2) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000500)) 1.352774331s ago: executing program 1 (id=1110): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x29, 0x9, 0x70bd2b, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x844) syz_open_dev$video4linux(0x0, 0x1, 0x2080) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x2, 0x400000, 0x20000}, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pipe2$watch_queue(&(0x7f0000000080), 0x80) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x7}, 0x0, 0x0) inotify_init1(0x0) 1.265547701s ago: executing program 2 (id=1111): openat$vhost_vsock(0xffffff9c, 0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x1) stat(&(0x7f0000001040)='./file0\x00', 0x0) write$P9_RLINK(r0, 0x0, 0x0) 1.257708508s ago: executing program 3 (id=1112): r0 = socket(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x715a9d1e7a68469f, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)={0x24, r6, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x14}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x800) sendmmsg$alg(r5, &(0x7f000000a600)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="64a9a5a04e13c27bc848a2a4a66762e8c53c9223c5b36eb413925830f6d6d1f49b35ab78da0264a37dcb052a8785210dfc7d6b3593c36c90fe0f3a5a90bf9f4f17638a955bcc74ab2e07b1c69ebc0825e11b65cb199f06f22be00d41ff0ca55211f7923fb786f69793ed5ac718fc6b4be7cd4cdbe0e02407425d9c535475aa6772115f8deefd9c1f599fd1aaa5d5b55648ab3d4edbd9f89740596d58f5e610f547df4895a85f828df03a9f69c0c8ba3b7abcb2fdfea82278cd55b3e569c8b0b8a87d715bc42b384b020d2f4ae0782fe34f62a0d5545714602cf91499f180af67e8a2cb6f38f412abee3cc5de1034e81e6ba8dc823fee483b4de008f86642b2e9262c8f923712906e37866063e692ffe272cdc35f5b6f9e08c5eb676119c153914994b9f3dd52b3cb633eb1b4a1ddcf14bd52ed7136858c1069b350135705108691a58f4ab7a4aa9032a8bbea1a9fd6be60ddd4ef57307fc7d2f110099fb7969241ebd0d1a5a05a7fea55e68f293b2066952e3a46c34a484be8eb631433016650a856a4ced9f050f28d412aa479ec66165aa4cf1adb0f34d24869b731f16fc342b00a6b327a1c5c4c595c40af410e61ca34239495b0d397ff9880f0dbbd811064bc93f0f143538e990f5f277d729245d974b4959cc1c3010439830177bd14f6c342d5ec0e1a698a4581cb8f0f1bb2d0104628bc52602c7469f0ca6ba2013ec56f5444c2a67c337e89aae5dfb72c6b1a91c418e1a290a22d82e8eddf77c4014a171207c356fd74b951bd817cf1746477d53faeea086edcdeb6ef293dc154888f81fda920917fd6d18dd5b44fd44ca2ca454cce1d35c0ac75bfabf3adf1527ea13a68057d230219ab470f7595b77001a05cced30f958513546d124286dc65fa30bc9b41a7154927eec616ee15eb99540e63cd148c379146814f01c89bbb64183c7d79e53a2be74fba63d9fa3055eef995a55e15d585d2800f882d669d40bce66172c1c7634c1ba76b2bedf24808d729ccf832096ed0d2675bd0f7acb37cf31df9b8ead341849a5de35aa30b2ea64c726b3e6f8024c8e71300ca9fef2485f52ba817f08fbd64b1e3b964a48f342b6abc7a3f2c0742c14f9eac4cdf5ecb4880dc23c30e3673a5cdc9ed308f1738bff0f3e59a7ab3dc18ad12d4e54bd11b6e7124cb60770b1e23fc8087cdf3b5074df53da6fa2ad92b6080c8111e6edeadb616ff8bf171dc615548511aac460b579383516014082b64d992a122713277d6ae78c493eaf088c7ede839deb8acc4f627b9350eed0f89b2dd9ad538577a66026df1aadb9f085d5e43db3bd6b4f7bcb2b65a3bd79c5a4ed4915b66178d54e903cf0d848cd7912ee77a252c00f9dd13f5c67cdc4df6a1fc0e269664f2541651077b093e79754fd6d748c12359e81121512c685933535db9ee1d93cf302bc45a3d201610b51b48dab39ee4445f5a26e09e659357f6dd3b85246e3849e352e4946af1ad7b2137d31cf98514dd38bcab06dc3edac5b59777a4d33568cfcd27b4908ef5d4e6b7276f67c2f781375756b1dae1362142341289335d7f4f71e977975e57098cbbadfb3fec80a793ff52bc044d95d92131904f09527ff2f775d3029925831b95ce69731bcb81624d4bf2dff3af684b13f099d398db9035c9c7f0cee1e9854baf49b70c972f1b31b46b630e0bc93b4e0fbbef286e26921eef50fb81a7a4ae0534fc7640a1d771d7ab07ad2702e9a173d1ade15baba0c46d8e799a123c63f05bc0ad99e9374811574e842a09422c3ca1cf17a24789db0e698e42725ab1adddb645a4d6ac3997e5d56c4e330925f4b02b1aacb513311e5f851ff4cc8dc1c3205b4cf4c9b8a49ed14016a474d0452c9c421a7a74534041edcced6fae2f685e82cf5bd37e9f6bb8286e924b2a7133e336db683f2526a7932fa90a8201f645d560d761c95a24a146980f6209d58e07cb8ac2c607fbd90382adcf46404b311ad09616b544f49e867cf84dbbe5a6621ad2e4740f7a68e427f8e32f7422313db10e1dda70de5110deb6fe8db55194e383e9377b895644e1e5c28f9bfac58ad2ecb87f524d9bac6105cf7bda6f0afc418dfe38315695107e6c06b00378cd78df9ed9981a376597d2e3738eaca76d3147d6328baa91cf9ba873e926ab2d86dca57044992d4cabb6aba4e81fe9a465f76a17636437f11c4030fb0d29403c84db87f328c3bdb0a6844642199884b120edaaa1b78a9d3899eb6bb4b2c467a409f88a214da7a68194efc32a188aaeef4658bf51ba8bea288f27db595ad6bc3dc377eecc70034deb1d5b6d015b3214ee6adc28d6e43af42e58a695aac6b5d158455bba2272bd373de73ecef6fc08c2ad7efcf637f70e70dc6adc6c4259b2611c890c5bf3a9c7b85bc6a2d84be9ef6567cc78e21893443e1ca4f1da443b354dfe9fc92c41dbf2c337365183ce656a239a4c828e208291a183ddebb6b484c17350430d9667111ace00c0082c49ee68fe4f6bad6c8e0725ab0ad13830ad74a85873973b12305c7e3bf348db32d88e1bda179194e86fab92a9e93bd325d137060f3aa0e79e0ec5689834675ce2086ce4d448e9abde71959c956b91022fe7068626fe4c32290e91124a4ad18322b4c60a13eccf123ab75eee77bd23dc789f388119f162a1096d2e70d08ffe3c60733e30420a70cc9ce27c9b1ef9a1318c8b60e05208bbf79decf73f86e9f8104a337b06cb75cc15a1e6bfb4d8b2b13b7e10e3c8f5315bae6555b9c66a445a0a47256bc744ac46fa3f3e2a842ff880ed4a6b7b93f9e768c3beb7796aa60777c99220dc4b9856d32dd0f7cc9db9ca320f55067b35b063e57d9c5eb69847e5787c7133acd17d58f7a527684c85294868a52f242d1ddd2080a95f7aace2958a5be116e7ab015daa087bbffb68d707913829c1f5682a15a0a16381a1effde045969dd8f44d12761937e1749d47f7bf2e45e5c9e9b9705da2c1c94ab70aafd4fa0263e5a276b22e932f93095c9a3ca41ae57af60cda71379ac974827f518c3a2374ce8061be22267ee8ccb96dd16662ecd02e376e9c7f6cc7e6f8c0c5a63a4bc57de873a624e59272f666985476947820d463c5fdf8e3aad46d5737ee8e65366ca17565979a91b83c8a1bff1fe0a4eff96c3664a1fb2705082434c6b04277704d53edeea59e908163c3919aa3f26e99feae0c7359d6ada3ddb28d5042b504daa0090105510e3de22f5fdcb5946d2774b1c1e4becae50ded07655299d03004e0f0eb41f119139284aa9863c2f2bfeafe397b3525521df8fffd7334bd9aee2c0e3ee3bcf7275f8cc46222308403329081bd304c515db6c163b926ce4986b815f88036722fb751b7bfc84f2d5852dcb5b9a53232105a4bce26c5cf42c466dad530ecf518528428b589c82fb1e32e12fa7576f799a0b867cd5cc66587db7fd66a9bc949b237a45370c85573c56a55613ba5dcc7add0792d4be3dea520742a67c0df49a3f7188b070ccf7ae7a80e95dc062359481a149d18b3821bde93882e90b033ed35cda9a3d23d3276d5c016434b6071117ee0794f86f0993c5b617d91e37957910ff940ef5fa2236ff2537410f78db68cdb8811e91a046f3dddc5326e5ad76bcfbc09092a922aba3401a591c35460fd60dd36ac6cac0d79ed6d561a3b5d65f275030e56029db54fd32b432c8937a7f7414e38c2735c10efaadfbe8f3a9c7a75fa3aa17ffe2e34195b5f4d37950be15e602566965dd42fd74072aea70434714015864919bb", 0xa61}], 0x1, 0x0, 0x0, 0xc010}], 0x1, 0x1) r7 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) syz_usb_connect$uac1(0x0, 0xa6, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x10, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0x1, 0x5}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x0, 0x0, "d885700585"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x3, 0x1, 0x1, 'b', 'Qq\t'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x14, 0x4, 0xcc, {0x7, 0x25, 0x1, 0x1, 0x7f, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1002}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6896, 0x8, 0x0, "78f4cd9535ca"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x4, 0x3, {0x7, 0x25, 0x1, 0x2, 0xf8}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xfffffffffffffede) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f0300000000000003763022fafe4eba0d0000009ee5010000000100000052a705250e6182949a3651f60a84c9f5d1938037e786a6d4bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040044) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) 1.169067825s ago: executing program 0 (id=1113): r0 = memfd_secret(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000003c0)={0x8001, {{0x2, 0x4e24, @multicast1}}, 0x0, 0x1, [{{0x2, 0x4e21, @remote}}]}, 0x10c) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004900)="fac4e7c21565f79b73d8d7dcc36944c7d36505ed55b2c535ba5bc78cc94f55e518d13a9f4dd794ecf1b09fe12f2893933931db285710f8c78793ddf30ff7dd86203ab0177f8aa062d6fe9529d65fab047ca34c6840b505eee9082e8ccf311bfb84ee46c0d0dd466ba326c6410b06b48ffc309ddd9fcdd816ded9830e41f8cce8d3bc31a817f29e3ecdd0329aadc8b022c55c70eff8905b9bf223ea44cbb290ffe098bb78fcc9e39f16f4f0e8d60e440abc192d530e146bdb59e9e522668bebec672a965ee7bdb300ab4314235dc0e62e94e398742cfeee3b92ce29e1a62fd8375d95ef502ebc1f04959d83a15ee9496198f0b3440b80cb9950324c9d4dfa69381c5c0920e307ab1528efe02739c2a49fc4cf09ff76c165d5005234b8f9378c74040d212eed9e7485cdd758bf4d34c2cf52b278eb3114b13b43214814ba2e2a357c028c737892d0e8ab1f1d009a00ad0dcdb9ffd0f4fa0b03d3b006fd66e8faa4fd44b64dcb92cbb5e9da64165ef01602538708e5dad3c0986a2b03d4d4276c9268af76d300b01ceef84e2a501e2c3d04e31875d1e81270409516d4272d73e9899c5a939c03be73352b61cf32ea1f6cc2d31847703843cd2e54de294b1c957ae618dddd7fdb018908dd7be379fb3db575b0859d9f2a190d8f7abc8400bbcfc866c8f8454102a5b0c215f140cb17677556241e33443aacb35073752aa65f450b2d03750ebbc07ed809f97b5a55a4f11b920cc9bf0a1db7fce63718f85c3326120c8b774ec22ff9c1b7e9114c0b931b6805fa672b53a6a617881fd73dc1b79fbeade0120e08c7abbba9bed82e9700bbf779328ce0a73f7e60459ecfc3f0daf26da8d1b57c1536ec967fdcab8cca66aab0ce0a02320c0090c78511b1672d65b3d62ed38e2655bc6ebfb2480a0c33fc68bba5c444d8cde3f977a382d6413947fcb25e3e9330f45b8874463e2a3fab87d877652de9c2d35208ad5d3e59ee9e63061af0b119d8174e7eaf71551b1f3551d0247717b5bb7d4db41767e2608a2472c7258932e22eb591c957da5fad5732c86cf18ec338e83ed25e41a2e500360c7ea86755efe0962f0d1d4cc945645e01b5a34fc74630c91cd02c5932f2df9ec1e090dd83bda328a7c8d1b8a8294c3c551c1954a7f024eb7ac01e35538612f2f23a6c52c59beab75910c5abad25a3789baa0001569e93561a8992450bdb0a757b916af413d63badc4aeeb9489357ff7fdb27e913278dbb5f2d69bc196d110638601f31fb4db2b301faa7516955d6971b562288328e14c7957696eaa03d3911ec661279e37a850b7515fb4e122c39fd6dc3af40980173e6324ee678b47f74428a593827d75aae3368e661dbe9738a2704d8f7a086e77b9ffb3eb0e16199c58eff45dbe628d268e88bb2d69a310b60db0a850afcb08a2a7b316c70209ecf034d484a6b1f68de857d4ebfd45936c04b532202bea6b3a6d3751cf73db4ca0a76faf7a972f8a68a523b0a51d593436aed65999fe96058e085b4352c0d5603365ae4cf724e5801da03665ee2071e04b45c6de0a59afc376e3ce2ef206c3161f235049d7e0b52e04ccac4f1699629b3f8736601a6dadfd00dd9545cb7cabd1cba12ddb2a23c58b1da9c69ee4ec9853aaa81e1cf7a169f91a1c077fd6c5c2fd366c9a2a285420d5633bf0544003251768db01281f8259a0d0c489f7f7cfc0fa7ff2878fb0cea89ddb3593539a1184e667f3840e8e5043508777dcef371e2ea3cf489fcfd60066a8dcfc9d0fbc21aac05f24a88ceb5c186326d1fe5b6cb4a40d25e6f847f7a4030d0a9cd29b0f9e3b49471730df5c5d1e172376ab2a27f3aaa3d1c5f354952745db1c54464e9f4d224ca1bcc7a4004bbba7a21d60a1fd5a35c1179738fbcb61241f38703610d51b18afc0e0bce11564167344568875374c6114c64b7cd25cb3c005b2577afe3c0f528d5c838152fe7b307d743596c91f43f3958e1f25f741aa4b30baa4063d0d9c3453fa18de83f744786c7b4294415e0222ecd9bd9a115663f32e9505d3618f9c716f23d9e536d429557774f7910aded24931f373507dba89766d760b714da6e264492ffee985422e60da15b7ea862935d21bb878560b0f8270f82cb3a8fc99ac35c30038b95532fe848f8a2876f5782acbad93f1426fee13fa4f0b778950bb2096c7d1c5bdd481ecae83254800f78a762983418c3fd673deda93c206ad399144b141db743640e3102fb453d553f939ad643ce9faabbb01bfad49cd30a61cce67fd46782447e14c7b2d2dc1df244cd7d72404a0f5b54187c75aa45b9b2a73727de0ce187b7e9cfd471efb73e9a84971185cf335cb33fce92e06992398e53be779782a436579bef6d7b0d93915e758fde3fd67b9a964d5a8ddc5950cb2a78262d0e36d329f9ba56b06266a126334c56852b290937423bc178a575a442046a8a4406e88b829d36bea6786774b0c513dc951b330eb5dd914a907b97e83db55cf73c2897dc3d6944dac797b8b1434327fc15caa6b309b62e1aa52d4e8ca7a7db6f99e423489951961f147b3cb14956e801f7b1a15b959546ea229898ab9b99c9a080f5d9176c59ace26b72e620b9ff6e558bfe7808a7b430c414ab90cb0f1e4101be46dc360928797171922d41bcc8c12d17375222c706b3f864f8937ca947b33eb13216b1cd1d4119fa6de7e1a07c652671d20b1930ccf14c443223a4fb93848969465feaffc703347a5d5a9b68339e3951d3b8fc17c6045201af7e84a7026bc741592bd47768a793abe5009eb9427dfcfc4e4a9b9ae71f8582b0cd9c28c6270d5bbdf0f1415c722384808cc8fdaea65eb97d5fda8dd2014163598411c51495fd9fea5ae48c9e0d158217335c0181db4d196af623b5de7ebb1a0a71090e896c11b33cccd4515d1370b00ca48df5b855b8942cf35a8da12d4eb68b52ad786e2146383c54a13a3de979d03039e42a440c6d0db2a1509ccd1aa5097af5b15b49b90928d82e7b944d0750ac6d9433526e65d3ae79201b4a20175aa12692e4ba41c4733673a47e8ea44ed2b34d3ae80ca8b05aa159662f75ba748ef793aa184c8405796185ffb25ca4cb324f4f77610a3b372f5fad04ef85ab771f2f5efa3d95ca0074b9363b3b4095dacc04d48b9c86ebdfd94981a33b2fdb712409462aca416079a5daf92fd24374b6f3f76277fc36bd6d38832ae14db4711b0503fe12b647516d1df64c11962219c17ecc60fd25704a94742d6655e57ac9f89ae1db77fe8679b7f84b403e101d70352f1d80bba74c4aefe14cec35f4168d2e9c2625a0e692504299cf8ca875e7b45fd3c71df003628c3ac6616b3b1a8edb7879e5781877a9873b3885958edec9d1a7d24cc22c49047335dec3cf9b2821c267ac8dfaea3bdb3dde0fc7d1c1c96ce04f3bd5ddd7ec3ba253cc34e7df4a03d58e716b5bf8d681c65931407a60c28922aceff1edb45417bae99167d99e97669d68efddd00a867f5b3ce5763be30e07ff2cf8b15c90a6f656f717bc1b590231f48e3fc4a85124d43a1a811b6043604870e56b81f127db36a686eb77d612609f44b0fb262b17739fbb36c67ed305e114b7b595626e897af9d59acee1af38295c366bc32e3af59427dc11d5cd594add4e226d947ff26a2140f476a43695ebc8f73cf5b7efeb2ce46d63484b9f3ded774088a0a31cb2eeae9538bf0c071f572657f905b33d4b3fb5280879cab0bc5fc7a89be10a9118c419f974c454a37bb934bd488cb1ecbdcb2ac26094f90b8093fc75454317b92278eff430f6622cbb2c4f6a8a2ef5c7388b504a6cf89bf889990977fd4f5ea1a530131a8e2356e3f1db0d9f93d7a65af79f1fadc0b40279965522d47dfe154d62036ce4e53eeb6e96473d3e2f59ce1f54414af8bada3d9b6089e7a670c7418d0f906ddd8494bbea718fb91acd0fdd0f2c19746f4c1ff87167987f056a86f03aad8c11aec6ea967383c29b9c8bc6d4f46c9c2f44fa5a43f52cda78cf36f270a7a9c77c7007a55b6770847aa8cf4676ea9abcbb91ca9a41ad56682f3dae20ed1a67d75391caabdb66808b91e86b9db4a13f7935fff256b54818a589402967c2242a70afffbc7ca73116a1ca81a126d2d609174a93b16d1fa4d18bd6a4e277aa42a8551765b241d1e54174ba7993d1694d5a191b3036cab5eed5311403ba6de613b73beddc753359f7339417e4f07724c6ba1ce99a55c6b8ec72c0a4df4776146877309382d3af87c204ce86f54c2a7c1027adee9ab2e4f6bd205fb41d7d6b2fabf7308ced5c870f156aaa9dbd24f232ad85d6123426c5e5264b4418ebc7acf1cac380212f48dd87c2000f0f0c7e4a54c04523fb7cebbc50c26691ca8ab9748831851392864c02166f5e2f0c7d5d76b71908de9ba69a88b0bbaad0dcfb9e3ad8680275e35218a60227bfb6f773fea9570831db671ec8912abe6c6190499e0100232aba631b9ab148547041f1bfabec860d19ce987c019249f07bf3effcff35a6c5402a584f0a55a3a580aa8303aa9a67856f8cc27abdfde11fd2b8c5432a46fe2c3c08ae53ff42d1c545fb890d097d9b31437c53f6563fe416570b4cb3d5fb084d9ad4165e6eaa6a24a5b77dfd6c0962d233a2030427dcab08660143dc3853d3ae8907a21f812501b1e96fca4e4c73226827477ae9e5e87f88be74228afc7393d7ed98f090577db9d70158e3acc36e07f959d32de1e34b471e2732e38d0a9397c6d3a218d0abd71af71993cff9e47793dc72d00c5d5079ad76e935c58d349f03c6a976ac204b4663324b63fba9fb7b4a048186d53f72012779b02ecc61faeed40494538a2df95f14be70f80e2c1072f56ccf59ff5d75dea6652ef90138b22c943fd4863e90216cf9ba84e69cbf43661031720bbc22e94bf2fa1dbfe8313487b4cf6cb31e9d26995471ab64a120e0eef82d95620890aaa48afa7acf4ba274dba1b5a1e37c1062fd70fab8218ceddaa8d10154e567c7cb8e5f4bb07c6c6065164c0b374b17c555f9c1ec8d108ae7ada1913db7a447e8ea3713d6e2fd6384ac3286d9941523e01d3fefb32cd65922f2113a5de4c7334657106a2c97a6282b22d7d67f39fd6601916b0d5bdcbe382fa786a3cf74b24cdbb5a2843b56ddb14d5514139b1cffcd68d45f9f082186e2ea8f774c899cbbaac2e6207cbe86645fb346fd360d94a2b61e0cf9d33778cf3b3aac5fbf29288fc065ea5a218b404b82c79098b48a8051d03b6f8c4df4843b665eaf6935ad0e703cd928d228a48b51d23afa1bde22b7655dd4d8fb73b2b10533d6da9b9fe6aac3d1e73e5157c0e33bae4f31f10212d7f87d9341e3090b3c7c8ef79efae8bb744a5f8db2bcedeceea81e8c23716e113bbd24722d6f33dfe6438006fadc9bab9809c5c5b3371994a55263a52e9bcdcd3665f8472bbc0c59d27c0a7d023763ca55f80b7a20014636be698a2f1e0a5ed5320b1591e0c1350fe41593942495ba1a214cf18dee3c73635d208a60737b253cc716d1cdf0c7546dab111bfdc0777c4ae297e9a35153e84d7c5411df5e134f2a128d5c0240aff77e076a1113214ee68fe0c294996944180a7a5c4c35ce341682cb31607c3cf5514b1f1035673f3475376a8cbf20b50cf3272a49c8aafda33fef13aa90781f9c14741886fbdda634205fa98c94dfe5f06533d17d772ec5be90243a24f1db46530fc8b8e167cec2276dc16cd755e371f85827f44da53114333abd41b2ea70faac6762d38b5751e243b2e01ce7d00dce1069419fde74c49ebfabf86eb696fc6f07a8b4f95683449416c9633f3ef6a2eba6a687291e2e7f48a3fd15bdd2187e7790fbfe684b5764d7ef0bb3ba99c2e120300cf58c408608ba6090e15539024787a0290083d808380214a8ecd11effcc05149e476b1ea5b82047411050068806e331171513c57713f0987133e155d3b312aadc9f243f8533fb07ce208d46c42604669ff4b8a28be3bc71f38b45081d262ec130a818d05d8a8b52cf923727f59380441524be1d3448223a2cccaabe7d86a88c4a9ad8683a42cadc41b4f26faa91d9c927edf30cb8137e74d7c8b40a9adc2567de40144ba8f86776a1ee234d02c56fbfecdc636aac44aa59d0392d8e8c13531350f2c4b5b6417db0667a557acca8f931d31a56c3b55f603e9646cc409dd54db6d89be0a7a5b5459639915bacc24885e4a1e2f3a805cd7a315f71601d5fcb2b658deaa676d77ad646003770df1be040641ff3391c4770e5461c38eb2b0eb58e9134de52e78d36c3dfd1ef42d9561b78116e70b3658ba7ff9411a7085b80a8082977d57e9df4851e5f7da33f06f7c47447bab0b4c7d3b9c9a511ff6d8ed4a26287d9ed154302ff6ed1aecaa226d60ded733eebc924ce2df1f7ada22a10db46e768918178cffc926b61544f59f6b0be26900a5204e97b6b91b16c227796f903e5e1d3924a4f3286579507a30a1486d7d186a2fd5059b2e83cecae0c7ae26dc7c262e717263c1599e7da38f3e3ce06abaf77876979c0835c859e101ff6fa4ab2a96e65a497cdf27b1df052d07bbe1bd4284d8f817d586667dca367a668a1904430ee1ca62098d919f0a4eea1244a8e4a7792c86165fdd8b9be99262d2f40ecda00a9a5afc1bde0e630814e8aef82176dcd37463e34e63c115d9d33012e497c41c22e98978ee1e4d44becb9df7920d9f8490427d020d602cc741a03284d01e81804714d46f13ac08e2a6a8677286fd66c528b985dc51d7b150417ce8fe991e2db228bca99fa6eecfe654307fda8a227ce880e7da556ffd3ed3adca545953da9c369033f2e819a1d66636fd1e9794bbd0d7a75e68c44c632eef85b205cab173aa5a9023ecbcdbdd43e4afc7ee5346075ee1bd79795245a8437d41496d3a25144af27fa026fc1b4135e28c753127fa19c147bc14c68b15fe170fff5b916eb069a414c069da3dd2640ddde8e819ae37b670ff42dca8010cced7373d0ee0c2fb05de16dc8959d172c4f467a25038b97fbf9e60bd3c40c73871d4114d6d81acb7d57552495c336e5da9b71b7872e9ebdf082023674118c3f94af6f05ab5e19ecd8ec055dd6eece56f850e902745173f758e2387c1464866348bbb5d436937192371564fd9769eb4542444ef4e60701594fbd6afc80fc7e0f7616ec8286fa1059395a2ff7ffd3fc434b84f23ca88fe44c8cf21e1b13b3f3f66543e71b855f3f785dfe1f954462fbcf57b591c0a725d27381251828d7fdf7e09bdbd625e89e98f61fb76d56ad69106510ecefa93853f0da630