last executing test programs: 24m43.388204525s ago: executing program 3 (id=1641): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() socket$key(0xf, 0x3, 0x2) sched_setscheduler(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x40011}, 0x400c0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002080)=""/4082, 0xff2}], 0x1}}], 0x2, 0x40012141, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002bc0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r5, @ANYBLOB="00410000000000001c002b8008000100", @ANYRES32, @ANYBLOB="0800030019000000080008"], 0x3c}}, 0x4000000) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket(0xb, 0x3, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000200)='.\x00', 0x400) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000062c0)=[{&(0x7f0000000380)="49b7cba24ba2055bae4743deebb0ea0a6d2668ad6d90fa19a62e0bd96d0a0d78a646a899e244850b93eedf84b5d8d3429d3f0d216b151da999f4899cfafb7cb54d757a09ff8e28dba8e74f0d14ce5b0774387b988f1d7fdfb8b16d575ee56294fa8bac6436857072915a921d1989a6c913dc38c9a668ffcd91f3f5fa2764b210d94959c8a18cd8eddad2d8e34dc609f891ac7fc1de00ac97429a3a1f3d9a7a4ba71b577875111f9d844e86e81f0a5fa321020b9a8d5c38146a985c68cb3de57a3e8dfee01ac9473ddb6998c1d38f04831b6c1d421523ba1061abb6805514f5d254021924ba9e7c0762e17b4809b5ab048fd4763fa00085d8bb20064bb8985a4b7a734233e0495459044583fefb27e8d5b3fd4ac7b51424cf8307bc199c7fab3e8a7eee9071efb3765d46421b225bf727219f8b3cd8bf8db1128096082c40db87a03d5be4bdbdae43be1bca306369021c27b81ad0f5ea15bcca5326f7f42d8faa8c14f7de0bd3c374da09f3e384ff30e94444b0fbd79396c910559bde230ede3e1e2d9668925ab42af9297a771394676f71335febc1997db7dd65e097a9cc5a72d912d894cd625b73b904bfea3bee02790efe5410d4634e2d0146dd708f9685d010e4e6078575b23e962579b6c3b7a4afc7ca15e6c3d637ce4ffba6b6d283d4685e002c26a2f0cda33858af1ee1a5f31c8aee058b051fcf74de9d4d434275f291ea5850dca37f51e33f2e23f7596c2e437c26bf1919a6ac90db80d2707964334847248a5ef338e4a2871f53f16638117eeff7310a0b17da76a9145b641ecd0c38c0febe6a5ff14fccc7262a2a4a98671576457272c8577826d9a0e134d309c34bd3f25b6573fb46c4030e3111a8de38fdd0f4c2656e05ed69a3e5e260ee9277d62feddd92405d9f29b8f0d950b6f6517b7e2b4e017db0034e1f83c67572904ab5e5ec3d5e79e975269e2d72f46504d3ceaa54ab68b14d411325275c1dd09d83fc05ba638b9544d5e0889364f7f9355f99ad48ad8d70844343318c20a01a75c87ef82193b7739bc312a127dff47cdb7c6615ddc10a264e870f3d7377ecb85cf09b37e1677a9c24bd53c365856d4ea1191393f6f2de39db94bb7c9b96ee343ee66cd07b07d9e260e388f97341a5007de84eb565669f81ae48454e3ea0a8055c0b6681091ceca9871f3d57255c641ac9d29b0d373d5e6ae5ca0beccd71e2c3a5e4e289b97852bb1cb07d6b5c9fdd5cbcde77491eba107a97cbc9cbc027ce90531cc27cbf843355217c4bb0e60005bce5ba9976bb2ab552cd0eb1a94ff80691917ef1b9da100cbf2bf3c169e9b329df75ac726dffbc32498fa54079c4256722f5ae5fe3a232b63c75c11b1d190ae11d0086c840b5b63a1f2c0ee63523728705d8747dc743b13fe725af3d6cab03343582e53ab1", 0x3f1}, {&(0x7f00000041c0)="1269da71e0cc9189ddd4d5bc965cef", 0xf}], 0x2, 0x0, 0x0, 0x4}}], 0x1, 0x1) 24m41.286897952s ago: executing program 3 (id=1644): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x700, 0x1, 0x40000000}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r2, 0x3f72, 0x74f1, 0xfdef, 0x0, 0x39) 24m39.905326179s ago: executing program 3 (id=1650): r0 = syz_open_dev$radio(0x0, 0x3, 0x2) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040)) 24m39.841464196s ago: executing program 3 (id=1653): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd7000000000000400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000180)=@arm64) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000340)={0x79, 0xf, 0x0, 'queue0\x00', 0x14a}) r5 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r8, r8, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) fcntl$setown(r5, 0x8, r8) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x4, &(0x7f0000000080)=[{0xfffe, 0x4, 0x3, 0x1477}, {0x6, 0xf, 0x64, 0x7}, {0x1, 0xc, 0x9, 0x6}, {0x9, 0x0, 0x3, 0x21}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000280)=[@free_buffer={0x40086303, r10}], 0x0, 0x0, 0x0}) dup2(r2, r6) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000015c0)={0xa0, 0x0, &(0x7f0000001780)=[@register_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001600)={@flat, @ptr={0x70742a85, 0x0, &(0x7f0000001580)=""/6, 0x6, 0x0, 0x3f}, @flat=@handle={0x73682a85, 0x100b, 0x3}}, &(0x7f0000001680)={0x0, 0x18, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001840)={@flat=@weak_binder={0x77622a85, 0xb, 0x2}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x5, 0x0, 0xd}}, &(0x7f0000001740)={0x0, 0x18, 0x30}}}, @dead_binder_done], 0x0, 0x0, 0x0}) ioctl$TCGETA(r5, 0x5405, &(0x7f0000000040)) 24m38.968281728s ago: executing program 3 (id=1659): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x8) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x10001) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_io_uring_setup(0x495, &(0x7f0000000540)={0x0, 0xe140, 0x0, 0x0, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r9, 0x3516, 0x100000, 0x0, 0x0, 0x0) 24m36.454780948s ago: executing program 3 (id=1668): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x42, 0x5}}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1fb553244e946098, {{0x42, 0x1}, 0x1}}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000140)={0x2, 0x3, 0x0, 0xff81, 0x0, 0x3, 0x0}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x769}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x103800) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c0000000104000048"]) ppoll(&(0x7f0000000180)=[{r3, 0x4047, 0x700}], 0x1, 0x0, 0x0, 0x0) close(r3) listen(0xffffffffffffffff, 0x8) r5 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x6559, 0x13580, 0x4000003}, &(0x7f0000000040), &(0x7f0000000140)) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x8, 0xe74, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0xfffffffc], [0x80000000, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0xfffffffa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) r6 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYRES64=r5], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r6) socket$kcm(0xa, 0x5, 0x0) socket(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 24m21.280966667s ago: executing program 32 (id=1668): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x42, 0x5}}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1fb553244e946098, {{0x42, 0x1}, 0x1}}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000140)={0x2, 0x3, 0x0, 0xff81, 0x0, 0x3, 0x0}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x769}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x103800) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c0000000104000048"]) ppoll(&(0x7f0000000180)=[{r3, 0x4047, 0x700}], 0x1, 0x0, 0x0, 0x0) close(r3) listen(0xffffffffffffffff, 0x8) r5 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x6559, 0x13580, 0x4000003}, &(0x7f0000000040), &(0x7f0000000140)) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x8, 0xe74, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0xfffffffc], [0x80000000, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0xfffffffa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) r6 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYRES64=r5], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r6) socket$kcm(0xa, 0x5, 0x0) socket(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 24m11.942854788s ago: executing program 2 (id=1737): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x41, 0x107, 0x0, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}}, 0x4010) 24m11.666860273s ago: executing program 2 (id=1738): socket$pptp(0x18, 0x1, 0x2) (fail_nth: 3) 24m10.957857045s ago: executing program 2 (id=1740): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xe0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x34, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x34}}, 0x0) 24m10.749986652s ago: executing program 2 (id=1741): unshare(0xc000000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') unshare(0x2c060000) 24m10.258804852s ago: executing program 2 (id=1742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a09040000000004000000020000060900020073797a32000000000900010073797a30000000005c0004805800018007000100637400004c0002800800014000000013080002400000000c"], 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x884) 24m9.849026157s ago: executing program 2 (id=1743): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8240, 0x0) read$alg(r3, &(0x7f0000000240)=""/4096, 0xfffffdef) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x7, r4, 0x4, {0x9, 0x5}, 0x47}, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001280), 0x200903, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x22, 0x3, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGREP(r7, 0x80084503, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000008, 0x6131, 0xffffffffffffffff, 0x1a688000) r8 = socket$unix(0x1, 0x1, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) ioctl$TUNSETCARRIER(r9, 0x400454e2, &(0x7f0000000000)=0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0x9, 0xffff}, {0x1, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x35}}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x1d94, 0x2c, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xffff, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x1d64, 0x2, [@TCA_ROUTE4_POLICE={0x828, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x1, 0xffffff12, 0x6, 0x9, 0x6, 0x101, 0x6, 0x400, 0x3ff, 0x4, 0x2, 0x8, 0x2, 0x5, 0x8001, 0x1, 0x6, 0x3fb7b1f2, 0x0, 0x2, 0x36, 0x3, 0x7096, 0x7ff, 0xffffffff, 0x4, 0x9, 0xa, 0x8000, 0x400, 0x80000001, 0x7, 0x2, 0x7, 0x1, 0x0, 0x2, 0x9, 0xfffffe00, 0x7, 0xa2cc, 0x7, 0xc833, 0x4, 0xfffffffe, 0x4, 0x1, 0x8, 0x0, 0xf, 0x4, 0xbbac, 0x3260, 0xa61, 0x3, 0x9, 0xee95, 0x34, 0x5c, 0x81, 0x401, 0x9, 0x4, 0x10000, 0xa, 0x6, 0x8, 0x3, 0x800, 0x7ff, 0xe, 0x50, 0x0, 0x1, 0x5, 0x10001, 0x4, 0xfffffffa, 0x9, 0x3ff, 0xc, 0x2, 0x2, 0x3, 0x8, 0x9, 0x7f, 0xfffffffb, 0x0, 0x42, 0x7, 0xb, 0x6, 0xc000, 0x1, 0x6000, 0x0, 0x9, 0xba, 0x7cb2, 0x7819, 0x9, 0x3, 0x0, 0x3, 0xffffffff, 0x0, 0xe, 0x4, 0x3, 0x1, 0x3, 0x4, 0x4, 0x6, 0x1ebb, 0x1, 0x0, 0x7, 0xfffffff8, 0xf, 0x9, 0x8, 0x7, 0x5, 0x3, 0xfffffff6, 0x800, 0x8, 0x7, 0x9, 0x3, 0x8, 0x4, 0x6d18932a, 0x3, 0x51b9, 0x2, 0x7, 0x1, 0x0, 0x3, 0xffffffff, 0x4, 0x1292000, 0x8, 0xd95, 0x0, 0xce8, 0x7fff, 0x9, 0x100, 0x1, 0x0, 0xb, 0x7ff, 0x80000000, 0x3, 0x10001, 0x1, 0x8000, 0x4, 0x9, 0x9, 0x80000000, 0x56, 0x401, 0x3, 0x0, 0x5, 0x8, 0x2, 0x6, 0x2, 0x3, 0x7, 0x7, 0x3ff, 0x1, 0x9, 0x1ff, 0x8, 0xfffffff9, 0x8967, 0x2, 0x5, 0xf918, 0x9b8, 0x800, 0xd, 0x3799e874, 0x41, 0x100, 0x5, 0x3ff, 0x7, 0x6, 0xd49, 0x4, 0x10000, 0x9, 0x7, 0x401, 0x9, 0x2, 0x8, 0x29a4, 0xda64, 0x4, 0x2, 0xbc0, 0x7f, 0x6, 0x2, 0x0, 0x0, 0x10001, 0xb2, 0x8, 0x2, 0xfffffc5b, 0x3, 0x1, 0x2, 0x81, 0x101, 0x8, 0x10000, 0x6089, 0x7, 0x4, 0x6, 0x7f, 0x8, 0x5dd, 0x10000, 0x9, 0x5, 0xfffffc01, 0xff, 0x5, 0x4, 0x0, 0x80000001, 0x7, 0x0, 0x200, 0x2, 0x4cf6, 0x1, 0xd8b9545, 0x2, 0x6, 0x70000000, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3aeb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x40, 0x5, 0x9, 0x2, 0x8, 0x5, 0x4, 0x9, 0x3, 0x1000, 0x4, 0x3, 0x80, 0x4, 0x8, 0x1c4c5d0, 0x7, 0xfff, 0x8, 0x200, 0x5, 0x4, 0xd9f1, 0x7fff, 0x4, 0xc3, 0x1, 0x5, 0x81, 0x5, 0x7f, 0xffffffff, 0x4, 0x8, 0x7, 0x8, 0xfffffffa, 0x990, 0xc96, 0x1, 0x2, 0x5, 0x6, 0x2, 0xa093, 0x4, 0x1ff, 0x7, 0x7fffffff, 0xffffffff, 0x0, 0x8, 0x5, 0x9, 0x8, 0x1, 0x400, 0x7, 0xffffff7f, 0x3, 0xa766, 0x727, 0x5, 0x2, 0xc7c, 0x4, 0x4811, 0x7c3, 0x8c21, 0x124b5b37, 0x3, 0x8, 0x0, 0x0, 0xfffffbff, 0x0, 0x4, 0x10000, 0x9, 0x6, 0x5, 0xe, 0x7, 0x81, 0x3e, 0xb, 0x7, 0x9554, 0x8, 0x100, 0x8, 0x8, 0x593, 0x8, 0xf, 0x0, 0xdc05, 0x5, 0x3, 0x1, 0x401, 0x40, 0x6a13b238, 0x4, 0x33, 0x2, 0x6, 0x8, 0x3, 0x375, 0x6, 0x4, 0x8, 0xcd, 0xd, 0xfffffffb, 0x0, 0x0, 0x3, 0x961, 0x9, 0xffff8001, 0x7fff, 0x6, 0x9, 0x9, 0x5, 0x3ff, 0x3, 0x2, 0xfffffffb, 0x6, 0x2, 0x0, 0xf56, 0x7, 0x4, 0x0, 0x2, 0x55, 0xf, 0x9, 0x9c, 0xa3d1, 0x0, 0x24, 0x4, 0x2, 0xd, 0x0, 0x6, 0x142, 0x2, 0x64, 0x8, 0x400, 0x6, 0x1, 0x7, 0x5, 0xa, 0x8e, 0x0, 0x7, 0x10001, 0x4, 0x1f, 0x1, 0x4, 0x3, 0x0, 0x80000000, 0x80000000, 0xfff00000, 0x6aba, 0x10001, 0xfffffcef, 0x6, 0xa, 0x38af, 0x72, 0x9, 0x840b, 0x8, 0x0, 0x2, 0x180, 0x0, 0x8, 0x8, 0x5, 0x8ff4, 0x3, 0x2, 0x6, 0x4, 0x10000, 0x6, 0x2, 0x7, 0x3, 0xfff, 0x1, 0xfffffffd, 0x7, 0x599, 0x96, 0xfa, 0x6, 0x80000001, 0x1, 0x2, 0xcc0, 0x200, 0x7, 0x6, 0x4, 0xffffffbd, 0x7, 0x4333, 0x1, 0xc8d, 0x9, 0x800, 0x0, 0x7fff, 0xae0, 0x63b, 0x8, 0x400, 0x4, 0x0, 0x9cc5, 0x3, 0x9, 0x0, 0xa, 0x8, 0x5825a114, 0x5, 0x4, 0x1, 0x5, 0x2, 0x5, 0x2, 0x9, 0x3d5e, 0x8, 0x2, 0x1, 0xffffffff, 0x2, 0x6, 0x9]}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0x8}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffff, 0xc}}, @TCA_ROUTE4_TO={0x8, 0x2, 0x7c}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x1510, 0x6, [@m_ife={0x70, 0x6, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x747}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}]}, {0x2f, 0x6, "b6cdf2a527759c8700fcf7e68f2291e732e25f13194ca14955d3ca4634678407019190b7e7341ba1848f4a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x124, 0x19, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1b, 0xeaf, 0x8, 0xfffffffc, 0x10}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8001, 0xc, 0x10000000, 0x7, 0x1}}}]}, {0xa9, 0x6, "aa42ec88b2b83293abbec9ba3cd6504f37ee6254cdbbf3962ccc5c8e044d38891d4142d49e02b103c767e04cd24f2e97d37c9133e2336badd2d7ac00ab75cbe055ffe3983060da92f224a7d24fc530c33042496acfd9718b7996b04f2d5ee73d8edc06120602cfa747e97f69248e25fa009af9a3939960b8abbc3f8c424349023f667be4bd194e71c22123380b84b12ce489d5790676f56b265a699cfe7906989be9d99c2d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0xb4, 0xe, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x8, 0x10000000, 0xa, 0x1}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x448, 0xfffffffb, 0x8, 0x9, 0xa4c}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xc000}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x9, 0x7, 0xa0000000, 0xffffffc0}}]}, {0x3b, 0x6, "a72a91a7119db557742288959b99c124bf1747889a1d9ecdc7c7752ffc570fa25dd16365f00bf5b3a366db1c2fd5531e7569db93dcfbeb"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_gact={0x174, 0x1b, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x5f7, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x103d, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1, 0xfffffffffffffffd, 0x847c647, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x234f, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xf72, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xb, 0x6, 0x6, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x23cc, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x8c6, 0x8}}]}, {0xd0, 0x6, "60a31150e7102a52020d993c6d6eed0fa5a4c3774ac12b8131e266c839f8c5df5ca03e9476e12f583b35f0d763baa587c825351ce3b632e6ac489abe28ca42086094fca417e9a8d442dec62608f8a40bf3cbd4ee07616124fe7bebd3f6ac1fa0d53870ebc245a864210ecd0dbb5ea0f817e90b3aa076b1eb4031ef0ae1b44b37f54a03cfd6accf287e17cb160f8b79f1cde495ff77e0175061af643ef3b7cfe90dfa56d7489a86918d56043d5d755eedd577ae08b110cae01f19c5b383e723b3793b99fcdafdcadd18f732f7"}, {0xc, 0x7, {0x85d21fe2b70e5852, 0x1}}, {0xc, 0x8, {0x6b095d58da0e4d79}}}}, @m_connmark={0xd4, 0x13, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcf06, 0x5, 0x0, 0x20c, 0x3e}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x9, 0x2, 0x7, 0x1}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0x5, 0x4, 0x4, 0x5}, 0x401}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xd0, 0xfffffffffffffffa, 0x5, 0x452}, 0x2}}]}, {0x32, 0x6, "d654f15718e9384573c9318bd252f8f95b0cba373ac97c12091a35beb0a53739226b5b7fb603e4c4e3f831cc96ac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_nat={0x107c, 0x1e, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x921, 0x6, 0x2, 0x0, 0xfffffbff}, @rand_addr=0x64010100, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd283a1c7, 0xff, 0x6, 0x4, 0x1}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}]}]}}]}, 0x1d94}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r11 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xed000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$USBDEVFS_DISCONNECT_CLAIM(r11, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e008104df635e731a5bfcd942f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd4f6cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_CONTROL(r11, 0xc0185500, &(0x7f0000000140)={0x2, 0x13, 0x0, 0x1, 0xfffffffffffffcec, 0x0, 0x0}) 23m54.773083223s ago: executing program 33 (id=1743): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8240, 0x0) read$alg(r3, &(0x7f0000000240)=""/4096, 0xfffffdef) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x7, r4, 0x4, {0x9, 0x5}, 0x47}, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001280), 0x200903, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x22, 0x3, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGREP(r7, 0x80084503, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000008, 0x6131, 0xffffffffffffffff, 0x1a688000) r8 = socket$unix(0x1, 0x1, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) ioctl$TUNSETCARRIER(r9, 0x400454e2, &(0x7f0000000000)=0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0x9, 0xffff}, {0x1, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x35}}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x1d94, 0x2c, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xffff, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x1d64, 0x2, [@TCA_ROUTE4_POLICE={0x828, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x1, 0xffffff12, 0x6, 0x9, 0x6, 0x101, 0x6, 0x400, 0x3ff, 0x4, 0x2, 0x8, 0x2, 0x5, 0x8001, 0x1, 0x6, 0x3fb7b1f2, 0x0, 0x2, 0x36, 0x3, 0x7096, 0x7ff, 0xffffffff, 0x4, 0x9, 0xa, 0x8000, 0x400, 0x80000001, 0x7, 0x2, 0x7, 0x1, 0x0, 0x2, 0x9, 0xfffffe00, 0x7, 0xa2cc, 0x7, 0xc833, 0x4, 0xfffffffe, 0x4, 0x1, 0x8, 0x0, 0xf, 0x4, 0xbbac, 0x3260, 0xa61, 0x3, 0x9, 0xee95, 0x34, 0x5c, 0x81, 0x401, 0x9, 0x4, 0x10000, 0xa, 0x6, 0x8, 0x3, 0x800, 0x7ff, 0xe, 0x50, 0x0, 0x1, 0x5, 0x10001, 0x4, 0xfffffffa, 0x9, 0x3ff, 0xc, 0x2, 0x2, 0x3, 0x8, 0x9, 0x7f, 0xfffffffb, 0x0, 0x42, 0x7, 0xb, 0x6, 0xc000, 0x1, 0x6000, 0x0, 0x9, 0xba, 0x7cb2, 0x7819, 0x9, 0x3, 0x0, 0x3, 0xffffffff, 0x0, 0xe, 0x4, 0x3, 0x1, 0x3, 0x4, 0x4, 0x6, 0x1ebb, 0x1, 0x0, 0x7, 0xfffffff8, 0xf, 0x9, 0x8, 0x7, 0x5, 0x3, 0xfffffff6, 0x800, 0x8, 0x7, 0x9, 0x3, 0x8, 0x4, 0x6d18932a, 0x3, 0x51b9, 0x2, 0x7, 0x1, 0x0, 0x3, 0xffffffff, 0x4, 0x1292000, 0x8, 0xd95, 0x0, 0xce8, 0x7fff, 0x9, 0x100, 0x1, 0x0, 0xb, 0x7ff, 0x80000000, 0x3, 0x10001, 0x1, 0x8000, 0x4, 0x9, 0x9, 0x80000000, 0x56, 0x401, 0x3, 0x0, 0x5, 0x8, 0x2, 0x6, 0x2, 0x3, 0x7, 0x7, 0x3ff, 0x1, 0x9, 0x1ff, 0x8, 0xfffffff9, 0x8967, 0x2, 0x5, 0xf918, 0x9b8, 0x800, 0xd, 0x3799e874, 0x41, 0x100, 0x5, 0x3ff, 0x7, 0x6, 0xd49, 0x4, 0x10000, 0x9, 0x7, 0x401, 0x9, 0x2, 0x8, 0x29a4, 0xda64, 0x4, 0x2, 0xbc0, 0x7f, 0x6, 0x2, 0x0, 0x0, 0x10001, 0xb2, 0x8, 0x2, 0xfffffc5b, 0x3, 0x1, 0x2, 0x81, 0x101, 0x8, 0x10000, 0x6089, 0x7, 0x4, 0x6, 0x7f, 0x8, 0x5dd, 0x10000, 0x9, 0x5, 0xfffffc01, 0xff, 0x5, 0x4, 0x0, 0x80000001, 0x7, 0x0, 0x200, 0x2, 0x4cf6, 0x1, 0xd8b9545, 0x2, 0x6, 0x70000000, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3aeb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x40, 0x5, 0x9, 0x2, 0x8, 0x5, 0x4, 0x9, 0x3, 0x1000, 0x4, 0x3, 0x80, 0x4, 0x8, 0x1c4c5d0, 0x7, 0xfff, 0x8, 0x200, 0x5, 0x4, 0xd9f1, 0x7fff, 0x4, 0xc3, 0x1, 0x5, 0x81, 0x5, 0x7f, 0xffffffff, 0x4, 0x8, 0x7, 0x8, 0xfffffffa, 0x990, 0xc96, 0x1, 0x2, 0x5, 0x6, 0x2, 0xa093, 0x4, 0x1ff, 0x7, 0x7fffffff, 0xffffffff, 0x0, 0x8, 0x5, 0x9, 0x8, 0x1, 0x400, 0x7, 0xffffff7f, 0x3, 0xa766, 0x727, 0x5, 0x2, 0xc7c, 0x4, 0x4811, 0x7c3, 0x8c21, 0x124b5b37, 0x3, 0x8, 0x0, 0x0, 0xfffffbff, 0x0, 0x4, 0x10000, 0x9, 0x6, 0x5, 0xe, 0x7, 0x81, 0x3e, 0xb, 0x7, 0x9554, 0x8, 0x100, 0x8, 0x8, 0x593, 0x8, 0xf, 0x0, 0xdc05, 0x5, 0x3, 0x1, 0x401, 0x40, 0x6a13b238, 0x4, 0x33, 0x2, 0x6, 0x8, 0x3, 0x375, 0x6, 0x4, 0x8, 0xcd, 0xd, 0xfffffffb, 0x0, 0x0, 0x3, 0x961, 0x9, 0xffff8001, 0x7fff, 0x6, 0x9, 0x9, 0x5, 0x3ff, 0x3, 0x2, 0xfffffffb, 0x6, 0x2, 0x0, 0xf56, 0x7, 0x4, 0x0, 0x2, 0x55, 0xf, 0x9, 0x9c, 0xa3d1, 0x0, 0x24, 0x4, 0x2, 0xd, 0x0, 0x6, 0x142, 0x2, 0x64, 0x8, 0x400, 0x6, 0x1, 0x7, 0x5, 0xa, 0x8e, 0x0, 0x7, 0x10001, 0x4, 0x1f, 0x1, 0x4, 0x3, 0x0, 0x80000000, 0x80000000, 0xfff00000, 0x6aba, 0x10001, 0xfffffcef, 0x6, 0xa, 0x38af, 0x72, 0x9, 0x840b, 0x8, 0x0, 0x2, 0x180, 0x0, 0x8, 0x8, 0x5, 0x8ff4, 0x3, 0x2, 0x6, 0x4, 0x10000, 0x6, 0x2, 0x7, 0x3, 0xfff, 0x1, 0xfffffffd, 0x7, 0x599, 0x96, 0xfa, 0x6, 0x80000001, 0x1, 0x2, 0xcc0, 0x200, 0x7, 0x6, 0x4, 0xffffffbd, 0x7, 0x4333, 0x1, 0xc8d, 0x9, 0x800, 0x0, 0x7fff, 0xae0, 0x63b, 0x8, 0x400, 0x4, 0x0, 0x9cc5, 0x3, 0x9, 0x0, 0xa, 0x8, 0x5825a114, 0x5, 0x4, 0x1, 0x5, 0x2, 0x5, 0x2, 0x9, 0x3d5e, 0x8, 0x2, 0x1, 0xffffffff, 0x2, 0x6, 0x9]}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0x8}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffff, 0xc}}, @TCA_ROUTE4_TO={0x8, 0x2, 0x7c}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x1510, 0x6, [@m_ife={0x70, 0x6, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x747}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}]}, {0x2f, 0x6, "b6cdf2a527759c8700fcf7e68f2291e732e25f13194ca14955d3ca4634678407019190b7e7341ba1848f4a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x124, 0x19, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1b, 0xeaf, 0x8, 0xfffffffc, 0x10}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8001, 0xc, 0x10000000, 0x7, 0x1}}}]}, {0xa9, 0x6, "aa42ec88b2b83293abbec9ba3cd6504f37ee6254cdbbf3962ccc5c8e044d38891d4142d49e02b103c767e04cd24f2e97d37c9133e2336badd2d7ac00ab75cbe055ffe3983060da92f224a7d24fc530c33042496acfd9718b7996b04f2d5ee73d8edc06120602cfa747e97f69248e25fa009af9a3939960b8abbc3f8c424349023f667be4bd194e71c22123380b84b12ce489d5790676f56b265a699cfe7906989be9d99c2d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0xb4, 0xe, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x8, 0x10000000, 0xa, 0x1}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x448, 0xfffffffb, 0x8, 0x9, 0xa4c}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xc000}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x9, 0x7, 0xa0000000, 0xffffffc0}}]}, {0x3b, 0x6, "a72a91a7119db557742288959b99c124bf1747889a1d9ecdc7c7752ffc570fa25dd16365f00bf5b3a366db1c2fd5531e7569db93dcfbeb"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_gact={0x174, 0x1b, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x5f7, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x103d, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1, 0xfffffffffffffffd, 0x847c647, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x234f, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xf72, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xb, 0x6, 0x6, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x23cc, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x8c6, 0x8}}]}, {0xd0, 0x6, "60a31150e7102a52020d993c6d6eed0fa5a4c3774ac12b8131e266c839f8c5df5ca03e9476e12f583b35f0d763baa587c825351ce3b632e6ac489abe28ca42086094fca417e9a8d442dec62608f8a40bf3cbd4ee07616124fe7bebd3f6ac1fa0d53870ebc245a864210ecd0dbb5ea0f817e90b3aa076b1eb4031ef0ae1b44b37f54a03cfd6accf287e17cb160f8b79f1cde495ff77e0175061af643ef3b7cfe90dfa56d7489a86918d56043d5d755eedd577ae08b110cae01f19c5b383e723b3793b99fcdafdcadd18f732f7"}, {0xc, 0x7, {0x85d21fe2b70e5852, 0x1}}, {0xc, 0x8, {0x6b095d58da0e4d79}}}}, @m_connmark={0xd4, 0x13, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcf06, 