last executing test programs: 10.288075632s ago: executing program 2 (id=532): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_emit_ethernet(0x8a, &(0x7f0000000300)={@random="195df410dc24", @random="000600", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "aac4e0", 0x54, 0x2c, 0x0, @dev, @local, {[@routing={0x2b}, @routing={0x4, 0x0, 0x2, 0x6}], {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xff}}}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x40044) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff9b, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9.955484962s ago: executing program 3 (id=534): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\b5\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xf6,\x1c\xf1\xdd\xcf]\xf9\b\x00\x00\x00\x00\x00\x00\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tP\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lx\xa9\xd0\x89\x9aA\xf6\xe7\x01)\x1fB\xe2G\x9f\x11\x1e^\x9ej\x14\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa6\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x80\x10\xefby\xd8', 0x7) prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) 9.755872112s ago: executing program 3 (id=535): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0500000000000109022400010000000009040001090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r3 = syz_usb_connect$uac1(0x0, 0x9c, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x8, 0x30, 0xe, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xc}, [@extension_unit={0x8, 0x24, 0x8, 0x5, 0x3, 0x10, '.'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x8, 0x6, "53ef06d2dc65"}]}, {{0x9, 0x5, 0x1, 0x9, 0x240, 0x1, 0x0, 0x9, {0x7, 0x25, 0x1, 0x80, 0x7, 0x7f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x80, 0x2, 0x3, 0xf0, "d55d087f0b"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x3, 0xfb, 0x7, {0x7, 0x25, 0x1, 0x83, 0x1, 0x7}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x6, 0x9, 0x9, 0x8, 0x2}, 0x34, &(0x7f0000000100)={0x5, 0xf, 0x34, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "c9d1ce6b62c13d1b5776f4e727bbfecd"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xe6, 0x8, 0x28, 0x5, 0xc}, @ssp_cap={0x10, 0x10, 0xa, 0xa4, 0x1, 0x928, 0x8800, 0x1, [0x30]}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1007}}, {0x24, &(0x7f0000000240)=@string={0x24, 0x3, "f3a67d8791ec1624c646939f76b52ca5b57608dba57f37e62ba97a4fb7ca284ae678"}}]}) syz_usb_control_io$uac1(r3, &(0x7f00000004c0)={0x14, &(0x7f00000003c0)={0x0, 0xf, 0x9c, {0x9c, 0x23, "16a2add5435eddea9d8813df82f33740f0fd9a6c6805e86dcf190728394f5658fbbd82a60d9ff0c2f21eac41205e40c21148b11dea2a9abdd0fe04e91a5633cd39c585f59fdb60d499080d680ca9881b304e3ca5a36ab60373b5448aa0d21816e873a1b94e7890b1b64dd7bd300b75207cecbaabc18f9515f62ada7ae9173b5fb9d0d25ea34f2c536aab72aa0dbd4ce00d4c83489fa2366bbfbb"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41a}}}, &(0x7f0000000780)={0x44, &(0x7f0000000500)={0x40, 0x15, 0xb7, "9cda6d01a6e1b67b396cb2ee7296c0c1478b48d29c3cbd91588fabc42f84239045273eae981c9dab976b17248579f1b9c5138881343dc12c351099a48c891d06d674b89f45b87f591fb207fbe4d36ba8fa28aa02f9dfc1ed1fdac42e64e55ad6ed9815a81c94270ab44c534c276484310fa0a9d249ecc55606092c75de3c99e13ce82d17d46ae0fedf60864daed279f28010fb4ccd67780032f9631d093ca729c985593cac5f5a52a85a6b5843964c9d1a8b13571d7afb"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000640)={0x20, 0x81, 0x1, '{'}, &(0x7f0000000680)={0x20, 0x82, 0x1, "af"}, &(0x7f00000006c0)={0x20, 0x83, 0x3, "60a9a9"}, &(0x7f0000000700)={0x20, 0x84, 0x2, '7M'}, &(0x7f0000000740)={0x20, 0x85, 0x3, "0d9f36"}}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002222000000a3618e0b67aff52807000000002b049b9190194e051a7bfa9e274a2b"], 0x0}, 0x0) 9.752325947s ago: executing program 2 (id=536): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=@newlink={0x50, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MASTER={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x7}}]}]}]}, 0x50}}, 0x24040800) r3 = epoll_create1(0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x10000001}) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xf0}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 8.559940929s ago: executing program 1 (id=538): syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000540)={0x0, 0x12, 0x37, "486048f7c2a6bd479ca5cd590dc25c1c0d17fa56bb0eccaae73dc855cb16fbbb43ad36dd06ae049581f686b3086b99a9ef86ab045466a3"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x7f}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @random="da4fde6dfc49"}, &(0x7f0000000800)={0x40, 0x17, 0x6}, &(0x7f0000000840)={0x40, 0x19, 0x2, "eeab"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x3}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000900)={0x40, 0x1e, 0x1}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x2}}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e21, 0x1, @loopback, 0x5}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4, 0x0, 0xffffffffffffffff}}}, 0x118) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000d02"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 7.792452411s ago: executing program 1 (id=539): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$kcm(0x10, 0x2, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) getpgid(r5) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x82880, 0x0) ioctl$FBIOBLANK(r7, 0x4611, 0x1) socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) 6.935198023s ago: executing program 2 (id=540): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fdinfo\x00') r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xee}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00!'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="408e0004eaffcff85aed69961b8e95648e24a9a84aa24e8ff1bf28853338cd1d4ea01e14f9bc374fe543aafe221a2cec05be9ac6104bff9339f81b462b3cb05d9eee1329a8181f7222e43e7989652592c39f2c5bd5c12140575dd2b0791f360822cd4d631aae5bd54637b55e3d05e16c439a7c7056f53c07e243fbcb200c4109bceeb507d4c5a49a9f4cc0e8b795469f3ff86084442d9d5df9cfb04bd4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x1a, 0x4, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0x1}}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="01020000000000001c0012000c000100626f6e64000000000c000200080001000599"], 0x3c}}, 0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x4048841) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800e00010069703667726574617000000028000280060003000100000014000700"/54], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xd, &(0x7f0000000340)=@raw=[@map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @exit], &(0x7f0000000440)='syzkaller\x00', 0x5a, 0x7f, &(0x7f0000000480)=""/127, 0x40f00, 0xf, '\x00', r4, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x1, 0xb, 0xfffffe00, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x0, 0x5, 0x9, 0x8}], 0x10, 0xf6, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@map, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000940)='#\xc1%,K+}#-\x00'}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00 ', @ANYRES64=r6], 0x20) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r8, 0x84, 0x7f, 0x0, 0x0) 6.835126299s ago: executing program 3 (id=541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x4, 0x0) syz_open_pts(r1, 0x42d401) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c000180080001400000000324"], 0x140}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f10"], 0x30}], 0x1}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x100, 0x2, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x2}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r8, 0x7ab, &(0x7f0000000040)={&(0x7f00000006c0)={{@local, 0x64}, {}, 0x400, "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"}, 0x418, 0x7fffffff}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x28) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000001180)={0x1000, &(0x7f0000000180)="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"}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0xffffffff, 0x4) 6.348343714s ago: executing program 3 (id=542): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) lseek(0xffffffffffffffff, 0x2, 0x4) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000)=0x8010, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000240)={0x2, 0x3ff, 0x2}) 6.208371354s ago: executing program 1 (id=545): r0 = socket$rxrpc(0x21, 0x2, 0x2) semget$private(0x0, 0x4, 0x240) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x102, 0x2, 0x1c, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000000}}, 0x24) 5.992028509s ago: executing program 0 (id=546): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000580)=0x10) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x80, 0x8, 0x2, 0xb6f, {{0xc, 0x4, 0x0, 0x3a, 0x30, 0x68, 0x0, 0x3, 0x29, 0x0, @loopback, @multicast1, {[@lsrr={0x83, 0xb, 0x10, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @end, @timestamp_addr={0x44, 0xc, 0x3e, 0x1, 0x7, [{@multicast1, 0x2}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffff, 0x5}, {0xffe0, 0x6}, {0x6}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x240080d1) 5.911964733s ago: executing program 1 (id=548): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, {0x0, 0x0, 0x81, 0xfffffffffffffff9}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x32}, 0xa, @in, 0x0, 0x4}}, 0xe8) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800e00010069703665727370616e0000001400028006000200300000000800040012"], 0x48}}, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000240)=0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, r3, &(0x7f00000002c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)='9', 0x2000}], 0x9) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) 5.700077527s ago: executing program 0 (id=549): syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000540)={0x0, 0x12, 0x37, "486048f7c2a6bd479ca5cd590dc25c1c0d17fa56bb0eccaae73dc855cb16fbbb43ad36dd06ae049581f686b3086b99a9ef86ab045466a3"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x7f}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @random="da4fde6dfc49"}, &(0x7f0000000800)={0x40, 0x17, 0x6}, &(0x7f0000000840)={0x40, 0x19, 0x2, "eeab"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x3}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000900)={0x40, 0x1e, 0x1}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x2}}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e21, 0x1, @loopback, 0x5}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4, 0x0, 0xffffffffffffffff}}}, 0x118) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000d02"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 5.502175234s ago: executing program 3 (id=550): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f00000000c0), 0x400004f, 0x20000009) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000200)=@filename='./file0\x00', 0x0, &(0x7f0000000440)={0x5, 0x2, 0x1, 0x2}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r3 = creat(0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r4, &(0x7f0000001800)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000040)}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="829cea2b382a14f1fa8e341eac12de192fc460fb0d893d287d627aa72efadf309d11543d1aaaf96bc0dfaa7c9b9ad158a3c85314adff5c94d1d599c91b2fc342a772cd7ede8a6c24a20cf437b64d462c8aa4bcc88e2c097563cabe867642a225f458460d07fc537f1b24ccb45a6910c95b25326627db188f0967ae076abfe9ad4b9ab033af723e44ed7469b5e8d42ca538e2ddc16c296bb49ee949c7d031b9ffd5145494a23b8e77ff7ed3d3b55ad802fc3521867b2ef9c31986ed195f1630e339d711b74450b254bb2353c54f07b966b666c3119f3310760a95483d5be2f1c30c942f54279386ce5d15411fa7d7c49ed8938a45", 0xf4}, {&(0x7f00000000c0)="4a98798d7db994838fc037621f688b0df8d1ef7485561d7125538cbea5014ae5b0bd4b", 0x23}, {&(0x7f0000001640)="8a850f5b559e215acb46341fdac16e6756a5144d0a53b977370b51d4c52282cfc4434db490b882d4447b5ea5bd061bede4ae7f8a6d02b01350bc1141c943a6f6c7b8176a2cd70e1f6ce07185d46da97210201705de6e11033331572823fefc55ad31f16844ddbbb00f19d421f162a6113b5a2a352213fee27de43f7a3f88e94c45105d4c2803105c22c3015d912f86b6f3f45001919447656cc148744c2b4487b0bec9979536d34ef6a80a3dc747f7a563eb5ea065623b5a39a3d40030909559bb073ca2f611504d9c21aa85a20c67592e27e928a76bf1c7d53c4d883aa5bdcf958c7f1ae70f5ce9ef077e51", 0xec}, {&(0x7f0000000240)="07a8ab2c3eb41b96326cfe03d692d9b12292c031f95b8dc35378ed916d4e6791effee15f0ecc0083ef8b", 0x2a}, {&(0x7f00000002c0)="15df7031c0f00ab9d286df7787085b0b767af15ebb4f761622269a58ff1cd586fa9adbf485d9311c74983bdb2741b6a076e8efb8d4e0e7dbcb27e4975c945dd3ff7b9ca45241be28591c88bcfc9ff137d39f", 0x52}], 0x6, &(0x7f0000001740)=[@ip_retopts={{0x30, 0x0, 0x7, {[@generic={0x82, 0x9, "a9babb7ed6d57d"}, @rr={0x7, 0x7, 0x11, [@multicast2]}, @rr={0x7, 0xf, 0xee, [@broadcast, @empty, @remote]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9b2a000}}], 0x98}}], 0x2, 0x20004800) recvfrom$inet(r4, &(0x7f0000000100)=""/51, 0x33, 0x30142, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x7) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4004) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) utimensat(r0, 0x0, 0x0, 0x100) syz_io_uring_setup(0x2e71, &(0x7f0000000380)={0x0, 0x9fc5, 0x0, 0x0, 0xffffffff, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'dvmrp0\x00'}) 5.016298149s ago: executing program 0 (id=551): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="103f162ca4e005ccf436b824c3c052d2012908f78ae85361f3146f55c6c95c8ef4160ed445d68b3b6786c549dc0f6f832c3175920bbfd46396c769d31fb665ea9148ff8931491f0f019760209501babb6c237ca0dd406da116ad825eff9e304a59f8", @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYBLOB="7ae1cd9b70a3d0121afa92a6973fc538c8585aef159e1a4b1c0f4719ba338b3f758642a9ddecdc90d2e94dc7b832ede0dc6005573e250081", @ANYRES64], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000300)={0x40, 0xf, 0x1, "9c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x18, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x10, &(0x7f0000000140)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.96218952s ago: executing program 1 (id=552): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x40) ftruncate(r2, 0x200004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r8, r9, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1, 0x0, 0x18}, 0x0) sendmsg$sock(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000340)}, 0x8d2) r12 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r12, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r12, r6) syz_usb_connect(0x0, 0x3d, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3], 0x2c}}, 0x80) 4.877112286s ago: executing program 2 (id=553): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000700)={0x0, 0x6, 0x1, '|'}, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600020906ffffffffffffffff03003e0000000000000100000000000040000000000000009a010000000000000000000000003800030000000100000051e574640900000087000000000000000e0000000000000000000000000000800500000000000000bf04000000000000ffffffffffffffff0700000003000000ff03000000000000030000000000000005000000000000000500000000000000000000000000001004000000000000"], 0xe8) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) close(r1) openat$cgroup_ro(r1, &(0x7f0000000100)='devices.list\x00', 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r6, 0x83625fc5352ba305}, 0x14}}, 0x4) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x78d, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) (fail_nth: 17) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340), 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206030400000000000000000200000013000300686173683a6e65742c69666163650000050001000700000005000500020000000900020073797a30000000000500"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x20040800) syz_emit_ethernet(0x46, &(0x7f0000000780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@hopopts={0x2c, 0x0, '\x00', [@generic={0xff, 0x2, "00b7"}]}]}}}}}, 0x0) sendmsg$IPSET_CMD_SWAP(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x10) 3.984093439s ago: executing program 2 (id=554): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000240)=0x7fff, 0x4) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(r1, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x1000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) io_setup(0x8, &(0x7f00000001c0)=0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) io_submit(r4, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000300)="87992d800d80", 0x6, 0x4}]) r6 = syz_open_dev$usbmon(&(0x7f0000000380), 0x7, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x2c001) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) fallocate(r8, 0x1, 