last executing test programs: 9.657277327s ago: executing program 3 (id=1224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4048841) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = dup(r5) sendmsg$NFT_BATCH(r6, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000880)=ANY=[@ANYRES32=r7, @ANYBLOB="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"], 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000300)=r8, 0x4) sendmsg$nl_xfrm(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000160039030000000000000000e000000100000000000000000000000000000000000000000000ffff", @ANYRES32=0x0, @ANYRES32=0x0], 0xf8}}, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81b"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$can_bcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4640}, 0x2}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 7.161757929s ago: executing program 2 (id=1234): openat(0xffffffffffffff9c, 0x0, 0x351142, 0x1cd) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000140)=[{r1, 0x6600}, {r0, 0x2191}], 0x2, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@broadcast, @random="6a00084fa53b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00k', 0x18, 0x3a, 0xff, @private2, @local, {[], @ndisc_na={0x87, 0x0, 0x0, 0x0, '\x00', @local}}}}}}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x9, 0x2a7345, 0x20d37}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b0a, 0xffffffffffffff7b}) 6.843393323s ago: executing program 0 (id=1235): r0 = socket$kcm(0x10, 0x5, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "9f2dccacf7364d6e1bd9000000000008", "32ec00", "bb10000000000001"}, 0x28) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000064d564b"]) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="8465b8680cc0445a4f79531e36f49a52dfc230ad708e9bd66a35a0b998fe801e1355f9dab3d7bb8ae345da4b9ac9f881b15fc035106bafec11f3cb2c42ad000000000000000285d85795b8e014788f5778ab8bfc134e6d9f9e474d6d175c61ad3261e5a5782d13577c03459efa", 0x6d}], 0x1, 0x0, 0x0, 0x4000}, 0x40885) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) socket$kcm(0x10, 0x5, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f00000002c0)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "9f2dccacf7364d6e1bd9000000000008", "32ec00", "bb10000000000001"}, 0x28) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000064d564b"]) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="8465b8680cc0445a4f79531e36f49a52dfc230ad708e9bd66a35a0b998fe801e1355f9dab3d7bb8ae345da4b9ac9f881b15fc035106bafec11f3cb2c42ad000000000000000285d85795b8e014788f5778ab8bfc134e6d9f9e474d6d175c61ad3261e5a5782d13577c03459efa", 0x6d}], 0x1, 0x0, 0x0, 0x4000}, 0x40885) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) (async) 6.510692277s ago: executing program 0 (id=1237): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) syz_usb_connect(0x3, 0x5f, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r5, @ANYRES32=r5], 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) syz_usb_disconnect(0xffffffffffffffff) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$SNDCTL_DSP_GETISPACE(r7, 0x8010500d, &(0x7f00000000c0)) syz_usb_connect(0x4, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}, {0x7, 0x4200, 0x0, 0x0}, {0x794, 0xd201, 0x0, 0x0}], 0x3}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES64=r10, @ANYRES64=r0, @ANYRESDEC=r6], 0x5c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000810) 5.447270244s ago: executing program 3 (id=1239): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) 5.357137945s ago: executing program 2 (id=1240): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000001001110002000000010000000000000014000000000000001001000002"], 0x30}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, r2, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000280)={0x20, r6, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000300)={0x8, r6}) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000340)={0x8, r5}) ioctl$IOMMU_GET_HW_INFO(r1, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r4, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(r1, 0x3b80, &(0x7f0000000400)={0x8, r3}) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000440)={0x8, r2}) close(r1) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x8202, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) write$proc_mixer(r8, &(0x7f0000000040)=ANY=[@ANYBLOB='\t'], 0x2b) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="5c00000014006b03000000d86e6c1d0002845da60600000000000000e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000044) process_madvise(r7, 0x0, 0x0, 0x19, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r7) 5.002515747s ago: executing program 2 (id=1242): r0 = open(&(0x7f0000000380)='./bus\x00', 0x240, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x40) (async) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r0], 0x2b) creat(&(0x7f00000002c0)='./file0\x00', 0x6) (async) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) mmap$xdp(&(0x7f0000398000/0x3000)=nil, 0x3000, 0xf5fffffd, 0x12, r3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x80000000e) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2, &(0x7f0000000000)=0x5, 0x4, 0x0) (async) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) (async) sendfile(r2, r0, 0x0, 0x4000000053d2) (async, rerun: 64) syz_usb_connect(0x0, 0x3d, &(0x7f0000000940)={{0x12, 0x1, 0x0, 0xa6, 0xff, 0x5, 0x40, 0xabcd, 0xcdee, 0x5b9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9c, 0x0, 0x2, 0x1, 0x3, 0x51, 0x0, [], [{{0x9, 0x5, 0x3, 0x13, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3}]}}, {{0x9, 0x5, 0xf}}]}}]}}]}}, 0x0) (rerun: 64) 4.742420142s ago: executing program 2 (id=1244): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) syz_io_uring_setup(0xd2, &(0x7f0000000200)={0x0, 0x83ae, 0x800, 0x2}, 0x0, 0x0) ioctl$sock_ifreq(r1, 0x8913, &(0x7f00000002c0)={'team_slave_1\x00', @ifru_data=&(0x7f0000000280)="a803b281d519e1b15207963b08e928f393ab5f6a1213d1dd005c6bee45098cb9"}) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xc, 0xfe, 0x0, @SEQ_NOTEON=@special}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x0, 0x2, 0x0, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f00000000c0)={r3, 0x8, 0x1, 0x8000000000000000}) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x2000004, @remote, 0xa}, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={0x1, 0x334, 0x0, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000100"}}, 0x48}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000340)=@mgmt_frame=@beacon={{{}, {}, @device_a, @device_a, @from_mac, {0x0, 0x69}}, 0x0, @default, 0x1, @val, @val, @void, @val={0x4, 0x6, {0x37, 0x1, 0x8, 0x3}}, @void, @val={0x5, 0x74, {0xf7, 0x37, 0x5, "1d73353acd4c6effe6d5c76320b50776c7c4004dec10fe46a46c7119bd5c3284338828941b791264f1c715c045b9dd82980e13f8b622690480cd4e588a79fac09a329c0dbdc4bc17b14166c58aa751433e98ad94465ca3765fff282fefce7bdae908a232c69008c827bc99f4cbc4581e2b"}}, @val={0x25, 0x3, {0x0, 0x0, 0xfc}}, @void, @void, @void, @void, @void, @void}, 0xab) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) 4.011952737s ago: executing program 1 (id=1245): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 3.980382544s ago: executing program 2 (id=1246): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x458, 0x501b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x3ff, 0x8, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa270005d70000fe08060001080006"], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x2, "9c7f"}, @local=@item_4={0x3, 0x2, 0x5, 'Fv+:'}]}}, 0x0}, 0x0) 3.894669381s ago: executing program 1 (id=1247): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x31, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @alu={0x7, 0x1, 0xd, 0x8, 0x0, 0xb, 0x4}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0xa, 0x3, 0x4, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.839208597s ago: executing program 4 (id=1248): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf7fa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4014) (fail_nth: 7) 3.474645285s ago: executing program 4 (id=1249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x360}}, 0x0) 3.465695053s ago: executing program 4 (id=1250): r0 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$sock_int(r3, 0x1, 0x2c, &(0x7f0000000080)=0x84, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x81, 'syz0\x00', 0x108}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x88, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000001180)={{0x3, 0x2, 0x80000000, 0x100, 'syz1\x00', 0xffffffff}, 0x0, [0x6ba74c59, 0x85, 0xf, 0x1, 0x9, 0x6, 0x5, 0xdb, 0x0, 0xf0, 0x3, 0x5, 0x8001, 0xfffffffffffffffb, 0x4, 0x2938, 0x100, 0xfffffffffffffff8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x6, 0x9025, 0x5, 0x5, 0x7, 0x100000001, 0x40, 0x9, 0x9, 0x2, 0x100, 0x9, 0xb, 0x1a7427c9, 0x7, 0x8, 0x7, 0x6, 0x5, 0x10001, 0xffffffff, 0xffffffffffffff3d, 0x800, 0x9, 0xe4e, 0x9, 0x401, 0xa8, 0x659, 0x5, 0xfff, 0x2, 0xffff, 0xffffffffffffff53, 0x0, 0x101, 0x7f, 0x4, 0x9, 0x10, 0x2, 0xd1c, 0x80000001, 0x9, 0x8001, 0x0, 0x1, 0xfffffffffffff3a0, 0xfffffffffffffffa, 0x4, 0x4, 0x1, 0x9, 0xe5, 0xfa0, 0x9, 0x1, 0x401, 0x8, 0x7fffffffffffffff, 0x101, 0xffffffffffffff2f, 0xe, 0x4, 0x4040000, 0xffffffff, 0x1, 0x7, 0x5, 0x1ff, 0xa46, 0xfffffffffffffb27, 0x100, 0x5, 0x7, 0x5, 0x7, 0xfffffffffffffff9, 0x6, 0x5, 0x3, 0x4, 0x9, 0x27ee, 0x0, 0x0, 0x0, 0x4, 0x6, 0x8, 0x6, 0x8000000000000001, 0x4, 0xd27, 0x0, 0x4, 0x3ff, 0x3, 0x9, 0x87, 0x80, 0x3, 0x2, 0x2c, 0xa, 0x1, 0x1, 0x8]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000000)=0x6}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r10, 0x65, 0x5, 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7}]) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 3.40087279s ago: executing program 1 (id=1251): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0x4, 0x1}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8400c1, 0x0) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x80000, 0x11) r3 = dup2(r1, r2) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xb0003, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) setxattr$incfs_metadata(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)="1cdcfc93c3de5cd7910a8fbefe7875a4671817e41a608206321226004b2c4bc490d88b00b43fa18cdd8e38f415888192d5b1bfb394cdd84c7727d09a5566b474bbf3124b30c5d8e0e9c702d5e4c408529c0afda8e5ee796121d43f930d1351d628bc96a8525fd43b265026def74dd6ca50a92148ed64d2056a40b4c0526d368de9071916e0be7708d42ca95de5de11345c00811bc68f4ba4ff81647985042abbb5e03b3b4fc8dc3b16e9bd8e09049a3f9c7794f2094431e62a8d05ca47a8be09dfee9ef37f4d95291dd1a95bcd50427a0cfb95a83736b5557a4a815517372c8995bedfb99ffef5aa68", 0xe9, 0x2) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000002c0)={0x7, 0x1, 0x101, 0x9, 0x7, 0x1, 0x1, 0x4}, &(0x7f0000000300)={0x10001, 0x7, 0x0, 0x2, 0xd, 0x100000001, 0x5, 0x2}, &(0x7f0000000340)={0x4a47b8c8, 0x7ff, 0xfffffffffffffff7, 0x3, 0x2, 0x800, 0xae3, 0xffffffff8997ed43}, &(0x7f00000003c0)={r4, r5+10000000}, &(0x7f0000000440)={&(0x7f0000000400)={[0x80000000]}, 0x8}) r6 = openat(r1, &(0x7f0000000480)='./file1\x00', 0x280000, 0x140) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x1000, 0xd1, &(0x7f00000004c0)=""/209}, {0xdddd1000, 0x51, &(0x7f00000005c0)=""/81}]}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x9b95f000) rt_sigtimedwait(&(0x7f00000006c0)={[0x9]}, &(0x7f0000000700), &(0x7f0000000780)={0x0, 0x989680}, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x4a0, 0xe0, 0x0, 0xffffffff, 0xe0, 0x0, 0x408, 0x408, 0xffffffff, 0x408, 0x408, 0x5, &(0x7f00000007c0), {[{{@ip={@loopback, @loopback, 0x0, 0xffffffff, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x62, 0x0, 0x2a}, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}, {0x9}], 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @port=0x4e23, @port=0x4e20}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x26}, @loopback, 0xff000000, 0xff, 'batadv_slave_0\x00', 'syzkaller1\x00', {0xff}, {}, 0x1d, 0x1, 0x68}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x1, 0x4, 0x1, 0x1, 0x0, 0x5], 0x4, 0x2}}}, @common=@unspec=@mac={{0x30}, {@local, 0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x425, 0x200, 0x3}}}, {{@ip={@private=0xa010102, @remote, 0x0, 0x0, 'ip_vti0\x00', 'macvtap0\x00', {}, {0xff}, 0x2f, 0x2, 0x1}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x0, 0x1, 0x2}, {0x9, 0x40}, {0x4, 0x5}, 0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x5, 0x1, 0x0, 0x4, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x0, 0x2, 0x4, 0x1, 0x3, 0x5], 0x1, 0x1}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0xd8, 0x6], 0x1}}, @common=@ttl={{0x28}, {0x0, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x21, @multicast1, @dev={0xac, 0x14, 0x14, 0xb}, @gre_key=0x9, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f0000000d40)={0x81, 0x0, 0x3}) r7 = syz_open_dev$usbfs(&(0x7f0000000dc0), 0x3, 0x2c8801) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r7, 0x8002f515, &(0x7f0000000e00)) kexec_load(0x101, 0x7, &(0x7f0000002100)=[{&(0x7f0000000e40)="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", 0x1000, 0x7, 0x8}, {&(0x7f0000001e40), 0x0, 0xa33d, 0x3}, {&(0x7f0000001e80)="ed434738d312993829471556a768e56e7db9074fe2a89cd3c456cee6eed2980a92495f92cd2c721246326a4a01dc8da08bf95c814a70", 0x36, 0x80, 0x2}, {&(0x7f0000001ec0)="beefa1b01954b845c0505fe8b1ac73c3fbd1df270eae0946da108b456299bf213a0ebcb42c242034fb939c6060254010b06fec4e1f2efd7c1ad43232eadde5469a0c6457a6cc711270c0b5a44655d7295146984a89", 0x55, 0x1, 0xb68}, {&(0x7f0000001f40)="8b3286b52594d3ff4361f6b4c657c26b71378947b4fbb9f61f0c842684f0676f56dd177f026a11ed54780f09ab1ec04ecd35ef9ce19985d1c94ba512c9477ee17727706a1cf40c7115d475e0c069314e3509d38828a99937f143408f6b", 0x5d, 0xac, 0x1}, {&(0x7f0000001fc0)="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", 0xfb, 0x4bce1f54, 0x7}, {&(0x7f00000020c0), 0x0, 0xac, 0x81}], 0x80000) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000002240)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, &(0x7f0000002200), {[{{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x2f}, [0xff000000, 0xff, 0x0, 0xffffff00], [], '\x00', 'hsr0\x00', {0xff}, {}, 0x5e, 0x7, 0x1, 0x24}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@hl={{0x28}, {0x3}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x3}, {0xffffffffffffffff, 0x1, 0x2}}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f0000002580)=@nfc, 0x80, &(0x7f0000003840)=[{&(0x7f0000002600)=""/116, 0x74}, {&(0x7f0000002680)=""/123, 0x7b}, {&(0x7f0000002700)=""/10, 0xa}, {&(0x7f0000002740)=""/239, 0xef}, {&(0x7f0000002840)=""/4096, 0x1000}], 0x5}, 0x77c}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f00000038c0)=""/159, 0x9f}, {&(0x7f0000003980)=""/104, 0x68}, {&(0x7f0000003a00)=""/111, 0x6f}, {&(0x7f0000003a80)=""/254, 0xfe}, {&(0x7f0000003b80)=""/98, 0x62}, {&(0x7f0000003c00)=""/85, 0x55}, {&(0x7f0000003c80)=""/156, 0x9c}, {&(0x7f0000003d40)=""/246, 0xf6}], 0x8, &(0x7f0000003ec0)=""/223, 0xdf}, 0x80}], 0x2, 0x101, &(0x7f0000004040)={0x77359400}) r8 = openat$cgroup_procs(r3, &(0x7f0000004080)='cgroup.threads\x00', 0x2, 0x0) fcntl$getownex(r8, 0x10, &(0x7f00000040c0)={0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004100)='./cgroup.net/syz0\x00', 0x1ff) io_uring_enter(r6, 0x14a5, 0x9c4d, 0x5d, &(0x7f0000004140), 0x8) r10 = syz_open_procfs(r9, &(0x7f0000004180)='cgroup\x00') r11 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r11, 0x4010ae67, &(0x7f00000041c0)={0x4000, 0x100000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000004200)={0x4, 0x26c, 0x3}) syz_open_dev$sndpcmp(&(0x7f0000004240), 0x1, 0x30a00) 3.317742182s ago: executing program 1 (id=1252): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(r0, 0xfffffffffffffffd, 0xd76ba552cd26fade) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000010027bd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000008000204140024006272696467655f736c6176655f2ffffffe00168000"/48], 0x48}}, 0x800) sendmmsg$inet(r6, &(0x7f00000029c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x200) ioctl$KVM_GET_MSRS(r9, 0xc008ae88, 0x0) r10 = fsmount(r3, 0x1, 0x0) fchdir(r10) r11 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f0000000400)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) write$FUSE_CREATE_OPEN(r11, &(0x7f0000000300)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x182, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x4e4e, 0xfffffffe, 0x2000, 0x0, r12, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) set_mempolicy_home_node(&(0x7f00002b7000/0x1000)=nil, 0x1000, 0xfffffffffffffffd, 0x0) sendfile(r11, r11, &(0x7f0000000080), 0x7f03) 3.170601268s ago: executing program 0 (id=1253): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000b80)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.stat\x00', 0x275a, 0x0) read$FUSE(r2, &(0x7f00000006c0)={0x2020}, 0x2020) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0) 2.918791849s ago: executing program 4 (id=1254): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x15, &(0x7f0000000a40)={0x0, {{0x2, 0x0, @dev}}, {{0x2, 0x0, @loopback}}}, 0x3) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x15, &(0x7f0000000a40)={0x0, {{0x2, 0x0, @dev}}, {{0x2, 0x0, @loopback}}}, 0x3) r2 = syz_io_uring_setup(0x1229, &(0x7f00000001c0)={0x0, 0xd580, 0x4, 0x1, 0x189}, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x5e99, &(0x7f00000002c0)={0x0, 0xc67e, 0x2000, 0x0, 0x10, 0x0, r2}, &(0x7f0000000140), &(0x7f0000000180)) 2.097585748s ago: executing program 3 (id=1255): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="f3420fc7fdc443e9789c5e0b00000005c4027d79c9c4827918d766400f6eb358000000c4a2c1910cf2c4e3dd0be409430f060f21dc66baa000b002ee", 0x3c}], 0x1, 0x48, 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x92102, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.862512034s ago: executing program 2 (id=1256): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bed63d0fd450fa1bd1e3255b1333a1aff9b685764aa5843039354c28e69740a0a9d1195b47a063a520a70e3c251e4a5d18423d086c9d108a18345b55d4d296fe19a36732077d4d1ddf03be04b6314a220674eb7a2d569b77bb7600697d6e705781d97818d6842577450cc35ae327a99300aa0127a1b3d6fd395bc1dacfe0", @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5ad6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90c00000000cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde0caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1c83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db1085df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bee1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ecf8e26206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362371a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4671f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76b060000000000000095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc06127a450ed0dfa1410cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f01d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865638b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72093b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e500", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x8000000000000, 0x28dc, 0x0, 0x440000, 0x1, {0x1, 0xfffffffffffffffd, 0x0, 0x1000, 0xfffffffffffffffc, 0x100, 0x0, 0x0, 0x4, 0xc000, 0x0, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "018100", 0x48, 0x11, 0x0, @local, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000005c0)='./file0/../file0/file0\x00') sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x8000}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280)="27031c00160014000000002f1eafacf706e105000000894f00050005ee0b80558ddbba9b3724", 0x26}], 0x1}, 0x20000004) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0) 1.862169396s ago: executing program 1 (id=1257): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = socket$inet(0x2, 0x3, 0x8) r2 = dup3(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x9c, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x52}}}}, [@NL80211_ATTR_KEY_SEQ={0x7, 0xa, "76c3cb"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY={0x6c, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ed4f7b0d226a464d33f2a9dd95"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "eaca401b1ac6d4599aac8db75d"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d5a674c0d759d099ede8dea117"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "3bc9b75e1e256ec0287fb114af"}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4008814}, 0x80) 1.734470686s ago: executing program 1 (id=1258): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x0, 0x18, 0x70, 0xfd}}]}}]}}, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 1.636888472s ago: executing program 0 (id=1259): socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x42200, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x3000000, 0x1, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x7f, 0x800000, 0x3, 0x7, 0xc3ad, 0x4}, 0x0, 0x0) 1.597939734s ago: executing program 3 (id=1260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x360}}, 0x0) 1.485902201s ago: executing program 3 (id=1261): r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.010418204s ago: executing program 3 (id=1262): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0xf8, 0x720d, 0x148, 0x0, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @remote, 0xffffffff, 0x0, 'wg1\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x84, 0x3, 0x11}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x20]}, {0xffffffffffffffff, [0x4, 0xb2cc575b459b5b32, 0x4, 0x3, 0x1], 0x6, 0x3}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0xfffffff4, 0x0, 0x0, 0xfffffffd]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x65, 0x89, 0x53, 0x40, 0x10f0, 0x2002, 0xd767, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfc, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6b, 0x0, 0x1, 0xa, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x8a, 0x3}}]}}]}}]}}, 0x0) r1 = syz_usb_connect$cdc_ecm(0x2, 0x61, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x3, 0x20, 0x10, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xc75, 0x8, 0x2, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x9, 0xd46}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x1, 0x4, 0x4, 0x6, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xda, 0x10, 0xda}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x8, 0x6, 0x5}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x6, 0x0, 0x3, 0x70, 0x1}, 0x40, &(0x7f00000000c0)={0x5, 0xf, 0x40, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x89, 0x3, 0xd, 0xb4}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "b03b6c54f63c0800000000000000d0d5"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x1, 0x6}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xa, 0x4, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0xe9, 0x4, 0x3, 0x8}]}, 0x5, [{0x99, &(0x7f0000000100)=@string={0x99, 0x3, "eb4e59860e0414803c4a21d680abf148329d42b56857bbe8743e6092595b5d2f2fe20974f05507f1d761dece8d9608526cb3b8073be2d393a2342741194e342af48892d4dfb7a161bc6f5a8f8b4efc8b0b066f468ae24701e97af6224742a02a3ae442fe55f5976efb0545a4f0bfc88d177ac448ae750bbdeaadba54066476fc3160f5194e550a230ed26bf31d3dd1140d25ee8b1404c0"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x6057}}, {0xd5, &(0x7f0000000200)=@string={0xd5, 0x3, "7a6c80b505f1f280557eb7bd72795379a46fdd735aa1dbb5f995490fba1151102f63ae56961dd9c36f2188b98df5e0aa7be0c2a34524b44ea8f8f5cbd17a2b79dad82c042a8db4c943198e755f7327b51fc3c8471a1a5eca4ec0bcb6650fa4290577a0c5cf15dd19e2ac2db2718a47fea79ee50536a484e353da2cb7d7c7fdc7546480150e5af4fdc982ece8945c40421cbab6b7fbaaee6cc1f41bc266d9a276a9073f2010b5565ead2da1d7ae1d83ad331d8594164650ec34df34df65d8c408d3cc3294946a0f1ed3e3626a2861c62cc07c87"}}, {0x100, &(0x7f0000000300)=@string={0x100, 0x3, "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"}}, {0xf3, &(0x7f0000000400)=@string={0xf3, 0x3, "8ceb9d4dfbf46961e8bda0cee807a1f8ff18a4e46590bbda2aa1ec66eac1e1ee24f44bb911244f46745c8d51b3c94004b2067635e2596cef6947e472ed400fb6a5eb86a57cc1c5611c762758ec48d9f0555db821ef1c23bbcce454b1ed5718546295c3d1084838785cfb3e8e9148330e572fca23b019535002522fec43e5ba48edaa016380c3e5f95ff45e6c878b2fe4298060f1d94e789db011dca986bdc278ca22e753d66ff94c8dd1803b911850c88ba91197c6592e626eb7bc7235405b341d1278f02f38bae2a6ab6a9765cffa1cae851cbb4ba5e85b393461a17cff6c9b76d1e0386aa45f566090acd4a91bdf3529"}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000600)={0x14, &(0x7f0000000580)={0x0, 0x30, 0x10, {0x10, 0x77ef73574d3e915f, "2bec32341dffeac6a81a1f9a86fe"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x1c, &(0x7f0000000640)={0x0, 0x14, 0x41, "c89613c17f7d86dc3ac21a4ab2a1bd486f0e90fca2693dbf576ccb0973d4a29ffe2038926c4ef9eb2c3822fedc4e820b14f3191013e76ca98241e99c2a04055cb4"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000700)={0x0, 0x8, 0x1}}) (async) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000600)={0x14, &(0x7f0000000580)={0x0, 0x30, 0x10, {0x10, 0x77ef73574d3e915f, "2bec32341dffeac6a81a1f9a86fe"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x1c, &(0x7f0000000640)={0x0, 0x14, 0x41, "c89613c17f7d86dc3ac21a4ab2a1bd486f0e90fca2693dbf576ccb0973d4a29ffe2038926c4ef9eb2c3822fedc4e820b14f3191013e76ca98241e99c2a04055cb4"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000700)={0x0, 0x8, 0x1}}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) (async) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) 842.090185ms ago: executing program 4 (id=1263): socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1, 0x2080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x4, r1, &(0x7f0000000040), 0x4000007) socketpair(0x21, 0x80000, 0xd2, &(0x7f0000000180)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x100c, 0x10003, 0x5, 0x0, 0x5f1, 0x1}) socket(0x2000000000000021, 0x2, 0x10000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x5d1101) openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x42200, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x7f, 0x800000, 0x3, 0x7, 0xc3ad, 0x4}, 0x0, 0x0) 641.610442ms ago: executing program 0 (id=1264): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {0x0, 0xc}, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x287, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}) (fail_nth: 1) 538.526426ms ago: executing program 4 (id=1265): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) 0s ago: executing program 0 (id=1266): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f0000000200)={0x20, 0x76, 0x80000}, 0x20) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) kernel console output (not intermixed with test programs): dit(1745053675.915:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9096 comm="syz.3.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fd9a638e169 code=0x7ffc0000 [ 359.393844][ T9100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.535642][ T9100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.590661][ T30] audit: type=1326 audit(1745053675.915:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9096 comm="syz.3.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a638e169 code=0x7ffc0000 [ 359.662069][ T30] audit: type=1326 audit(1745053675.925:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9096 comm="syz.3.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a638e169 code=0x7ffc0000 [ 359.749554][ T9103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.763718][ T9103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.774786][ T30] audit: type=1326 audit(1745053676.275:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.3.818" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9a638e169 code=0x0 [ 359.800366][ T9103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.808712][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.818307][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.826619][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.834797][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.258038][ T9116] fuse: Unknown parameter '' [ 360.578163][ T24] usb 1-1: USB disconnect, device number 63 [ 360.915450][ T5900] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 361.095525][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 361.155512][ T5900] usb 2-1: config 0 has an invalid interface number: 150 but max is 0 [ 361.183318][ T5900] usb 2-1: config 0 has no interface number 0 [ 361.203805][ T5900] usb 2-1: config 0 interface 150 has no altsetting 0 [ 361.216870][ T5900] usb 2-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=53.01 [ 361.226207][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.245068][ T5892] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 361.254287][ T5900] usb 2-1: Product: syz [ 361.262138][ T5900] usb 2-1: Manufacturer: syz [ 361.277999][ T5900] usb 2-1: SerialNumber: syz [ 361.301413][ T5900] usb 2-1: config 0 descriptor?? [ 361.319083][ T5900] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 361.415457][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 361.430941][ T5892] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 361.445474][ T24] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 361.453233][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.495406][ T5848] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 361.526188][ T5892] usb 1-1: config 0 descriptor?? [ 361.545794][ T9123] tipc: Started in network mode [ 361.550712][ T9123] tipc: Node identity 7, cluster identity 4711 [ 361.563651][ T9123] tipc: Node number set to 7 [ 361.592000][ T9123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.612972][ T9123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.621235][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 361.635558][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.655138][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.681162][ T24] usb 3-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 361.706544][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.723258][ T5848] usb 4-1: config 0 has no interfaces? [ 361.730945][ T24] usb 3-1: config 0 descriptor?? [ 361.748707][ T5848] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 361.761679][ T5892] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 361.773802][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.812376][ T5848] usb 4-1: Product: syz [ 361.846574][ T5848] usb 4-1: Manufacturer: syz [ 361.851372][ T5848] usb 4-1: SerialNumber: syz [ 361.889655][ T5900] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 361.912048][ T5900] pac7311 2-1:0.150: probe with driver pac7311 failed with error -71 [ 361.932860][ T5848] usb 4-1: config 0 descriptor?? [ 362.020051][ T5900] usb 2-1: USB disconnect, device number 62 [ 362.078176][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 362.172228][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 362.201048][ T24] usb 3-1: USB disconnect, device number 58 [ 362.411520][ T9137] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 362.551508][ T5892] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 362.623512][ T5892] asix 1-1:0.0: probe with driver asix failed with error -71 [ 362.746125][ T5892] usb 1-1: USB disconnect, device number 64 [ 362.915328][ T5900] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 362.925353][ T24] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 363.089181][ T24] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 363.126429][ T5900] usb 3-1: config 4 has an invalid interface number: 231 but max is 0 [ 363.136963][ T24] usb 2-1: config 150 has no interface number 0 [ 363.143558][ T5900] usb 3-1: config 4 has no interface number 0 [ 363.150055][ T24] usb 2-1: config 150 interface 204 has no altsetting 0 [ 363.164454][ T24] usb 2-1: config 150 interface 1 has no altsetting 0 [ 363.175889][ T5900] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 363.208594][ T24] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 363.230973][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.239478][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.251530][ T24] usb 2-1: Product: syz [ 363.256341][ T5900] usb 3-1: Product: syz [ 363.261192][ T24] usb 2-1: Manufacturer: syz [ 363.269859][ T5900] usb 3-1: Manufacturer: syz [ 363.274898][ T24] usb 2-1: SerialNumber: syz [ 363.279786][ T5900] usb 3-1: SerialNumber: syz [ 363.299431][ T5900] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 363.504830][ T24] xr_serial 2-1:150.204: xr_serial converter detected [ 363.645334][ T5899] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 363.719344][ T5900] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 363.762744][ T5900] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 363.884174][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 363.904494][ T24] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 363.912130][ T24] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 363.956983][ T5944] usb 3-1: USB disconnect, device number 59 [ 363.981009][ T5899] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 364.035830][ T24] usb 2-1: USB disconnect, device number 63 [ 364.051534][ T5899] usb 5-1: config 0 has no interface number 0 [ 364.093048][ T24] xr_serial 2-1:150.204: device disconnected [ 364.100139][ T5899] usb 5-1: config 0 interface 184 has no altsetting 0 [ 364.211981][ T5899] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 364.235281][ T5900] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 364.246913][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.265411][ T5899] usb 5-1: Product: syz [ 364.275622][ T5899] usb 5-1: Manufacturer: syz [ 364.280262][ T5899] usb 5-1: SerialNumber: syz [ 364.314220][ T24] usb 4-1: USB disconnect, device number 67 [ 364.332758][ T5899] usb 5-1: config 0 descriptor?? [ 364.343771][ T5899] smsc75xx v1.0.0 [ 364.449452][ T5900] usb 1-1: config 0 has no interfaces? [ 364.461352][ T5900] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 364.470524][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.595246][ T5900] usb 1-1: Product: syz [ 364.619425][ T5900] usb 1-1: Manufacturer: syz [ 364.624776][ T5900] usb 1-1: SerialNumber: syz [ 364.700537][ T9178] netlink: 44 bytes leftover after parsing attributes in process `syz.3.843'. [ 364.787159][ T5899] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 364.798285][ T5899] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 364.822764][ T5900] usb 1-1: config 0 descriptor?? [ 364.844799][ T5899] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 364.898798][ T5899] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 365.275451][ T5892] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 365.448465][ T5892] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 365.461276][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.549745][ T5892] usb 3-1: config 0 descriptor?? [ 365.574439][ T5892] cp210x 3-1:0.0: cp210x converter detected [ 365.940488][ T9185] syzkaller0: entered promiscuous mode [ 366.034138][ T9185] syzkaller0: entered allmulticast mode [ 366.568872][ T9206] FAULT_INJECTION: forcing a failure. [ 366.568872][ T9206] name failslab, interval 1, probability 0, space 0, times 0 [ 366.582570][ T9206] CPU: 0 UID: 0 PID: 9206 Comm: syz.3.851 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 366.582604][ T9206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 366.582618][ T9206] Call Trace: [ 366.582627][ T9206] [ 366.582636][ T9206] dump_stack_lvl+0x241/0x360 [ 366.582675][ T9206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.582706][ T9206] ? __pfx__printk+0x10/0x10 [ 366.582740][ T9206] ? __pfx___might_resched+0x10/0x10 [ 366.582764][ T9206] should_fail_ex+0x424/0x570 [ 366.582801][ T9206] should_failslab+0xac/0x100 [ 366.582825][ T9206] __kmalloc_noprof+0xdf/0x4d0 [ 366.582846][ T9206] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 366.582875][ T9206] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 366.582909][ T9206] tomoyo_realpath_from_path+0xcf/0x5e0 [ 366.582953][ T9206] tomoyo_path_perm+0x2be/0x640 [ 366.582988][ T9206] ? tomoyo_path_perm+0x28c/0x640 [ 366.583012][ T9206] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 366.583034][ T9206] ? rcu_read_lock_any_held+0xbb/0x160 [ 366.583092][ T9206] ? __pfx_vfs_write+0x10/0x10 [ 366.583118][ T9206] ? do_sys_openat2+0x165/0x1d0 [ 366.583144][ T9206] ? __pfx_do_sys_openat2+0x10/0x10 [ 366.583176][ T9206] security_file_truncate+0xac/0x250 [ 366.583201][ T9206] do_ftruncate+0x275/0x5a0 [ 366.583237][ T9206] ? __pfx_do_ftruncate+0x10/0x10 [ 366.583279][ T9206] __x64_sys_ftruncate+0x93/0xf0 [ 366.583312][ T9206] do_syscall_64+0xf3/0x210 [ 366.583336][ T9206] ? clear_bhb_loop+0x45/0xa0 [ 366.583361][ T9206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.583381][ T9206] RIP: 0033:0x7fd9a638e169 [ 366.583399][ T9206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.583417][ T9206] RSP: 002b:00007fd9a71b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 366.583440][ T9206] RAX: ffffffffffffffda RBX: 00007fd9a65b5fa0 RCX: 00007fd9a638e169 [ 366.583456][ T9206] RDX: 0000000000000000 RSI: 0000000074c893df RDI: 0000000000000004 [ 366.583469][ T9206] RBP: 00007fd9a71b0090 R08: 0000000000000000 R09: 0000000000000000 [ 366.583482][ T9206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.583494][ T9206] R13: 0000000000000000 R14: 00007fd9a65b5fa0 R15: 00007fd9a66dfa28 [ 366.583527][ T9206] [ 366.953927][ T5848] usb 5-1: USB disconnect, device number 77 [ 367.095630][ T9206] ERROR: Out of memory at tomoyo_realpath_from_path. [ 367.256029][ T9210] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 367.512700][ T5899] usb 1-1: USB disconnect, device number 65 [ 367.728798][ T9216] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 367.985476][ T9219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.854'. [ 368.345395][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 368.406467][ T9225] netlink: 165 bytes leftover after parsing attributes in process `syz.4.856'. [ 368.938138][ T9233] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 369.098925][ T9236] loop2: detected capacity change from 0 to 524287999 [ 369.855037][ T5848] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 370.181509][ T9244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.861'. [ 370.211905][ T5848] usb 1-1: config 0 has no interfaces? [ 370.254630][ T5848] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 370.272943][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.323532][ T5848] usb 1-1: Product: syz [ 370.337538][ T5848] usb 1-1: Manufacturer: syz [ 370.342395][ T5848] usb 1-1: SerialNumber: syz [ 370.367743][ T5848] usb 1-1: config 0 descriptor?? [ 370.677274][ T5892] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -110 [ 370.713229][ T5892] cp210x 3-1:0.0: querying part number failed [ 370.728847][ T5892] usb 3-1: cp210x converter now attached to ttyUSB0 [ 371.744994][ T9223] netlink: 44 bytes leftover after parsing attributes in process `syz.3.857'. [ 371.880626][ T5899] usb 3-1: USB disconnect, device number 60 [ 371.914348][ T5899] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 371.935368][ T5899] cp210x 3-1:0.0: device disconnected [ 372.699945][ T9268] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 372.738606][ T5899] usb 1-1: USB disconnect, device number 66 [ 373.473965][ T9277] netlink: 165 bytes leftover after parsing attributes in process `syz.0.868'. [ 373.547607][ T5892] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 373.773788][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.803936][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.874896][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 373.908546][ T5892] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.994481][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.087664][ T5892] usb 3-1: config 0 descriptor?? [ 374.295326][ T5848] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 374.459763][ T5848] usb 4-1: device descriptor read/64, error -71 [ 374.635352][ T5895] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 374.865569][ T5848] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 374.896215][ T5895] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 374.916222][ T5895] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 374.937407][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.969733][ T5895] usb 2-1: Product: syz [ 374.973937][ T5895] usb 2-1: Manufacturer: syz [ 375.048749][ T5848] usb 4-1: device descriptor read/64, error -71 [ 375.071261][ T5895] usb 2-1: SerialNumber: syz [ 375.096908][ T9301] netlink: 'syz.4.875': attribute type 10 has an invalid length. [ 375.111015][ T5895] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 375.120158][ T9301] netlink: 40 bytes leftover after parsing attributes in process `syz.4.875'. [ 375.145008][ T9301] net_ratelimit: 118 callbacks suppressed [ 375.145029][ T9301] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 375.175579][ T5848] usb usb4-port1: attempt power cycle [ 375.211547][ T9276] "syz.2.866" (9276) uses obsolete ecb(arc4) skcipher [ 375.528914][ T5848] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 375.554625][ T5895] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 375.725489][ T5848] usb 4-1: device descriptor read/8, error -71 [ 375.787169][ T9306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.877'. [ 375.975405][ T5848] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 376.036135][ T5848] usb 4-1: device descriptor read/8, error -71 [ 376.344402][ T5899] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 376.710972][ T5848] usb usb4-port1: unable to enumerate USB device [ 376.843863][ T5899] usb 1-1: config 0 has an invalid interface number: 33 but max is 0 [ 376.877338][ T5892] usbhid 3-1:0.0: can't add hid device: -71 [ 376.883802][ T5899] usb 1-1: config 0 has no interface number 0 [ 376.884242][ T5892] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 376.926646][ T5892] usb 3-1: USB disconnect, device number 61 [ 376.967694][ T5899] usb 1-1: New USB device found, idVendor=24cf, idProduct=59e4, bcdDevice= 9.43 [ 377.078458][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.130823][ T5899] usb 1-1: config 0 descriptor?? [ 377.143407][ T5899] usb-storage 1-1:0.33: USB Mass Storage device detected [ 377.379652][ T5900] usb 1-1: USB disconnect, device number 67 [ 377.474179][ T5892] usb 2-1: USB disconnect, device number 64 [ 377.555305][ T5899] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 377.925300][ T5899] usb 3-1: config 0 has no interfaces? [ 378.045314][ T5900] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 378.106158][ T5899] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 378.147268][ T9339] fuse: Unknown parameter '0x0000000000000004' [ 378.153501][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.211523][ T5899] usb 3-1: Product: syz [ 378.250223][ T5899] usb 3-1: Manufacturer: syz [ 378.322127][ T5900] usb 2-1: config 0 has no interfaces? [ 378.335289][ T5899] usb 3-1: SerialNumber: syz [ 378.390323][ T5900] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 378.410298][ T5899] usb 3-1: config 0 descriptor?? [ 378.532274][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.588880][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.595319][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.660074][ T5900] usb 2-1: Product: syz [ 378.664310][ T5900] usb 2-1: Manufacturer: syz [ 378.730776][ T5892] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 378.776996][ T5900] usb 2-1: SerialNumber: syz [ 378.816332][ T5900] usb 2-1: config 0 descriptor?? [ 379.018195][ T9352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.889'. [ 379.305513][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 379.403478][ T5892] usb 4-1: config index 0 descriptor too short (expected 8192, got 36) [ 379.421153][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.455388][ T5892] usb 4-1: config 0 has no interfaces? [ 379.508469][ T5892] usb 4-1: config index 1 descriptor too short (expected 8192, got 36) [ 379.656875][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.704834][ T5892] usb 4-1: config 0 has no interfaces? [ 379.831161][ T5892] usb 4-1: config index 2 descriptor too short (expected 8192, got 36) [ 379.876181][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.897407][ T5892] usb 4-1: config 0 has no interfaces? [ 379.912807][ T5892] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 379.929819][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.937996][ T5892] usb 4-1: Product: syz [ 379.951980][ T5892] usb 4-1: Manufacturer: syz [ 379.958155][ T5892] usb 4-1: SerialNumber: syz [ 379.976889][ T5892] usb 4-1: config 0 descriptor?? [ 380.207272][ T5892] usb 4-1: USB disconnect, device number 72 [ 380.705511][ T5900] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 380.734282][ T5892] usb 3-1: USB disconnect, device number 62 [ 380.915646][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 380.947573][ T5900] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.959737][ T5900] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 380.977855][ T5900] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 380.989469][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.041406][ T5900] usb 5-1: Product: syz [ 381.068254][ T5900] usb 5-1: Manufacturer: syz [ 381.083891][ T5900] usb 5-1: SerialNumber: syz [ 381.130894][ T9363] veth1_macvtap: left promiscuous mode [ 381.327308][ T5900] usb 5-1: 0:32 : does not exist [ 381.348847][ T5900] usb 5-1: 0:32 : does not exist [ 381.414243][ T5900] usb 5-1: USB disconnect, device number 78 [ 381.455249][ T5899] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 381.455550][ T5848] usb 2-1: USB disconnect, device number 65 [ 381.525619][ T5892] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 381.642398][ T5899] usb 1-1: config 0 has no interfaces? [ 381.672739][ T5899] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 381.687768][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.707825][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 381.712624][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.725338][ T5899] usb 1-1: Product: syz [ 381.729549][ T5899] usb 1-1: Manufacturer: syz [ 381.734169][ T5899] usb 1-1: SerialNumber: syz [ 381.742951][ T5899] usb 1-1: config 0 descriptor?? [ 381.746418][ T5892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.781064][ T9378] fuse: Unknown parameter '0x0000000000000004' [ 381.784640][ T5892] usb 3-1: config 0 interface 0 has no altsetting 0 [ 381.802191][ T5892] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 381.813009][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.878482][ T5892] usb 3-1: Product: syz [ 381.911989][ T5892] usb 3-1: Manufacturer: syz [ 381.939697][ T5892] usb 3-1: SerialNumber: syz [ 382.119084][ T5892] usb 3-1: config 0 descriptor?? [ 382.208607][ T5892] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 382.415349][ T5900] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 382.502758][ T8442] usb 3-1: Failed to submit usb control message: -71 [ 382.511813][ T5892] usb 3-1: USB disconnect, device number 63 [ 382.523482][ T8442] usb 3-1: unable to send the bmi data to the device: -71 [ 382.545371][ T8442] usb 3-1: unable to get target info from device [ 382.552139][ T8442] usb 3-1: could not get target info (-71) [ 382.558493][ T8442] usb 3-1: could not probe fw (-71) [ 382.565476][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 382.581724][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.618872][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.630232][ T5900] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 382.639950][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.654982][ T5900] usb 4-1: config 0 descriptor?? [ 382.859861][ T9394] netlink: 'syz.1.901': attribute type 2 has an invalid length. [ 382.872798][ T9394] netlink: 46 bytes leftover after parsing attributes in process `syz.1.901'. [ 382.886018][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 382.909121][ T9394] netlink: 68 bytes leftover after parsing attributes in process `syz.1.901'. [ 383.339095][ T5900] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.000F/input/input23 [ 383.438804][ T5900] appleir 0003:05AC:8241.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 383.805365][ T5900] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 384.056080][ T5900] usb 3-1: config 0 has no interfaces? [ 384.106154][ T5900] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 384.139661][ T5892] usb 1-1: USB disconnect, device number 68 [ 384.158206][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.181754][ T5900] usb 3-1: Product: syz [ 384.213027][ T5900] usb 3-1: Manufacturer: syz [ 384.244068][ T5900] usb 3-1: SerialNumber: syz [ 384.273212][ T5900] usb 3-1: config 0 descriptor?? [ 384.309079][ T9417] fuse: Unknown parameter '0x0000000000000004' [ 384.352218][ T9418] netlink: 165 bytes leftover after parsing attributes in process `syz.4.908'. [ 384.639388][ T5900] usb 4-1: reset high-speed USB device number 73 using dummy_hcd [ 385.059958][ T9435] loop8: detected capacity change from 0 to 7 [ 385.074783][ T9435] Dev loop8: unable to read RDB block 7 [ 385.102892][ T9435] loop8: unable to read partition table [ 385.115649][ T5892] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 385.153822][ T9435] loop8: partition table beyond EOD, truncated [ 385.241774][ T9435] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 385.241774][ T9435] ) failed (rc=-5) [ 385.294775][ T5892] usb 1-1: Using ep0 maxpacket: 32 [ 385.339025][ T5892] usb 1-1: config 0 interface 0 has no altsetting 0 [ 385.371784][ T5892] usb 1-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 385.416308][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.482336][ T5892] usb 1-1: config 0 descriptor?? [ 385.762667][ T9428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.828889][ T9428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.258472][ T5892] hid (null): global environment stack underflow [ 386.300803][ T5892] wacom 0003:056A:037A.0010: global environment stack underflow [ 386.314915][ T9441] netlink: 'syz.3.916': attribute type 1 has an invalid length. [ 386.363900][ T5892] wacom 0003:056A:037A.0010: item 0 0 1 11 parsing failed [ 386.411016][ T5892] wacom 0003:056A:037A.0010: parse failed [ 386.436798][ T5892] wacom 0003:056A:037A.0010: probe with driver wacom failed with error -22 [ 386.445582][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'. [ 386.528091][ T5892] usb 1-1: USB disconnect, device number 69 [ 387.222655][ T5899] usb 3-1: USB disconnect, device number 64 [ 387.532053][ T9455] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 388.036462][ T9460] fuse: Unknown parameter '0x0000000000000004' [ 388.106050][ T5899] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 388.255639][ T5899] usb 3-1: device descriptor read/64, error -71 [ 388.270816][ T9468] netlink: 165 bytes leftover after parsing attributes in process `syz.1.925'. [ 388.529197][ T5899] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 388.725282][ T5899] usb 3-1: device descriptor read/64, error -71 [ 388.911072][ T5899] usb usb3-port1: attempt power cycle [ 389.295491][ T5899] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 389.337219][ T5899] usb 3-1: device descriptor read/8, error -71 [ 389.384469][ T5944] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 389.585687][ T5899] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 389.708983][ T5944] usb 5-1: config 0 has no interfaces? [ 389.723582][ T5899] usb 3-1: device descriptor read/8, error -71 [ 389.735511][ T5944] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 389.747886][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.760911][ T5944] usb 5-1: Product: syz [ 389.771197][ T5944] usb 5-1: Manufacturer: syz [ 389.778415][ T5944] usb 5-1: SerialNumber: syz [ 389.798308][ T9495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.854926][ T5899] usb usb3-port1: unable to enumerate USB device [ 389.863486][ T5900] usb 4-1: device descriptor read/64, error -110 [ 389.900337][ T5944] usb 5-1: config 0 descriptor?? [ 389.920632][ T9495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.115449][ T5900] usb 4-1: reset high-speed USB device number 73 using dummy_hcd [ 390.325341][ T5900] usb 4-1: device descriptor read/64, error -32 [ 390.575290][ T5900] usb 4-1: reset high-speed USB device number 73 using dummy_hcd [ 390.678197][ T5900] usb 4-1: device descriptor read/8, error -32 [ 390.956605][ T5900] usb 4-1: reset high-speed USB device number 73 using dummy_hcd [ 390.996602][ T5900] usb 4-1: device descriptor read/8, error -32 [ 391.118806][ T5900] raw-gadget.1 gadget.3: failed to queue suspend event [ 391.143508][ T24] usb 4-1: USB disconnect, device number 73 [ 391.325343][ T5848] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 391.395910][ T24] raw-gadget.1 gadget.3: failed to queue reset event [ 391.481424][ T5848] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.498098][ T5848] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 391.525352][ T5848] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 391.534764][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.545762][ T24] raw-gadget.1 gadget.3: failed to queue resume event [ 391.553257][ T5848] usb 1-1: Product: syz [ 391.570208][ T5848] usb 1-1: Manufacturer: syz [ 391.582505][ T5848] usb 1-1: SerialNumber: syz [ 391.618020][ T9507] fuse: Unknown parameter 'fd0x0000000000000004' [ 391.665710][ T24] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 391.690731][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 391.722340][ T24] raw-gadget.1 gadget.3: failed to queue reset event [ 391.805335][ T24] raw-gadget.1 gadget.3: failed to queue resume event [ 391.845822][ T5848] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 391.917947][ T24] usb 4-1: device descriptor read/64, error -32 [ 392.076790][ T24] raw-gadget.1 gadget.3: failed to queue suspend event [ 392.099673][ T9402] raw-gadget.1 gadget.3: failed to queue disconnect event [ 392.111632][ T5848] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 392.261638][ T5848] usb 1-1: USB disconnect, device number 70 [ 392.476849][ T9] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 392.485437][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 392.695239][ T5900] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 392.739645][ T9] usb 2-1: config 0 has no interfaces? [ 392.764010][ T52] usb 5-1: USB disconnect, device number 79 [ 392.843493][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 392.900479][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.933480][ T9] usb 2-1: Product: syz [ 392.961989][ T9] usb 2-1: Manufacturer: syz [ 392.985339][ T9] usb 2-1: SerialNumber: syz [ 393.010153][ T9] usb 2-1: config 0 descriptor?? [ 393.016071][ T5900] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 