0x5, 0x0, 0x20c, 0x3e}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x9, 0x2, 0x7, 0x1}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0x5, 0x4, 0x4, 0x5}, 0x401}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xd0, 0xfffffffffffffffa, 0x5, 0x452}, 0x2}}]}, {0x32, 0x6, "d654f15718e9384573c9318bd252f8f95b0cba373ac97c12091a35beb0a53739226b5b7fb603e4c4e3f831cc96ac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_nat={0x107c, 0x1e, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x921, 0x6, 0x2, 0x0, 0xfffffbff}, @rand_addr=0x64010100, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd283a1c7, 0xff, 0x6, 0x4, 0x1}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}]}]}}]}, 0x1d94}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r11 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xed000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$USBDEVFS_DISCONNECT_CLAIM(r11, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e008104df635e731a5bfcd942f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd4f6cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_CONTROL(r11, 0xc0185500, &(0x7f0000000140)={0x2, 0x13, 0x0, 0x1, 0xfffffffffffffcec, 0x0, 0x0}) 16.020084138s ago: executing program 4 (id=6036): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 15.894911127s ago: executing program 4 (id=6037): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (fail_nth: 3) 15.455559697s ago: executing program 4 (id=6038): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a0102000000000000000001000000"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 15.097590869s ago: executing program 4 (id=6039): syz_usb_connect(0x3, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xc, 0xcb, 0xc7, 0x40, 0x7c0, 0x1503, 0xb0de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc2, 0x0, 0x1, 0x9c, 0xe, 0xe5, 0x0, [], [{{0x9, 0x5, 0x8a, 0x3}}]}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x743c7178}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0x1004, &(0x7f00000004c0)=""/4100, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[@ANYRES64=0xffffffffffffffff, @ANYRESOCT=0x0], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="0015f700000004", @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x9) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={r3, 0x3bce}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x23a, &(0x7f0000000740)={0x0, 0xda52, 0x10100, 0x3, 0x1000, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) recvmmsg(r10, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}, 0xffff8001}], 0x1, 0x100, 0x0) write(r10, &(0x7f0000000380)="240000001e005f0214e0ffffffffff8dd5d6d87c998ff807000000000000000000000003", 0x7e) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r11, 0x6, 0x1e, 0x0, &(0x7f0000002000)) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x200, 0x20) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r12, 0x84, 0x81, &(0x7f0000000040)="020000000980ffff", 0x8) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000001c0)={0xc, &(0x7f0000000040)={0x20, 0x10, 0x2c, {0x2c, 0x10, "934098af6df434eef98e45f52f990b2b1f12f4f4928a65a17e5e457a10272a3699e33b83283612c44000"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x10, &(0x7f0000000440)={0x20, 0x10, 0x57, "1993f20d1953f7b326e1ad480632556ecb9f7810f0f17e3769e5899470de4c8c20edd10a0683e59507aadf876728f97b7c422b4a606641bc160c3fdcc6fbaf5fec3dbada26edfdd987e045294c7d96aa3fd9645c73aea9"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}}) 12.253863581s ago: executing program 6 (id=6044): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000000)={0x0, 0x2}, 0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r7, @ANYRES16=r5], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000980)=0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) 11.882640317s ago: executing program 4 (id=6045): getegid() (async) socket$nl_generic(0x10, 0x3, 0x10) (async) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, 0x7, &(0x7f0000000040)={[0x3, 0x4]}, 0xfffffffffffffcc5) (async) socket$kcm(0x10, 0x2, 0x4) (async) socket$netlink(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) (async, rerun: 64) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (rerun: 64) 10.860559532s ago: executing program 4 (id=6051): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000008e000000c9"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="911042000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 9.010213648s ago: executing program 6 (id=6056): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="200406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0xa4, 0x18, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r1}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r5, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3, 0x5}}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x6ec}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "4315fb"}]}], {0x14}}, 0x74}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @remote}, "f2dfbc81cfe0ca1b360883fff0380bc5"}}}}, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000040)={0x1, 0xd4, 0x5, &(0x7f0000000080)={0x3, "42cae8b3df20afbcf8dd178c50e5d84526580489d79a473f112453b228922bd31c"}}) 7.069720596s ago: executing program 0 (id=6057): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e26, @rand_addr=0xdffffc13}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x2, 0xe}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r4 = gettid() timer_create(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x3, &(0x7f0000000040)=[&(0x7f0000a0d000/0x3000)=nil, &(0x7f0000a77000/0x3000)=nil, &(0x7f0000a3a000/0x1000)=nil], &(0x7f0000000100)=[0x1], &(0x7f0000000380), 0x2) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x200000, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) open(0x0, 0x6440, 0x81) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x400001, 0x1) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f00000000c0)='./file0\x00') 6.898189777s ago: executing program 5 (id=6060): socket$l2tp6(0xa, 0x2, 0x73) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffd3d) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) flock(0xffffffffffffffff, 0x4) r2 = timerfd_create(0x0, 0x800) timerfd_settime(r2, 0x3, &(0x7f0000000200)={{0x0, 0x3938700}, {0x77359400}}, 0x0) ptrace(0x10, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 6.667591103s ago: executing program 6 (id=6062): r0 = openat$vnet(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev2(r0, &(0x7f0000002300)=[{&(0x7f0000002100)="1df71aa51c", 0x5}, {0x0}], 0x2000000000000395, 0x8, 0x7ffd, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x7, 0x210100) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000080)={0x3, 0x7f, 0xd48, 0x2, 0x401, 0x5}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000000c0)={0x0, 0xc9, 0x7d, 0x20203143, 0x2, [0x2], [0x101, 0x2]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x4}, 0x0) r5 = socket(0x6, 0x80805, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x2, 0x4, 0x548, 0xffffffff, 0x31c, 0x0, 0x31c, 0xfeffffff, 0xffffffff, 0x480, 0x480, 0x480, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x20c, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0x0, [0x7, 0x3f3], 0x48004, 0x9, 0x0, [@local, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @empty, @private2={0xfc, 0x2, '\x00', 0x2}, @loopback, @empty, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1b}, @private1, @dev={0xfe, 0x80, '\x00', 0x40}, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}], 0xe}}, @common=@ah={{0x30}, {[0x4d3, 0x4d5], 0x0, 0x3, 0x1}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'syzkaller1\x00', {0x4}}}}, {{@uncond, 0x0, 0x130, 0x164, 0x0, {}, [@common=@srh1={{0x8c}, {0x6774475f98909cb4, 0x0, 0x6, 0x0, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], [0xff, 0xff000000, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000], 0xa9c, 0x1801}}]}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5a4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 5.949132854s ago: executing program 5 (id=6064): openat$tun(0xffffff9c, &(0x7f0000000140), 0x90000, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x480, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x140, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x0, 0x80000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a01040000000000000000020000002400048020000180070001806374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0xe, 0x3ff, 0x8f2, 0x10, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x1, @void, @value, @void, @value}, 0x50) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)='K', 0x1}], 0x1}}], 0x1, 0x8000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000140)=0x8) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r7, 0x100000e00000, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x800}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={r6, 0x35c, 0x6, 0x1, 0x0, 0x5, 0x9, 0x800, {r8, @in={{0x2, 0x4e24, @broadcast}}, 0x401, 0xfff, 0x7fffffff, 0x9, 0x601f}}, &(0x7f0000000500)=0xb0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x1, 0x0, 0x9, 0x0, 0x3, 0x1}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) 5.855553868s ago: executing program 1 (id=6065): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e060c"], 0x9) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x8, &(0x7f0000000240)=[{}], 0x1, 0x1, 0x0, 0x41, 0x0, 0x2}) madvise(&(0x7f0000ae1000/0x4000)=nil, 0x4000, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x28, {0x5, 0xfffffffffffffff7}}, 0x513300) syz_io_uring_setup(0x5dc1, &(0x7f00000000c0)={0x0, 0xb468, 0x20, 0x3, 0x10a, 0x0, r1}, &(0x7f0000000040), &(0x7f0000000180)) mkdir(&(0x7f0000000140)='./control\x00', 0x5) mmap$IORING_OFF_CQ_RING(&(0x7f00006b2000/0x2000)=nil, 0x2000, 0x2000009, 0x20010, 0xffffffffffffffff, 0x8000000) ftruncate(r0, 0xd) 5.339821625s ago: executing program 0 (id=6066): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) uname(&(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0xfd, 0x0, 0xa5, 0xbd, 0x1, 0x8, 0x4, 0x0, 0x2, 0x40000000}, {0x4, 0x8, 0x0, 0x0, 0x41, 0x0, 0x0, 0x4, 0x6, 0xff, 0x5, 0x2, 0x4}, {0x3fe, 0x9, 0x0, 0x6, 0x0, 0xf0, 0xb3, 0x0, 0xff, 0x0, 0x80, 0xf5, 0x7}], 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.851402061s ago: executing program 5 (id=6067): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() socket$key(0xf, 0x3, 0x2) sched_setscheduler(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x40011}, 0x400c0) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002080)=""/4082, 0xff2}], 0x1}}], 0x2, 0x40012141, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002bc0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r6, @ANYBLOB="00410000000000001c002b8008000100", @ANYRES32, @ANYBLOB="0800030019000000080008"], 0x3c}}, 0x4000000) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket(0xb, 0x3, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000200)='.\x00', 0x400) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000062c0)=[{&(0x7f0000000380)="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", 0x3e2}, {&(0x7f00000041c0)="1269da71e0cc9189ddd4d5bc965cef", 0xf}], 0x2, 0x0, 0x0, 0x4}}], 0x1, 0x1) 4.671289872s ago: executing program 6 (id=6068): add_key$user(0x0, 0x0, &(0x7f0000000080)="99", 0x1, 0xfffffffffffffffc) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x40, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @generic={0x3, 0x2}]}}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x6, 0x17, 0xd0, 0x20, 0xdba, 0x5000, 0x11bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x12, 0x10, 0x89}}]}}]}}, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000140)={0x7, @raw_data="432af7a24ec55185678ad34f291f5696d11e2835e9b1371e234af3b5a46fd2f0dc846a2fb0c5c6f7d0bd90d92ddbb5812d9f292970db75fb6827d618b24d87a1a5880d422e82e3be519fd385b6bec2ef31feb5e13f9c0459aab4e07050368167b04025819facccf6eb5acac7e6b95d02bb0ea2bbb151ccecffcafb45e0ae189430f28c0697b181c22bb211741d58239ad3c201056b53a0825384bc46877c97e979e8e05f563de633e14e5de612a0288dad47921c814b87ebddf0ae3213dd209cc1cdb1751108ac3a"}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = semget$private(0x0, 0x20000000102, 0x0) semctl$GETALL(r2, 0x0, 0xd, &(0x7f00000000c0)=""/120) 4.450786968s ago: executing program 1 (id=6069): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (fail_nth: 3) 3.944842929s ago: executing program 1 (id=6070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a320000"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 3.504017604s ago: executing program 1 (id=6071): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x7c, &(0x7f0000000240)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x46, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x0, [0x0]}, {}, {}, {0x8, 0x88be, 0x2}, {0x8, 0x22eb, 0x1000, {{}, 0x2, {0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 3.300305896s ago: executing program 1 (id=6072): socket$kcm(0x10, 0x1, 0x0) r0 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v1to_da_alloc', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x8) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = io_uring_setup(0x324d, &(0x7f00000000c0)={0x0, 0x8084b2, 0x1, 0x402, 0x2}) io_uring_enter(r5, 0x0, 0x1, 0xf, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ptrace$setsig(0x4203, r4, 0x44, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r7, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x8) r8 = openat$vim2m(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_RESET_DIRTY_RINGS(r7, 0xaec7) waitid(0x1, 0x0, &(0x7f00000003c0), 0x2, &(0x7f0000000040)) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000014, 0x0, 0x0) socket(0x2a, 0x1, 0x6) 2.302461743s ago: executing program 0 (id=6073): socket$l2tp6(0xa, 0x2, 0x73) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffd3d) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) flock(0xffffffffffffffff, 0x4) r2 = timerfd_create(0x0, 0x800) timerfd_settime(r2, 0x3, &(0x7f0000000200)={{0x0, 0x3938700}, {0x77359400}}, 0x0) ptrace(0x10, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 1.356841651s ago: executing program 6 (id=6074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptp0(0xffffff9c, &(0x7f0000000040), 0x84803, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x234, 0x7, 0x8, 0x101, 0x70bd2c, 0x25dfdbfc, {0x3}, [@typed={0x8, 0xdf, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x7b, 0xc0, 0x0, 0x1, [@nested={0x4, 0x13}, @typed={0x4, 0xb8}, @nested={0x4, 0x14c}, @nested={0x4, 0x35}, @nested={0x4, 0xe0}, @generic="b044383cccda5ae400513c9173e804ee9b4376140cc84300b6199d5c6da7fa3b0d0756b1bc4ea550a79e5e14695f1471eca643fddadd93f56c19b9c818ef9184350002994730b44f78131f5372ceb02fe3b6bee7ea74d46f3375e321564b160471d931"]}, @generic="5c095dc7378992e255f8a2858b0704296058880e24ae82021b36fa6116f48c1fdb86e709b9fbe0c1b754c32dc9044af89bb6f76ef463203dce2678e8437670d2e1302ff9d30699a6f6e463f0368295371ca8833d5e7d87d359a0859a", @typed={0xc, 0x99, 0x0, 0x0, @u64}, @generic="c327abb44bf394f6b48a742952e7307e94d545adc3493b2517978e9ff750d6b1948c6e35a0b37922f0f0108389e17154171943ad4e5353a6d636692ab6ef63e1b8ac7cb538d014bdb08ce66ee9ccafcc0b3cff7c82f074e4d359cf0d0415acd24915720fceb53d1386c20930ebea14de3da32972d4ec6db2e77f4f7003510d95e456edf02d0cc15ee9631cec9146c5ed7e5671994534f0cc86cb7689454be399a256fb5f0216eac96117ba48", @generic="c610b5cb68a4c30013966ba440cef58a87c19018", @nested={0xc, 0xb0, 0x0, 0x1, [@typed={0x8, 0x104, 0x0, 0x0, @fd=r1}]}, @nested={0x66, 0xae, 0x0, 0x1, [@nested={0x4, 0xd1}, @nested={0x4, 0x59}, @typed={0x5, 0x137, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x6c}, @nested={0x4, 0x55}, @generic="cea514311296a39caad51d6c25bacea9d719a54e734520506d640a5c4c2faffb55f6263c752617f4bd4c20783ee32990fbbc833a078d00dc19dfd0622cb8", @nested={0x4, 0x149}, @nested={0x4, 0x71}, @nested={0x4, 0xe9}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x1}, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x431, 0x2101) ioctl$SG_BLKTRACESTOP(r2, 0x1275, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x4, 0x640000) r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x2, 0x3, 0x0, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8010) syz_io_uring_setup(0x29ae, &(0x7f0000000540)={0x0, 0xc196, 0x8000, 0x0, 0x312, 0x0, r4}, &(0x7f00000005c0), &(0x7f0000000600)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000640)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc01c7c02, &(0x7f0000000740)={0x80000000, &(0x7f0000000680), &(0x7f00000006c0)}) openat$vmci(0xffffff9c, &(0x7f0000000780), 0x2, 0x0) statx(r4, &(0x7f0000000840)='./file0\x00', 0x400, 0x40, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x101400, &(0x7f0000000980)={{'fd', 0x3d, r4}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x800}}], [{@smackfshat={'smackfshat', 0x3d, '/dev/vmci\x00'}}, {@subj_user={'subj_user', 0x3d, '/dev/sg#\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/vmci\x00'}}, {@obj_type={'obj_type', 0x3d, '/dev/sg#\x00'}}, {@obj_type}]}}) getpeername$packet(r4, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b00)=0x14) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000b40)={0xc0000000}) r7 = syz_open_dev$vcsa(&(0x7f0000000b80), 0x6, 0x80) ioctl$SG_SET_FORCE_PACK_ID(r7, 0x227b, &(0x7f0000000bc0)) getresuid(&(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)) r8 = openat$cgroup_ro(r4, &(0x7f0000000cc0)='cgroup.controllers\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x43, &(0x7f0000000d00)={'ah\x00'}, &(0x7f0000000d40)=0x1e) write$uinput_user_dev(r8, &(0x7f0000000d80)={'syz0\x00', {0x9, 0x349b, 0x10, 0x2783}, 0x47, [0x2, 0x8, 0x4, 0x8883, 0x400, 0x7, 0x7, 0x5, 0x9, 0x1, 0x0, 0x8001, 0x10000, 0x7ff, 0xfffffffb, 0x6, 0x7, 0xa2e, 0x92, 0x5, 0x3, 0x4, 0xc000000, 0x1, 0x40, 0x8, 0x9, 0x7656, 0x5, 0xedf0, 0x0, 0x0, 0x89, 0x6, 0x400, 0x80000001, 0x4, 0x67, 0xd, 0xd, 0x3, 0xe, 0x7, 0x3, 0xe, 0xc40, 0x8, 0x7, 0x40, 0x3, 0x5, 0x4, 0x800, 0x0, 0x4, 0x16, 0x8, 0xac, 0x7, 0x5, 0x6, 0x8, 0x9f, 0x4], [0x93, 0x6, 0x1, 0x8, 0x8000, 0x4, 0x101, 0x1, 0x1, 0x9, 0x5, 0x7, 0x7, 0x0, 0x3, 0x7, 0x7, 0x81, 0xadad, 0xac, 0x7, 0x1ff, 0x40, 0x5db5a4ec, 0x8, 0x10001, 0x6, 0x1, 0x1, 0xfffffff9, 0xa5, 0x9, 0x7, 0xbb, 0x0, 0x5, 0x8, 0xfff, 0x7fffffff, 0x1, 0x2, 0xe704, 0x5, 0x101, 0x5, 0x0, 0x5, 0x8, 0x100, 0x0, 0x59c, 0xb4c6, 0x3, 0xb, 0x5, 0x4, 0xf, 0x8, 0xa, 0x2, 0xc70f, 0x7, 0x6, 0x4], [0x1, 0x3000000, 0x7, 0x4, 0x5, 0x7f, 0x6, 0x0, 0x8, 0x0, 0x2, 0x5, 0x2, 0x3, 0x4, 0x53, 0x1, 0x100, 0x6, 0x2, 0xe, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x9, 0xa948, 0x0, 0x5, 0x4, 0x4, 0x0, 0x1, 0x5dd92a5b, 0x1, 0x3, 0x0, 0xe0d, 0x2, 0x401, 0xfffffffb, 0x3, 0x1, 0x39a, 0x0, 0x400, 0x7f, 0x2, 0x3e, 0xfff00000, 0x9, 0x5, 0x9, 0x0, 0x6, 0x0, 0x0, 0x7, 0x3, 0x70, 0x5, 0x1], [0x8, 0x8, 0x4, 0x0, 0x10000, 0x9, 0xfffffff7, 0x480, 0xfffffffb, 0x2, 0x1, 0x8, 0x7, 0x4, 0x81, 0xcd, 0x1bbf, 0x8, 0x8f4, 0xffffffff, 0x200, 0x2, 0x5, 0x9, 0x4, 0x6, 0xffffffff, 0x8, 0x5, 0x7, 0x7fffffff, 0xfffffff7, 0x3ff, 0x4, 0x0, 0xb5f, 0xa, 0xfffffffb, 0x1, 0x3938, 0x1, 0x5, 0x3, 0x9, 0x1, 0x7, 0x1, 0x1, 0x9a64, 0xfff, 0x71, 0x0, 0x200, 0xd5b, 0x3, 0x3, 0x6, 0x9, 0x3, 0x5, 0x5, 0x5, 0x0, 0x5]}, 0x45c) r9 = syz_open_dev$vcsn(&(0x7f0000001200), 0xfffffffe, 0x4200) ioctl$SG_SET_COMMAND_Q(r9, 0x2271, &(0x7f0000001240)) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$6lowpan_enable(0xffffff9c, &(0x7f0000001280), 0x2, 0x0) write$6lowpan_enable(r10, &(0x7f00000012c0)='1', 0x1) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 1.356198704s ago: executing program 5 (id=6075): r0 = memfd_create(&(0x7f0000001dc0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#\xbd\n/\xb2\'\x16X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\x007\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.054882755s ago: executing program 6 (id=6077): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x6be, &(0x7f0000000500)={{0x12, 0x1, 0x300, 0x74, 0xcb, 0x42, 0x8, 0x2040, 0x846d, 0x3e83, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6ac, 0x3, 0x7, 0x6, 0x20, 0x4, [{{0x9, 0x4, 0xba, 0x5, 0x0, 0xa0, 0x5c, 0x48, 0x8}}, {{0x9, 0x4, 0xb4, 0xfa, 0xf, 0x7c, 0x2a, 0xa1, 0x0, [@generic={0x47, 0x24, "836b7a3546a923dd7907f83f72973afd274f6ab401e632b603634f6d11677e27c3444d3c56924edabf63093f68ecb6b000229c199c13221528c95ca94e9f2ae966f85d6506"}], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0x6, 0x0, 0x26, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2b, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xf2d}]}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0x2, 0xc3, 0x0, [@generic={0x13, 0x2, "b158f1c638fae3143b4d284b364d664f08"}]}}, {{0x9, 0x5, 0x14, 0x1, 0x20, 0xe7, 0x3, 0x4, [@generic={0x12, 0x21, "16fa2664fa1a89a673e8a062ae3bdab4"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x8, 0xfa, 0xb}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x1, 0x9, 0x10, [@generic={0xc9, 0x30, "e96274671a1348430f876e03220d922f7daaa60a048039cf75f923acde4d3efe31dfc6d7d506c5b006bf4faee3111900deb8be8d691978916683588a8ec7582bc477583f1b339b23a1971229831af7e9c19445ef57d324169ecb8c3ae8685dd799b1e4da835981152b42f75463694ff7d49b61be34c8828480ea2418a9485b177a5eb7dc28b57e0358ee7dd2f3c18fee59251e5b115b18a79d23fe99664918072bf82aec4da7ec6561d84970c09c596ec67a982bc81bc902733cff29620dd8a22a9c88ed98dbc9"}, @uac_iso={0x7, 0x25, 0x1, 0x101, 0x5, 0x81}]}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0x2, 0x5, 0x4, [@generic={0x2, 0x22}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x5, 0xcc, 0x2d, [@generic={0x47, 0x22, "4a6f239b7b55c32ea196380f0519f27600af05ad339cf2dad4b5327621df06ae42f08724bd313d97d246e972951f4f07e17291f70417df907606409a69e8bd9a2711211f6e"}]}}, {{0x9, 0x5, 0x6, 0x18, 0x200, 0x40, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xe91a}, @generic={0x54, 0xa, "b3930fdc56172bbf734c90b11541c573acade2cdc9e88fb83c95957be0480b1a4b2b141c3b6d3df4f8f14c955732830721766e9482f042bd09cbd775c723e1f2bcb7edfdb7d29c9ceca29566c08f8333e08d"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x400, 0x6, 0xa1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x8001}, @generic={0x9d, 0x24, "e6c7a9ff778e064c0e1fa6a5b2e68f2c821c8e522aef04c075aebdea94f63f1010630c6979754f1f504e2792f7feebf638e4a09d06afa86642fad5f42ad327b2238b6c4ae1d06b7bd3693defdb5dc8dba6a95fff14e8d4e1f56e64f65221be35659a8c32f66048ee1f2835d4e311e68fb57bee949d813d4f224dc14ce75b9260d7014fd71c94ebc9909f7c4fd56360d022d70d8a2f562569396d2a"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x210, 0xc, 0x9, 0x4, [@generic={0x5, 0x21, "4eaf6e"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x3ff, 0x9, 0xb5, 0x3c, [@generic={0x78, 0xa, "2327eacf4ee37aec060ce04245b03f2b29787b29d0ca6d4cbca0c17d047c48945ed1637cac535158a1a6f886d4f316e229dffb7d9d674bf1d98c1af8fcc6e7f1ecdc56d99c11ca74147cc829300df00f2b5aa14c0b5cdb0234d4a9aa5d494992293aaf3b68f528ad10000f36c4cf5dfaf5b14071a5e0"}, @generic={0x78, 0x22, "281e2235b443177fb750da4a2efa2a430be0a49f8c2303e47f65890e7bfa09189974985458ea6ca3ddad405ea67c8d68721df869dc67288aff884068790f7b4efcc3d19f337776c0dbee7d8b6559eaa894f02402a31c21b5e2441c510c2d6129ce2beb81e75600c5afcd5ed8b90346329ea7c56bd7ff"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x5, 0xc2, 0x6, [@generic={0x71, 0x5, "915af0809c2eae1cd58e42a95406d55a735d6008fc71891eeb243a4d4d29221f53d5f073d9ec87d9d9c7cd3af21253cb62c210abcab48d83d646ed5ae98565dd98208e3ac144efad1330103c28b13d41b5034853b6b2f6c5f0517a8948db2f76665687b7bf93d23ca3cc8b2a8caf2a"}]}}, {{0x9, 0x5, 0xd, 0x9, 0x3ff, 0x9, 0x7, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x4}]}}, {{0x9, 0x5, 0xa, 0x6, 0x40, 0x5, 0x6, 0xfd}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x9, 