0x4, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000100)=ANY=[@ANYRESDEC=r6]) 3.663124038s ago: executing program 4 (id=555): socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x4}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x80002, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ff1f00000000000002000000140001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 3.450007662s ago: executing program 4 (id=556): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000802000000180000660000000800", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x178}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 3.020298061s ago: executing program 4 (id=557): r0 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x1c, 0x1, 0xec, 0x5, 0x0}) 2.959447533s ago: executing program 4 (id=558): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x178}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r1) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) 2.897552747s ago: executing program 2 (id=559): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0xfffffffffffffe00]}, 0x8, 0xc0800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000040)={0x2, 0x0, 0x1}, 0xc) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xe9) syz_emit_ethernet(0x7e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000070000000000001907864010100ac1414aa0b009078032c00004500000000000000006c000000000000ac1414aa863600000000000d5e000000ff0000000000000512057ebbeb7864328703a813eb09de539100119606053d0006ff00800000b61af93a830700ac1414000000003a423e6d89ef33bc2e29e2c294bd54a294c57343b9334c313e7594b5105f069d9426963004303335d046d2bc0372445d8370bdf66c773283e8a7d0d393ccdfe6980572ad630d"], 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000540)=ANY=[@ANYBLOB="9a666551a610c61fff65c74831ec841ec4cb2c5622987e06b8c958255ab252645553f9202164cdbe6d601f576d96aba012173609802ea80d5dc37bc3e207f81915269a779d51791d18507a3e2ffe4d04b9290a5c233978d61a03af2a1a69bd3e05a75e07e8b2a7b4bf84a75a5866753867f7e0fd340f399fe484283c1836da650936f8fe49439e87e619d8f0ae6cdbbf4b36f4a0be620c4d4167f17fcf6deca8af6d9289c0502cfa41b0ca170855d11b0922363ac9917750b3232df210e31d7b29a096cba707152f0eded8033327fbcc9368"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000640)={0xa, @vbi={0x5, 0xffffffff, 0x40, 0x20323159, [0xfffffff9, 0x2], [0xffffffff, 0x7fff], 0x1}}) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '/dev/bus/usb/00#/00\\\x00', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) mmap(&(0x7f000002f000/0x1000)=nil, 0x1000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f0000000500)=[&(0x7f0000454000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000000), 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c80140001"], 0x98}}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x58, 0x0, 0x6, 0x0, &(0x7f00000002c0)="f722cb41346e4799f4316950fb766fecc6406339a9493f8a7026690f6e1e0bf78a44ded2bb9d01fc6e0c2b3e05ca2a4ad24d89b9f0fdf41322ce6ba0343d0d384e3c21b9c045ce63cee5f87e67bdcc33477599a3041da57fcae3c01d34ab9ab73e7f45ebe462b8f6db9d8f28e0384dc378896018da52f56972218ef3bd921aa8f5d7eab3d0a13b8b03eb82974a0dfd51efb02e124f6f6932ae73399401cf39f3302769ed7a300a0d8b31e78af503d329878dc49710f800dbea51cd5db1233f9b20df4000fd1f659a3788b3cc0462", 0x7fffffff, 0x0, 0x1, {0x1}}) write(r5, &(0x7f0000000240)="9c1467cbfb06d55d1e8106345a6d34a6482be6a4d5b751b0171a37e58e8007a5f5140629a669", 0x26) 2.731922971s ago: executing program 4 (id=560): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x104, @multicast2}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000001c0)={0x1, 'dummy0\x00', 0xfffffffc}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x79, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080a00000000006110540000000000a600000000db200de663b687c94ad484"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', r4, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000400)=r5, 0x4) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32, @ANYBLOB="98288f078e4b894d0927ddda11198a819957f14f6c4b5e78453c24485dbd5377495a6e8cb2b219b6b59a72a17603b9be72d561f796ac4d6ad7e55638021188f7c3b631595795147bb0b2b53a"], 0x1c}}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000145f405e04bd84be89010203010902240001000000000904ed0002ff5d810009050303000000050009058a030000000000a4d6083c86bfa9a09f7cdd1512c51cc7612b97fbc75fbb1797d83c23d802e27b465f53abf511765e2a1148ceba8ba6a730be95a29def8c62d885854f8d5f600d8d8ad8391760b42332d0d695fa444c12b22a041a819453bb98d04b78679be5e901b5321bce8fda3f7a5f12b9ee7f9e9cb7258b9d5e274d929fd446f5f55419cad4b9a3f696273cf769024be73b16cbf90aa65f135304fb154ad00547f371c76fbb6e5f081cdb9d"], 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r7) set_mempolicy(0x8000, &(0x7f0000000080)=0x8000000000000001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r8 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) utimensat(0xffffffffffffff9c, &(0x7f0000002240)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@deltclass={0x40, 0x29, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0x6, 0xc}, {0x8, 0x9}}, [@tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x1, 0xfa}}, @tclass_kind_options=@c_cake={0x9}]}, 0x40}}, 0xc0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file1\x00') 2.424854432s ago: executing program 3 (id=561): r0 = dup(0xffffffffffffffff) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000240)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = io_uring_setup(0x5a91, &(0x7f0000000140)={0x0, 0xbbae, 0x40, 0x0, 0x10}) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc, 0x0, r3}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x47f6, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000380)={&(0x7f0000000040), &(0x7f00000002c0)=""/7, 0x7}) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000140009050000000000000000020100ff", @ANYRES32=r9, @ANYBLOB="1400060006000000000000f0000000000000000008000200ac1414aa08000100ac1414aa080004007f00000108000400e0000002140003"], 0x70}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, 0x0, 0x5, 0x3) 1.956717611s ago: executing program 0 (id=562): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sync() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x5fc3, @loopback, 0x7}]}, &(0x7f0000000100)=0x10) 1.608216748s ago: executing program 0 (id=563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000fe6000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="de6a84400f005f00440f20c0350a000000440f22c0c442c9a73b33aa00400000460f00d40f01df0f20d835080000000f22d80f0164120066b804000f00d8", 0x3e}], 0x1, 0x63, &(0x7f00000001c0)=[@cr4={0x1, 0x200900}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.204651332s ago: executing program 0 (id=564): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4000010001ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x19, 0x1, 0x1, "3a8e07ca5de21f0077ab7a4d8601acc620004b5c000000000000002100", 0x3231564e}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_emit_ethernet(0x447, &(0x7f0000000600)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, "07fbb9", 0x40d, 0x3a, 0x1, @private0, @dev={0xfe, 0x80, '\x00', 0x13}, {[@fragment={0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x66}, @routing={0x0, 0x6, 0x1, 0x4, 0x0, [@remote, @dev={0xfe, 0x80, '\x00', 0x33}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}]}, @hopopts={0x3b, 0xe, '\x00', [@ra={0x5, 0x2, 0x6}, @pad1, @jumbo={0xc2, 0x4, 0xfd65}, @hao={0xc9, 0x10, @loopback}, @generic={0x4, 0x51, "6c2015fb6d7651cc55edfc12f89b3a3884d0ea85e740c24f73bde0b159b4c3ecba3e31dd3940034d0e21b8e0e47c14c13fc6672627fe2150f4159fb297035b7e236fa99f627fe1c74b5eea2704243d6e52"}]}, @srh={0x62, 0xe, 0x4, 0x7, 0x4, 0x28, 0x5, [@remote, @remote, @dev={0xfe, 0x80, '\x00', 0x1f}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1]}, @dstopts={0x29, 0xc, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x439164b7}, @calipso={0x7, 0x10, {0x2, 0x2, 0xb9, 0xffff, [0x8000000000000000]}}, @ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x20, {0x1, 0x6, 0x6, 0x0, [0xf, 0x1, 0x0]}}, @hao={0xc9, 0x10, @private2}, @enc_lim, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x6c, 0x22, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @generic={0xc0, 0x5b, "5def1e3065a2aace924c037ac78fdc8c051a7ef5e585579ac3af73a4ee1485bd95ad2f4ec6d6308de0ce95f89baa5b150c15be60d67b88622dab9aba31c90b7ad2ae5dbf7395ee302fa278c8322440b83be58c2abbb3ccb3f0a46a"}, @calipso={0x7, 0x50, {0x0, 0x12, 0x8, 0x1, [0x81, 0x2, 0x9, 0x3, 0x861, 0x0, 0x8, 0x9, 0x0]}}, @enc_lim={0x4, 0x1, 0x3}, @pad1, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x2, [0x7, 0x3, 0xa5ab]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, @fragment={0x2b, 0x0, 0x6, 0x0, 0x0, 0x2, 0x67}, @dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}, @srh={0x0, 0x6, 0x4, 0x3, 0x2, 0x0, 0x1000, [@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1]}, @fragment={0x3a, 0x0, 0x6, 0x0, 0x0, 0x1d, 0x66}], @echo_request={0x80, 0x0, 0x0, 0xffff, 0x7, "452f0daadf66da774a4e961300668e6cc8e38ab399cbafb69e3f5d47279b5ad16c302869b472634e1a640308aea26cdb156890a0abe39c3b41d9ada524f7ec7aa4959d0c9975c32386fdf54a2fa55ae978f70a44a2ab5471c94c52096cfda14a8eecc9d179add1626d88477f765228e5249e89e597c7e70239e8f57db441fcfcb1c81a910957b53590632c33003aa4d8825ce910d48abbd2ee9063716d20f12c785ba479795bf0cb5c43f68c4190825efb426a98ca429b71d4f829e2090ff3f47b06c3f04e80d8f3c67ab0b8d29f0b6ba986bd7b3097351023972c5ca53bb7fd63c5a44743"}}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xb17, 0x50f, 0x6d, 0x5e9]}) r3 = fcntl$dupfd(r2, 0x406, r2) r4 = syz_usb_connect$cdc_ecm(0x0, 0x134, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x122, 0x1, 0x1, 0x2, 0xc0, 0x3, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x0, "90"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xfffc, 0x5, 0x10}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x1}, @mdlm_detail={0xca, 0x24, 0x13, 0x1, "cbb14e011585fc22c9ec06b6b40a8b9ebdee371a988748da25bba7f1884330b203288faab9b8dc835d8924147ebb49161e18245119b56783c3e07b71e0fa6304e328febd05b3862deadbe0b9a4bc1999fa34e0938783f0783b9c5ad48f3d07f660ab0b35f398f0c658356f3e6cfdc3f64846282b63ef9bbe0e7584ace4ee194217fd738c798064ed4f766ecf9f41b7e24148e46d9c0608470abf8ecba5bfbcfb2facb23c39cda990efc453f0eedeeea14eb2ac152537a5083941e03effbffad738717de36949"}, @mbim={0xc, 0x24, 0x1b, 0x1b06, 0x7, 0xf8, 0x9, 0x9, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0x6, 0x10}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x5, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x4, 0x2, 0xf2}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x5, 0x3, 0x80, 0x40}, 0x20, &(0x7f00000002c0)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x3, 0xffff}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "d8b915e46d014dc6582cc21fa0796380"}]}, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3801}}, {0xa, &(0x7f0000000340)=@string={0xa, 0x3, "9baff34f38d9c886"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x422}}, {0x2b, &(0x7f00000003c0)=@string={0x2b, 0x3, "dc18fb4b27f167078044553ccf4e619619f26fb5e0544f1722c48477a1f49fef3ceb18a06b64afa0fe"}}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00', @ANYBLOB="4000ba"], 0x68}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) move_mount(r3, &(0x7f0000000a80)='./file0\x00', r3, &(0x7f0000000ac0)='./file0\x00', 0x217) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x9a, &(0x7f0000000c00)=""/154) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000540)={0x14, &(0x7f00000004c0)={0x0, 0x21, 0x12, {0x12, 0x0, "24db3d89baddb3aaecddb97f18b0184a"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000bc0)={0x1c, &(0x7f0000000cc0)=ANY=[@ANYBLOB="200dd9000000232464c8732e6299c5b9297ae04edfbae663e25fdea45cfa553a2f76fb26f19e9ebf791729d6940018a1bca2c4c6b516576bb0d271818b8ae39cf00ec9b30c96816072d8228eaa4e4f1da8d9bb0adf5de01e926db4466ad9ad2e95fff396a14b710013f8c2eef840eb4f2ba8cb2fd52e801cbb4d47539d0f5948293dc7bb9107263a806b9fb11db0cf398005a6a73bd14f71405dbf93bcf4b7e06ff3d2a3a1f32b56f18ad39bf364c9a4f6e5c512685d2be23b8e291c1404c2f1f1e3e1fb234ae5f61b8ead2e301c88f31eafb2eca49673dcd393d334c18c5a7adebf2a6c107dedf1079aff20d175"], &(0x7f0000000580)={0x0, 0xa, 0x1}, &(0x7f0000000b80)={0x0, 0x8, 0x1}}) setsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000b00)={@local, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x18}}, 0xc) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 852.045187ms ago: executing program 1 (id=565): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x37b2, 0x1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r7, &(0x7f0000000040)={0x1d, r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r10, {0x1}, {0x9}, {0x1, 0x6}}}, 0x24}}, 0x40044) sendmsg$can_bcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x4, 0x8, 0x8, {}, {}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x2, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "fe02fa38d567cdb1"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x200000c6) r11 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r12, &(0x7f0000000240)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xfffffe00, @private0, 0x7}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000002200)='\"', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000300)="bda47421aa", 0x5}], 0x1}}], 0x2, 0xd8) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a09058103"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xe, 0x0) 0s ago: executing program 4 (id=566): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@const={0x5}]}, {0x0, [0x2e, 0x5f, 0xdc5bf1ee1ceccd70, 0x61]}}, &(0x7f0000000380)=""/44, 0x2a, 0x2c, 0x0, 0x2, 0x0, @void, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7b80000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009d, 0x0, 0x9}]}) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = socket$inet(0x2, 0x1, 0x100) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) write(r5, &(0x7f0000000000)="e27379e9c6932ba9562a7f233727de5f08b3b949c804debe84704a2ddac5309eab3ffc36be5fd0d70310fa60", 0x2c) r6 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000013000), &(0x7f0000011000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0x6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x20) kernel console output (not intermixed with test programs): anufacturer: syz [ 165.610783][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.619126][ T96] usb 5-1: SerialNumber: syz [ 165.643797][ T5892] usb 4-1: config 0 descriptor?? [ 165.647723][ T96] usb 5-1: config 0 descriptor?? [ 165.677858][ T6775] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 165.748198][ T96] smsc95xx v2.0.0 [ 165.932014][ T6775] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 166.088845][ T5892] ryos 0003:1E7D:3138.