393.016105][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.038305][ T5900] usb 3-1: config 0 descriptor?? [ 393.406863][ T9525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.483363][ T9525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.873878][ T9542] netlink: 'syz.0.945': attribute type 1 has an invalid length. [ 393.882262][ T9542] netlink: 56 bytes leftover after parsing attributes in process `syz.0.945'. [ 394.213535][ T9551] fuse: Unknown parameter 'fd0x0000000000000004' [ 394.278630][ T5900] ath6kl: Failed to submit usb control message: -110 [ 394.336549][ T5900] ath6kl: unable to send the bmi data to the device: -110 [ 394.389108][ T5900] ath6kl: Unable to send get target info: -110 [ 394.442061][ T5900] ath6kl: Failed to init ath6kl core: -110 [ 394.458289][ T5900] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 394.692584][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.948'. [ 395.004252][ T9564] kernel profiling enabled (shift: 11) [ 395.517068][ T5900] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 395.575337][ T52] usb 3-1: USB disconnect, device number 69 [ 395.625941][ T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 395.667038][ T5900] usb 4-1: device descriptor read/64, error -71 [ 395.728972][ T5944] usb 2-1: USB disconnect, device number 66 [ 395.957964][ T9] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 395.988538][ T9] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 396.002112][ T5900] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 396.195631][ T5900] usb 4-1: device descriptor read/64, error -71 [ 396.555450][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 396.564559][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.597083][ T5900] usb usb4-port1: attempt power cycle [ 396.645362][ T9575] netlink: 'syz.2.952': attribute type 13 has an invalid length. [ 396.859937][ T9575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 397.025321][ T5900] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 397.116169][ T5900] usb 4-1: device descriptor read/8, error -71 [ 397.256051][ T5848] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 397.369647][ T52] usb 5-1: USB disconnect, device number 80 [ 397.497941][ T5900] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 397.549480][ T5900] usb 4-1: device descriptor read/8, error -71 [ 397.640184][ T5848] usb 2-1: config 0 has no interfaces? [ 397.649197][ T5848] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 397.665486][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.665889][ T5900] usb usb4-port1: unable to enumerate USB device [ 397.673500][ T5848] usb 2-1: Product: syz [ 397.673521][ T5848] usb 2-1: Manufacturer: syz [ 397.673537][ T5848] usb 2-1: SerialNumber: syz [ 397.717121][ T5848] usb 2-1: config 0 descriptor?? [ 398.065533][ T9583] netlink: 'syz.0.955': attribute type 2 has an invalid length. [ 398.102984][ T9583] netlink: 46 bytes leftover after parsing attributes in process `syz.0.955'. [ 398.144309][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.955'. [ 398.160260][ T9584] netlink: 68 bytes leftover after parsing attributes in process `syz.0.955'. [ 398.583547][ T9594] fuse: Unknown parameter 'fd0x0000000000000004' [ 398.980000][ T9606] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 399.176048][ T5944] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 399.220771][ T5900] usb 2-1: USB disconnect, device number 67 [ 399.378142][ T30] audit: type=1326 audit(1745053716.185:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9616 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ac18e169 code=0x7ffc0000 [ 399.421394][ T30] audit: type=1326 audit(1745053716.185:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9616 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ac18e169 code=0x7ffc0000 [ 399.421642][ T5944] usb 4-1: Using ep0 maxpacket: 32 [ 399.472715][ T9619] netlink: 'syz.4.964': attribute type 1 has an invalid length. [ 399.480732][ T9619] netlink: 56 bytes leftover after parsing attributes in process `syz.4.964'. [ 399.637826][ T30] audit: type=1326 audit(1745053716.265:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9616 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fd5ac18e169 code=0x7ffc0000 [ 399.687095][ T9625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 399.747470][ T5944] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 399.761641][ T5944] usb 4-1: config 0 has no interface number 0 [ 399.773000][ T5944] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 399.782572][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.791453][ T5944] usb 4-1: Product: syz [ 399.824213][ T5944] usb 4-1: Manufacturer: syz [ 399.834801][ T5944] usb 4-1: SerialNumber: syz [ 399.855908][ T30] audit: type=1326 audit(1745053716.275:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9616 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ac18e169 code=0x7ffc0000 [ 399.880719][ T30] audit: type=1326 audit(1745053716.275:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9616 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ac18e169 code=0x7ffc0000 [ 399.935312][ T5848] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 399.976235][ T30] audit: type=1326 audit(1745053716.445:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9616 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5ac18e169 code=0x7ffc0000 [ 399.988324][ T5944] usb 4-1: config 0 descriptor?? [ 400.048796][ T30] audit: type=1326 audit(1745053716.445:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9616 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ac18e169 code=0x7ffc0000 [ 400.049449][ T5944] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 400.105288][ T5848] usb 3-1: device descriptor read/64, error -71 [ 400.260901][ T30] audit: type=1326 audit(1745053716.445:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9616 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ac18e169 code=0x7ffc0000 [ 400.362926][ T30] audit: type=1326 audit(1745053716.465:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9616 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd5ac18e169 code=0x7ffc0000 [ 400.400515][ T5848] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 400.541696][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.962'. [ 400.555232][ T5848] usb 3-1: device descriptor read/64, error -71 [ 400.561757][ T30] audit: type=1326 audit(1745053716.465:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9616 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ac18e169 code=0x7ffc0000 [ 400.601723][ T5944] usb 4-1: qt2_attach - failed to power on unit: -71 [ 400.636426][ T5944] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 400.666596][ T5944] usb 4-1: USB disconnect, device number 80 [ 400.740503][ T5848] usb usb3-port1: attempt power cycle [ 401.245270][ T5944] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 401.270572][ T5848] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 401.309429][ T5848] usb 3-1: device descriptor read/8, error -71 [ 401.494809][ T5944] usb 1-1: config 0 has an invalid interface number: 202 but max is 0 [ 401.518353][ T5944] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.565353][ T5848] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 401.608896][ T5848] usb 3-1: device descriptor read/8, error -71 [ 401.625318][ T5944] usb 1-1: config 0 has no interface number 0 [ 401.648733][ T5944] usb 1-1: config 0 interface 202 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 401.740363][ T5848] usb usb3-port1: unable to enumerate USB device [ 401.848245][ T9] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 401.861225][ T5944] usb 1-1: config 0 interface 202 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 401.895665][ T5944] usb 1-1: config 0 interface 202 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 401.971158][ T5944] usb 1-1: New USB device found, idVendor=0b48, idProduct=3011, bcdDevice= 2.38 [ 401.991355][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.009534][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 402.019176][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.049646][ T9] usb 4-1: config 0 descriptor?? [ 402.060646][ T5944] usb 1-1: Product: syz [ 402.069786][ T9] gspca_main: spca508-2.14.0 probing 8086:0110 [ 402.078336][ T5944] usb 1-1: Manufacturer: syz [ 402.151091][ T5944] usb 1-1: SerialNumber: syz [ 402.193871][ T5944] usb 1-1: config 0 descriptor?? [ 402.233484][ T5944] dvb-usb: found a 'TechnoTrend TT-connect S2-4600' in warm state. [ 402.272572][ T9] gspca_spca508: reg_read err -32 [ 402.278132][ T5944] dw2102: su3000_power_ctrl: 1, initialized 0 [ 402.284089][ T9] gspca_spca508: reg_read err -32 [ 402.293911][ T5944] dvb-usb: bulk message failed: -8 (2/0) [ 402.318803][ T9] gspca_spca508: reg_read err -32 [ 402.344359][ T9] gspca_spca508: reg_read err -71 [ 402.352009][ T5944] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 402.379052][ T9] gspca_spca508: reg_read err -71 [ 402.486263][ T9] gspca_spca508: reg write: error -71 [ 402.524347][ T9] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 402.536964][ T5944] dvb-usb: TechnoTrend TT-connect S2-4600 error while loading driver (-19) [ 402.593034][ T9] usb 4-1: USB disconnect, device number 81 [ 402.618941][ T5944] usb 1-1: USB disconnect, device number 71 [ 403.116233][ T5897] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 403.147480][ T9672] netlink: 165 bytes leftover after parsing attributes in process `syz.0.978'. [ 403.482670][ T5897] usb 4-1: config 0 has no interfaces? [ 403.587098][ T5897] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 403.719782][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.806275][ T5897] usb 4-1: Product: syz [ 403.813613][ T5897] usb 4-1: Manufacturer: syz [ 403.907261][ T5897] usb 4-1: SerialNumber: syz [ 404.053673][ T5897] usb 4-1: config 0 descriptor?? [ 404.295332][ T24] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 404.465392][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 404.544002][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.562559][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.584169][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 404.606529][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 404.615752][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.629404][ T9685] netlink: 48 bytes leftover after parsing attributes in process `syz.0.985'. [ 404.629501][ T24] usb 2-1: config 0 descriptor?? [ 405.090203][ T9695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.987'. [ 405.292276][ T5900] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 405.307785][ T9680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.317541][ T9680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.350107][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 405.367524][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 405.454330][ T24] usb 2-1: USB disconnect, device number 68 [ 405.558193][ T5900] usb 3-1: config 0 has no interfaces? [ 405.600151][ T9702] usb usb1: usbfs: process 9702 (syz.4.990) did not claim interface 0 before use [ 405.671651][ T5900] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 405.691749][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.700810][ T5900] usb 3-1: Product: syz [ 405.705352][ T5900] usb 3-1: Manufacturer: syz [ 405.710861][ T5900] usb 3-1: SerialNumber: syz [ 405.718860][ T5900] usb 3-1: config 0 descriptor?? [ 405.885620][ T9] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 405.957537][ T9696] B: renamed from macvlan1 (while UP) [ 406.025599][ T24] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 406.111906][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 406.249659][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.290692][ T24] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 406.307064][ T9] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 406.324635][ T9] usb 5-1: config 0 has no interface number 0 [ 406.324922][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 406.340411][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 406.356473][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.377090][ T9] usb 5-1: Product: syz [ 406.395443][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.397293][ T9] usb 5-1: Manufacturer: syz [ 406.403487][ T24] usb 1-1: Product: syz [ 406.422545][ T9] usb 5-1: SerialNumber: syz [ 406.443189][ T9] usb 5-1: config 0 descriptor?? [ 406.577414][ T24] usb 1-1: Manufacturer: syz [ 406.583443][ T24] usb 1-1: SerialNumber: syz [ 406.719800][ T9702] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 406.753461][ T9702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.990'. [ 406.798170][ T9708] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 406.872190][ T9702] netlink: 'syz.4.990': attribute type 7 has an invalid length. [ 406.908841][ T9702] netlink: 'syz.4.990': attribute type 8 has an invalid length. [ 406.923447][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.990'. [ 407.013221][ T24] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS [ 407.031343][ T24] cdc_mbim 1-1:1.0: bind() failure [ 407.225770][ T9717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.229546][ T24] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 407.255258][ T9] usb 5-1: USB disconnect, device number 81 [ 407.269138][ T9717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.294660][ T5848] usb 4-1: USB disconnect, device number 82 [ 407.388890][ T9719] netlink: 64 bytes leftover after parsing attributes in process `syz.1.996'. [ 407.419167][ T24] cdc_ncm 1-1:1.1: bind() failure [ 407.525107][ T24] usb 1-1: USB disconnect, device number 72 [ 408.133604][ T5944] usb 3-1: USB disconnect, device number 74 [ 408.281207][ T24] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 408.500720][ T24] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 408.513111][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 408.541272][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 408.562685][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 408.614371][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 408.659457][ T9744] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1002'. [ 408.675494][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 408.691663][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.729311][ T24] usb 1-1: config 0 descriptor?? [ 408.735086][ T9730] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 408.765469][ T5944] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 408.950338][ T5944] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 408.970183][ T5944] usb 3-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 408.995511][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.034623][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 409.054513][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 409.097899][ T24] usb 1-1: USB disconnect, device number 73 [ 409.114110][ T5944] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 409.166757][ T9752] netlink: 'syz.1.1004': attribute type 1 has an invalid length. [ 409.276316][ T6124] udevd[6124]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.439793][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 409.439813][ T30] audit: type=1800 audit(1745053726.245:216): pid=9747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1003" name="memory.events.local" dev="tmpfs" ino=1088 res=0 errno=0 [ 409.446980][ T9737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.467288][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.512792][ T9759] netlink: 'syz.3.1006': attribute type 1 has an invalid length. [ 409.563673][ T9759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 409.570961][ T9737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.624553][ T24] usb 3-1: USB disconnect, device number 75 [ 409.631584][ T9760] bond1: (slave veth3): Enslaving as an active interface with a down link [ 409.660248][ T9752] loop2: detected capacity change from 0 to 7 [ 409.682710][ T9752] Dev loop2: unable to read RDB block 7 [ 409.722423][ T9752] loop2: unable to read partition table [ 409.731221][ T9752] loop2: partition table beyond EOD, truncated [ 409.748539][ T9752] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 409.767960][ T9762] ip6gretap1: entered promiscuous mode [ 409.801237][ T9762] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 409.831642][ T9762] bond1: (slave ip6gretap1): making interface the new active one [ 409.878079][ T9762] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 410.055870][ T5848] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 410.103299][ T9771] FAULT_INJECTION: forcing a failure. [ 410.103299][ T9771] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 410.183951][ T9771] CPU: 1 UID: 0 PID: 9771 Comm: syz.3.1009 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 410.183984][ T9771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 410.183998][ T9771] Call Trace: [ 410.184007][ T9771] [ 410.184016][ T9771] dump_stack_lvl+0x241/0x360 [ 410.184055][ T9771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.184086][ T9771] ? __pfx__printk+0x10/0x10 [ 410.184129][ T9771] should_fail_ex+0x424/0x570 [ 410.184174][ T9771] _copy_from_user+0x2d/0xb0 [ 410.184203][ T9771] copy_msghdr_from_user+0xb3/0x580 [ 410.184233][ T9771] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 410.184255][ T9771] ? __fget_files+0x2a/0x420 [ 410.184279][ T9771] ? __fget_files+0x2a/0x420 [ 410.184308][ T9771] __sys_sendmsg+0x20a/0x360 [ 410.184345][ T9771] ? __pfx___sys_sendmsg+0x10/0x10 [ 410.184433][ T9771] ? do_syscall_64+0xb6/0x210 [ 410.184459][ T9771] do_syscall_64+0xf3/0x210 [ 410.184482][ T9771] ? clear_bhb_loop+0x45/0xa0 [ 410.184506][ T9771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.184527][ T9771] RIP: 0033:0x7fd9a638e169 [ 410.184545][ T9771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.184562][ T9771] RSP: 002b:00007fd9a71b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.184585][ T9771] RAX: ffffffffffffffda RBX: 00007fd9a65b5fa0 RCX: 00007fd9a638e169 [ 410.184601][ T9771] RDX: 0000000004000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 410.184614][ T9771] RBP: 00007fd9a71b0090 R08: 0000000000000000 R09: 0000000000000000 [ 410.184627][ T9771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.184639][ T9771] R13: 0000000000000000 R14: 00007fd9a65b5fa0 R15: 00007fd9a66dfa28 [ 410.184671][ T9771] [ 410.362228][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.434381][ T5848] usb 1-1: config 0 has no interfaces? [ 410.447598][ T5848] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 410.458805][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.631757][ T5848] usb 1-1: Product: syz [ 410.653346][ T5848] usb 1-1: Manufacturer: syz [ 410.687548][ T5848] usb 1-1: SerialNumber: syz [ 410.722827][ T5848] usb 1-1: config 0 descriptor?? [ 410.752029][ T9785] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1013'. [ 411.070276][ T9791] kvm: MONITOR instruction emulated as NOP! [ 412.655214][ T5848] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 412.828593][ T5848] usb 3-1: unable to get BOS descriptor or descriptor too short [ 412.870544][ T5848] usb 3-1: not running at top speed; connect to a high speed hub [ 412.886793][ T5848] usb 3-1: config 7 has an invalid interface number: 205 but max is 0 [ 412.900605][ T5848] usb 3-1: config 7 has no interface number 0 [ 413.309979][ T24] usb 1-1: USB disconnect, device number 74 [ 413.345338][ T5848] usb 3-1: config 7 interface 205 has no altsetting 0 [ 413.450404][ T5848] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice=30.fb [ 413.501994][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.527698][ T5848] usb 3-1: Product: syz [ 413.531928][ T5848] usb 3-1: Manufacturer: syz [ 413.555423][ T5848] usb 3-1: SerialNumber: syz [ 413.557220][ T9813] netlink: 'syz.3.1022': attribute type 32 has an invalid length. [ 413.585466][ T9813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1022'. [ 413.619331][ T9813] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 413.624783][ T9815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1021'. [ 413.787259][ T9827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1025'. [ 413.825233][ T24] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 413.840556][ T5848] usb 3-1: USB disconnect, device number 76 [ 413.986223][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 413.993922][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 414.002677][ T24] usb 5-1: config 0 has no interface number 0 [ 414.013491][ T24] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 414.024710][ T24] usb 5-1: config 0 interface 1 has no altsetting 0 [ 414.043730][ T24] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 414.063522][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.080702][ T24] usb 5-1: Product: syz [ 414.091696][ T24] usb 5-1: Manufacturer: syz [ 414.107859][ T24] usb 5-1: SerialNumber: syz [ 414.143792][ T24] usb 5-1: config 0 descriptor?? [ 414.189121][ T9832] bridge0: port 3(macvlan0) entered blocking state [ 414.197527][ T9832] bridge0: port 3(macvlan0) entered disabled state [ 414.204253][ T9832] macvlan0: entered allmulticast mode [ 414.230128][ T9832] macvlan0: entered promiscuous mode [ 414.389821][ T24] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 414.423686][ T24] cx231xx 5-1:0.1: Failed to read PCB config [ 414.438043][ T24] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 414.457026][ T24] usb 5-1: USB disconnect, device number 82 [ 414.496694][ T5944] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 414.665642][ T5944] usb 4-1: device descriptor read/64, error -71 [ 414.948230][ T5944] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 414.967308][ T9] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 414.985227][ T24] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 415.085350][ T5848] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 415.115262][ T5944] usb 4-1: device descriptor read/64, error -71 [ 415.135072][ T9] usb 2-1: config 0 has no interfaces? [ 415.146662][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 415.146839][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 415.160709][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.174330][ T9] usb 2-1: Product: syz [ 415.183001][ T9] usb 2-1: Manufacturer: syz [ 415.188082][ T9] usb 2-1: SerialNumber: syz [ 415.188193][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 415.219554][ T9] usb 2-1: config 0 descriptor?? [ 415.244578][ T5848] usb 1-1: config 0 has no interfaces? [ 415.255067][ T5848] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 415.267529][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.298138][ T5848] usb 1-1: Product: syz [ 415.302349][ T5848] usb 1-1: Manufacturer: syz [ 415.331001][ T5848] usb 1-1: SerialNumber: syz [ 415.337033][ T5944] usb usb4-port1: attempt power cycle [ 415.344046][ T24] usb 5-1: config 0 has no interface number 0 [ 415.382029][ T5848] usb 1-1: config 0 descriptor?? [ 415.427874][ T24] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 415.534350][ T9857] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 415.552648][ T24] usb 5-1: config 0 interface 1 has no altsetting 0 [ 415.564455][ T24] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 415.573865][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.593649][ T24] usb 5-1: Product: syz [ 415.612066][ T24] usb 5-1: Manufacturer: syz [ 415.644574][ T24] usb 5-1: SerialNumber: syz [ 415.699201][ T5944] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 415.740572][ T5944] usb 4-1: device descriptor read/8, error -71 [ 415.778591][ T24] usb 5-1: config 0 descriptor?? [ 415.865834][ T24] usb 5-1: can't set config #0, error -71 [ 415.890918][ T24] usb 5-1: USB disconnect, device number 83 [ 416.096738][ T5944] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 416.136059][ T5944] usb 4-1: device descriptor read/8, error -71 [ 416.246997][ T5944] usb usb4-port1: unable to enumerate USB device [ 418.043680][ T52] usb 2-1: USB disconnect, device number 69 [ 418.305538][ T9] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 418.451727][ T5944] usb 1-1: USB disconnect, device number 75 [ 418.510190][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.529963][ T9] usb 4-1: config 0 has no interfaces? [ 418.540558][ T9886] netlink: 'syz.4.1039': attribute type 1 has an invalid length. [ 418.554709][ T9] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 418.578715][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.595100][ T9] usb 4-1: config 0 descriptor?? [ 418.610424][ T9886] bond0: entered promiscuous mode [ 418.618233][ T9886] bond0: entered allmulticast mode [ 418.624134][ T9886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.640074][ T9886] sctp: [Deprecated]: syz.4.1039 (pid 9886) Use of struct sctp_assoc_value in delayed_ack socket option. [ 418.640074][ T9886] Use struct sctp_sack_info instead [ 418.831398][ T9] usb 4-1: USB disconnect, device number 87 [ 419.082378][ T9901] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 419.226753][ T5895] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 419.391798][ T5895] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 419.423541][ T5895] usb 1-1: config 5 has no interface number 0 [ 419.441569][ T5895] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 419.454267][ T5895] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 12855, setting to 64 [ 419.478506][ T5895] usb 1-1: config 5 interface 123 has no altsetting 0 [ 419.490470][ T5895] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 419.505987][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.543741][ T5895] usb 1-1: Product: syz [ 419.550628][ T5895] usb 1-1: Manufacturer: syz [ 419.558559][ T5895] usb 1-1: SerialNumber: syz [ 419.612580][ T9897] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 420.075718][ T5944] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 420.226700][ T5895] comedi comedi0: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 420.255326][ T5944] usb 4-1: Using ep0 maxpacket: 32 [ 420.285279][ T52] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 420.291873][ T5895] usb 1-1: USB disconnect, device number 76 [ 420.360970][ T5944] usb 4-1: no configurations [ 420.381242][ T5944] usb 4-1: can't read configurations, error -22 [ 420.514783][ T9926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.523647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.532498][ T9926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.542465][ T9926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.550864][ T9926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.559181][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.569173][ T9926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.577584][ T9926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.585890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.594990][ T5944] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 420.673038][ T9926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.976747][ T52] usb 5-1: config 0 has no interfaces? [ 420.994269][ T52] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 421.003479][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.017906][ T52] usb 5-1: Product: syz [ 421.022208][ T52] usb 5-1: Manufacturer: syz [ 421.031493][ T52] usb 5-1: SerialNumber: syz [ 421.040255][ T52] usb 5-1: config 0 descriptor?? [ 421.105355][ T5944] usb 4-1: Using ep0 maxpacket: 32 [ 421.111320][ T5944] usb 4-1: no configurations [ 421.120750][ T5944] usb 4-1: can't read configurations, error -22 [ 421.138930][ T5944] usb usb4-port1: attempt power cycle [ 421.481849][ T9937] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 421.565935][ T5944] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 421.668520][ T5944] usb 4-1: Using ep0 maxpacket: 32 [ 421.679726][ T5944] usb 4-1: no configurations [ 421.691306][ T5944] usb 4-1: can't read configurations, error -22 [ 421.835381][ T52] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 421.843215][ T5944] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 421.962364][ T5944] usb 4-1: Using ep0 maxpacket: 32 [ 422.056354][ T5944] usb 4-1: no configurations [ 422.099085][ T5944] usb 4-1: can't read configurations, error -22 [ 422.122674][ T5944] usb usb4-port1: unable to enumerate USB device [ 422.171560][ T52] usb 1-1: config 0 has no interfaces? [ 422.230517][ T52] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 422.242231][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.254066][ T52] usb 1-1: Product: syz [ 422.275061][ T52] usb 1-1: Manufacturer: syz [ 422.319770][ T52] usb 1-1: SerialNumber: syz [ 422.336484][ T52] usb 1-1: config 0 descriptor?? [ 423.355120][ T52] usb 5-1: USB disconnect, device number 84 [ 423.865786][ T52] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 423.965448][ T5848] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 424.057664][ T52] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.143601][ T52] usb 5-1: config 0 has no interfaces? [ 424.146453][ T5848] usb 3-1: Using ep0 maxpacket: 16 [ 424.155319][ T52] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 424.173411][ T5848] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 424.184311][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.201680][ T52] usb 5-1: config 0 descriptor?? [ 424.205212][ T5848] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 424.230930][ T5848] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.08 [ 424.302841][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.325569][ T5848] usb 3-1: Product: syz [ 424.334095][ T5848] usb 3-1: Manufacturer: syz [ 424.350059][ T5848] usb 3-1: SerialNumber: syz [ 424.379524][ T5848] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 424.401739][ T5848] usb 3-1: no configuration chosen from 1 choice [ 424.503575][ T5848] usb 5-1: USB disconnect, device number 85 [ 424.820429][ T52] usb 1-1: USB disconnect, device number 77 [ 424.946352][ T5944] IPVS: starting estimator thread 0... [ 424.954548][ T9968] netlink: 'syz.0.1061': attribute type 10 has an invalid length. [ 424.968224][ T9968] bridge0: port 3(syz_tun) entered disabled state [ 424.976405][ T9968] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.983800][ T9968] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.000162][ T9968] bridge0: port 3(syz_tun) entered blocking state [ 425.007000][ T9968] bridge0: port 3(syz_tun) entered forwarding state [ 425.013942][ T9968] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.021179][ T9968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.028711][ T9968] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.036008][ T9968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.057734][ T9968] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 425.065312][ T9969] IPVS: using max 28 ests per chain, 67200 per kthread [ 425.095106][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1061'. [ 425.116207][ T9968] bridge0: port 3(syz_tun) entered disabled state [ 425.124021][ T9968] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.132033][ T9968] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.155889][ T9968] vlan0: entered allmulticast mode [ 425.161284][ T9968] bond0: entered allmulticast mode [ 425.167758][ T9968] bond_slave_0: entered allmulticast mode [ 425.178707][ T9968] bond_slave_1: entered allmulticast mode [ 425.188608][ T9968] bridge0: entered allmulticast mode [ 425.196991][ T9968] bridge0: port 4(vlan0) entered blocking state [ 425.203618][ T9968] bridge0: port 4(vlan0) entered disabled state [ 425.913144][ T9996] net_ratelimit: 156 callbacks suppressed [ 425.913171][ T9996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.927531][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.229932][ T9] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 426.716161][ T5848] usb 3-1: USB disconnect, device number 77 [ 426.725446][ T5895] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 426.919234][ T5895] usb 1-1: config 0 has no interfaces? [ 426.940369][ T9] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 426.954703][ T9] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 426.964330][ T5895] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 426.973899][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.000762][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 427.012449][ T5895] usb 1-1: Product: syz [ 427.124781][ T5895] usb 1-1: Manufacturer: syz [ 427.139838][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.148586][ T5895] usb 1-1: SerialNumber: syz [ 427.181254][ T5895] usb 1-1: config 0 descriptor?? [ 427.489840][ T9994] sg_write: data in/out 6291420/14 bytes for SCSI command 0x0-- guessing data in; [ 427.489840][ T9994] program syz.3.1069 not setting count and/or reply_len properly [ 429.856864][ T5848] usb 4-1: USB disconnect, device number 92 [ 430.059097][T10044] netlink: 'syz.1.1084': attribute type 3 has an invalid length. [ 430.245525][T10044] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1084'. [ 430.347763][T10049] autofs4:pid:10049:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 430.372741][T10049] autofs4:pid:10049:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 431.024935][ T5848] usb 1-1: USB disconnect, device number 78 [ 431.226494][T10059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.475440][ T5848] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 431.485520][ T5895] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 431.517027][T10066] ptrace attach of "./syz-executor exec"[5857] was attempted by "./syz-executor exec"[10066] [ 431.647091][ T5848] usb 1-1: Using ep0 maxpacket: 32 [ 431.654367][ T5895] usb 5-1: unable to get BOS descriptor or descriptor too short [ 431.664988][ T5848] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 431.676712][T10077] tap0: tun_chr_ioctl cmd 1074025677 [ 431.684191][ T5895] usb 5-1: config 3 has an invalid descriptor of length 206, skipping remainder of the config [ 431.694919][T10077] tap0: linktype set to 773 [ 431.699687][ T5848] usb 1-1: config 0 has no interface number 0 [ 431.704899][ T5895] usb 5-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 431.722483][ T5848] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 431.735426][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.744831][ T5848] usb 1-1: Product: syz [ 431.750826][ T5895] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=13.f5 [ 431.761784][ T5848] usb 1-1: Manufacturer: syz [ 431.766561][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.774655][ T5848] usb 1-1: SerialNumber: syz [ 431.781217][ T5895] usb 5-1: Product: syz [ 431.789311][ T5848] usb 1-1: config 0 descriptor?? [ 431.807464][ T5895] usb 5-1: Manufacturer: syz [ 431.814390][ T5848] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 431.830876][ T5895] usb 5-1: SerialNumber: syz [ 432.027765][ T5848] usb 1-1: qt2_attach - failed to power on unit: -71 [ 432.041118][ T5848] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 432.114650][ T5895] usb 5-1: USB disconnect, device number 86 [ 432.144190][ T5848] usb 1-1: USB disconnect, device number 79 [ 432.325273][ T9] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 432.545339][ T9] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 432.559889][ T9] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 432.627176][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 432.692607][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.179233][T10082] sg_write: data in/out 6291420/14 bytes for SCSI command 0x0-- guessing data in; [ 433.179233][T10082] program syz.3.1095 not setting count and/or reply_len properly [ 433.205266][ T52] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 433.366374][ T52] usb 5-1: config 0 has no interfaces? [ 433.396077][ T52] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 433.405427][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.413443][ T52] usb 5-1: Product: syz [ 433.438071][ T52] usb 5-1: Manufacturer: syz [ 433.467396][ T52] usb 5-1: SerialNumber: syz [ 433.481346][ T9] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 433.501170][ T52] usb 5-1: config 0 descriptor?? [ 433.951144][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.967846][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 434.006739][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 434.016248][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.026257][ T9] usb 1-1: Product: syz [ 434.031414][ T9] usb 1-1: Manufacturer: syz [ 434.042116][ T9] usb 1-1: SerialNumber: syz [ 434.310266][T10092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.322035][T10092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.346856][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 434.409089][ T9] usb 1-1: USB disconnect, device number 80 [ 434.895241][ T9] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 435.135226][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 435.178876][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 435.201175][ T9] usb 1-1: config 16 has an invalid descriptor of length 83, skipping remainder of the config [ 435.225239][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 435.237854][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 435.289878][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 435.315217][ T52] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 435.335285][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.401178][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 435.500905][ T52] usb 2-1: config 0 has no interfaces? [ 435.517089][ T52] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 435.561546][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.599745][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.612529][ T5944] usb 4-1: USB disconnect, device number 93 [ 435.692427][ T52] usb 2-1: Product: syz [ 435.704994][ T52] usb 2-1: Manufacturer: syz [ 435.728316][ T52] usb 2-1: SerialNumber: syz [ 435.764223][ T52] usb 2-1: config 0 descriptor?? [ 435.804712][T10109] netlink: 'syz.3.1103': attribute type 1 has an invalid length. [ 435.841522][ T9] usb 1-1: usb_control_msg returned -71 [ 435.847333][ T9] usbtmc 1-1:16.0: can't read capabilities [ 435.862505][ T9] usb 1-1: USB disconnect, device number 81 [ 435.930673][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1103'. [ 436.100988][T10113] bond3: (slave gretap1): making interface the new active one [ 436.161401][T10113] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 436.208690][T10114] bond3 (unregistering): (slave gretap1): Releasing active interface [ 436.337975][T10117] xt_TPROXY: Can be used only with -p tcp or -p udp [ 436.566148][T10114] bond3 (unregistering): Released all slaves [ 437.195343][ T52] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 437.396666][ T5944] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 437.421003][ T52] usb 3-1: config 0 has no interfaces? [ 437.490691][ T52] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 437.525805][ T9] usb 5-1: USB disconnect, device number 87 [ 437.585061][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.593913][ T5944] usb 1-1: Using ep0 maxpacket: 32 [ 437.694468][ T5944] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 437.726516][ T52] usb 3-1: Product: syz [ 437.733303][ T52] usb 3-1: Manufacturer: syz [ 437.738042][ T5944] usb 1-1: config 0 has no interface number 0 [ 437.923155][ T9] usb 2-1: USB disconnect, device number 70 [ 437.948595][T10136] blktrace: Concurrent blktraces are not allowed on loop2 [ 437.972206][ T52] usb 3-1: SerialNumber: syz [ 438.034292][ T5944] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 438.073412][ T52] usb 3-1: config 0 descriptor?? [ 438.096801][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.110514][ T5944] usb 1-1: Product: syz [ 438.114835][ T5944] usb 1-1: Manufacturer: syz [ 438.152360][ T5944] usb 1-1: SerialNumber: syz [ 438.182934][ T5944] usb 1-1: config 0 descriptor?? [ 438.201812][ T5944] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 438.426134][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1108'. [ 438.452517][ T5944] usb 1-1: qt2_attach - failed to power on unit: -71 [ 438.498069][ T5944] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 438.509823][ T24] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 438.568272][ T5944] usb 1-1: USB disconnect, device number 82 [ 438.666898][ T24] usb 2-1: config 3 has an invalid interface number: 158 but max is 0 [ 438.675553][ T24] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 438.704602][ T24] usb 2-1: config 3 has no interface number 0 [ 438.714930][ T24] usb 2-1: config 3 interface 158 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 438.833355][ T24] usb 2-1: config 3 interface 158 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 438.895947][ T24] usb 2-1: config 3 interface 158 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 438.912251][ T24] usb 2-1: config 3 interface 158 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 439.007612][T10144] netlink: 'syz.4.1113': attribute type 1 has an invalid length. [ 439.109065][T10144] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1113'. [ 439.128349][ T24] usb 2-1: config 3 interface 158 altsetting 0 endpoint 0xC has invalid maxpacket 2031, setting to 64 [ 439.168322][ T24] usb 2-1: New USB device found, idVendor=0403, idProduct=ff18, bcdDevice=ca.e5 [ 439.179915][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.205294][ T24] usb 2-1: Product: syz [ 439.236230][ T24] usb 2-1: Manufacturer: љ [ 439.240803][ T24] usb 2-1: SerialNumber: syz [ 439.453535][T10142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.499018][T10142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.595229][ T5899] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 439.647442][ T5944] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 439.689845][ T24] ftdi_sio 2-1:3.158: FTDI USB Serial Device converter detected [ 439.702895][ T24] ftdi_sio ttyUSB0: unknown device type: 0xcae5 [ 439.772718][ T5899] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 439.814306][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.824770][ T5944] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 439.845499][ T24] usb 2-1: USB disconnect, device number 71 [ 439.858987][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 439.887476][ T5899] usb 4-1: config 0 descriptor?? [ 439.911331][ T24] ftdi_sio 2-1:3.158: device disconnected [ 439.917728][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 439.929989][ T5899] cp210x 4-1:0.0: cp210x converter detected [ 439.969789][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 440.029994][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.037136][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.057855][ T5944] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 440.092591][ T5892] usb 3-1: USB disconnect, device number 78 [ 440.098581][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.098611][ T5944] usb 1-1: Product: syz [ 440.098628][ T5944] usb 1-1: Manufacturer: syz [ 440.098645][ T5944] usb 1-1: SerialNumber: syz [ 440.125822][ T5944] usb 1-1: config 0 descriptor?? [ 440.132489][ T5899] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 440.144996][ T5944] iguanair 1-1:0.0: failed to get version [ 440.160389][ T5899] cp210x 4-1:0.0: querying part number failed [ 440.173309][ T5944] iguanair 1-1:0.0: probe with driver iguanair failed with error -90 [ 440.277376][ T5899] usb 4-1: cp210x converter now attached to ttyUSB0 [ 440.344192][ T5899] usb 4-1: USB disconnect, device number 94 [ 440.380651][ T5899] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 440.465201][ T5899] cp210x 4-1:0.0: device disconnected [ 440.568406][ T5892] usb 1-1: USB disconnect, device number 83 [ 440.975600][ T5899] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 441.145660][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 441.166434][ T5899] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 441.183213][T10173] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1123'. [ 441.195940][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 441.234092][ T5899] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 441.244191][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.245502][ T5892] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 441.363546][ T5899] usb 2-1: Product: syz [ 441.375169][ T5899] usb 2-1: Manufacturer: syz [ 441.391974][ T5899] usb 2-1: SerialNumber: syz [ 441.439323][ T5899] usb 2-1: config 0 descriptor?? [ 441.469055][ T5899] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 441.497226][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.519078][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 441.583115][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 441.615195][ T5899] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 441.630941][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 441.674827][ T5892] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 441.725389][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.775895][ T5892] usb 3-1: config 0 descriptor?? [ 441.937979][T10186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.947550][T10186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.086750][ T24] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 442.205373][ T5944] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 442.260837][ T24] usb 4-1: config 0 has no interfaces? [ 442.278530][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 442.287979][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.337779][ T24] usb 4-1: Product: syz [ 442.342182][ T24] usb 4-1: Manufacturer: syz [ 442.350888][ T24] usb 4-1: SerialNumber: syz [ 442.361545][ T24] usb 4-1: config 0 descriptor?? [ 442.419620][ T5944] usb 1-1: Using ep0 maxpacket: 32 [ 442.445687][ T5944] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 442.478164][ T5944] usb 1-1: config 0 has no interface number 0 [ 442.547084][ T5892] usbhid 3-1:0.0: can't add hid device: -71 [ 442.547766][ T5944] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 442.608189][T10183] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1125'. [ 442.787262][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.795456][ T5892] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 442.797490][ T5944] usb 1-1: Product: syz [ 442.807838][ T5944] usb 1-1: Manufacturer: syz [ 442.813657][ T5944] usb 1-1: SerialNumber: syz [ 442.829290][ T5944] usb 1-1: config 0 descriptor?? [ 442.838334][ T5944] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 442.847567][ T5899] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 442.856001][ T5899] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 442.864868][ T5899] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 442.872626][ T5899] em28xx 2-1:0.0: No AC97 audio processor [ 442.889575][ T5892] usb 3-1: USB disconnect, device number 79 [ 443.066566][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'. [ 443.568089][ T5944] usb 1-1: qt2_attach - failed to power on unit: -71 [ 443.584683][ T5944] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 443.668567][ T5944] usb 1-1: USB disconnect, device number 84 [ 443.733388][T10205] FAULT_INJECTION: forcing a failure. [ 443.733388][T10205] name failslab, interval 1, probability 0, space 0, times 0 [ 443.872689][T10205] CPU: 0 UID: 0 PID: 10205 Comm: syz.4.1128 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 443.872723][T10205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 443.872737][T10205] Call Trace: [ 443.872746][T10205] [ 443.872755][T10205] dump_stack_lvl+0x241/0x360 [ 443.872794][T10205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.872825][T10205] ? __pfx__printk+0x10/0x10 [ 443.872853][T10205] ? __lock_acquire+0xad5/0xd80 [ 443.872894][T10205] should_fail_ex+0x424/0x570 [ 443.872931][T10205] should_failslab+0xac/0x100 [ 443.872955][T10205] kmem_cache_alloc_noprof+0x78/0x390 [ 443.872975][T10205] ? skb_clone+0x20c/0x390 [ 443.873000][T10205] skb_clone+0x20c/0x390 [ 443.873025][T10205] __netlink_deliver_tap+0x3c4/0x7f0 [ 443.873064][T10205] ? netlink_deliver_tap+0x2e/0x1b0 [ 443.873088][T10205] netlink_deliver_tap+0x19d/0x1b0 [ 443.873115][T10205] netlink_unicast+0x7c6/0x9a0 [ 443.873148][T10205] ? __pfx_netlink_unicast+0x10/0x10 [ 443.873174][T10205] ? skb_put+0x114/0x1f0 [ 443.873208][T10205] netlink_sendmsg+0x8c3/0xcd0 [ 443.873249][T10205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.873287][T10205] ? aa_sock_msg_perm+0x91/0x160 [ 443.873320][T10205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.873345][T10205] __sock_sendmsg+0x221/0x270 [ 443.873375][T10205] ____sys_sendmsg+0x523/0x860 [ 443.873417][T10205] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.873446][T10205] ? __fget_files+0x2a/0x420 [ 443.873469][T10205] ? __fget_files+0x2a/0x420 [ 443.873500][T10205] __sys_sendmsg+0x271/0x360 [ 443.873539][T10205] ? __pfx___sys_sendmsg+0x10/0x10 [ 443.873639][T10205] ? do_syscall_64+0xb6/0x210 [ 443.873668][T10205] do_syscall_64+0xf3/0x210 [ 443.873689][T10205] ? clear_bhb_loop+0x45/0xa0 [ 443.873711][T10205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.873731][T10205] RIP: 0033:0x7f293378e169 [ 443.873749][T10205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.873766][T10205] RSP: 002b:00007f2934683038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.873787][T10205] RAX: ffffffffffffffda RBX: 00007f29339b5fa0 RCX: 00007f293378e169 [ 443.873802][T10205] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 443.873814][T10205] RBP: 00007f2934683090 R08: 0000000000000000 R09: 0000000000000000 [ 443.873826][T10205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.873836][T10205] R13: 0000000000000000 R14: 00007f29339b5fa0 R15: 00007f2933adfa28 [ 443.873862][T10205] [ 444.577230][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1130'. [ 444.995366][ T5892] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 445.195732][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.249508][ T5895] usb 4-1: USB disconnect, device number 95 [ 445.289296][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.442926][ T5892] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 445.475855][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.475873][ T30] audit: type=1326 audit(1745053762.275:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbec78e169 code=0x7ffc0000 [ 445.535059][T10193] usb 2-1: USB disconnect, device number 72 [ 445.581419][T10193] em28xx 2-1:0.0: Disconnecting em28xx [ 445.609364][ T5892] usb 5-1: config 0 descriptor?? [ 445.651988][T10193] em28xx 2-1:0.0: Freeing device [ 445.662271][ T30] audit: type=1326 audit(1745053762.275:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbec78e169 code=0x7ffc0000 [ 445.733640][ T30] audit: type=1326 audit(1745053762.275:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbbec72a359 code=0x7ffc0000 [ 445.757140][ T30] audit: type=1326 audit(1745053762.275:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbbec72a359 code=0x7ffc0000 [ 445.836783][T10209] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1130'. [ 445.854965][T10209] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1130'. [ 445.894807][ T30] audit: type=1326 audit(1745053762.275:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbec78e169 code=0x7ffc0000 [ 445.977284][ T30] audit: type=1326 audit(1745053762.275:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbec78e169 code=0x7ffc0000 [ 446.000589][ T30] audit: type=1326 audit(1745053762.275:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbec78e169 code=0x7ffc0000 [ 446.035736][T10213] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1130'. [ 446.065476][ T30] audit: type=1326 audit(1745053762.275:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbec78e169 code=0x7ffc0000 [ 446.125902][T10213] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1130'. [ 446.354138][ T30] audit: type=1326 audit(1745053762.275:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbbec72a359 code=0x7ffc0000 [ 446.425851][ T5892] usbhid 5-1:0.0: can't add hid device: -71 [ 446.442007][ T5892] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 446.460110][ T30] audit: type=1326 audit(1745053762.275:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbec78e169 code=0x7ffc0000 [ 446.505880][ T5892] usb 5-1: USB disconnect, device number 88 [ 446.578565][T10193] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 446.749251][T10193] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.789015][T10193] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 446.818574][T10193] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.875462][T10193] usb 2-1: config 0 descriptor?? [ 447.293241][T10193] elecom 0003:056E:00FC.0011: unknown main item tag 0x0 [ 447.293284][T10193] elecom 0003:056E:00FC.0011: unknown main item tag 0x0 [ 447.293315][T10193] elecom 0003:056E:00FC.0011: unknown main item tag 0x0 [ 447.293344][T10193] elecom 0003:056E:00FC.0011: unknown main item tag 0x0 [ 447.293372][T10193] elecom 0003:056E:00FC.0011: unknown main item tag 0x0 [ 447.316583][T10193] elecom 0003:056E:00FC.0011: hidraw0: USB HID vff.fe Device [HID 056e:00fc] on usb-dummy_hcd.1-1/input0 [ 447.531509][ T5944] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 447.544955][T10193] usb 2-1: USB disconnect, device number 73 [ 447.775526][ T5944] usb 4-1: Using ep0 maxpacket: 32 [ 447.782950][ T5944] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 447.797176][ T5944] usb 4-1: config 0 has no interface number 0 [ 447.812135][ T5944] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 447.844011][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.861565][ T5944] usb 4-1: Product: syz [ 447.871429][ T5944] usb 4-1: Manufacturer: syz [ 447.880602][ T5944] usb 4-1: SerialNumber: syz [ 447.910181][ T5944] usb 4-1: config 0 descriptor?? [ 447.926505][ T5944] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 448.156344][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1142'. [ 448.194192][ T5944] usb 4-1: qt2_attach - failed to power on unit: -71 [ 448.239117][ T5944] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 448.282776][ T5944] usb 4-1: USB disconnect, device number 96 [ 449.475519][ T5944] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 449.640004][ T5944] usb 3-1: Using ep0 maxpacket: 32 [ 449.657616][ T5944] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 449.682739][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.700089][ T5944] usb 3-1: Product: syz [ 449.706628][ T5944] usb 3-1: Manufacturer: syz [ 449.770842][ T5944] usb 3-1: SerialNumber: syz [ 449.777783][T10304] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 449.869429][ T5944] usb 3-1: config 0 descriptor?? [ 