last executing test programs: 10.048046561s ago: executing program 3 (id=1412): r0 = fsopen(&(0x7f0000000280)='gadgetfs\x00', 0x0) unshare(0x2a020480) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\xe2\xc5A]\x9a\xef\xf5L\xff\x11j\xf3*\x9d\xa1H\xd4\x84\x94O\xe2\b]L@+\xd8\xab\x1bf4\xe2\x19?\xe2Z\xad\xbf\xa7\r\xf3=Kv\xc6x\xa3\xb1\xa3\xe1\x97\xd6\x10\xe9\xeb\x90\x02TdF\xe7\xaa3\xcb\xac\x1d\xa7\x05\n\xac\x8d\x9ah\x923!6\xa0b\xc6\xf9\"A{\xc6]\xfaJa\xae\xf7\xe6\xba\xfe\x88~\x8b:l{J\xef\x04\xcbu>\xf2\xa7\x8a\xbc\xfaG\xac\x15\xcc\x8e4\xec3]\x89\x0e{0K\xb5>\x10\x17\x8a};V\xaak6\xa4\xd5;\xfe/t\xde\x97$\x05\xb3\xdd`;\xf1\xbc>\x98\x0e]{n\xa4\x10\x04\xd2\x13z\x02DU@\'\xd5\xab\f\x1e\xaf\xfb\x8a;\x96\xcdn\x01\xfe\xdbZ\x04\x16\xaeP\x85B\xf7\x96\x11eLuY\xb5M+\xad\xb1K\xedyP\xd11C\xfdtq\xc2z\x84V\xe4\x94\x05$C\xbc\x90)\x03A\xb5\x05ATLm\xfb*\x02w\xc6\xd7\xda!\xadH\f<;\xe3*\x86{\xc9\x18^\x87)v\xa4\xa3h\xf2\xea\xda\x06\x05\x92t\x9c\xda\xa15G1x\xe8\xdc\xbe\xaa\x85,(', &(0x7f0000000000)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2hr\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA\xc0\xd8\xd0\xec\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\xad\x19n\x9a\x8ba\x8d3\xc4n\xb9:rLUr\xee%c\xa80xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00%'], 0x33fe0) recvmmsg(r3, &(0x7f0000001fc0)=[{{&(0x7f0000000500), 0x80, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/184, 0xb8}, {&(0x7f0000000640)=""/92, 0x5c}], 0x2}, 0x5}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000700)=""/187, 0xbb}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/111, 0x6f}, {&(0x7f0000000840)=""/226, 0xe2}, {&(0x7f0000000940)=""/65, 0x41}, {&(0x7f00000009c0)=""/150, 0x96}], 0x6, &(0x7f0000000b00)=""/184, 0xb8}, 0x1000}, {{&(0x7f0000000bc0)=@phonet, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000c40)=""/32, 0x20}, {&(0x7f0000000c80)=""/63, 0x3f}, {&(0x7f0000000cc0)=""/134, 0x86}], 0x3}, 0x5}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000e00)=""/85, 0x55}, {&(0x7f0000000e80)=""/116, 0x74}, {&(0x7f0000000f00)=""/232, 0xe8}, {&(0x7f0000001040)=""/163, 0xa3}, {&(0x7f0000001100)=""/219, 0xdb}, {&(0x7f0000001200)=""/65, 0x41}], 0x6, &(0x7f0000003700)=""/4096, 0x1000}, 0x10}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001300)=""/248, 0xf8}, {&(0x7f0000004700)=""/4096, 0x1000}, {&(0x7f0000001400)=""/101, 0x65}, {&(0x7f0000001480)=""/240, 0xf0}, {&(0x7f0000005700)=""/4096, 0x1000}, {&(0x7f0000001580)=""/221, 0xdd}, {&(0x7f0000001680)=""/210, 0xd2}, {&(0x7f00000017c0)=""/118, 0x76}, {&(0x7f0000001840)=""/116, 0x74}, {&(0x7f00000018c0)=""/98, 0x62}], 0xa, &(0x7f0000001a00)=""/93, 0x5d}, 0x6}, {{&(0x7f0000001a80)=@x25, 0x80, &(0x7f0000001e40)=[{&(0x7f0000006700)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/147, 0x93}, {&(0x7f0000001bc0)=""/207, 0xcf}, {&(0x7f0000001cc0)=""/96, 0x60}, {&(0x7f0000007700)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/237, 0xed}], 0x6, &(0x7f0000001ec0)=""/228, 0xe4}, 0x50}], 0x6, 0x40000000, &(0x7f0000002140)={0x77359400}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f00000001c0)="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", 0x2d3}], 0x1}}], 0x1, 0x4001c00) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x5}) unshare(0x22020400) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) 8.820334825s ago: executing program 1 (id=1418): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x6aa002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r2, &(0x7f000001a3c0)=""/102381, 0xffffffffffffff32, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x800000) 8.656065486s ago: executing program 1 (id=1420): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) read(r1, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f046}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x20000400) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRESDEC=r2], 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a00000905058f000000000009058b6e"], 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x6, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0bfe6ecd77084f21c01e020000000900010073797a30000000000900020073797a320000000018000480140001800b0001006c6f6f6b757000000400028007000740effafa00140000001100010000000000000000000300000a"], 0x74}}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x9, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0x0, 0x4, 0xfffffffffffffff7, 0x0, 0x0, 0x9, 0xd, 0x10000, 0x1000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x59e, 0x8000000000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x3, 0x2, 0x0, 0x0, 0xc0c0, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2064c1, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, 0x0, 0x4061) 7.852291311s ago: executing program 0 (id=1425): r0 = socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f000052e000/0x3000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c886}, 0x0) 7.603462252s ago: executing program 0 (id=1426): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = open(0x0, 0x80242, 0x0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) dup(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 6.961778972s ago: executing program 3 (id=1428): fsopen(&(0x7f0000000000)='cifs\x00', 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x4000010) 6.865739269s ago: executing program 3 (id=1429): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9dadd77c2dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r1) keyctl$revoke(0x3, r2) keyctl$search(0xa, r1, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0608262300", 0x7, 0xfffffffffffffffc) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) syz_pidfd_open(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01f20000"]) 6.303428133s ago: executing program 0 (id=1430): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000640)={0x80, 0x8, 0x1, 0x3ffffffd, 0x40023, 0x7}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r1, 0xffffffffffffffff, 0x0) 6.199802486s ago: executing program 0 (id=1431): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x0, &(0x7f0000000240)}) r3 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000240)=@arm64={0x4, 0x4, 0x70, '\x00', 0x10000}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000100)=0x5bf) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.151593076s ago: executing program 4 (id=1433): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f000001f480), 0x2, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x408001, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x2801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x80, 0xaa, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x6, 0xb, 0x1, {0x22, 0x3dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x70, 0x80, 0x10}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0xb, 0x4, 0x7, 0x20, 0xf9}, 0x37, &(0x7f0000000100)={0x5, 0xf, 0x37, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0x7, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x7, 0x5}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xf8, "4e3002d79b64193ff61781484c1ec0ae"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x9, 0xb2, 0x3}]}, 0x1, [{0xc8, &(0x7f0000000140)=@string={0xc8, 0x3, "3dcdc449f51a46381968dee535262ad09ab44a3851952ab0ef18db7fae320241075ce14ca9ed45d276413548f34d78d77479adba95462f018435a4dc0811725ba3ec3b8651af4ffe53b66fd0f671c81a088ad908629cca6726d089488636d7c41c3d75dd11ba3e7b38800206ff66225b6b50e67dd8ff05dbc1f2a066f7bb0293600fb24473d3db72dd7deb81b0cded50ec29d2e3498043c66f53778380a76dc74b43cf866a1fbe5a2e49b4b296670e83a61064b4127b2664719d34ba2085610fb338cec73dea"}}]}) r2 = fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) read$FUSE(r0, 0x0, 0x0) 5.060348796s ago: executing program 4 (id=1434): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x800000) (fail_nth: 8) 5.05976975s ago: executing program 3 (id=1435): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) write$cgroup_type(r1, &(0x7f0000000200), 0x9) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x449, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x2, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0x6, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x7, 0x80, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x20007, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x80, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x202, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x2, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0xfffffffd, 0xa4, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x4, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x6, 0x6, 0x9, 0x2, 0x4], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x0, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0xffffffff, 0x2, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x40003, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x0, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0xfff]}, 0x45c) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0xffff1000, 0xc3, &(0x7f0000000900)=""/195}]}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000300)={0xc, r3}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c00c9242bbd7000fbdbdf2507000000", @ANYRES32=r5, @ANYBLOB="80001e0a0a000200aaaaaaaaaa1b000008000f"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) 4.938222195s ago: executing program 0 (id=1436): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r4, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r3, 0xff08, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000180)=[@acquire_done={0x40106309, 0x2}], 0x4, 0x0, &(0x7f0000000240)="2294a696"}) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000000280)={{'fd', 0x3d, r8}}, 0x0, 0x0, 0x0) 4.637978723s ago: executing program 4 (id=1437): pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4091, 0xffb, 0x1010000) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = io_uring_setup(0x5453, &(0x7f0000001a40)={0x0, 0x9582, 0x4, 0x3, 0x2d8}) (async) syz_usb_connect(0x2, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4f, 0x0, &(0x7f0000000000)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) (async) r3 = syz_io_uring_setup(0x2c9a, &(0x7f0000000500)={0x0, 0x7d10, 0x1, 0x3, 0xa6}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r3, 0x46bc, 0x3, 0x20, 0x0, 0x0) (async) io_uring_setup(0x41e9, &(0x7f0000001ac0)={0x0, 0xbede, 0x8000, 0x0, 0x123, 0x0, r2}) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) (async) r7 = socket(0x8000000010, 0x2, 0x0) write(r7, &(0x7f00000002c0)="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", 0xfc) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000280)=0x2) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e25, @remote}, 0x10) (async) sendmmsg$inet(r8, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000180)={{0x2, 0x4e24, @local}, {0x20000010304}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}, 'virt_wifi0\x00'}) 4.564158935s ago: executing program 2 (id=1438): r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f0000005800)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000003c0)="f51411453ad4d2235cabf73b1eb3af1ba40622bf05f4a493a3e52e4ca4f693727ae3c151371b26bad0e7d6ac4a4069a5819493bb81bc936f2d38982b67b533267e08a07257326460f82a2615e27117a08702b10e2c7c115d851ee2d9ac06fb71d779fda0f5f3527e48a9bd8a759cd51dda9b231929487cd3032100ba17c2880cfa1061789cfe583783734b7d27b31771", 0x90}, {0x0}], 0x2, &(0x7f0000004a80)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x34, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, r2, r2]}}, @rights={{0x20, 0x1, 0x1, [r2, r2, r0, r1]}}], 0xe0, 0x811}}, {{&(0x7f0000004b80)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000004dc0)=[{&(0x7f0000004c00)="bd7a071108a6f8a9dfaaeea109a30f9cfa3d5f796e34d4c6fd23e36fd92918478435d18cd154e1e0be5776a5a799cba1e7619b6370b6a1699bfd8e3a4ac9e61bf71cee268445538bdf897ac8dc6659c37809725c466d91ecaf5946f8c4704fecf05cfd3c343d83223fce60e8caae06294b0d6f5dd9341899211e21066d", 0x7d}, {&(0x7f0000004d00)="d73f5c0e26eb57ab5cfec642d5a49a681905931076418cb7d0c1bce88b8efeed806423b7228bd561885d6e88b0bf94603811d590511baf6148078f316ec4e304f019ca569dd8eabf90ed5b11877d38a011277b37246872947d2afa468ec3c04315d4138a043c79cdfe18cd5c4359baa840f8124bfe79c1d85151b8083a03b7546a37151e85f6ada16209e8e43e3dd2f5ccdd4ce4be6b3d5415e365d09f1d9904dfe0daa12919e334232d1f461ef8349950526d32a48a28ff11", 0xb9}], 0x2, 0x0, 0x0, 0x4040004}}, {{0x0, 0xee, &(0x7f0000005080)=[{&(0x7f0000004e00)}, {&(0x7f0000004e80)="c48eda638153f638829435d38592f4d20658680be4", 0x15}, {&(0x7f0000004ec0)="71198c270aa53430cd6453b1cf51ea7eaaaea1c516f040b233e3c1877c481c8b4b16ba320f107fe0aa51200c1e77bae8676443cca4e5", 0x36}, {&(0x7f0000000800)="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", 0x1c2}, {0x0}], 0x5, &(0x7f0000000640)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98, 0x10}}, {{&(0x7f00000052c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005340)=[{&(0x7f000000e440)="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", 0x1000}], 0x1, &(0x7f0000005380)=[@cred={{0x1c}}], 0x20, 0x8800}}, {{&(0x7f00000053c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005540)=[{&(0x7f0000005440)="45dcdf02ba65247bbdd9ed348ab0bf195d9899f59bad221c3baa6a6c0d3ef4dde3bddb7ba991aa9a3b070085b1d983cbaadcc17e410dd0d966fdf42d33946146ae3f27d036e69b3e0e1374bcb72e58395202fd0088ddf3b56657c6c99d6576979d7eb3bdcf491074898084e1c9111f4bd7a9598ac75fc2949cb2b581843525db18ff914590019cbcede6d975782a9b05abdb6f60136efab0b79e3ccf8951d86bbf861b5629a44eb3a6f874dad944ac130a38c2bd9ac67fb1217098e51c9364b5cde93408c62d0f2f6efa293dd12172ca877188aef60bf5fca4aaeb", 0xdb}], 0x1, &(0x7f0000005580)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x2000c0a4}}, {{&(0x7f00000055c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000056c0)=[{&(0x7f000000f440)="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", 0x1000}, {0x0}], 0x2, &(0x7f0000005700)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0xc8, 0x20008000}}], 0x6, 0x0) 4.485818644s ago: executing program 2 (id=1439): fsopen(&(0x7f0000000000)='cifs\x00', 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x4000010) 4.294893395s ago: executing program 1 (id=1440): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00A', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.203022286s ago: executing program 1 (id=1441): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x2e0, 0x940c, 0x3002, 0x0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xffffffff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x298, 0x2e0, 0x0, {0x0, 0x418}, [@common=@inet=@recent0={{0xf8}, {0x2, 0x2, 0x0, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 4.121359445s ago: executing program 1 (id=1442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xcd8}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x100000000000000, 0x0, 0x45}, 0x0) 4.120522085s ago: executing program 2 (id=1443): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000080)={0x18}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000140)=""/72, 0x48}], 0x1, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000008000005c00000000000000", @ANYRES32, @ANYBLOB="000000c1000000000000040000000000000000005337b10a3017d099c2b437b19287bc2c33234a1bf2867f0b2c01b304282728dfc8de8023188df9baebe8f3895bbe22a02260ab85423c3f59e4d609a29fe312e836a20ef62f7bcc505462c712bb4225ed7eb931cb28df2e9dd0bcf2c873a1c1201852a3c5b5f208c84779323ba35ded931f14444de1f653ef29879982bf3f0eb0f662eff1b6c074533d1d247dcff4de51d38f6fb5997bbcdb65c396909212a5b3c6e4eef6a3518cac059694a771df2ca6bf48faf36039c623cbb2a037f9e36ad2a939e674ae75cd2c4b6abc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 4.060153712s ago: executing program 3 (id=1444): io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x4, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x100) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x578410eb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x38011, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r2, 0x4bfa, &(0x7f0000000340)=""/164) 3.800185728s ago: executing program 1 (id=1445): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_usb_connect(0x6, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x9, {0xfeffffffffffffff, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x1, 0x8000, 0x0, r5, r6, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) r8 = syz_open_dev$admmidi(&(0x7f0000000280), 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') pread64(r9, &(0x7f0000000180)=""/249, 0xf9, 0x40) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r8, 0xc0385720, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) dup2(r7, r3) execve(0x0, 0x0, 0x0) 2.88773769s ago: executing program 3 (id=1446): r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4888, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xb8}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, 0x0) r10 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x121000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r10, 0x40485404, 0x0) unshare(0x10000200) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r0, r12, 0x80000) splice(r12, 0x0, r11, 0x0, 0xfea8, 0xa) 2.874494833s ago: executing program 2 (id=1447): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38) sendto$inet6(r0, &(0x7f0000000680)='m', 0x1, 0x8000, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@ip_tos_int={{0x14, 0x11a}}], 0x18}, 0x8080) 2.724270897s ago: executing program 2 (id=1448): r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x80) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x3, @broadcast, 'wg1\x00'}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xb8}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, 0x0) r10 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x121000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r10, 0x40485404, 0x0) unshare(0x10000200) pipe(&(0x7f0000000380)) dup3(r0, 0xffffffffffffffff, 0x80000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000001540)={0x0, 0xffffffffffffff00, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x34, 0x32, 0x301, 0x0, 0x100, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_INDEX}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x21000000}, 0x0) 2.556469441s ago: executing program 4 (id=1449): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) pread64(r0, 0x0, 0x0, 0x100000000) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) (async) syz_extract_tcp_res(&(0x7f0000000040), 0x1, 0x3) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r5, r6, r7, 0xffff5640, 0x7fff, 0x6, 0xb, 0x0, 0xe, 0x3, 0x0, 0x6}) 1.570304118s ago: executing program 2 (id=1450): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000a00)='wsync', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x800) write$vhost_msg_v2(r2, &(0x7f00000005c0)={0x2, 0x0, {&(0x7f0000000440)=""/225, 0xe1, &(0x7f0000000540)=""/71, 0x1, 0x4}}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xb0, 0x3ff, 0x34325241, 0x0, [], [0x2b8, 0x200000], [0x0, 0x9, 0x0, 0x3]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{}], 0x1}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) unshare(0x4000400) socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6(0xa, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_mr_cache\x00') 1.321475783s ago: executing program 0 (id=1451): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r2, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, r1, &(0x7f0000000180)='\x00', 0x1001}]) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff}, 0x80) socket$netlink(0x10, 0x3, 0x7) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x7a) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000180)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "968143deb8b76325598ea9ab22edc6596a000089666f0e299e98210fe66bcf59f94d606fd2d5a7e847643cbb1895c225d7e38762f4c5c637f20150d3f064bbb8", 0x3b}, 0x48, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xe}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20004850) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x20, 0x4, 0x800002, 0x0, 0x201, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 932.289394ms ago: executing program 4 (id=1452): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf00}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}}, 0x0) 0s ago: executing program 4 (id=1453): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x9, 0x100, 0x7, {0x400e802, 0x8001, 0x400, 0x4}}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/177) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {0x0, 0x401, 0x2}, 0x10, [0x0, 0x101, 0x0, 0x0, 0x6, 0x2, 0xfffffffc, 0x3, 0x0, 0x0, 0xfffffffe, 0xc0, 0x5, 0x0, 0x1000, 0x0, 0x4000, 0x10, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5f1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xe, 0x0, 0x2, 0x20, 0xfffffffd, 0xeae2, 0x7, 0x0, 0xffffdffd, 0x0, 0x0, 0x400, 0x40000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x3, 0x7, 0x0, 0x0, 0x80000000, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0xfff, 0x71f, 0x0, 0x0, 0xffffffff, 0x0, 0x8], [0x40000000, 0x4, 0x74e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xcaa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) pread64(r0, &(0x7f0000000040)=""/43, 0x2b, 0xbc) kernel console output (not intermixed with test programs): T24] usb 5-1: selecting invalid altsetting 0 [ 287.119116][ T9036] fuse: Invalid rootmode [ 287.170166][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 287.260802][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 287.269071][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 287.275242][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 287.288897][ T30] kauditd_printk_skb: 452 callbacks suppressed [ 287.288910][ T30] audit: type=1326 audit(1748459690.253:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.0.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44c3b8e969 code=0x7fc00000 [ 287.327817][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 287.462083][ T9041] fuse: Invalid rootmode [ 287.684861][ T9044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.821306][ T9044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.920519][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.929'. [ 288.044990][ T1211] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 288.058176][ T9049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.076689][ T9049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.213566][ T1211] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 288.225920][ T1211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.234440][ T1211] usb 1-1: Product: syz [ 288.238749][ T1211] usb 1-1: Manufacturer: syz [ 288.246149][ T1211] usb 1-1: SerialNumber: syz [ 288.333018][ T1211] usb 1-1: config 0 descriptor?? [ 288.373339][ T5842] Bluetooth: hci5: urb ffff88807bb1ed00 submission failed (2) [ 288.559760][ T9046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.571923][ T9046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.629146][ T9046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.643931][ T9046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.658979][ T9052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.682746][ T9052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.720404][ T1211] usb 1-1: USB disconnect, device number 62 [ 289.353543][ T1211] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 289.409168][ T5835] usb 5-1: USB disconnect, device number 40 [ 289.426811][ T24] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 289.518456][ T1211] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 289.529144][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.548176][ T1211] usb 2-1: Product: syz [ 289.575454][ T1211] usb 2-1: Manufacturer: syz [ 289.586236][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 289.602978][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.618832][ T1211] usb 2-1: SerialNumber: syz [ 289.629037][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 289.643566][ T1211] usb 2-1: config 0 descriptor?? [ 289.661211][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 289.677979][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.699660][ T24] usb 3-1: Product: syz [ 289.711848][ T24] usb 3-1: Manufacturer: syz [ 289.724121][ T24] usb 3-1: SerialNumber: syz [ 289.769146][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 289.786222][ T24] r8152-cfgselector 3-1: config 0 descriptor?? [ 289.859578][ T1211] usb 2-1: f81604_read: reg: 105 failed: -EPROTO [ 289.881759][ T1211] f81604 2-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 289.909120][ T1211] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 289.952767][ T9074] trusted_key: encrypted_key: insufficient parameters specified [ 289.973052][ T1211] usb 2-1: USB disconnect, device number 59 [ 290.030052][ T9074] bridge_slave_0: invalid flags given to default FDB implementation [ 290.193590][ T5830] vhci_hcd: vhci_device speed not set [ 290.766570][ T30] audit: type=1326 audit(1748459693.733:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9088 comm="syz.4.950" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49b778e969 code=0x0 [ 291.013592][ T5881] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 291.664371][ T5880] usb usb38-port1: attempt power cycle [ 291.793914][ T5881] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 291.813605][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 291.833695][ T5881] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 291.885334][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 291.923560][ T5881] usb 1-1: Product: syz [ 291.931392][ T5881] usb 1-1: Manufacturer: syz [ 291.939518][ T5881] usb 1-1: SerialNumber: syz [ 291.969153][ T5881] usb 1-1: config 0 descriptor?? [ 291.985403][ T5881] usb 1-1: selecting invalid altsetting 0 [ 292.033087][ T5835] r8152-cfgselector 3-1: USB disconnect, device number 46 [ 292.346170][ T5880] usb usb38-port1: unable to enumerate USB device [ 292.466882][ T9134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.467262][ T9134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.487051][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.954'. [ 292.692443][ T9133] input: syz0 as /devices/virtual/input/input24 [ 292.694560][ T30] audit: type=1800 audit(1748459695.643:3376): pid=9133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.961" name="bus" dev="tmpfs" ino=1067 res=0 errno=0 [ 292.986823][ T9141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.051752][ T9141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.330383][ T30] audit: type=1326 audit(1748459696.293:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.3.962" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7e138e969 code=0x0 [ 293.713830][ T9156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.965'. [ 294.168864][ T5830] usb 1-1: USB disconnect, device number 63 [ 294.541720][ T9171] xt_hashlimit: size too large, truncated to 1048576 [ 295.086289][ T9175] hub 2-0:1.0: USB hub found [ 295.091322][ T9175] hub 2-0:1.0: 1 port detected [ 295.323665][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 295.335344][ T9143] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 295.341557][ T9143] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 295.980223][ T9143] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 295.986255][ T9143] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 295.994920][ T9143] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 296.000851][ T9143] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 296.009450][ T9143] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 296.015578][ T9143] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 296.027711][ T9143] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 296.033733][ T9143] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 296.351765][ T9183] tty tty24: ldisc open failed (-12), clearing slot 23 [ 296.543980][ T5830] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 296.570720][ T9194] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 296.584993][ T9194] team0: Device ipvlan2 is already an upper device of the team interface [ 296.725191][ T5830] usb 1-1: Using ep0 maxpacket: 16 [ 296.731654][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 296.745766][ T5830] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 296.755779][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.767598][ T5830] usb 1-1: Product: syz [ 296.771784][ T5830] usb 1-1: Manufacturer: syz [ 296.777297][ T5830] usb 1-1: SerialNumber: syz [ 296.794770][ T5830] usb 1-1: config 0 descriptor?? [ 296.808653][ T5830] hub 1-1:0.0: bad descriptor, ignoring hub [ 296.815096][ T1211] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 296.823062][ T5830] hub 1-1:0.0: probe with driver hub failed with error -5 [ 296.837398][ T5830] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input25 [ 296.864350][ T5835] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 297.035478][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 297.050519][ T5835] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 297.060656][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 297.062272][ T1211] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.083485][ T1211] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 297.092396][ T1211] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 297.101925][ T5835] usb 2-1: New USB device found, idVendor=413c, idProduct=8186, bcdDevice=a0.a2 [ 297.112172][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.120444][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.144546][ T5835] usb 2-1: Product: syz [ 297.148965][ T5835] usb 2-1: Manufacturer: syz [ 297.155945][ T5835] usb 2-1: SerialNumber: syz [ 297.160814][ T1211] usb 5-1: config 0 descriptor?? [ 297.175600][ T1211] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 297.181899][ T5835] usb 2-1: config 0 descriptor?? [ 297.218483][ T1211] dvb-usb: bulk message failed: -22 (3/0) [ 297.272305][ T1211] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 297.294272][ T1211] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 297.301421][ T1211] usb 5-1: media controller created [ 297.325521][ T1211] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 297.344004][ T1211] dvb-usb: bulk message failed: -22 (6/0) [ 297.349846][ T1211] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 297.372987][ T1211] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input26 [ 297.439382][ T5835] usb 2-1: USB disconnect, device number 60 [ 297.547393][ T1211] dvb-usb: schedule remote query interval to 150 msecs. [ 297.572648][ T1211] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 297.605781][ T1211] usb 5-1: USB disconnect, device number 41 [ 297.656849][ T1211] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 297.780819][ T9220] vivid-001: ================= START STATUS ================= [ 297.789191][ T9220] vivid-001: ================== END STATUS ================== [ 297.856309][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 297.857295][ T9226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.884143][ T9226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.070372][ T5830] usb 1-1: USB disconnect, device number 64 [ 298.100528][ T9236] trusted_key: encrypted_key: insufficient parameters specified [ 298.126820][ T9238] loop2: detected capacity change from 0 to 7 [ 298.141590][ T9236] bridge_slave_0: invalid flags given to default FDB implementation [ 298.165453][ T9238] Dev loop2: unable to read RDB block 7 [ 298.171026][ T9238] loop2: AHDI p1 p2 [ 298.193735][ T9238] loop2: partition table partially beyond EOD, truncated [ 298.201005][ T9238] loop2: p1 size 4227858431 extends beyond EOD, truncated [ 298.316499][ T5952] udevd[5952]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 298.499037][ T9246] random: crng reseeded on system resumption [ 298.523686][ T1211] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 298.673374][ T9245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.695308][ T1211] usb 2-1: config 0 has no interfaces? [ 298.704892][ T1211] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 298.712973][ T9245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.726541][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.792152][ T1211] usb 2-1: Product: syz [ 298.801540][ T1211] usb 2-1: Manufacturer: syz [ 298.811777][ T1211] usb 2-1: SerialNumber: syz [ 298.832178][ T1211] usb 2-1: config 0 descriptor?? [ 298.949687][ T9260] netlink: 'syz.4.1001': attribute type 1 has an invalid length. [ 298.959128][ T9260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1001'. [ 299.045959][ T9241] @: renamed from vlan0 (while UP) [ 299.143922][ T1211] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 299.203591][ T5830] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 299.303546][ T1211] usb 1-1: Using ep0 maxpacket: 32 [ 299.311509][ T1211] usb 1-1: config 8 has an invalid interface number: 134 but max is 0 [ 299.320037][ T1211] usb 1-1: config 8 has no interface number 0 [ 299.326522][ T1211] usb 1-1: config 8 interface 134 has no altsetting 0 [ 299.336860][ T1211] usb 1-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice= 4.15 [ 299.346142][ T1211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.354751][ T1211] usb 1-1: Product: syz [ 299.360296][ T5830] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.370590][ T1211] usb 1-1: Manufacturer: syz [ 299.375498][ T1211] usb 1-1: SerialNumber: syz [ 299.380123][ T5830] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 299.393265][ T5830] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 299.405572][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 299.414048][ T5830] usb 5-1: SerialNumber: syz [ 299.453534][ T9265] trusted_key: encrypted_key: insufficient parameters specified [ 299.483813][ T9265] bridge_slave_0: invalid flags given to default FDB implementation [ 299.628356][ T1211] gspca_main: benq-2.14.0 probing 04a5:3035 [ 299.647300][ T5830] usb 5-1: 0:2 : does not exist [ 299.675538][ T1211] usb 1-1: USB disconnect, device number 65 [ 299.711003][ T9272] netlink: 'syz.3.1006': attribute type 4 has an invalid length. [ 299.712046][ T5830] usb 5-1: USB disconnect, device number 42 [ 299.880792][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.958397][ T9278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.977053][ T9278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.026841][ T9278] loop5: detected capacity change from 0 to 1 [ 300.402623][ T9284] team_slave_0: entered promiscuous mode [ 300.408531][ T9284] team_slave_1: entered promiscuous mode [ 300.414265][ T9284] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 300.422641][ T9284] dummy0: entered promiscuous mode [ 300.652591][ T9284] macsec1: entered promiscuous mode [ 300.658089][ T9284] team0: entered promiscuous mode [ 300.678963][ T9284] team0: left promiscuous mode [ 300.699821][ T9284] team_slave_0: left promiscuous mode [ 300.705287][ T9284] team_slave_1: left promiscuous mode [ 300.710762][ T9284] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 300.718193][ T9284] dummy0: left promiscuous mode [ 300.856353][ T9287] team_slave_0: entered promiscuous mode [ 300.862073][ T9287] team_slave_1: entered promiscuous mode [ 300.868831][ T9287] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 300.875926][ T9287] dummy0: entered promiscuous mode [ 300.899413][ T9287] macsec1: entered promiscuous mode [ 300.915984][ T9287] team0: entered promiscuous mode [ 300.945690][ T9287] team0: left promiscuous mode [ 300.962824][ T9287] team_slave_0: left promiscuous mode [ 300.968314][ T9287] team_slave_1: left promiscuous mode [ 300.973770][ T9287] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 300.981482][ T9287] dummy0: left promiscuous mode [ 301.197005][ T9301] trusted_key: encrypted_key: insufficient parameters specified [ 301.231949][ T9301] bridge_slave_0: invalid flags given to default FDB implementation [ 301.257280][ T1211] usb 2-1: USB disconnect, device number 61 [ 301.562279][ T30] audit: type=1326 audit(1748459704.513:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9302 comm="syz.3.1017" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7e138e969 code=0x0 [ 302.523621][ T30] audit: type=1326 audit(1748459705.473:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9326 comm="syz.0.1022" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44c3b8e969 code=0x0 [ 303.962287][ T9358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.009189][ T9358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.119655][ T5830] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 304.134744][ T1211] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 304.279860][ T9370] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1034'. [ 304.294108][ T5830] usb 5-1: Using ep0 maxpacket: 8 [ 304.301451][ T1211] usb 2-1: config 0 has no interfaces? [ 304.307086][ T5830] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 304.316319][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.334256][ T1211] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 304.344269][ T5830] usb 5-1: config 0 descriptor?? [ 304.349323][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.360840][ T1211] usb 2-1: Product: syz [ 304.367372][ T1211] usb 2-1: Manufacturer: syz [ 304.373780][ T1211] usb 2-1: SerialNumber: syz [ 304.383163][ T1211] usb 2-1: config 0 descriptor?? [ 304.566833][ T5830] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 304.720735][ T30] audit: type=1326 audit(1748459707.683:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd7e132ab39 code=0x7ffc0000 [ 304.774970][ T30] audit: type=1326 audit(1748459707.683:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e138e969 code=0x7ffc0000 [ 304.826699][ T5830] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 304.838063][ T5830] asix 5-1:0.0: probe with driver asix failed with error -71 [ 304.859494][ T5830] usb 5-1: USB disconnect, device number 43 [ 304.968759][ T30] audit: type=1326 audit(1748459707.683:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd7e132ab39 code=0x7ffc0000 [ 305.008568][ T30] audit: type=1326 audit(1748459707.683:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd7e132ab39 code=0x7ffc0000 [ 305.032795][ T30] audit: type=1326 audit(1748459707.683:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e138e969 code=0x7ffc0000 [ 305.065764][ T30] audit: type=1326 audit(1748459707.683:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd7e132ab39 code=0x7ffc0000 [ 305.090569][ T30] audit: type=1326 audit(1748459707.683:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e138e969 code=0x7ffc0000 [ 305.113973][ T30] audit: type=1326 audit(1748459707.683:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd7e132ab39 code=0x7ffc0000 [ 305.729095][ T9386] usb 2-1: USB disconnect, device number 62 [ 306.049959][ T9388] hub 2-0:1.0: USB hub found [ 306.066267][ T9388] hub 2-0:1.0: 1 port detected [ 306.203652][ T5835] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 306.567329][ T9376] input: syz0 as /devices/virtual/input/input27 [ 306.582754][ T30] kauditd_printk_skb: 1405 callbacks suppressed [ 306.582858][ T30] audit: type=1326 audit(1748459709.543:4793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd7e132ab39 code=0x7ffc0000 [ 306.628080][ T30] audit: type=1326 audit(1748459709.583:4794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd7e132ab39 code=0x7ffc0000 [ 306.652272][ T30] audit: type=1326 audit(1748459709.583:4795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd7e132ab39 code=0x7ffc0000 [ 306.675982][ T30] audit: type=1326 audit(1748459709.583:4796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd7e132ab39 code=0x7ffc0000 [ 306.711164][ T30] audit: type=1326 audit(1748459709.583:4797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd7e132ab39 code=0x7ffc0000 [ 306.764521][ T30] audit: type=1326 audit(1748459709.583:4798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd7e132ab39 code=0x7ffc0000 [ 306.788558][ T30] audit: type=1326 audit(1748459709.583:4799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd7e132ab39 code=0x7ffc0000 [ 306.873981][ T30] audit: type=1326 audit(1748459709.583:4800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd7e132ab39 code=0x7ffc0000 [ 306.919685][ T30] audit: type=1326 audit(1748459709.583:4801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd7e132ab39 code=0x7ffc0000 [ 306.952106][ T30] audit: type=1326 audit(1748459709.583:4802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.3.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd7e132ab39 code=0x7ffc0000 [ 307.004769][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'. [ 307.023274][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'. [ 307.358302][ T9406] IPVS: length: 95 != 24 [ 307.669728][ T9419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1049'. [ 307.680128][ T9419] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1049'. [ 307.767209][ T9419] unsupported nlmsg_type 40 [ 308.003564][ T5881] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 308.059410][ T9428] gretap0: entered promiscuous mode [ 308.095960][ T5830] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 308.114014][ T9428] macsec1: entered promiscuous mode [ 308.136286][ T9426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1050'. [ 308.151593][ T9428] macsec1: entered allmulticast mode [ 308.180195][ T5881] usb 3-1: config 0 has no interfaces? [ 308.192264][ T5881] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 308.202476][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.213173][ T5881] usb 3-1: Product: syz [ 308.217774][ T5881] usb 3-1: Manufacturer: syz [ 308.222345][ T5881] usb 3-1: SerialNumber: syz [ 308.229788][ T9429] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 308.252808][ T9428] gretap0: entered allmulticast mode [ 308.255977][ T5881] usb 3-1: config 0 descriptor?? [ 308.263508][ T5830] usb 1-1: Using ep0 maxpacket: 16 [ 308.331572][ T9428] gretap0: left allmulticast mode [ 308.332876][ T9431] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 308.337654][ T9428] gretap0: left promiscuous mode [ 308.359438][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.436082][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.508488][ T9423] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1047'. [ 308.592180][ T5830] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 308.615737][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.627255][ T5830] usb 1-1: config 0 descriptor?? [ 308.886675][ T9438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.936368][ T9438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.134390][ T5830] usbhid 1-1:0.0: can't add hid device: -71 [ 309.153662][ T5830] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 309.184252][ T5830] usb 1-1: USB disconnect, device number 66 [ 309.278658][ T9444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.322407][ T9444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.479258][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1055'. [ 310.013647][ T5830] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 310.185409][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.196700][ T5830] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 310.223605][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.263716][ T5830] usb 2-1: config 0 descriptor?? [ 310.283565][ T5835] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 310.503720][ T5835] usb 1-1: Using ep0 maxpacket: 32 [ 310.524073][ T5835] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 310.532468][ T5835] usb 1-1: config 0 has no interface number 0 [ 310.539641][ T5835] usb 1-1: config 0 interface 184 has no altsetting 0 [ 310.552970][ T5835] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 310.569392][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.579667][ T5835] usb 1-1: Product: syz [ 310.584281][ T5835] usb 1-1: Manufacturer: syz [ 310.589195][ T5835] usb 1-1: SerialNumber: syz [ 310.608671][ T5835] usb 1-1: config 0 descriptor?? [ 310.617693][ T5835] smsc75xx v1.0.0 [ 310.621448][ T5835] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 310.638925][ T5835] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 310.700898][ T5830] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 310.741891][ T5835] usb 3-1: USB disconnect, device number 47 [ 310.861455][ T5830] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000E/input/input28 [ 310.893608][ T9459] fuse: Invalid rootmode [ 311.458079][ T5830] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 311.591919][ T9465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.605290][ T9465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.036965][ T9470] loop6: detected capacity change from 0 to 63 [ 312.089074][ T5954] Buffer I/O error on dev loop6, logical block 0, async page read [ 312.362587][ T5954] Buffer I/O error on dev loop6, logical block 0, async page read [ 312.409702][ T5954] Buffer I/O error on dev loop6, logical block 0, async page read [ 312.430519][ T5954] Buffer I/O error on dev loop6, logical block 0, async page read [ 312.598300][ T5954] Buffer I/O error on dev loop6, logical block 0, async page read [ 312.740636][ T24] usb 2-1: USB disconnect, device number 64 [ 313.142370][ T5881] usb 1-1: USB disconnect, device number 67 [ 313.383745][ T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 313.406804][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 313.431005][ T9509] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 313.547126][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 313.568444][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.590975][ T24] usb 3-1: Product: syz [ 313.599023][ T24] usb 3-1: Manufacturer: syz [ 313.603831][ T24] usb 3-1: SerialNumber: syz [ 313.615201][ T5881] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 313.638708][ T24] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 313.674514][ T1211] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 313.752507][ T9512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1077'. [ 313.783606][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 313.791512][ T5881] usb 1-1: config 0 has an invalid interface number: 161 but max is 0 [ 313.801834][ T5881] usb 1-1: config 0 has no interface number 0 [ 313.814449][ T5881] usb 1-1: config 0 interface 161 has no altsetting 0 [ 313.837836][ T5881] usb 1-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 313.848294][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.860088][ T5881] usb 1-1: Product: syz [ 313.865164][ T5881] usb 1-1: Manufacturer: syz [ 313.870204][ T5881] usb 1-1: SerialNumber: syz [ 313.886155][ T5881] usb 1-1: config 0 descriptor?? [ 313.902177][ T5881] ums-jumpshot 1-1:0.161: USB Mass Storage device detected [ 313.919038][ T5881] ums-jumpshot 1-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 314.263689][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1075'. [ 314.283731][ T9517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.305745][ T5881] usb 1-1: USB disconnect, device number 68 [ 314.328444][ T9517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.528206][ T9519] fuse: Unknown parameter 'rootmode' [ 314.695404][ T9528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.712043][ T9528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.772227][ T1211] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 314.796764][ T1211] ath9k_htc: Failed to initialize the device [ 314.879062][ T1211] usb 3-1: ath9k_htc: USB layer deinitialized [ 315.262673][ T9539] bridge_slave_0: invalid flags given to default FDB implementation [ 315.503518][ T5835] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 315.663811][ T5835] usb 2-1: Using ep0 maxpacket: 32 [ 315.675425][ T5835] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 315.684071][ T5835] usb 2-1: config 0 has no interface number 0 [ 315.704674][ T5835] usb 2-1: config 0 interface 184 has no altsetting 0 [ 315.729697][ T9545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.744566][ T30] kauditd_printk_skb: 801 callbacks suppressed [ 315.744581][ T30] audit: type=1326 audit(1748459718.703:5604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9540 comm="syz.4.1087" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49b778e969 code=0x0 [ 315.772445][ C0] vkms_vblank_simulate: vblank timer overrun [ 315.835061][ T5835] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 315.863951][ T9545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.872895][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.906565][ T5835] usb 2-1: Product: syz [ 315.914222][ T5835] usb 2-1: Manufacturer: syz [ 316.203572][ T9545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.228801][ T5835] usb 2-1: SerialNumber: syz [ 316.242907][ T5835] usb 2-1: config 0 descriptor?? [ 316.264601][ T5835] smsc75xx v1.0.0 [ 316.268471][ T5835] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 316.282451][ T9545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.353197][ T5835] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 316.380756][ T5830] usb 3-1: USB disconnect, device number 48 [ 316.470390][ T9538] fuse: Invalid rootmode [ 316.996598][ T9562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.073622][ T5835] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 317.213523][ T5835] usb 5-1: device descriptor read/64, error -71 [ 317.242396][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.250428][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.534375][ T5835] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 317.773538][ T5835] usb 5-1: device descriptor read/64, error -71 [ 317.883997][ T5835] usb usb5-port1: attempt power cycle [ 318.183124][ T9585] bridge_slave_0: invalid flags given to default FDB implementation [ 318.255189][ T5835] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 318.304754][ T5835] usb 5-1: device descriptor read/8, error -71 [ 318.573587][ T5835] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 318.743514][ T5835] usb 5-1: device descriptor read/8, error -71 [ 318.913854][ T5835] usb usb5-port1: unable to enumerate USB device [ 318.972799][ T5830] usb 2-1: USB disconnect, device number 65 [ 319.130985][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1102'. [ 319.142064][ T9594] binder: 9591:9594 ioctl c0306201 2000000003c0 returned -14 [ 319.301181][ T9604] x_tables: duplicate underflow at hook 2 [ 319.392732][ T9606] FAULT_INJECTION: forcing a failure. [ 319.392732][ T9606] name failslab, interval 1, probability 0, space 0, times 0 [ 319.407773][ T9606] CPU: 0 UID: 0 PID: 9606 Comm: syz.2.1107 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 319.407796][ T9606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 319.407807][ T9606] Call Trace: [ 319.407814][ T9606] [ 319.407822][ T9606] dump_stack_lvl+0x189/0x250 [ 319.407851][ T9606] ? __pfx____ratelimit+0x10/0x10 [ 319.407874][ T9606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.407904][ T9606] ? __pfx__printk+0x10/0x10 [ 319.407927][ T9606] ? __pfx___might_resched+0x10/0x10 [ 319.407947][ T9606] ? fs_reclaim_acquire+0x7d/0x100 [ 319.407975][ T9606] should_fail_ex+0x414/0x560 [ 319.408002][ T9606] should_failslab+0xa8/0x100 [ 319.408024][ T9606] __kmalloc_cache_noprof+0x70/0x3d0 [ 319.408043][ T9606] ? snd_pcm_oss_change_params_locked+0xb09/0x3e40 [ 319.408070][ T9606] snd_pcm_oss_change_params_locked+0xb09/0x3e40 [ 319.408099][ T9606] ? __pfx___mutex_trylock_common+0x10/0x10 [ 319.408131][ T9606] ? trace_contention_end+0x39/0x120 [ 319.408153][ T9606] ? __mutex_lock+0x330/0xe80 [ 319.408186][ T9606] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 319.408205][ T9606] ? snd_pcm_oss_make_ready+0xc0/0x340 [ 319.408242][ T9606] ? irqentry_exit+0x74/0x90 [ 319.408264][ T9606] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.408287][ T9606] ? irqentry_exit+0x74/0x90 [ 319.408311][ T9606] snd_pcm_oss_make_ready+0x11b/0x340 [ 319.408337][ T9606] snd_pcm_oss_set_trigger+0x6a/0x740 [ 319.408367][ T9606] snd_pcm_oss_ioctl+0xbb3/0xdd0 [ 319.408389][ T9606] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 319.408409][ T9606] __se_sys_ioctl+0xf9/0x170 [ 319.408429][ T9606] do_syscall_64+0xfa/0x3b0 [ 319.408450][ T9606] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.408471][ T9606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.408488][ T9606] ? clear_bhb_loop+0x60/0xb0 [ 319.408508][ T9606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.408523][ T9606] RIP: 0033:0x7f0876f8e969 [ 319.408539][ T9606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.408553][ T9606] RSP: 002b:00007f0877dfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.408572][ T9606] RAX: ffffffffffffffda RBX: 00007f08771b5fa0 RCX: 00007f0876f8e969 [ 319.408585][ T9606] RDX: 0000200000000080 RSI: 0000000040045010 RDI: 0000000000000003 [ 319.408596][ T9606] RBP: 00007f0877dfc090 R08: 0000000000000000 R09: 0000000000000000 [ 319.408607][ T9606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.408617][ T9606] R13: 0000000000000000 R14: 00007f08771b5fa0 R15: 00007f08772dfa28 [ 319.408646][ T9606] [ 319.781204][ T9614] capability: warning: `syz.3.1108' uses 32-bit capabilities (legacy support in use) [ 319.936953][ T9614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1108'. [ 320.187483][ T9623] bridge_slave_0: invalid flags given to default FDB implementation [ 320.332948][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1114'. [ 320.419254][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1114'. [ 321.302511][ T9642] i2c i2c-0: Invalid block write size 34 [ 321.511889][ T9659] netlink: 'syz.2.1123': attribute type 4 has an invalid length. [ 321.710292][ T9667] input: syz0 as /devices/virtual/input/input29 [ 321.767440][ T9672] trusted_key: encrypted_key: insufficient parameters specified [ 321.792495][ T9670] FAULT_INJECTION: forcing a failure. [ 321.792495][ T9670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.083664][ T9670] CPU: 0 UID: 0 PID: 9670 Comm: syz.0.1127 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 322.083689][ T9670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.083699][ T9670] Call Trace: [ 322.083706][ T9670] [ 322.083715][ T9670] dump_stack_lvl+0x189/0x250 [ 322.083742][ T9670] ? __pfx____ratelimit+0x10/0x10 [ 322.083762][ T9670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.083776][ T9670] ? __pfx__printk+0x10/0x10 [ 322.083786][ T9670] ? __might_fault+0xb0/0x130 [ 322.083803][ T9670] should_fail_ex+0x414/0x560 [ 322.083819][ T9670] _copy_from_user+0x2d/0xb0 [ 322.083829][ T9670] iommufd_fops_ioctl+0x3f9/0x520 [ 322.083843][ T9670] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 322.083862][ T9670] ? __fget_files+0x3a0/0x420 [ 322.083874][ T9670] ? __fget_files+0x2a/0x420 [ 322.083887][ T9670] ? bpf_lsm_file_ioctl+0x9/0x20 [ 322.083899][ T9670] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 322.083909][ T9670] __se_sys_ioctl+0xf9/0x170 [ 322.083920][ T9670] do_syscall_64+0xfa/0x3b0 [ 322.083934][ T9670] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.083947][ T9670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.083956][ T9670] ? clear_bhb_loop+0x60/0xb0 [ 322.083967][ T9670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.083976][ T9670] RIP: 0033:0x7f44c3b8e969 [ 322.083985][ T9670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.083994][ T9670] RSP: 002b:00007f44c4acc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 322.084004][ T9670] RAX: ffffffffffffffda RBX: 00007f44c3db5fa0 RCX: 00007f44c3b8e969 [ 322.084014][ T9670] RDX: 0000200000000580 RSI: 0000000000003b87 RDI: 0000000000000003 [ 322.084020][ T9670] RBP: 00007f44c4acc090 R08: 0000000000000000 R09: 0000000000000000 [ 322.084026][ T9670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.084032][ T9670] R13: 0000000000000000 R14: 00007f44c3db5fa0 R15: 00007f44c3edfa28 [ 322.084046][ T9670] [ 322.622386][ T9678] openvswitch: netlink: Missing valid actions attribute. [ 322.633787][ T9678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.770073][ T9678] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 322.823566][ T5830] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 322.855491][ T9684] bridge_slave_0: invalid flags given to default FDB implementation [ 322.997540][ T5830] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.023628][ T5830] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.071583][ T5830] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 323.086001][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 323.095957][ T5830] usb 1-1: SerialNumber: syz [ 323.367116][ T5830] usb 1-1: 0:2 : does not exist [ 323.464374][ T5830] usb 1-1: USB disconnect, device number 69 [ 323.517644][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 323.541953][ T5881] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 323.615840][ T9690] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1134'. [ 323.691888][ T9694] syzkaller0: entered allmulticast mode [ 323.696234][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 323.719158][ T5881] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 323.762290][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 323.777524][ T5881] usb 3-1: New USB device found, idVendor=413c, idProduct=8186, bcdDevice=a0.a2 [ 323.787077][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.796992][ T9695] FAULT_INJECTION: forcing a failure. [ 323.796992][ T9695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.811476][ T5881] usb 3-1: Product: syz [ 323.826648][ T5881] usb 3-1: Manufacturer: syz [ 323.826683][ T9695] CPU: 0 UID: 0 PID: 9695 Comm: syz.3.1134 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 323.826702][ T9695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 323.826712][ T9695] Call Trace: [ 323.826719][ T9695] [ 323.826725][ T9695] dump_stack_lvl+0x189/0x250 [ 323.826751][ T9695] ? __pfx____ratelimit+0x10/0x10 [ 323.826769][ T9695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.826783][ T9695] ? __pfx__printk+0x10/0x10 [ 323.826792][ T9695] ? __might_fault+0xb0/0x130 [ 323.826810][ T9695] should_fail_ex+0x414/0x560 [ 323.826826][ T9695] _copy_from_user+0x2d/0xb0 [ 323.826837][ T9695] kstrtouint_from_user+0xc4/0x170 [ 323.826853][ T9695] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 323.826875][ T9695] proc_fail_nth_write+0x88/0x240 [ 323.826889][ T9695] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 323.826905][ T9695] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 323.826918][ T9695] vfs_write+0x27b/0xa90 [ 323.826933][ T9695] ? __pfx_vfs_write+0x10/0x10 [ 323.826944][ T9695] ? __fget_files+0x2a/0x420 [ 323.826958][ T9695] ? __fget_files+0x3a0/0x420 [ 323.826969][ T9695] ? __fget_files+0x2a/0x420 [ 323.826985][ T9695] ksys_write+0x145/0x250 [ 323.826996][ T9695] ? __pfx_ksys_write+0x10/0x10 [ 323.827005][ T9695] ? rcu_is_watching+0x15/0xb0 [ 323.827021][ T9695] ? do_syscall_64+0xbe/0x3b0 [ 323.827037][ T9695] do_syscall_64+0xfa/0x3b0 [ 323.827050][ T9695] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.827063][ T9695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.827072][ T9695] ? clear_bhb_loop+0x60/0xb0 [ 323.827083][ T9695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.827092][ T9695] RIP: 0033:0x7fd7e138d41f [ 323.827101][ T9695] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 323.827109][ T9695] RSP: 002b:00007fd7e224e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 323.827120][ T9695] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd7e138d41f [ 323.827126][ T9695] RDX: 0000000000000001 RSI: 00007fd7e224e0a0 RDI: 000000000000000b [ 323.827132][ T9695] RBP: 00007fd7e224e090 R08: 0000000000000000 R09: 0000000000000000 [ 323.827137][ T9695] R10: 0000000000000019 R11: 0000000000000293 R12: 0000000000000001 [ 323.827143][ T9695] R13: 0000000000000000 R14: 00007fd7e15b6080 R15: 00007fd7e16dfa28 [ 323.827158][ T9695] [ 323.870146][ T9693] syzkaller0: left allmulticast mode [ 323.888835][ T5881] usb 3-1: SerialNumber: syz [ 324.101765][ T5881] usb 3-1: config 0 descriptor?? [ 324.448461][ T5881] usb 3-1: USB disconnect, device number 49 [ 324.725234][ T9716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1142'. [ 325.090026][ T9732] bridge_slave_0: invalid flags given to default FDB implementation [ 325.296360][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1145'. [ 325.306812][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1145'. [ 325.953638][ T5830] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 326.173704][ T5830] usb 3-1: Using ep0 maxpacket: 32 [ 326.181033][ T5830] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 326.192625][ T5830] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 326.202892][ T5830] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 326.212355][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 326.231235][ T5830] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 326.242872][ T5830] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 326.277188][ T5830] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 326.286427][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.294597][ T24] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 326.294598][ T5881] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 326.323332][ T5830] usb 3-1: config 0 descriptor?? [ 326.456920][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.479904][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 326.495890][ T24] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 326.505058][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.544436][ T5881] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.554988][ T5881] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 326.569164][ T5881] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 326.578478][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.593676][ T5881] usb 5-1: Product: syz [ 326.620931][ T5881] usb 5-1: Manufacturer: syz [ 326.632287][ T5881] usb 5-1: SerialNumber: syz [ 326.640508][ T5830] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 50 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 326.705260][ T24] usb 1-1: config 0 descriptor?? [ 326.712322][ T5830] usb 3-1: USB disconnect, device number 50 [ 326.726794][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 326.759228][ T5830] usblp0: removed [ 326.771046][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 326.783103][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 326.792030][ T1211] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 326.802931][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 326.816793][ T24] usb 1-1: media controller created [ 326.832017][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 326.877228][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 326.896939][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 326.910277][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input30 [ 326.944040][ T5881] usb 5-1: 0:2 : does not exist [ 326.958013][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 326.966400][ T1211] usb 2-1: config 0 has no interfaces? [ 326.984082][ T1211] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 327.003696][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.012598][ T5881] usb 5-1: USB disconnect, device number 49 [ 327.018853][ T1211] usb 2-1: Product: syz [ 327.023041][ T1211] usb 2-1: Manufacturer: syz [ 327.030139][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 327.044150][ T1211] usb 2-1: SerialNumber: syz [ 327.120995][ T24] usb 1-1: USB disconnect, device number 70 [ 327.127309][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.144304][ T1211] usb 2-1: config 0 descriptor?? [ 327.164083][ T5830] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 327.184717][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 327.190449][ T43] dvb-usb: error while querying for an remote control event. [ 327.270231][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 327.313521][ T5830] usb 3-1: Using ep0 maxpacket: 32 [ 327.321732][ T5830] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 327.340640][ T5830] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 327.401005][ T5830] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 327.414024][ T5881] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 327.478623][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 327.488477][ T30] audit: type=1326 audit(1748459730.443:5605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9754 comm="syz.1.1153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f866ff8e969 code=0x0 [ 327.523554][ T5830] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 327.543834][ T5830] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 327.590863][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 327.607492][ T5835] usb 2-1: USB disconnect, device number 66 [ 327.613490][ T5830] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 327.613514][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.624136][ T5830] usb 3-1: config 0 descriptor?? [ 327.644640][ T5881] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 327.656792][ T5881] usb 5-1: can't read configurations, error -61 [ 327.707804][ T9772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1157'. [ 327.805167][ T5881] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 327.898839][ T5830] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 327.993570][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 328.011684][ T5881] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 328.019532][ T5881] usb 5-1: can't read configurations, error -61 [ 328.059497][ T5881] usb usb5-port1: attempt power cycle [ 328.199570][ T30] audit: type=1326 audit(1748459731.163:5606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9773 comm="syz.3.1158" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7e138e969 code=0x0 [ 328.483609][ T5881] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 328.515090][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 328.522825][ T5835] usb 3-1: USB disconnect, device number 51 [ 328.547255][ T5835] usblp0: removed [ 328.587538][ T5881] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 328.604139][ T5881] usb 5-1: can't read configurations, error -61 [ 328.895546][ T9789] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 328.902782][ T9789] IPv6: NLM_F_CREATE should be set when creating new route [ 328.992531][ T5881] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 329.053823][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 329.114525][ T5881] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 329.122167][ T5881] usb 5-1: can't read configurations, error -61 [ 329.128764][ T5881] usb usb5-port1: unable to enumerate USB device [ 329.291313][ T9792] overlayfs: missing 'lowerdir' [ 329.511366][ T9796] FAULT_INJECTION: forcing a failure. [ 329.511366][ T9796] name failslab, interval 1, probability 0, space 0, times 0 [ 329.532815][ T9796] CPU: 1 UID: 0 PID: 9796 Comm: syz.1.1162 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 329.532841][ T9796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.532851][ T9796] Call Trace: [ 329.532858][ T9796] [ 329.532865][ T9796] dump_stack_lvl+0x189/0x250 [ 329.532892][ T9796] ? __pfx____ratelimit+0x10/0x10 [ 329.532914][ T9796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.532937][ T9796] ? __pfx__printk+0x10/0x10 [ 329.532955][ T9796] ? __pfx___might_resched+0x10/0x10 [ 329.532969][ T9796] ? fs_reclaim_acquire+0x7d/0x100 [ 329.532986][ T9796] should_fail_ex+0x414/0x560 [ 329.533002][ T9796] should_failslab+0xa8/0x100 [ 329.533015][ T9796] __kmalloc_noprof+0xcb/0x4f0 [ 329.533026][ T9796] ? tomoyo_encode+0x28b/0x550 [ 329.533042][ T9796] tomoyo_encode+0x28b/0x550 [ 329.533058][ T9796] tomoyo_realpath_from_path+0x58d/0x5d0 [ 329.533077][ T9796] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 329.533094][ T9796] tomoyo_path_number_perm+0x1e8/0x5a0 [ 329.533106][ T9796] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 329.533127][ T9796] ? __lock_acquire+0xab9/0xd20 [ 329.533149][ T9796] ? __fget_files+0x2a/0x420 [ 329.533163][ T9796] ? __fget_files+0x2a/0x420 [ 329.533173][ T9796] ? __fget_files+0x3a0/0x420 [ 329.533184][ T9796] ? __fget_files+0x2a/0x420 [ 329.533197][ T9796] security_file_ioctl+0xcb/0x2d0 [ 329.533209][ T9796] __se_sys_ioctl+0x47/0x170 [ 329.533220][ T9796] do_syscall_64+0xfa/0x3b0 [ 329.533234][ T9796] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.533247][ T9796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.533256][ T9796] ? clear_bhb_loop+0x60/0xb0 [ 329.533267][ T9796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.533276][ T9796] RIP: 0033:0x7f866ff8e969 [ 329.533285][ T9796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.533294][ T9796] RSP: 002b:00007f8670d22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.533304][ T9796] RAX: ffffffffffffffda RBX: 00007f86701b5fa0 RCX: 00007f866ff8e969 [ 329.533311][ T9796] RDX: 0000200000000080 RSI: 00000000c040565f RDI: 0000000000000003 [ 329.533317][ T9796] RBP: 00007f8670d22090 R08: 0000000000000000 R09: 0000000000000000 [ 329.533323][ T9796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.533330][ T9796] R13: 0000000000000000 R14: 00007f86701b5fa0 R15: 00007f86702dfa28 [ 329.533345][ T9796] [ 329.533363][ T9796] ERROR: Out of memory at tomoyo_realpath_from_path. [ 330.086454][ T9806] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1166'. [ 330.533588][ T5835] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 330.663602][ T5881] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 330.795040][ T5835] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 330.813755][ T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 330.824565][ T5835] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 330.871746][ T9824] trusted_key: encrypted_key: insufficient parameters specified [ 330.882498][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 330.895162][ T9824] bridge_slave_0: invalid flags given to default FDB implementation [ 330.951021][ T5881] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 330.959452][ T5835] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 330.983513][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 330.990284][ T24] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 330.998690][ T24] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 331.014212][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 331.024350][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 331.034175][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 331.048379][ T5881] usb 2-1: config 0 has no interface number 0 [ 331.087933][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.112974][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 331.131421][ T5881] usb 2-1: config 0 interface 184 has no altsetting 0 [ 331.143751][ T24] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 331.153152][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.171501][ T24] usb 5-1: config 0 descriptor?? [ 331.206709][ T5835] usb 3-1: config 0 descriptor?? [ 331.209956][ T9826] xt_bpf: check failed: parse error [ 331.257143][ T5881] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 331.268975][ T5835] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 331.309317][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.333561][ T5881] usb 2-1: Product: syz [ 331.339698][ T5881] usb 2-1: Manufacturer: syz [ 331.359580][ T5881] usb 2-1: SerialNumber: syz [ 331.386194][ T5881] usb 2-1: config 0 descriptor?? [ 331.433841][ T24] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 331.447816][ T5881] smsc75xx v1.0.0 [ 331.456539][ T5881] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 331.484515][ T9830] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1174'. [ 331.497137][ T24] usb 5-1: USB disconnect, device number 54 [ 331.509071][ T5881] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 331.652477][ T9819] binder: 9811:9819 ioctl c0306201 200000000100 returned -11 [ 331.667271][ T9819] fuse: Invalid rootmode [ 331.673622][ T24] usblp0: removed [ 331.875972][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1177'. [ 331.993530][ T24] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 332.163580][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 332.183300][ T24] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 332.208005][ T24] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 332.235696][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 332.249038][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 332.262838][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 332.278103][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 332.298896][ T24] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 332.315618][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.337732][ T24] usb 5-1: config 0 descriptor?? [ 332.588097][ T24] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 55 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 333.090671][ T30] audit: type=1326 audit(1748459736.043:5607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c3b8e969 code=0x7fc00000 [ 333.199215][ T5881] usb 5-1: USB disconnect, device number 55 [ 333.231148][ T5881] usblp0: removed [ 333.567639][ T24] usb 2-1: USB disconnect, device number 67 [ 333.593249][ T9870] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1185'. [ 333.822975][ T30] audit: type=1326 audit(1748459736.783:5608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.1.1186" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f866ff8e969 code=0x0 [ 333.827173][ T5881] usb 3-1: USB disconnect, device number 52 [ 333.897494][ T30] audit: type=1326 audit(1748459736.853:5609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44c3b8e969 code=0x7fc00000 [ 334.922823][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'. [ 334.977355][ T9893] xt_recent: Unsupported userspace flags (000000de) [ 334.993991][ T5881] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 335.153719][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 335.184683][ T5881] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 335.194586][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.208475][ T5881] usb 3-1: Product: syz [ 335.212662][ T5881] usb 3-1: Manufacturer: syz [ 335.229282][ T5881] usb 3-1: SerialNumber: syz [ 335.254480][ T5881] usb 3-1: config 0 descriptor?? [ 335.264458][ T5881] hub 3-1:0.0: bad descriptor, ignoring hub [ 335.270832][ T5881] hub 3-1:0.0: probe with driver hub failed with error -5 [ 335.281250][ T5881] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 335.493397][ T9888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.504056][ T9888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.530956][ T5881] gspca_vc032x: reg_w err -71 [ 335.543535][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 335.548838][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 335.563770][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 335.569151][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 335.574919][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 335.580496][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 335.590945][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 335.599119][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 335.613953][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 335.628438][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 335.641856][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 335.662848][ T9899] could not allocate digest TFM handle poly1305-simd [ 335.679014][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 335.727610][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 335.821058][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 335.855615][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 335.871974][ T9920] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1198'. [ 335.891598][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 335.901395][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 335.918661][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 335.966249][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 336.057561][ T5881] gspca_vc032x: Unknown sensor... [ 336.084241][ T5881] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 336.413977][ T5881] usb 3-1: reset high-speed USB device number 53 using dummy_hcd [ 336.474133][ T5830] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 336.529705][ T30] audit: type=1326 audit(1748459739.493:5610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9928 comm="syz.3.1201" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7e138e969 code=0x0 [ 336.553585][ T5881] usb 3-1: device descriptor read/64, error -71 [ 336.646053][ T5830] usb 2-1: config 0 has an invalid interface number: 212 but max is 0 [ 336.654348][ T5830] usb 2-1: config 0 has no interface number 0 [ 336.670642][ T5830] usb 2-1: config 0 interface 212 has no altsetting 0 [ 336.718288][ T5830] usb 2-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.e6 [ 336.844518][ T5881] usb 3-1: reset high-speed USB device number 53 using dummy_hcd [ 337.238416][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.246576][ T5830] usb 2-1: Product: syz [ 337.250821][ T5830] usb 2-1: Manufacturer: syz [ 337.255576][ T5830] usb 2-1: SerialNumber: syz [ 337.415864][ T5830] usb 2-1: config 0 descriptor?? [ 337.432966][ T5830] HFC-S_USB 2-1:0.212: probe with driver HFC-S_USB failed with error -5 [ 337.516574][ T5881] usb 3-1: device descriptor read/64, error -71 [ 337.627901][ T30] audit: type=1326 audit(1748459740.593:5611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9926 comm="syz.1.1200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f866ff8e969 code=0x0 [ 337.735234][ T9942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.745223][ T9942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.778984][ T5830] usb 2-1: USB disconnect, device number 68 [ 337.784096][ T5881] usb 3-1: reset high-speed USB device number 53 using dummy_hcd [ 337.824666][ T5881] usb 3-1: device descriptor read/8, error -71 [ 338.083581][ T5881] usb 3-1: reset high-speed USB device number 53 using dummy_hcd [ 338.104202][ T5881] usb 3-1: device descriptor read/8, error -71 [ 338.213686][ T5830] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 338.221875][ T5881] usb 3-1: USB disconnect, device number 53 [ 338.377336][ T5830] usb 2-1: config 0 has no interfaces? [ 338.391797][ T5830] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 338.408124][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.416467][ T5830] usb 2-1: Product: syz [ 338.421440][ T5830] usb 2-1: Manufacturer: syz [ 338.426277][ T5830] usb 2-1: SerialNumber: syz [ 338.437874][ T5830] usb 2-1: config 0 descriptor?? [ 338.515818][ T5881] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 338.663785][ T5881] usb 3-1: device descriptor read/64, error -71 [ 338.726009][ T9952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.741715][ T9952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.654639][ T5880] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 339.824860][ T5880] usb 5-1: Using ep0 maxpacket: 16 [ 339.843021][ T5880] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 339.890237][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.917446][ T5880] usb 5-1: Product: syz [ 339.921879][ T5880] usb 5-1: Manufacturer: syz [ 339.927654][ T5880] usb 5-1: SerialNumber: syz [ 339.940799][ T5880] usb 5-1: config 0 descriptor?? [ 339.959517][ T5880] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 339.969583][ T5881] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 340.123591][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 340.130782][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.141234][ T5881] usb 3-1: config 0 has no interfaces? [ 340.149246][ T5881] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 340.209924][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 340.227729][ T5880] gp8psk: usb in 128 operation failed. [ 340.245332][ T5881] usb 3-1: Product: syz [ 340.250966][ T5881] usb 3-1: SerialNumber: syz [ 340.251420][ T5880] gp8psk: usb in 137 operation failed. [ 340.265529][ T5881] usb 3-1: config 0 descriptor?? [ 340.274819][ T5880] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 340.299605][ T5880] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 340.312997][ T5880] usb 5-1: media controller created [ 340.348398][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 340.403299][ T5880] gp8psk_fe: Frontend revision 1 attached [ 340.412045][ T5880] usb 5-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 340.425929][ T5880] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 340.612965][ T5881] usb 3-1: USB disconnect, device number 56 [ 340.670677][ T5880] gp8psk: usb in 138 operation failed. [ 340.678991][ T5880] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 340.710421][ T5880] gp8psk: found Genpix USB device pID = 201 (hex) [ 340.868971][ T5881] usb 2-1: USB disconnect, device number 69 [ 340.910544][ T9988] tipc: Enabling of bearer rejected, failed to enable media [ 341.533568][ T5830] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 341.545423][T10009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.554513][ T30] audit: type=1326 audit(1748459744.523:5612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10005 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c3b8e969 code=0x7fc00000 [ 341.554887][T10009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.685744][T10012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.696097][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.707322][ T5830] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 341.716714][T10012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.725031][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.735519][ T5830] usb 2-1: config 0 descriptor?? [ 341.943305][T10003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.952582][T10003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.976419][ T5830] usbhid 2-1:0.0: can't add hid device: -71 [ 341.984696][ T5830] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 342.006336][ T5830] usb 2-1: USB disconnect, device number 70 [ 342.060471][T10017] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 342.217773][ T30] audit: type=1326 audit(1748459745.183:5613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10005 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44c3b8e969 code=0x7fc00000 [ 342.245412][ T30] audit: type=1326 audit(1748459745.183:5614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10005 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c3b8e969 code=0x7fc00000 [ 342.269545][ T30] audit: type=1326 audit(1748459745.183:5615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10005 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c3b8e969 code=0x7fc00000 [ 342.299260][ T30] audit: type=1326 audit(1748459745.183:5616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10005 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c3b8e969 code=0x7fc00000 [ 342.321693][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.329129][ T30] audit: type=1326 audit(1748459745.183:5617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10005 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c3b8e969 code=0x7fc00000 [ 342.354961][ T30] audit: type=1326 audit(1748459745.183:5618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10005 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c3b8e969 code=0x7fc00000 [ 342.378519][ T30] audit: type=1326 audit(1748459745.183:5619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10005 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c3b8e969 code=0x7fc00000 [ 342.401982][ T30] audit: type=1326 audit(1748459745.183:5620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10005 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c3b8e969 code=0x7fc00000 [ 342.424383][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.431809][ T30] audit: type=1326 audit(1748459745.183:5621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10005 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c3b8e969 code=0x7fc00000 [ 342.454255][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.465327][ T24] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 342.495492][ T5830] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 342.505161][T10029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.515490][T10029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.673549][ T5830] usb 2-1: device descriptor read/64, error -71 [ 342.681668][ T24] usb 3-1: config 0 has no interfaces? [ 342.691751][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 342.701547][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.709843][ T24] usb 3-1: Product: syz [ 342.714212][ T24] usb 3-1: Manufacturer: syz [ 342.719381][ T24] usb 3-1: SerialNumber: syz [ 342.726059][ T24] usb 3-1: config 0 descriptor?? [ 342.933767][ T5830] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 343.063678][ T5830] usb 2-1: device descriptor read/64, error -71 [ 343.185043][ T5830] usb usb2-port1: attempt power cycle [ 343.190624][T10044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.205744][T10044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.243401][T10045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.252401][T10045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.330160][T10047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.341121][T10047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.365495][T10047] program