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.3-1/input0 [ 166.152858][ T96] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 166.236381][ T96] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 166.273523][ T5892] usb 4-1: USB disconnect, device number 13 [ 166.281727][ T96] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 166.354996][ T96] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 166.402073][ T96] usb 5-1: USB disconnect, device number 15 [ 166.955620][ T6783] netlink: 24 bytes leftover after parsing attributes in process `syz.4.273'. [ 167.218279][ T6790] tipc: Started in network mode [ 167.230049][ T6790] tipc: Node identity ffffff7f0000000009, cluster identity 4711 [ 167.431716][ T5892] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 167.686121][ T5892] usb 5-1: device descriptor read/64, error -71 [ 167.855970][ T5893] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 167.935975][ T5892] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 168.027455][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 168.115957][ T5892] usb 5-1: device descriptor read/64, error -71 [ 168.123603][ T5893] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 168.132924][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.143001][ T5893] usb 4-1: Product: syz [ 168.165145][ T5893] usb 4-1: Manufacturer: syz [ 168.176097][ T5893] usb 4-1: SerialNumber: syz [ 168.197118][ T5893] usb 4-1: config 0 descriptor?? [ 168.265468][ T5892] usb usb5-port1: attempt power cycle [ 168.484938][ T5893] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 168.625944][ T5892] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 168.660340][ T5892] usb 5-1: device descriptor read/8, error -71 [ 168.906710][ T5892] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 168.950856][ T5892] usb 5-1: device descriptor read/8, error -71 [ 169.028658][ T6803] netlink: 'syz.2.279': attribute type 7 has an invalid length. [ 169.099624][ T5892] usb usb5-port1: unable to enumerate USB device [ 169.125969][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 169.325200][ T5892] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 169.355982][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 169.365029][ T10] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 169.374861][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.421877][ T10] usb 1-1: config 0 has no interface number 0 [ 169.440422][ T10] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 169.450684][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.464053][ T10] usb 1-1: Product: syz [ 169.468486][ T10] usb 1-1: Manufacturer: syz [ 169.473617][ T10] usb 1-1: SerialNumber: syz [ 169.485639][ T10] usb 1-1: config 0 descriptor?? [ 169.497868][ T10] usb 1-1: Found UVC 0.00 device syz (046c:14e8) [ 169.505476][ T10] usb 1-1: No valid video chain found. [ 169.520405][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.532062][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.557127][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.579893][ T5892] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.591592][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.611407][ T5892] usb 2-1: config 0 descriptor?? [ 170.032384][ T5892] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 170.040003][ T5892] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 170.047533][ T5892] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 170.057488][ T5892] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 170.072848][ T5892] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 170.233848][ T6735] usb 2-1: USB disconnect, device number 19 [ 170.404419][ T6823] netlink: 'syz.4.287': attribute type 10 has an invalid length. [ 170.451410][ T6823] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 170.615499][ T6830] FAULT_INJECTION: forcing a failure. [ 170.615499][ T6830] name failslab, interval 1, probability 0, space 0, times 0 [ 170.628392][ T6830] CPU: 1 UID: 0 PID: 6830 Comm: syz.2.290 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 170.628416][ T6830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.628427][ T6830] Call Trace: [ 170.628435][ T6830] [ 170.628444][ T6830] dump_stack_lvl+0x241/0x360 [ 170.628468][ T6830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.628486][ T6830] ? __pfx__printk+0x10/0x10 [ 170.628501][ T6830] ? get_random_u32+0x199/0xab0 [ 170.628528][ T6830] should_fail_ex+0x424/0x570 [ 170.628545][ T6830] should_failslab+0xac/0x100 [ 170.628564][ T6830] kmem_cache_alloc_noprof+0x78/0x390 [ 170.628582][ T6830] ? sctp_get_port_local+0x796/0x1750 [ 170.628603][ T6830] sctp_get_port_local+0x796/0x1750 [ 170.628626][ T6830] ? __pfx_sctp_get_port_local+0x10/0x10 [ 170.628641][ T6830] ? sctp_bind_addr_match+0x295/0x2b0 [ 170.628662][ T6830] sctp_do_bind+0x513/0x950 [ 170.628682][ T6830] sctp_connect_new_asoc+0x2a0/0x700 [ 170.628697][ T6830] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 170.628708][ T6830] ? sctp_sendmsg+0xf30/0x3620 [ 170.628723][ T6830] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 170.628735][ T6830] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 170.628752][ T6830] sctp_sendmsg+0x2009/0x3620 [ 170.628777][ T6830] ? __pfx_sctp_sendmsg+0x10/0x10 [ 170.628791][ T6830] ? aa_sk_perm+0x96f/0xac0 [ 170.628818][ T6830] ? inet_sendmsg+0x330/0x390 [ 170.628835][ T6830] __sock_sendmsg+0x1a6/0x270 [ 170.628855][ T6830] __sys_sendto+0x365/0x4c0 [ 170.628870][ T6830] ? __pfx___sys_sendto+0x10/0x10 [ 170.628897][ T6830] ? __fget_files+0x2a/0x420 [ 170.628915][ T6830] ? ksys_write+0x275/0x2d0 [ 170.628936][ T6830] __x64_sys_sendto+0xde/0x100 [ 170.628950][ T6830] do_syscall_64+0xf3/0x230 [ 170.628967][ T6830] ? clear_bhb_loop+0x45/0xa0 [ 170.628982][ T6830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.628995][ T6830] RIP: 0033:0x7ff3a318e169 [ 170.629006][ T6830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.629017][ T6830] RSP: 002b:00007ff3a4047038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 170.629030][ T6830] RAX: ffffffffffffffda RBX: 00007ff3a33b5fa0 RCX: 00007ff3a318e169 [ 170.629039][ T6830] RDX: 0000000000004164 RSI: 0000200000000500 RDI: 0000000000000006 [ 170.629048][ T6830] RBP: 00007ff3a4047090 R08: 0000200000000000 R09: 0000000000000010 [ 170.629056][ T6830] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 170.629063][ T6830] R13: 0000000000000000 R14: 00007ff3a33b5fa0 R15: 00007ff3a34dfa28 [ 170.629082][ T6830] [ 171.035868][ T10] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 171.166321][ T5893] usb write operation failed. (-71) [ 171.177724][ T5893] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 171.189580][ T5893] dvbdev: DVB: registering new adapter (Terratec H7) [ 171.196428][ T5893] usb 4-1: media controller created [ 171.203324][ T5893] usb read operation failed. (-71) [ 171.208975][ T5893] usb write operation failed. (-71) [ 171.221748][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.238130][ T10] usb 5-1: config 0 has no interfaces? [ 171.253203][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 171.265608][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.338299][ T5893] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 171.349687][ T10] usb 5-1: config 0 descriptor?? [ 171.386191][ T5893] usb 4-1: USB disconnect, device number 14 [ 171.573002][ T48] usb 5-1: USB disconnect, device number 20 [ 171.822389][ T6849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.295'. [ 171.915835][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 171.916841][ T6735] usb 1-1: USB disconnect, device number 15 [ 172.125956][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 172.159107][ T10] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.222389][ T10] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.316146][ T10] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 172.374970][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 172.417077][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 172.430408][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.452347][ T10] usb 3-1: config 0 descriptor?? [ 172.582777][ T6858] netlink: 'syz.4.300': attribute type 10 has an invalid length. [ 172.896642][ T6847] netlink: 9 bytes leftover after parsing attributes in process `syz.2.296'. [ 172.957280][ T6862] netlink: 5 bytes leftover after parsing attributes in process `syz.2.296'. [ 172.986289][ T6847] gretap0: entered promiscuous mode [ 173.013359][ T6863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.033071][ T6865] netlink: 72 bytes leftover after parsing attributes in process `syz.1.302'. [ 173.119988][ T6863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.165548][ T6863] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 173.235039][ T6862] 0猉功D: renamed from gretap0 [ 173.246012][ T6735] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 173.294339][ T6862] 0猉功D: left promiscuous mode [ 173.298623][ T10] hid-generic 0003:045E:05DA.000A: unknown main item tag 0x0 [ 173.311517][ T6862] 0猉功D: entered allmulticast mode [ 173.333663][ T6862] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 173.348424][ T10] hid-generic 0003:045E:05DA.000A: unknown main item tag 0x0 [ 173.375375][ T10] hid-generic 0003:045E:05DA.000A: unknown main item tag 0x0 [ 173.406859][ T10] hid-generic 0003:045E:05DA.000A: ignoring exceeding usage max [ 173.453957][ T10] hid-generic 0003:045E:05DA.000A: ignoring exceeding usage max [ 173.474963][ T6735] usb 5-1: Using ep0 maxpacket: 32 [ 173.491362][ T10] hid-generic 0003:045E:05DA.000A: unknown main item tag 0x0 [ 173.501817][ T6735] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 173.519803][ T10] hid-generic 0003:045E:05DA.000A: unbalanced collection at end of report description [ 173.566775][ T6735] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 173.584619][ T6735] usb 5-1: can't read configurations, error -61 [ 173.616118][ T10] hid-generic 0003:045E:05DA.000A: probe with driver hid-generic failed with error -22 [ 173.689303][ T10] usb 3-1: USB disconnect, device number 17 [ 173.746017][ T6735] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 173.905872][ T6735] usb 5-1: Using ep0 maxpacket: 32 [ 173.911756][ T6735] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 173.921418][ T6735] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 173.930263][ T6735] usb 5-1: can't read configurations, error -61 [ 173.937207][ T6735] usb usb5-port1: attempt power cycle [ 173.955852][ T48] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 174.083952][ T6887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.310'. [ 174.098813][ T5893] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 174.106904][ T6887] netlink: 40 bytes leftover after parsing attributes in process `syz.2.310'. [ 174.118831][ T48] usb 2-1: config 0 has an invalid interface number: 144 but max is 0 [ 174.127608][ T48] usb 2-1: config 0 has no interface number 0 [ 174.133818][ T48] usb 2-1: too many endpoints for config 0 interface 144 altsetting 138: 68, using maximum allowed: 30 [ 174.135896][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 174.145530][ T48] usb 2-1: config 0 interface 144 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 174.167492][ T48] usb 2-1: config 0 interface 144 has no altsetting 0 [ 174.174317][ T48] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 174.185935][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.202379][ T48] usb 2-1: config 0 descriptor?? [ 174.212191][ T48] cp210x 2-1:0.144: cp210x converter detected [ 174.267833][ T5893] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.279346][ T6735] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 174.287255][ T5893] usb 1-1: config 0 has no interfaces? [ 174.293058][ T5893] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 174.303525][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.329484][ T5893] usb 1-1: config 0 descriptor?? [ 174.334938][ T6735] usb 5-1: Using ep0 maxpacket: 32 [ 174.341131][ T6735] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 174.357019][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 174.360858][ T6735] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 174.366138][ T9] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 174.380760][ T6735] usb 5-1: can't read configurations, error -61 [ 174.391826][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.402349][ T9] usb 4-1: config 0 has no interface number 0 [ 174.415277][ T9] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 174.425229][ T6878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.439188][ T6891] netlink: 'syz.2.311': attribute type 10 has an invalid length. [ 174.446331][ T6878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.449095][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.463933][ T9] usb 4-1: Product: syz [ 174.464545][ T48] cp210x 2-1:0.144: failed to get vendor val 0x370b size 1: -121 [ 174.468197][ T9] usb 4-1: Manufacturer: syz [ 174.468216][ T9] usb 4-1: SerialNumber: syz [ 174.471144][ T9] usb 4-1: config 0 descriptor?? [ 174.497083][ T9] usb 4-1: Found UVC 0.00 device syz (046c:14e8) [ 174.501903][ T48] cp210x 2-1:0.144: querying part number failed [ 174.521344][ T48] usb 2-1: cp210x converter now attached to ttyUSB0 [ 174.528003][ T9] usb 4-1: No valid video chain found. [ 174.542635][ T6735] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 174.557358][ T5893] usb 1-1: USB disconnect, device number 16 [ 174.586944][ T6735] usb 5-1: Using ep0 maxpacket: 32 [ 174.597576][ T6735] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 174.617674][ T6735] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 174.631424][ T6735] usb 5-1: can't read configurations, error -61 [ 174.643356][ T6735] usb usb5-port1: unable to enumerate USB device [ 174.670904][ T6735] usb 2-1: USB disconnect, device number 20 [ 174.683115][ T6735] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 174.691814][ T6735] cp210x 2-1:0.144: device disconnected [ 176.388869][ T9] usb 4-1: USB disconnect, device number 15 [ 176.526039][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 176.697612][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.748654][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.809199][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 176.846249][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 176.876076][ T10] usb 5-1: SerialNumber: syz [ 177.127327][ T10] usb 5-1: 0:2 : does not exist [ 177.157798][ T10] usb 5-1: unit 5 not found! [ 177.218322][ T10] usb 5-1: USB disconnect, device number 25 [ 177.497217][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.796124][ T6922] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 177.803544][ T6922] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 177.852057][ T6915] netlink: 'syz.2.320': attribute type 7 has an invalid length. [ 177.972603][ T6924] netlink: 'syz.3.322': attribute type 10 has an invalid length. [ 178.416043][ T977] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 178.587174][ T977] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.612419][ T977] usb 2-1: config 0 has no interfaces? [ 178.633087][ T977] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 178.690120][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.702648][ T977] usb 2-1: config 0 descriptor?? [ 178.736689][ T6941] netlink: 24 bytes leftover after parsing attributes in process `syz.4.330'. [ 178.918311][ T977] usb 2-1: USB disconnect, device number 21 [ 179.258137][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 179.274434][ T6950] netlink: 'syz.4.333': attribute type 10 has an invalid length. [ 179.455893][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 179.462357][ T6953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.489090][ T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 179.499862][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 179.517289][ T6953] x_tables: ip_tables: esp match: only valid for protocol 50 [ 179.534536][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 179.549693][ T6954] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 179.595581][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.652223][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 179.688935][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.706568][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.724675][ T10] usb 3-1: Product: syz [ 179.740257][ T10] usb 3-1: Manufacturer: syz [ 179.759524][ T10] usb 3-1: SerialNumber: syz [ 179.765980][ T977] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 179.938234][ T977] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 179.949005][ T977] usb 4-1: config 0 has an invalid descriptor of length 206, skipping remainder of the config [ 179.976340][ T977] usb 4-1: config 0 has no interface number 0 [ 179.985949][ T977] usb 4-1: too many endpoints for config 0 interface 52 altsetting 1: 39, using maximum allowed: 30 [ 180.027124][ T6944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.036093][ T6944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.064297][ T977] usb 4-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 39 [ 180.064355][ T6967] netlink: 'syz.0.339': attribute type 1 has an invalid length. [ 180.121680][ T977] usb 4-1: config 0 interface 52 has no altsetting 0 [ 180.156157][ T10] usb 3-1: USB disconnect, device number 18 [ 180.202072][ T977] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 180.225805][ T977] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 180.251325][ T977] usb 4-1: Product: syz [ 180.274162][ T977] usb 4-1: SerialNumber: syz [ 180.290127][ T977] usb 4-1: config 0 descriptor?? [ 180.407358][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.530542][ T977] usb 4-1: Can not set alternate setting to 1, error: -71 [ 180.544759][ T977] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -71 [ 180.578730][ T977] usb 4-1: USB disconnect, device number 16 [ 180.609221][ T6958] netlink: 'syz.1.336': attribute type 7 has an invalid length. [ 180.985609][ T6985] netlink: 'syz.1.345': attribute type 10 has an invalid length. [ 181.123005][ T6985] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 181.196199][ T48] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 181.318502][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 181.337399][ T48] usb 3-1: device descriptor read/64, error -71 [ 181.354234][ T6996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.349'. [ 181.386181][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 181.396005][ T5893] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 181.438527][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 181.558417][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 