450.000116][ T9] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 450.173464][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1154'. [ 450.201708][ T9] usb 2-1: config 0 has no interfaces? [ 450.216358][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 450.225589][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.238282][ T9] usb 2-1: Product: syz [ 450.257062][ T9] usb 2-1: Manufacturer: syz [ 450.270890][ T9] usb 2-1: SerialNumber: syz [ 450.348003][ T9] usb 2-1: config 0 descriptor?? [ 450.368918][T10311] netlink: 'syz.3.1159': attribute type 2 has an invalid length. [ 450.613198][ T5944] peak_usb 3-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 450.656733][T10306] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 450.701355][ T5892] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 450.842181][ T5944] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 450.881818][ T5944] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 450.934176][ T5892] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 451.114992][ T5892] usb 4-1: config 128 has 0 interfaces, different from the descriptor's value: 2 [ 451.125059][ T5944] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 451.137236][T10317] fuse: Bad value for 'user_id' [ 451.142106][T10317] fuse: Bad value for 'user_id' [ 451.160885][ T5944] usb 3-1: USB disconnect, device number 80 [ 451.249797][ T5892] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 451.471061][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.550769][ T5892] usb 4-1: Product: syz [ 451.589986][ T5892] usb 4-1: Manufacturer: syz [ 451.601720][ T5892] usb 4-1: SerialNumber: syz [ 451.849669][ T5944] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 451.940599][T10311] @: renamed from vlan0 (while UP) [ 452.066600][ T5944] usb 3-1: device descriptor read/64, error -71 [ 452.125359][ T5895] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 452.325226][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 452.344222][ T5895] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 452.353353][ T5895] usb 5-1: config 0 has no interface number 0 [ 452.366442][ T5944] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 452.555271][ T5944] usb 3-1: device descriptor read/64, error -71 [ 452.590788][ T5895] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 452.600145][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.610456][ T5895] usb 5-1: Product: syz [ 452.614888][ T5895] usb 5-1: Manufacturer: syz [ 452.620632][ T5895] usb 5-1: SerialNumber: syz [ 452.635727][ T5895] usb 5-1: config 0 descriptor?? [ 452.654594][ T5895] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 452.796495][ T5944] usb usb3-port1: attempt power cycle [ 452.908697][ T5895] usb 5-1: qt2_attach - failed to power on unit: -71 [ 452.918562][ T5895] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 452.937223][ T5895] usb 5-1: USB disconnect, device number 89 [ 453.151691][ T5944] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 453.291028][ T5944] usb 3-1: device descriptor read/8, error -71 [ 453.387452][ T5895] usb 2-1: USB disconnect, device number 74 [ 453.545540][ T5944] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 453.606526][ T5944] usb 3-1: device descriptor read/8, error -71 [ 453.704687][ T5892] usb 4-1: USB disconnect, device number 97 [ 453.716300][ T5944] usb usb3-port1: unable to enumerate USB device [ 453.906540][T10352] netlink: 'syz.1.1172': attribute type 4 has an invalid length. [ 454.880224][ T5944] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 455.115218][ T5892] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 455.192797][ T5944] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 455.202444][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.330390][ T5892] usb 3-1: config 0 has no interfaces? [ 455.343486][ T5892] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 455.383629][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.496795][ T5944] usb 2-1: Product: syz [ 455.501028][ T5944] usb 2-1: Manufacturer: syz [ 455.505728][ T5944] usb 2-1: SerialNumber: syz [ 455.513263][ T5944] usb 2-1: config 0 descriptor?? [ 455.524841][ T5944] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 455.592007][ T5892] usb 3-1: Product: syz [ 455.605249][ T5892] usb 3-1: Manufacturer: syz [ 455.610519][ T5892] usb 3-1: SerialNumber: syz [ 455.640491][T10377] tipc: Enabling of bearer rejected, already enabled [ 455.655564][ T5892] usb 3-1: config 0 descriptor?? [ 455.906073][T10371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.914860][T10371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.215298][ T5895] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 456.375277][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 456.387634][ T5895] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 456.403296][ T5895] usb 1-1: config 0 has no interface number 0 [ 456.446385][ T5895] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 456.459442][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.479125][ T5895] usb 1-1: Product: syz [ 456.490101][ T5895] usb 1-1: Manufacturer: syz [ 456.509770][ T5895] usb 1-1: SerialNumber: syz [ 456.540580][ T5895] usb 1-1: config 0 descriptor?? [ 456.557408][ T5895] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 456.747068][T10365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.765577][T10365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.787902][ T5895] usb 1-1: qt2_attach - failed to power on unit: -71 [ 456.803712][ T5895] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 456.915501][ T5895] usb 1-1: USB disconnect, device number 85 [ 457.429839][T10193] usb 2-1: USB disconnect, device number 75 [ 457.825351][ T5944] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 457.875572][T10193] usb 3-1: USB disconnect, device number 85 [ 458.013793][ T5944] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.160984][ T5944] usb 1-1: config 0 interface 0 has no altsetting 0 [ 458.167936][ T5944] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 458.178306][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.192282][ T5944] usb 1-1: config 0 descriptor?? [ 459.019543][ T5944] usbhid 1-1:0.0: can't add hid device: -71 [ 459.033781][ T5944] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 459.046124][T10435] blktrace: Concurrent blktraces are not allowed on loop2 [ 459.099061][ T5944] usb 1-1: USB disconnect, device number 86 [ 459.334390][T10442] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1199'. [ 459.385351][ T5899] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 459.465439][ T5892] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 459.567157][T10447] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 459.625324][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 459.669918][ T5899] usb 3-1: config 0 has no interfaces? [ 459.682616][ T5899] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 459.691843][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.702698][T10452] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 459.710277][ T5892] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 459.722456][ T5899] usb 3-1: Product: syz [ 459.727354][ T5892] usb 4-1: config 0 has no interface number 0 [ 459.728767][ T5899] usb 3-1: Manufacturer: syz [ 459.740868][T10452] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1201'. [ 459.750927][ T5899] usb 3-1: SerialNumber: syz [ 459.755270][ T5892] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 459.766158][ T5899] usb 3-1: config 0 descriptor?? [ 459.769399][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.850704][ T5892] usb 4-1: Product: syz [ 459.864252][ T5892] usb 4-1: Manufacturer: syz [ 459.880423][ T5892] usb 4-1: SerialNumber: syz [ 459.900608][ T5892] usb 4-1: config 0 descriptor?? [ 459.912968][ T5892] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 460.125519][T10456] program syz.2.1195 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 460.137897][T10456] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 460.150165][ T5892] usb 4-1: qt2_attach - failed to power on unit: -71 [ 460.162582][ T5892] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 460.171156][ T5895] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 460.183931][ T5892] usb 4-1: USB disconnect, device number 98 [ 460.344203][ T5895] usb 1-1: config 0 has no interfaces? [ 460.354322][ T5895] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 460.364360][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.375121][ T5895] usb 1-1: Product: syz [ 460.380801][ T5895] usb 1-1: Manufacturer: syz [ 460.397914][ T5895] usb 1-1: SerialNumber: syz [ 460.418121][ T5895] usb 1-1: config 0 descriptor?? [ 461.122179][T10468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1205'. [ 462.239795][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 462.480971][T10484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 462.694820][T10493] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 462.732955][T10494] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 462.744521][T10493] FAULT_INJECTION: forcing a failure. [ 462.744521][T10493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.789481][T10493] CPU: 0 UID: 0 PID: 10493 Comm: syz.1.1213 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 462.789507][T10493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 462.789517][T10493] Call Trace: [ 462.789524][T10493] [ 462.789531][T10493] dump_stack_lvl+0x241/0x360 [ 462.789563][T10493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.789586][T10493] ? __pfx__printk+0x10/0x10 [ 462.789617][T10493] should_fail_ex+0x424/0x570 [ 462.789645][T10493] _copy_to_user+0x31/0xb0 [ 462.789671][T10493] iommufd_ucmd_respond+0x85/0xe0 [ 462.789701][T10493] iommufd_get_hw_info+0x7b3/0xa70 [ 462.789735][T10493] ? __pfx_iommufd_get_hw_info+0x10/0x10 [ 462.789774][T10493] iommufd_fops_ioctl+0x4fc/0x610 [ 462.789801][T10493] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 462.789829][T10493] ? __fget_files+0x2a/0x420 [ 462.789852][T10493] ? __fget_files+0x2a/0x420 [ 462.789874][T10493] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 462.789899][T10493] __se_sys_ioctl+0xf1/0x160 [ 462.789926][T10493] do_syscall_64+0xf3/0x210 [ 462.789946][T10493] ? clear_bhb_loop+0x45/0xa0 [ 462.789968][T10493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.789986][T10493] RIP: 0033:0x7fd5ac18e169 [ 462.790003][T10493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.790019][T10493] RSP: 002b:00007fd5acf8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 462.790040][T10493] RAX: ffffffffffffffda RBX: 00007fd5ac3b5fa0 RCX: 00007fd5ac18e169 [ 462.790054][T10493] RDX: 0000200000000180 RSI: 0000000000003b8a RDI: 0000000000000003 [ 462.790066][T10493] RBP: 00007fd5acf8d090 R08: 0000000000000000 R09: 0000000000000000 [ 462.790077][T10493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.790087][T10493] R13: 0000000000000000 R14: 00007fd5ac3b5fa0 R15: 00007fd5ac4dfa28 [ 462.790116][T10493] [ 463.050799][ T5895] usb 3-1: USB disconnect, device number 86 [ 463.234914][T10499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 463.350604][ T5899] usb 1-1: USB disconnect, device number 87 [ 463.535414][ T5895] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 463.705604][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 463.717476][ T5895] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 463.741448][ T5895] usb 2-1: config 0 has no interface number 0 [ 463.764521][ T5895] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 463.788519][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.804672][ T5895] usb 2-1: Product: syz [ 463.812918][ T5895] usb 2-1: Manufacturer: syz [ 463.833797][ T5895] usb 2-1: SerialNumber: syz [ 463.869613][ T5895] usb 2-1: config 0 descriptor?? [ 464.422826][ T5895] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 464.623775][ T5895] usb 2-1: qt2_attach - failed to power on unit: -71 [ 464.632941][ T5895] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 464.701196][ T5895] usb 2-1: USB disconnect, device number 76 [ 465.045199][ T5944] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 465.097310][ T30] kauditd_printk_skb: 311 callbacks suppressed [ 465.097330][ T30] audit: type=1326 audit(1745053781.905:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10539 comm="syz.4.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293378e169 code=0x7ffc0000 [ 465.155053][ T30] audit: type=1326 audit(1745053781.905:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10539 comm="syz.4.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293378e169 code=0x7ffc0000 [ 465.280588][ T30] audit: type=1326 audit(1745053781.905:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10539 comm="syz.4.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f293378e169 code=0x7ffc0000 [ 465.321406][ T30] audit: type=1326 audit(1745053781.905:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10539 comm="syz.4.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293378e169 code=0x7ffc0000 [ 465.347934][ T30] audit: type=1326 audit(1745053781.905:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10539 comm="syz.4.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293378e169 code=0x7ffc0000 [ 465.373614][ T30] audit: type=1326 audit(1745053781.905:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10539 comm="syz.4.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f293378cad0 code=0x7ffc0000 [ 465.396230][ T30] audit: type=1326 audit(1745053781.905:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10539 comm="syz.4.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f293378dd6b code=0x7ffc0000 [ 465.419991][ T5899] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 465.420009][ T30] audit: type=1326 audit(1745053781.905:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10539 comm="syz.4.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f293378dd6b code=0x7ffc0000 [ 465.450232][ T30] audit: type=1326 audit(1745053781.905:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10539 comm="syz.4.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f293378dd6b code=0x7ffc0000 [ 465.474992][ T30] audit: type=1326 audit(1745053781.905:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10539 comm="syz.4.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f293378dd6b code=0x7ffc0000 [ 465.498226][ T5944] usb 4-1: config 0 has no interfaces? [ 465.604617][ T5944] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 465.625397][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 465.625433][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 465.669932][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.688521][ T5899] usb 5-1: config 0 has no interfaces? [ 465.695243][ T5944] usb 4-1: Product: syz [ 465.699647][ T5944] usb 4-1: Manufacturer: syz [ 465.704313][ T5944] usb 4-1: SerialNumber: syz [ 465.716155][ T5944] usb 4-1: config 0 descriptor?? [ 465.747147][ T5899] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 465.778402][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.798843][ T5899] usb 5-1: Product: syz [ 465.803070][ T5899] usb 5-1: Manufacturer: syz [ 465.811827][ T5899] usb 5-1: SerialNumber: syz [ 465.891863][ T5899] usb 5-1: config 0 descriptor?? [ 466.192947][T10551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.302902][T10551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.533276][T10553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 467.317033][T10547] syz.1.1231 (10547): drop_caches: 1 [ 468.547389][ T5848] usb 5-1: USB disconnect, device number 90 [ 468.629477][ T5895] usb 4-1: USB disconnect, device number 99 [ 468.665244][ T5944] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 468.805647][ T5944] usb 1-1: device descriptor read/64, error -71 [ 468.899031][T10584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 468.952732][T10582] ALSA: mixer_oss: invalid OSS volume '' [ 469.045617][ T5944] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 469.175362][ T5899] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 469.190597][ T5944] usb 1-1: device descriptor read/64, error -71 [ 469.327742][ T5944] usb usb1-port1: attempt power cycle [ 469.355263][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 469.363687][ T5899] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 469.373826][ T5899] usb 5-1: config 0 has no interface number 0 [ 469.387678][ T5899] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 469.419313][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.433416][T10597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.443789][ T5899] usb 5-1: Product: syz [ 469.451939][ T5899] usb 5-1: Manufacturer: syz [ 469.457848][ T5899] usb 5-1: SerialNumber: syz [ 469.472252][ T5899] usb 5-1: config 0 descriptor?? [ 469.482206][ T5899] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 469.685404][ T5944] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 469.694744][ T5899] usb 5-1: qt2_attach - failed to power on unit: -71 [ 469.707105][ T5944] usb 1-1: device descriptor read/8, error -71 [ 469.714074][ T5899] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 469.727424][ T5899] usb 5-1: USB disconnect, device number 91 [ 469.965265][ T5944] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 469.985876][ T5944] usb 1-1: device descriptor read/8, error -71 [ 470.098924][ T5944] usb usb1-port1: unable to enumerate USB device [ 470.150775][T10600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1245'. [ 470.291042][T10607] FAULT_INJECTION: forcing a failure. [ 470.291042][T10607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.309397][T10607] CPU: 0 UID: 0 PID: 10607 Comm: syz.4.1248 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 470.309428][T10607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 470.309441][T10607] Call Trace: [ 470.309450][T10607] [ 470.309459][T10607] dump_stack_lvl+0x241/0x360 [ 470.309498][T10607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.309529][T10607] ? __pfx__printk+0x10/0x10 [ 470.309570][T10607] should_fail_ex+0x424/0x570 [ 470.309607][T10607] _copy_to_user+0x31/0xb0 [ 470.309638][T10607] simple_read_from_buffer+0xc4/0x170 [ 470.309683][T10607] proc_fail_nth_read+0x1ef/0x260 [ 