f7b4f324c17494d1fa51f94e9daa978b572065f6396a7f3d649060798b32b61ee7bc7ff03fdfd800e8dba8c9b0c8d51433972db34e0cc2666d54dacc4c1da366bfd58f5321f6daa88d4e49a450a75e2ae935471886bda66022b4167a743d8e7518fa2b427408f5c3278152f3d97404e34c2e0531a322518bea013e44c82546b135398263854cc3fa21f72389170c4e422e2e221c43634442eec3712c172f3b9a4e29c43d59ed1715391dc27f7254ac5918f9985288b5ff44a52c93c5663312331a3341fdff4d24607f91c4fc0cce634a4f69f686ab52ec6e36e41a1fc87af4eba40ab2da228194a6cc9b98f271f74666c47a3e371e866dd8a41293dd6474b2dde3f6bc452b010490e17cc4e7df92e7436788e7e60dda166a38314f18e631656862ff7ecdbb85cdad2dea4365443da5617877df6bad1abc1be597a2961df6cf34f5f110a60694b406e4ae9e48077132ed583f76b54f3c37108b19c47acc4bc02072a64a0da39bbbbd6f2110a8e925a63389d963057f466d02a10f6a6ba2112b74e28e0aae33b0f028c2270f1f07c42b25c812c3dc34f811b862c3485b4396cceca3ec6a62e47bd519533c30f3d9cf05b0ec9886f8abb796ce31b290ab6b515dcc7d7f3ab11582fff535ffe2746333c1d288f7a22ee36ed232f1a7d6dc3c825d86d211af3eecdfdea7cb7a4e5139ebec4a3b7e81518e76a6d8951bfb090705f21d158d89061815e7dba1cc8134e2f80955dc63f3fc0a5fb953b4ab05c22ca761092418c32725732e54dcf086430f6b114761b745ae8ab00127ca375ca08d7c4ff7e306f7bfeab6d87a7e43218c267ef145095fc7a1ad58a283007734de55aea229a24c63372ae40e32618468612464d61840d79d837722d8204ed09b9bda9f438df009c9a2e4584755dd4ad91a3378255e0b104258baf6175e7d9df45c3caa2aebfb5866e4d20fa09e06ab689903a1c1b622ea04f1208adbf7cd6ab7a53068441eab17dafb00a07bbd5083a6691f6f34a9fa82b1ded4660deaf67343ab9aaae5f70c0b5a287ba669f32a1431ede98ac58bb4f42ef2a23122cd6a3da7658174853a7400bbda3ea58ce0f5589a6d5eb45e0a17aedf12bb175a8d083492e768f52b23881e61f3492fc039e478a712918ff2b1721b9e6e7911e16539f6104fbd0457b5521391672f1e57cdc2632ace97d4e21372213d1546578f7c8c12218600d85bd53cc6a5f2a2b1e88400c55f13703df10ab28a327112404f4663b19c4e938acd3917bfa5580845d0060a9136dfd88000bc05d07476bda0742ced80e1f61103ac1a501cb648ec6ffcfb0c1ce6fcce6e97832a720eb621091f2bb8ca2535e4c4c2335d6cf8a88cdc484b19dd12a0cad69bcef70f1c5a416ea21ccdbaef497a4ae417370531e48fc48fd01106934b6fc6cfae0acfe78f208d5ecbb773707484b57768781f57126d774a75099b308035862572d3fbf86692d474bd92850405bfbb80dc8a525ff594bb0d908ceaa9f51b2ac7b41a2b4c45621b62b1e1ba55e394ee15c4c222598b4e58b8addf87474a3aa94e9233d36520ded5f6ede8be6c32d38af2f8a0fb27562b2e3330490d46047e0a2d383830c2b0525c049d3005888bbbd247162275b157e440942b37eaf4abb9a4d22ef15d6d3009096d9b3d6732c35c2878e4c2fc905f2d961bf3700f0c08740249b57a18be63a18ff2fd7340fa3baa719839cf8eaa389a2f3b81af202c4a9abbdd030bfaef70cb65fc961bb579ed400e648cd8c1b100b289c38067a6d422c1a0a9f027795eecdaa7230d6e0662d0f59ab1cb0671b3b99ec12b65771f0c7416456b99537d10779d496f17e0c04160e879a5d089adf6f8060d92c44039ef2475f4647b5f3b30335ba2a50403d09644a00122d3bf7553c8eccb0e8dc612a83e6e5a7acab9f014fbbc712623ea86edc9bec0e4c392efaea3c56bb5ec45832ccbe6329509a6800ee36e85bb3b65dcf5aff9aa2db6569a230cdf1296e815d717191bad83ba31c1e42b69c6a5cd214739b1af105a244283c59c4f60d730fe6835ca983f3bea050012d6b6bc13a70591950de0d0d8857c200b61158a13f2c2d2536a799b7b4ac302ffbc78e9769e324c6ebfd567f5f4c2b053f7b59b6b07285194526d40ca6a5c4c376fa127b6b100489ce5266ebafa0cdec24b5bd7a22f295402303f8d1ddc3d1427d4c3beece3309d55f138d878c8054b259c53e59489f5f3610b3784489cdfa6083867a92a5f7e30826a6f590b9c809020c0f8eb73b70a971c050a70af2ca3a70573554b97c60037872df3e5c3f2e91103827306e72fbf1b072250e432b7bf8a5540783a2848724989eb86670e1f5b0675a39f7b1548260fd211d9c05e48e1a3df852842c477a36bbbac07317246dc8b4c3383227485556992735bfea38ef7a8a3a372464dc0ee6b9a09548a37dce62d563d04eaec5cb54c9614170e0811b53fd05dbd192744f74b5e0e3cc1b29dc0755ae4fc0c14ae8927f72864a796e65130e05d012336a96e5b15f17ae6258c67ecab6505bc1a26c00d5010e86f243412ca4264da4ed41670238faca1d7c7ed6ae74cc104ff3f9c045ce7efad15db83c3f5bbf001507caf3e6ee0a11a9c10205d91a7bbc12b2a91065352440a18493315df7dfa671bf8e1bd6d67119fbc3bb69d5661a43481b00ee60dab9d725f7f166ff989a0cbe21ec7f0007bf09cf5b5bc65b5835c4d0bfe6981616dffe0eae36d5b8c39d14645801919bc537212fb941ebe346bcb5037cf8b894ca92a0682fb2b37f08609a4a9465f0c423250343fc2367da64b690e273293431a36813cea94de5cf411c5c3c0265239aafb8fbe45c55fabd94baf7053023d1b0f647abcc07be35fa5a0c3aba2da35f6c2d8a739beccd96916cd30bdd8533411a425ae30b5d02b8d79c3622118641fb8551a31e1c1f4a0551d2b57eeee4097e9c48e09481c228bef6aa3c4aa7b9e72e8731cbc57a20a9e3417ec718c6d57a401d3c04ee2e4066d6d950149e277dc2bdaa23879b2c5135611d82ad8d20a4b2235c09da69fbd9878cbc52b25622165e0ab3bffe476eb2884629596dc865f6b13ba510cb375e59195636deeeb06786a7c9904ccdc58eb8664fe7b4d32bcb9fc8ab135c25ee2c22837c6c3a8c116e8fdcfc310799d0fc974e43d3a73fa0f8bd9057a1465823567f681c1d2e6c4a33770a4dccd06bce94b0af0e4d198b040d8094d610bbbd4501d8da6028b5e73f135cba6a8d7bb6cab2f06576eacd823e520282f9f883634a6dd4cc4810cba3f760b9842a0acae7a396892b658e3b6c84d0e75196b4e6a3240e9d2aadf257ae970153238e347d3cbcbfabae300494ea0d1bf292799e09b8064ed885cce1574ee94c216c50017c43b3407716e5919fa0706fc9e9c382bb321e8d6fa2520543d0427a620bb45c56d3f7e66aa025f17863024a2bd693d932bacfa516fec791e86982d020faa819bf2264f8606ef260a29af16300971d0ec49d6f5a21f9c437b75b44eb59bbaf71947621a1e78c68e2767dd42c7f6e3dd6faeebfc8fdfe4dec6db3fdd2d53c906f6040278ea235b37442f34cfa1a1f1064acce6a7cdb9657c1ea2def6c1f2220ab57ececfe53b4bdb6e57afaac1c055f25202c1efa65b3e48f5b57dcd2b7f3572d1d96a736813ca6acc75c967a89edc5dd62eea64cd46eeab6aa879887360aec466dd287705497e832bd4eb3d73524e4847c18f8b46de1a88a00dfa43acf51fe97288d53e30c6f2739b4532c6e8f7286a25c5f5f10532fee71d7c1c1f6a1c56f2535d94e2dd774f424cab2bf3673e097fd3cfb55ba1f29a6d03dc31abc214a6dc5950824f05f0a3036690120684a7117d42e9d40b56f3738428540c27f25ce4130966fc9b08f831756d5448be9ad7d07b95bfe61fb396438bba4ccaffa7a8a21edc5324d72514427a75a3619e48400e1b13a97ae7097f87c9253035ac3a1e3bf6d22725d22e31b7e0c9515f98f34ba357cc136190f81c010f83306d97a89184656bef128a648b9878bbefc508a631f949d8540ed16aead49d51911901d74d7aa9649317356ebd2ac0441be95291c1c2ba803b2e4604ac4b09e29fc6200819fb2603b46dbe929e4cc661c4f31a6cdc94a81fa62eb28bf447fe2ddbbb3d5f2b97d4189ffe5d83bc8be19ee5c92b958488a55c859d7eb5885674bd351c4125a02151529e9ab01685f2e4bba3aef0d5e9ad8678dab470d761beb8785424d51c4aa728417d1edc7cc44d8c7f2f5a09c68f940fc72a4ed2952e1985b2727befdf551d95e8d43e4dcab6f65b12ea706cbc10e5354a894e7646118e60", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x78, 0x0, 0x0, {0xcdce, 0x10, 0x0, {0x3, 0x0, 0x1000, 0x1, 0x5, 0x6, 0x80000000, 0xb, 0x1, 0x5000, 0x5, 0x0, 0x0, 0x300, 0x23}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r5, 0x0, 0x2) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 1.084442756s ago: executing program 2 (id=1114): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x91}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000180)={{&(0x7f00006db000/0x3000)=nil, 0x3000}, 0x1}) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000080)={0x2a, 0x5, 0x1, 0x6, 0x8}) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000040)={0x18, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x185880) 890.055466ms ago: executing program 2 (id=1115): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32=r1], 0x60}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_init1(0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) writev(r3, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) pipe2(&(0x7f0000000140), 0x80800) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x0, 0x80}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4f, 0x0, r7, 0x0, &(0x7f00000001c0)="a88d4ec571252496a3aebed7493be58f0d395857eafe78d620b02a5835659997c49801b377fd99ea63bfe39d85c7b213c7e79dc0a55698cda8139942707a0877191439e4a6830693f6a60ae34acfbff6d4a89ace8907f4f4c0bb2d54a6631969675c", 0x62, 0x20}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x3) 845.214963ms ago: executing program 0 (id=1116): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1f85, &(0x7f0000000080)={0x0, 0x1a87, 0x20000, 0x0, 0x185}, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1a, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x8, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@private0, 0x3, r3}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x3c, r3}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x24) epoll_create1(0x0) 442.187974ms ago: executing program 1 (id=1117): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xc8) dup3(r2, r1, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) socket(0x848000000015, 0x805, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e000000040002800800", @ANYRES64=r3], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 0s ago: executing program 0 (id=1118): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x1, 0x4) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1c, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000d4}, 0x44000) kernel console output (not intermixed with test programs): 270.786169][ T5895] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 5 [ 270.801280][ T5895] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 270.841454][ T5895] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83 [ 270.850359][ T5895] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84 [ 270.865411][ T5895] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3 [ 270.878516][ T5895] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4 [ 270.900035][ T5895] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 86 [ 270.919673][ T5895] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 6 [ 270.943211][ T5895] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 271.255949][ T24] elan 0003:04F3:0755.000A: failed to start in urb: -90 [ 271.310341][ T24] elan 0003:04F3:0755.000A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 271.446630][ T5898] usb 2-1: USB disconnect, device number 42 [ 273.077856][ T5924] usb 4-1: USB disconnect, device number 40 [ 273.126412][ T5924] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 273.174853][ T8475] FAULT_INJECTION: forcing a failure. [ 273.174853][ T8475] name failslab, interval 1, probability 0, space 0, times 0 [ 273.219112][ T8475] CPU: 1 UID: 0 PID: 8475 Comm: syz.0.819 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 273.219142][ T8475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 273.219154][ T8475] Call Trace: [ 273.219162][ T8475] [ 273.219170][ T8475] dump_stack_lvl+0x241/0x360 [ 273.219217][ T8475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.219243][ T8475] ? __pfx__printk+0x10/0x10 [ 273.219272][ T8475] ? __pfx___might_resched+0x10/0x10 [ 273.219297][ T8475] should_fail_ex+0x424/0x570 [ 273.219321][ T8475] should_failslab+0xac/0x100 [ 273.219353][ T8475] __kmalloc_noprof+0xdf/0x4d0 [ 273.219377][ T8475] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 273.219404][ T8475] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 273.219436][ T8475] tomoyo_realpath_from_path+0xcf/0x5e0 [ 273.219475][ T8475] tomoyo_path_number_perm+0x245/0x790 [ 273.219497][ T8475] ? __lock_acquire+0xad5/0xd80 [ 273.219517][ T8475] ? tomoyo_path_number_perm+0x215/0x790 [ 273.219543][ T8475] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 273.219600][ T8475] ? __fget_files+0x2a/0x420 [ 273.219616][ T8475] ? __fget_files+0x2a/0x420 [ 273.219634][ T8475] ? __fget_files+0x2a/0x420 [ 273.219656][ T8475] security_file_ioctl_compat+0xc6/0x2a0 [ 273.219680][ T8475] __se_compat_sys_ioctl+0xd8/0xc30 [ 273.219702][ T8475] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 273.219727][ T8475] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 273.219750][ T8475] ? __fget_files+0x2a/0x420 [ 273.219772][ T8475] ? fput+0x9b/0xd0 [ 273.219787][ T8475] ? ksys_write+0x275/0x2d0 [ 273.219815][ T8475] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 273.219838][ T8475] ? lockdep_hardirqs_on+0x9d/0x150 [ 273.219862][ T8475] __do_fast_syscall_32+0xb4/0x110 [ 273.219884][ T8475] ? exc_page_fault+0x5f8/0x920 [ 273.219909][ T8475] do_fast_syscall_32+0x34/0x80 [ 273.219932][ T8475] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.219954][ T8475] RIP: 0023:0xf7fb3579 [ 273.219970][ T8475] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 273.219985][ T8475] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 273.220004][ T8475] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c028aa03 [ 273.220016][ T8475] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.220026][ T8475] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 273.220036][ T8475] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 273.220047][ T8475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.220073][ T8475] [ 273.220080][ T8475] ERROR: Out of memory at tomoyo_realpath_from_path. [ 273.234438][ T5924] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 273.564185][ T5924] keyspan 4-1:0.11: device disconnected [ 273.756297][ T8487] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.824'. [ 273.783787][ T5899] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 273.933661][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 273.959452][ T5899] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 273.971278][ T5899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.009392][ T5899] usb 2-1: config 0 has no interface number 0 [ 274.030254][ T5899] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 274.060497][ T5899] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 274.086071][ T5899] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 274.110990][ T5899] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 274.132796][ T5899] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 274.159333][ T5899] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 274.170208][ T5899] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 274.311945][ T5899] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 274.333052][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.361940][ T5899] usb 2-1: Product: syz [ 274.376603][ T5899] usb 2-1: Manufacturer: syz [ 274.381358][ T5899] usb 2-1: SerialNumber: syz [ 274.405651][ T8497] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 274.412612][ T8497] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 274.436437][ T5899] usb 2-1: config 0 descriptor?? [ 274.442373][ T8479] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 274.463857][ T8497] vhci_hcd vhci_hcd.0: Device attached [ 274.503606][ T974] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 274.524196][ T5899] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 274.563663][ T5899] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 274.644117][ T5924] vhci_hcd: vhci_device speed not set [ 275.443681][ T5924] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 275.463533][ T974] usb 1-1: Using ep0 maxpacket: 8 [ 275.474479][ T974] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.491144][ T974] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 275.555540][ T974] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 275.565139][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.573181][ T974] usb 1-1: Product: syz [ 275.603527][ T974] usb 1-1: Manufacturer: syz [ 275.613546][ T974] usb 1-1: SerialNumber: syz [ 275.625686][ T974] usb 1-1: config 0 descriptor?? [ 275.840196][ T8499] usbip_core: unknown command [ 275.845263][ T8499] vhci_hcd: unknown pdu 0 [ 275.860980][ T8499] usbip_core: unknown command [ 275.892405][ T5899] usb 1-1: USB disconnect, device number 38 [ 275.898722][ T2864] vhci_hcd: stop threads [ 275.906701][ T5924] vhci_hcd: vhci_device speed not set [ 275.914869][ T2864] vhci_hcd: release socket [ 275.937051][ T2864] vhci_hcd: disconnect device [ 275.982976][ T974] usb 2-1: USB disconnect, device number 43 [ 275.993698][ T5924] usb 33-1: device descriptor read/64, error -71 [ 276.218426][ T5924] vhci_hcd: vhci_device speed not set [ 276.893801][ T974] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 276.923546][ T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 277.055842][ T974] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 277.077020][ T974] usb 3-1: config 0 has no interface number 0 [ 277.083187][ T974] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 277.103718][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 277.118824][ T974] usb 3-1: config 0 interface 11 has no altsetting 0 [ 277.131012][ T974] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 277.148102][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.158558][ T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 277.173709][ T974] usb 3-1: config 0 descriptor?? [ 277.186215][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.193900][ T8514] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 277.233361][ T974] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 277.233540][ T24] usb 1-1: Product: syz [ 277.255174][ T974] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 277.263255][ T974] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 277.278297][ T24] usb 1-1: Manufacturer: syz [ 277.279238][ T974] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 277.285549][ T24] usb 1-1: SerialNumber: syz [ 277.292973][ T974] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 277.315298][ T974] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 277.323325][ T974] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 277.342309][ T974] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 277.364414][ T974] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 277.368490][ T24] r8152-cfgselector 1-1: Unknown version 0x0000 [ 277.377910][ T974] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 277.387141][ T974] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 277.394351][ T24] r8152-cfgselector 1-1: config 0 descriptor?? [ 277.427879][ T974] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 277.460117][ T974] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 277.480404][ T974] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 277.497653][ T974] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 277.630701][ T24] r8152-cfgselector 1-1: Unknown version 0x0000 [ 277.649615][ T24] r8152-cfgselector 1-1: bad CDC descriptors [ 277.688908][ T24] r8152-cfgselector 1-1: USB disconnect, device number 39 [ 278.028401][ T8531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.834'. [ 278.138159][ T974] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 278.296796][ T974] usb 4-1: unable to get BOS descriptor or descriptor too short [ 278.311330][ T974] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 278.350928][ T974] usb 4-1: config 1 has no interface number 1 [ 278.373555][ T974] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 278.440777][ T974] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 278.455400][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.467709][ T974] usb 4-1: Product: syz [ 278.489693][ T974] usb 4-1: Manufacturer: syz [ 278.542230][ T8524] delete_channel: no stack [ 278.565820][ T974] usb 4-1: SerialNumber: syz [ 279.174582][ T5898] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 279.233681][ T5899] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 279.253661][ T8520] netlink: 60 bytes leftover after parsing attributes in process `syz.3.833'. [ 279.369307][ T974] usb 4-1: found format II with max.bitrate = 26774, frame size=8 [ 279.423553][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 279.431421][ T974] usb 4-1: found format II with max.bitrate = 26774, frame size=8 [ 279.432583][ T5898] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 279.447965][ T5899] usb 5-1: config 0 has no interfaces? [ 279.448986][ T5898] usb 1-1: config 0 has no interface number 0 [ 279.465516][ T5898] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 279.475998][ T974] usb 4-1: failed to enable PITCH for EP 0x82 [ 279.477306][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.496223][ T5898] usb 1-1: Product: syz [ 279.506562][ T5898] usb 1-1: Manufacturer: syz [ 279.512943][ T5899] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 279.532553][ T974] usb 4-1: USB disconnect, device number 41 [ 279.539016][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.542911][ T5898] usb 1-1: SerialNumber: syz [ 279.575408][ T5899] usb 5-1: Product: syz [ 279.589207][ T5899] usb 5-1: Manufacturer: syz [ 279.652109][ T5898] usb 1-1: config 0 descriptor?? [ 279.705972][ T5899] usb 5-1: SerialNumber: syz [ 279.709446][ T5898] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 279.732728][ T24] usb 3-1: USB disconnect, device number 39 [ 279.745145][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 279.777357][ T5898] usb 1-1: selecting invalid altsetting 1 [ 279.809779][ T5898] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 279.819652][ T5899] usb 5-1: config 0 descriptor?? [ 279.845951][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 279.864295][ T5898] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 279.890702][ T5898] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 279.900211][ T5898] usb 1-1: media controller created [ 279.913981][ T24] keyspan 3-1:0.11: device disconnected [ 279.928941][ T8546] ALSA: mixer_oss: invalid OSS volume '' [ 279.946369][ T8314] udevd[8314]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.016856][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 280.124626][ T5898] usb 1-1: DVB: registering adapter 2 frontend 0 (Zarlink ZL10353 DVB-T)... [ 280.148992][ T5898] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 280.586514][ T974] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 280.595629][ T5898] DVB: Unable to find symbol mxl5005s_attach() [ 280.665685][ T5898] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 280.797181][ T974] usb 2-1: Using ep0 maxpacket: 16 [ 280.818741][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.833279][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.867278][ T974] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 280.884008][ T5898] usb 1-1: USB disconnect, device number 40 [ 280.896893][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.972282][ T974] usb 2-1: config 0 descriptor?? [ 281.412327][ T8564] futex_wake_op: syz.2.844 tries to shift op by -33; fix this program [ 281.435352][ T8564] netdevsim netdevsim2: Direct firmware load for . [ 281.435352][ T8564] failed with error -2 [ 281.447004][ T8564] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 281.447004][ T8564] [ 281.469268][ T974] corsair 0003:1B1C:1B02.000B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 281.632319][ T974] corsair 0003:1B1C:1B02.000B: Failed to get K90 initial state (error -71). [ 281.650823][ T974] usb 2-1: USB disconnect, device number 44 [ 281.953557][ T5898] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 282.105563][ T5898] usb 4-1: unable to get BOS descriptor or descriptor too short [ 282.129252][ T5898] usb 4-1: config 6 has an invalid interface number: 200 but max is 0 [ 282.170371][ T5898] usb 4-1: config 6 has no interface number 0 [ 282.177539][ T5898] usb 4-1: config 6 interface 200 has no altsetting 0 [ 282.178414][ T974] usb 5-1: USB disconnect, device number 41 [ 282.227311][ T5898] usb 4-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 282.247318][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.307113][ T5898] usb 4-1: Product: syz [ 282.321575][ T5898] usb 4-1: Manufacturer: syz [ 282.327452][ T5898] usb 4-1: SerialNumber: syz [ 283.333990][ T5924] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 283.341789][ T974] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 283.553675][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 283.564024][ T974] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 283.603187][ T5924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.617201][ T974] usb 2-1: config 0 has no interface number 0 [ 283.623601][ T974] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 283.831731][ T5924] usb 5-1: config 0 has no interfaces? [ 283.862988][ T5924] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 283.879281][ T974] usb 2-1: config 0 interface 11 has no altsetting 0 [ 283.893289][ T974] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 283.902604][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.943694][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.978361][ T5924] usb 5-1: config 0 descriptor?? [ 283.987222][ T974] usb 2-1: config 0 descriptor?? [ 284.004509][ T8580] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 284.083023][ T974] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 284.354541][ T974] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 284.381990][ T974] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 284.408872][ T974] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 284.434874][ T974] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 284.462197][ T974] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 284.483131][ T974] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 284.518128][ T974] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 284.558981][ T974] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 284.610142][ T974] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 284.727626][ T974] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 284.761192][ T974] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 284.786945][ T974] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 284.871469][ T974] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 284.970216][ T974] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 285.082581][ T5898] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 285.084337][ T8593] FAULT_INJECTION: forcing a failure. [ 285.084337][ T8593] name failslab, interval 1, probability 0, space 0, times 0 [ 285.102856][ T8593] CPU: 0 UID: 0 PID: 8593 Comm: syz.2.854 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 285.102876][ T8593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 285.102885][ T8593] Call Trace: [ 285.102891][ T8593] [ 285.102897][ T8593] dump_stack_lvl+0x241/0x360 [ 285.102924][ T8593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.102946][ T8593] ? __pfx__printk+0x10/0x10 [ 285.102976][ T8593] should_fail_ex+0x424/0x570 [ 285.102995][ T8593] should_failslab+0xac/0x100 [ 285.103017][ T8593] kmem_cache_alloc_noprof+0x78/0x390 [ 285.103037][ T8593] ? skb_clone+0x20c/0x390 [ 285.103057][ T8593] skb_clone+0x20c/0x390 [ 285.103084][ T8593] ? dev_queue_xmit_nit+0x28c/0xcf0 [ 285.103107][ T8593] dev_queue_xmit_nit+0x361/0xcf0 [ 285.103130][ T8593] ? dev_queue_xmit_nit+0x2b/0xcf0 [ 285.103157][ T8593] dev_hard_start_xmit+0x1b5/0x840 [ 285.103181][ T8593] __dev_queue_xmit+0x1b80/0x3f60 [ 285.103196][ T8593] ? kasan_save_track+0x3f/0x80 [ 285.103210][ T8593] ? __kasan_slab_alloc+0x66/0x80 [ 285.103229][ T8593] ? __do_fast_syscall_32+0xb4/0x110 [ 285.103251][ T8593] ? __dev_queue_xmit+0x2f9/0x3f60 [ 285.103270][ T8593] ? __pfx___dev_queue_xmit+0x10/0x10 [ 285.103296][ T8593] ? __copy_skb_header+0xa7/0x5a0 [ 285.103312][ T8593] ? __asan_memcpy+0x40/0x70 [ 285.103326][ T8593] ? __skb_clone+0x5c/0x6d0 [ 285.103345][ T8593] ? __skb_clone+0x457/0x6d0 [ 285.103383][ T8593] ? skb_clone+0x240/0x390 [ 285.103402][ T8593] __netlink_deliver_tap+0x561/0x7f0 [ 285.103439][ T8593] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.103471][ T8593] netlink_deliver_tap+0x19d/0x1b0 [ 285.103511][ T8593] netlink_unicast+0x7c6/0x9a0 [ 285.103544][ T8593] ? __pfx_netlink_unicast+0x10/0x10 [ 285.103571][ T8593] ? skb_put+0x114/0x1f0 [ 285.103600][ T8593] netlink_sendmsg+0x8c3/0xcd0 [ 285.103660][ T8593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.103695][ T8593] ? __import_iovec+0x585/0x830 [ 285.103723][ T8593] ? aa_sock_msg_perm+0x91/0x160 [ 285.103766][ T8593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.103784][ T8593] __sock_sendmsg+0x221/0x270 [ 285.103804][ T8593] ____sys_sendmsg+0x523/0x860 [ 285.103825][ T8593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.103851][ T8593] __sys_sendmsg+0x271/0x360 [ 285.103869][ T8593] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.103918][ T8593] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 285.103935][ T8593] ? lockdep_hardirqs_on+0x9d/0x150 [ 285.103952][ T8593] __do_fast_syscall_32+0xb4/0x110 [ 285.103969][ T8593] ? exc_page_fault+0x5f8/0x920 [ 285.103987][ T8593] do_fast_syscall_32+0x34/0x80 [ 285.104004][ T8593] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.104021][ T8593] RIP: 0023:0xf711d579 [ 285.104032][ T8593] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 285.104043][ T8593] RSP: 002b:00000000f510d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 285.104057][ T8593] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 285.104066][ T8593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 285.104074][ T8593] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 285.104081][ T8593] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 285.104089][ T8593] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 285.104108][ T8593] [ 285.464084][ T5898] dvb-usb: bulk message failed: -71 (3/0) [ 285.529523][ T5899] usb 5-1: USB disconnect, device number 42 [ 285.539796][ T5898] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 285.617507][ T5898] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 285.644731][ T5898] usb 4-1: media controller created [ 285.667361][ T8596] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 285.725277][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.751574][ T8595] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 285.768414][ T8595] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 285.793914][ T8595] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 285.802055][ T8595] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 285.813087][ T8595] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 285.818148][ T5898] dvb-usb: bulk message failed: -71 (6/0) [ 285.827580][ T8595] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 285.836115][ T8595] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 285.845040][ T8595] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 285.854860][ T8595] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 285.875376][ T5898] dvb-usb: bulk message failed: -71 (6/0) [ 285.895195][ T5898] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 285.912266][ T5898] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input32 [ 286.042382][ T5898] dvb-usb: schedule remote query interval to 150 msecs. [ 286.110594][ T5899] usb 2-1: USB disconnect, device number 45 [ 286.164092][ T5899] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 286.199510][ T5898] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 286.443557][ T1206] dvb-usb: bulk message failed: -71 (1/0) [ 286.444563][ T5899] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 286.449672][ T1206] dvb-usb: error while querying for an remote control event. [ 286.525113][ T5899] keyspan 2-1:0.11: device disconnected [ 286.530955][ T5898] usb 4-1: USB disconnect, device number 42 [ 286.728436][ T5898] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 287.163496][ T5898] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 287.363957][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 287.383867][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.395127][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.424903][ T5898] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 287.437538][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.471443][ T5898] usb 4-1: config 0 descriptor?? [ 287.593564][ T1206] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 287.755942][ T1206] usb 2-1: unable to get BOS descriptor or descriptor too short [ 287.766222][ T1206] usb 2-1: config 6 has an invalid interface number: 200 but max is 0 [ 287.776179][ T1206] usb 2-1: config 6 has no interface number 0 [ 287.782378][ T1206] usb 2-1: config 6 interface 200 has no altsetting 0 [ 287.789421][ T24] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 287.808466][ T1206] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 287.818293][ T1206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.834072][ T1206] usb 2-1: Product: syz [ 287.843495][ T1206] usb 2-1: Manufacturer: syz [ 287.848149][ T1206] usb 2-1: SerialNumber: syz [ 287.932462][ T5898] corsair 0003:1B1C:1B02.000C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 287.976356][ T24] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 287.984846][ T24] usb 5-1: config 0 has no interface number 0 [ 287.994121][ T24] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 288.014405][ T24] usb 5-1: config 0 interface 11 has no altsetting 0 [ 288.029718][ T24] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 288.051596][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.064286][ T24] usb 5-1: config 0 descriptor?? [ 288.071239][ T8636] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 288.104123][ T24] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 288.142684][ T24] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 288.154713][ T5898] corsair 0003:1B1C:1B02.000C: Failed to get K90 initial state (error -71). [ 288.166703][ T24] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 288.188555][ T5898] usb 4-1: USB disconnect, device number 43 [ 288.194828][ T24] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 288.219379][ T24] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 288.252075][ T24] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 288.277588][ T24] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 288.291296][ T24] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 288.312911][ T24] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 288.323954][ T24] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 288.331990][ T24] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 288.347150][ T24] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 288.356486][ T24] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 288.365002][ T24] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 288.376649][ T24] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 288.397715][ T24] usb 5-1: USB disconnect, device number 43 [ 288.427107][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 288.488639][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 288.532994][ T24] keyspan 5-1:0.11: device disconnected [ 289.265327][ T1206] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 289.293777][ T1206] dvb-usb: bulk message failed: -71 (3/0) [ 289.319083][ T1206] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 289.329690][ T1206] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 289.338552][ T1206] usb 2-1: media controller created [ 289.507046][ T1206] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 289.694283][ T1206] dvb-usb: bulk message failed: -71 (6/0) [ 289.753697][ T1206] dvb-usb: bulk message failed: -71 (6/0) [ 289.826937][ T1206] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 289.921619][ T1206] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input33 [ 289.977057][ T1206] dvb-usb: schedule remote query interval to 150 msecs. [ 289.996022][ T1206] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 290.027944][ T1206] usb 2-1: USB disconnect, device number 46 [ 290.165305][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'. [ 290.197669][ T1206] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 290.219505][ T8679] netlink: 'syz.2.887': attribute type 5 has an invalid length. [ 290.269210][ T8679] netlink: 20 bytes leftover after parsing attributes in process `syz.2.887'. [ 290.317975][ T8679] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 290.352774][ T8679] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 290.373890][ T8679] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 290.411366][ T8679] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 290.438056][ T8679] geneve2: entered promiscuous mode [ 290.452229][ T8679] geneve2: entered allmulticast mode [ 290.549069][ T8689] netlink: 'syz.1.890': attribute type 6 has an invalid length. [ 290.588345][ T8689] netlink: 40 bytes leftover after parsing attributes in process `syz.1.890'. [ 291.333646][ T5924] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 