44, changing to 9 [ 181.575840][ T10] usb 4-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00 [ 181.582145][ T5893] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.584925][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.595387][ T48] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 181.625956][ T5893] usb 1-1: config 0 has no interfaces? [ 181.631091][ T10] usb 4-1: config 0 descriptor?? [ 181.632033][ T5893] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 181.654489][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.674406][ T5893] usb 1-1: config 0 descriptor?? [ 181.778118][ T48] usb 3-1: device descriptor read/64, error -71 [ 181.800208][ T7005] vivid-003: ================= START STATUS ================= [ 181.809431][ T7005] vivid-003: Radio HW Seek Mode: Bounded [ 181.815330][ T7005] vivid-003: Radio Programmable HW Seek: false [ 181.822637][ T7005] vivid-003: RDS Rx I/O Mode: Block I/O [ 181.833940][ T7005] vivid-003: Generate RBDS Instead of RDS: false [ 181.840716][ T7005] vivid-003: RDS Reception: true [ 181.850697][ T7005] vivid-003: RDS Program Type: 0 inactive [ 181.867073][ T7005] vivid-003: RDS PS Name: inactive [ 181.872433][ T7005] vivid-003: RDS Radio Text: inactive [ 181.878031][ T7005] vivid-003: RDS Traffic Announcement: false inactive [ 181.884915][ T7005] vivid-003: RDS Traffic Program: false inactive [ 181.891429][ T7005] vivid-003: RDS Music: false inactive [ 181.897052][ T7005] vivid-003: ================== END STATUS ================== [ 181.925822][ T48] usb usb3-port1: attempt power cycle [ 181.943843][ T9] usb 1-1: USB disconnect, device number 17 [ 181.986173][ T977] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 182.068668][ T10] hid (null): nested delimiters [ 182.084454][ T10] hid-generic 0003:18D1:5030.000B: nested delimiters [ 182.093973][ T10] hid-generic 0003:18D1:5030.000B: item 0 1 2 10 parsing failed [ 182.140848][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 182.146728][ T10] hid-generic 0003:18D1:5030.000B: probe with driver hid-generic failed with error -22 [ 182.161427][ T977] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 182.237820][ T977] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 182.252529][ T977] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.262789][ T977] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.275086][ T977] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 182.280538][ T5893] usb 4-1: USB disconnect, device number 17 [ 182.290849][ T977] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.290877][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.290898][ T977] usb 2-1: Product: syz [ 182.290913][ T977] usb 2-1: Manufacturer: syz [ 182.290927][ T977] usb 2-1: SerialNumber: syz [ 182.321546][ T48] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 182.471712][ T48] usb 3-1: device descriptor read/8, error -71 [ 182.679521][ T7003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.715886][ T48] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 182.717947][ T7003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.736446][ T48] usb 3-1: device descriptor read/8, error -71 [ 182.841379][ T977] usb 2-1: USB disconnect, device number 22 [ 182.867130][ T48] usb usb3-port1: unable to enumerate USB device [ 183.097891][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.555910][ T977] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 183.645938][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 183.773051][ T977] usb 1-1: config 0 has no interfaces? [ 183.798580][ T977] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 183.807960][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 183.818554][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.837422][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.856313][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.881179][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 183.896798][ T977] usb 1-1: Product: syz [ 183.913541][ T977] usb 1-1: Manufacturer: syz [ 183.935220][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.955056][ T977] usb 1-1: SerialNumber: syz [ 183.974424][ T977] usb 1-1: config 0 descriptor?? [ 183.983963][ T10] usb 5-1: config 0 descriptor?? [ 184.105848][ T48] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 184.410241][ T48] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 184.410273][ T48] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.543094][ T48] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0501, bcdDevice= 0.40 [ 184.543125][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.543147][ T48] usb 2-1: Product: syz [ 184.543173][ T48] usb 2-1: Manufacturer: syz [ 184.543188][ T48] usb 2-1: SerialNumber: syz [ 184.679885][ T7037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.359'. [ 184.765365][ T7030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.765818][ T7030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.823846][ T48] usb 2-1: cannot find UAC_HEADER [ 184.929828][ T48] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 184.966761][ T48] usb 2-1: USB disconnect, device number 23 [ 185.197081][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.375892][ T6735] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 185.605816][ T6735] usb 4-1: Using ep0 maxpacket: 32 [ 185.744467][ T6735] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.764453][ T6735] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 185.805637][ T6735] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x2 has invalid wMaxPacketSize 0 [ 185.816879][ T6735] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 185.870332][ T6735] usb 4-1: config 0 interface 0 has no altsetting 0 [ 186.023299][ T6735] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 186.139529][ T6735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.309724][ T6735] usb 4-1: config 0 descriptor?? [ 186.805481][ T6735] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 186.875069][ T6735] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 186.885962][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 186.936677][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 186.969743][ T6735] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 186.988852][ T10] usb 5-1: USB disconnect, device number 26 [ 187.007918][ T7041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.030914][ T5893] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 187.032530][ T7041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.055981][ T6735] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 187.066927][ T5914] usb 1-1: USB disconnect, device number 18 [ 187.093543][ T6735] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 187.145088][ T6735] hid-thrustmaster 0003:044F:B65D.000C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 187.198658][ T6735] hid-thrustmaster 0003:044F:B65D.000C: setup data couldn't be sent [ 187.256498][ C1] hid-thrustmaster 0003:044F:B65D.000C: URB to get model id failed with error -71 [ 187.293274][ T6735] usb 4-1: USB disconnect, device number 18 [ 187.305626][ T5893] usb 2-1: config 0 has no interfaces? [ 187.322619][ T5893] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 187.361453][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.393011][ T5893] usb 2-1: Product: syz [ 187.406099][ T5893] usb 2-1: Manufacturer: syz [ 187.421359][ T5893] usb 2-1: SerialNumber: syz [ 187.457399][ T5893] usb 2-1: config 0 descriptor?? [ 187.721360][ T7048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.731368][ T7048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.029738][ T5893] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 188.176033][ T5932] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 188.205938][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 188.215169][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 188.230302][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.241383][ T5893] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 188.297154][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 188.308105][ T5893] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 188.346352][ T5932] usb 5-1: Using ep0 maxpacket: 16 [ 188.376280][ T5893] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 188.389469][ T5932] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 188.400768][ T5932] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 188.547919][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.562342][ T5932] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 188.583151][ T5893] usb 3-1: config 0 descriptor?? [ 188.588375][ T5932] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.624225][ T5932] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 188.643883][ T5843] Bluetooth: hci5: urb ffff888059bb7e00 submission failed (90) [ 188.659312][ T5932] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 188.668594][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.690778][ T5932] usb 5-1: Product: syz [ 188.711246][ T5932] usb 5-1: Manufacturer: syz [ 188.728482][ T5932] usb 5-1: SerialNumber: syz [ 188.788692][ T5893] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 188.836162][ T48] usb 3-1: USB disconnect, device number 23 [ 188.949888][ T5893] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 188.958640][ T5893] usb 4-1: config 0 has no interface number 0 [ 188.961209][ T7058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.968453][ T5893] usb 4-1: too many endpoints for config 0 interface 168 altsetting 177: 148, using maximum allowed: 30 [ 188.978801][ T7058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.987307][ T5893] usb 4-1: config 0 interface 168 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 148 [ 188.997923][ T5892] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 189.006333][ T5893] usb 4-1: config 0 interface 168 has no altsetting 0 [ 189.032947][ T5893] usb 4-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 189.051310][ T5932] usb 5-1: USB disconnect, device number 27 [ 189.068478][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.093993][ T5893] usb 4-1: config 0 descriptor?? [ 189.167736][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.181527][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 189.202574][ T5892] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 189.212603][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.224304][ T5892] usb 1-1: config 0 descriptor?? [ 189.234589][ T5892] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 189.304575][ T5893] usb 4-1: string descriptor 0 read error: -71 [ 189.315473][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.332753][ T5893] usblcd 4-1:0.168: USBLCD model not supported. [ 189.343210][ T5893] usb 4-1: USB disconnect, device number 19 [ 189.782730][ T7081] netlink: 16 bytes leftover after parsing attributes in process `syz.2.373'. [ 190.138610][ T7090] xt_hashlimit: size too large, truncated to 1048576 [ 190.215072][ T5892] usb 2-1: USB disconnect, device number 24 [ 190.298859][ T7091] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 190.305720][ T7091] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 190.357039][ T7097] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(16) [ 190.363708][ T7097] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.390568][ T7091] vhci_hcd vhci_hcd.0: Device attached [ 190.441636][ T7097] vhci_hcd vhci_hcd.0: Device attached [ 190.469698][ T7102] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.488589][ T7103] delete_channel: no stack [ 190.553896][ T7091] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(18) [ 190.560585][ T7091] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 190.587197][ T7091] vhci_hcd vhci_hcd.0: Device attached [ 190.605975][ T6735] vhci_hcd: vhci_device speed not set [ 190.613700][ T7091] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(20) [ 190.620334][ T7091] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 190.642071][ T7091] vhci_hcd vhci_hcd.0: Device attached [ 190.647916][ T5932] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 190.687495][ T7097] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(24) [ 190.694141][ T7097] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 190.729295][ T6735] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 190.750832][ T7097] vhci_hcd vhci_hcd.0: Device attached [ 190.758608][ T7091] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.770019][ T7091] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.775908][ T5893] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 190.792783][ T7091] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.826254][ T5932] usb 4-1: Invalid ep0 maxpacket: 32 [ 190.869317][ T7106] vhci_hcd: connection closed [ 190.871513][ T7104] vhci_hcd: connection closed [ 190.872260][ T7098] vhci_hcd: connection closed [ 190.887192][ T12] vhci_hcd: stop threads [ 190.896974][ T7092] vhci_hcd: connection reset by peer [ 190.902379][ T12] vhci_hcd: release socket [ 190.908896][ T12] vhci_hcd: disconnect device [ 190.909589][ T7108] vhci_hcd: connection closed [ 190.914035][ T12] vhci_hcd: stop threads [ 190.925968][ T12] vhci_hcd: release socket [ 190.930600][ T12] vhci_hcd: disconnect device [ 190.938609][ T12] vhci_hcd: stop threads [ 190.942994][ T12] vhci_hcd: release socket [ 190.950094][ T12] vhci_hcd: disconnect device [ 190.956097][ T5893] usb 2-1: device descriptor read/64, error -71 [ 190.956866][ T12] vhci_hcd: stop threads [ 190.971541][ T12] vhci_hcd: release socket [ 190.975842][ T5932] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 190.976825][ T12] vhci_hcd: disconnect device [ 190.992280][ T12] vhci_hcd: stop threads [ 190.998352][ T12] vhci_hcd: release socket [ 191.004962][ T12] vhci_hcd: disconnect device [ 191.145951][ T5932] usb 4-1: Invalid ep0 maxpacket: 32 [ 191.153038][ T5932] usb usb4-port1: attempt power cycle [ 191.205894][ T5893] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 191.346163][ T5893] usb 2-1: device descriptor read/64, error -71 [ 191.457236][ T5893] usb usb2-port1: attempt power cycle [ 191.496396][ T5932] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 191.540544][ T5932] usb 4-1: Invalid ep0 maxpacket: 32 [ 191.676497][ T5932] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 191.696509][ T5932] usb 4-1: Invalid ep0 maxpacket: 32 [ 191.702102][ T5932] usb usb4-port1: unable to enumerate USB device [ 191.755996][ T48] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 191.771233][ T5892] usb 1-1: USB disconnect, device number 19 [ 191.815999][ T5893] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 191.836911][ T5893] usb 2-1: device descriptor read/8, error -71 [ 191.875917][ T5914] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 191.917183][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 191.923928][ T48] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 191.933084][ T48] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 191.944057][ T48] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 191.954202][ T48] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 191.966221][ T48] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 191.980730][ T48] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 191.989896][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.998036][ T48] usb 5-1: Product: syz [ 192.002220][ T48] usb 5-1: Manufacturer: syz [ 192.006928][ T48] usb 5-1: SerialNumber: syz [ 192.025868][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 192.034025][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.044998][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.056063][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 192.065837][ T5914] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 192.077131][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.092375][ T5914] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 192.096193][ T5893] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 192.103489][ T5914] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 192.118119][ T5914] usb 3-1: Manufacturer: syz [ 192.125284][ T5914] usb 3-1: config 0 descriptor?? [ 192.140000][ T5893] usb 2-1: device descriptor read/8, error -71 [ 192.155900][ T5892] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 192.221537][ T7113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.236316][ T7113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.259736][ T5893] usb usb2-port1: unable to enumerate USB device [ 192.286751][ T48] usb 5-1: USB disconnect, device number 28 [ 192.318713][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 192.328200][ T5892] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 192.339099][ T5892] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 192.355853][ T5892] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 192.376246][ T5892] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.388211][ T5892] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 192.400269][ T5892] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 192.409787][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.417943][ T5914] rc_core: IR keymap rc-hauppauge not found [ 192.423915][ T5914] Registered IR keymap rc-empty [ 192.428894][ T5892] usb 1-1: Product: syz [ 192.433080][ T5892] usb 1-1: Manufacturer: syz [ 192.438406][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.445560][ T5892] usb 1-1: SerialNumber: syz [ 192.465916][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.477059][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.489711][ T5914] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 192.515080][ T5914] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 192.535571][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.545742][ C0] mceusb 3-1:0.0: long-range (0x14) receiver active [ 192.556134][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.576052][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.595994][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.615918][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.636035][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.655976][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.658492][ T7118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.674944][ T7118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.683032][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.706562][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.726272][ T5892] usb 1-1: USB disconnect, device number 20 [ 192.747734][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.769963][ T5914] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 192.780444][ T5914] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x14 active) [ 192.820771][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 192.838693][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 192.904976][ T5914] usb 3-1: USB disconnect, device number 24 [ 192.949412][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.128082][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.387'. [ 193.245715][ T7133] xt_hashlimit: size too large, truncated to 1048576 [ 193.746475][ T7145] netlink: 36 bytes leftover after parsing attributes in process `syz.1.392'. [ 193.979526][ T7153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.391'. [ 194.229661][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.236124][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.396046][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 194.556268][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 194.582333][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 194.655882][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.731070][ T10] usb 2-1: Product: syz [ 194.758183][ T10] usb 2-1: Manufacturer: syz [ 194.762835][ T10] usb 2-1: SerialNumber: syz [ 194.871171][ T10] usb 2-1: config 0 descriptor?? [ 195.047579][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.398'. [ 195.060306][ T7192] bridge_slave_1: left allmulticast mode [ 195.066189][ T7192] bridge_slave_1: left promiscuous mode [ 195.073334][ T7192] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.136731][ T7192] bridge_slave_0: left allmulticast mode [ 195.142454][ T7192] bridge_slave_0: left promiscuous mode [ 195.163079][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 195.166318][ T7192] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.325953][ T5892] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 195.696372][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 195.704413][ T5892] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 195.726092][ T5892] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 195.754273][ T5892] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 195.779034][ T5892] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.805892][ T5892] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 195.837050][ T5892] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 195.846718][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.865983][ T5892] usb 4-1: Product: syz [ 195.877541][ T5892] usb 4-1: Manufacturer: syz [ 195.887870][ T5892] usb 4-1: SerialNumber: syz [ 195.904418][ T7201] kvm: kvm [7200]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800 [ 195.913886][ T6735] vhci_hcd: vhci_device speed not set [ 196.008404][ T5932] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 196.177334][ T7189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.194785][ T7189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.217551][ T5932] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 196.235872][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.244225][ T5932] usb 5-1: Product: syz [ 196.252399][ T5932] usb 5-1: Manufacturer: syz [ 196.259178][ T5932] usb 5-1: SerialNumber: syz [ 196.289861][ T5892] usb 4-1: USB disconnect, device number 24 [ 196.292315][ T5932] usb 5-1: config 0 descriptor?? [ 196.358229][ T5932] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 196.559291][ T7211] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 196.578483][ T6119] udevd[6119]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.659058][ T7215] xt_hashlimit: max too large, truncated to 1048576 [ 196.665985][ T48] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 196.669463][ T7215] Cannot find set identified by id 0 to match [ 196.825959][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 196.836536][ T48] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 196.850442][ T48] usb 3-1: config 0 interface 0 has no altsetting 0 [ 196.860617][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 196.868509][ T48] usb 3-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 196.881507][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.890731][ T10] usb 2-1: USB disconnect, device number 29 [ 196.914674][ T48] usb 3-1: config 0 descriptor?? [ 196.941191][ T7221] FAULT_INJECTION: forcing a failure. [ 196.941191][ T7221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.955715][ T7221] CPU: 0 UID: 0 PID: 7221 Comm: syz.3.408 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 196.955749][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.955762][ T7221] Call Trace: [ 196.955770][ T7221] [ 196.955778][ T7221] dump_stack_lvl+0x241/0x360 [ 196.955813][ T7221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.955841][ T7221] ? __pfx__printk+0x10/0x10 [ 196.955879][ T7221] should_fail_ex+0x424/0x570 [ 196.955905][ T7221] _copy_from_user+0x2d/0xb0 [ 196.955942][ T7221] memdup_user+0x5e/0xd0 [ 196.955968][ T7221] strndup_user+0x68/0xd0 [ 196.955993][ T7221] __se_sys_fsopen+0x3f/0x2c0 [ 196.956018][ T7221] do_syscall_64+0xf3/0x230 [ 196.956044][ T7221] ? clear_bhb_loop+0x45/0xa0 [ 196.956067][ T7221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.956085][ T7221] RIP: 0033:0x7f029878e169 [ 196.956102][ T7221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.956117][ T7221] RSP: 002b:00007f02995f5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 196.956137][ T7221] RAX: ffffffffffffffda RBX: 00007f02989b6160 RCX: 00007f029878e169 [ 196.956151][ T7221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 196.956161][ T7221] RBP: 00007f02995f5090 R08: 0000000000000000 R09: 0000000000000000 [ 196.956172][ T7221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.956183][ T7221] R13: 0000000000000000 R14: 00007f02989b6160 R15: 00007f0298adfa28 [ 196.956208][ T7221] [ 197.186415][ T5893] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 197.310278][ T48] usb 3-1: string descriptor 0 read error: -71 [ 197.318804][ T48] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 197.358028][ T5893] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.388559][ T5893] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.404014][ T48] usb 3-1: USB disconnect, device number 25 [ 197.434988][ T5893] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.450744][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.463327][ T5893] usb 1-1: Product: syz [ 197.469384][ T5893] usb 1-1: Manufacturer: syz [ 197.474670][ T5893] usb 1-1: SerialNumber: syz [ 197.765346][ T5893] usb 1-1: 0:2 : does not exist [ 197.805332][ T5893] usb 1-1: USB disconnect, device number 21 [ 197.964536][ T7233] syz.2.410: attempt to access beyond end of device [ 197.964536][ T7233] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 197.977417][ T6735] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 197.998554][ T7233] process 'syz.2.410' launched './file0' with NULL argv: empty string added [ 198.057318][ T5932] gspca_sunplus: reg_r err -110 [ 198.062434][ T5932] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 198.099376][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.146008][ T977] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 198.148506][ T6735] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.166161][ T6735] usb 2-1: config 0 has no interfaces? [ 198.171869][ T6735] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 198.182510][ T6735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.194966][ T6735] usb 2-1: config 0 descriptor?? [ 198.305852][ T977] usb 4-1: Using ep0 maxpacket: 8 [ 198.317156][ T977] usb 4-1: config 4 has an invalid interface number: 218 but max is 1 [ 198.333231][ T977] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 198.360588][ T977] usb 4-1: config 4 has an invalid interface number: 50 but max is 1 [ 198.385153][ T977] usb 4-1: config 4 has an invalid interface number: 3 but max is 1 [ 198.400857][ T977] usb 4-1: config 4 has an invalid descriptor of length 244, skipping remainder of the config [ 198.419318][ T977] usb 4-1: config 4 has 3 interfaces, different from the descriptor's value: 2 [ 198.447972][ T977] usb 4-1: config 4 has no interface number 0 [ 198.462107][ T977] usb 4-1: config 4 has no interface number 1 [ 198.474929][ T977] usb 4-1: config 4 has no interface number 2 [ 198.488606][ T977] usb 4-1: config 4 interface 218 altsetting 228 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 198.503897][ T10] usb 2-1: USB disconnect, device number 30 [ 198.549308][ T977] usb 4-1: config 4 interface 218 altsetting 228 bulk endpoint 0x3 has invalid maxpacket 1023 [ 198.573843][ T977] usb 4-1: config 4 interface 218 altsetting 228 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 198.613618][ T977] usb 4-1: config 4 interface 218 altsetting 228 has a duplicate endpoint with address 0xB, skipping [ 198.636227][ T7241] netlink: 16 bytes leftover after parsing attributes in process `syz.0.413'. [ 198.710653][ T977] usb 4-1: config 4 interface 50 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 198.724169][ T977] usb 4-1: too many endpoints for config 4 interface 3 altsetting 128: 133, using maximum allowed: 30 [ 198.736841][ T977] usb 4-1: config 4 interface 3 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 133 [ 198.771038][ T5892] usb 5-1: USB disconnect, device number 29 [ 198.780112][ T977] usb 4-1: config 4 interface 218 has no altsetting 0 [ 198.824527][ T977] usb 4-1: config 4 interface 50 has no altsetting 0 [ 198.843768][ T977] usb 4-1: config 4 interface 3 has no altsetting 0 [ 198.926318][ T977] usb 4-1: language id specifier not provided by device, defaulting to English [ 198.937895][ T977] usb 4-1: New USB device found, idVendor=04b4, idProduct=6570, bcdDevice= 3.a1 [ 198.947841][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.960912][ T977] usb 4-1: Product: 鍊 [ 198.973145][ T977] usb 4-1: SerialNumber: syz [ 198.990108][ T7235] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 199.205308][ T7235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.226286][ T7235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.435435][ T7235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.454717][ T7235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.605010][ T7252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.635543][ T7252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.047374][ T5892] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 200.464210][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 200.572722][ T5892] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 200.585428][ T5892] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 200.605933][ T5892] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 200.616703][ T5892] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.638207][ T5892] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 200.945563][ T5892] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.954982][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.964221][ T5892] usb 2-1: Product: syz [ 200.968957][ T5892] usb 2-1: Manufacturer: syz [ 200.973664][ T5892] usb 2-1: SerialNumber: syz [ 201.068260][ T7256] syz.4.417: attempt to access beyond end of device [ 201.068260][ T7256] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 201.196821][ T7255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.205565][ T7255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.238025][ T5892] usb 2-1: USB disconnect, device number 31 [ 201.480728][ T977] hub 4-1:4.218: Invalid hub with more than one config or interface [ 201.525889][ T977] hub 4-1:4.218: probe with driver hub failed with error -22 [ 201.567169][ T6119] udevd[6119]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.618176][ T977] hub 4-1:4.50: Invalid hub with more than one config or interface [ 201.640894][ T977] hub 4-1:4.50: probe with driver hub failed with error -22 [ 201.671671][ T977] hub 4-1:4.3: Invalid hub with more than one config or interface [ 201.686208][ T977] hub 4-1:4.3: probe with driver hub failed with error -22 [ 201.716777][ T977] usb 4-1: USB disconnect, device number 25 [ 202.095929][ T977] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 202.258128][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.290956][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.311699][ T6735] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 202.324522][ T977] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 202.340756][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.361760][ T977] usb 4-1: config 0 descriptor?? [ 202.388323][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.430'. [ 202.490844][ T7291] netlink: 28 bytes leftover after parsing attributes in process `syz.1.431'. [ 202.522219][ T6735] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.548260][ T6735] usb 1-1: config 0 has no interfaces? [ 202.573474][ T6735] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 202.593543][ T7270] netlink: 'syz.3.421': attribute type 9 has an invalid length. [ 202.597236][ T6735] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.615992][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 202.644703][ T6735] usb 1-1: config 0 descriptor?? [ 202.682278][ T7270] bond_slave_0: entered promiscuous mode [ 202.688334][ T7270] bond_slave_1: entered promiscuous mode [ 202.746109][ T7270] macvlan2: entered promiscuous mode [ 202.761937][ T7270] bond0: entered promiscuous mode [ 202.776189][ T7270] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 202.802567][ T7270] macvlan2: entered allmulticast mode [ 202.822420][ T7270] bond0: entered allmulticast mode [ 202.832566][ T7270] bond_slave_0: entered allmulticast mode [ 202.838479][ T7270] bond_slave_1: entered allmulticast mode [ 202.844362][ T7270] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 202.860526][ T7270] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 202.885899][ T977] usbhid 4-1:0.0: can't add hid device: -71 [ 202.893886][ T977] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 202.947972][ T48] usb 1-1: USB disconnect, device number 22 [ 202.977171][ T977] usb 4-1: USB disconnect, device number 26 [ 203.166241][ T6735] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 203.336052][ T6735] usb 2-1: Using ep0 maxpacket: 16 [ 203.346425][ T6735] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 203.355441][ T6735] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 203.375255][ T6735] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 203.388731][ T6735] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 203.417868][ T6735] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 203.460741][ T6735] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 