syz.3.1238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.375597][T10047] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 343.533544][ T5830] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 343.565029][ T5830] usb 2-1: device descriptor read/8, error -71 [ 343.823559][ T5830] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 343.886505][ T5830] usb 2-1: device descriptor read/8, error -71 [ 344.074232][ T5830] usb usb2-port1: unable to enumerate USB device [ 345.377842][ T5881] usb 3-1: USB disconnect, device number 57 [ 345.603527][ T5830] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 345.638661][T10077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.650762][T10077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.770334][ T5830] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 345.792119][ T5830] usb 2-1: config 0 interface 0 has no altsetting 0 [ 345.805986][ T5830] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 345.815566][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 345.824639][ T5830] usb 2-1: Product: syz [ 345.828886][ T5830] usb 2-1: Manufacturer: syz [ 345.834250][ T5830] usb 2-1: SerialNumber: syz [ 345.850981][ T5830] usb 2-1: config 0 descriptor?? [ 345.865073][ T5830] usb 2-1: selecting invalid altsetting 0 [ 346.125390][T10086] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 10086 comm: syz.0.1250) [ 346.554200][T10094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.580244][T10094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.621150][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1246'. [ 346.740068][T10099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1253'. [ 347.074375][T10106] IPv6: NLM_F_CREATE should be specified when creating new route [ 347.202723][T10110] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1257'. [ 348.275616][ T5835] usb 2-1: USB disconnect, device number 75 [ 348.542220][T10132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.576262][T10132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.624808][T10132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.655334][T10132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.697269][T10132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.706398][T10132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.722075][T10140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'. [ 348.751984][T10142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.765140][T10142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.903547][ T5830] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 349.010163][ T30] kauditd_printk_skb: 343 callbacks suppressed [ 349.010179][ T30] audit: type=1326 audit(1748459751.973:5965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b778e969 code=0x7ffc0000 [ 349.038847][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.067930][ T5830] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 349.081653][ T5830] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 349.112208][ T5830] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 349.128258][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.152553][T10138] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 349.170106][ T5830] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 349.203742][ T30] audit: type=1326 audit(1748459752.013:5966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b778e969 code=0x7ffc0000 [ 349.294166][ T30] audit: type=1326 audit(1748459752.023:5967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f49b778e969 code=0x7ffc0000 [ 349.339900][ T30] audit: type=1326 audit(1748459752.023:5968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b778e969 code=0x7ffc0000 [ 349.362806][ T30] audit: type=1326 audit(1748459752.023:5969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f49b778e969 code=0x7ffc0000 [ 349.406755][T10156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.416449][T10138] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 349.422964][T10138] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 349.430820][ T30] audit: type=1326 audit(1748459752.023:5970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b778e969 code=0x7ffc0000 [ 349.455496][T10157] binder: 10155:10157 ioctl c0306201 2000000003c0 returned -14 [ 349.456233][T10156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.471011][T10138] vhci_hcd vhci_hcd.0: Device attached [ 349.481117][ T30] audit: type=1326 audit(1748459752.023:5971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49b778e969 code=0x7ffc0000 [ 349.484634][T10153] vhci_hcd: connection closed [ 349.503521][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.577220][ T24] usb 1-1: USB disconnect, device number 71 [ 349.606055][ T6658] vhci_hcd: stop threads [ 349.610348][ T6658] vhci_hcd: release socket [ 349.619773][ T6658] vhci_hcd: disconnect device [ 349.652462][ T30] audit: type=1326 audit(1748459752.023:5972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b778e969 code=0x7ffc0000 [ 349.683591][ T43] vhci_hcd: vhci_device speed not set [ 349.755505][T10164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.802042][T10164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.827213][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1272'. [ 350.595939][T10189] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 351.087530][ T43] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 351.228512][T10207] FAULT_INJECTION: forcing a failure. [ 351.228512][T10207] name failslab, interval 1, probability 0, space 0, times 0 [ 351.241729][T10207] CPU: 0 UID: 0 PID: 10207 Comm: syz.3.1289 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 351.241752][T10207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 351.241762][T10207] Call Trace: [ 351.241769][T10207] [ 351.241776][T10207] dump_stack_lvl+0x189/0x250 [ 351.241803][T10207] ? __pfx____ratelimit+0x10/0x10 [ 351.241825][T10207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.241845][T10207] ? __pfx__printk+0x10/0x10 [ 351.241868][T10207] ? __pfx___might_resched+0x10/0x10 [ 351.241888][T10207] ? fs_reclaim_acquire+0x7d/0x100 [ 351.241914][T10207] should_fail_ex+0x414/0x560 [ 351.241939][T10207] should_failslab+0xa8/0x100 [ 351.241961][T10207] __kmalloc_noprof+0xcb/0x4f0 [ 351.241977][T10207] ? kfree+0x4d/0x440 [ 351.241992][T10207] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 351.242018][T10207] tomoyo_realpath_from_path+0xe3/0x5d0 [ 351.242040][T10207] ? tomoyo_domain+0xda/0x130 [ 351.242069][T10207] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 351.242089][T10207] tomoyo_path_number_perm+0x1e8/0x5a0 [ 351.242110][T10207] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 351.242146][T10207] ? __lock_acquire+0xab9/0xd20 [ 351.242184][T10207] ? __fget_files+0x2a/0x420 [ 351.242206][T10207] ? __fget_files+0x2a/0x420 [ 351.242223][T10207] ? __fget_files+0x3a0/0x420 [ 351.242237][T10207] ? __fget_files+0x2a/0x420 [ 351.242258][T10207] security_file_ioctl+0xcb/0x2d0 [ 351.242277][T10207] __se_sys_ioctl+0x47/0x170 [ 351.242296][T10207] do_syscall_64+0xfa/0x3b0 [ 351.242318][T10207] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.242338][T10207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.242354][T10207] ? clear_bhb_loop+0x60/0xb0 [ 351.242374][T10207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.242389][T10207] RIP: 0033:0x7fd7e138e969 [ 351.242404][T10207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.242417][T10207] RSP: 002b:00007fd7e224e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.242434][T10207] RAX: ffffffffffffffda RBX: 00007fd7e15b6080 RCX: 00007fd7e138e969 [ 351.242446][T10207] RDX: 00002000000000c0 RSI: 00000000401054d5 RDI: 0000000000000003 [ 351.242457][T10207] RBP: 00007fd7e224e090 R08: 0000000000000000 R09: 0000000000000000 [ 351.242467][T10207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.242477][T10207] R13: 0000000000000001 R14: 00007fd7e15b6080 R15: 00007fd7e16dfa28 [ 351.242503][T10207] [ 351.242649][T10207] ERROR: Out of memory at tomoyo_realpath_from_path. [ 351.282766][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 351.542877][ T43] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 351.552318][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.562209][ T43] usb 2-1: Product: syz [ 351.572286][ T43] usb 2-1: Manufacturer: syz [ 351.623293][ T43] usb 2-1: SerialNumber: syz [ 351.767747][ T43] usb 2-1: config 0 descriptor?? [ 352.466544][T10223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.475310][T10223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.659529][T10198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.668426][T10198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.706557][ T43] usb 2-1: USB disconnect, device number 76 [ 352.739580][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.844759][ T24] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 353.025229][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.033576][ T5835] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 353.035638][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 353.052466][ T24] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 353.063222][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.074619][ T24] usb 3-1: config 0 descriptor?? [ 353.088576][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 353.095523][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 353.103483][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 353.112786][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 353.120005][ T24] usb 3-1: media controller created [ 353.128357][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 353.143119][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 353.152314][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 353.161471][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input31 [ 353.176044][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 353.184177][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 353.203792][ T5835] usb 1-1: Using ep0 maxpacket: 32 [ 353.213044][ T5835] usb 1-1: config 1 has an invalid descriptor of length 186, skipping remainder of the config [ 353.234927][ T5835] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.247279][ T5835] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.256646][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.266106][ T5835] usb 1-1: Product: ᠉ [ 353.270398][ T5835] usb 1-1: Manufacturer: ᏺꃫ먀ః양⼶眇曐呴ꟴ䙡㾷⫧嚝ܫㅋꗖꤝ獅꠆槮鋴衔짉兺㠝ᇑ떈ි剶ﺮﵮ死䋥⼔璁㖩ᦹ瀑ꀶᓓ灼ၸᡅ붙喛Ḽ摏狦鯰쒺鬜돌쉣쓿芜⳱劘⦄⶝Έ俸霩㕘勜퉤⬔꣱⊅䃚㮝쇸食№畽ԩ턒빛薕撢鸲퉽쨷쀉㢻雗⽟읹裁폸勑忴켲趬蝣⧘ [ 353.302257][ T5835] usb 1-1: SerialNumber: 䠊 [ 353.313404][ T24] usb 3-1: USB disconnect, device number 58 [ 353.365838][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 353.845197][ T5881] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 354.203019][ T5835] usb 1-1: 0:2 : does not exist [ 354.233619][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 354.249660][ T5881] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 354.272852][ T5835] usb 1-1: USB disconnect, device number 72 [ 354.281688][ T5881] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 354.301749][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 354.317202][ T5881] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 354.330119][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 354.348228][ T5881] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 354.349094][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.358088][ T5881] usb 2-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 354.431426][ T5881] usb 2-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 354.444812][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.452868][T10252] fuse: Bad value for 'fd' [ 354.461456][ T5881] usb 2-1: Product: syz [ 354.465798][ T5881] usb 2-1: Manufacturer: syz [ 354.470626][ T5881] usb 2-1: SerialNumber: syz [ 354.477692][ T5881] usb 2-1: config 0 descriptor?? [ 354.483742][T10242] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 354.695964][ T5881] hdpvr 2-1:0.0: unexpected answer of status request, len -71 [ 354.706802][ T5881] hdpvr 2-1:0.0: device init failed [ 354.712177][ T5881] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 354.724128][ T5835] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 354.732179][ T5881] usb 2-1: USB disconnect, device number 77 [ 354.893523][ T5835] usb 1-1: Using ep0 maxpacket: 16 [ 354.900385][ T5835] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 354.909243][ T5835] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.919836][ T5835] usb 1-1: config 0 has no interface number 0 [ 354.928660][ T5835] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 354.938039][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.946133][ T5835] usb 1-1: Product: syz [ 354.950497][ T5835] usb 1-1: Manufacturer: syz [ 354.955306][ T5835] usb 1-1: SerialNumber: syz [ 354.962607][ T5835] usb 1-1: config 0 descriptor?? [ 354.970818][ T5835] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 354.977512][ T5835] usb 1-1: No valid video chain found. [ 355.181546][ T24] usb 1-1: USB disconnect, device number 73 [ 355.516660][T10264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.528509][T10264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.593783][T10265] trusted_key: encrypted_key: insufficient parameters specified [ 355.603837][T10265] bridge_slave_0: invalid flags given to default FDB implementation [ 355.692203][T10267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.701099][T10267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.712208][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1308'. [ 356.043539][ T24] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 356.281318][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 356.297038][ T24] usb 1-1: config 0 has no interface number 0 [ 356.318778][ T24] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 356.334746][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.361678][ T24] usb 1-1: Product: syz [ 356.366573][ T24] usb 1-1: Manufacturer: syz [ 356.371192][ T24] usb 1-1: SerialNumber: syz [ 356.382193][ T24] usb 1-1: config 0 descriptor?? [ 356.625784][ T24] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 356.652101][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 356.696121][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 356.703821][ T30] audit: type=1326 audit(1748459759.653:5973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.1.1312" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f866ff8e969 code=0x0 [ 356.704624][ T24] usb 1-1: media controller created [ 356.755051][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.913322][T10279] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 356.924481][T10276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.936504][T10276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.015586][T10279] bond2: entered promiscuous mode [ 357.020842][T10279] bond2: entered allmulticast mode [ 357.027133][T10279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 357.313348][T10279] bond2 (unregistering): Released all slaves [ 357.671221][T10293] FAULT_INJECTION: forcing a failure. [ 357.671221][T10293] name failslab, interval 1, probability 0, space 0, times 0 [ 357.711694][T10293] CPU: 1 UID: 0 PID: 10293 Comm: syz.1.1317 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 357.711720][T10293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.711731][T10293] Call Trace: [ 357.711738][T10293] [ 357.711745][T10293] dump_stack_lvl+0x189/0x250 [ 357.711765][T10293] ? __pfx____ratelimit+0x10/0x10 [ 357.711786][T10293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.711807][T10293] ? __pfx__printk+0x10/0x10 [ 357.711826][T10293] ? __pfx___might_resched+0x10/0x10 [ 357.711846][T10293] ? fs_reclaim_acquire+0x7d/0x100 [ 357.711879][T10293] should_fail_ex+0x414/0x560 [ 357.711906][T10293] should_failslab+0xa8/0x100 [ 357.711927][T10293] kmem_cache_alloc_noprof+0x73/0x3c0 [ 357.711938][T10293] ? security_file_alloc+0x34/0x330 [ 357.711956][T10293] security_file_alloc+0x34/0x330 [ 357.711975][T10293] init_file+0x93/0x2f0 [ 357.712000][T10293] alloc_empty_file+0x6e/0x1d0 [ 357.712023][T10293] alloc_file_pseudo+0x13d/0x210 [ 357.712043][T10293] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 357.712056][T10293] ? do_raw_spin_unlock+0x122/0x240 [ 357.712067][T10293] ? _raw_spin_unlock+0x28/0x50 [ 357.712083][T10293] sock_alloc_file+0xb8/0x2e0 [ 357.712094][T10293] ? __sys_socket+0x12c/0x1b0 [ 357.712114][T10293] __sys_socket+0x13d/0x1b0 [ 357.712138][T10293] __x64_sys_socket+0x7a/0x90 [ 357.712158][T10293] do_syscall_64+0xfa/0x3b0 [ 357.712179][T10293] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.712201][T10293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.712217][T10293] ? clear_bhb_loop+0x60/0xb0 [ 357.712237][T10293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.712248][T10293] RIP: 0033:0x7f866ff90887 [ 357.712258][T10293] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.712272][T10293] RSP: 002b:00007f8670d20fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 357.712289][T10293] RAX: ffffffffffffffda RBX: 