291.483932][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 291.593252][ T5924] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 291.602512][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.617496][ T5924] usb 2-1: Product: syz [ 291.621706][ T5924] usb 2-1: Manufacturer: syz [ 291.633630][ T5924] usb 2-1: SerialNumber: syz [ 291.648399][ T5924] r8152-cfgselector 2-1: Unknown version 0x0000 [ 291.654801][ T5924] r8152-cfgselector 2-1: config 0 descriptor?? [ 292.173109][ T5924] r8152-cfgselector 2-1: Unknown version 0x0000 [ 292.179771][ T5924] r8152-cfgselector 2-1: bad CDC descriptors [ 292.241088][ T5924] r8152-cfgselector 2-1: USB disconnect, device number 47 [ 293.213536][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 293.376252][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 293.385838][ T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 293.395057][ T24] usb 4-1: config 1 has no interface number 1 [ 293.401196][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 293.441873][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 293.473536][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.586205][ T24] usb 4-1: Product: syz [ 293.594186][ T24] usb 4-1: Manufacturer: syz [ 293.598924][ T24] usb 4-1: SerialNumber: syz [ 294.362029][ T8722] delete_channel: no stack [ 294.414750][ T8703] netlink: 60 bytes leftover after parsing attributes in process `syz.3.895'. [ 294.478256][ T24] usb 4-1: found format II with max.bitrate = 26774, frame size=8 [ 294.490333][ T24] usb 4-1: found format II with max.bitrate = 26774, frame size=8 [ 294.519782][ T24] usb 4-1: failed to enable PITCH for EP 0x82 [ 294.603291][ T24] usb 4-1: USB disconnect, device number 44 [ 294.642606][ T8732] program syz.1.901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.776066][ T8741] FAULT_INJECTION: forcing a failure. [ 294.776066][ T8741] name failslab, interval 1, probability 0, space 0, times 0 [ 294.851610][ T8741] CPU: 1 UID: 0 PID: 8741 Comm: syz.4.904 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 294.851644][ T8741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 294.851657][ T8741] Call Trace: [ 294.851665][ T8741] [ 294.851675][ T8741] dump_stack_lvl+0x241/0x360 [ 294.851713][ T8741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.851743][ T8741] ? __pfx__printk+0x10/0x10 [ 294.851778][ T8741] ? __pfx___might_resched+0x10/0x10 [ 294.851808][ T8741] should_fail_ex+0x424/0x570 [ 294.851835][ T8741] should_failslab+0xac/0x100 [ 294.851866][ T8741] __kmalloc_noprof+0xdf/0x4d0 [ 294.851904][ T8741] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 294.851934][ T8741] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 294.851969][ T8741] tomoyo_realpath_from_path+0xcf/0x5e0 [ 294.852020][ T8741] tomoyo_path_number_perm+0x245/0x790 [ 294.852045][ T8741] ? __lock_acquire+0xad5/0xd80 [ 294.852068][ T8741] ? tomoyo_path_number_perm+0x215/0x790 [ 294.852096][ T8741] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 294.852162][ T8741] ? __fget_files+0x2a/0x420 [ 294.852179][ T8741] ? __fget_files+0x2a/0x420 [ 294.852200][ T8741] ? __fget_files+0x2a/0x420 [ 294.852223][ T8741] security_file_ioctl_compat+0xc6/0x2a0 [ 294.852250][ T8741] __se_compat_sys_ioctl+0xd8/0xc30 [ 294.852275][ T8741] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 294.852302][ T8741] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 294.852328][ T8741] ? __fget_files+0x2a/0x420 [ 294.852353][ T8741] ? fput+0x9b/0xd0 [ 294.852371][ T8741] ? ksys_write+0x275/0x2d0 [ 294.852403][ T8741] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 294.852427][ T8741] ? lockdep_hardirqs_on+0x9d/0x150 [ 294.852454][ T8741] __do_fast_syscall_32+0xb4/0x110 [ 294.852478][ T8741] ? exc_page_fault+0x5f8/0x920 [ 294.852507][ T8741] do_fast_syscall_32+0x34/0x80 [ 294.852532][ T8741] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 294.852575][ T8741] RIP: 0023:0xf70dd579 [ 294.852593][ T8741] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 294.852610][ T8741] RSP: 002b:00000000f50cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 294.852631][ T8741] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080045519 [ 294.852645][ T8741] RDX: 0000000080008a80 RSI: 0000000000000000 RDI: 0000000000000000 [ 294.852658][ T8741] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 294.852669][ T8741] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 294.852681][ T8741] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 294.852712][ T8741] [ 294.852720][ T8741] ERROR: Out of memory at tomoyo_realpath_from_path. [ 295.243839][ T8753] qrtr: Invalid version 183 [ 295.253640][ T974] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 295.255824][ T1206] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 295.425344][ T974] usb 2-1: Using ep0 maxpacket: 8 [ 295.447983][ T974] usb 2-1: config 0 has no interfaces? [ 295.481219][ T974] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 295.481252][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.481275][ T974] usb 2-1: Product: syz [ 295.481291][ T974] usb 2-1: Manufacturer: syz [ 295.481307][ T974] usb 2-1: SerialNumber: syz [ 295.534241][ T974] usb 2-1: config 0 descriptor?? [ 295.766112][ T1206] usb 1-1: Using ep0 maxpacket: 32 [ 295.773258][ T1206] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 295.814521][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.909'. [ 295.833528][ T1206] usb 1-1: config 0 has no interface number 0 [ 295.866206][ T1206] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 295.877842][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.890509][ T1206] usb 1-1: Product: syz [ 295.905300][ T1206] usb 1-1: Manufacturer: syz [ 295.920450][ T1206] usb 1-1: SerialNumber: syz [ 295.963645][ T1206] usb 1-1: config 0 descriptor?? [ 295.984895][ T1206] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 296.001489][ T1206] usb 1-1: selecting invalid altsetting 1 [ 296.023581][ T1206] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 296.065956][ T1206] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 296.104526][ T1206] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 296.137403][ T1206] usb 1-1: media controller created [ 296.230435][ T1206] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.527978][ T1206] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 296.535347][ T1206] zl10353_read_register: readreg error (reg=127, ret==-32) [ 296.554016][ T1206] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 296.793216][ T1206] usb 1-1: USB disconnect, device number 41 [ 297.213807][ T5924] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 297.399645][ T8767] netlink: 28 bytes leftover after parsing attributes in process `syz.0.912'. [ 297.452902][ T5895] usb 2-1: USB disconnect, device number 48 [ 297.456218][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 297.483943][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 297.557250][ T5924] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 297.597937][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.643663][ T1206] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 297.678924][ T5924] usb 4-1: config 0 descriptor?? [ 297.837216][ T1206] usb 5-1: Using ep0 maxpacket: 16 [ 297.878335][ T1206] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.890017][ T1206] usb 5-1: config 0 has no interfaces? [ 297.899658][ T1206] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 297.918226][ T1206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.974058][ T1206] usb 5-1: config 0 descriptor?? [ 298.073412][ T30] audit: type=1326 audit(1744854292.548:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8759 comm="syz.3.910" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703d579 code=0x0 [ 298.174873][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.258868][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.283872][ T5924] usb 5-1: USB disconnect, device number 44 [ 299.139241][ T5895] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 299.267695][ T8789] qrtr: Invalid version 183 [ 299.297595][ T5895] usb 1-1: unable to get BOS descriptor or descriptor too short [ 299.302463][ T8789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.918'. [ 299.324290][ T5895] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 299.333736][ T5895] usb 1-1: config 1 has no interface number 1 [ 299.347493][ T5895] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 299.385779][ T5895] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 299.400622][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.429121][ T5895] usb 1-1: Product: syz [ 299.436766][ T5895] usb 1-1: Manufacturer: syz [ 299.474138][ T5895] usb 1-1: SerialNumber: syz [ 299.762765][ T8780] netlink: 60 bytes leftover after parsing attributes in process `syz.0.915'. [ 299.816265][ T5895] usb 1-1: found format II with max.bitrate = 26774, frame size=8 [ 299.839548][ T5895] usb 1-1: found format II with max.bitrate = 26774, frame size=8 [ 299.875583][ T5895] usb 1-1: failed to enable PITCH for EP 0x82 [ 299.883593][ T5924] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 299.951740][ T5895] usb 1-1: USB disconnect, device number 42 [ 300.041879][ T974] usb 4-1: USB disconnect, device number 45 [ 300.223626][ T5924] usb 2-1: config 0 has no interfaces? [ 300.289003][ T5924] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 300.333517][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.346166][ T8314] udevd[8314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.422274][ T5924] usb 2-1: Product: syz [ 300.456192][ T974] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 300.475966][ T5924] usb 2-1: Manufacturer: syz [ 300.500008][ T5924] usb 2-1: SerialNumber: syz [ 300.594393][ T5924] usb 2-1: config 0 descriptor?? [ 300.771661][ T974] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 300.802858][ T974] usb 4-1: config 0 has no interface number 0 [ 300.813176][ T974] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 300.878038][ T8793] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 301.327513][ T974] usb 4-1: config 0 interface 11 has no altsetting 0 [ 301.346679][ T974] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 301.453571][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.490194][ T974] usb 4-1: config 0 descriptor?? [ 301.498106][ T8799] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 301.531214][ T974] keyspan 4-1:0.11: Keyspan 2 port adapter converter detected [ 301.543709][ T974] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81 [ 301.557458][ T974] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82 [ 301.570640][ T974] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1 [ 301.735112][ T974] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 2 [ 301.743988][ T974] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 85 [ 301.751865][ T974] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 5 [ 301.937493][ T974] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 302.005092][ T974] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83 [ 302.030264][ T974] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84 [ 302.068329][ T974] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3 [ 302.091136][ T974] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4 [ 302.146943][ T974] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 86 [ 302.173561][ T974] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 6 [ 302.242686][ T974] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 302.392910][ T974] usb 4-1: USB disconnect, device number 46 [ 302.476773][ T974] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 302.542777][ T974] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 302.623898][ T974] keyspan 4-1:0.11: device disconnected [ 302.682699][ T5895] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 302.754558][ T5898] usb 2-1: USB disconnect, device number 49 [ 302.807717][ T8812] FAULT_INJECTION: forcing a failure. [ 302.807717][ T8812] name failslab, interval 1, probability 0, space 0, times 0 [ 302.837993][ T8812] CPU: 1 UID: 0 PID: 8812 Comm: syz.3.924 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 302.838025][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 302.838039][ T8812] Call Trace: [ 302.838047][ T8812] [ 302.838056][ T8812] dump_stack_lvl+0x241/0x360 [ 302.838093][ T8812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.838122][ T8812] ? __pfx__printk+0x10/0x10 [ 302.838156][ T8812] ? __pfx___might_resched+0x10/0x10 [ 302.838199][ T8812] should_fail_ex+0x424/0x570 [ 302.838229][ T8812] should_failslab+0xac/0x100 [ 302.838261][ T8812] __kmalloc_node_track_caller_noprof+0xe2/0x4d0 [ 302.838295][ T8812] ? __kernfs_new_node+0xa2/0x890 [ 302.838316][ T8812] ? kernel_text_address+0xa7/0xe0 [ 302.838340][ T8812] kstrdup+0x42/0x100 [ 302.838369][ T8812] __kernfs_new_node+0xa2/0x890 [ 302.838394][ T8812] ? __lock_acquire+0xad5/0xd80 [ 302.838423][ T8812] ? __pfx___kernfs_new_node+0x10/0x10 [ 302.838457][ T8812] ? kernfs_root+0x1c/0x230 [ 302.838479][ T8812] ? kernfs_root+0x1c/0x230 [ 302.838503][ T8812] kernfs_new_node+0x114/0x220 [ 302.838530][ T8812] kernfs_create_dir_ns+0x43/0x120 [ 302.838559][ T8812] sysfs_create_dir_ns+0x1a2/0x3f0 [ 302.838585][ T8812] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 302.838617][ T8812] kobject_add_internal+0x435/0x8d0 [ 302.838656][ T8812] kobject_add+0x15b/0x230 [ 302.838687][ T8812] ? kobject_put+0x43d/0x480 [ 302.838714][ T8812] ? __pfx_kobject_add+0x10/0x10 [ 302.838750][ T8812] ? get_device_parent+0x25d/0x410 [ 302.838773][ T8812] ? device_add+0x318/0xbf0 [ 302.838801][ T8812] device_add+0x4e5/0xbf0 [ 302.838833][ T8812] input_register_device+0x9ed/0x10c0 [ 302.838877][ T8812] uinput_create_device+0x40e/0x630 [ 302.838916][ T8812] uinput_ioctl_handler+0x496/0x17f0 [ 302.838947][ T8812] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 302.839004][ T8812] __se_compat_sys_ioctl+0x50e/0xc30 [ 302.839034][ T8812] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 302.839062][ T8812] ? __fget_files+0x2a/0x420 [ 302.839088][ T8812] ? fput+0x9b/0xd0 [ 302.839107][ T8812] ? ksys_write+0x275/0x2d0 [ 302.839139][ T8812] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 302.839165][ T8812] ? lockdep_hardirqs_on+0x9d/0x150 [ 302.839203][ T8812] __do_fast_syscall_32+0xb4/0x110 [ 302.839230][ T8812] ? exc_page_fault+0x5f8/0x920 [ 302.839261][ T8812] do_fast_syscall_32+0x34/0x80 [ 302.839288][ T8812] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 302.839314][ T8812] RIP: 0023:0xf703d579 [ 302.839333][ T8812] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 302.839351][ T8812] RSP: 002b:00000000f502d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 302.839374][ T8812] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005501 [ 302.839388][ T8812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 302.839400][ T8812] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 302.839412][ T8812] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 302.839425][ T8812] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 302.839456][ T8812] [ 303.153377][ T8812] kobject: kobject_add_internal failed for input34 (error: -12 parent: input) [ 303.163572][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 303.171671][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.182622][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.192414][ T5895] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 303.201460][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.212076][ T5895] usb 3-1: config 0 descriptor?? [ 303.661291][ T5895] hid-u2fzero 0003:10C4:8ACF.000D: unknown main item tag 0x0 [ 303.677956][ T5895] hid-u2fzero 0003:10C4:8ACF.000D: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.2-1/input0 [ 303.741685][ T5895] hid-u2fzero 0003:10C4:8ACF.000D: U2F Zero LED initialised [ 303.743602][ T5899] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 303.754396][ T5895] hid-u2fzero 0003:10C4:8ACF.000D: U2F Zero RNG initialised [ 303.832464][ T8825] qrtr: Invalid version 183 [ 303.840552][ T8825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.929'. [ 303.885742][ T24] usb 3-1: USB disconnect, device number 40 [ 303.914379][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 303.927975][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.942415][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.956678][ T1206] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 303.958143][ T5899] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 303.964344][ T5898] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 303.983517][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.994653][ T5899] usb 4-1: config 0 descriptor?? [ 304.133631][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 304.141996][ T1206] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 304.154118][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.167028][ T1206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.178232][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.193555][ T1206] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 304.214461][ T5898] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 304.224143][ T1206] usb 5-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 304.233232][ T1206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.241511][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.277265][ T5898] usb 1-1: config 0 descriptor?? [ 304.301112][ T1206] usb 5-1: config 0 descriptor?? [ 304.330708][ T8830] FAULT_INJECTION: forcing a failure. [ 304.330708][ T8830] name failslab, interval 1, probability 0, space 0, times 0 [ 304.348285][ T8830] CPU: 0 UID: 0 PID: 8830 Comm: syz.1.931 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 304.348317][ T8830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 304.348336][ T8830] Call Trace: [ 304.348347][ T8830] [ 304.348357][ T8830] dump_stack_lvl+0x241/0x360 [ 304.348396][ T8830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.348427][ T8830] ? __pfx__printk+0x10/0x10 [ 304.348461][ T8830] ? __pfx___might_resched+0x10/0x10 [ 304.348496][ T8830] should_fail_ex+0x424/0x570 [ 304.348525][ T8830] should_failslab+0xac/0x100 [ 304.348557][ T8830] __kmalloc_noprof+0xdf/0x4d0 [ 304.348586][ T8830] ? tomoyo_encode+0x26f/0x540 [ 304.348625][ T8830] tomoyo_encode+0x26f/0x540 [ 304.348659][ T8830] ? __pfx_sockfs_dname+0x10/0x10 [ 304.348690][ T8830] tomoyo_realpath_from_path+0x59e/0x5e0 [ 304.348749][ T8830] tomoyo_path_number_perm+0x245/0x790 [ 304.348775][ T8830] ? __lock_acquire+0xad5/0xd80 [ 304.348799][ T8830] ? tomoyo_path_number_perm+0x215/0x790 [ 304.348828][ T8830] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 304.348918][ T8830] ? __fget_files+0x2a/0x420 [ 304.348938][ T8830] ? __fget_files+0x2a/0x420 [ 304.348972][ T8830] ? __fget_files+0x2a/0x420 [ 304.348996][ T8830] security_file_ioctl_compat+0xc6/0x2a0 [ 304.349024][ T8830] __se_compat_sys_ioctl+0xd8/0xc30 [ 304.349049][ T8830] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 304.349078][ T8830] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 304.349105][ T8830] ? __fget_files+0x2a/0x420 [ 304.349130][ T8830] ? fput+0x9b/0xd0 [ 304.349149][ T8830] ? ksys_write+0x275/0x2d0 [ 304.349180][ T8830] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 304.349205][ T8830] ? lockdep_hardirqs_on+0x9d/0x150 [ 304.349233][ T8830] __do_fast_syscall_32+0xb4/0x110 [ 304.349259][ T8830] ? exc_page_fault+0x5f8/0x920 [ 304.349288][ T8830] do_fast_syscall_32+0x34/0x80 [ 304.349314][ T8830] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.349344][ T8830] RIP: 0023:0xf707d579 [ 304.349362][ T8830] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 304.349380][ T8830] RSP: 002b:00000000f506d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 304.349401][ T8830] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008916 [ 304.349415][ T8830] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 304.349427][ T8830] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 304.349438][ T8830] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 304.349450][ T8830] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.349479][ T8830] [ 304.349522][ T8830] ERROR: Out of memory at tomoyo_realpath_from_path. [ 304.636335][ T5899] usbhid 4-1:0.0: can't add hid device: -71 [ 304.642529][ T5899] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 304.670780][ T1206] usbhid 5-1:0.0: can't add hid device: -71 [ 304.682249][ T5899] usb 4-1: USB disconnect, device number 47 [ 304.684858][ T1206] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 304.720096][ T5898] corsair 0003:1B1C:1B02.000E: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 304.746752][ T1206] usb 5-1: USB disconnect, device number 45 [ 304.794440][ T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 304.911273][ T5898] corsair 0003:1B1C:1B02.000E: Failed to get K90 initial state (error -71). [ 304.942120][ T5898] usb 1-1: USB disconnect, device number 43 [ 304.963631][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 304.993326][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 305.034425][ T24] usb 3-1: config 0 has no interface number 0 [ 305.049272][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 305.068848][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.077967][ T24] usb 3-1: Product: syz [ 305.082268][ T24] usb 3-1: Manufacturer: syz [ 305.090234][ T24] usb 3-1: SerialNumber: syz [ 305.099843][ T24] usb 3-1: config 0 descriptor?? [ 305.109341][ T24] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 305.118867][ T24] usb 3-1: selecting invalid altsetting 1 [ 305.124754][ T1206] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 305.132894][ T24] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 305.145359][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 305.156484][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 305.165377][ T24] usb 3-1: media controller created [ 305.219264][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 305.293764][ T1206] usb 5-1: Using ep0 maxpacket: 32 [ 305.309382][ T1206] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 305.323693][ T24] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 305.330778][ T1206] usb 5-1: config 0 has no interface number 0 [ 305.337722][ T24] zl10353_read_register: readreg error (reg=127, ret==-32) [ 305.349318][ T24] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 305.416341][ T1206] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 305.446430][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.457270][ T24] usb 3-1: USB disconnect, device number 41 [ 305.493702][ T1206] usb 5-1: Product: syz [ 305.520141][ T1206] usb 5-1: Manufacturer: syz [ 305.559202][ T1206] usb 5-1: SerialNumber: syz [ 305.584715][ T1206] usb 5-1: config 0 descriptor?? [ 305.630500][ T1206] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 305.678140][ T1206] usb 5-1: selecting invalid altsetting 1 [ 305.701170][ T1206] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 305.727635][ T1206] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 305.781961][ T5899] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 305.840981][ T1206] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 305.862437][ T1206] usb 5-1: media controller created [ 305.894656][ T1206] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 305.946831][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 305.971721][ T5899] usb 4-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 305.984609][ T1206] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 306.049840][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.063614][ T1206] zl10353_read_register: readreg error (reg=127, ret==-32) [ 306.079976][ T1206] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 306.267742][ T8843] delete_channel: no stack [ 306.289853][ T5899] usb 4-1: config 0 descriptor?? [ 306.331271][ T5899] go7007 4-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 306.377094][ T1206] usb 5-1: USB disconnect, device number 46 [ 306.559882][ T8846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.602860][ T8846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.695599][ T5898] usb 4-1: USB disconnect, device number 48 [ 306.843740][ T5899] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 307.020030][ T5899] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 307.044697][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.052822][ T5899] usb 3-1: Product: syz [ 307.059215][ T5899] usb 3-1: Manufacturer: syz [ 307.071119][ T5899] usb 3-1: SerialNumber: syz [ 307.081103][ T5899] usb 3-1: config 0 descriptor?? [ 307.113498][ T974] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 307.191841][ T5899] usb 3-1: selecting invalid altsetting 3 [ 307.331322][ T5899] comedi comedi0: could not set alternate setting 3 in high speed [ 307.346403][ T8877] FAULT_INJECTION: forcing a failure. [ 307.346403][ T8877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.361449][ T8877] CPU: 1 UID: 0 PID: 8877 Comm: syz.0.945 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 307.361497][ T8877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 307.361509][ T8877] Call Trace: [ 307.361517][ T8877] [ 307.361526][ T8877] dump_stack_lvl+0x241/0x360 [ 307.361564][ T8877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.361595][ T8877] ? __pfx__printk+0x10/0x10 [ 307.361636][ T8877] should_fail_ex+0x424/0x570 [ 307.361663][ T8877] _copy_to_user+0x31/0xb0 [ 307.361696][ T8877] simple_read_from_buffer+0xc4/0x170 [ 307.361731][ T8877] proc_fail_nth_read+0x1ef/0x260 [ 307.361756][ T8877] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.361781][ T8877] ? rw_verify_area+0x246/0x630 [ 307.361803][ T8877] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.361826][ T8877] vfs_read+0x21f/0xb90 [ 307.361855][ T8877] ? __pfx___mutex_lock+0x10/0x10 [ 307.361892][ T8877] ? __pfx_vfs_read+0x10/0x10 [ 307.361919][ T8877] ? __fget_files+0x2a/0x420 [ 307.361939][ T8877] ? __fget_files+0x39d/0x420 [ 307.361956][ T8877] ? __fget_files+0x2a/0x420 [ 307.361985][ T8877] ksys_read+0x19d/0x2d0 [ 307.362012][ T8877] ? __pfx_ksys_read+0x10/0x10 [ 307.362038][ T8877] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 307.362064][ T8877] ? lockdep_hardirqs_on+0x9d/0x150 [ 307.362092][ T8877] __do_fast_syscall_32+0xb4/0x110 [ 307.362117][ T8877] ? exc_page_fault+0x5f8/0x920 [ 307.362147][ T8877] do_fast_syscall_32+0x34/0x80 [ 307.362174][ T8877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 307.362200][ T8877] RIP: 0023:0xf7fb3579 [ 307.362217][ T8877] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 307.362234][ T8877] RSP: 002b:00000000f50d6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 307.362256][ T8877] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50d6620 [ 307.362270][ T8877] RDX: 000000000000000f RSI: 00000000f7442ff4 RDI: 0000000000000000 [ 307.362282][ T8877] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 307.362294][ T8877] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 307.362306][ T8877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.362340][ T8877] [ 307.623765][ T5899] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 307.645649][ T8863] netlink: 72 bytes leftover after parsing attributes in process `syz.2.940'. [ 307.677527][ T974] usb 5-1: Using ep0 maxpacket: 16 [ 307.798210][ T5899] usbdux 3-1:0.0: probe with driver usbdux failed with error -22 [ 308.134605][ T974] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 308.144174][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.170243][ T974] usb 5-1: Product: syz [ 308.175402][ T974] usb 5-1: Manufacturer: syz [ 308.181845][ T974] usb 5-1: SerialNumber: syz [ 308.195371][ T974] r8152-cfgselector 5-1: Unknown version 0x0000 [ 308.201899][ T974] r8152-cfgselector 5-1: config 0 descriptor?? [ 308.468495][ T974] r8152-cfgselector 5-1: Unknown version 0x0000 [ 308.475111][ T974] r8152-cfgselector 5-1: bad CDC descriptors [ 308.563706][ T1206] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 308.736735][ T974] r8152-cfgselector 5-1: USB disconnect, device number 47 [ 308.743508][ T1206] usb 4-1: Using ep0 maxpacket: 16 [ 308.768919][ T1206] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.800523][ T1206] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.841218][ T1206] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 308.863928][ T1206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.892408][ T1206] usb 4-1: config 0 descriptor?? [ 309.063534][ T5924] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 309.213894][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 309.235002][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.253626][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.263881][ T5924] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 309.273052][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.284392][ T5924] usb 1-1: config 0 descriptor?? [ 309.328573][ T1206] usbhid 4-1:0.0: can't add hid device: -71 [ 309.390896][ T1206] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 309.423665][ T1206] usb 4-1: USB disconnect, device number 49 [ 309.698022][ T5924] usbhid 1-1:0.0: can't add hid device: -71 [ 309.704177][ T5924] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 309.716537][ T5924] usb 1-1: USB disconnect, device number 44 [ 309.733539][ T24] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 309.832310][ T974] usb 3-1: USB disconnect, device number 42 [ 309.983992][ T24] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 309.992140][ T24] usb 5-1: config 0 has no interface number 0 [ 310.078928][ T24] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 310.114901][ T24] usb 5-1: config 0 interface 11 has no altsetting 0 [ 310.121695][ T24] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 310.131065][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.154928][ T24] usb 5-1: config 0 descriptor?? [ 310.161049][ T8894] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 310.198149][ T24] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 310.209908][ T24] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 310.219015][ T24] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 310.243703][ T24] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 310.270368][ T24] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 310.288076][ T24] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 310.305961][ T24] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 310.322498][ T24] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 310.341662][ T24] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 310.351857][ T24] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 310.419220][ T24] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 310.427858][ T24] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 310.442658][ T24] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 310.476995][ T24] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 310.530240][ T24] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 310.629508][ T24] usb 5-1: USB disconnect, device number 48 [ 310.653564][ T5899] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 310.694016][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 310.703673][ T974] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 310.713307][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 310.734925][ T24] keyspan 5-1:0.11: device disconnected [ 311.103733][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 311.203890][ T5899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.272471][ T5899] usb 2-1: config 0 has no interfaces? [ 311.306526][ T974] usb 4-1: Using ep0 maxpacket: 16 [ 311.344129][ T5899] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 311.361757][ T974] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.378438][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.393143][ T974] usb 4-1: config 0 has no interfaces? [ 311.426043][ T974] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 311.444574][ T5899] usb 2-1: config 0 descriptor?? [ 311.520674][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.612350][ T974] usb 4-1: config 0 descriptor?? [ 311.717751][ T974] usb 2-1: USB disconnect, device number 50 [ 312.081888][ T10] usb 4-1: USB disconnect, device number 50 [ 312.133951][ T974] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 312.142423][ T5899] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 312.300173][ T974] usb 3-1: unable to get BOS descriptor or descriptor too short [ 312.312605][ T974] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 312.331621][ T974] usb 3-1: config 1 has no interface number 1 [ 312.349470][ T974] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 312.388321][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.961'. [ 312.388863][ T5899] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 312.459288][ T5899] usb 1-1: config 0 has no interface number 0 [ 312.467246][ T974] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.478564][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.488680][ T5899] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 312.502360][ T974] usb 3-1: Product: syz [ 312.527204][ T974] usb 3-1: Manufacturer: syz [ 312.540077][ T974] usb 3-1: SerialNumber: syz [ 312.549742][ T5899] usb 1-1: config 0 interface 11 has no altsetting 0 [ 312.569353][ T5899] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 312.582143][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.657767][ T5899] usb 1-1: config 0 descriptor?? [ 312.674603][ T8924] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 312.696894][ T5899] keyspan 1-1:0.11: Keyspan 2 port adapter converter detected [ 312.721347][ T5899] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 312.743875][ T5899] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 312.768626][ T5899] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 312.841174][ T5899] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 312.923669][ T5899] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 85 [ 312.950309][ T8915] netlink: 60 bytes leftover after parsing attributes in process `syz.2.956'. [ 312.990238][ T974] usb 3-1: found format II with max.bitrate = 26774, frame size=8 [ 312.998686][ T5899] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 5 [ 313.009827][ T974] usb 3-1: found format II with max.bitrate = 26774, frame size=8 [ 313.029181][ T5899] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 313.043744][ T974] usb 3-1: failed to enable PITCH for EP 0x82 [ 313.093322][ T5899] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 313.114595][ T5899] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 313.128071][ T974] usb 3-1: USB disconnect, device number 43 [ 313.138815][ T5899] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 313.169121][ T5899] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 313.193192][ T5899] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 86 [ 313.202443][ T5899] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 6 [ 313.284856][ T5899] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 313.311642][ T5899] usb 1-1: USB disconnect, device number 45 [ 313.322844][ T5899] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 313.338841][ T5899] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 313.351698][ T5899] keyspan 1-1:0.11: device disconnected [ 313.416037][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.834850][ T8943] FAULT_INJECTION: forcing a failure. [ 313.834850][ T8943] name failslab, interval 1, probability 0, space 0, times 0 [ 313.897306][ T8943] CPU: 0 UID: 0 PID: 8943 Comm: syz.4.965 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 313.897336][ T8943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 313.897347][ T8943] Call Trace: [ 313.897355][ T8943] [ 313.897363][ T8943] dump_stack_lvl+0x241/0x360 [ 313.897399][ T8943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.897427][ T8943] ? __pfx__printk+0x10/0x10 [ 313.897457][ T8943] ? __pfx___might_resched+0x10/0x10 [ 313.897487][ T8943] should_fail_ex+0x424/0x570 [ 313.897512][ T8943] should_failslab+0xac/0x100 [ 313.897541][ T8943] __kmalloc_noprof+0xdf/0x4d0 [ 313.897566][ T8943] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 313.897596][ T8943] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 313.897649][ T8943] tomoyo_realpath_from_path+0xcf/0x5e0 [ 313.897695][ T8943] tomoyo_path_number_perm+0x245/0x790 [ 313.897729][ T8943] ? __lock_acquire+0xad5/0xd80 [ 313.897755][ T8943] ? tomoyo_path_number_perm+0x215/0x790 [ 313.897786][ T8943] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 313.897855][ T8943] ? __fget_files+0x2a/0x420 [ 313.897874][ T8943] ? __fget_files+0x2a/0x420 [ 313.897897][ T8943] ? __fget_files+0x2a/0x420 [ 313.897923][ T8943] security_file_ioctl_compat+0xc6/0x2a0 [ 313.897951][ T8943] __se_compat_sys_ioctl+0xd8/0xc30 [ 313.897978][ T8943] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 313.898007][ T8943] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 313.898035][ T8943] ? __fget_files+0x2a/0x420 [ 313.898061][ T8943] ? fput+0x9b/0xd0 [ 313.898080][ T8943] ? ksys_write+0x275/0x2d0 [ 313.898114][ T8943] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 313.898141][ T8943] ? lockdep_hardirqs_on+0x9d/0x150 [ 313.898170][ T8943] __do_fast_syscall_32+0xb4/0x110 [ 313.898197][ T8943] ? exc_page_fault+0x5f8/0x920 [ 313.898227][ T8943] do_fast_syscall_32+0x34/0x80 [ 313.898255][ T8943] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 313.898280][ T8943] RIP: 0023:0xf70dd579 [ 313.898299][ T8943] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 313.898317][ T8943] RSP: 002b:00000000f50cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 313.898341][ T8943] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c010640c [ 313.898356][ T8943] RDX: 0000000080009c40 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.898368][ T8943] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 313.898380][ T8943] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 313.898392][ T8943] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 313.898422][ T8943] [ 313.898431][ T8943] ERROR: Out of memory at tomoyo_realpath_from_path. [ 314.456561][ T8958] gtp0: entered promiscuous mode [ 314.858082][ T8968] fuse: blksize only supported for fuseblk [ 315.063583][ T974] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 315.222937][ T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.253818][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 315.317475][ T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.346683][ T974] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 315.361184][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.412668][ T974] usb 5-1: config 0 descriptor?? [ 315.483569][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 315.581820][ T10] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 315.739716][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 315.760089][ T10] usb 2-1: string descriptor 0 read error: -22 [ 315.766482][ T5899] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 315.774318][ T10] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 315.793776][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.933682][ T5924] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 315.943399][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 315.961043][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 315.993589][ T5899] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 316.006457][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.023159][ T5899] usb 1-1: Product: syz [ 316.032224][ T5899] usb 1-1: Manufacturer: syz [ 316.038177][ T5899] usb 1-1: SerialNumber: syz [ 316.079639][ T5899] usb 1-1: config 0 descriptor?? [ 316.113375][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 316.159170][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.175239][ T5924] usb 3-1: config 0 has no interfaces? [ 316.191121][ T8979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.201482][ T8979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.295847][ T5924] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 316.322527][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.352585][ T5924] usb 3-1: config 0 descriptor?? [ 316.580454][ T5899] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 316.607036][ T5899] usb 1-1: USB disconnect, device number 46 [ 316.856045][ T1206] usb 3-1: USB disconnect, device number 44 [ 317.000846][ T974] uclogic 0003:256C:006D.000F: failed retrieving string descriptor #200: -71 [ 317.066989][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.077856][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.254021][ T974] uclogic 0003:256C:006D.000F: failed retrieving pen parameters: -71 [ 317.275538][ T974] uclogic 0003:256C:006D.000F: failed probing pen v2 parameters: -71 [ 317.298148][ T974] uclogic 0003:256C:006D.000F: failed probing parameters: -71 [ 317.325317][ T974] uclogic 0003:256C:006D.000F: probe with driver uclogic failed with error -71 [ 317.366807][ T974] usb 5-1: USB disconnect, device number 49 [ 317.632420][ T8984] ALSA: mixer_oss: invalid OSS volume '' [ 317.640353][ T8984] ALSA: mixer_oss: invalid OSS volume '+]OؓOGec9bx'ĮC' [ 317.669590][ T8984] ALSA: mixer_oss: invalid OSS volume '_*[bYcq~lr=V' [ 317.964584][ T8984] ALSA: mixer_oss: invalid OSS volume '+ͿnU<$^EKʘr+' [ 317.973087][ T8984] ALSA: mixer_oss: invalid OSS volume '+8iYJz' [ 317.974025][ T974] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 318.083622][ T1206] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 318.133653][ T974] usb 5-1: Using ep0 maxpacket: 16 [ 318.142291][ T974] usb 5-1: config 0 has an invalid interface number: 165 but max is 0 [ 318.168373][ T974] usb 5-1: config 0 has no interface number 0 [ 318.177952][ T974] usb 5-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 318.187594][ T5896] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 318.195614][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.204205][ T974] usb 5-1: Product: syz [ 318.209893][ T974] usb 5-1: Manufacturer: syz [ 318.214939][ T974] usb 5-1: SerialNumber: syz [ 318.230989][ T974] usb 5-1: config 0 descriptor?? [ 318.243653][ T1206] usb 1-1: Using ep0 maxpacket: 32 [ 318.254871][ T1206] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 318.278283][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 318.289373][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 318.299221][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 318.310536][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 318.330813][ T1206] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 318.340049][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.352638][ T1206] usb 1-1: Product: syz [ 318.353639][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 318.358074][ T1206] usb 1-1: Manufacturer: syz [ 318.370821][ T1206] usb 1-1: SerialNumber: syz [ 318.375652][ T5896] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.387630][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 318.388410][ T1206] usb 1-1: config 0 descriptor?? [ 318.400232][ T5896] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 318.410745][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.451800][ T5896] usb 3-1: config 0 descriptor?? [ 318.508621][ T8996] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 318.638838][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 318.655876][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 318.694244][ T10] usb 2-1: USB disconnect, device number 51 [ 318.853245][ T974] usb-storage 5-1:0.165: USB Mass Storage device detected [ 318.884921][ T974] usb-storage 5-1:0.165: Quirks match for vid 0781 pid 0100: 1 [ 319.005628][ T974] usb 5-1: USB disconnect, device number 50 [ 319.014176][ T8994] vivid-002: disconnect [ 319.047273][ T8993] vivid-002: reconnect [ 319.188821][ T9010] misc userio: The device must be registered before sending interrupts [ 319.242797][ T5896] usbhid 3-1:0.0: can't add hid device: -71 [ 319.249636][ T9011] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 319.272614][ T5896] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 319.314936][ T5896] usb 3-1: USB disconnect, device number 45 [ 319.417745][ T9016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.444456][ T1206] iforce 1-1:0.0: usb_submit_urb failed: -110 [ 319.455868][ T1206] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 319.464871][ T9016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.495691][ T1206] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 319.520190][ T1206] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 319.538122][ T1206] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 319.552463][ T1206] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 319.575709][ T1206] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 319.602934][ T1206] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 319.637778][ T1206] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 319.644527][ T1206] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 319.665632][ T1206] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 319.690702][ T1206] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 319.697608][ T1206] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 319.747839][ T1206] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 319.754816][ T1206] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 319.761192][ T1206] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 319.768340][ T1206] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 319.790321][ T1206] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 319.896781][ T1206] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 319.903903][ T1206] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 319.910025][ T1206] input input36: Timeout waiting for response from device. [ 320.886750][ T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 320.908853][ T5898] usb 1-1: USB disconnect, device number 47 [ 321.287264][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 321.333560][ T1206] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 321.349203][ T974] IPVS: starting estimator thread 0... [ 321.359766][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 321.380500][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 321.413674][ T5895] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 321.454327][ T10] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 321.473814][ T9048] IPVS: using max 26 ests per chain, 62400 per kthread [ 321.473814][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.473845][ T10] usb 4-1: Product: syz [ 321.494537][ T1206] usb 3-1: Using ep0 maxpacket: 8 [ 321.501721][ T1206] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 321.523278][ T1206] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 321.541493][ T1206] usb 3-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 321.542914][ T10] usb 4-1: Manufacturer: syz [ 321.553478][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.573383][ T1206] usb 3-1: Product: syz [ 321.575206][ T9051] warning: `syz.0.992' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 321.590880][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 321.596300][ T1206] usb 3-1: Manufacturer: syz [ 321.604672][ T5895] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.612127][ T10] usb 4-1: SerialNumber: syz [ 321.620410][ T5895] usb 5-1: config 0 has no interfaces? [ 321.626654][ T1206] usb 3-1: SerialNumber: syz [ 321.627771][ T10] usb 4-1: config 0 descriptor?? [ 321.636327][ T5895] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 321.670775][ T10] streamzap 4-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 321.732073][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.789337][ T5895] usb 5-1: config 0 descriptor?? [ 321.912678][ T1206] cytherm 3-1:5.0: Cypress thermometer device now attached [ 321.973827][ T1206] usb 3-1: USB disconnect, device number 46 [ 321.980799][ T1206] cytherm 3-1:5.0: Cypress thermometer now disconnected [ 322.102528][ T5895] usb 5-1: USB disconnect, device number 51 [ 322.598605][ T10] usb 4-1: USB disconnect, device number 51 [ 324.076193][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.996'. [ 324.773732][ T5895] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 324.823522][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 324.963721][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 324.970818][ T5895] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.981521][ T5895] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 324.994305][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 324.994305][ T5895] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 324.997073][ T5895] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 325.021801][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 325.030249][ T5895] usb 3-1: SerialNumber: syz [ 325.072660][ T5895] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 325.096231][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 325.105610][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.122402][ T10] usb 1-1: Product: syz [ 325.127175][ T10] usb 1-1: Manufacturer: syz [ 325.131928][ T10] usb 1-1: SerialNumber: syz [ 325.147389][ T10] r8152-cfgselector 1-1: Unknown version 0x0000 [ 325.153970][ T5895] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 325.160607][ T5895] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 325.213613][ T10] r8152-cfgselector 1-1: config 0 descriptor?? [ 325.726037][ T9095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.784022][ T9102] dccp_invalid_packet: P.Data Offset(0) too small [ 325.785481][ T9095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.812117][ T1206] r8152-cfgselector 1-1: USB disconnect, device number 48 [ 325.904115][ T9106] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1005'. [ 326.206910][ T9113] trusted_key: syz.4.1009 sent an empty control message without MSG_MORE. [ 326.484288][ T5898] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 326.688789][ T9120] fuse: Unknown parameter '00000000000000000003' [ 327.866008][ T9130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.875258][ T9130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.934854][ T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 330.131103][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 330.161482][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 330.177170][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.197035][ T10] usb 1-1: Product: syz [ 330.208816][ T10] usb 1-1: Manufacturer: syz [ 330.227418][ T10] usb 1-1: SerialNumber: syz [ 330.251419][ T10] r8152-cfgselector 1-1: Unknown version 0x0000 [ 330.263485][ T10] r8152-cfgselector 1-1: config 0 descriptor?? [ 330.640920][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1025'. [ 330.692768][ T10] r8152-cfgselector 1-1: USB disconnect, device number 49 [ 330.693714][ T5898] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 330.866004][ T5898] usb 2-1: unable to get BOS descriptor or descriptor too short [ 330.883025][ T5898] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 330.908076][ T5898] usb 2-1: config 1 has no interface number 1 [ 330.923857][ T5898] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 330.955788][ T5898] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 330.974272][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.996721][ T5898] usb 2-1: Product: syz [ 331.000976][ T5898] usb 2-1: Manufacturer: syz [ 331.024570][ T5898] usb 2-1: SerialNumber: syz [ 331.465894][ T9157] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1021'. [ 331.607396][ T5898] usb 2-1: found format II with max.bitrate = 26774, frame size=8 [ 331.635021][ T5898] usb 2-1: found format II with max.bitrate = 26774, frame size=8 [ 331.664607][ T5898] usb 2-1: failed to enable PITCH for EP 0x82 [ 331.785264][ T1206] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 331.820129][ T5898] usb 2-1: USB disconnect, device number 52 [ 331.973519][ T1206] usb 1-1: Using ep0 maxpacket: 16 [ 331.993589][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 332.016924][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.077851][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.154469][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 332.175787][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.175793][ T1206] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 332.175819][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.186122][ T10] usb 5-1: config 0 has no interfaces? [ 332.219181][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 332.241246][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.294249][ T10] usb 5-1: config 0 descriptor?? [ 332.351027][ T1206] usb 1-1: config 0 descriptor?? [ 332.357112][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.922195][ T1206] corsair 0003:1B1C:1B02.0010: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 333.319495][ T10] usb 1-1: USB disconnect, device number 50 [ 335.501441][ T9218] FAULT_INJECTION: forcing a failure. [ 335.501441][ T9218] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 335.594423][ T9218] CPU: 1 UID: 0 PID: 9218 Comm: syz.2.1039 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 335.594456][ T9218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 335.594470][ T9218] Call Trace: [ 335.594478][ T9218] [ 335.594487][ T9218] dump_stack_lvl+0x241/0x360 [ 335.594540][ T9218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.594569][ T9218] ? __pfx__printk+0x10/0x10 [ 335.594608][ T9218] should_fail_ex+0x424/0x570 [ 335.594634][ T9218] prepare_alloc_pages+0x220/0x610 [ 335.594665][ T9218] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 335.594692][ T9218] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 