203.480133][ T6735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.498534][ T6735] usb 2-1: Product: syz [ 203.512748][ T6735] usb 2-1: Manufacturer: syz [ 203.527687][ T6735] usb 2-1: SerialNumber: syz [ 203.769969][ T7297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.790813][ T48] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 203.806293][ T7297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.855913][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 203.906582][ T6735] usb 2-1: USB disconnect, device number 32 [ 203.945825][ T48] usb 4-1: device descriptor read/64, error -71 [ 204.026084][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 204.040786][ T10] usb 5-1: config 7 has an invalid interface number: 135 but max is 0 [ 204.087874][ T10] usb 5-1: config 7 has no interface number 0 [ 204.148742][ T10] usb 5-1: config 7 interface 135 altsetting 215 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 204.171398][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.187364][ T10] usb 5-1: config 7 interface 135 altsetting 215 has a duplicate endpoint with address 0x2, skipping [ 204.187398][ T10] usb 5-1: config 7 interface 135 altsetting 215 has a duplicate endpoint with address 0x7, skipping [ 204.241440][ T48] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 204.285852][ T10] usb 5-1: config 7 interface 135 altsetting 215 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 204.316065][ T10] usb 5-1: config 7 interface 135 has no altsetting 0 [ 204.761034][ T48] usb 4-1: device descriptor read/64, error -71 [ 204.789592][ T10] usb 5-1: New USB device found, idVendor=0e8d, idProduct=7102, bcdDevice=8e.48 [ 204.807591][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.833890][ T10] usb 5-1: Product: 酄 [ 204.845067][ T10] usb 5-1: Manufacturer: 戗嗕墮钖﹀棆岷擃醇鞛嬱枈醿狀祶椹栫剙顡惻㈣竷蹗悖靛箽攵闺暰陚﹀秴喱规浉陼磦鎵レ媴飽轰侩秬昙㈢伐鞙庤亰陝掍緦顔疙噭閶堨穽洌嗭た顗冩徔琛风窘釠灎銤旐仜欷墢觳囪畯锃蜂稈觳斾嵎類ｂ粔飚嶁鏉嗕棇鋴咃鞝盀釐碱煃缃栢瘋喽炶灉鐒崅釢椺櫥顔曤崵銤嬭攩鑳戩埛鋴 [ 204.928374][ T48] usb usb4-port1: attempt power cycle [ 204.983889][ T10] usb 5-1: SerialNumber: 鋹 [ 205.254595][ T7303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.275937][ T48] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 205.283552][ T7303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.349360][ T10] option 5-1:7.135: GSM modem (1-port) converter detected [ 205.375642][ T48] usb 4-1: device descriptor read/8, error -71 [ 205.403949][ T10] usb 5-1: USB disconnect, device number 31 [ 205.469610][ T10] option 5-1:7.135: device disconnected [ 205.704227][ T48] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 205.740728][ T48] usb 4-1: device descriptor read/8, error -71 [ 205.866488][ T48] usb usb4-port1: unable to enumerate USB device [ 206.665176][ T7340] sctp: [Deprecated]: syz.3.447 (pid 7340) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.665176][ T7340] Use struct sctp_sack_info instead [ 207.630411][ T7352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.449'. [ 208.294568][ T7360] netlink: 'syz.2.451': attribute type 10 has an invalid length. [ 208.363423][ T7364] FAULT_INJECTION: forcing a failure. [ 208.363423][ T7364] name failslab, interval 1, probability 0, space 0, times 0 [ 208.405883][ T7364] CPU: 0 UID: 0 PID: 7364 Comm: syz.0.453 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 208.405915][ T7364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 208.405926][ T7364] Call Trace: [ 208.405933][ T7364] [ 208.405940][ T7364] dump_stack_lvl+0x241/0x360 [ 208.405972][ T7364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.405998][ T7364] ? __pfx__printk+0x10/0x10 [ 208.406027][ T7364] ? __pfx___might_resched+0x10/0x10 [ 208.406053][ T7364] should_fail_ex+0x424/0x570 [ 208.406077][ T7364] should_failslab+0xac/0x100 [ 208.406105][ T7364] __kmalloc_cache_noprof+0x73/0x370 [ 208.406130][ T7364] ? genl_start+0x1cb/0x6d0 [ 208.406155][ T7364] genl_start+0x1cb/0x6d0 [ 208.406183][ T7364] __netlink_dump_start+0x45c/0x790 [ 208.406219][ T7364] genl_rcv_msg+0x8a4/0xf00 [ 208.406248][ T7364] ? __pfx_genl_rcv_msg+0x10/0x10 [ 208.406265][ T7364] ? __dev_queue_xmit+0x1780/0x3f60 [ 208.406292][ T7364] ? __pfx_genl_start+0x10/0x10 [ 208.406308][ T7364] ? __pfx_genl_dumpit+0x10/0x10 [ 208.406325][ T7364] ? __pfx_genl_done+0x10/0x10 [ 208.406359][ T7364] ? __lock_acquire+0xad5/0xd80 [ 208.406381][ T7364] ? __pfx_smc_nl_get_fback_stats+0x10/0x10 [ 208.406423][ T7364] netlink_rcv_skb+0x208/0x480 [ 208.406449][ T7364] ? __pfx_genl_rcv_msg+0x10/0x10 [ 208.406471][ T7364] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 208.406516][ T7364] ? netlink_deliver_tap+0x2e/0x1b0 [ 208.406548][ T7364] genl_rcv+0x28/0x40 [ 208.406566][ T7364] netlink_unicast+0x7f8/0x9a0 [ 208.406597][ T7364] ? __pfx_netlink_unicast+0x10/0x10 [ 208.406622][ T7364] ? skb_put+0x114/0x1f0 [ 208.406645][ T7364] netlink_sendmsg+0x8c3/0xcd0 [ 208.406683][ T7364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.406714][ T7364] ? aa_sock_msg_perm+0x91/0x160 [ 208.406744][ T7364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.406768][ T7364] __sock_sendmsg+0x221/0x270 [ 208.406796][ T7364] ____sys_sendmsg+0x523/0x860 [ 208.406825][ T7364] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.406842][ T7364] ? __fget_files+0x2a/0x420 [ 208.406862][ T7364] ? __fget_files+0x2a/0x420 [ 208.406885][ T7364] __sys_sendmsg+0x271/0x360 [ 208.406917][ T7364] ? __pfx___sys_sendmsg+0x10/0x10 [ 208.406996][ T7364] ? do_syscall_64+0xb6/0x230 [ 208.407023][ T7364] do_syscall_64+0xf3/0x230 [ 208.407046][ T7364] ? clear_bhb_loop+0x45/0xa0 [ 208.407068][ T7364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.407085][ T7364] RIP: 0033:0x7f056f78e169 [ 208.407102][ T7364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.407117][ T7364] RSP: 002b:00007f0570625038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.407136][ T7364] RAX: ffffffffffffffda RBX: 00007f056f9b5fa0 RCX: 00007f056f78e169 [ 208.407150][ T7364] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 208.407162][ T7364] RBP: 00007f0570625090 R08: 0000000000000000 R09: 0000000000000000 [ 208.407173][ T7364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.407183][ T7364] R13: 0000000000000000 R14: 00007f056f9b5fa0 R15: 00007f056fadfa28 [ 208.407210][ T7364] [ 209.195854][ T5893] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 209.409012][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 209.432046][ T5893] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 209.454203][ T5893] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 209.467619][ T5893] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 209.480649][ T5893] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.513931][ T5893] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 209.529957][ T5893] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.542910][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.559749][ T5893] usb 4-1: Product: syz [ 209.570838][ T5893] usb 4-1: Manufacturer: syz [ 209.581220][ T5893] usb 4-1: SerialNumber: syz [ 209.765928][ T96] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 209.853356][ T7357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.886971][ T7357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.945871][ T96] usb 3-1: Using ep0 maxpacket: 16 [ 209.964968][ T96] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 209.980659][ T96] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.056038][ T5893] usb 4-1: USB disconnect, device number 31 [ 210.084246][ T96] usb 3-1: config 0 has no interface number 0 [ 210.112072][ T96] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 210.156034][ T96] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.193148][ T96] usb 3-1: Product: syz [ 210.205621][ T96] usb 3-1: Manufacturer: syz [ 210.221541][ T96] usb 3-1: SerialNumber: syz [ 210.258396][ T96] usb 3-1: config 0 descriptor?? [ 210.293360][ T96] usb 3-1: Found UVC 0.00 device syz (046c:14e8) [ 210.319253][ T96] usb 3-1: No valid video chain found. [ 210.391011][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.478894][ T7377] delete_channel: no stack [ 210.928895][ T96] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 211.066821][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'. [ 211.269122][ T96] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 211.356275][ T96] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 211.439535][ T96] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 211.485828][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 211.501309][ T96] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.569312][ T7378] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 211.628778][ T96] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 211.665979][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 211.666400][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 211.672940][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 211.684801][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 211.691175][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 211.697591][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 211.788398][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.799684][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.809653][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.822793][ T9] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 211.832333][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.844556][ T9] usb 4-1: config 0 descriptor?? [ 211.857039][ T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 211.870913][ T5195] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 212.164085][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 212.164104][ T30] audit: type=1326 audit(1744836015.144:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.1.461" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bbaf8e169 code=0x0 [ 212.192013][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.213332][ T5195] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 212.330409][ T7381] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 212.600655][ T5930] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 212.633752][ T5195] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 212.639367][ T5195] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 212.640993][ T5195] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 212.660198][ T5195] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 212.662898][ T10] usb 3-1: USB disconnect, device number 26 [ 212.722024][ T5932] usb 4-1: USB disconnect, device number 32 [ 213.451339][ T5932] usb 1-1: USB disconnect, device number 23 [ 213.881766][ T7423] netlink: 'syz.3.469': attribute type 10 has an invalid length. [ 214.139558][ T5932] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 214.306355][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 214.373674][ T7406] netlink: 'syz.4.464': attribute type 7 has an invalid length. [ 214.389799][ T5932] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 214.405161][ T5932] usb 2-1: config 0 has no interface number 0 [ 214.481255][ T5932] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 214.490421][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.500265][ T5932] usb 2-1: Product: syz [ 214.504507][ T5932] usb 2-1: Manufacturer: syz [ 214.509188][ T5932] usb 2-1: SerialNumber: syz [ 214.612737][ T5932] usb 2-1: config 0 descriptor?? [ 214.669881][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 214.845842][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 214.852906][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 214.985466][ T9] usb 1-1: config 0 has no interface number 0 [ 215.009734][ T9] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 21760, setting to 1024 [ 215.058099][ T5932] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 215.064555][ T5932] usb 2-1: No valid video chain found. [ 215.084351][ T5932] usb 2-1: USB disconnect, device number 33 [ 215.095905][ T9] usb 1-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 215.128400][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 215.140571][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.162422][ T9] usb 1-1: Product: syz [ 215.172562][ T9] usb 1-1: Manufacturer: syz [ 215.186021][ T9] usb 1-1: SerialNumber: syz [ 215.196801][ T9] usb 1-1: config 0 descriptor?? [ 215.206764][ T7428] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 215.216491][ T9] smsc95xx v2.0.0 [ 215.429309][ T7428] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 215.608616][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 215.675902][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 215.761553][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 215.782135][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 215.823204][ T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 215.839527][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 215.863166][ T10] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 215.873605][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.904285][ T9] usb 1-1: USB disconnect, device number 24 [ 215.910476][ T10] usb 3-1: config 0 has no interface number 0 [ 215.940916][ T10] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 215.953613][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.972584][ T10] usb 3-1: Product: syz [ 215.978719][ T10] usb 3-1: Manufacturer: syz [ 215.983469][ T10] usb 3-1: SerialNumber: syz [ 216.000584][ T10] usb 3-1: config 0 descriptor?? [ 216.011732][ T10] usb 3-1: Found UVC 0.00 device syz (046c:14e8) [ 216.019952][ T10] usb 3-1: No valid video chain found. [ 216.026009][ T5932] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 216.175806][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 216.183028][ T5932] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.197550][ T5932] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.266112][ T5932] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 216.292633][ T5932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 216.342245][ T5932] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 216.352725][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.394702][ T5932] usb 2-1: config 0 descriptor?? [ 216.821978][ T7455] netlink: 9 bytes leftover after parsing attributes in process `syz.1.481'. [ 216.851065][ T7455] gretap0: entered promiscuous mode [ 216.878300][ T7455] netlink: 5 bytes leftover after parsing attributes in process `syz.1.481'. [ 216.913740][ T7455] 0猉功D: renamed from gretap0 [ 216.934970][ T7467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.981999][ T7455] 0猉功D: left promiscuous mode [ 217.008299][ T7467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.055926][ T7455] 0猉功D: entered allmulticast mode [ 217.078134][ T5932] hid-generic 0003:045E:05DA.000D: unknown main item tag 0x0 [ 217.090204][ T7455] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 217.111548][ T5932] hid-generic 0003:045E:05DA.000D: unknown main item tag 0x0 [ 217.134125][ T5932] hid-generic 0003:045E:05DA.000D: unknown main item tag 0x0 [ 217.151430][ T10] usb 3-1: USB disconnect, device number 27 [ 217.153447][ T5932] hid-generic 0003:045E:05DA.000D: ignoring exceeding usage max [ 217.198360][ T7471] FAULT_INJECTION: forcing a failure. [ 217.198360][ T7471] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 217.199368][ T5932] hid-generic 0003:045E:05DA.000D: ignoring exceeding usage max [ 217.243735][ T7471] CPU: 0 UID: 0 PID: 7471 Comm: syz.3.486 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 217.243765][ T7471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 217.243778][ T7471] Call Trace: [ 217.243786][ T7471] [ 217.243795][ T7471] dump_stack_lvl+0x241/0x360 [ 217.243833][ T7471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.243864][ T7471] ? __pfx__printk+0x10/0x10 [ 217.243904][ T7471] should_fail_ex+0x424/0x570 [ 217.243932][ T7471] prepare_alloc_pages+0x220/0x610 [ 217.243964][ T7471] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 217.243992][ T7471] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 217.244018][ T7471] ? cgroup_rstat_updated+0x144/0xc40 [ 217.244079][ T7471] alloc_pages_mpol+0x339/0x690 [ 217.244113][ T7471] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 217.244151][ T7471] folio_alloc_mpol_noprof+0x36/0x70 [ 217.244178][ T7471] shmem_alloc_and_add_folio+0x490/0x1070 [ 217.244206][ T7471] ? shmem_huge_global_enabled+0x175/0x3b0 [ 217.244234][ T7471] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 217.244258][ T7471] ? shmem_allowable_huge_orders+0x41b/0x430 [ 217.244293][ T7471] shmem_get_folio_gfp+0x655/0x1800 [ 217.244319][ T7471] ? seqcount_lockdep_reader_access+0x159/0x230 [ 217.244347][ T7471] ? lockdep_hardirqs_on+0x9d/0x150 [ 217.244388][ T7471] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 217.244428][ T7471] shmem_fault+0x223/0x5c0 [ 217.244455][ T7471] ? __pfx_shmem_fault+0x10/0x10 [ 217.244474][ T7471] ? __pfx____pte_offset_map+0x10/0x10 [ 217.244515][ T7471] __do_fault+0x135/0x390 [ 217.244537][ T7471] handle_pte_fault+0xfcc/0x61c0 [ 217.244567][ T7471] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 217.244592][ T7471] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 217.244621][ T7471] ? __pfx_handle_pte_fault+0x10/0x10 [ 217.244652][ T7471] ? rcu_is_watching+0x15/0xb0 [ 217.244680][ T7471] ? __lock_acquire+0xad5/0xd80 [ 217.244715][ T7471] ? __lock_acquire+0xad5/0xd80 [ 217.244739][ T7471] ? do_raw_spin_lock+0x151/0x370 [ 217.244774][ T7471] handle_mm_fault+0x1129/0x1bf0 [ 217.244830][ T7471] ? __pfx_handle_mm_fault+0x10/0x10 [ 217.244857][ T7471] ? follow_page_pte+0x9ff/0x15e0 [ 217.244887][ T7471] ? vma_needs_dirty_tracking+0x172/0x1f0 [ 217.244915][ T7471] ? check_vma_flags+0x51b/0x590 [ 217.244948][ T7471] __get_user_pages+0x1adc/0x4180 [ 217.244989][ T5932] hid-generic 0003:045E:05DA.000D: unknown main item tag 0x0 [ 217.245011][ T7471] ? __pfx___get_user_pages+0x10/0x10 [ 217.245035][ T7471] ? __gup_longterm_locked+0x769/0x1850 [ 217.245064][ T7471] ? __pfx_down_read_killable+0x10/0x10 [ 217.245119][ T7471] ? __lock_acquire+0xad5/0xd80 [ 217.245144][ T7471] __gup_longterm_locked+0x900/0x1850 [ 217.245200][ T7471] ? __pfx___gup_longterm_locked+0x10/0x10 [ 217.245234][ T7471] ? sanity_check_pinned_pages+0x11b9/0x12a0 [ 217.245267][ T7471] ? gup_fast_fallback+0x203f/0x2980 [ 217.245301][ T7471] gup_fast_fallback+0x2227/0x2980 [ 217.245365][ T7471] ? __pfx_gup_fast_fallback+0x10/0x10 [ 217.245399][ T7471] ? __lock_acquire+0xad5/0xd80 [ 217.245440][ T7471] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 217.245480][ T7471] ? __phys_addr+0xba/0x170 [ 217.245504][ T7471] ? is_valid_gup_args+0x124/0x200 [ 217.245537][ T7471] pin_user_pages_fast+0xd2/0x160 [ 217.245571][ T7471] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 217.245600][ T7471] ? rcu_is_watching+0x15/0xb0 [ 217.245625][ T7471] ? trace_kmalloc+0x1f/0xd0 [ 217.245652][ T7471] ? io_pin_pages+0x9a/0x1a0 [ 217.245687][ T7471] io_pin_pages+0xb4/0x1a0 [ 217.245725][ T7471] io_sqe_buffer_register+0x195/0x2240 [ 217.245780][ T7471] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 217.245811][ T7471] ? io_sqe_buffers_register+0x182/0x910 [ 217.245841][ T7471] ? rcu_is_watching+0x15/0xb0 [ 217.245866][ T7471] ? trace_kmalloc+0x1f/0xd0 [ 217.245890][ T7471] ? __kvmalloc_node_noprof+0x34a/0x5a0 [ 217.245920][ T7471] ? iovec_from_user+0x1b4/0x240 [ 217.245954][ T7471] io_sqe_buffers_register+0x40e/0x910 [ 217.245998][ T7471] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 217.246033][ T7471] ? __fget_files+0x39d/0x420 [ 217.246050][ T7471] ? __fget_files+0x2a/0x420 [ 217.246082][ T7471] __se_sys_io_uring_register+0xe9d/0x39b0 [ 217.246117][ T7471] ? __lock_acquire+0xad5/0xd80 [ 217.246159][ T7471] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 217.246198][ T7471] ? rcu_read_lock_any_held+0xbb/0x160 [ 217.246226][ T7471] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 217.246256][ T7471] ? vfs_write+0xb29/0xd10 [ 217.246290][ T7471] ? ksys_write+0x24e/0x2d0 [ 217.246316][ T7471] ? __mutex_unlock_slowpath+0x229/0x800 [ 217.246352][ T7471] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 217.246375][ T7471] ? __fget_files+0x2a/0x420 [ 217.246398][ T7471] ? __fget_files+0x2a/0x420 [ 217.246422][ T7471] ? fput+0x9b/0xd0 [ 217.246440][ T7471] ? ksys_write+0x275/0x2d0 [ 217.246475][ T7471] ? do_syscall_64+0xb6/0x230 [ 217.246505][ T7471] do_syscall_64+0xf3/0x230 [ 217.246532][ T7471] ? clear_bhb_loop+0x45/0xa0 [ 217.246556][ T7471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.246578][ T7471] RIP: 0033:0x7f029878e169 [ 217.246595][ T7471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.246613][ T7471] RSP: 002b:00007f0299637038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 217.246635][ T7471] RAX: ffffffffffffffda RBX: 00007f02989b5fa0 RCX: 00007f029878e169 [ 217.246650][ T7471] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 217.246663][ T7471] RBP: 00007f0299637090 R08: 0000000000000000 R09: 0000000000000000 [ 217.246675][ T7471] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000002 [ 217.246689][ T7471] R13: 0000000000000000 R14: 00007f02989b5fa0 R15: 00007f0298adfa28 [ 217.246721][ T7471] [ 217.812885][ T5932] hid-generic 0003:045E:05DA.000D: unbalanced collection at end of report description [ 217.827622][ T5932] hid-generic 0003:045E:05DA.000D: probe with driver hid-generic failed with error -22 [ 217.930327][ T5932] usb 2-1: USB disconnect, device number 34 [ 218.305922][ T5932] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 218.481817][ T5932] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 218.492592][ T5932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 218.499549][ T48] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 218.516345][ T5932] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 218.531542][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 218.550263][ T5932] usb 2-1: Product: syz [ 218.554577][ T5932] usb 2-1: Manufacturer: syz [ 218.570294][ T5932] usb 2-1: SerialNumber: syz [ 218.587136][ T5932] usb 2-1: config 0 descriptor?? [ 218.600567][ T5932] usb 2-1: selecting invalid altsetting 0 [ 218.690592][ T48] usb 1-1: unable to get BOS descriptor or descriptor too short [ 218.712674][ T48] usb 1-1: not running at top speed; connect to a high speed hub [ 218.742446][ T48] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 218.776559][ T7507] tipc: Cannot configure node identity twice [ 218.796924][ T9] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 218.808883][ T48] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 218.820541][ T5932] usb 2-1: USB disconnect, device number 35 [ 218.834285][ T48] usb 1-1: config 129 descriptor has 1 excess byte, ignoring [ 218.857177][ T48] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 218.900219][ T48] usb 1-1: config 129 has no interface number 0 [ 218.922622][ T48] usb 1-1: config 129 has no interface number 1 [ 218.930435][ T48] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 218.951827][ T48] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 218.972280][ T48] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 218.979023][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 218.985515][ T48] usb 1-1: config 129 interface 135 has no altsetting 0 [ 219.008757][ T7510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.017632][ T7510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.032150][ T9] usb 5-1: config 0 has no interface number 0 [ 219.041507][ T48] usb 1-1: config 129 interface 5 has no altsetting 0 [ 219.045856][ T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 219.061512][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.062276][ T48] usb 1-1: language id specifier not provided by device, defaulting to English [ 219.080688][ T9] usb 5-1: config 0 descriptor?? [ 219.088797][ T48] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 219.092101][ T9] usb 5-1: selecting invalid altsetting 1 [ 219.111512][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.111991][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 219.126870][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 219.146266][ T48] usb 1-1: SerialNumber: syz [ 219.182910][ T9] DVB: Unable to find symbol cx22700_attach() [ 219.195917][ T5914] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 219.263594][ T9] DVB: Unable to find symbol tda10046_attach() [ 219.271872][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 219.327069][ T5932] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 219.355879][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 219.364933][ T5914] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.407880][ T5914] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.426191][ T5914] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 219.461671][ T5914] usb 3-1: config 0 interface 0 has no altsetting 0 [ 219.485311][ T7516] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 219.495964][ T5932] usb 2-1: device descriptor read/64, error -71 [ 219.507180][ T5914] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 219.525887][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.551501][ T5914] usb 3-1: config 0 descriptor?? [ 219.741343][ T5932] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 219.773168][ T7519] FAULT_INJECTION: forcing a failure. [ 219.773168][ T7519] name failslab, interval 1, probability 0, space 0, times 0 [ 219.790780][ T7519] CPU: 1 UID: 0 PID: 7519 Comm: syz.3.501 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 219.790808][ T7519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 219.790819][ T7519] Call Trace: [ 219.790827][ T7519] [ 219.790858][ T7519] dump_stack_lvl+0x241/0x360 [ 219.790892][ T7519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.790919][ T7519] ? __pfx__printk+0x10/0x10 [ 219.790949][ T7519] ? __pfx___might_resched+0x10/0x10 [ 219.790977][ T7519] should_fail_ex+0x424/0x570 [ 219.791003][ T7519] should_failslab+0xac/0x100 [ 219.791031][ T7519] __kmalloc_noprof+0xdf/0x4d0 [ 219.791057][ T7519] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 219.791093][ T7519] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 219.791128][ T7519] tomoyo_realpath_from_path+0xcf/0x5e0 [ 219.791169][ T7519] tomoyo_path_number_perm+0x245/0x790 [ 219.791199][ T7519] ? tomoyo_path_number_perm+0x215/0x790 [ 219.791226][ T7519] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 219.791258][ T7519] ? ksys_write+0x24e/0x2d0 [ 219.791287][ T7519] ? __lock_acquire+0xad5/0xd80 [ 219.791326][ T7519] ? __fget_files+0x2a/0x420 [ 219.791343][ T7519] ? __fget_files+0x2a/0x420 [ 219.791363][ T7519] ? __fget_files+0x2a/0x420 [ 219.791385][ T7519] security_file_ioctl+0xc6/0x2a0 [ 219.791410][ T7519] __se_sys_ioctl+0x46/0x160 [ 219.791435][ T7519] do_syscall_64+0xf3/0x230 [ 219.791460][ T7519] ? clear_bhb_loop+0x45/0xa0 [ 219.791483][ T7519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.791502][ T7519] RIP: 0033:0x7f029878e169 [ 219.791518][ T7519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.791534][ T7519] RSP: 002b:00007f0299637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.791554][ T7519] RAX: ffffffffffffffda RBX: 00007f02989b5fa0 RCX: 00007f029878e169 [ 219.791568][ T7519] RDX: 0000200000000100 RSI: 0000000080044dfe RDI: 0000000000000005 [ 219.791580][ T7519] RBP: 00007f0299637090 R08: 0000000000000000 R09: 0000000000000000 [ 219.791591][ T7519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.791602][ T7519] R13: 0000000000000000 R14: 00007f02989b5fa0 R15: 00007f0298adfa28 [ 219.791632][ T7519] [ 219.791770][ T7519] ERROR: Out of memory at tomoyo_realpath_from_path. [ 220.030722][ T7512] netlink: 9 bytes leftover after parsing attributes in process `syz.2.500'. [ 220.062330][ T7512] 0猉功D: entered promiscuous mode [ 220.082163][ T7521] netlink: 5 bytes leftover after parsing attributes in process `syz.2.500'. [ 220.091192][ T5932] usb 2-1: device descriptor read/64, error -71 [ 220.097121][ T7512] 0猉功D: left allmulticast mode [ 220.118905][ T7521] 1猉功D: renamed from 30猉功D [ 220.129324][ T7521] 1猉功D: left promiscuous mode [ 220.137717][ T7521] 1猉功D: entered allmulticast mode [ 220.157886][ T7512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.192188][ T7521] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 220.215036][ T5932] usb usb2-port1: attempt power cycle [ 220.255183][ T7512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.310047][ T5914] hid-generic 0003:045E:05DA.000E: unknown main item tag 0x0 [ 220.318055][ T5914] hid-generic 0003:045E:05DA.000E: unknown main item tag 0x0 [ 220.325565][ T5914] hid-generic 0003:045E:05DA.000E: unknown main item tag 0x0 [ 220.333199][ T5914] hid-generic 0003:045E:05DA.000E: ignoring exceeding usage max [ 220.343103][ T5914] hid-generic 0003:045E:05DA.000E: ignoring exceeding usage max [ 220.352558][ T5914] hid-generic 0003:045E:05DA.000E: unknown main item tag 0x0 [ 220.360342][ T5914] hid-generic 0003:045E:05DA.000E: unbalanced collection at end of report description [ 220.370975][ T5914] hid-generic 0003:045E:05DA.000E: probe with driver hid-generic failed with error -22 [ 220.490937][ T7526] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 220.514709][ T7526] kernel profiling enabled (shift: 5) [ 220.514852][ T96] usb 3-1: USB disconnect, device number 28 [ 220.570474][ T7528] netlink: 44 bytes leftover after parsing attributes in process `syz.3.503'. [ 220.587778][ T5932] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 220.597435][ T7528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.503'. [ 220.617556][ T7528] openvswitch: netlink: Flow key attr not present in new flow. [ 220.622345][ T5932] usb 2-1: device descriptor read/8, error -71 [ 220.749773][ T7532] FAULT_INJECTION: forcing a failure. [ 220.749773][ T7532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.768701][ T7532] CPU: 0 UID: 0 PID: 7532 Comm: syz.3.504 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 220.768727][ T7532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.768737][ T7532] Call Trace: [ 220.768743][ T7532] [ 220.768749][ T7532] dump_stack_lvl+0x241/0x360 [ 220.768802][ T7532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.768832][ T7532] ? __pfx__printk+0x10/0x10 [ 220.768872][ T7532] should_fail_ex+0x424/0x570 [ 220.768891][ T7532] _copy_from_user+0x2d/0xb0 [ 220.768913][ T7532] copy_msghdr_from_user+0xb3/0x580 [ 220.768949][ T7532] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 220.769005][ T7532] __sys_sendmmsg+0x361/0x7b0 [ 220.769033][ T7532] ? __pfx___sys_sendmmsg+0x10/0x10 [ 220.769073][ T7532] ? rcu_read_lock_any_held+0xbb/0x160 [ 220.769101][ T7532] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 220.769130][ T7532] ? vfs_write+0xb29/0xd10 [ 220.769159][ T7532] ? ksys_write+0x24e/0x2d0 [ 220.769181][ T7532] ? __mutex_unlock_slowpath+0x229/0x800 [ 220.769218][ T7532] ? ksys_write+0x275/0x2d0 [ 220.769250][ T7532] __x64_sys_sendmmsg+0xa0/0xb0 [ 220.769273][ T7532] do_syscall_64+0xf3/0x230 [ 220.769296][ T7532] ? clear_bhb_loop+0x45/0xa0 [ 220.769319][ T7532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.769332][ T7532] RIP: 0033:0x7f029878e169 [ 220.769345][ T7532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.769356][ T7532] RSP: 002b:00007f0299637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 220.769372][ T7532] RAX: ffffffffffffffda RBX: 00007f02989b5fa0 RCX: 00007f029878e169 [ 220.769387][ T7532] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 220.769399][ T7532] RBP: 00007f0299637090 R08: 0000000000000000 R09: 0000000000000000 [ 220.769428][ T7532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.769440][ T7532] R13: 0000000000000000 R14: 00007f02989b5fa0 R15: 00007f0298adfa28 [ 220.769469][ T7532] [ 221.001718][ T48] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 221.008883][ T48] usb 1-1: MIDIStreaming interface descriptor not found [ 221.025829][ T5932] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 221.069136][ T5932] usb 2-1: device descriptor read/8, error -71 [ 221.161372][ T48] usb 1-1: USB disconnect, device number 25 [ 221.173548][ T7538] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 221.210925][ T5932] usb usb2-port1: unable to enumerate USB device [ 221.240339][ T7538] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 221.261682][ T7538] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 221.311290][ T7538] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 221.333340][ T7538] geneve2: entered promiscuous mode [ 221.344492][ T7538] geneve2: entered allmulticast mode [ 221.391570][ T7540] gtp0: entered promiscuous mode [ 221.405077][ T5893] usb 5-1: USB disconnect, device number 32 [ 221.438655][ T7542] tipc: Started in network mode [ 221.443578][ T7542] tipc: Node identity 2dffff7f0000000009, cluster identity 4711 [ 221.530769][ T6119] udevd[6119]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.563732][ T7543] netlink: 'syz.0.507': attribute type 1 has an invalid length. [ 221.579615][ T7543] netlink: 'syz.0.507': attribute type 2 has an invalid length. [ 222.047244][ T30] audit: type=1326 audit(1744836025.044:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.2.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a318e169 code=0x7ffc0000 [ 222.069880][ T30] audit: type=1326 audit(1744836025.044:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.2.