00007f86701b5fa0 RCX: 00007f866ff90887 [ 357.712302][T10293] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 357.712311][T10293] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 357.712321][T10293] R10: 0000200000000000 R11: 0000000000000286 R12: 0000000000000001 [ 357.712331][T10293] R13: 0000000000000000 R14: 00007f86701b5fa0 R15: 00007f86702dfa28 [ 357.712358][T10293] [ 357.995179][ T24] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 358.078905][ T24] usb 1-1: USB disconnect, device number 74 [ 358.347457][T10300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1320'. [ 358.368526][T10299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1320'. [ 358.387149][T10300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1320'. [ 358.396771][T10301] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1320'. [ 358.423647][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 358.468688][T10303] loop2: detected capacity change from 0 to 7 [ 358.477663][T10303] Dev loop2: unable to read RDB block 7 [ 358.483315][T10303] loop2: unable to read partition table [ 358.508182][T10303] loop2: partition table beyond EOD, truncated [ 358.530096][T10303] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 358.595812][ T9] usb 3-1: config 0 has no interfaces? [ 358.603249][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 358.622965][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 358.641323][ T9] usb 3-1: Product: syz [ 358.650935][ T9] usb 3-1: Manufacturer: syz [ 358.670245][ T9] usb 3-1: config 0 descriptor?? [ 358.958236][T10316] kvm: pic: non byte write [ 359.026600][T10318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.046364][T10318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.054676][ T24] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 359.227130][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 359.241688][ T24] usb 1-1: config index 0 descriptor too short (expected 69, got 36) [ 359.251566][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.266802][ T24] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 359.277981][T10323] trusted_key: encrypted_key: insufficient parameters specified [ 359.297957][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.300815][T10323] bridge_slave_0: invalid flags given to default FDB implementation [ 359.330148][ T24] usb 1-1: Product: syz [ 359.339322][ T24] usb 1-1: Manufacturer: syz [ 359.346362][ T24] usb 1-1: SerialNumber: syz [ 359.358892][ T24] usb 1-1: config 0 descriptor?? [ 359.366817][ T24] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 359.528947][T10325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.541673][T10326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.552104][T10325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.561723][T10326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.892545][T10330] sit0: entered promiscuous mode [ 359.902211][T10330] netlink: 'syz.4.1329': attribute type 1 has an invalid length. [ 359.914470][T10330] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1329'. [ 360.062622][T10335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.107345][T10335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.183086][ T24] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 360.196904][T10337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.213186][ T24] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 360.215057][T10337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.258819][ T24] usb 1-1: USB disconnect, device number 75 [ 360.366080][T10345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.378287][T10344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.387231][T10345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.396032][T10347] binder: BINDER_SET_CONTEXT_MGR already set [ 360.404346][T10347] binder: 10342:10347 ioctl 4018620d 2000000000c0 returned -16 [ 360.414661][T10344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.430982][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1332'. [ 361.124458][ T24] usb 3-1: USB disconnect, device number 59 [ 361.213698][ T30] audit: type=1326 audit(1748459764.173:5974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm=":" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f866ff8e969 code=0x0 [ 361.234814][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.681366][T10372] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 362.819428][T10392] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 362.826084][T10392] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 362.843829][T10392] vhci_hcd vhci_hcd.0: Device attached [ 362.878772][T10398] vhci_hcd: connection closed [ 362.879193][ T1166] vhci_hcd: stop threads [ 362.923552][ T1166] vhci_hcd: release socket [ 362.933781][ T1166] vhci_hcd: disconnect device [ 363.309637][T10410] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 363.839099][T10431] FAULT_INJECTION: forcing a failure. [ 363.839099][T10431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.857855][T10431] CPU: 0 UID: 0 PID: 10431 Comm: syz.4.1362 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 363.857881][T10431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 363.857891][T10431] Call Trace: [ 363.857898][T10431] [ 363.857905][T10431] dump_stack_lvl+0x189/0x250 [ 363.857934][T10431] ? __pfx____ratelimit+0x10/0x10 [ 363.857957][T10431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.857980][T10431] ? __pfx__printk+0x10/0x10 [ 363.858009][T10431] should_fail_ex+0x414/0x560 [ 363.858036][T10431] _copy_to_user+0x31/0xb0 [ 363.858057][T10431] simple_read_from_buffer+0xe1/0x170 [ 363.858081][T10431] proc_fail_nth_read+0x1df/0x250 [ 363.858107][T10431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 363.858132][T10431] ? rw_verify_area+0x258/0x650 [ 363.858149][T10431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 363.858172][T10431] vfs_read+0x1fd/0x980 [ 363.858194][T10431] ? __pfx___mutex_lock+0x10/0x10 [ 363.858225][T10431] ? __pfx_vfs_read+0x10/0x10 [ 363.858244][T10431] ? __fget_files+0x2a/0x420 [ 363.858268][T10431] ? __fget_files+0x3a0/0x420 [ 363.858285][T10431] ? __fget_files+0x2a/0x420 [ 363.858314][T10431] ksys_read+0x145/0x250 [ 363.858334][T10431] ? __pfx_ksys_read+0x10/0x10 [ 363.858349][T10431] ? rcu_is_watching+0x15/0xb0 [ 363.858376][T10431] ? do_syscall_64+0xbe/0x3b0 [ 363.858403][T10431] do_syscall_64+0xfa/0x3b0 [ 363.858424][T10431] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.858445][T10431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.858461][T10431] ? clear_bhb_loop+0x60/0xb0 [ 363.858482][T10431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.858498][T10431] RIP: 0033:0x7f49b778d37c [ 363.858513][T10431] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 363.858526][T10431] RSP: 002b:00007f49b8519030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 363.858544][T10431] RAX: ffffffffffffffda RBX: 00007f49b79b5fa0 RCX: 00007f49b778d37c [ 363.858557][T10431] RDX: 000000000000000f RSI: 00007f49b85190a0 RDI: 0000000000000004 [ 363.858567][T10431] RBP: 00007f49b8519090 R08: 0000000000000000 R09: 0000000000000000 [ 363.858577][T10431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.858588][T10431] R13: 0000000000000000 R14: 00007f49b79b5fa0 R15: 00007f49b7adfa28 [ 363.858616][T10431] [ 364.093347][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.458145][T10442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.506533][T10442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.853628][T10451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.871318][T10451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.952535][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1363'. [ 365.032570][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1368'. [ 365.473546][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 365.637067][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 365.650362][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.693512][ T9] usb 3-1: Product: syz [ 365.704397][ T9] usb 3-1: Manufacturer: syz [ 365.718260][ T9] usb 3-1: SerialNumber: syz [ 365.736302][ T9] usb 3-1: config 0 descriptor?? [ 365.749885][ T9] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 366.148947][ T30] audit: type=1326 audit(1748459769.113:5975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e138e969 code=0x7ffc0000 [ 366.181291][ T9] sonixb 3-1:0.0: Error writing register 01: -71 [ 366.194123][ T9] sonixb 3-1:0.0: probe with driver sonixb failed with error -71 [ 366.215000][ T9] usb 3-1: USB disconnect, device number 60 [ 366.227930][T10472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.244085][ T30] audit: type=1326 audit(1748459769.113:5976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e138e969 code=0x7ffc0000 [ 366.266515][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.295317][ T30] audit: type=1326 audit(1748459769.113:5977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd7e132ab39 code=0x7ffc0000 [ 366.317662][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.342556][ T30] audit: type=1326 audit(1748459769.113:5978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd7e132ab39 code=0x7ffc0000 [ 366.343690][T10473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.365033][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.365770][ T30] audit: type=1326 audit(1748459769.113:5979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd7e132ab39 code=0x7ffc0000 [ 366.403681][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.442174][ T30] audit: type=1326 audit(1748459769.113:5980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd7e132ab39 code=0x7ffc0000 [ 366.508219][T10477] snd_dummy snd_dummy.0: control 3:5:3:syz1:9 is already present [ 366.563571][ T30] audit: type=1326 audit(1748459769.113:5981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd7e132ab39 code=0x7ffc0000 [ 366.585958][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.592684][ T30] audit: type=1326 audit(1748459769.113:5982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd7e132ab39 code=0x7ffc0000 [ 366.615063][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.627381][ T30] audit: type=1326 audit(1748459769.113:5983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd7e132ab39 code=0x7ffc0000 [ 366.649728][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.657296][ T30] audit: type=1326 audit(1748459769.113:5984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd7e132ab39 code=0x7ffc0000 [ 366.989259][T10488] fuse: Bad value for 'fd' [ 367.027235][T10488] fuse: Bad value for 'group_id' [ 367.032225][T10488] fuse: Bad value for 'group_id' [ 367.316955][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1384'. [ 367.329944][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1384'. [ 368.003909][ T24] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 368.185291][ T24] usb 1-1: config 0 has an invalid interface number: 102 but max is 1 [ 368.193832][ T24] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 368.205743][ T24] usb 1-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config [ 368.233721][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 368.246657][ T24] usb 1-1: config 0 has no interface number 0 [ 368.273173][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=f900, bcdDevice=48.ba [ 368.369248][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.524441][ T24] usb 1-1: config 0 descriptor?? [ 368.761138][ T24] usb 1-1: USB disconnect, device number 76 [ 368.806074][T10541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.044168][T10548] xt_bpf: check failed: parse error [ 369.157651][ T43] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 369.232517][T10556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.250420][T10556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.323671][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 369.331980][ T43] usb 3-1: config 5 has an invalid interface number: 98 but max is 3 [ 369.354655][ T43] usb 3-1: config 5 has an invalid interface number: 76 but max is 3 [ 369.373774][ T43] usb 3-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 369.393301][ T43] usb 3-1: config 5 has an invalid interface number: 154 but max is 3 [ 369.420962][ T43] usb 3-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 369.438928][T10560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.448157][T10560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.463626][ T43] usb 3-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 369.476384][ T43] usb 3-1: config 5 has an invalid interface number: 69 but max is 3 [ 369.488001][ T43] usb 3-1: config 5 has an invalid interface number: 8 but max is 3 [ 369.496680][ T43] usb 3-1: config 5 has 5 interfaces, different from the descriptor's value: 4 [ 369.506364][ T43] usb 3-1: config 5 has no interface number 0 [ 369.512545][ T43] usb 3-1: config 5 has no interface number 1 [ 369.519771][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1399'. [ 369.536192][ T43] usb 3-1: config 5 has no interface number 2 [ 369.542426][ T43] usb 3-1: config 5 has no interface number 3 [ 369.552167][ T43] usb 3-1: config 5 has no interface number 4 [ 369.564619][ T43] usb 3-1: config 5 interface 98 altsetting 2 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 369.623765][ T43] usb 3-1: config 5 interface 98 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 369.648814][ T43] usb 3-1: config 5 interface 98 altsetting 2 endpoint 0x9 has invalid maxpacket 96, setting to 64 [ 369.661330][ T43] usb 3-1: config 5 interface 98 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 369.672678][ T43] usb 3-1: config 5 interface 98 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 369.684345][ T43] usb 3-1: config 5 interface 98 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 369.695765][ T43] usb 3-1: config 5 interface 98 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 369.707004][ T43] usb 3-1: config 5 interface 98 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 369.796200][T10567] trusted_key: encrypted_key: insufficient parameters specified [ 369.818816][T10564] bridge_slave_0: invalid flags given to default FDB implementation [ 369.898695][ T43] usb 3-1: config 5 interface 98 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 369.929841][ T43] usb 3-1: config 5 interface 98 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 369.960133][ T43] usb 3-1: config 5 interface 76 altsetting 243 has an invalid descriptor for endpoint zero, skipping [ 370.020907][ T43] usb 3-1: config 5 interface 76 altsetting 243 has a duplicate endpoint with address 0xB, skipping [ 370.055966][ T43] usb 3-1: config 5 interface 76 altsetting 243 has a duplicate endpoint with address 0xB, skipping [ 370.073853][ T43] usb 3-1: config 5 interface 76 altsetting 243 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 370.085245][ T43] usb 3-1: config 5 interface 76 altsetting 243 has a duplicate endpoint with address 0xE, skipping [ 370.119369][ T43] usb 3-1: config 5 interface 76 altsetting 243 has a duplicate endpoint with address 0xE, skipping [ 370.165410][ T43] usb 3-1: config 5 interface 76 altsetting 243 has a duplicate endpoint with address 0xA, skipping [ 370.176668][ T43] usb 3-1: config 5 interface 76 altsetting 243 has an invalid descriptor for endpoint zero, skipping [ 370.189391][ T43] usb 3-1: config 5 interface 76 altsetting 243 has an invalid descriptor for endpoint zero, skipping [ 370.226104][ T43] usb 3-1: config 5 interface 76 altsetting 243 has a duplicate endpoint with address 0x6, skipping [ 370.270220][ T43] usb 3-1: config 5 interface 76 altsetting 243 has an invalid descriptor for endpoint zero, skipping [ 370.302098][ T43] usb 3-1: config 5 interface 154 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 370.379863][ T43] usb 3-1: config 5 interface 154 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 370.431420][ T43] usb 3-1: config 5 interface 154 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 370.476500][ T43] usb 3-1: config 5 interface 154 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 370.500441][ T43] usb 3-1: config 5 interface 154 altsetting 9 has an endpoint descriptor with address 0xAF, changing to 0x8F [ 370.526453][ T43] usb 3-1: config 5 interface 154 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 370.549525][ T43] usb 3-1: config 5 interface 154 altsetting 9 endpoint 0x1 has invalid maxpacket 1144, setting to 64 [ 370.602508][ T43] usb 3-1: config 5 interface 154 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 370.615128][ T43] usb 3-1: config 5 interface 154 altsetting 9 has a duplicate endpoint with address 0x8E, skipping [ 370.626558][ T43] usb 3-1: config 5 interface 154 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 370.642158][ T43] usb 3-1: config 5 interface 154 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 370.653271][ T43] usb 3-1: config 5 interface 154 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 370.664196][ T43] usb 3-1: config 5 interface 154 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 370.675339][ T43] usb 3-1: config 5 interface 154 