0x8, 0x7}}]}}, {{0x9, 0x4, 0x6e, 0x1, 0x8, 0xff, 0xff, 0xff, 0x66, [], [{{0x9, 0x5, 0x9, 0x10, 0x20, 0x3, 0xdb, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x9}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x2, 0x0, 0x3f, [@generic={0x80, 0x8, "5984c67996c2572f14d1b890982394b96781664c3b5eabe5824096723ad530a74b228eb098a66c5b4ee42896986b4e645f8f1e9e1f7e958747fa66fed4a26304cdbd6923a51503556dc8334e57f5d0d6cc0446ac1376b5bb4e524d99ba4b5a02af6bdba409d9d6603e8163428059359924d3ad0b1f1f7796adf12a3b84d7"}, @generic={0xb5, 0x6, "8602d8da96d3bf4ef6fe569c1fa9f4703689194960a431b0453b62591f170fd46ec1f7e129a8c1536b13145fe464902e65db5fb5a55bca02dba8285b13013492bd7a070740bddd673a2cd43a600ee2b70871484f88fad0c4eac418e7e607783ea12d8be05a4cf7c19fca8681e7a1e68b3b657a5daa5b1df93851e3e775ffd1eef415a15fd65b730e1620c882a6e5cc6cb2cb090058926a60f1cfab7ad432affd6e57af37ce194880c38b90d0876b48b935a71c"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x6, 0x6, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x9}]}}, {{0x9, 0x5, 0x82, 0x10, 0x40, 0x6, 0x10, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x80, 0x3017}]}}, {{0x9, 0x5, 0x8, 0x3, 0x5e7, 0x9, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0xfc01}]}}, {{0x9, 0x5, 0xe, 0x1, 0x10, 0xfd, 0x4c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x4}, @generic={0x62, 0x31, "dc0b78fec68ae3bc310cdc4af02962a325b8b62d9764a45cda3fcb51575d2a316f5df361c8b5357a82db08c2a07771122283a2e12bb18ccd91339386dce97bc9c86a378fc9fe6dbe02b908eade87fdd305404d7a8ba1f5070f68f14d21dea59a"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x3ff, 0xd, 0x4, 0x2}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x8, 0x9, 0x8}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x5, 0x0, 0x27, 0x8, 0x1}, 0x105, &(0x7f0000000100)={0x5, 0xf, 0x105, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xd, "537a3833f93268753c4fdc949e3f72ee"}, @generic={0xb2, 0x10, 0x2, "7852c89743b5031970aec57fa3b2e493b03abfb2c09cb2e71ba46f4b3d1e63cdda745449192b516b3e0928ce7c1576aa49450c43f29311c24fb8f83803a23b459f31404ce77769140bd6f5ea1fe269fa18f8eeef55ad34b2e55ffb938455886450fb7768a6e778353bd74b3acb766f57853f4efa8322a833c9ddb9306dd7aef072fa4c3f48735ba84e59d4ef2ff3e46a5b8f0bf7a68ba401d6dcd4f0da50ae2e79227c28d1f0b7532c5bdcb12754d6"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0xaa, 0x8f, 0x4, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x41, 0x1, 0x0, 0x4be9, 0x4d}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x5, 0xf000, 0x2, [0x0, 0x30, 0xff000f, 0xff3f, 0x3f, 0x3fff]}]}, 0x7, [{0xb1, &(0x7f0000000240)=@string={0xb1, 0x3, "f9773395d712b0195aec40de506cb256de6a4af5405c73762f30cb346748b4962af4d8127d3df57c91e7c6050e09a80a88cb02df5fd0eeae07fea8d52a29619790a765f78dde31ec225718719309705bcdc4cc77f6e45a0cf1d05d7656e564c78fae52a9ca78c52f4549662dcb2e04c0a89f5c739bd4093cae5a6670f76136f38296c6633973ad230af1359d513c540df7797754f9b42982c79c957e0971633d2a874ae82e00b50d7ef60a95826d7e"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x6c32}}, {0xfe, &(0x7f0000000bc0)=@string={0xfe, 0x3, "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"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x83e}}]}) (async, rerun: 64) syz_usb_connect$cdc_ncm(0x0, 0x73, &(0x7f0000000cc0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0xb7, 0x60, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "aea61ba693"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x100, 0x0, 0x74}, {0x6, 0x24, 0x1a, 0xd, 0x1c}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x97, 0x76}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x60, 0x5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x41, 0x4, 0x31}}}}}}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x300, 0x45, 0x8, 0x1e, 0x20, 0x89}, 0x5, &(0x7f0000000d80)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x14, &(0x7f0000000e00)=@string={0x14, 0x3, "de97a4dc261dca8bae93f246e9d7a8830424"}}]}) (rerun: 64) syz_usb_connect(0xc, 0x62e, &(0x7f0000000e80)={{0x12, 0x1, 0x300, 0x46, 0x89, 0x49, 0x0, 0x55d, 0x9001, 0x750b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61c, 0x1, 0xfb, 0x5, 0x90, 0x81, [{{0x9, 0x4, 0x22, 0x6, 0x10, 0xba, 0xe0, 0xaf, 0x0, [@hid_hid={0x9, 0x21, 0x3, 0x7, 0x1, {0x22, 0xb2b}}], [{{0x9, 0x5, 0x2, 0x10, 0x440, 0x4, 0x2}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x3, 0xc, 0xff, [@generic={0x86, 0x7, "3d488fbb34bc8c630d8a4ef3acdedaafc94e09ceabcce4b6c4f214b2df324f1b46900c22d37738d26a43e7c76eebb13fbc92306c6d63ec2313de045e1e4ef46e6613c43a707a95b148bc123a3d8fea0546581b73f84b19e212fe5934cbb913cd1cb2e3867452e36f5ed62e6e53ed8dff0edc90073ed0bbbd33988eeda343a0885c241083"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0xa, 0x7, 0x4, [@generic={0x74, 0xb, "bf5d42289df253913f4dacb4f48f87c6b220d3d46c27d0e0fc6c6024e607f5bf31de68e46fc06660eb5c20365f8b007967bcf87ab5111cc256123115f4dc522d344b42b371def8c406f1917ea14df0b2d430f8fbed56093f086edb51ed3da2b592accdf0fb388510ab2004895773e575e800"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x200}]}}, {{0x9, 0x5, 0x5, 0x1, 0x0, 0xec, 0x4, 0xbc}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x62, 0x2}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0x0, 0x4, 0x6}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x1, 0x9, 0x4, [@generic={0x9d, 0x22, "2edf7f608c1aef55d10a8e3551f8a372f725e59a28e4934c10cfa54a4034e456570fa48d88ebce2167dde4eece8532d1febd1bf6f78fb1d5be367a0620a66900a7d96ca3fb00a6d510a9aa1d82b043c42634cc0e39832cc869e7d9bd85311860cf961fe5e7681625f5c5bf9fbd1f32b30d0845c118856e34ab12252bc40ad4f9d0e96f2a466043b0eca91ec939af01eb2b67ddd22d51eb53ecd54e"}, @generic={0xcd, 0x24, "b63d427a02fd54392bd069386c1878aa8f42c6f2cff1ab2673ecc2a416e224dffe2d1a9354f5faa5979d152819e55bd62b7ddac80d7ed92bc0781459de8e138d1d9dce83c7d1cc8eca47746f07f207c76d4191639380f0415829beb254a46a5a063a07aefd5e12bb6371df28fb4311f27eb9c0e6a9699f274019d86df5556683bbc8963780d910de81db4873b51215423c1c768f12c2ef3a08fe518fb128dfa1b3bbe897017c3d9a0618dfe443fcd45eea36e3ac8628d9502ae19128cbad7811e746f9e06ff007d92d4fc5"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x7, 0x6, 0xe8, [@generic={0x79, 0x22, "2f746fa3ae1c3c2ba2ba3b8c90c1330020432fff619d2e075eb4461588d07df63d20f068117372feebaa436ad8d713bd06b64d45d572bfbfede3ab8498e2a9a03997c574161a38e05f23ff873d0d47c0ff6c05a27709073b195dea386ab35e156653d863bde015c9938e613b0ee40d83d2b713ffd4d8c0"}, @generic={0xf2, 0x4, "27184a81edb022f9d9a7a602e0bee0cd0d7c7a196794eea48d990b19c5802dae182f1c8ad0a5b6c4521127e6837f4e586aa1527581610211ed0755bd4ad96148c373066f23285da47587920636c70913227b34ea0526397e90b60fa123840320f093133acbd945f13f95511a62341bd6d4b951ae927bbbefc8de50bb15b18a8a50f2ea07ca321f220e9321f332f5b10ece9cd370704a832de5d5bf3deccf54e867cc2f7cb22c290715e11c3a782ee99f13152208597e376937bd8a68629d8be41c03c7cfd2b3091ed2e419a8b55992b3930f64de25b7c607e2ff295cae892838ae9ed19a578ecbf5dd8969dfc924e14e"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0x5, 0x1, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xe00}, @generic={0x94, 0x0, "f430a26c7db85a842e1e5fbbc1a54cb958536c8890e0dc6f5bf3864160310e9407e5f482012e607e7bfc2e05b31e794177d225bcb631eb03e65fc34d2415f9eeaaebcfa21eb7f7287a907a5986744edcd003591e011d172d63d5e92dec17f66e24218d7ddf02e74e0ca463b369f2a5a5f061339b5fa8993ad31638ade32c860a541dd0ab063500a0ce149b026179b4757693"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0x6, 0xf8}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x5, 0xea, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xf2}]}}, {{0x9, 0x5, 0x5, 0x1, 0x40, 0x6, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x8}]}}, {{0x9, 0x5, 0x3, 0x3, 0x200, 0x5, 0x0, 0x7, [@generic={0x48, 0xe, "9acbfe645c33cbc2c62dd0ca9e2e6183988f5c3c29d1bca9a83f9288a2fe1e8187c7ac3029049bacb22d53cf3f8d78cf26327a8434c031286eed27267062c9ce4d05a922f2af"}, @generic={0xa, 0x24, "8c308d9c616216d7"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x20, 0x3, 0x80, 0xce, [@generic={0x92, 0xf, "330879375998b65b99a29a092b1c5eb778f0520f70d9c769db2684415824f5886e80fe25fbd1b370cc49ad5238b4edae5c6003d9f8897b537da8c8c486a33bca0c4e5bd96b8347d0f603fd64a0ab4b950df24355be9be5a1742c4fa95efd37973041d93af31568efbb6cb7cf30b08b3ea5998f3616d239db7e0c8cf83d873875111f000ba910124f8880989e87065d36"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xfc, 0x1000}]}}, {{0x9, 0x5, 0xa, 0x4, 0x10, 0x5, 0x1, 0x73, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0xfffa}]}}, {{0x9, 0x5, 0xe, 0x8, 0x3ff, 0x81, 0x0, 0xae}}]}}]}}]}}, &(0x7f0000001740)={0xa, &(0x7f00000014c0)={0xa, 0x6, 0x310, 0xd, 0xc9, 0x4, 0x8, 0xf}, 0x3f, &(0x7f0000001500)={0x5, 0xf, 0x3f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x16, 0x9, 0xbd, 0x7, 0x40}, @wireless={0xb, 0x10, 0x1, 0xe, 0x4, 0xf7, 0x2, 0x5, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x3, 0xf00, 0x8, [0xffc000, 0xff00, 0x3fc0, 0x0, 0xf, 0x30]}]}, 0x2, [{0xca, &(0x7f0000001540)=@string={0xca, 0x3, "9eac929de608a37467f26d190ed9b85c5d96f4ec9f84895a075b6ce4ea16e8faf332b35eff02d20c4a540aaffd633a1f73dd18f96d27f232a15260e5f328915bf4468752d5c436706f56f5abf0209749e32fe0265f71f25aaa831e8de5ea2f7b70acd82e51294c9f9776f06aca327be70f6a094fd5f8c75d139e1add8d2a194c0e7a7c2102818c5cdd7fb200c35b11584b68853a2dbbefa9a5100ed11446dba2f530c7405d8567513267c0b973821c753d0d956b5ff2c721216970326427ce7b35b76b0ad10178b9"}}, {0xf6, &(0x7f0000001640)=@string={0xf6, 0x3, "64f2bf0d5c254d421c0559b13dc4cc4b28b9cad0206ce91ce2963f15df6c7aa423e06b130909c5bb501408a5af5e08f5dab10fdc17757db6ebec471d1347280ba0a75453a509c91322f09b28277011ba5aac54e9b34b6682c316af5f15700292eaf2f15ff36a88ba5675c01ca1e117475df26d120262f6cd0284b6dbd5fb45982f57e8cf948c2804af602a7a2b3003a186505c73319f032c21e8f18a659c78cc379ecfa72bacbc7fd6adf5791d6fb9f737780531c94bb872e1679f38c3d111477a3139adf0ed778925eb392e96c002953014e40f5ab06bfcfac911651c1ed6dbbe81fbe5afce713e429802913c27829540c3bec6"}}]}) (async) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000001780)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x458, 0x500f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x88, 0x70, 0x7, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x816, 0xb, 0x1, {0x22, 0xf7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0xd, 0x1}}}}}]}}]}}, &(0x7f00000018c0)={0xa, &(0x7f00000017c0)={0xa, 0x6, 0x250, 0x0, 0x2, 0x0, 0xff, 0x2}, 0x49, &(0x7f0000001800)={0x5, 0xf, 0x49, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0xe, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0xcd, "cc6c1c3256ece249c3b9df641309f199"}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "3bbf965a8f2442b1232c79f813ef8010"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x40, 0x10, 0x4, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x3, 0xce, 0xccad}]}, 0x1, [{0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x404}}]}) (async) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @remote, 0x6}, 0x1c) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000004c0)='P') 832.797144ms ago: executing program 0 (id=6078): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x7c, &(0x7f0000000240)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x46, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x0, [0x0]}, {}, {}, {0x8, 0x88be, 0x2}, {0x8, 0x22eb, 0x1000, {{}, 0x2, {0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) (fail_nth: 3) 671.761507ms ago: executing program 0 (id=6079): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="140000002b000b93de09a427b36c690000fff005", 0x14}], 0x1}, 0x480c0) 371.934539ms ago: executing program 5 (id=6080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a320000"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 239.302439ms ago: executing program 5 (id=6081): syz_usb_connect(0x0, 0x64, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x48, 0x7, 0x87, 0x8, 0x13d3, 0x3349, 0xbd57, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x52, 0x2, 0x5, 0x9, 0x30, 0x2, [{{0x9, 0x4, 0x3c, 0xa, 0x3, 0x92, 0x4d, 0x91, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x52}, [@mixer_unit={0x5, 0x24, 0x4, 0x4, 0x9}, @selector_unit={0x7, 0x24, 0x5, 0x1, 0xc3, "451d"}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0xd9c, 0x8}]}], [{{0x9, 0x5, 0xa, 0x10, 0x8, 0x0, 0x8, 0xf8}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x3, 0x2, 0x8}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x40, 0xbf, 0x8}}]}}, {{0x9, 0x4, 0x6d, 0xc0, 0x0, 0xff, 0x5d, 0x81, 0x80}}]}}]}}, 0x0) 0s ago: executing program 1 (id=6082): r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000300)=0x1, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r5, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x1, @loopback, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, 0x0, &(0x7f0000000080)) r6 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r6, 0x0, 0x0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x0, 0xf7, 0x48, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x700, 0x8000, 0x3, 0x3}}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r9, 0x6, 0x1e, 0x0, &(0x7f0000002000)) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) pipe2$watch_queue(&(0x7f0000000100), 0x80) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 925.871335][T15480] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1925.891476][T15480] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1925.902675][T27629] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5565'. [ 1925.942468][T15480] usb 5-1: USB disconnect, device number 71 [ 1927.146995][ T9] usb 7-1: 0:2 : does not exist [ 1927.159603][ T9] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1927.362785][ T9] usb 7-1: USB disconnect, device number 66 [ 1927.621688][T27405] udevd[27405]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1927.822110][T27659] ptrace attach of "./syz-executor exec"[17826] was attempted by "./syz-executor exec"[27659] [ 1928.738301][ T30] audit: type=1326 audit(1747147179.919:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27656 comm="syz.6.5575" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x0 [ 1929.250499][T27685] program syz.6.5585 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1929.552231][ T978] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1929.582251][T15480] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1929.597925][ T30] audit: type=1326 audit(1747147180.779:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27692 comm="syz.5.5587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 1929.620211][ C0] vkms_vblank_simulate: vblank timer overrun [ 1929.686798][ T30] audit: type=1326 audit(1747147180.779:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27692 comm="syz.5.5587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 1929.752327][T15480] usb 5-1: Using ep0 maxpacket: 16 [ 1929.759949][ T978] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 16 [ 1929.780279][ T30] audit: type=1326 audit(1747147180.779:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27692 comm="syz.5.5587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 1929.787490][ T978] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1929.813283][T15480] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1929.866708][ T978] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1929.866732][T15480] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1929.876584][ T978] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1929.914197][ T30] audit: type=1326 audit(1747147180.779:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27692 comm="syz.5.5587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 1929.932138][ T978] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.968909][T15480] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1929.992280][T15480] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.002386][ T978] usb 7-1: Product: syz [ 1930.013533][T15480] usb 5-1: Product: syz [ 1930.021220][ T978] usb 7-1: Manufacturer: syz [ 1930.031400][ T30] audit: type=1326 audit(1747147180.789:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27692 comm="syz.5.5587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb8558 code=0x7ffc0000 [ 1930.042067][ T978] usb 7-1: SerialNumber: syz [ 1930.054251][T15480] usb 5-1: Manufacturer: syz [ 1930.082113][T15480] usb 5-1: SerialNumber: syz [ 1930.111782][T27685] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1930.170450][T27685] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1930.178567][ T30] audit: type=1326 audit(1747147180.789:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27692 comm="syz.5.5587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb8558 code=0x7ffc0000 [ 1930.292848][ T30] audit: type=1326 audit(1747147180.789:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27692 comm="syz.5.5587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb8558 code=0x7ffc0000 [ 1930.362591][ T30] audit: type=1326 audit(1747147180.789:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27692 comm="syz.5.5587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb8558 code=0x7ffc0000 [ 1930.384690][ C0] vkms_vblank_simulate: vblank timer overrun [ 1930.610932][ T30] audit: type=1326 audit(1747147180.789:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27692 comm="syz.5.5587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb8558 code=0x7ffc0000 [ 1930.633123][ C0] vkms_vblank_simulate: vblank timer overrun [ 1930.643215][ T30] audit: type=1326 audit(1747147180.789:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27692 comm="syz.5.5587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb8558 code=0x7ffc0000 [ 1930.683955][ T978] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 67 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 1930.795446][ T978] usb 7-1: USB disconnect, device number 67 [ 1930.857470][ T978] usblp0: removed [ 1932.354709][T15480] usb 5-1: 0:2 : does not exist [ 1932.403160][T15480] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1932.506004][T15480] usb 5-1: USB disconnect, device number 72 [ 1932.574559][T27405] udevd[27405]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1932.923115][T27717] ptrace attach of "./syz-executor exec"[24894] was attempted by "./syz-executor exec"[27717] [ 1934.429022][T27637] Set syz1 is full, maxelem 65536 reached [ 1934.503844][T27740] program syz.0.5600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1934.718611][T27749] FAULT_INJECTION: forcing a failure. [ 1934.718611][T27749] name failslab, interval 1, probability 0, space 0, times 0 [ 1934.719244][ T30] kauditd_printk_skb: 1439 callbacks suppressed [ 1934.719264][ T30] audit: type=1326 audit(1747147185.899:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27748 comm="syz.1.5603" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1934.731568][T27749] CPU: 0 UID: 0 PID: 27749 Comm: syz.1.5603 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 1934.731612][T27749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1934.731631][T27749] Call Trace: [ 1934.731641][T27749] [ 1934.731651][T27749] dump_stack_lvl+0x189/0x250 [ 1934.731700][T27749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1934.731731][T27749] ? __pfx__printk+0x10/0x10 [ 1934.731761][T27749] ? __pfx___might_resched+0x10/0x10 [ 1934.731791][T27749] should_fail_ex+0x414/0x560 [ 1934.731823][T27749] should_failslab+0xa8/0x100 [ 1934.731857][T27749] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1934.731891][T27749] ? __alloc_skb+0x112/0x2d0 [ 1934.731925][T27749] __alloc_skb+0x112/0x2d0 [ 1934.731962][T27749] audit_log_start+0x152/0x870 [ 1934.731994][T27749] ? __pfx_audit_log_start+0x10/0x10 [ 1934.732023][T27749] ? migrate_enable+0x29c/0x3c0 [ 1934.732055][T27749] ? __pfx_migrate_enable+0x10/0x10 [ 1934.732088][T27749] audit_seccomp+0x64/0x190 [ 1934.732122][T27749] ? clear_bhb_loop+0x60/0xb0 [ 1934.732146][T27749] ? clear_bhb_loop+0xe/0xb0 [ 1934.732176][T27749] __seccomp_filter+0x9aa/0x1a40 [ 1934.732222][T27749] ? ksys_write+0x1cb/0x250 [ 1934.732250][T27749] ? __pfx___seccomp_filter+0x10/0x10 [ 1934.732287][T27749] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1934.732319][T27749] ? __pfx_vfs_write+0x10/0x10 [ 1934.732350][T27749] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1934.732386][T27749] ? __fget_files+0x3a0/0x420 [ 1934.732430][T27749] ? ksys_write+0x1f0/0x250 [ 1934.732462][T27749] ? __secure_computing+0xe2/0x2a0 [ 1934.732502][T27749] syscall_trace_enter+0xaa/0x160 [ 1934.732538][T27749] __do_fast_syscall_32+0x9b/0x110 [ 1934.732571][T27749] ? lockdep_hardirqs_on+0x9c/0x150 [ 1934.732605][T27749] do_fast_syscall_32+0x34/0x80 [ 1934.732636][T27749] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1934.732665][T27749] RIP: 0023:0xf7f03539 [ 1934.732693][T27749] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1934.732715][T27749] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 00000000000001b8 [ 1934.732740][T27749] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 1934.732756][T27749] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000000 [ 1934.732770][T27749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1934.732783][T27749] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1934.732798][T27749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1934.732831][T27749] [ 1934.733051][T27749] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 1934.748996][ T30] audit: type=1326 audit(1747147185.899:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27748 comm="syz.1.5603" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1934.761033][T27749] audit: out of memory in audit_log_start [ 1934.831580][ T30] audit: type=1326 audit(1747147185.899:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27748 comm="syz.1.5603" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1935.162261][ T30] audit: type=1326 audit(1747147185.899:3907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27748 comm="syz.1.5603" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1935.246050][ T30] audit: type=1326 audit(1747147185.899:3908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27748 comm="syz.1.5603" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1935.269002][ T30] audit: type=1326 audit(1747147185.899:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27748 comm="syz.1.5603" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1935.293594][ T30] audit: type=1326 audit(1747147185.899:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27748 comm="syz.1.5603" exe="/root/syz-executor" sig=0 arch=40000003 syscall=438 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1935.373830][ T30] audit: type=1326 audit(1747147185.899:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27748 comm="syz.1.5603" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1936.451241][T27777] ptrace attach of "./syz-executor exec"[24636] was attempted by "./syz-executor exec"[27777] [ 1938.042677][ T9] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1938.248125][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1938.287777][ T9] usb 5-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=11.bf [ 1938.327995][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.377463][ T9] usb 5-1: Product: syz [ 1938.404118][ T9] usb 5-1: Manufacturer: syz [ 1938.421816][ T9] usb 5-1: SerialNumber: syz [ 1938.438098][ T9] usb 5-1: config 0 descriptor?? [ 1938.451306][ T9] usb 5-1: MBOX3: Invalid descriptor size=18. [ 1940.043215][T27837] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5629'. [ 1940.058992][T27837] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5629'. [ 1940.427157][T15480] usb 5-1: USB disconnect, device number 73 [ 1941.265002][T27872] netlink: 'syz.1.5638': attribute