335.594713][ T9218] ? do_sys_poll+0x2ce/0x13f0 [ 335.594761][ T9218] alloc_pages_mpol+0x339/0x690 [ 335.594795][ T9218] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 335.594827][ T9218] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 335.594853][ T9218] alloc_pages_noprof+0x121/0x190 [ 335.594884][ T9218] get_free_pages_noprof+0xc/0x30 [ 335.594905][ T9218] __pollwait+0x137/0x440 [ 335.594936][ T9218] ? __pfx___pollwait+0x10/0x10 [ 335.594959][ T9218] pipe_poll+0x177/0x460 [ 335.594986][ T9218] ? __pfx_pipe_poll+0x10/0x10 [ 335.595014][ T9218] do_sys_poll+0xa4a/0x13f0 [ 335.595066][ T9218] ? __pfx_do_sys_poll+0x10/0x10 [ 335.595113][ T9218] ? kstrtoull+0x1d3/0x2f0 [ 335.595134][ T9218] ? __pfx___pollwait+0x10/0x10 [ 335.595162][ T9218] ? __pfx_pollwake+0x10/0x10 [ 335.595201][ T9218] ? __pfx_pollwake+0x10/0x10 [ 335.595229][ T9218] ? __pfx_pollwake+0x10/0x10 [ 335.595257][ T9218] ? __pfx_pollwake+0x10/0x10 [ 335.595284][ T9218] ? __pfx_pollwake+0x10/0x10 [ 335.595312][ T9218] ? __pfx_pollwake+0x10/0x10 [ 335.595346][ T9218] ? __pfx_pollwake+0x10/0x10 [ 335.595374][ T9218] ? __pfx_pollwake+0x10/0x10 [ 335.595402][ T9218] ? __pfx_pollwake+0x10/0x10 [ 335.595428][ T9218] ? rcu_read_lock_any_held+0xbb/0x160 [ 335.595453][ T9218] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 335.595479][ T9218] ? vfs_write+0xb29/0xd10 [ 335.595525][ T9218] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 335.595554][ T9218] __se_compat_sys_ppoll_time32+0x2a4/0x340 [ 335.595587][ T9218] ? __pfx___se_compat_sys_ppoll_time32+0x10/0x10 [ 335.595620][ T9218] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 335.595641][ T9218] ? lockdep_hardirqs_on+0x9d/0x150 [ 335.595660][ T9218] ? __ia32_compat_sys_ppoll_time32+0x20/0xc0 [ 335.595688][ T9218] __do_fast_syscall_32+0xb4/0x110 [ 335.595710][ T9218] ? exc_page_fault+0x5f8/0x920 [ 335.595734][ T9218] do_fast_syscall_32+0x34/0x80 [ 335.595757][ T9218] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 335.595777][ T9218] RIP: 0023:0xf711d579 [ 335.595792][ T9218] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 335.595806][ T9218] RSP: 002b:00000000f510d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000135 [ 335.595825][ T9218] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 00000000000000dc [ 335.595837][ T9218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 335.595847][ T9218] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 335.595857][ T9218] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 335.595867][ T9218] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 335.595892][ T9218] [ 336.109811][ T24] usb 5-1: USB disconnect, device number 53 [ 336.223499][ T5898] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 336.373796][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 336.425544][ T5898] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 336.443738][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.455278][ T5898] usb 2-1: Product: syz [ 336.459510][ T5898] usb 2-1: Manufacturer: syz [ 336.467268][ T9221] [U] . [ 336.582001][ T5898] usb 2-1: SerialNumber: syz [ 336.616052][ T5898] r8152-cfgselector 2-1: Unknown version 0x0000 [ 336.622639][ T5898] r8152-cfgselector 2-1: config 0 descriptor?? [ 337.062538][ T5898] r8152-cfgselector 2-1: USB disconnect, device number 53 [ 337.985483][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1052'. [ 338.234384][ T9264] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1052'. [ 338.284863][ T9245] delete_channel: no stack [ 338.300727][ T9264] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1052'. [ 338.403773][ T9264] FAULT_INJECTION: forcing a failure. [ 338.403773][ T9264] name failslab, interval 1, probability 0, space 0, times 0 [ 338.524239][ T9264] CPU: 1 UID: 0 PID: 9264 Comm: syz.1.1052 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 338.524284][ T9264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 338.524295][ T9264] Call Trace: [ 338.524301][ T9264] [ 338.524309][ T9264] dump_stack_lvl+0x241/0x360 [ 338.524340][ T9264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.524365][ T9264] ? __pfx__printk+0x10/0x10 [ 338.524392][ T9264] ? __pfx___might_resched+0x10/0x10 [ 338.524416][ T9264] should_fail_ex+0x424/0x570 [ 338.524437][ T9264] should_failslab+0xac/0x100 [ 338.524462][ T9264] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 338.524487][ T9264] ? __alloc_skb+0x1c2/0x480 [ 338.524505][ T9264] __alloc_skb+0x1c2/0x480 [ 338.524525][ T9264] ? __pfx___alloc_skb+0x10/0x10 [ 338.524546][ T9264] ? netlink_ack_tlv_len+0x6e/0x200 [ 338.524571][ T9264] netlink_ack+0x147/0xa70 [ 338.524597][ T9264] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 338.524625][ T9264] netlink_rcv_skb+0x296/0x480 [ 338.524650][ T9264] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 338.524674][ T9264] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 338.524714][ T9264] ? netlink_deliver_tap+0x2e/0x1b0 [ 338.524742][ T9264] xfrm_netlink_rcv+0x79/0x90 [ 338.524764][ T9264] netlink_unicast+0x7f8/0x9a0 [ 338.524793][ T9264] ? __pfx_netlink_unicast+0x10/0x10 [ 338.524816][ T9264] ? skb_put+0x114/0x1f0 [ 338.524835][ T9264] netlink_sendmsg+0x8c3/0xcd0 [ 338.524869][ T9264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.524898][ T9264] ? __import_iovec+0x585/0x830 [ 338.524920][ T9264] ? aa_sock_msg_perm+0x91/0x160 [ 338.524950][ T9264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.524973][ T9264] __sock_sendmsg+0x221/0x270 [ 338.524999][ T9264] ____sys_sendmsg+0x523/0x860 [ 338.525025][ T9264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.525056][ T9264] __sys_sendmsg+0x271/0x360 [ 338.525078][ T9264] ? __pfx___sys_sendmsg+0x10/0x10 [ 338.525141][ T9264] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 338.525162][ T9264] ? lockdep_hardirqs_on+0x9d/0x150 [ 338.525184][ T9264] __do_fast_syscall_32+0xb4/0x110 [ 338.525206][ T9264] ? exc_page_fault+0x5f8/0x920 [ 338.525229][ T9264] do_fast_syscall_32+0x34/0x80 [ 338.525251][ T9264] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 338.525294][ T9264] RIP: 0023:0xf707d579 [ 338.525309][ T9264] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 338.525324][ T9264] RSP: 002b:00000000f504c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 338.525342][ T9264] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 338.525355][ T9264] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 338.525365][ T9264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 338.525375][ T9264] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 338.525385][ T9264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 338.525410][ T9264] [ 340.130495][ T9296] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 340.602218][ T5898] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 340.793533][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 340.828387][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.870709][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.969783][ T5898] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 340.989635][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.010164][ T5898] usb 4-1: config 0 descriptor?? [ 341.539649][ T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 341.550140][ T5898] corsair 0003:1B1C:1B02.0011: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 341.803912][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 341.828992][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.022450][ T9304] delete_channel: no stack [ 342.066912][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 342.103493][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 342.131883][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 342.153460][ T10] usb 1-1: config 1 interface 1 has no altsetting 0 [ 342.162395][ T24] usb 4-1: USB disconnect, device number 52 [ 342.183680][ T5898] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 342.195223][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.206647][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.219570][ T10] usb 1-1: Product: syz [ 342.234964][ T10] usb 1-1: Manufacturer: syz [ 342.270617][ T10] usb 1-1: SerialNumber: syz [ 342.362923][ T9319] misc userio: The device must be registered before sending interrupts [ 342.393879][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 342.421388][ T5898] usb 2-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 342.451032][ T5898] usb 2-1: config 0 interface 0 has no altsetting 0 [ 342.470587][ T5898] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.ae [ 342.480609][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.501278][ T5898] usb 2-1: Product: syz [ 342.505722][ T5898] usb 2-1: Manufacturer: syz [ 342.510400][ T5898] usb 2-1: SerialNumber: syz [ 342.513892][ T10] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 342.541708][ T10] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 342.556556][ T5898] usb 2-1: config 0 descriptor?? [ 342.574865][ T5898] gs_usb 2-1:0.0: Required endpoints not found [ 342.635343][ T10] usb 1-1: USB disconnect, device number 51 [ 342.653151][ T9322] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 342.668391][ T9322] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 342.750463][ T9322] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 342.757241][ T9322] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 342.810736][ T9322] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 342.836847][ T9322] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 342.909829][ T9322] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 342.916139][ T9322] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 342.963143][ T8314] udevd[8314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 342.963988][ T9322] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 343.013346][ T9322] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 343.517262][ T9349] FAULT_INJECTION: forcing a failure. [ 343.517262][ T9349] name failslab, interval 1, probability 0, space 0, times 0 [ 343.530944][ T9349] CPU: 0 UID: 0 PID: 9349 Comm: syz.3.1078 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 343.530975][ T9349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 343.530988][ T9349] Call Trace: [ 343.530997][ T9349] [ 343.531006][ T9349] dump_stack_lvl+0x241/0x360 [ 343.531044][ T9349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.531075][ T9349] ? __pfx__printk+0x10/0x10 [ 343.531108][ T9349] ? __pfx___might_resched+0x10/0x10 [ 343.531142][ T9349] should_fail_ex+0x424/0x570 [ 343.531169][ T9349] should_failslab+0xac/0x100 [ 343.531201][ T9349] __kmalloc_cache_noprof+0x73/0x370 [ 343.531231][ T9349] ? __request_module+0x2bb/0x640 [ 343.531261][ T9349] __request_module+0x2bb/0x640 [ 343.531292][ T9349] ? __pfx___request_module+0x10/0x10 [ 343.531332][ T9349] ? tcf_proto_lookup_ops+0xe7/0x280 [ 343.531364][ T9349] tcf_proto_lookup_ops+0x213/0x280 [ 343.531389][ T9349] tcf_proto_is_unlocked+0x46/0xf0 [ 343.531413][ T9349] tc_new_tfilter+0x5aa/0x1a90 [ 343.531460][ T9349] ? __pfx_tc_new_tfilter+0x10/0x10 [ 343.531495][ T9349] ? __lock_acquire+0xad5/0xd80 [ 343.531539][ T9349] ? __pfx_tc_new_tfilter+0x10/0x10 [ 343.531561][ T9349] rtnetlink_rcv_msg+0x80f/0xd70 [ 343.531591][ T9349] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 343.531627][ T9349] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 343.531665][ T9349] ? ref_tracker_free+0x63e/0x7e0 [ 343.531697][ T9349] netlink_rcv_skb+0x208/0x480 [ 343.531729][ T9349] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 343.531761][ T9349] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.531820][ T9349] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.531858][ T9349] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.531891][ T9349] netlink_unicast+0x7f8/0x9a0 [ 343.531927][ T9349] ? __pfx_netlink_unicast+0x10/0x10 [ 343.531956][ T9349] ? skb_put+0x114/0x1f0 [ 343.531982][ T9349] netlink_sendmsg+0x8c3/0xcd0 [ 343.532025][ T9349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.532061][ T9349] ? __import_iovec+0x585/0x830 [ 343.532090][ T9349] ? aa_sock_msg_perm+0x91/0x160 [ 343.532126][ T9349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.532156][ T9349] __sock_sendmsg+0x221/0x270 [ 343.532188][ T9349] ____sys_sendmsg+0x523/0x860 [ 343.532222][ T9349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.532263][ T9349] __sys_sendmsg+0x271/0x360 [ 343.532292][ T9349] ? __pfx___sys_sendmsg+0x10/0x10 [ 343.532368][ T9349] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 343.532396][ T9349] ? lockdep_hardirqs_on+0x9d/0x150 [ 343.532425][ T9349] __do_fast_syscall_32+0xb4/0x110 [ 343.532452][ T9349] ? exc_page_fault+0x5f8/0x920 [ 343.532481][ T9349] do_fast_syscall_32+0x34/0x80 [ 343.532507][ T9349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 343.532532][ T9349] RIP: 0023:0xf703d579 [ 343.532550][ T9349] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 343.532570][ T9349] RSP: 002b:00000000f502d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 343.532594][ T9349] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001280 [ 343.532609][ T9349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 343.532622][ T9349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 343.532635][ T9349] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 343.532647][ T9349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 343.532678][ T9349] [ 343.993962][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 344.144025][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 344.151041][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 344.162684][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 344.175191][ T10] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 344.184383][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.192412][ T10] usb 5-1: Product: syz [ 344.197392][ T10] usb 5-1: Manufacturer: syz [ 344.202041][ T10] usb 5-1: SerialNumber: syz [ 344.211254][ T10] usb 5-1: config 0 descriptor?? [ 344.219946][ T10] streamzap 5-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 344.885762][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1077'. [ 344.935790][ T5896] usb 2-1: USB disconnect, device number 54 [ 345.594371][ T9358] delete_channel: no stack [ 346.346295][ T5896] usb 5-1: USB disconnect, device number 54 [ 346.453542][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 346.659769][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 346.675077][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 346.720677][ T10] usb 2-1: config 1 has no interface number 1 [ 346.762692][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 346.812810][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 346.858186][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.893900][ T10] usb 2-1: Product: syz [ 346.898131][ T10] usb 2-1: Manufacturer: syz [ 346.902777][ T10] usb 2-1: SerialNumber: syz [ 347.321307][ T9373] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1086'. [ 347.408218][ T10] usb 2-1: found format II with max.bitrate = 26774, frame size=8 [ 347.431306][ T10] usb 2-1: found format II with max.bitrate = 26774, frame size=8 [ 347.472907][ T10] usb 2-1: failed to enable PITCH for EP 0x82 [ 347.541853][ T10] usb 2-1: USB disconnect, device number 55 [ 347.691926][ T9394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.719790][ T9394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.734858][ T974] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 347.746960][ T9412] FAULT_INJECTION: forcing a failure. [ 347.746960][ T9412] name failslab, interval 1, probability 0, space 0, times 0 [ 347.761228][ T9412] CPU: 0 UID: 0 PID: 9412 Comm: syz.0.1096 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 347.761260][ T9412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 347.761277][ T9412] Call Trace: [ 347.761285][ T9412] [ 347.761293][ T9412] dump_stack_lvl+0x241/0x360 [ 347.761328][ T9412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.761360][ T9412] ? __pfx__printk+0x10/0x10 [ 347.761396][ T9412] ? __pfx___might_resched+0x10/0x10 [ 347.761430][ T9412] should_fail_ex+0x424/0x570 [ 347.761459][ T9412] should_failslab+0xac/0x100 [ 347.761492][ T9412] __kmalloc_cache_noprof+0x73/0x370 [ 347.761521][ T9412] ? rtnl_newlink+0x144/0x1fe0 [ 347.761558][ T9412] rtnl_newlink+0x144/0x1fe0 [ 347.761593][ T9412] ? stack_depot_save_flags+0x44/0x940 [ 347.761622][ T9412] ? kasan_save_track+0x51/0x80 [ 347.761642][ T9412] ? kasan_save_track+0x3f/0x80 [ 347.761665][ T9412] ? kasan_save_free_info+0x40/0x50 [ 347.761684][ T9412] ? __kasan_slab_free+0x59/0x70 [ 347.761710][ T9412] ? __pfx_rtnl_newlink+0x10/0x10 [ 347.761740][ T9412] ? __netlink_deliver_tap+0x561/0x7f0 [ 347.761771][ T9412] ? netlink_deliver_tap+0x19d/0x1b0 [ 347.761801][ T9412] ? netlink_unicast+0x7c6/0x9a0 [ 347.761826][ T9412] ? netlink_sendmsg+0x8c3/0xcd0 [ 347.761856][ T9412] ? __sock_sendmsg+0x221/0x270 [ 347.761882][ T9412] ? ____sys_sendmsg+0x523/0x860 [ 347.761903][ T9412] ? __sys_sendmsg+0x271/0x360 [ 347.761923][ T9412] ? __do_fast_syscall_32+0xb4/0x110 [ 347.761951][ T9412] ? do_fast_syscall_32+0x34/0x80 [ 347.761977][ T9412] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 347.762043][ T9412] ? kasan_quarantine_put+0xdc/0x230 [ 347.762065][ T9412] ? lockdep_hardirqs_on+0x9d/0x150 [ 347.762095][ T9412] ? nlmon_xmit+0xaf/0x100 [ 347.762136][ T9412] ? __local_bh_enable_ip+0x168/0x200 [ 347.762157][ T9412] ? lockdep_hardirqs_on+0x9d/0x150 [ 347.762192][ T9412] ? aa_get_newest_label+0x101/0x6f0 [ 347.762229][ T9412] ? __lock_acquire+0xad5/0xd80 [ 347.762275][ T9412] ? __pfx_rtnl_newlink+0x10/0x10 [ 347.762308][ T9412] rtnetlink_rcv_msg+0x80f/0xd70 [ 347.762337][ T9412] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 347.762374][ T9412] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 347.762414][ T9412] ? ref_tracker_free+0x63e/0x7e0 [ 347.762458][ T9412] netlink_rcv_skb+0x208/0x480 [ 347.762489][ T9412] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 