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 370.686315][ T43] usb 3-1: config 5 interface 69 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 370.697156][ T43] usb 3-1: config 5 interface 69 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 370.787702][ T43] usb 3-1: too many endpoints for config 5 interface 8 altsetting 74: 99, using maximum allowed: 30 [ 370.803049][ T43] usb 3-1: config 5 interface 8 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 99 [ 370.863263][ T43] usb 3-1: config 5 interface 98 has no altsetting 0 [ 370.870185][ T43] usb 3-1: config 5 interface 76 has no altsetting 0 [ 370.878597][ T43] usb 3-1: config 5 interface 154 has no altsetting 0 [ 370.892216][ T43] usb 3-1: config 5 interface 69 has no altsetting 0 [ 370.902374][ T43] usb 3-1: config 5 interface 8 has no altsetting 0 [ 370.935738][ T43] usb 3-1: Dual-Role OTG device on HNP port [ 370.941961][ T43] usb 3-1: New USB device found, idVendor=19d2, idProduct=1134, bcdDevice=2f.b5 [ 370.952705][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.022866][ T43] usb 3-1: Product: 㐊 [ 371.030329][ T43] usb 3-1: Manufacturer: 紁褤ꋒ柵ㆉ錘࿓嶩䗆뒑᰸梺㋊繁䱅Θ琐˙佄␉䌪絣鉶ぁ퇟褮炃濩ᔏ闓ꈺʄ߯㣹ួ肨俖词样訚빟䒤吤⋞ਸ਼⿢䰎⣯܅丑垱㦌ᑂ㴏᷊⥾㕻㖮劕魷ߊ呙牆렛뾓슂釐媎裟蜑ᑬ놸俳ꂟ鸸꧌쏅藻㙓迁罨峬↹緜뉗輧뀐賃㛗㤱೵䍹ⴳ쒐豹宜濈㗉芴䌝꺽갅굲វ袞紤柖 [ 371.089680][ T43] usb 3-1: SerialNumber: Э [ 371.315870][T10546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.328099][T10546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.351808][ T43] option 3-1:5.98: GSM modem (1-port) converter detected [ 371.473385][ T43] usb 3-1: USB disconnect, device number 61 [ 371.704115][ T43] option 3-1:5.98: device disconnected [ 372.432779][T10611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.476386][T10611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.514037][T10611] syzkaller1: entered promiscuous mode [ 372.530142][T10611] syzkaller1: entered allmulticast mode [ 372.654867][T10622] trusted_key: encrypted_key: insufficient parameters specified [ 372.677330][T10622] bridge_slave_0: invalid flags given to default FDB implementation [ 372.923677][ T5830] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 373.074122][ T5830] usb 2-1: Using ep0 maxpacket: 8 [ 373.081829][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 373.109839][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 373.137121][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 373.199227][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 373.237175][ T5830] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 373.254801][ T5830] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 373.264341][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.287151][ T5830] usb 2-1: config 0 descriptor?? [ 373.355370][T10633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.365896][T10633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.515546][ T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 373.693508][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 373.702157][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 373.731507][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.769647][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 373.791940][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 373.812066][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.820694][ T9] usb 3-1: Product: syz [ 373.832025][ T9] usb 3-1: Manufacturer: syz [ 373.836901][ T9] usb 3-1: SerialNumber: syz [ 374.253954][ T9] usb 3-1: 0:2 : does not exist [ 374.282760][ T30] kauditd_printk_skb: 179 callbacks suppressed [ 374.282773][ T30] audit: type=1326 audit(1748459777.243:6164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.4.1427" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49b778e969 code=0x0 [ 375.201587][T10664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.214876][T10664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.225606][ T30] audit: type=1326 audit(1748459778.193:6165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="syz.0.1431" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44c3b8e969 code=0x0 [ 375.464427][T10664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.473344][T10664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.289073][T10671] FAULT_INJECTION: forcing a failure. [ 376.289073][T10671] name failslab, interval 1, probability 0, space 0, times 0 [ 376.319096][ T9] usb 3-1: USB disconnect, device number 62 [ 376.369526][ T5830] usb 2-1: USB disconnect, device number 78 [ 376.377525][T10671] CPU: 0 UID: 0 PID: 10671 Comm: syz.4.1434 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 376.377549][T10671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 376.377559][T10671] Call Trace: [ 376.377565][T10671] [ 376.377572][T10671] dump_stack_lvl+0x189/0x250 [ 376.377600][T10671] ? __pfx____ratelimit+0x10/0x10 [ 376.377623][T10671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.377644][T10671] ? __pfx__printk+0x10/0x10 [ 376.377664][T10671] ? __pfx___might_resched+0x10/0x10 [ 376.377684][T10671] ? fs_reclaim_acquire+0x7d/0x100 [ 376.377710][T10671] should_fail_ex+0x414/0x560 [ 376.377737][T10671] should_failslab+0xa8/0x100 [ 376.377759][T10671] __kmalloc_noprof+0xcb/0x4f0 [ 376.377777][T10671] ? snd_pcm_hw_refine+0x967/0x1640 [ 376.377799][T10671] snd_pcm_hw_refine+0x967/0x1640 [ 376.377829][T10671] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 376.377878][T10671] ? __kasan_kmalloc+0x93/0xb0 [ 376.377915][T10671] snd_pcm_oss_change_params_locked+0xd22/0x3e40 [ 376.377954][T10671] ? trace_contention_end+0x39/0x120 [ 376.377989][T10671] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 376.378008][T10671] ? snd_pcm_oss_make_ready+0xc0/0x340 [ 376.378043][T10671] ? irqentry_exit+0x74/0x90 [ 376.378063][T10671] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.378087][T10671] ? irqentry_exit+0x74/0x90 [ 376.378110][T10671] snd_pcm_oss_make_ready+0x11b/0x340 [ 376.378134][T10671] snd_pcm_oss_set_trigger+0x6a/0x740 [ 376.378160][T10671] snd_pcm_oss_ioctl+0xbb3/0xdd0 [ 376.378179][T10671] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 376.378196][T10671] __se_sys_ioctl+0xf9/0x170 [ 376.378215][T10671] do_syscall_64+0xfa/0x3b0 [ 376.378234][T10671] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.378253][T10671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.378267][T10671] ? clear_bhb_loop+0x60/0xb0 [ 376.378285][T10671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.378300][T10671] RIP: 0033:0x7f49b778e969 [ 376.378315][T10671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.378329][T10671] RSP: 002b:00007f49b8519038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 376.378348][T10671] RAX: ffffffffffffffda RBX: 00007f49b79b5fa0 RCX: 00007f49b778e969 [ 376.378359][T10671] RDX: 0000200000000080 RSI: 0000000040045010 RDI: 0000000000000003 [ 376.378369][T10671] RBP: 00007f49b8519090 R08: 0000000000000000 R09: 0000000000000000 [ 376.378379][T10671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.378388][T10671] R13: 0000000000000000 R14: 00007f49b79b5fa0 R15: 00007f49b7adfa28 [ 376.378414][T10671] [ 376.770780][T10675] trusted_key: encrypted_key: insufficient parameters specified [ 377.060330][T10675] bridge_slave_0: invalid flags given to default FDB implementation [ 377.143530][ T9] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 377.373809][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 377.385159][ T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 377.393360][ T9] usb 1-1: config 0 has no interface number 0 [ 377.403894][ T9] usb 1-1: config 0 interface 184 has no altsetting 0 [ 377.424427][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 377.437052][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.445326][ T9] usb 1-1: Product: syz [ 377.454088][ T9] usb 1-1: Manufacturer: syz [ 377.458710][ T9] usb 1-1: SerialNumber: syz [ 377.473204][ T9] usb 1-1: config 0 descriptor?? [ 377.490610][ T9] smsc75xx v1.0.0 [ 377.494493][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 377.505462][ T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 378.376580][T10685] binder: 10676:10685 ioctl c0306201 200000000100 returned -11 [ 378.620700][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.627201][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.561578][T10716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1448'. [ 379.612595][T10716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1448'. [ 379.625803][T10716] tc_dump_action: action bad kind [ 379.939268][ T9] usb 1-1: USB disconnect, device number 77 [ 380.204141][T10729] kvm: kvm [10726]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 380.300210][T10734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1451'. [ 381.353972][T10743] input: syz1 as /devices/virtual/input/input32 [ 381.420781][T10744] ================================================================== [ 381.428892][T10744] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 381.437502][T10744] Write of size 1440 at addr ffffc900046d7da0 by task vivid-000-vid-c/10744 [ 381.446180][T10744] [ 381.448510][T10744] CPU: 0 UID: 0 PID: 10744 Comm: vivid-000-vid-c Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 381.448531][T10744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 381.448542][T10744] Call Trace: [ 381.448550][T10744] [ 381.448557][T10744] dump_stack_lvl+0x189/0x250 [ 381.448584][T10744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.448606][T10744] ? __pfx__printk+0x10/0x10 [ 381.448622][T10744] ? __pfx__printk+0x10/0x10 [ 381.448636][T10744] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 381.448657][T10744] ? __virt_addr_valid+0xdc/0x5c0 [ 381.448673][T10744] print_report+0xd2/0x2b0 [ 381.448692][T10744] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 381.448713][T10744] kasan_report+0x118/0x150 [ 381.448733][T10744] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 381.448757][T10744] kasan_check_range+0x2b0/0x2c0 [ 381.448775][T10744] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 381.448797][T10744] __asan_memcpy+0x40/0x70 [ 381.448812][T10744] tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 381.448862][T10744] vivid_thread_vid_cap_tick+0xfff/0x5fe0 [ 381.448882][T10744] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 381.448915][T10744] ? ktime_get+0x3e/0x1f0 [ 381.448939][T10744] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 381.448966][T10744] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.448991][T10744] vivid_thread_vid_cap+0x8d8/0x10d0 [ 381.449020][T10744] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 381.449040][T10744] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 381.449060][T10744] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 381.449083][T10744] ? __kthread_parkme+0x7b/0x200 [ 381.449105][T10744] ? __kthread_parkme+0x1a1/0x200 [ 381.449129][T10744] kthread+0x70e/0x8a0 [ 381.449146][T10744] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 381.449164][T10744] ? __pfx_kthread+0x10/0x10 [ 381.449180][T10744] ? _raw_spin_unlock_irq+0x23/0x50 [ 381.449199][T10744] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.449218][T10744] ? __pfx_kthread+0x10/0x10 [ 381.449234][T10744] ret_from_fork+0x3fc/0x770 [ 381.449254][T10744] ? __pfx_ret_from_fork+0x10/0x10 [ 381.449275][T10744] ? __switch_to_asm+0x39/0x70 [ 381.449290][T10744] ? __switch_to_asm+0x33/0x70 [ 381.449304][T10744] ? __pfx_kthread+0x10/0x10 [ 381.449320][T10744] ret_from_fork_asm+0x1a/0x30 [ 381.449341][T10744] [ 381.449348][T10744] [ 381.670008][T10744] The buggy address belongs to the virtual mapping at [ 381.670008][T10744] [ffffc900046c1000, ffffc900046d9000) created by: [ 381.670008][T10744] vb2_vmalloc_alloc+0xef/0x340 [ 381.687879][T10744] [ 381.690190][T10744] The buggy address belongs to the physical page: [ 381.696581][T10744] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888030818000 pfn:0x30818 [ 381.706629][T10744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 381.713725][T10744] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 381.722292][T10744] raw: ffff888030818000 0000000000000000 00000001ffffffff 0000000000000000 [ 381.730854][T10744] page dumped because: kasan: bad access detected [ 381.737262][T10744] page_owner tracks the page as allocated [ 381.742957][T10744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 10743, tgid 10742 (syz.4.1453), ts 381374527432, free_ts 380525447809 [ 381.762302][T10744] post_alloc_hook+0x240/0x2a0 [ 381.767057][T10744] get_page_from_freelist+0x21ce/0x22b0 [ 381.772591][T10744] __alloc_frozen_pages_noprof+0x181/0x370 [ 381.778383][T10744] alloc_pages_mpol+0x232/0x4a0 [ 381.783216][T10744] alloc_pages_noprof+0xa9/0x190 [ 381.788138][T10744] __vmalloc_node_range_noprof+0x97d/0x1340 [ 381.794018][T10744] vmalloc_user_noprof+0xad/0xf0 [ 381.798941][T10744] vb2_vmalloc_alloc+0xef/0x340 [ 381.803785][T10744] __vb2_queue_alloc+0x9c2/0x15a0 [ 381.808809][T10744] vb2_core_reqbufs+0xc31/0x1420 [ 381.813739][T10744] __vb2_init_fileio+0x318/0xff0 [ 381.818665][T10744] __vb2_perform_fileio+0x284/0x1600 [ 381.823942][T10744] vb2_fop_read+0x273/0x360 [ 381.828438][T10744] v4l2_read+0x19c/0x2c0 [ 381.832672][T10744] vfs_read+0x1fd/0x980 [ 381.836815][T10744] __x64_sys_pread64+0x193/0x220 [ 381.841741][T10744] page last free pid 10729 tgid 10726 stack trace: [ 381.848226][T10744] __free_frozen_pages+0xc68/0xe50 [ 381.853327][T10744] rcu_core+0xca5/0x1710 [ 381.857558][T10744] handle_softirqs+0x283/0x870 [ 381.862313][T10744] __irq_exit_rcu+0xca/0x1f0 [ 381.866894][T10744] irq_exit_rcu+0x9/0x30 [ 381.871122][T10744] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 381.876754][T10744] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 381.882726][T10744] [ 381.885034][T10744] Memory state around the buggy address: [ 381.890646][T10744] ffffc900046d7f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 381.898690][T10744] ffffc900046d7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 381.906735][T10744] >ffffc900046d8000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 381.914779][T10744] ^ [ 381.918827][T10744] ffffc900046d8080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 381.926891][T10744] ffffc900046d8100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 381.934947][T10744] ================================================================== [ 382.130988][T10744] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 382.138226][T10744] CPU: 0 UID: 0 PID: 10744 Comm: vivid-000-vid-c Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 382.150387][T10744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 382.160457][T10744] Call Trace: [ 382.163737][T10744] [ 382.166654][T10744] dump_stack_lvl+0x99/0x250 [ 382.171243][T10744] ? __asan_memcpy+0x40/0x70 [ 382.175837][T10744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.181033][T10744] ? __pfx__printk+0x10/0x10 [ 382.185614][T10744] panic+0x2db/0x790 [ 382.189503][T10744] ? __pfx_panic+0x10/0x10 [ 382.193913][T10744] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 382.199794][T10744] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 382.206107][T10744] ? print_memory_metadata+0x314/0x400 [ 382.211556][T10744] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 382.217181][T10744] check_panic_on_warn+0x89/0xb0 [ 382.222107][T10744] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 382.227730][T10744] end_report+0x78/0x160 [ 382.231960][T10744] kasan_report+0x129/0x150 [ 382.236450][T10744] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 382.242076][T10744] kasan_check_range+0x2b0/0x2c0 [ 382.247002][T10744] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 382.252624][T10744] __asan_memcpy+0x40/0x70 [ 382.257029][T10744] tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 382.262506][T10744] vivid_thread_vid_cap_tick+0xfff/0x5fe0 [ 382.268223][T10744] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 382.273594][T10744] ? ktime_get+0x3e/0x1f0 [ 382.277917][T10744] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 382.284068][T10744] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.289261][T10744] vivid_thread_vid_cap+0x8d8/0x10d0 [ 382.294556][T10744] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 382.300264][T10744] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 382.306155][T10744] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 382.312479][T10744] ? __kthread_parkme+0x7b/0x200 [ 382.317417][T10744] ? __kthread_parkme+0x1a1/0x200 [ 382.322434][T10744] kthread+0x70e/0x8a0 [ 382.326492][T10744] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 382.332208][T10744] ? __pfx_kthread+0x10/0x10 [ 382.336787][T10744] ? _raw_spin_unlock_irq+0x23/0x50 [ 382.341975][T10744] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.347165][T10744] ? __pfx_kthread+0x10/0x10 [ 382.351741][T10744] ret_from_fork+0x3fc/0x770 [ 382.356323][T10744] ? __pfx_ret_from_fork+0x10/0x10 [ 382.361424][T10744] ? __switch_to_asm+0x39/0x70 [ 382.366196][T10744] ? __switch_to_asm+0x33/0x70 [ 382.370948][T10744] ? __pfx_kthread+0x10/0x10 [ 382.375529][T10744] ret_from_fork_asm+0x1a/0x30 [ 382.380285][T10744] [ 382.383548][T10744] Kernel Offset: disabled [ 382.387856][T10744] Rebooting in 86400 seconds..