type 1 has an invalid length. [ 1941.297060][T27873] ptrace attach of "./syz-executor exec"[17512] was attempted by "./syz-executor exec"[27873] [ 1941.347659][T27872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1941.776064][T27881] netlink: 'syz.1.5640': attribute type 1 has an invalid length. [ 1941.923935][T27881] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1941.940235][T27885] vlan3: entered allmulticast mode [ 1941.950745][T27885] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1941.962397][T27885] bond2: (slave vlan3): Opening slave failed [ 1942.572380][T27896] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5646'. [ 1942.598518][T27884] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5641'. [ 1943.107952][T27897] FAULT_INJECTION: forcing a failure. [ 1943.107952][T27897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1943.166661][T27897] CPU: 0 UID: 0 PID: 27897 Comm: syz.1.5645 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 1943.166694][T27897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1943.166708][T27897] Call Trace: [ 1943.166718][T27897] [ 1943.166728][T27897] dump_stack_lvl+0x189/0x250 [ 1943.166769][T27897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1943.166801][T27897] ? __pfx__printk+0x10/0x10 [ 1943.166835][T27897] should_fail_ex+0x414/0x560 [ 1943.166863][T27897] _copy_to_user+0x31/0xb0 [ 1943.166896][T27897] simple_read_from_buffer+0xe1/0x170 [ 1943.166929][T27897] proc_fail_nth_read+0x1df/0x250 [ 1943.166966][T27897] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1943.167001][T27897] ? rw_verify_area+0x258/0x650 [ 1943.167025][T27897] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1943.167059][T27897] vfs_read+0x200/0x980 [ 1943.167090][T27897] ? __pfx___mutex_lock+0x10/0x10 [ 1943.167120][T27897] ? __pfx_vfs_read+0x10/0x10 [ 1943.167147][T27897] ? __fget_files+0x2a/0x420 [ 1943.167180][T27897] ? __fget_files+0x3a0/0x420 [ 1943.167208][T27897] ? __fget_files+0x2a/0x420 [ 1943.167248][T27897] ksys_read+0x145/0x250 [ 1943.167276][T27897] ? __pfx_ksys_read+0x10/0x10 [ 1943.167304][T27897] ? arch_syscall_is_vdso_sigreturn+0x175/0x1a0 [ 1943.167332][T27897] ? syscall_user_dispatch+0x4f/0x90 [ 1943.167370][T27897] __do_fast_syscall_32+0xb4/0x110 [ 1943.167399][T27897] ? lockdep_hardirqs_on+0x9c/0x150 [ 1943.167427][T27897] do_fast_syscall_32+0x34/0x80 [ 1943.167456][T27897] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1943.167483][T27897] RIP: 0023:0xf7f03539 [ 1943.167501][T27897] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1943.167520][T27897] RSP: 002b:00000000f5026590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1943.167544][T27897] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5026620 [ 1943.167559][T27897] RDX: 000000000000000f RSI: 00000000f7392ff4 RDI: 0000000000000000 [ 1943.167572][T27897] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1943.167586][T27897] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1943.167598][T27897] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1943.167630][T27897] [ 1943.394717][ C0] vkms_vblank_simulate: vblank timer overrun [ 1943.586105][T27913] netlink: 'syz.1.5651': attribute type 1 has an invalid length. [ 1943.612196][ T9] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1943.636963][T27913] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1943.674030][T27913] fuse: Unknown parameter '' [ 1943.765762][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1943.792648][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1943.803094][ T9] usb 7-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1943.817457][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.849533][ T9] usb 7-1: config 0 descriptor?? [ 1944.095680][T27903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1944.113496][T27903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1944.354898][T27931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1944.390861][T27903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1944.414450][T27931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1944.441080][T27903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1944.482685][ T9] elo 0003:04E7:0030.0011: unknown main item tag 0x0 [ 1944.500100][ T9] elo 0003:04E7:0030.0011: unknown main item tag 0x0 [ 1944.516856][ T9] elo 0003:04E7:0030.0011: unknown main item tag 0x0 [ 1944.529060][ T9] elo 0003:04E7:0030.0011: unknown main item tag 0x0 [ 1944.546637][ T9] elo 0003:04E7:0030.0011: unknown main item tag 0x0 [ 1944.574115][ T9] elo 0003:04E7:0030.0011: unknown main item tag 0x0 [ 1944.591517][ T9] elo 0003:04E7:0030.0011: unknown main item tag 0x0 [ 1944.657416][ T9] elo 0003:04E7:0030.0011: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.6-1/input0 [ 1944.674425][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1944.674440][ T30] audit: type=1326 audit(1747147195.859:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27927 comm="syz.0.5654" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x0 [ 1945.393903][T27947] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5661'. [ 1945.442310][ T5889] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1945.592366][T27950] ptrace attach of "./syz-executor exec"[17826] was attempted by "./syz-executor exec"[27950] [ 1945.646364][ T5889] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1945.655790][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.664321][ T5889] usb 6-1: Product: syz [ 1945.668622][ T5889] usb 6-1: Manufacturer: syz [ 1945.673649][ T5889] usb 6-1: SerialNumber: syz [ 1945.680745][ T5889] usb 6-1: config 0 descriptor?? [ 1945.705101][T24631] Bluetooth: hci5: urb ffff88807e8c2700 submission failed (2) [ 1945.896279][T27941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1945.905765][T27941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1946.141794][ T9] usb 7-1: USB disconnect, device number 68 [ 1946.343228][T27961] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1946.581602][ T9] usb 6-1: USB disconnect, device number 37 [ 1947.100965][T27981] FAULT_INJECTION: forcing a failure. [ 1947.100965][T27981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1947.142414][T27981] CPU: 0 UID: 0 PID: 27981 Comm: syz.6.5669 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 1947.142448][T27981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1947.142462][T27981] Call Trace: [ 1947.142471][T27981] [ 1947.142481][T27981] dump_stack_lvl+0x189/0x250 [ 1947.142522][T27981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1947.142554][T27981] ? __pfx__printk+0x10/0x10 [ 1947.142590][T27981] should_fail_ex+0x414/0x560 [ 1947.142619][T27981] _copy_to_user+0x31/0xb0 [ 1947.142652][T27981] simple_read_from_buffer+0xe1/0x170 [ 1947.142686][T27981] proc_fail_nth_read+0x1df/0x250 [ 1947.142722][T27981] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1947.142758][T27981] ? rw_verify_area+0x258/0x650 [ 1947.142782][T27981] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1947.142812][T27981] vfs_read+0x200/0x980 [ 1947.142842][T27981] ? __pfx___mutex_lock+0x10/0x10 [ 1947.142871][T27981] ? __pfx_vfs_read+0x10/0x10 [ 1947.142898][T27981] ? __fget_files+0x2a/0x420 [ 1947.142932][T27981] ? __fget_files+0x3a0/0x420 [ 1947.142960][T27981] ? __fget_files+0x2a/0x420 [ 1947.142999][T27981] ksys_read+0x145/0x250 [ 1947.143027][T27981] ? __pfx_ksys_read+0x10/0x10 [ 1947.143063][T27981] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1947.143094][T27981] ? lockdep_hardirqs_on+0x9c/0x150 [ 1947.143124][T27981] __do_fast_syscall_32+0xb4/0x110 [ 1947.143154][T27981] ? lockdep_hardirqs_on+0x9c/0x150 [ 1947.143190][T27981] do_fast_syscall_32+0x34/0x80 [ 1947.143220][T27981] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1947.143246][T27981] RIP: 0023:0xf706e539 [ 1947.143265][T27981] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1947.143284][T27981] RSP: 002b:00000000f505e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1947.143307][T27981] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f505e620 [ 1947.143323][T27981] RDX: 000000000000000f RSI: 00000000f73d2ff4 RDI: 0000000000000000 [ 1947.143337][T27981] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1947.143350][T27981] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1947.143363][T27981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1947.143395][T27981] [ 1947.374984][ C0] vkms_vblank_simulate: vblank timer overrun [ 1947.806823][ T24] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1947.992685][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1948.005966][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1948.048398][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1948.097511][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1948.124141][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1948.201483][ T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1948.249997][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1948.301409][ T24] usb 2-1: config 0 descriptor?? [ 1948.627385][ T24] redragon 0003:0C45:760B.0012: unknown main item tag 0x6 [ 1948.655199][ T24] redragon 0003:0C45:760B.0012: item fetching failed at offset 7/133 [ 1948.664986][ T24] redragon 0003:0C45:760B.0012: probe with driver redragon failed with error -22 [ 1948.718186][ T30] audit: type=1326 audit(1747147199.899:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27985 comm="syz.4.5670" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x0 [ 1948.805910][ T24] usb 2-1: USB disconnect, device number 82 [ 1949.702114][ T978] usb 7-1: new full-speed USB device number 69 using dummy_hcd [ 1950.094260][ T978] usb 7-1: not running at top speed; connect to a high speed hub [ 1950.107777][ T978] usb 7-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 1950.125477][ T978] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1950.138263][T28023] ptrace attach of "./syz-executor exec"[24636] was attempted by "./syz-executor exec"[28023] [ 1950.144050][ T978] usb 7-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 1950.169126][ T978] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.177667][ T978] usb 7-1: Product: syz [ 1950.185758][ T978] usb 7-1: Manufacturer: syz [ 1950.192922][ T978] usb 7-1: SerialNumber: syz [ 1951.053307][T28033] FAULT_INJECTION: forcing a failure. [ 1951.053307][T28033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1951.093918][T28035] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1951.097374][T28033] CPU: 1 UID: 0 PID: 28033 Comm: syz.0.5686 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 1951.097408][T28033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1951.097423][T28033] Call Trace: [ 1951.097435][T28033] [ 1951.097445][T28033] dump_stack_lvl+0x189/0x250 [ 1951.097490][T28033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1951.097525][T28033] ? __pfx__printk+0x10/0x10 [ 1951.097564][T28033] should_fail_ex+0x414/0x560 [ 1951.097604][T28033] _copy_to_user+0x31/0xb0 [ 1951.097641][T28033] simple_read_from_buffer+0xe1/0x170 [ 1951.097678][T28033] proc_fail_nth_read+0x1df/0x250 [ 1951.097717][T28033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1951.097756][T28033] ? rw_verify_area+0x258/0x650 [ 1951.097782][T28033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1951.097818][T28033] vfs_read+0x200/0x980 [ 1951.097851][T28033] ? __pfx___mutex_lock+0x10/0x10 [ 1951.097884][T28033] ? __pfx_vfs_read+0x10/0x10 [ 1951.097912][T28033] ? __fget_files+0x2a/0x420 [ 1951.097950][T28033] ? __fget_files+0x3a0/0x420 [ 1951.097981][T28033] ? __fget_files+0x2a/0x420 [ 1951.098023][T28033] ksys_read+0x145/0x250 [ 1951.098054][T28033] ? __pfx_ksys_read+0x10/0x10 [ 1951.098084][T28033] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1951.098117][T28033] ? lockdep_hardirqs_on+0x9c/0x150 [ 1951.098151][T28033] __do_fast_syscall_32+0xb4/0x110 [ 1951.098184][T28033] ? lockdep_hardirqs_on+0x9c/0x150 [ 1951.098219][T28033] do_fast_syscall_32+0x34/0x80 [ 1951.098251][T28033] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1951.098282][T28033] RIP: 0023:0xf70ce539 [ 1951.098303][T28033] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1951.098324][T28033] RSP: 002b:00000000f50be590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1951.098350][T28033] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50be620 [ 1951.098367][T28033] RDX: 000000000000000f RSI: 00000000f7432ff4 RDI: 0000000000000000 [ 1951.098383][T28033] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1951.098397][T28033] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1951.098410][T28033] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1951.098445][T28033] [ 1951.419879][T28042] program syz.4.5689 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1951.762520][ T5939] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1951.928435][ T5939] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 16 [ 1951.955877][ T5939] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1951.995480][ T5939] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1952.015247][ T5939] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1952.035668][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.053497][ T5939] usb 5-1: Product: syz [ 1952.065817][ T5939] usb 5-1: Manufacturer: syz [ 1952.079776][ T5939] usb 5-1: SerialNumber: syz [ 1952.103670][T28042] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1952.123977][T28042] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1952.260396][ T978] usb 7-1: USB disconnect, device number 69 [ 1952.377725][ T5939] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 1952.487937][ T5939] usb 5-1: USB disconnect, device number 74 [ 1952.489684][ T30] audit: type=1326 audit(1747147203.669:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28044 comm="syz.0.5690" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x0 [ 1952.526880][ T5939] usblp0: removed [ 1952.714216][T28060] qrtr: Invalid version 0 [ 1953.828223][T28090] ptrace attach of "./syz-executor exec"[24894] was attempted by "./syz-executor exec"[28090] [ 1954.818067][T28103] qrtr: Invalid version 0 [ 1956.060174][ T30] audit: type=1326 audit(1747147207.239:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28100 comm="syz.1.5710" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x0 [ 1956.342091][ T5939] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1956.562192][ T5939] usb 5-1: Using ep0 maxpacket: 8 [ 1956.578059][ T5939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1956.632187][ T5939] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1956.671066][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.708870][ T5939] usb 5-1: Product: syz [ 1956.721741][ T5939] usb 5-1: Manufacturer: syz [ 1956.735447][ T5939] usb 5-1: SerialNumber: syz [ 1956.778207][ T5939] usb 5-1: config 0 descriptor?? [ 1956.798721][ T5939] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1956.803415][T28143] openvswitch: netlink: Multiple metadata blocks provided [ 1956.807476][ T5939] usb 5-1: setting power ON [ 1956.819299][ T5939] dvb-usb: bulk message failed: -22 (2/0) [ 1956.830434][ T5939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1956.843340][ T5939] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1956.852297][ T5939] usb 5-1: media controller created [ 1956.871126][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1956.894652][ T5939] usb 5-1: selecting invalid altsetting 6 [ 1956.904153][ T5939] usb 5-1: digital interface selection failed (-22) [ 1956.910785][ T5939] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1956.931054][ T5939] usb 5-1: setting power OFF [ 1956.939534][ T5939] dvb-usb: bulk message failed: -22 (2/0) [ 1956.954238][ T5939] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1956.967072][ T5939] (NULL device *): no alternate interface [ 1957.008032][ T5939] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1957.281749][ T24] usb 5-1: USB disconnect, device number 75 [ 1957.424313][T28152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1957.462185][T28152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1957.652510][ T978] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1957.700844][T28162] ptrace attach of "./syz-executor exec"[17512] was attempted by "./syz-executor exec"[28162] [ 1957.888239][T28163] FAULT_INJECTION: forcing a failure. [ 1957.888239][T28163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1957.932224][T28163] CPU: 0 UID: 0 PID: 28163 Comm: syz.5.5728 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 1957.932257][T28163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1957.932272][T28163] Call Trace: [ 1957.932281][T28163] [ 1957.932290][T28163] dump_stack_lvl+0x189/0x250 [ 1957.932330][T28163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1957.932362][T28163] ? __pfx__printk+0x10/0x10 [ 1957.932398][T28163] should_fail_ex+0x414/0x560 [ 1957.932427][T28163] strncpy_from_user+0x36/0x290 [ 1957.932454][T28163] getname_flags+0xf3/0x540 [ 1957.932491][T28163] io_openat_prep+0x236/0x5a0 [ 1957.932531][T28163] ? __pfx_io_openat_prep+0x10/0x10 [ 1957.932565][T28163] ? percpu_counter_add_batch+0x190/0x1e0 [ 1957.932592][T28163] ? io_task_refs_refill+0xbb/0x180 [ 1957.932617][T28163] io_submit_sqes+0x93a/0x1d20 [ 1957.932655][T28163] __se_sys_io_uring_enter+0x2df/0x2b20 [ 1957.932685][T28163] ? ksys_write+0x1cb/0x250 [ 1957.932705][T28163] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1957.932719][T28163] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1957.932740][T28163] ? __pfx_vfs_write+0x10/0x10 [ 1957.932760][T28163] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1957.932783][T28163] ? __fget_files+0x3a0/0x420 [ 1957.932808][T28163] ? fput+0xa0/0xd0 [ 1957.932831][T28163] ? ksys_write+0x1f0/0x250 [ 1957.932847][T28163] ? rcu_is_watching+0x15/0xb0 [ 1957.932866][T28163] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1957.932887][T28163] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 1957.932904][T28163] __do_fast_syscall_32+0xb4/0x110 [ 1957.932930][T28163] do_fast_syscall_32+0x34/0x80 [ 1957.932950][T28163] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1957.932969][T28163] RIP: 0023:0xf7fb8539 [ 1957.932982][T28163] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1957.932996][T28163] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 1957.933012][T28163] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000047bc [ 1957.933023][T28163] RDX: 0000000000000000 RSI: 0000000000000021 RDI: 0000000000000000 [ 1957.933032][T28163] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1957.933041][T28163] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1957.933050][T28163] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1957.933071][T28163] [ 1958.177904][ C0] vkms_vblank_simulate: vblank timer overrun [ 1959.479701][T28198] program syz.6.5738 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1959.587781][T28204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1959.597923][T28204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1959.644788][T28200] program syz.0.5740 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1959.825191][ T978] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1959.846077][T15480] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1959.912174][ T24] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1960.004411][T15480] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1960.008713][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 1960.016023][T15480] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1960.045051][ T978] usb 2-1: config index 0 descriptor too short (expected 27, got 18) [ 1960.059818][ T978] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1960.080307][ T978] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1960.090348][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1960.092374][ T24] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 16 [ 1960.104038][ T978] usb 2-1: Product: syz [ 1960.110894][ T24] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1960.124763][T15480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1960.132328][ T978] usb 2-1: Manufacturer: syz [ 1960.136397][ T24] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1960.139166][ T978] usb 2-1: SerialNumber: syz [ 1960.146978][T15480] usb 6-1: config 0 descriptor?? [ 1960.210198][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1960.213766][ T978] usb 2-1: config 0 descriptor?? [ 1960.224682][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1960.239526][ T24] usb 7-1: Product: syz [ 1960.247398][ T24] usb 7-1: Manufacturer: syz [ 1960.257472][ T24] usb 7-1: SerialNumber: syz [ 1960.294410][T28198] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1960.303258][T28198] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1960.404476][T15480] usbhid 6-1:0.0: can't add hid device: -71 [ 1960.422280][T15480] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1960.438151][T15480] usb 6-1: USB disconnect, device number 40 [ 1960.439717][ T978] usb 2-1: USB disconnect, device number 83 [ 1960.537437][ T24] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 70 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 1960.631690][ T24] usb 7-1: USB disconnect, device number 70 [ 1960.668698][ T24] usblp0: removed [ 1960.832303][T15480] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1960.992865][T15480] usb 6-1: Using ep0 maxpacket: 32 [ 1961.033034][T15480] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1961.061794][T15480] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1961.081643][T15480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1961.112177][T15480] usb 6-1: config 0 descriptor?? [ 1961.126102][T15480] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1961.174056][ T5939] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1961.186766][T15480] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1961.293655][T28219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5746'. [ 1961.327422][T28207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1961.339259][T28207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1961.347787][T28207] ldusb 6-1:0.0: Read buffer overflow, 297 bytes dropped [ 1961.355519][ T5939] usb 5-1: Using ep0 maxpacket: 8 [ 1961.376276][ T5939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1961.411714][ T5939] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1961.439267][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.473941][ T5939] usb 5-1: Product: syz [ 1961.549547][ T978] usb 6-1: USB disconnect, device number 41 [ 1961.567804][ T978] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1961.577163][ T5939] usb 5-1: Manufacturer: syz [ 1961.581939][ T5939] usb 5-1: SerialNumber: syz [ 1961.619972][ T5939] usb 5-1: config 0 descriptor?? [ 1961.644379][ T5939] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1961.660162][ T5939] usb 5-1: setting power ON [ 1961.671817][ T5939] dvb-usb: bulk message failed: -22 (2/0) [ 1961.704563][ T5939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1961.769576][ T5939] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1961.779446][ T5939] usb 5-1: media controller created [ 1961.816811][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1961.845344][ T5939] usb 5-1: selecting invalid altsetting 6 [ 1961.851157][ T5939] usb 5-1: digital interface selection failed (-22) [ 1961.869492][ T5939] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1961.894271][T28214] dvb-usb: bulk message failed: -22 (3/0) [ 1961.905711][T28214] usb 5-1: gpio_write