470.309708][T10607] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 470.309732][T10607] ? rw_verify_area+0x246/0x630 [ 470.309759][T10607] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 470.309781][T10607] vfs_read+0x21f/0xb90 [ 470.309815][T10607] ? __pfx___mutex_lock+0x10/0x10 [ 470.309838][T10607] ? __pfx_vfs_read+0x10/0x10 [ 470.309868][T10607] ? __fget_files+0x2a/0x420 [ 470.309890][T10607] ? __fget_files+0x39d/0x420 [ 470.309909][T10607] ? __fget_files+0x2a/0x420 [ 470.309937][T10607] ksys_read+0x19d/0x2d0 [ 470.309961][T10607] ? __pfx_ksys_read+0x10/0x10 [ 470.309988][T10607] ? do_syscall_64+0xb6/0x210 [ 470.310008][T10607] do_syscall_64+0xf3/0x210 [ 470.310025][T10607] ? clear_bhb_loop+0x45/0xa0 [ 470.310045][T10607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.310060][T10607] RIP: 0033:0x7f293378cb7c [ 470.310075][T10607] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 470.310089][T10607] RSP: 002b:00007f2934683030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 470.310107][T10607] RAX: ffffffffffffffda RBX: 00007f29339b5fa0 RCX: 00007f293378cb7c [ 470.310119][T10607] RDX: 000000000000000f RSI: 00007f29346830a0 RDI: 0000000000000004 [ 470.310129][T10607] RBP: 00007f2934683090 R08: 0000000000000000 R09: 0000000000000000 [ 470.310139][T10607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.310149][T10607] R13: 0000000000000000 R14: 00007f29339b5fa0 R15: 00007f2933adfa28 [ 470.310174][T10607] [ 470.525678][ T5944] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 470.685255][ T5944] usb 3-1: Using ep0 maxpacket: 8 [ 470.692308][ T5944] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.709126][ T5944] usb 3-1: config 0 interface 0 has no altsetting 0 [ 470.771398][ T5944] usb 3-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 470.821712][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.898039][ T5944] usb 3-1: config 0 descriptor?? [ 471.265388][ T5848] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 471.340349][ T5944] kye 0003:0458:501B.0012: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 471.354849][T10625] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1252'. [ 471.361626][ T5944] kye 0003:0458:501B.0012: hidraw0: USB HID v3.ff Device [HID 0458:501b] on usb-dummy_hcd.2-1/input0 [ 471.379966][ T5944] kye 0003:0458:501B.0012: tablet-enabling feature report not found [ 471.389095][ T5944] kye 0003:0458:501B.0012: tablet enabling failed [ 471.435345][ T9] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 471.490416][ T5848] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 471.511855][ T5848] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.524382][ T5848] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 471.538319][ T5848] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.560907][ T5848] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 471.573064][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 471.584281][ T5848] usb 1-1: Product: syz [ 471.591201][ T5848] usb 1-1: Manufacturer: syz [ 471.618787][ T5895] usb 3-1: USB disconnect, device number 87 [ 471.626904][ T5848] cdc_wdm 1-1:1.0: skipping garbage [ 471.644822][ T5848] cdc_wdm 1-1:1.0: skipping garbage [ 471.673095][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 471.709509][ T5848] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 471.724823][ T5848] cdc_wdm 1-1:1.0: Unknown control protocol [ 471.737780][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 471.769598][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 471.796573][ T9] usb 5-1: SerialNumber: syz [ 471.890794][ T5895] usb 1-1: USB disconnect, device number 92 [ 472.279567][T10632] fuse: Unknown parameter '' [ 472.282637][ T9] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 472.289689][T10632] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 472.552817][T10640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1260'. [ 472.565339][T10193] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 472.654868][ T9] usb 5-1: USB disconnect, device number 92 [ 472.673309][ T9] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 472.696296][ T5899] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 472.707413][T10193] usb 3-1: device descriptor read/64, error -71 [ 473.257667][T10649] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 473.445236][T10193] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 473.465300][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 473.473330][ T5899] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 473.494165][ T5899] usb 2-1: config 0 has no interface number 0 [ 473.505514][ T5899] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 473.527406][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.539076][ T5848] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 473.543070][ T5899] usb 2-1: Product: syz [ 473.551205][ T5899] usb 2-1: Manufacturer: syz [ 473.555989][ T5899] usb 2-1: SerialNumber: syz [ 473.564285][ T5899] usb 2-1: config 0 descriptor?? [ 473.573350][T10657] FAULT_INJECTION: forcing a failure. [ 473.573350][T10657] name failslab, interval 1, probability 0, space 0, times 0 [ 473.597996][ T5899] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 473.608239][T10193] usb 3-1: device descriptor read/64, error -71 [ 473.625512][T10657] CPU: 1 UID: 0 PID: 10657 Comm: syz.0.1264 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 473.625544][T10657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 473.625558][T10657] Call Trace: [ 473.625566][T10657] [ 473.625576][T10657] dump_stack_lvl+0x241/0x360 [ 473.625613][T10657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.625648][T10657] ? __pfx__printk+0x10/0x10 [ 473.625682][T10657] ? __pfx___might_resched+0x10/0x10 [ 473.625706][T10657] should_fail_ex+0x424/0x570 [ 473.625743][T10657] should_failslab+0xac/0x100 [ 473.625766][T10657] __kmalloc_noprof+0xdf/0x4d0 [ 473.625786][T10657] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 473.625814][T10657] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 473.625848][T10657] tomoyo_realpath_from_path+0xcf/0x5e0 [ 473.625891][T10657] tomoyo_path_number_perm+0x245/0x790 [ 473.625919][T10657] ? tomoyo_path_number_perm+0x215/0x790 [ 473.625946][T10657] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 473.625978][T10657] ? ksys_write+0x24e/0x2d0 [ 473.626015][T10657] ? __lock_acquire+0xad5/0xd80 [ 473.626064][T10657] ? __fget_files+0x2a/0x420 [ 473.626083][T10657] ? __fget_files+0x2a/0x420 [ 473.626105][T10657] ? __fget_files+0x2a/0x420 [ 473.626131][T10657] security_file_ioctl+0xc6/0x2a0 [ 473.626155][T10657] __se_sys_ioctl+0x46/0x160 [ 473.626184][T10657] do_syscall_64+0xf3/0x210 [ 473.626207][T10657] ? clear_bhb_loop+0x45/0xa0 [ 473.626231][T10657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.626251][T10657] RIP: 0033:0x7fbbec78e169 [ 473.626269][T10657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.626287][T10657] RSP: 002b:00007fbbed54e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.626310][T10657] RAX: ffffffffffffffda RBX: 00007fbbec9b5fa0 RCX: 00007fbbec78e169 [ 473.626325][T10657] RDX: 0000200000000100 RSI: 0000000000004601 RDI: 0000000000000003 [ 473.626338][T10657] RBP: 00007fbbed54e090 R08: 0000000000000000 R09: 0000000000000000 [ 473.626351][T10657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.626363][T10657] R13: 0000000000000000 R14: 00007fbbec9b5fa0 R15: 00007fbbecadfa28 [ 473.626401][T10657] [ 473.626434][T10657] ERROR: Out of memory at tomoyo_realpath_from_path. [ 473.729109][ T5848] usb 4-1: config 252 has an invalid interface number: 107 but max is 0 [ 473.742455][T10193] usb usb3-port1: attempt power cycle [ 473.761162][ T5848] usb 4-1: config 252 has no interface number 0 [ 473.882107][ T5899] usb 2-1: qt2_attach - failed to power on unit: -71 [ 473.894789][ T5899] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 473.903708][ T5848] usb 4-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 473.908960][ T5899] usb 2-1: USB disconnect, device number 77 [ 473.910724][ T5848] usb 4-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 473.916754][ T5848] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 473.916785][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.916807][ T5848] usb 4-1: Product: syz [ 473.916823][ T5848] usb 4-1: Manufacturer: syz [ 473.916838][ T5848] usb 4-1: SerialNumber: syz [ 474.115360][T10193] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 474.136028][T10193] usb 3-1: device descriptor read/8, error -71 [ 474.149723][T10669] [ 474.152069][T10669] ====================================================== [ 474.159094][T10669] WARNING: possible circular locking dependency detected [ 474.166136][T10669] 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 Not tainted [ 474.173244][T10669] ------------------------------------------------------ [ 474.180276][T10669] syz.0.1266/10669 is trying to acquire lock: [ 474.186335][T10669] ffff88814e4771e0 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0xb3/0x510 [ 474.196632][T10669] [ 474.196632][T10669] but task is already holding lock: [ 474.204005][T10669] ffff88802519b168 (&q->q_usage_counter(io)#19){++++}-{0:0}, at: lo_ioctl+0x20be/0x2990 [ 474.213771][T10669] [ 474.213771][T10669] which lock already depends on the new lock. [ 474.213771][T10669] [ 474.224178][T10669] [ 474.224178][T10669] the existing dependency chain (in reverse order) is: [ 474.233199][T10669] [ 474.233199][T10669] -> #3 (&q->q_usage_counter(io)#19){++++}-{0:0}: [ 474.241816][T10669] lock_acquire+0x116/0x2f0 [ 474.246854][T10669] blk_alloc_queue+0x542/0x620 [ 474.252140][T10669] __blk_mq_alloc_disk+0x162/0x380 [ 474.257777][T10669] loop_add+0x445/0xaf0 [ 474.262452][T10669] loop_init+0x168/0x220 [ 474.267210][T10669] do_one_initcall+0x24a/0x940 [ 474.272507][T10669] do_initcall_level+0x157/0x210 [ 474.277965][T10669] do_initcalls+0x71/0xd0 [ 474.282811][T10669] kernel_init_freeable+0x432/0x5d0 [ 474.288547][T10669] kernel_init+0x1d/0x2b0 [ 474.293418][T10669] ret_from_fork+0x4b/0x80 [ 474.298374][T10669] ret_from_fork_asm+0x1a/0x30 [ 474.303669][T10669] [ 474.303669][T10669] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 474.310895][T10669] lock_acquire+0x116/0x2f0 [ 474.315947][T10669] fs_reclaim_acquire+0x88/0x130 [ 474.321423][T10669] kmem_cache_alloc_noprof+0x49/0x390 [ 474.327330][T10669] __kernfs_iattrs+0x94/0x280 [ 474.332560][T10669] kernfs_iop_setattr+0xe3/0x3f0 [ 474.338042][T10669] notify_change+0xbca/0xe90 [ 474.343174][T10669] do_truncate+0x222/0x310 [ 474.348132][T10669] path_openat+0x2e4f/0x35d0 [ 474.353261][T10669] do_filp_open+0x284/0x4e0 [ 474.358301][T10669] do_sys_openat2+0x12b/0x1d0 [ 474.363508][T10669] __x64_sys_openat+0x249/0x2a0 [ 474.368890][T10669] do_syscall_64+0xf3/0x210 [ 474.373917][T10669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.380331][T10669] [ 474.380331][T10669] -> #1 (iattr_mutex){+.+.}-{4:4}: [ 474.387641][T10669] lock_acquire+0x116/0x2f0 [ 474.392670][T10669] __mutex_lock+0x1a5/0x10c0 [ 474.397787][T10669] __kernfs_iattrs+0x2b/0x280 [ 474.402986][T10669] kernfs_iop_setattr+0xe3/0x3f0 [ 474.408451][T10669] notify_change+0xbca/0xe90 [ 474.413589][T10669] do_truncate+0x222/0x310 [ 474.418538][T10669] path_openat+0x2e4f/0x35d0 [ 474.423661][T10669] do_filp_open+0x284/0x4e0 [ 474.428696][T10669] do_sys_openat2+0x12b/0x1d0 [ 474.433899][T10669] __x64_sys_openat+0x249/0x2a0 [ 474.439278][T10669] do_syscall_64+0xf3/0x210 [ 474.444306][T10669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.450720][T10669] [ 474.450720][T10669] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 474.459247][T10669] validate_chain+0xa69/0x24e0 [ 474.464533][T10669] __lock_acquire+0xad5/0xd80 [ 474.469754][T10669] lock_acquire+0x116/0x2f0 [ 474.474787][T10669] down_read+0xb3/0xa50 [ 474.479469][T10669] kernfs_iop_getattr+0xb3/0x510 [ 474.484964][T10669] loop_assign_backing_file+0x276/0x500 [ 474.491046][T10669] lo_ioctl+0x2133/0x2990 [ 474.495910][T10669] blkdev_ioctl+0x5df/0x710 [ 474.500941][T10669] __se_sys_ioctl+0xf1/0x160 [ 474.506060][T10669] do_syscall_64+0xf3/0x210 [ 474.511091][T10669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.517512][T10669] [ 474.517512][T10669] other info that might help us debug this: [ 474.517512][T10669] [ 474.527752][T10669] Chain exists of: [ 474.527752][T10669] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#19 [ 474.527752][T10669] [ 474.542210][T10669] Possible unsafe locking scenario: [ 474.542210][T10669] [ 474.549678][T10669] CPU0 CPU1 [ 474.555056][T10669] ---- ---- [ 474.560431][T10669] lock(&q->q_usage_counter(io)#19); [ 474.565905][T10669] lock(fs_reclaim); [ 474.572423][T10669] lock(&q->q_usage_counter(io)#19); [ 474.580335][T10669] rlock(&root->kernfs_iattr_rwsem); [ 474.585718][T10669] [ 474.585718][T10669] *** DEADLOCK *** [ 474.585718][T10669] [ 474.593875][T10669] 3 locks held by syz.0.1266/10669: [ 474.599081][T10669] #0: ffff8880252d9b68 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x138d/0x2990 [ 474.608168][T10669] #1: ffff88802519b168 (&q->q_usage_counter(io)#19){++++}-{0:0}, at: lo_ioctl+0x20be/0x2990 [ 474.618413][T10669] #2: ffff88802519b1a0 (&q->q_usage_counter(queue)#19){+.+.}-{0:0}, at: lo_ioctl+0x20be/0x2990 [ 474.628905][T10669] [ 474.628905][T10669] stack backtrace: [ 474.634796][T10669] CPU: 0 UID: 0 PID: 10669 Comm: syz.0.1266 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 474.634819][T10669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 474.634830][T10669] Call Trace: [ 474.634837][T10669] [ 474.634844][T10669] dump_stack_lvl+0x241/0x360 [ 474.634874][T10669] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.634899][T10669] ? __pfx__printk+0x10/0x10 [ 474.634923][T10669] ? print_lock+0x171/0x1a0 [ 474.634952][T10669] print_circular_bug+0x2e1/0x300 [ 474.634971][T10669] check_noncircular+0x142/0x160 [ 474.634991][T10669] validate_chain+0xa69/0x24e0 [ 474.635017][T10669] __lock_acquire+0xad5/0xd80 [ 474.635044][T10669] lock_acquire+0x116/0x2f0 [ 474.635066][T10669] ? kernfs_iop_getattr+0xb3/0x510 [ 474.635098][T10669] down_read+0xb3/0xa50 [ 474.635121][T10669] ? kernfs_iop_getattr+0xb3/0x510 [ 474.635147][T10669] ? __lock_acquire+0xad5/0xd80 [ 474.635172][T10669] ? __pfx_down_read+0x10/0x10 [ 474.635194][T10669] ? kernfs_root+0x1c/0x230 [ 474.635220][T10669] ? kernfs_root+0x1c/0x230 [ 474.635246][T10669] kernfs_iop_getattr+0xb3/0x510 [ 474.635276][T10669] loop_assign_backing_file+0x276/0x500 [ 474.635301][T10669] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 474.635334][T10669] lo_ioctl+0x2133/0x2990 [ 474.635357][T10669] ? __lock_acquire+0xad5/0xd80 [ 474.635380][T10669] ? __pfx_lo_ioctl+0x10/0x10 [ 474.635399][T10669] ? do_raw_spin_lock+0x151/0x370 [ 474.635422][T10669] ? do_raw_spin_unlock+0x13c/0x8b0 [ 474.635445][T10669] ? __lock_acquire+0xad5/0xd80 [ 474.635469][T10669] ? __lock_acquire+0xad5/0xd80 [ 474.635494][T10669] ? __lock_acquire+0xad5/0xd80 [ 474.635523][T10669] ? __lock_acquire+0xad5/0xd80 [ 474.635549][T10669] ? __lock_acquire+0xad5/0xd80 [ 474.635572][T10669] ? __lock_acquire+0xad5/0xd80 [ 474.635602][T10669] ? is_bpf_text_address+0x26/0x2a0 [ 474.635629][T10669] ? is_bpf_text_address+0x288/0x2a0 [ 474.635653][T10669] ? is_bpf_text_address+0x26/0x2a0 [ 474.635677][T10669] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 474.635699][T10669] ? kernel_text_address+0xa7/0xe0 [ 474.635721][T10669] ? __kernel_text_address+0xd/0x40 [ 474.635743][T10669] ? unwind_get_return_address+0x4d/0x90 [ 474.635764][T10669] ? arch_stack_walk+0xff/0x150 [ 474.635789][T10669] ? stack_trace_save+0x11a/0x1d0 [ 474.635809][T10669] ? __pfx_stack_trace_save+0x10/0x10 [ 474.635829][T10669] ? stack_depot_save_flags+0x44/0x940 [ 474.635859][T10669] ? kasan_save_track+0x51/0x80 [ 474.635883][T10669] ? kasan_save_track+0x3f/0x80 [ 474.635905][T10669] ? kasan_save_free_info+0x40/0x50 [ 474.635924][T10669] ? __kasan_slab_free+0x59/0x70 [ 474.635948][T10669] ? kfree+0x198/0x430 [ 474.635962][T10669] ? tomoyo_path_number_perm+0x5fd/0x790 [ 474.635981][T10669] ? security_file_ioctl+0xc6/0x2a0 [ 474.635999][T10669] ? __se_sys_ioctl+0x46/0x160 [ 474.636019][T10669] ? do_syscall_64+0xf3/0x210 [ 474.636036][T10669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.636053][T10669] ? do_vfs_ioctl+0xef8/0x2750 [ 474.636077][T10669] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 474.636108][T10669] ? kasan_quarantine_put+0xdc/0x230 [ 474.636131][T10669] ? lockdep_hardirqs_on+0x9d/0x150 [ 474.636150][T10669] ? tomoyo_path_number_perm+0x215/0x790 [ 474.636170][T10669] ? blkdev_common_ioctl+0x1060/0x25a0 [ 474.636193][T10669] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 474.636211][T10669] ? tomoyo_path_number_perm+0x215/0x790 [ 474.636231][T10669] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 474.636258][T10669] ? __lock_acquire+0xad5/0xd80 [ 474.636288][T10669] ? file_to_blk_mode+0xcb/0x140 [ 474.636310][T10669] ? __pfx_lo_ioctl+0x10/0x10 [ 474.636329][T10669] blkdev_ioctl+0x5df/0x710 [ 474.636348][T10669] ? __pfx_blkdev_ioctl+0x10/0x10 [ 474.636368][T10669] ? __pfx_blkdev_ioctl+0x10/0x10 [ 474.636386][T10669] __se_sys_ioctl+0xf1/0x160 [ 474.636408][T10669] do_syscall_64+0xf3/0x210 [ 474.636426][T10669] ? clear_bhb_loop+0x45/0xa0 [ 474.636444][T10669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.636461][T10669] RIP: 0033:0x7fbbec78e169 [ 474.636477][T10669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.636493][T10669] RSP: 002b:00007fbbed54e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.636517][T10669] RAX: ffffffffffffffda RBX: 00007fbbec9b5fa0 RCX: 00007fbbec78e169 [ 474.636531][T10669] RDX: 0000000000000005 RSI: 0000000000004c06 RDI: 0000000000000003 [ 474.636541][T10669] RBP: 00007fbbec810a68 R08: 0000000000000000 R09: 0000000000000000 [ 474.636552][T10669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.636562][T10669] R13: 0000000000000000 R14: 00007fbbec9b5fa0 R15: 00007fbbecadfa28 [ 474.636581][T10669] [ 474.845623][T10193] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 474.853151][T10649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.946839][T10193] usb 3-1: device descriptor read/8, error -71 [ 474.948481][T10649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.180291][ T5892] usb 4-1: USB disconnect, device number 100 [ 475.235952][T10193] usb usb3-port1: unable to enumerate USB device