347.762522][ T9412] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 347.762572][ T9412] ? netlink_deliver_tap+0x2e/0x1b0 [ 347.762609][ T9412] ? netlink_deliver_tap+0x2e/0x1b0 [ 347.762637][ T9412] netlink_unicast+0x7f8/0x9a0 [ 347.762669][ T9412] ? __pfx_netlink_unicast+0x10/0x10 [ 347.762694][ T9412] ? skb_put+0x114/0x1f0 [ 347.762716][ T9412] netlink_sendmsg+0x8c3/0xcd0 [ 347.762755][ T9412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.762788][ T9412] ? __import_iovec+0x585/0x830 [ 347.762816][ T9412] ? aa_sock_msg_perm+0x91/0x160 [ 347.762850][ T9412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.762878][ T9412] __sock_sendmsg+0x221/0x270 [ 347.762908][ T9412] ____sys_sendmsg+0x523/0x860 [ 347.762940][ T9412] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.762981][ T9412] __sys_sendmsg+0x271/0x360 [ 347.763010][ T9412] ? __pfx___sys_sendmsg+0x10/0x10 [ 347.763089][ T9412] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 347.763115][ T9412] ? lockdep_hardirqs_on+0x9d/0x150 [ 347.763144][ T9412] __do_fast_syscall_32+0xb4/0x110 [ 347.763171][ T9412] ? exc_page_fault+0x5f8/0x920 [ 347.763202][ T9412] do_fast_syscall_32+0x34/0x80 [ 347.763230][ T9412] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 347.763256][ T9412] RIP: 0023:0xf7fb3579 [ 347.763274][ T9412] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 347.763292][ T9412] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 347.763315][ T9412] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 347.763330][ T9412] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 347.763342][ T9412] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 347.763354][ T9412] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 347.763367][ T9412] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 347.763398][ T9412] [ 347.764994][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 347.857489][ T8314] udevd[8314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 347.968336][ T9414] FAULT_INJECTION: forcing a failure. [ 347.968336][ T9414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.021647][ T9391] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1090'. [ 348.193558][ T9414] CPU: 1 UID: 0 PID: 9414 Comm: syz.0.1097 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 348.193595][ T9414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 348.193617][ T9414] Call Trace: [ 348.193627][ T9414] [ 348.193639][ T9414] dump_stack_lvl+0x241/0x360 [ 348.193680][ T9414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.193714][ T9414] ? __pfx__printk+0x10/0x10 [ 348.193762][ T9414] should_fail_ex+0x424/0x570 [ 348.193794][ T9414] _copy_from_iter+0x211/0x1c70 [ 348.193831][ T9414] ? __build_skb_around+0x247/0x3d0 [ 348.193860][ T9414] ? __alloc_skb+0x298/0x480 [ 348.193881][ T9414] ? __pfx__copy_from_iter+0x10/0x10 [ 348.193915][ T9414] ? __pfx___alloc_skb+0x10/0x10 [ 348.193940][ T9414] ? skb_put+0x114/0x1f0 [ 348.193973][ T9414] netlink_sendmsg+0x73c/0xcd0 [ 348.194022][ T9414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.194060][ T9414] ? __import_iovec+0x585/0x830 [ 348.194090][ T9414] ? aa_sock_msg_perm+0x91/0x160 [ 348.194129][ T9414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.194161][ T9414] __sock_sendmsg+0x221/0x270 [ 348.194196][ T9414] ____sys_sendmsg+0x523/0x860 [ 348.194231][ T9414] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.194275][ T9414] __sys_sendmsg+0x271/0x360 [ 348.194306][ T9414] ? __pfx___sys_sendmsg+0x10/0x10 [ 348.194399][ T9414] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 348.194428][ T9414] ? lockdep_hardirqs_on+0x9d/0x150 [ 348.194458][ T9414] __do_fast_syscall_32+0xb4/0x110 [ 348.194485][ T9414] ? exc_page_fault+0x5f8/0x920 [ 348.194517][ T9414] do_fast_syscall_32+0x34/0x80 [ 348.194544][ T9414] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 348.194568][ T9414] RIP: 0023:0xf7fb3579 [ 348.194586][ T9414] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 348.194602][ T9414] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 348.194629][ T9414] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 348.194644][ T9414] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 348.194655][ T9414] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 348.194667][ T9414] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 348.194679][ T9414] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 348.194708][ T9414] [ 348.484230][ T974] usb 5-1: Using ep0 maxpacket: 16 [ 348.514259][ T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.533456][ T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.578723][ T974] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 348.613152][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.648220][ T974] usb 5-1: config 0 descriptor?? [ 349.033747][ T1206] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 349.073709][ T974] usbhid 5-1:0.0: can't add hid device: -71 [ 349.079864][ T974] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 349.094765][ T974] usb 5-1: USB disconnect, device number 55 [ 349.203666][ T1206] usb 1-1: Using ep0 maxpacket: 16 [ 349.217307][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.231550][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.262342][ T1206] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 349.289725][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.472500][ T1206] usb 1-1: config 0 descriptor?? [ 349.795571][ T9430] FAULT_INJECTION: forcing a failure. [ 349.795571][ T9430] name failslab, interval 1, probability 0, space 0, times 0 [ 349.881553][ T9430] CPU: 1 UID: 0 PID: 9430 Comm: syz.1.1103 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 349.881578][ T9430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 349.881588][ T9430] Call Trace: [ 349.881594][ T9430] [ 349.881602][ T9430] dump_stack_lvl+0x241/0x360 [ 349.881631][ T9430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.881656][ T9430] ? __pfx__printk+0x10/0x10 [ 349.881681][ T9430] ? __pfx___might_resched+0x10/0x10 [ 349.881705][ T9430] should_fail_ex+0x424/0x570 [ 349.881725][ T9430] should_failslab+0xac/0x100 [ 349.881749][ T9430] __kmalloc_noprof+0xdf/0x4d0 [ 349.881770][ T9430] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 349.881788][ T9430] ? apparmor_capable+0x13b/0x1b0 [ 349.881807][ T9430] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 349.881830][ T9430] genl_rcv_msg+0x819/0xf00 [ 349.881854][ T9430] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.881869][ T9430] ? __dev_queue_xmit+0x1780/0x3f60 [ 349.881886][ T9430] ? kasan_save_track+0x3f/0x80 [ 349.881901][ T9430] ? __kasan_slab_alloc+0x66/0x80 [ 349.881923][ T9430] ? __do_fast_syscall_32+0xb4/0x110 [ 349.881956][ T9430] ? __lock_acquire+0xad5/0xd80 [ 349.881973][ T9430] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 349.882008][ T9430] netlink_rcv_skb+0x208/0x480 [ 349.882031][ T9430] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.882049][ T9430] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.882086][ T9430] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.882113][ T9430] genl_rcv+0x28/0x40 [ 349.882127][ T9430] netlink_unicast+0x7f8/0x9a0 [ 349.882154][ T9430] ? __pfx_netlink_unicast+0x10/0x10 [ 349.882177][ T9430] ? skb_put+0x114/0x1f0 [ 349.882196][ T9430] netlink_sendmsg+0x8c3/0xcd0 [ 349.882228][ T9430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.882253][ T9430] ? __import_iovec+0x585/0x830 [ 349.882273][ T9430] ? aa_sock_msg_perm+0x91/0x160 [ 349.882299][ T9430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.882319][ T9430] __sock_sendmsg+0x221/0x270 [ 349.882343][ T9430] ____sys_sendmsg+0x523/0x860 [ 349.882366][ T9430] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.882395][ T9430] __sys_sendmsg+0x271/0x360 [ 349.882415][ T9430] ? __pfx___sys_sendmsg+0x10/0x10 [ 349.882476][ T9430] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 349.882495][ T9430] ? lockdep_hardirqs_on+0x9d/0x150 [ 349.882515][ T9430] __do_fast_syscall_32+0xb4/0x110 [ 349.882534][ T9430] ? exc_page_fault+0x5f8/0x920 [ 349.882556][ T9430] do_fast_syscall_32+0x34/0x80 [ 349.882576][ T9430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 349.882595][ T9430] RIP: 0023:0xf707d579 [ 349.882608][ T9430] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 349.882621][ T9430] RSP: 002b:00000000f506d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 349.882638][ T9430] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 349.882649][ T9430] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 349.882658][ T9430] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 349.882667][ T9430] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 349.882676][ T9430] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 349.882698][ T9430] [ 350.308667][ T1206] usbhid 1-1:0.0: can't add hid device: -71 [ 350.315166][ T1206] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 350.326760][ T1206] usb 1-1: USB disconnect, device number 52 [ 350.599974][ T9440] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 350.624309][ T9440] team0: Device macvtap1 is already an upper device of the team interface [ 350.714655][ T24] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 350.894432][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.913027][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 350.952538][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 350.987811][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 351.009924][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 351.038681][ T24] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 351.048815][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 351.060171][ T24] usb 5-1: Product: syz [ 351.064539][ T24] usb 5-1: Manufacturer: syz [ 351.069879][ T24] usb 5-1: SerialNumber: syz [ 351.071302][ T9461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.091451][ T24] usb 5-1: config 0 descriptor?? [ 351.117067][ T9461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.293382][ T9466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.343194][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'. [ 351.491866][ T24] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 351.517932][ T9466] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1115'. [ 351.533934][ T24] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 351.772570][ T9466] gtp0: entered promiscuous mode [ 351.778461][ T24] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 351.833606][ T24] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 351.846573][ T24] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 351.893745][ T9466] gtp0: entered allmulticast mode [ 351.979289][ T24] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 352.009862][ T9479] qrtr: Invalid version 183 [ 352.032203][ T9479] netlink: 'syz.1.1117': attribute type 16 has an invalid length. [ 352.087365][ T9479] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000055: 0000 [#1] SMP KASAN PTI [ 352.099922][ T9479] KASAN: null-ptr-deref in range [0x00000000000002a8-0x00000000000002af] [ 352.108358][ T9479] CPU: 0 UID: 0 PID: 9479 Comm: syz.1.1117 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 352.120346][ T9479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 352.130456][ T9479] RIP: 0010:rtnl_create_link+0x6af/0xea0 [ 352.136135][ T9479] Code: 24 20 42 80 3c 28 00 74 08 48 89 df e8 ea 06 3b f8 4c 89 64 24 28 bd a8 02 00 00 48 89 5c 24 08 48 03 2b 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 c2 06 3b f8 45 31 e4 48 83 7d 00 [ 352.156135][ T9479] RSP: 0018:ffffc9001a35ee50 EFLAGS: 00010206 [ 352.162924][ T9479] RAX: 0000000000000055 RBX: ffff8880281d0008 RCX: 0000000000080000 [ 352.171015][ T9479] RDX: ffffc9000b809000 RSI: 000000000000302c RDI: 000000000000302d [ 352.179015][ T9479] RBP: 00000000000002a8 R08: ffffffff89f28719 R09: 1ffff9200346bdf6 [ 352.187103][ T9479] R10: dffffc0000000000 R11: fffff5200346bdf7 R12: ffff8880615e0080 [ 352.195100][ T9479] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880281d0000 [ 352.203094][ T9479] FS: 0000000000000000(0000) GS:ffff888124f93000(0063) knlGS:00000000f506db40 [ 352.212035][ T9479] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 352.218639][ T9479] CR2: 00000000f74481e8 CR3: 00000000534c2000 CR4: 00000000003526f0 [ 352.226632][ T9479] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 352.234617][ T9479] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 352.242608][ T9479] Call Trace: [ 352.245917][ T9479] [ 352.248854][ T9479] rtnl_newlink_create+0x2f2/0xcb0 [ 352.253975][ T9479] ? __mutex_lock+0x380/0x10c0 [ 352.258778][ T9479] ? __pfx_aa_get_newest_label+0x10/0x10 [ 352.264464][ T9479] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 352.270121][ T9479] ? __pfx___mutex_lock+0x10/0x10 [ 352.275179][ T9479] ? ns_capable+0x8a/0xf0 [ 352.279526][ T9479] rtnl_newlink+0x18b0/0x1fe0 [ 352.284240][ T9479] ? stack_depot_save_flags+0x44/0x940 [ 352.289724][ T9479] ? __pfx_rtnl_newlink+0x10/0x10 [ 352.294765][ T9479] ? __netlink_deliver_tap+0x561/0x7f0 [ 352.300242][ T9479] ? netlink_deliver_tap+0x19d/0x1b0 [ 352.305547][ T9479] ? netlink_unicast+0x7c6/0x9a0 [ 352.310508][ T9479] ? netlink_sendmsg+0x8c3/0xcd0 [ 352.315509][ T9479] ? __sock_sendmsg+0x221/0x270 [ 352.320387][ T9479] ? ____sys_sendmsg+0x523/0x860 [ 352.325356][ T9479] ? __sys_sendmsg+0x271/0x360 [ 352.330140][ T9479] ? __do_fast_syscall_32+0xb4/0x110 [ 352.335485][ T9479] ? do_fast_syscall_32+0x34/0x80 [ 352.341258][ T9479] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 352.347829][ T9479] ? kasan_quarantine_put+0xdc/0x230 [ 352.353142][ T9479] ? lockdep_hardirqs_on+0x9d/0x150 [ 352.358358][ T9479] ? nlmon_xmit+0xaf/0x100 [ 352.362809][ T9479] ? __local_bh_enable_ip+0x168/0x200 [ 352.368294][ T9479] ? lockdep_hardirqs_on+0x9d/0x150 [ 352.373525][ T9479] ? aa_get_newest_label+0x101/0x6f0 [ 352.378940][ T9479] ? __lock_acquire+0xad5/0xd80 [ 352.383841][ T9479] ? __pfx_rtnl_newlink+0x10/0x10 [ 352.388901][ T9479] rtnetlink_rcv_msg+0x80f/0xd70 [ 352.393859][ T9479] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 352.398995][ T9479] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 352.404528][ T9479] ? ref_tracker_free+0x63e/0x7e0 [ 352.409555][ T9479] netlink_rcv_skb+0x208/0x480 [ 352.414323][ T9479] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 352.419801][ T9479] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 352.425121][ T9479] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.430344][ T9479] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.435563][ T9479] netlink_unicast+0x7f8/0x9a0 [ 352.440348][ T9479] ? __pfx_netlink_unicast+0x10/0x10 [ 352.445664][ T9479] ? skb_put+0x114/0x1f0 [ 352.449928][ T9479] netlink_sendmsg+0x8c3/0xcd0 [ 352.454730][ T9479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.460047][ T9479] ? __import_iovec+0x585/0x830 [ 352.464924][ T9479] ? aa_sock_msg_perm+0x91/0x160 [ 352.469891][ T9479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.475194][ T9479] __sock_sendmsg+0x221/0x270 [ 352.479885][ T9479] ____sys_sendmsg+0x523/0x860 [ 352.484656][ T9479] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.489954][ T9479] __sys_sendmsg+0x271/0x360 [ 352.494582][ T9479] ? __pfx_futex_wake+0x10/0x10 [ 352.499461][ T9479] ? __pfx___sys_sendmsg+0x10/0x10 [ 352.504684][ T9479] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 352.511291][ T9479] ? lockdep_hardirqs_on+0x9d/0x150 [ 352.516493][ T9479] __do_fast_syscall_32+0xb4/0x110 [ 352.521608][ T9479] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 352.527765][ T9479] ? lockdep_hardirqs_on+0x9d/0x150 [ 352.532968][ T9479] do_fast_syscall_32+0x34/0x80 [ 352.537857][ T9479] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 352.544210][ T9479] RIP: 0023:0xf707d579 [ 352.548318][ T9479] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 352.567937][ T9479] RSP: 002b:00000000f506d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 352.576374][ T9479] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000800000c0 [ 352.584352][ T9479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.592339][ T9479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 352.600317][ T9479] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 352.608296][ T9479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 352.616285][ T9479] [ 352.619333][ T9479] Modules linked in: [ 352.623859][ T9479] ---[ end trace 0000000000000000 ]--- [ 352.623863][ T24] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 352.624071][ T24] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 352.664446][ T9479] RIP: 0010:rtnl_create_link+0x6af/0xea0 [ 352.675174][ T9479] Code: 24 20 42 80 3c 28 00 74 08 48 89 df e8 ea 06 3b f8 4c 89 64 24 28 bd a8 02 00 00 48 89 5c 24 08 48 03 2b 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 c2 06 3b f8 45 31 e4 48 83 7d 00 [ 352.701207][ T9479] RSP: 0018:ffffc9001a35ee50 EFLAGS: 00010206 [ 352.707674][ T9479] RAX: 0000000000000055 RBX: ffff8880281d0008 RCX: 0000000000080000 [ 352.717539][ T9479] RDX: ffffc9000b809000 RSI: 000000000000302c RDI: 000000000000302d [ 352.727647][ T9479] RBP: 00000000000002a8 R08: ffffffff89f28719 R09: 1ffff9200346bdf6 [ 352.737753][ T9479] R10: dffffc0000000000 R11: fffff5200346bdf7 R12: ffff8880615e0080 [ 352.749184][ T9479] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880281d0000 [ 352.893545][ T9479] FS: 0000000000000000(0000) GS:ffff888124f93000(0063) knlGS:00000000f506db40 [ 352.902702][ T9479] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 352.923573][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 352.934837][ T9479] CR2: 00000000805b0000 CR3: 00000000534c2000 CR4: 00000000003526f0 [ 353.031188][ T9479] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 353.067823][ T9479] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 353.077070][ T9479] Kernel panic - not syncing: Fatal exception [ 353.083444][ T9479] Kernel Offset: disabled [ 353.087780][ T9479] Rebooting in 86400 seconds..