failed. [ 1961.906429][ T5939] usb 5-1: setting power OFF [ 1961.917978][T28214] dvb-usb: bulk message failed: -22 (5/0) [ 1961.934988][T28214] dvb-usb: bulk message failed: -22 (4/0) [ 1961.941066][T28214] cxusb: i2c read failed [ 1961.955223][ T5939] dvb-usb: bulk message failed: -22 (2/0) [ 1961.973829][ T5939] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1961.989494][ T5939] (NULL device *): no alternate interface [ 1962.148480][ T5939] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1962.212472][ T5939] usb 5-1: USB disconnect, device number 76 [ 1962.375405][T28237] batadv_slave_1: entered promiscuous mode [ 1962.405899][T28237] ptrace attach of "./syz-executor exec"[17230] was attempted by "./syz-executor exec"[28237] [ 1962.739543][T28248] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5754'. [ 1962.764778][T28248] netlink: 'syz.6.5754': attribute type 1 has an invalid length. [ 1962.782111][T28248] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.5754'. [ 1962.882456][T28253] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5756'. [ 1963.825467][T28265] netlink: 'syz.5.5757': attribute type 8 has an invalid length. [ 1963.949697][ T30] audit: type=1326 audit(1747147215.129:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28244 comm="syz.4.5753" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x0 [ 1964.341031][T28253] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5756'. [ 1964.377917][T28269] program syz.5.5758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1964.772365][ T5939] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1964.936099][ T5939] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 16 [ 1964.956326][ T5939] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1964.992044][ T5939] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1965.022709][ T5939] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1965.059111][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.072103][ T978] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1965.100038][ T5939] usb 6-1: Product: syz [ 1965.120273][ T5939] usb 6-1: Manufacturer: syz [ 1965.132074][ T5939] usb 6-1: SerialNumber: syz [ 1965.191287][T28269] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1965.212951][T28269] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1965.281169][ T978] usb 2-1: Using ep0 maxpacket: 8 [ 1965.309197][ T978] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1965.329777][ T978] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1965.359229][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.402495][ T978] usb 2-1: Product: syz [ 1965.415245][ T978] usb 2-1: Manufacturer: syz [ 1965.419943][ T978] usb 2-1: SerialNumber: syz [ 1965.463024][ T978] usb 2-1: config 0 descriptor?? [ 1965.483065][ T5939] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 1965.506871][ T978] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1965.545544][ T5939] usb 6-1: USB disconnect, device number 42 [ 1965.570076][ T978] usb 2-1: setting power ON [ 1965.590286][ T978] dvb-usb: bulk message failed: -22 (2/0) [ 1965.631072][ T5939] usblp0: removed [ 1965.645629][ T978] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1965.690617][ T978] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1965.712114][T28284] dvb-usb: bulk message failed: -22 (3/0) [ 1965.731054][ T978] usb 2-1: media controller created [ 1965.738152][T28284] usb 2-1: gpio_write failed. [ 1965.752141][T28284] dvb-usb: bulk message failed: -22 (5/0) [ 1965.796514][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1965.831852][T28292] dvb-usb: bulk message failed: -22 (4/0) [ 1965.853749][T28286] FAULT_INJECTION: forcing a failure. [ 1965.853749][T28286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1965.868528][T28292] cxusb: i2c read failed [ 1965.881620][ T978] usb 2-1: selecting invalid altsetting 6 [ 1965.899859][ T978] usb 2-1: digital interface selection failed (-22) [ 1965.917932][ T978] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1965.917928][T28286] CPU: 1 UID: 0 PID: 28286 Comm: syz.6.5766 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 1965.917956][T28286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1965.917971][T28286] Call Trace: [ 1965.917979][T28286] [ 1965.917989][T28286] dump_stack_lvl+0x189/0x250 [ 1965.918032][T28286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1965.918069][T28286] ? __pfx__printk+0x10/0x10 [ 1965.918097][T28286] ? rcu_read_lock_any_held+0xb3/0x120 [ 1965.918130][T28286] should_fail_ex+0x414/0x560 [ 1965.918161][T28286] strncpy_from_user+0x36/0x290 [ 1965.918189][T28286] __ia32_sys_lgetxattr+0x153/0x210 [ 1965.918232][T28286] ? __pfx___ia32_sys_lgetxattr+0x10/0x10 [ 1965.918303][T28286] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1965.918335][T28286] ? lockdep_hardirqs_on+0x9c/0x150 [ 1965.918368][T28286] __do_fast_syscall_32+0xb4/0x110 [ 1965.918400][T28286] ? lockdep_hardirqs_on+0x9c/0x150 [ 1965.918434][T28286] do_fast_syscall_32+0x34/0x80 [ 1965.918478][T28286] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1965.918507][T28286] RIP: 0023:0xf706e539 [ 1965.918528][T28286] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1965.918548][T28286] RSP: 002b:00000000f505e55c EFLAGS: 00000206 ORIG_RAX: 00000000000000e6 [ 1965.918572][T28286] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000080000280 [ 1965.918590][T28286] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000000 [ 1965.918615][T28286] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1965.918629][T28286] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1965.918643][T28286] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1965.918676][T28286] [ 1966.021014][T28294] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5768'. [ 1966.202861][ T978] usb 2-1: setting power OFF [ 1966.236526][ T978] dvb-usb: bulk message failed: -22 (2/0) [ 1966.267215][ T978] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1966.299075][ T978] (NULL device *): no alternate interface [ 1966.444006][ T978] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1966.495163][T28297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5770'. [ 1966.531170][ T978] usb 2-1: USB disconnect, device number 84 [ 1966.812237][ T24] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1966.972088][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1966.981711][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1967.001660][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1967.088169][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1967.097447][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.108539][ T24] usb 7-1: Product: syz [ 1967.112897][ T24] usb 7-1: Manufacturer: syz [ 1967.117603][ T24] usb 7-1: SerialNumber: syz [ 1967.371774][ T24] usb 7-1: 0:2 : does not exist [ 1967.433921][ T24] usb 7-1: USB disconnect, device number 71 [ 1967.501619][T27405] udevd[27405]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1967.955822][T28329] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5781'. [ 1967.962676][T28330] program syz.1.5780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1968.132380][T28334] tipc: Started in network mode [ 1968.137303][T28334] tipc: Node identity 6, cluster identity 4711 [ 1968.144997][T28334] tipc: Node number set to 6 [ 1968.154863][T28334] FAULT_INJECTION: forcing a failure. [ 1968.154863][T28334] name failslab, interval 1, probability 0, space 0, times 0 [ 1968.168828][T28334] CPU: 1 UID: 0 PID: 28334 Comm: syz.0.5783 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 1968.168857][T28334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1968.168871][T28334] Call Trace: [ 1968.168881][T28334] [ 1968.168890][T28334] dump_stack_lvl+0x189/0x250 [ 1968.168930][T28334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1968.168962][T28334] ? __pfx__printk+0x10/0x10 [ 1968.168980][T28334] ? tipc_sk_leave+0x138/0x4e0 [ 1968.169003][T28334] ? __do_fast_syscall_32+0xb4/0x110 [ 1968.169033][T28334] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1968.169070][T28334] should_fail_ex+0x414/0x560 [ 1968.169100][T28334] should_failslab+0xa8/0x100 [ 1968.169131][T28334] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1968.169162][T28334] ? __alloc_skb+0x112/0x2d0 [ 1968.169195][T28334] __alloc_skb+0x112/0x2d0 [ 1968.169226][T28334] tipc_msg_create+0x51/0x4d0 [ 1968.169261][T28334] tipc_group_proto_xmit+0xce/0x790 [ 1968.169300][T28334] tipc_group_delete+0x146/0x480 [ 1968.169330][T28334] ? _parse_integer_limit+0x1ae/0x1f0 [ 1968.169363][T28334] ? __pfx_tipc_group_delete+0x10/0x10 [ 1968.169403][T28334] ? __lock_acquire+0xaac/0xd20 [ 1968.169438][T28334] ? tipc_group_self+0x26/0x1c0 [ 1968.169483][T28334] tipc_sk_leave+0x138/0x4e0 [ 1968.169515][T28334] ? __pfx_tipc_sk_leave+0x10/0x10 [ 1968.169538][T28334] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1968.169560][T28334] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1968.169593][T28334] tipc_setsockopt+0x64e/0x970 [ 1968.169625][T28334] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1968.169653][T28334] ? aa_sock_opt_perm+0x74/0x110 [ 1968.169682][T28334] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1968.169707][T28334] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1968.169734][T28334] do_sock_setsockopt+0x25a/0x3e0 [ 1968.169768][T28334] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1968.169794][T28334] ? __fget_files+0x2a/0x420 [ 1968.169829][T28334] ? __fget_files+0x3a0/0x420 [ 1968.169857][T28334] ? __fget_files+0x2a/0x420 [ 1968.169895][T28334] __ia32_sys_setsockopt+0x18b/0x220 [ 1968.169932][T28334] __do_fast_syscall_32+0xb4/0x110 [ 1968.169962][T28334] ? lockdep_hardirqs_on+0x9c/0x150 [ 1968.169993][T28334] do_fast_syscall_32+0x34/0x80 [ 1968.170023][T28334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1968.170049][T28334] RIP: 0023:0xf70ce539 [ 1968.170068][T28334] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1968.170087][T28334] RSP: 002b:00000000f50be55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1968.170110][T28334] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000010f [ 1968.170126][T28334] RDX: 0000000000000088 RSI: 0000000000000000 RDI: 0000000000000000 [ 1968.170139][T28334] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1968.170152][T28334] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1968.170166][T28334] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1968.170198][T28334] [ 1968.580119][T28339] program syz.4.5794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1968.602209][ T978] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1968.818411][ T978] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 16 [ 1968.830831][ T978] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1968.856551][ T978] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1968.868261][ T978] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1968.881918][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1968.898640][ T978] usb 2-1: Product: syz [ 1968.913228][ T978] usb 2-1: Manufacturer: syz [ 1968.952201][ T978] usb 2-1: SerialNumber: syz [ 1968.987933][T28327] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1968.996543][T28327] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1969.042262][ T5939] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1969.224447][ T5939] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 16 [ 1969.264938][ T978] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 85 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 1969.286746][ T5939] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1969.312100][ T9] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1969.347612][ T5939] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1969.361215][ T978] usb 2-1: USB disconnect, device number 85 [ 1969.373506][ T5939] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1969.390816][ T978] usblp0: removed [ 1969.396177][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1969.459567][ T5939] usb 5-1: Product: syz [ 1969.474307][ T5939] usb 5-1: Manufacturer: syz [ 1969.481211][ T5939] usb 5-1: SerialNumber: syz [ 1969.518720][T28339] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1969.526480][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1969.552757][T28339] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1969.570954][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1969.588605][T28354] qrtr: Invalid version 0 [ 1969.602444][ T9] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1969.616671][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1969.625673][ T9] usb 6-1: Product: syz [ 1969.629986][ T9] usb 6-1: Manufacturer: syz [ 1969.638384][ T9] usb 6-1: SerialNumber: syz [ 1969.650922][ T9] usb 6-1: config 0 descriptor?? [ 1969.680354][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1969.691327][ T9] usb 6-1: setting power ON [ 1969.705072][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 1969.880125][T28347] dvb-usb: bulk message failed: -22 (3/0) [ 1969.886907][T28347] usb 6-1: gpio_write failed. [ 1969.891844][T28347] dvb-usb: bulk message failed: -22 (5/0) [ 1969.931589][ T5939] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 77 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 1969.952483][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1969.982255][ T24] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1969.994094][T28357] dvb-usb: bulk message failed: -22 (4/0) [ 1969.999885][T28357] cxusb: i2c read failed [ 1970.005086][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1970.034224][ T9] usb 6-1: media controller created [ 1970.053706][ T5939] usb 5-1: USB disconnect, device number 77 [ 1970.080643][ T5939] usblp0: removed [ 1970.264227][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1970.286741][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 1970.324048][ T24] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1970.363876][ T9] usb 6-1: selecting invalid altsetting 6 [ 1970.387285][ T9] usb 6-1: digital interface selection failed (-22) [ 1970.397410][ T24] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1970.405678][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1970.451409][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1970.454555][ T9] usb 6-1: setting power OFF [ 1970.472176][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 1970.487131][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1970.504227][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.514344][ T9] (NULL device *): no alternate interface [ 1970.657958][ T24] usb 7-1: Product: syz [ 1970.688058][ T24] usb 7-1: Manufacturer: ࠬ [ 1970.702105][ T24] usb 7-1: SerialNumber: syz [ 1970.784168][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1970.851960][ T9] usb 6-1: USB disconnect, device number 43 [ 1970.951023][ T24] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 1970.975314][ T24] cdc_ncm 7-1:1.0: bind() failure [ 1971.019817][ T24] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1971.044267][ T24] cdc_ncm 7-1:1.1: bind() failure [ 1971.073476][ T24] usb 7-1: USB disconnect, device number 72 [ 1971.743060][T28381] FAULT_INJECTION: forcing a failure. [ 1971.743060][T28381] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1971.801097][T28381] CPU: 0 UID: 0 PID: 28381 Comm: syz.4.5793 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 1971.801132][T28381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1971.801146][T28381] Call Trace: [ 1971.801155][T28381] [ 1971.801166][T28381] dump_stack_lvl+0x189/0x250 [ 1971.801207][T28381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1971.801239][T28381] ? __pfx__printk+0x10/0x10 [ 1971.801264][T28381] ? fs_reclaim_acquire+0x7d/0x100 [ 1971.801303][T28381] should_fail_ex+0x414/0x560 [ 1971.801340][T28381] prepare_alloc_pages+0x213/0x610 [ 1971.801384][T28381] __alloc_frozen_pages_noprof+0x123/0x370 [ 1971.801411][T28381] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1971.801438][T28381] ? __pfx_load_gs_index+0x10/0x10 [ 1971.801462][T28381] ? policy_nodemask+0x27c/0x720 [ 1971.801490][T28381] ? __lock_acquire+0xaac/0xd20 [ 1971.801526][T28381] alloc_pages_mpol+0x232/0x4a0 [ 1971.801569][T28381] vma_alloc_folio_noprof+0xe4/0x200 [ 1971.801599][T28381] ? __lock_acquire+0xaac/0xd20 [ 1971.801630][T28381] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1971.801673][T28381] folio_prealloc+0x30/0x180 [ 1971.801707][T28381] __handle_mm_fault+0x2b28/0x5380 [ 1971.801756][T28381] ? __pfx___handle_mm_fault+0x10/0x10 [ 1971.801806][T28381] ? find_vma+0xe7/0x160 [ 1971.801834][T28381] ? __pfx_find_vma+0x10/0x10 [ 1971.801866][T28381] handle_mm_fault+0x3f6/0x8c0 [ 1971.801904][T28381] do_user_addr_fault+0x764/0x1390 [ 1971.801947][T28381] exc_page_fault+0x68/0x110 [ 1971.801978][T28381] ? __might_fault+0xb0/0x130 [ 1971.802007][T28381] asm_exc_page_fault+0x26/0x30 [ 1971.802029][T28381] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 1971.802063][T28381] Code: c9 75 f6 e9 82 03 04 00 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 1971.802082][T28381] RSP: 0018:ffffc9000edefc50 EFLAGS: 00050246 [ 1971.802101][T28381] RAX: 0000000000000000 RBX: 0000000000b35000 RCX: 0000000000000040 [ 1971.802115][T28381] RDX: 0000000000000000 RSI: ffffffff8d936f16 RDI: 0000000080b36000 [ 1971.802130][T28381] RBP: 0000000080b35040 R08: 0000000000000000 R09: 0000000000000000 [ 1971.802144][T28381] R10: 0000000000000000 R11: ffffffff820b0fe0 R12: dffffc0000000000 [ 1971.802158][T28381] R13: 0000000000001000 R14: 000000007f4ca000 R15: 00007ffffffff000 [ 1971.802179][T28381] ? __might_fault+0xb0/0x130 [ 1971.802218][T28381] read_zero+0x9f/0x1e0 [ 1971.802244][T28381] ? __pfx_read_zero+0x10/0x10 [ 1971.802272][T28381] vfs_read+0x200/0x980 [ 1971.802307][T28381] ? __pfx_vfs_read+0x10/0x10 [ 1971.802333][T28381] ? __fget_files+0x2a/0x420 [ 1971.802365][T28381] ? __fget_files+0x2a/0x420 [ 1971.802393][T28381] ? __fget_files+0x3a0/0x420 [ 1971.802422][T28381] ? __fget_files+0x2a/0x420 [ 1971.802461][T28381] ksys_read+0x145/0x250 [ 1971.802489][T28381] ? __pfx_ksys_read+0x10/0x10 [ 1971.802517][T28381] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1971.802554][T28381] ? lockdep_hardirqs_on+0x9c/0x150 [ 1971.802583][T28381] __do_fast_syscall_32+0xb4/0x110 [ 1971.802614][T28381] ? lockdep_hardirqs_on+0x9c/0x150 [ 1971.802644][T28381] do_fast_syscall_32+0x34/0x80 [ 1971.802673][T28381] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1971.802699][T28381] RIP: 0023:0xf7f07539 [ 1971.802717][T28381] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1971.802736][T28381] RSP: 002b:00000000f500555c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1971.802759][T28381] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 1971.802775][T28381] RDX: 00000000ffffff96 RSI: 0000000000000000 RDI: 0000000000000000 [ 1971.802788][T28381] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1971.802801][T28381] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1971.802815][T28381] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1971.802846][T28381] [ 1972.530456][T28384] qrtr: Invalid version 0 [ 1973.302244][ T9] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1973.311767][T28412] syz_tun: entered allmulticast mode [ 1973.332610][ T5939] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1973.452109][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1973.479000][ T9] usb 6-1: config 1 has an invalid interface number: 242 but max is 0 [ 1973.496570][ T9] usb 6-1: config 1 has no interface number 0 [ 1973.508888][ T5939] usb 5-1: not running at top speed; connect to a high speed hub [ 1973.520643][ T9] usb 6-1: config 1 interface 242 has no altsetting 0 [ 1973.536735][ T5939] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1973.555362][ T9] usb 6-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 1973.562756][ T24] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1973.570223][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.580328][ T5939] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1973.602051][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.613235][ T9] usb 6-1: Product: syz [ 1973.626349][ T9] usb 6-1: Manufacturer: syz [ 1973.635243][ T5939] usb 5-1: Product: 㐉 [ 1973.693588][ T9] usb 6-1: SerialNumber: syz [ 1973.716638][ T5939] usb 5-1: Manufacturer: ࡠ [ 1973.722443][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1973.722730][ T5939] usb 5-1: SerialNumber: 䀁 [ 1973.748335][ T24] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1973.777675][ T24] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1973.793228][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1973.866835][ T24] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1973.888638][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.928407][ T24] usb 2-1: Product: syz [ 1973.939235][ T24] usb 2-1: Manufacturer: syz [ 1973.959255][ T24] usb 2-1: SerialNumber: syz [ 1973.974373][ T24] usb 2-1: config 0 descriptor?? [ 1974.306720][T28402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1974.333025][T28402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1974.362269][ T5939] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 78 if 0 alt 6 proto 2 vid 0x0525 pid 0xA4A8 [ 1974.407049][ T5939] usb 5-1: USB disconnect, device number 78 [ 1974.429401][ T5939] usblp0: removed [ 1974.593381][ T978] usb 2-1: USB disconnect, device number 86 [ 1974.601111][T28411] syz_tun: left allmulticast mode [ 1975.518329][T28430] qrtr: Invalid version 0 [ 1975.837226][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.843854][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.298386][ T9] aqc111 6-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1976.360280][ T9] aqc111 6-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1976.438450][T28453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5819'. [ 1976.445547][ T9] aqc111 6-1:1.242 eth9: register 'aqc111' at usb-dummy_hcd.5-1, Aquantia AQtion USB to 5GbE Controller, b2:7f:21:28:ec:13 [ 1976.492433][ T9] usb 6-1: USB disconnect, device number 44 [ 1976.510429][ T9] aqc111 6-1:1.242 eth9: unregister 'aqc111' usb-dummy_hcd.5-1, Aquantia AQtion USB to 5GbE Controller [ 1976.752797][ T9] aqc111 6-1:1.242 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1976.778582][ T9] aqc111 6-1:1.242 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1976.796221][ T9] aqc111 6-1:1.242 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1976.927563][T28475] syzkaller1: entered promiscuous mode [ 1976.933502][T28475] syzkaller1: entered allmulticast mode [ 1977.969542][T28498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5829'. [ 1979.691508][T28524] FAULT_INJECTION: forcing a failure. [ 1979.691508][T28524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1979.755841][T28524] CPU: 0 UID: 0 PID: 28524 Comm: syz.6.5835 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 1979.755865][T28524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1979.755875][T28524] Call Trace: [ 1979.755882][T28524] [ 1979.755889][T28524] dump_stack_lvl+0x189/0x250 [ 1979.755919][T28524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1979.755942][T28524] ? __pfx__printk+0x10/0x10 [ 1979.755959][T28524] ? __might_fault+0xb0/0x130 [ 1979.755986][T28524] should_fail_ex+0x414/0x560 [ 1979.756009][T28524] _copy_from_user+0x2d/0xb0 [ 1979.756032][T28524] move_addr_to_kernel+0x7e/0x160 [ 1979.756049][T28524] get_compat_msghdr+0x3bd/0x4a0 [ 1979.756074][T28524] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1979.756103][T28524] ___sys_sendmsg+0x193/0x2a0 [ 1979.756126][T28524] ? __pfx____sys_sendmsg+0x10/0x10 [ 1979.756173][T28524] ? __fget_files+0x2a/0x420 [ 1979.756194][T28524] ? __fget_files+0x3a0/0x420 [ 1979.756222][T28524] __sys_sendmsg+0x164/0x220 [ 1979.756244][T28524] ? __pfx___sys_sendmsg+0x10/0x10 [ 1979.756276][T28524] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1979.756297][T28524] ? lockdep_hardirqs_on+0x9c/0x150 [ 1979.756318][T28524] __do_fast_syscall_32+0xb4/0x110 [ 1979.756339][T28524] ? lockdep_hardirqs_on+0x9c/0x150 [ 1979.756361][T28524] do_fast_syscall_32+0x34/0x80 [ 1979.756381][T28524] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1979.756400][T28524] RIP: 0023:0xf706e539 [ 1979.756413][T28524] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1979.756426][T28524] RSP: 002b:00000000f505e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1979.756443][T28524] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002340 [ 1979.756453][T28524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1979.756462][T28524] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1979.756471][T28524] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1979.756480][T28524] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1979.756501][T28524] [ 1981.853128][T28568] syz_tun: entered allmulticast mode [ 1982.122294][ T978] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1982.282187][ T978] usb 6-1: Using ep0 maxpacket: 16 [ 1982.298181][ T978] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1982.309017][ T978] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1982.334305][ T978] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1982.348583][ T978] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1982.359643][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1982.370688][ T978] usb 6-1: Product: syz [ 1982.377051][ T978] usb 6-1: Manufacturer: syz [ 1982.384183][ T978] usb 6-1: SerialNumber: syz [ 1982.395695][ T978] usb 6-1: config 0 descriptor?? [ 1982.707605][ T978] usb 6-1: Can not set alternate setting to 1, error: -71 [ 1982.717931][T28567] syz_tun: left allmulticast mode [ 1982.723956][ T978] synaptics_usb 6-1:0.0: probe with driver synaptics_usb failed with error -71 [ 1982.747040][ T978] usb 6-1: USB disconnect, device number 45 [ 1982.815561][T28581] program syz.4.5850 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1983.192380][ T9] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1983.248532][T28587] program syz.1.5853 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1983.307710][T28594] FAULT_INJECTION: forcing a failure. [ 1983.307710][T28594] name failslab, interval 1, probability 0, space 0, times 0 [ 1983.342241][T28594] CPU: 0 UID: 0 PID: 28594 Comm: syz.6.5856 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 1983.342273][T28594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1983.342288][T28594] Call Trace: [ 1983.342297][T28594] [ 1983.342307][T28594] dump_stack_lvl+0x189/0x250 [ 1983.342347][T28594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1983.342378][T28594] ? __pfx__printk+0x10/0x10 [ 1983.342408][T28594] ? __pfx___might_resched+0x10/0x10 [ 1983.342428][T28594] ? fs_reclaim_acquire+0x7d/0x100 [ 1983.342466][T28594] should_fail_ex+0x414/0x560 [ 1983.342494][T28594] should_failslab+0xa8/0x100 [ 1983.342526][T28594] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 1983.342556][T28594] ? __kasan_kmalloc+0x93/0xb0 [ 1983.342595][T28594] ? ip6_setup_cork+0x6d3/0x11c0 [ 1983.342627][T28594] kmemdup_noprof+0x2b/0x70 [ 1983.342652][T28594] ip6_setup_cork+0x6d3/0x11c0 [ 1983.342689][T28594] ip6_append_data+0x23d/0x380 [ 1983.342718][T28594] ? __pfx_raw6_getfrag+0x10/0x10 [ 1983.342753][T28594] rawv6_sendmsg+0x1245/0x17f0 [ 1983.342798][T28594] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1983.342840][T28594] ? __lock_acquire+0xaac/0xd20 [ 1983.342886][T28594] ? __pfx_aa_sk_perm+0x10/0x10 [ 1983.342910][T28594] ? __fget_files+0x2a/0x420 [ 1983.342938][T28594] ? sock_rps_record_flow+0x19/0x400 [ 1983.342975][T28594] ? inet_sendmsg+0x2f4/0x370 [ 1983.343006][T28594] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1983.343037][T28594] __sock_sendmsg+0x19c/0x270 [ 1983.343063][T28594] __sys_sendto+0x3bd/0x520 [ 1983.343094][T28594] ? __pfx___sys_sendto+0x10/0x10 [ 1983.343119][T28594] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1983.343162][T28594] ? __fget_files+0x3a0/0x420 [ 1983.343202][T28594] ? ksys_write+0x1f0/0x250 [ 1983.343238][T28594] __ia32_sys_sendto+0xdd/0x100 [ 1983.343271][T28594] __do_fast_syscall_32+0xb4/0x110 [ 1983.343302][T28594] ? lockdep_hardirqs_on+0x9c/0x150 [ 1983.343333][T28594] do_fast_syscall_32+0x34/0x80 [ 1983.343362][T28594] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1983.343388][T28594] RIP: 0023:0xf706e539 [ 1983.343407][T28594] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1983.343427][T28594] RSP: 002b:00000000f505e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1983.343450][T28594] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 1983.343466][T28594] RDX: 0000000000000016 RSI: 0000000000003b00 RDI: 0000000000000000 [ 1983.343479][T28594] RBP: 00000000fffffdfd R08: 0000000000000000 R09: 0000000000000000 [ 1983.343493][T28594] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1983.343506][T28594] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1983.343537][T28594] [ 1983.721456][ T9] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 16 [ 1983.731532][ T9] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1983.741930][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1983.752185][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1983.752216][ T24] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1983.761519][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.777156][ T9] usb 5-1: Product: syz [ 1983.781351][ T9] usb 5-1: Manufacturer: syz [ 1983.786089][ T9] usb 5-1: SerialNumber: syz [ 1983.795095][T28581] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1983.806005][T28581] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1983.925730][ T24] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 16 [ 1983.940054][ T24] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1983.961116][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1983.984800][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1983.994066][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1984.008838][ T24] usb 2-1: Product: syz [ 1984.016402][ T24] usb 2-1: Manufacturer: syz [ 1984.035166][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 79 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 1984.042542][ T24] usb 2-1: SerialNumber: syz [ 1984.087828][T28587] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1984.109392][ T9] usb 5-1: USB disconnect, device number 79 [ 1984.133757][T28587] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1984.169188][ T9] usblp0: removed [ 1984.386116][ T24] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 87 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 1984.434783][ T24] usb 2-1: USB disconnect, device number 87 [ 1984.451710][ T24] usblp0: removed [ 1984.503038][ T978] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1984.692083][ T978] usb 6-1: Using ep0 maxpacket: 32 [ 1984.751074][ T978] usb 6-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=11.bf [ 1984.780090][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1984.802332][ T978] usb 6-1: Product: syz [ 1984.859857][ T978] usb 6-1: Manufacturer: syz [ 1984.888436][ T978] usb 6-1: SerialNumber: syz [ 1984.928461][ T978] usb 6-1: config 0 descriptor?? [ 1984.966742][ T978] usb 6-1: MBOX3: Invalid descriptor size=18. [ 1987.229437][T28654] ptrace attach of "./syz-executor exec"[24894] was attempted by "./syz-executor exec"[28654] [ 1987.651585][ T24] usb 6-1: USB disconnect, device number 46 [ 1989.490919][T28702] qrtr: Invalid version 0 [ 1990.455015][T28717] ptrace attach of "./syz-executor exec"[17826] was attempted by "./syz-executor exec"[28717] [ 1990.619297][T28721] FAULT_INJECTION: forcing a failure. [ 1990.619297][T28721] name failslab, interval 1, probability 0, space 0, times 0 [ 1990.792207][T28721] CPU: 1 UID: 0 PID: 28721 Comm: syz.0.5892 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 1990.792240][T28721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1990.792250][T28721] Call Trace: [ 1990.792257][T28721] [ 1990.792265][T28721] dump_stack_lvl+0x189/0x250 [ 1990.792294][T28721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1990.792317][T28721] ? __pfx__printk+0x10/0x10 [ 1990.792338][T28721] ? ref_tracker_alloc+0x318/0x460 [ 1990.792358][T28721] should_fail_ex+0x414/0x560 [ 1990.792378][T28721] should_failslab+0xa8/0x100 [ 1990.792402][T28721] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1990.792422][T28721] ? skb_clone+0x212/0x3a0 [ 1990.792452][T28721] skb_clone+0x212/0x3a0 [ 1990.792477][T28721] __netlink_deliver_tap+0x404/0x850 [ 1990.792506][T28721] ? netlink_deliver_tap+0x2e/0x1b0 [ 1990.792525][T28721] netlink_deliver_tap+0x19c/0x1b0 [ 1990.792544][T28721] netlink_unicast+0x72f/0x8d0 [ 1990.792569][T28721] netlink_sendmsg+0x805/0xb30 [ 1990.792595][T28721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1990.792616][T28721] ? aa_sock_msg_perm+0x94/0x160 [ 1990.792635][T28721] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1990.792654][T28721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1990.792673][T28721] __sock_sendmsg+0x21c/0x270 [ 1990.792692][T28721] sock_sendmsg+0x158/0x230 [ 1990.792709][T28721] ? __pfx_sock_sendmsg+0x10/0x10 [ 1990.792735][T28721] ? __asan_memset+0x22/0x50 [ 1990.792750][T28721] ? iov_iter_bvec+0xb8/0x180 [ 1990.792773][T28721] splice_to_socket+0x8ff/0xf10 [ 1990.792810][T28721] ? __pfx_splice_to_socket+0x10/0x10 [ 1990.792827][T28721] ? aa_file_perm+0x3e7/0xed0 [ 1990.792864][T28721] ? get_pid_task+0x20/0x1f0 [ 1990.792895][T28721] ? bpf_lsm_file_permission+0x9/0x20 [ 1990.792915][T28721] ? security_file_permission+0x75/0x290 [ 1990.792940][T28721] ? rw_verify_area+0x258/0x650 [ 1990.792960][T28721] ? __pfx_splice_to_socket+0x10/0x10 [ 1990.792978][T28721] do_splice+0xc76/0x1660 [ 1990.793017][T28721] ? __pfx_do_splice+0x10/0x10 [ 1990.793043][T28721] __se_sys_splice+0x2e1/0x460 [ 1990.793068][T28721] ? __pfx___se_sys_splice+0x10/0x10 [ 1990.793102][T28721] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1990.793123][T28721] ? __ia32_sys_splice+0x21/0xf0 [ 1990.793146][T28721] __do_fast_syscall_32+0xb4/0x110 [ 1990.793168][T28721] ? lockdep_hardirqs_on+0x9c/0x150 [ 1990.793190][T28721] do_fast_syscall_32+0x34/0x80 [ 1990.793210][T28721] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1990.793230][T28721] RIP: 0023:0xf70ce539 [ 1990.793243][T28721] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1990.793257][T28721] RSP: 002b:00000000f509d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000139 [ 1990.793274][T28721] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1990.793284][T28721] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 000000000004ffe6 [ 1990.793294][T28721] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1990.793303][T28721] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1990.793312][T28721] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1990.793334][T28721] [ 1990.797674][T28721] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.5892'. [ 1991.131618][T28721] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5892'. [ 1991.512183][ T24] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1991.696923][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1991.730760][ T24] usb 2-1: config 0 has no interfaces? [ 1991.852424][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1991.894666][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.928772][ T24] usb 2-1: Product: syz [ 1991.954134][ T24] usb 2-1: Manufacturer: syz [ 1991.958808][ T24] usb 2-1: SerialNumber: syz [ 1992.016840][ T24] usb 2-1: config 0 descriptor?? [ 1992.509659][T28723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1992.582113][ T24] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1992.653345][T28723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1992.752090][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1992.797910][ T24] usb 7-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=11.bf [ 1992.825559][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1992.855347][ T24] usb 7-1: Product: syz [ 1992.887609][ T24] usb 7-1: Manufacturer: syz [ 1992.929507][ T24] usb 7-1: SerialNumber: syz [ 1992.932393][ T978] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1993.011170][ T24] usb 7-1: config 0 descriptor?? [ 1993.121082][ T24] usb 7-1: MBOX3: Invalid descriptor size=18. [ 1993.184037][ T978] usb 5-1: config 0 has no interfaces? [ 1993.213041][ T978] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1993.226787][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.242233][ T978] usb 5-1: Product: syz [ 1993.246632][ T978] usb 5-1: Manufacturer: syz [ 1993.251265][ T978] usb 5-1: SerialNumber: syz [ 1993.309208][ T978] usb 5-1: config 0 descriptor?? [ 1993.681355][T28744] kvm: user requested TSC rate below hardware speed [ 1993.985250][ T24] usb 2-1: USB disconnect, device number 88 [ 1995.100439][ T5889] usb 7-1: USB disconnect, device number 73 [ 1995.378678][T28775] qrtr: Invalid version 0 [ 1995.860494][T28784] netlink: 2048 bytes leftover after parsing attributes in process `syz.5.5910'. [ 1995.885542][T28784] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5910'. [ 1996.263599][ T9] usb 5-1: USB disconnect, device number 80 [ 1996.492316][ T978] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1996.642271][T15480] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1996.662392][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 1996.669426][ T978] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1996.681948][ T978] usb 2-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 1996.691208][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.699453][ T978] usb 2-1: Product: syz [ 1996.703745][ T978] usb 2-1: Manufacturer: syz [ 1996.708393][ T978] usb 2-1: SerialNumber: syz [ 1996.792611][T15480] usb 6-1: Using ep0 maxpacket: 32 [ 1996.801771][T15480] usb 6-1: config 0 has an invalid interface number: 221 but max is 0 [ 1996.818798][T15480] usb 6-1: config 0 has no interface number 0 [ 1996.828955][T15480] usb 6-1: config 0 interface 221 has no altsetting 0 [ 1996.848623][T15480] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=34.88 [ 1996.861495][T15480] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.874249][T15480] usb 6-1: Product: syz [ 1996.878459][T15480] usb 6-1: Manufacturer: syz [ 1996.883819][T15480] usb 6-1: SerialNumber: syz [ 1996.897831][T15480] usb 6-1: config 0 descriptor?? [ 1996.930673][ T978] usb 2-1: USB disconnect, device number 89 [ 1997.002166][ T5889] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1997.162130][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 1997.179676][ T5889] usb 5-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=11.bf [ 1997.190613][T15480] qmi_wwan 6-1:0.221: probe with driver qmi_wwan failed with error -22 [ 1997.199093][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1997.228768][ T5889] usb 5-1: Product: syz [ 1997.239166][T15480] usb 6-1: USB disconnect, device number 47 [ 1997.247933][ T5889] usb 5-1: Manufacturer: syz [ 1997.259506][ T5889] usb 5-1: SerialNumber: syz [ 1997.287084][ T5889] usb 5-1: config 0 descriptor?? [ 1997.306808][ T5889] usb 5-1: MBOX3: Invalid descriptor size=18. [ 1998.432293][ T978] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1998.593341][ T978] usb 6-1: Using ep0 maxpacket: 8 [ 1998.600946][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1998.615105][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1998.627569][ T978] usb 6-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 1998.637378][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.650179][ T978] usb 6-1: config 0 descriptor?? [ 1998.802495][T15480] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1998.864351][T28825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1998.880385][T28825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1998.895173][ T978] usbhid 6-1:0.0: can't add hid device: -71 [ 1998.901477][ T978] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1998.914656][ T978] usb 6-1: USB disconnect, device number 48 [ 1998.962276][T15480] usb 7-1: Using ep0 maxpacket: 32 [ 1998.975103][T15480] usb 7-1: config 0 has an invalid interface number: 221 but max is 0 [ 1998.989447][T15480] usb 7-1: config 0 has no interface number 0 [ 1998.996880][T15480] usb 7-1: config 0 interface 221 has no altsetting 0 [ 1999.011464][T15480] usb 7-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=34.88 [ 1999.026752][T15480] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.036467][T15480] usb 7-1: Product: syz [ 1999.040845][T15480] usb 7-1: Manufacturer: syz [ 1999.041005][T28833] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1999.051019][T15480] usb 7-1: SerialNumber: syz [ 1999.069014][T15480] usb 7-1: config 0 descriptor?? [ 1999.349073][T15480] qmi_wwan 7-1:0.221: probe with driver qmi_wwan failed with error -22 [ 1999.372108][T15480] usb 7-1: USB disconnect, device number 74 [ 1999.903514][ T24] usb 5-1: USB disconnect, device number 81 [ 2000.002143][ T5889] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2000.092375][T26850] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2000.307140][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 2000.350393][ T5889] usb 2-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=11.bf [ 2000.360013][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2000.388947][T26850] usb 6-1: Using ep0 maxpacket: 8 [ 2000.471576][ T5889] usb 2-1: Product: syz [ 2000.480654][T26850] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2000.491247][ T5889] usb 2-1: Manufacturer: syz [ 2000.657004][T26850] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2000.668042][ T5889] usb 2-1: SerialNumber: syz [ 2000.725420][T26850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2000.736073][ T5889] usb 2-1: config 0 descriptor?? [ 2000.774901][ T5889] usb 2-1: MBOX3: Invalid descriptor size=18. [ 2000.781354][T26850] usb 6-1: Product: syz [ 2000.800364][T26850] usb 6-1: Manufacturer: syz [ 2000.830840][T26850] usb 6-1: SerialNumber: syz [ 2000.866843][T26850] usb 6-1: config 0 descriptor?? [ 2000.903249][T26850] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2000.914599][T26850] usb 6-1: setting power ON [ 2000.919244][T26850] dvb-usb: bulk message failed: -22 (2/0) [ 2000.931617][T26850] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2000.954262][T26850] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2000.978974][T26850] usb 6-1: media controller created [ 2001.073625][T26850] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2001.108254][T28845] dvb-usb: bulk message failed: -22 (3/0) [ 2001.119529][T28845] usb 6-1: gpio_write failed. [ 2001.128353][T28845] dvb-usb: bulk message failed: -22 (5/0) [ 2001.307460][T28858] dvb-usb: bulk message failed: -22 (4/0) [ 2001.313846][T28858] cxusb: i2c read failed [ 2001.550307][T26850] usb 6-1: selecting invalid altsetting 6 [ 2001.562075][T26850] usb 6-1: digital interface selection failed (-22) [ 2001.576901][T26850] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2001.609381][T26850] usb 6-1: setting power OFF [ 2001.629054][T26850] dvb-usb: bulk message failed: -22 (2/0) [ 2001.714675][T26850] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2001.750049][T26850] (NULL device *): no alternate interface [ 2001.876996][T26850] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2001.906175][T26850] usb 6-1: USB disconnect, device number 49 [ 2002.216854][T26850] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2002.242664][T26850] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2002.362497][ T9] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 2002.651755][T28875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5943'. [ 2002.916153][ T978] usb 2-1: USB disconnect, device number 90 [ 2003.027210][T28879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2004.421895][T28891] syz_tun: entered allmulticast mode [ 2004.696106][T11629] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 2004.872118][T11629] usb 7-1: Using ep0 maxpacket: 16 [ 2004.901479][T11629] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2004.992068][T11629] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2005.004283][T28894] ptrace attach of "./syz-executor exec"[17826] was attempted by "./syz-executor exec"[28894] [ 2005.065280][T11629] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2005.123573][T11629] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2005.242100][T11629] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.258843][T11629] usb 7-1: Product: syz [ 2005.279440][T11629] usb 7-1: Manufacturer: syz [ 2005.296528][T11629] usb 7-1: SerialNumber: syz [ 2005.324460][T11629] usb 7-1: config 0 descriptor?? [ 2005.597579][T28890] syz_tun: left allmulticast mode [ 2005.604752][T11629] usb 7-1: Can not set alternate setting to 1, error: -71 [ 2005.615870][T11629] synaptics_usb 7-1:0.0: probe with driver synaptics_usb failed with error -71 [ 2005.645268][T11629] usb 7-1: USB disconnect, device number 76 [ 2005.800802][T28900] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5953'. [ 2008.352599][ T5889] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 2008.499851][T28960] syz_tun: entered allmulticast mode [ 2008.514111][ T5889] usb 5-1: config 0 has an invalid interface number: 93 but max is 0 [ 2008.528856][ T5889] usb 5-1: config 0 has no interface number 0 [ 2008.556391][ T5889] usb 5-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 2008.571822][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.585474][T28959] syz_tun: left allmulticast mode [ 2008.597565][ T5889] usb 5-1: Product: syz [ 2008.604912][ T5889] usb 5-1: Manufacturer: syz [ 2008.609599][ T5889] usb 5-1: SerialNumber: syz [ 2008.631093][ T5889] usb 5-1: config 0 descriptor?? [ 2008.842555][ T5889] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in cold state, will try to load a firmware [ 2009.018817][ T5889] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 2009.049436][ T5889] dib0700: firmware download failed at 7 with -22 [ 2009.288176][ T5889] usb 5-1: USB disconnect, device number 82 [ 2009.584486][T28970] FAULT_INJECTION: forcing a failure. [ 2009.584486][T28970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2009.671259][T28961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2009.687789][T28970] CPU: 1 UID: 0 PID: 28970 Comm: syz.5.5975 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 2009.687821][T28970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2009.687835][T28970] Call Trace: [ 2009.687844][T28970] [ 2009.687860][T28970] dump_stack_lvl+0x189/0x250 [ 2009.687901][T28970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2009.687932][T28970] ? __pfx__printk+0x10/0x10 [ 2009.687966][T28970] should_fail_ex+0x414/0x560 [ 2009.687993][T28970] _copy_to_user+0x31/0xb0 [ 2009.688026][T28970] simple_read_from_buffer+0xe1/0x170 [ 2009.688058][T28970] proc_fail_nth_read+0x1df/0x250 [ 2009.688094][T28970] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2009.688130][T28970] ? rw_verify_area+0x258/0x650 [ 2009.688154][T28970] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2009.688187][T28970] vfs_read+0x200/0x980 [ 2009.688218][T28970] ? __pfx___mutex_lock+0x10/0x10 [ 2009.688248][T28970] ? __pfx_vfs_read+0x10/0x10 [ 2009.688275][T28970] ? __fget_files+0x2a/0x420 [ 2009.688308][T28970] ? __fget_files+0x3a0/0x420 [ 2009.688336][T28970] ? __fget_files+0x2a/0x420 [ 2009.688375][T28970] ksys_read+0x145/0x250 [ 2009.688404][T28970] ? __pfx_ksys_read+0x10/0x10 [ 2009.688432][T28970] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2009.688462][T28970] ? lockdep_hardirqs_on+0x9c/0x150 [ 2009.688491][T28970] __do_fast_syscall_32+0xb4/0x110 [ 2009.688521][T28970] ? lockdep_hardirqs_on+0x9c/0x150 [ 2009.688553][T28970] do_fast_syscall_32+0x34/0x80 [ 2009.688583][T28970] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2009.688608][T28970] RIP: 0023:0xf7fb8539 [ 2009.688627][T28970] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2009.688647][T28970] RSP: 002b:00000000f50d6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2009.688669][T28970] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50d6620 [ 2009.688684][T28970] RDX: 000000000000000f RSI: 00000000f7442ff4 RDI: 0000000000000000 [ 2009.688697][T28970] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2009.688710][T28970] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2009.688723][T28970] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2009.688754][T28970] [ 2010.932265][T15480] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 2011.088466][T15480] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 2011.132587][T15480] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 2011.160317][T15480] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2011.220346][T28990] syz_tun: entered allmulticast mode [ 2011.221141][T15480] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 2011.250408][T15480] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2011.270629][T15480] usb 5-1: Product: syz [ 2011.302384][ T9] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 2011.315184][T15480] usb 5-1: Manufacturer: syz [ 2011.326272][T15480] usb 5-1: SerialNumber: syz [ 2011.343564][T15480] usb 5-1: config 0 descriptor?? [ 2011.349215][T28989] syz_tun: left allmulticast mode [ 2011.498001][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 2011.535368][ T9] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 2011.546273][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2011.556677][ T9] usb 7-1: config 0 has no interface number 0 [ 2011.567332][ T9] usb 7-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 2011.576741][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2011.661481][ T9] usb 7-1: Product: syz [ 2011.666071][ T9] usb 7-1: Manufacturer: syz [ 2011.670925][ T9] usb 7-1: SerialNumber: syz [ 2011.759371][ T9] usb 7-1: config 0 descriptor?? [ 2011.789253][ T9] usb 7-1: Found UVC 0.00 device syz (046c:14e8) [ 2011.802134][ T9] usb 7-1: No valid video chain found. [ 2012.350247][ T9] usb 7-1: USB disconnect, device number 77 [ 2013.000958][T29005] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 2013.247667][T15480] powermate: unknown product id 0240 [ 2013.253179][T15480] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 2013.262414][T15480] powermate 5-1:0.0: probe with driver powermate failed with error -5 [ 2013.322795][ T9] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 2013.330587][T11629] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2013.432419][T15480] usb 5-1: USB disconnect, device number 83 [ 2013.515510][T11629] usb 2-1: config 0 has no interfaces? [ 2013.521255][ T9] usb 7-1: config 0 has no interfaces? [ 2013.530721][T11629] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2013.562152][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2013.580311][T11629] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2013.591108][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2013.599456][T11629] usb 2-1: Product: syz [ 2013.604018][ T9] usb 7-1: Product: syz [ 2013.608195][T11629] usb 2-1: Manufacturer: syz [ 2013.613161][ T9] usb 7-1: Manufacturer: syz [ 2013.622445][T11629] usb 2-1: config 0 descriptor?? [ 2013.634202][ T9] usb 7-1: config 0 descriptor?? [ 2013.833901][T15480] usb 2-1: USB disconnect, device number 91 [ 2013.858347][ T5889] usb 7-1: USB disconnect, device number 78 [ 2014.149777][T29022] syz_tun: entered allmulticast mode [ 2014.216945][T29021] syz_tun: left allmulticast mode [ 2015.544237][T11629] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2015.717684][T11629] usb 6-1: Using ep0 maxpacket: 16 [ 2015.749648][T11629] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2015.787392][T11629] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2015.835061][T11629] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2015.869534][T11629] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2015.892057][T11629] usb 6-1: Product: syz [ 2015.896757][T11629] usb 6-1: Manufacturer: syz [ 2015.922451][T11629] usb 6-1: SerialNumber: syz [ 2016.072582][T29056] dlm: no locking on control device [ 2016.252315][ T30] audit: type=1804 audit(1747147267.429:3926): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.6005" name="/newroot/264/bus" dev="tmpfs" ino=1377 res=1 errno=0 [ 2016.509943][T29066] netlink: 'syz.1.6007': attribute type 10 has an invalid length. [ 2016.518224][T29066] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6007'. [ 2016.537678][T29067] qrtr: Invalid version 0 [ 2017.961828][T29077] veth1_macvtap: left promiscuous mode [ 2017.967784][T29077] macsec0: entered promiscuous mode [ 2017.983474][T29077] veth1_macvtap: entered promiscuous mode [ 2017.990514][T29077] macsec0: left promiscuous mode [ 2018.174990][T29084] syz_tun: entered allmulticast mode [ 2018.228529][T11629] usb 6-1: 0:2 : does not exist [ 2018.262870][T11629] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 2018.332212][T11629] usb 6-1: USB disconnect, device number 50 [ 2018.514225][T27405] udevd[27405]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2018.572450][ T5889] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 2018.742130][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 2018.749366][ T5889] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2018.770802][ T5889] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2018.804524][ T5889] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2018.833719][ T5889] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2018.852775][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2018.878992][ T5889] usb 5-1: Product: syz [ 2018.885019][ T5889] usb 5-1: Manufacturer: syz [ 2018.892411][ T5889] usb 5-1: SerialNumber: syz [ 2018.912588][ T5889] usb 5-1: config 0 descriptor?? [ 2019.137843][ T5889] usb 5-1: Can not set alternate setting to 1, error: -71 [ 2019.146543][T29083] syz_tun: left allmulticast mode [ 2019.182321][ T5889] synaptics_usb 5-1:0.0: probe with driver synaptics_usb failed with error -71 [ 2019.229819][ T5889] usb 5-1: USB disconnect, device number 84 [ 2019.723600][T29115] ptrace attach of "./syz-executor exec"[24636] was attempted by "./syz-executor exec"[29115] [ 2019.830691][T29116] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6022'. [ 2020.673741][T29122] xt_NFQUEUE: number of total queues is 0 [ 2021.021573][T29131] qrtr: Invalid version 0 [ 2021.893263][T29136] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6029'. [ 2021.949735][T29138] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2021.968641][T29138] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2021.978811][T29138] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2021.991181][T29138] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2021.999132][T29138] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2022.177796][T29141] ptrace attach of "./syz-executor exec"[24636] was attempted by "./syz-executor exec"[29141] [ 2022.278084][T29142] netlink: 'syz.6.6029': attribute type 10 has an invalid length. [ 2022.484236][T29142] bridge0: port 2(bridge_slave_1) entered disabled state [ 2022.486136][T29142] bridge0: port 1(bridge_slave_0) entered disabled state [ 2022.516178][T29142] bridge0: port 2(bridge_slave_1) entered blocking state [ 2022.523460][T29142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2022.531148][T29142] bridge0: port 1(bridge_slave_0) entered blocking state [ 2022.538389][T29142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2022.678273][T29142] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2022.752628][T29148] FAULT_INJECTION: forcing a failure. [ 2022.752628][T29148] name failslab, interval 1, probability 0, space 0, times 0 [ 2022.802195][T29148] CPU: 1 UID: 0 PID: 29148 Comm: syz.4.6030 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 2022.802227][T29148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2022.802241][T29148] Call Trace: [ 2022.802251][T29148] [ 2022.802261][T29148] dump_stack_lvl+0x189/0x250 [ 2022.802301][T29148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2022.802333][T29148] ? __pfx__printk+0x10/0x10 [ 2022.802360][T29148] ? __pfx___might_resched+0x10/0x10 [ 2022.802387][T29148] should_fail_ex+0x414/0x560 [ 2022.802416][T29148] should_failslab+0xa8/0x100 [ 2022.802447][T29148] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2022.802477][T29148] ? __alloc_skb+0x112/0x2d0 [ 2022.802509][T29148] __alloc_skb+0x112/0x2d0 [ 2022.802540][T29148] netlink_sendmsg+0x5c6/0xb30 [ 2022.802577][T29148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2022.802605][T29148] ? __import_iovec+0x5d4/0x7f0 [ 2022.802633][T29148] ? aa_sock_msg_perm+0x94/0x160 [ 2022.802659][T29148] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2022.802684][T29148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2022.802712][T29148] __sock_sendmsg+0x21c/0x270 [ 2022.802738][T29148] ____sys_sendmsg+0x505/0x830 [ 2022.802773][T29148] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2022.802820][T29148] ___sys_sendmsg+0x21f/0x2a0 [ 2022.802852][T29148] ? __pfx____sys_sendmsg+0x10/0x10 [ 2022.802921][T29148] ? __fget_files+0x2a/0x420 [ 2022.802950][T29148] ? __fget_files+0x3a0/0x420 [ 2022.802991][T29148] __sys_sendmsg+0x164/0x220 [ 2022.803031][T29148] ? __pfx___sys_sendmsg+0x10/0x10 [ 2022.803077][T29148] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2022.803106][T29148] ? lockdep_hardirqs_on+0x9c/0x150 [ 2022.803135][T29148] __do_fast_syscall_32+0xb4/0x110 [ 2022.803164][T29148] ? lockdep_hardirqs_on+0x9c/0x150 [ 2022.803195][T29148] do_fast_syscall_32+0x34/0x80 [ 2022.803224][T29148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2022.803250][T29148] RIP: 0023:0xf7f07539 [ 2022.803269][T29148] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2022.803288][T29148] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2022.803311][T29148] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 2022.803326][T29148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2022.803339][T29148] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2022.803351][T29148] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2022.803364][T29148] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2022.803395][T29148] [ 2023.285790][T29139] chnl_net:caif_netlink_parms(): no params data found [ 2023.363432][T29156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6032'. [ 2023.670219][T29139] bridge0: port 1(bridge_slave_0) entered blocking state [ 2023.682490][T29139] bridge0: port 1(bridge_slave_0) entered disabled state [ 2023.700262][T29139] bridge_slave_0: entered allmulticast mode [ 2023.724457][T29139] bridge_slave_0: entered promiscuous mode [ 2023.748759][T29139] bridge0: port 2(bridge_slave_1) entered blocking state [ 2023.799584][T29139] bridge0: port 2(bridge_slave_1) entered disabled state [ 2023.811184][T29139] bridge_slave_1: entered allmulticast mode [ 2023.852388][T29139] bridge_slave_1: entered promiscuous mode [ 2024.013581][ T5889] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2024.073732][T24631] Bluetooth: hci1: command tx timeout [ 2024.111502][T29139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2024.172106][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 2024.186743][T29139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2024.198689][ T5889] usb 6-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=11.bf [ 2024.310626][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2024.329394][ T5889] usb 6-1: Product: syz [ 2024.352021][ T5889] usb 6-1: Manufacturer: syz [ 2024.358558][ T5889] usb 6-1: SerialNumber: syz [ 2024.373573][ T5889] usb 6-1: config 0 descriptor?? [ 2024.389480][ T5889] usb 6-1: MBOX3: Invalid descriptor size=18. [ 2024.599237][T29139] team0: Port device team_slave_0 added [ 2024.625878][T29139] team0: Port device team_slave_1 added [ 2024.877055][T29182] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6038'. [ 2025.020976][T29139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2025.045193][T29139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2025.254950][T29139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2025.302545][T29139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2025.313504][T29139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2025.353608][T29139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2025.463485][ T5889] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 2025.512093][T29139] hsr_slave_0: entered promiscuous mode [ 2025.519470][T29139] hsr_slave_1: entered promiscuous mode [ 2025.532216][T29139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2025.542168][T29139] Cannot create hsr debugfs directory [ 2025.663804][ T5889] usb 5-1: config 0 has an invalid interface number: 194 but max is 0 [ 2025.672253][ T5889] usb 5-1: config 0 has no interface number 0 [ 2025.678429][ T5889] usb 5-1: config 0 interface 194 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2025.737127][ T5889] usb 5-1: config 0 interface 194 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2025.781215][ T5889] usb 5-1: New USB device found, idVendor=07c0, idProduct=1503, bcdDevice=b0.de [ 2025.790725][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.819403][ T5889] usb 5-1: Product: syz [ 2025.837189][ T5889] usb 5-1: Manufacturer: syz [ 2025.865532][ T5889] usb 5-1: SerialNumber: syz [ 2025.898958][ T5889] usb 5-1: config 0 descriptor?? [ 2025.925687][ T5889] iowarrior 5-1:0.194: no interrupt-out endpoint found [ 2026.162122][T24631] Bluetooth: hci1: command tx timeout [ 2026.277028][ T30] audit: type=1326 audit(1747147277.459:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29183 comm="syz.4.6039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 2026.299508][ T30] audit: type=1326 audit(1747147277.459:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29183 comm="syz.4.6039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 2026.323729][ T30] audit: type=1326 audit(1747147277.469:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29183 comm="syz.4.6039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 2026.362976][T29190] ptrace attach of "./syz-executor exec"[24894] was attempted by "./syz-executor exec"[29190] [ 2026.383882][T29194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6039'. [ 2026.396813][ T30] audit: type=1326 audit(1747147277.469:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29183 comm="syz.4.6039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 2026.441867][ T30] audit: type=1326 audit(1747147277.469:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29183 comm="syz.4.6039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 2026.566186][ T30] audit: type=1326 audit(1747147277.469:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29183 comm="syz.4.6039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 2026.598792][ T30] audit: type=1326 audit(1747147277.469:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29183 comm="syz.4.6039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 2026.621580][ T30] audit: type=1326 audit(1747147277.499:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29183 comm="syz.4.6039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 2026.671001][ T30] audit: type=1326 audit(1747147277.619:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29183 comm="syz.4.6039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 2026.694289][ T30] audit: type=1326 audit(1747147277.619:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29183 comm="syz.4.6039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 2026.854396][T29139] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2026.873132][T29139] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2026.892294][T29139] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2026.914332][T29139] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2027.162861][T11629] usb 6-1: USB disconnect, device number 51 [ 2027.214209][T29139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2027.240617][T29139] 8021q: adding VLAN 0 to HW filter on device team0 [ 2027.255138][T25889] bridge0: port 1(bridge_slave_0) entered blocking state [ 2027.262320][T25889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2027.300130][T25889] bridge0: port 2(bridge_slave_1) entered blocking state [ 2027.307362][T25889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2027.417506][T29139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2027.590715][T29139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2027.675564][T29203] netlink: 'syz.5.6041': attribute type 10 has an invalid length. [ 2027.687303][T29203] netlink: 55 bytes leftover after parsing attributes in process `syz.5.6041'. [ 2027.880014][T29139] veth0_vlan: entered promiscuous mode [ 2027.907611][T29139] veth1_vlan: entered promiscuous mode [ 2028.034720][T29139] veth0_macvtap: entered promiscuous mode [ 2028.056831][T29139] veth1_macvtap: entered promiscuous mode [ 2028.092862][T29139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2028.103841][T29139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2028.117364][T29139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2028.128351][T29139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2028.139710][T29139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2028.153314][T29139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2028.158224][T15480] usb 5-1: USB disconnect, device number 85 [ 2028.165890][T29139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2028.243782][T24631] Bluetooth: hci1: command tx timeout [ 2028.262121][ T5889] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 2028.278833][T29139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2028.401169][T29139] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2028.418207][T29139] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2028.427186][T29139] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2028.439316][T29139] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2028.442219][ T5889] usb 7-1: Using ep0 maxpacket: 16 [ 2028.482682][ T5889] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2028.493260][ T5889] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2028.510289][ T5889] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2028.520164][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.530936][ T5889] usb 7-1: Product: syz [ 2028.539711][ T5889] usb 7-1: Manufacturer: syz [ 2028.544850][ T5889] usb 7-1: SerialNumber: syz [ 2028.968632][T29220] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6048'. [ 2029.168760][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2029.203528][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2029.269618][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2029.289135][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2030.338070][T24631] Bluetooth: hci1: command tx timeout [ 2030.392452][ T978] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2030.572212][ T978] usb 6-1: Using ep0 maxpacket: 32 [ 2030.639968][T29244] ptrace attach of "./syz-executor exec"[17512] was attempted by "./syz-executor exec"[29244] [ 2030.690317][ T978] usb 6-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=11.bf [ 2030.734312][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2031.022128][ T978] usb 6-1: Product: syz [ 2031.058114][ T5889] usb 7-1: 0:2 : does not exist [ 2031.092113][ T978] usb 6-1: Manufacturer: syz [ 2031.096796][ T978] usb 6-1: SerialNumber: syz [ 2031.127760][ T978] usb 6-1: config 0 descriptor?? [ 2031.165037][ T978] usb 6-1: MBOX3: Invalid descriptor size=18. [ 2031.196901][ T5889] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 2031.274125][T29138] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2031.287368][T29138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2031.298813][T29138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2031.307149][T29138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2031.315845][T29138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2031.633980][ T5889] usb 7-1: USB disconnect, device number 79 [ 2031.726858][T27405] udevd[27405]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2031.996955][T25886] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2032.012087][ T5889] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 2032.222131][ T5889] usb 7-1: Using ep0 maxpacket: 32 [ 2032.244339][ T5889] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2032.253802][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2032.266886][ T5889] usb 7-1: config 0 descriptor?? [ 2032.516718][ T5889] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2032.537405][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2032.573122][T25886] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2032.613897][ T5889] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2032.621098][ T5889] usb 7-1: media controller created [ 2032.794000][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2032.829105][ T978] usb 6-1: USB disconnect, device number 52 [ 2032.837796][T25886] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2032.903699][ T5889] az6027: usb out operation failed. (-71) [ 2032.927311][ T5889] az6027: usb out operation failed. (-71) [ 2032.934844][ T5889] stb0899_attach: Driver disabled by Kconfig [ 2032.942411][ T5889] az6027: no front-end attached [ 2032.942411][ T5889] [ 2032.964345][T29248] chnl_net:caif_netlink_parms(): no params data found [ 2032.973114][ T5889] az6027: usb out operation failed. (-71) [ 2032.983424][ T5889] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2033.023866][ T5889] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input176 [ 2033.069690][T29254] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6058'. [ 2033.073363][ T5889] dvb-usb: schedule remote query interval to 400 msecs. [ 2033.100856][ T5889] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2033.111547][T25886] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2033.134539][ T5889] usb 7-1: USB disconnect, device number 80 [ 2033.334791][T29264] ptrace attach of "./syz-executor exec"[24636] was attempted by "./syz-executor exec"[29264] [ 2033.378703][ T5889] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2033.433677][T24631] Bluetooth: hci5: command tx timeout [ 2033.514343][T29262] netlink: 'syz.0.6057': attribute type 10 has an invalid length. [ 2033.523093][T29262] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6057'. [ 2033.687561][T29274] --map-set only usable from mangle table [ 2034.779557][T29248] bridge0: port 1(bridge_slave_0) entered blocking state [ 2034.802139][T29248] bridge0: port 1(bridge_slave_0) entered disabled state [ 2034.813289][T29248] bridge_slave_0: entered allmulticast mode [ 2034.831657][T29248] bridge_slave_0: entered promiscuous mode [ 2034.906779][T29248] bridge0: port 2(bridge_slave_1) entered blocking state [ 2034.953714][T29248] bridge0: port 2(bridge_slave_1) entered disabled state [ 2034.975650][T29248] bridge_slave_1: entered allmulticast mode [ 2034.994393][T29248] bridge_slave_1: entered promiscuous mode [ 2035.229146][T29248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2035.298211][T29248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2035.450814][T25886] bridge_slave_1: left allmulticast mode [ 2035.462177][T25886] bridge_slave_1: left promiscuous mode [ 2035.467932][T25886] bridge0: port 2(bridge_slave_1) entered disabled state [ 2035.514019][T24631] Bluetooth: hci5: command tx timeout [ 2035.610445][T25886] bridge_slave_0: left allmulticast mode [ 2035.635574][T25886] bridge_slave_0: left promiscuous mode [ 2035.656524][T25886] bridge0: port 1(bridge_slave_0) entered disabled state [ 2035.700351][T29294] FAULT_INJECTION: forcing a failure. [ 2035.700351][T29294] name failslab, interval 1, probability 0, space 0, times 0 [ 2035.733824][T29294] CPU: 1 UID: 0 PID: 29294 Comm: syz.1.6069 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 2035.733857][T29294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2035.733871][T29294] Call Trace: [ 2035.733881][T29294] [ 2035.733891][T29294] dump_stack_lvl+0x189/0x250 [ 2035.733932][T29294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2035.733964][T29294] ? __pfx__printk+0x10/0x10 [ 2035.733988][T29294] ? __pfx___might_resched+0x10/0x10 [ 2035.734009][T29294] ? fs_reclaim_acquire+0x7d/0x100 [ 2035.734066][T29294] should_fail_ex+0x414/0x560 [ 2035.734094][T29294] should_failslab+0xa8/0x100 [ 2035.734125][T29294] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2035.734153][T29294] ? __alloc_skb+0x112/0x2d0 [ 2035.734184][T29294] __alloc_skb+0x112/0x2d0 [ 2035.734215][T29294] alloc_skb_with_frags+0xca/0x890 [ 2035.734249][T29294] ? __lock_acquire+0xaac/0xd20 [ 2035.734293][T29294] sock_alloc_send_pskb+0x857/0x990 [ 2035.734345][T29294] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2035.734375][T29294] ? dev_get_by_index+0x22/0x2e0 [ 2035.734389][T29294] ? dev_get_by_index+0x22/0x2e0 [ 2035.734408][T29294] packet_sendmsg+0x3664/0x5400 [ 2035.734451][T29294] ? __pfx___might_resched+0x10/0x10 [ 2035.734478][T29294] ? __pfx_packet_sendmsg+0x10/0x10 [ 2035.734496][T29294] ? aa_sk_perm+0x81e/0x950 [ 2035.734517][T29294] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 2035.734540][T29294] ? __asan_memset+0x22/0x50 [ 2035.734556][T29294] ? __import_iovec+0x40e/0x7f0 [ 2035.734577][T29294] ? aa_sock_msg_perm+0x94/0x160 [ 2035.734595][T29294] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2035.734613][T29294] ? __pfx_packet_sendmsg+0x10/0x10 [ 2035.734633][T29294] __sock_sendmsg+0x21c/0x270 [ 2035.734651][T29294] ____sys_sendmsg+0x505/0x830 [ 2035.734677][T29294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2035.734710][T29294] ___sys_sendmsg+0x21f/0x2a0 [ 2035.734733][T29294] ? __pfx____sys_sendmsg+0x10/0x10 [ 2035.734780][T29294] ? __fget_files+0x2a/0x420 [ 2035.734801][T29294] ? __fget_files+0x3a0/0x420 [ 2035.734829][T29294] __sys_sendmsg+0x164/0x220 [ 2035.734852][T29294] ? __pfx___sys_sendmsg+0x10/0x10 [ 2035.734884][T29294] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2035.734905][T29294] ? lockdep_hardirqs_on+0x9c/0x150 [ 2035.734926][T29294] __do_fast_syscall_32+0xb4/0x110 [ 2035.734948][T29294] ? lockdep_hardirqs_on+0x9c/0x150 [ 2035.734969][T29294] do_fast_syscall_32+0x34/0x80 [ 2035.734990][T29294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2035.735010][T29294] RIP: 0023:0xf7f17539 [ 2035.735024][T29294] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2035.735038][T29294] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2035.735055][T29294] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000640 [ 2035.735066][T29294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2035.735075][T29294] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2035.735085][T29294] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2035.735094][T29294] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2035.735115][T29294] [ 2036.403085][T29300] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6070'. [ 2036.483341][T29301] ptrace attach of "./syz-executor exec"[24636] was attempted by "./syz-executor exec"[29301] [ 2036.502346][T11629] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 2036.772170][T11629] usb 7-1: Using ep0 maxpacket: 32 [ 2036.970428][T11629] usb 7-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=11.bf [ 2036.980759][T11629] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.050499][T11629] usb 7-1: Product: syz [ 2037.083672][T11629] usb 7-1: Manufacturer: syz [ 2037.088330][T11629] usb 7-1: SerialNumber: syz [ 2037.177358][T11629] usb 7-1: config 0 descriptor?? [ 2037.204337][T11629] usb 7-1: MBOX3: Invalid descriptor size=18. [ 2037.278764][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.285943][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.570856][T25886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2037.584138][T25886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2037.592477][T24631] Bluetooth: hci5: command tx timeout [ 2037.601041][T25886] bond0 (unregistering): Released all slaves [ 2037.627611][T29248] team0: Port device team_slave_0 added [ 2037.669844][T29248] team0: Port device team_slave_1 added [ 2037.790573][T25886] tipc: Left network mode [ 2037.918815][T29248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2037.934732][T29248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2037.960640][ C0] vkms_vblank_simulate: vblank timer overrun [ 2037.988540][T29248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2038.035605][T29312] ptrace attach of "./syz-executor exec"[17512] was attempted by "./syz-executor exec"[29312] [ 2038.070668][T29248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2038.086429][T29248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2038.112390][ C0] vkms_vblank_simulate: vblank timer overrun [ 2038.141726][T29248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2038.241472][T25886] hsr_slave_0: left promiscuous mode [ 2038.250574][T25886] hsr_slave_1: left promiscuous mode [ 2038.260471][T25886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2038.268483][T25886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2038.278136][T25886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2038.320435][T25886] veth1_macvtap: left promiscuous mode [ 2038.326293][T25886] veth0_macvtap: left promiscuous mode [ 2038.333232][T25886] veth1_vlan: left promiscuous mode [ 2038.338923][T25886] veth0_vlan: left promiscuous mode [ 2038.668880][T11629] usb 7-1: USB disconnect, device number 81 [ 2038.829873][T29323] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2039.372068][ T5889] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 2039.532358][ T5889] usb 7-1: Using ep0 maxpacket: 16 [ 2039.546692][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2039.566879][ T5889] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2039.568777][T25886] team0 (unregistering): Port device team_slave_1 removed [ 2039.588812][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2039.614321][ T5889] usb 7-1: config 0 descriptor?? [ 2039.651123][T25886] team0 (unregistering): Port device team_slave_0 removed [ 2039.672627][T24631] Bluetooth: hci5: command tx timeout [ 2039.757108][T29341] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6080'. [ 2039.849589][T29342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2039.870632][T29343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2039.876681][T29342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2039.907552][T29343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2039.915673][T29342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2039.950515][T29343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2039.951199][T29342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2039.967131][T29343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2040.029275][T29343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2040.056351][T29343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2040.130110][ T5889] mcp2221 0003:04D8:00DD.0014: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 2040.192122][ T24] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2040.418771][ C1] ================================================================== [ 2040.426900][ C1] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0xfcd/0x1190 [ 2040.434854][ C1] Read of size 1 at addr ffff88805bb93fff by task kworker/1:0/24 [ 2040.442616][ C1] [ 2040.444988][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 2040.445022][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2040.445041][ C1] Workqueue: usb_hub_wq hub_event [ 2040.445080][ C1] Call Trace: [ 2040.445090][ C1] [ 2040.445102][ C1] dump_stack_lvl+0x189/0x250 [ 2040.445140][ C1] ? rcu_is_watching+0x15/0xb0 [ 2040.445163][ C1] ? __kasan_check_byte+0x12/0x40 [ 2040.445197][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2040.445228][ C1] ? rcu_is_watching+0x15/0xb0 [ 2040.445249][ C1] ? lock_release+0x4b/0x3e0 [ 2040.445283][ C1] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 2040.445312][ C1] ? __virt_addr_valid+0x18c/0x540 [ 2040.445344][ C1] ? __virt_addr_valid+0x469/0x540 [ 2040.445378][ C1] print_report+0xb4/0x290 [ 2040.445408][ C1] ? mcp2221_raw_event+0xfcd/0x1190 [ 2040.445440][ C1] kasan_report+0x118/0x150 [ 2040.445474][ C1] ? mcp2221_raw_event+0xfcd/0x1190 [ 2040.445512][ C1] mcp2221_raw_event+0xfcd/0x1190 [ 2040.445544][ C1] ? down_trylock+0x50/0xb0 [ 2040.445577][ C1] hid_input_report+0x407/0x520 [ 2040.445606][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 2040.445641][ C1] hid_irq_in+0x47e/0x6d0 [ 2040.445677][ C1] __usb_hcd_giveback_urb+0x41a/0x690 [ 2040.445702][ C1] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 2040.445728][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 2040.445756][ C1] ? usb_hcd_giveback_urb+0x10e/0x420 [ 2040.445780][ C1] dummy_timer+0x862/0x4550 [ 2040.445845][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 2040.445885][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 2040.445920][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 2040.445964][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 2040.446012][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2040.446048][ C1] ? read_tsc+0x9/0x20 [ 2040.446069][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 2040.446100][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 2040.446126][ C1] handle_softirqs+0x283/0x870 [ 2040.446151][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 2040.446175][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2040.446200][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 2040.446232][ C1] __irq_exit_rcu+0xca/0x1f0 [ 2040.446251][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 2040.446278][ C1] irq_exit_rcu+0x9/0x30 [ 2040.446298][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2040.446326][ C1] [ 2040.446334][ C1] [ 2040.446344][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2040.446370][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 2040.446400][ C1] Code: 74 05 e8 7b a4 6e f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 03 27 38 f6 65 8b 05 6c c5 1c 07 85 c0 74 40 48 c7 04 24 0e 36 [ 2040.446424][ C1] RSP: 0018:ffffc900001e71a0 EFLAGS: 00000206 [ 2040.446447][ C1] RAX: 834e0718ede05700 RBX: 0000000000000a02 RCX: 834e0718ede05700 [ 2040.446467][ C1] RDX: 0000000000000006 RSI: ffffffff8d74c01e RDI: 0000000000000001 [ 2040.446484][ C1] RBP: ffffc900001e7230 R08: ffffffff8f7efb77 R09: 1ffffffff1efdf6e [ 2040.446504][ C1] R10: dffffc0000000000 R11: fffffbfff1efdf6f R12: dffffc0000000000 [ 2040.446523][ C1] R13: ffff888028054100 R14: ffffffff8ebccfc0 R15: 1ffff9200003ce34 [ 2040.446554][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2040.446584][ C1] ? usb_hcd_giveback_urb+0x2f8/0x420 [ 2040.446610][ C1] usb_hcd_poll_rh_status+0x406/0x620 [ 2040.446637][ C1] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 2040.446666][ C1] dummy_hub_control+0xf83/0x17e0 [ 2040.446708][ C1] usb_hcd_submit_urb+0xe07/0x1aa0 [ 2040.446738][ C1] usb_start_wait_urb+0x114/0x4c0 [ 2040.446775][ C1] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2040.446818][ C1] usb_control_msg+0x232/0x3e0 [ 2040.446849][ C1] ? __pfx_process_timeout+0x10/0x10 [ 2040.446874][ C1] hub_ext_port_status+0x116/0x820 [ 2040.446911][ C1] hub_port_reset+0x72e/0x1750 [ 2040.446969][ C1] hub_port_init+0xfb9/0x2800 [ 2040.447014][ C1] hub_event+0x2518/0x4a00 [ 2040.447072][ C1] ? __pfx_hub_event+0x10/0x10 [ 2040.447105][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 2040.447131][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2040.447151][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 2040.447166][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 2040.447182][ C1] process_scheduled_works+0xade/0x17a0 [ 2040.447210][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2040.447243][ C1] worker_thread+0x8a0/0xda0 [ 2040.447269][ C1] kthread+0x711/0x8a0 [ 2040.447290][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2040.447306][ C1] ? __pfx_kthread+0x10/0x10 [ 2040.447326][ C1] ? __pfx_kthread+0x10/0x10 [ 2040.447345][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2040.447362][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2040.447382][ C1] ? __pfx_kthread+0x10/0x10 [ 2040.447401][ C1] ret_from_fork+0x4b/0x80 [ 2040.447418][ C1] ? __pfx_kthread+0x10/0x10 [ 2040.447437][ C1] ret_from_fork_asm+0x1a/0x30 [ 2040.447459][ C1] [ 2040.447465][ C1] [ 2040.927158][ C1] Allocated by task 17230: [ 2040.931575][ C1] kasan_save_track+0x3e/0x80 [ 2040.936254][ C1] __kasan_slab_alloc+0x6c/0x80 [ 2040.941108][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 2040.946570][ C1] __kernfs_new_node+0xd7/0x7f0 [ 2040.951432][ C1] kernfs_new_node+0x102/0x210 [ 2040.956204][ C1] __kernfs_create_file+0x4b/0x2e0 [ 2040.961315][ C1] sysfs_add_file_mode_ns+0x238/0x300 [ 2040.966689][ C1] internal_create_group+0x66d/0x1110 [ 2040.972071][ C1] sysfs_create_groups+0x59/0x120 [ 2040.977104][ C1] device_add_attrs+0xe0/0x5a0 [ 2040.981892][ C1] device_add+0x496/0xb50 [ 2040.986223][ C1] netdev_register_kobject+0x156/0x2f0 [ 2040.991685][ C1] register_netdevice+0x126c/0x1af0 [ 2040.996889][ C1] veth_newlink+0x42f/0xa50 [ 2041.001390][ C1] rtnl_newlink_create+0x305/0xaf0 [ 2041.006501][ C1] rtnl_newlink+0x16d6/0x1c70 [ 2041.011182][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 2041.016121][ C1] netlink_rcv_skb+0x21c/0x490 [ 2041.020888][ C1] netlink_unicast+0x758/0x8d0 [ 2041.025648][ C1] netlink_sendmsg+0x805/0xb30 [ 2041.030408][ C1] __sock_sendmsg+0x21c/0x270 [ 2041.035079][ C1] __sys_sendto+0x3bd/0x520 [ 2041.039582][ C1] __ia32_compat_sys_socketcall+0x71c/0x9c0 [ 2041.045481][ C1] __do_fast_syscall_32+0xb4/0x110 [ 2041.050594][ C1] do_fast_syscall_32+0x34/0x80 [ 2041.055447][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2041.061774][ C1] [ 2041.064092][ C1] The buggy address belongs to the object at ffff88805bb93f00 [ 2041.064092][ C1] which belongs to the cache kernfs_node_cache of size 176 [ 2041.078669][ C1] The buggy address is located 79 bytes to the right of [ 2041.078669][ C1] allocated 176-byte region [ffff88805bb93f00, ffff88805bb93fb0) [ 2041.093280][ C1] [ 2041.095599][ C1] The buggy address belongs to the physical page: [ 2041.102010][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bb93 [ 2041.110778][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 2041.117890][ C1] page_type: f5(slab) [ 2041.121871][ C1] raw: 00fff00000000000 ffff88801b2b8dc0 dead000000000122 0000000000000000 [ 2041.130453][ C1] raw: 0000000000000000 0000000000110011 00000000f5000000 0000000000000000 [ 2041.139028][ C1] page dumped because: kasan: bad access detected [ 2041.145444][ C1] page_owner tracks the page as allocated [ 2041.151152][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 17230, tgid 17230 (syz-executor), ts 998961513027, free_ts 998954418826 [ 2041.170779][ C1] post_alloc_hook+0x1d8/0x230 [ 2041.175554][ C1] get_page_from_freelist+0x21ce/0x22b0 [ 2041.181098][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 2041.186923][ C1] alloc_pages_mpol+0x232/0x4a0 [ 2041.191775][ C1] allocate_slab+0x8a/0x3b0 [ 2041.196291][ C1] ___slab_alloc+0xbfc/0x1480 [ 2041.200972][ C1] kmem_cache_alloc_noprof+0x283/0x3c0 [ 2041.206435][ C1] __kernfs_new_node+0xd7/0x7f0 [ 2041.211291][ C1] kernfs_new_node+0x102/0x210 [ 2041.216063][ C1] __kernfs_create_file+0x4b/0x2e0 [ 2041.221174][ C1] sysfs_add_file_mode_ns+0x238/0x300 [ 2041.226545][ C1] internal_create_group+0x66d/0x1110 [ 2041.232016][ C1] sysfs_create_groups+0x59/0x120 [ 2041.237046][ C1] device_add_attrs+0xe0/0x5a0 [ 2041.241823][ C1] device_add+0x496/0xb50 [ 2041.246152][ C1] netdev_register_kobject+0x156/0x2f0 [ 2041.251617][ C1] page last free pid 10733 tgid 10733 stack trace: [ 2041.258122][ C1] __free_frozen_pages+0xb0e/0xcd0 [ 2041.263249][ C1] __slab_free+0x326/0x400 [ 2041.267677][ C1] qlist_free_all+0x9a/0x140 [ 2041.272271][ C1] kasan_quarantine_reduce+0x148/0x160 [ 2041.277753][ C1] __kasan_slab_alloc+0x22/0x80 [ 2041.282615][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 2041.288080][ C1] getname_flags+0xb8/0x540 [ 2041.292591][ C1] do_sys_openat2+0xbc/0x1c0 [ 2041.297181][ C1] __x64_sys_openat+0x138/0x170 [ 2041.302037][ C1] do_syscall_64+0xf6/0x210 [ 2041.306571][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2041.312469][ C1] [ 2041.314808][ C1] Memory state around the buggy address: [ 2041.320443][ C1] ffff88805bb93e80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 2041.328514][ C1] ffff88805bb93f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2041.336593][ C1] >ffff88805bb93f80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 2041.344661][ C1] ^ [ 2041.352647][ C1] ffff88805bb94000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2041.360718][ C1] ffff88805bb94080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2041.368791][ C1] ================================================================== [ 2041.376893][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2041.384096][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 2041.395997][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2041.406082][ C1] Workqueue: usb_hub_wq hub_event [ 2041.411128][ C1] Call Trace: [ 2041.414411][ C1] [ 2041.417260][ C1] dump_stack_lvl+0x99/0x250 [ 2041.421868][ C1] ? __asan_memcpy+0x40/0x70 [ 2041.426463][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2041.431674][ C1] ? __pfx__printk+0x10/0x10 [ 2041.436271][ C1] panic+0x2db/0x790 [ 2041.440175][ C1] ? __pfx_panic+0x10/0x10 [ 2041.444602][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 2041.449808][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2041.455706][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2041.462052][ C1] ? mcp2221_raw_event+0xfcd/0x1190 [ 2041.467277][ C1] check_panic_on_warn+0x89/0xb0 [ 2041.472228][ C1] ? mcp2221_raw_event+0xfcd/0x1190 [ 2041.477435][ C1] end_report+0x78/0x160 [ 2041.481697][ C1] kasan_report+0x129/0x150 [ 2041.486230][ C1] ? mcp2221_raw_event+0xfcd/0x1190 [ 2041.491439][ C1] mcp2221_raw_event+0xfcd/0x1190 [ 2041.496470][ C1] ? down_trylock+0x50/0xb0 [ 2041.500983][ C1] hid_input_report+0x407/0x520 [ 2041.505845][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 2041.511312][ C1] hid_irq_in+0x47e/0x6d0 [ 2041.515652][ C1] __usb_hcd_giveback_urb+0x41a/0x690 [ 2041.521024][ C1] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 2041.526868][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 2041.532774][ C1] ? usb_hcd_giveback_urb+0x10e/0x420 [ 2041.538147][ C1] dummy_timer+0x862/0x4550 [ 2041.542687][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 2041.547637][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 2041.552586][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 2041.557534][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 2041.562767][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2041.568498][ C1] ? read_tsc+0x9/0x20 [ 2041.572568][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 2041.578378][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 2041.583491][ C1] handle_softirqs+0x283/0x870 [ 2041.588262][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 2041.593043][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2041.598352][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 2041.603566][ C1] __irq_exit_rcu+0xca/0x1f0 [ 2041.608163][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 2041.613376][ C1] irq_exit_rcu+0x9/0x30 [ 2041.617623][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2041.623263][ C1] [ 2041.626198][ C1] [ 2041.629126][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2041.635109][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 2041.641619][ C1] Code: 74 05 e8 7b a4 6e f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 03 27 38 f6 65 8b 05 6c c5 1c 07 85 c0 74 40 48 c7 04 24 0e 36 [ 2041.661230][ C1] RSP: 0018:ffffc900001e71a0 EFLAGS: 00000206 [ 2041.667306][ C1] RAX: 834e0718ede05700 RBX: 0000000000000a02 RCX: 834e0718ede05700 [ 2041.675282][ C1] RDX: 0000000000000006 RSI: ffffffff8d74c01e RDI: 0000000000000001 [ 2041.683255][ C1] RBP: ffffc900001e7230 R08: ffffffff8f7efb77 R09: 1ffffffff1efdf6e [ 2041.691236][ C1] R10: dffffc0000000000 R11: fffffbfff1efdf6f R12: dffffc0000000000 [ 2041.699216][ C1] R13: ffff888028054100 R14: ffffffff8ebccfc0 R15: 1ffff9200003ce34 [ 2041.707202][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2041.713541][ C1] ? usb_hcd_giveback_urb+0x2f8/0x420 [ 2041.718917][ C1] usb_hcd_poll_rh_status+0x406/0x620 [ 2041.724298][ C1] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 2041.730191][ C1] dummy_hub_control+0xf83/0x17e0 [ 2041.735233][ C1] usb_hcd_submit_urb+0xe07/0x1aa0 [ 2041.740348][ C1] usb_start_wait_urb+0x114/0x4c0 [ 2041.745386][ C1] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2041.750945][ C1] usb_control_msg+0x232/0x3e0 [ 2041.755736][ C1] ? __pfx_process_timeout+0x10/0x10 [ 2041.761054][ C1] hub_ext_port_status+0x116/0x820 [ 2041.766179][ C1] hub_port_reset+0x72e/0x1750 [ 2041.770962][ C1] hub_port_init+0xfb9/0x2800 [ 2041.775660][ C1] hub_event+0x2518/0x4a00 [ 2041.780102][ C1] ? __pfx_hub_event+0x10/0x10 [ 2041.784879][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 2041.790606][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2041.795812][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 2041.801549][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 2041.807271][ C1] process_scheduled_works+0xade/0x17a0 [ 2041.812836][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2041.818834][ C1] worker_thread+0x8a0/0xda0 [ 2041.823438][ C1] kthread+0x711/0x8a0 [ 2041.827514][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2041.832626][ C1] ? __pfx_kthread+0x10/0x10 [ 2041.837220][ C1] ? __pfx_kthread+0x10/0x10 [ 2041.841813][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2041.847020][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2041.852248][ C1] ? __pfx_kthread+0x10/0x10 [ 2041.856843][ C1] ret_from_fork+0x4b/0x80 [ 2041.861258][ C1] ? __pfx_kthread+0x10/0x10 [ 2041.865857][ C1] ret_from_fork_asm+0x1a/0x30 [ 2041.870625][ C1] [ 2041.873935][ C1] Kernel Offset: disabled [ 2041.878265][ C1] Rebooting in 86400 seconds..