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff3a318e169 code=0x7ffc0000 [ 222.212468][ T30] audit: type=1326 audit(1744836025.044:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.2.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a318e169 code=0x7ffc0000 [ 222.277260][ T30] audit: type=1326 audit(1744836025.044:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.2.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7ff3a318e169 code=0x7ffc0000 [ 222.301170][ T30] audit: type=1326 audit(1744836025.044:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.2.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a318e169 code=0x7ffc0000 [ 222.330695][ T30] audit: type=1326 audit(1744836025.054:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.2.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7ff3a318e169 code=0x7ffc0000 [ 222.359990][ T30] audit: type=1326 audit(1744836025.054:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.2.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a318e169 code=0x7ffc0000 [ 222.382097][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.469767][ T30] audit: type=1326 audit(1744836025.054:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.2.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a318e169 code=0x7ffc0000 [ 222.522367][ T30] audit: type=1326 audit(1744836025.064:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.2.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff3a318e169 code=0x7ffc0000 [ 222.604616][ T30] audit: type=1326 audit(1744836025.064:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.2.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a318e169 code=0x7ffc0000 [ 222.705967][ T5914] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 222.866290][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 222.980445][ T5914] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 223.008840][ T5914] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 223.036227][ T5914] usb 2-1: config 0 interface 0 has no altsetting 0 [ 223.043084][ T5914] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 223.053395][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.068995][ T5914] usb 2-1: config 0 descriptor?? [ 223.085163][ T7566] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 223.635903][ T9] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 223.685103][ T5914] hid (null): unknown global tag 0xd [ 223.786069][ T48] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 223.807722][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 223.898841][ T9] usb 4-1: config 0 has no interface number 0 [ 223.905056][ T5914] hid (null): invalid report_count 60216 [ 223.925418][ T9] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 223.934803][ T5914] hid (null): global environment stack underflow [ 223.997693][ T5914] hid (null): report_id 2676298326 is invalid [ 224.010496][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.101500][ T48] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 224.406747][ T9] usb 4-1: config 0 descriptor?? [ 224.451802][ T48] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 224.466706][ T9] usb 4-1: selecting invalid altsetting 1 [ 224.497834][ T48] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 224.509102][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 224.518956][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.519206][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 224.557789][ T7576] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 224.593402][ T48] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 224.868986][ T9] DVB: Unable to find symbol cx22700_attach() [ 224.876017][ T5932] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 225.099272][ T5932] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 225.119780][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.137182][ T9] DVB: Unable to find symbol tda10046_attach() [ 225.145484][ T5932] usb 3-1: config 0 descriptor?? [ 225.155040][ T5932] cp210x 3-1:0.0: cp210x converter detected [ 225.155884][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 225.247544][ T9] usb 4-1: USB disconnect, device number 33 [ 225.416735][ T7588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.522'. [ 225.490855][ T7585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.521'. [ 225.503130][ T10] usb 2-1: USB disconnect, device number 40 [ 225.563300][ T5932] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 225.995964][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 226.168706][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 226.211867][ T7572] delete_channel: no stack [ 226.224023][ T48] usb 1-1: USB disconnect, device number 26 [ 226.316219][ T9] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 145, changing to 11 [ 226.332523][ T9] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x82 has invalid wMaxPacketSize 0 [ 226.360816][ T9] usb 4-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 0 [ 226.493082][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 226.520635][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.538108][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.561520][ T9] usb 4-1: Product: syz [ 226.581840][ T9] usb 4-1: Manufacturer: 绺骨冲劅铔殬鏃嫨釞戋庯崍杓橀劊匣釆ㄤ項呧禂锒婚幢鐡╉晽铦氻槉缃搽湸釢ょ纭ゅ啛釒忞檽洄氺媻闀Ｋ彪挿悭ㄣ挒洹掞嚙鏄戔伩霛存帆猗娰蹭潓顏滊剫釘抽旯风煠猬犎レ兌褔绾曡ō靻壿椩熶倗霒侀搲鍎辫湁鍞侩櫥娓ゅ皽鞜革摡淇掗摠绫忊ズ媒浈虫秴韸囇ャ懣鐒簽鍧︾箺鋹撲瞰氳嫷鈵斸覆嗫倦牕餄哥潧琛ц珱銒辩泩绲掑穻岜＄姢鍟鹅伂岚傚粔飓旍鋩ヨ灀鐟 [ 226.615508][ C0] vkms_vblank_simulate: vblank timer overrun [ 226.705130][ T9] usb 4-1: SerialNumber: syz [ 227.036614][ T7592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.074958][ T7592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.084796][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 227.084814][ T30] audit: type=1326 audit(1744836030.144:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f029878e169 code=0x7ffc0000 [ 227.123854][ T30] audit: type=1326 audit(1744836030.174:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f029878e169 code=0x7ffc0000 [ 227.299164][ T7608] netlink: 'syz.0.530': attribute type 1 has an invalid length. [ 227.335350][ T30] audit: type=1326 audit(1744836030.204:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f029878dd6b code=0x7ffc0000 [ 227.359692][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 227.423737][ T9] usb 4-1: USB disconnect, device number 34 [ 227.442692][ T30] audit: type=1326 audit(1744836030.204:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f029878e169 code=0x7ffc0000 [ 227.465078][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.522819][ T7608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.623367][ T5932] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 227.631708][ T5932] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 227.651686][ T30] audit: type=1326 audit(1744836030.204:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f029878e169 code=0x7ffc0000 [ 227.695663][ T5932] usb 3-1: cp210x converter now attached to ttyUSB0 [ 227.767978][ T30] audit: type=1326 audit(1744836030.214:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f029878e169 code=0x7ffc0000 [ 227.791620][ T5892] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 227.866485][ T5932] usb 3-1: USB disconnect, device number 29 [ 227.888947][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'. [ 227.938040][ T5932] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 227.944135][ T30] audit: type=1326 audit(1744836030.214:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f029878e169 code=0x7ffc0000 [ 227.967963][ C0] vkms_vblank_simulate: vblank timer overrun [ 228.024594][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.032891][ T5932] cp210x 3-1:0.0: device disconnected [ 228.095917][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.157309][ T5892] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice=a8.00 [ 228.190721][ T30] audit: type=1326 audit(1744836030.214:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f029878e169 code=0x7ffc0000 [ 228.245800][ T5892] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 228.269533][ T5892] usb 1-1: Manufacturer: syz [ 228.281099][ T30] audit: type=1326 audit(1744836030.224:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f029878e169 code=0x7ffc0000 [ 228.303442][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 228.368846][ T5892] usb 1-1: config 0 descriptor?? [ 228.374991][ T30] audit: type=1326 audit(1744836030.224:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f029878e169 code=0x7ffc0000 [ 228.516012][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 228.527868][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.557424][ T10] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 228.567072][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.575195][ T10] usb 2-1: Product: syz [ 228.581998][ T10] usb 2-1: Manufacturer: syz [ 228.593757][ T10] usb 2-1: SerialNumber: syz [ 228.617650][ T10] usb 2-1: config 0 descriptor?? [ 228.632200][ T10] etas_es58x 2-1:0.0: Starting syz syz (Serial Number syz) [ 228.675918][ T977] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 228.714081][ T5932] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 228.833316][ T48] usb 2-1: USB disconnect, device number 41 [ 228.860893][ T977] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 228.906020][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 228.917356][ T7608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.928155][ T7608] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 228.937887][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.953126][ T5932] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.965098][ T5932] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.981689][ T7608] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 228.988669][ T977] usb 3-1: Product: syz [ 229.054863][ T977] usb 3-1: Manufacturer: syz [ 229.062809][ T5932] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 229.074785][ T977] usb 3-1: SerialNumber: syz [ 229.076644][ T5932] usb 4-1: config 0 interface 0 has no altsetting 0 [ 229.087052][ T5932] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 229.088149][ T977] usb 3-1: config 0 descriptor?? [ 229.101869][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.143692][ T5932] usb 4-1: config 0 descriptor?? [ 229.196548][ T977] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 229.575256][ T7624] netlink: 9 bytes leftover after parsing attributes in process `syz.3.535'. [ 229.622430][ T7624] gretap0: entered promiscuous mode [ 229.630490][ T7629] netlink: 5 bytes leftover after parsing attributes in process `syz.3.535'. [ 229.659130][ T977] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 229.707809][ T7625] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 229.720337][ T7625] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 229.759249][ T7629] 0猉功D: renamed from gretap0 [ 229.766179][ T7624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.780281][ T7624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.798707][ T7629] 0猉功D: left promiscuous mode [ 229.812004][ T7629] 0猉功D: entered allmulticast mode [ 229.837281][ T7629] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 229.842804][ T5932] hid-generic 0003:045E:05DA.0010: unknown main item tag 0x0 [ 229.882608][ T5932] hid-generic 0003:045E:05DA.0010: unknown main item tag 0x0 [ 229.891648][ T5932] hid-generic 0003:045E:05DA.0010: unknown main item tag 0x0 [ 229.902259][ T5932] hid-generic 0003:045E:05DA.0010: ignoring exceeding usage max [ 229.930919][ T48] usb 3-1: USB disconnect, device number 30 [ 229.952123][ T5932] hid-generic 0003:045E:05DA.0010: ignoring exceeding usage max [ 229.964409][ T5932] hid-generic 0003:045E:05DA.0010: unknown main item tag 0x0 [ 229.977073][ T5932] hid-generic 0003:045E:05DA.0010: unbalanced collection at end of report description [ 230.011435][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.537'. [ 230.014625][ T5932] hid-generic 0003:045E:05DA.0010: probe with driver hid-generic failed with error -22 [ 230.275564][ T10] usb 4-1: USB disconnect, device number 35 [ 231.345122][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.541'. [ 231.362245][ T7645] netlink: 32 bytes leftover after parsing attributes in process `syz.3.541'. [ 231.521090][ T5892] usbhid 1-1:0.0: can't add hid device: -71 [ 231.546634][ T5892] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 231.557229][ T977] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 231.608432][ T5892] usb 1-1: USB disconnect, device number 27 [ 231.717281][ T977] usb 3-1: Using ep0 maxpacket: 16 [ 231.724389][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 231.745363][ T977] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 231.833256][ T977] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 231.857823][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.896236][ T977] usb 3-1: config 0 descriptor?? [ 232.211626][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 232.252198][ T10] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 232.524831][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 232.534146][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 232.535876][ T48] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 232.573547][ T977] usbhid 3-1:0.0: can't add hid device: -71 [ 232.583408][ T977] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 232.609296][ T977] usb 3-1: USB disconnect, device number 31 [ 232.749871][ T48] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 232.805196][ T48] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 232.859026][ T48] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.904242][ T48] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 232.925645][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.970001][ T48] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 232.978655][ T48] usb 5-1: invalid MIDI out EP 0 [ 233.181808][ T7668] delete_channel: no stack [ 233.193150][ T48] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 233.277994][ T48] usb 5-1: USB disconnect, device number 33 [ 233.295889][ T977] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 233.494710][ T7681] FAULT_INJECTION: forcing a failure. [ 233.494710][ T7681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.566519][ T7681] CPU: 1 UID: 0 PID: 7681 Comm: syz.2.553 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 233.566552][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 233.566565][ T7681] Call Trace: [ 233.566573][ T7681] [ 233.566582][ T7681] dump_stack_lvl+0x241/0x360 [ 233.566630][ T7681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.566661][ T7681] ? __pfx__printk+0x10/0x10 [ 233.566705][ T7681] should_fail_ex+0x424/0x570 [ 233.566733][ T7681] _copy_from_user+0x2d/0xb0 [ 233.566766][ T7681] copy_msghdr_from_user+0xb3/0x580 [ 233.566803][ T7681] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 233.566850][ T7681] do_recvmmsg+0x3bf/0xab0 [ 233.566887][ T7681] ? __pfx_do_recvmmsg+0x10/0x10 [ 233.566927][ T7681] ? rcu_read_lock_any_held+0xbb/0x160 [ 233.566956][ T7681] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 233.566988][ T7681] ? vfs_write+0xb29/0xd10 [ 233.567023][ T7681] ? ksys_write+0x24e/0x2d0 [ 233.567051][ T7681] ? __mutex_unlock_slowpath+0x229/0x800 [ 233.567089][ T7681] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 233.567115][ T7681] ? __fget_files+0x2a/0x420 [ 233.567150][ T7681] __x64_sys_recvmmsg+0x1ab/0x260 [ 233.567178][ T7681] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 233.567210][ T7681] ? do_syscall_64+0xb6/0x230 [ 233.567240][ T7681] do_syscall_64+0xf3/0x230 [ 233.567267][ T7681] ? clear_bhb_loop+0x45/0xa0 [ 233.567291][ T7681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.567311][ T7681] RIP: 0033:0x7ff3a318e169 [ 233.567330][ T7681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.567347][ T7681] RSP: 002b:00007ff3a4047038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 233.567370][ T7681] RAX: ffffffffffffffda RBX: 00007ff3a33b5fa0 RCX: 00007ff3a318e169 [ 233.567385][ T7681] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 233.567399][ T7681] RBP: 00007ff3a4047090 R08: 0000000000000000 R09: 0000000000000000 [ 233.567412][ T7681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.567424][ T7681] R13: 0000000000000000 R14: 00007ff3a33b5fa0 R15: 00007ff3a34dfa28 [ 233.567456][ T7681] [ 233.572495][ T7681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.553'. [ 233.646255][ T977] usb 1-1: device descriptor read/64, error -71 [ 233.826271][ T7397] udevd[7397]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.956596][ T7683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.552'. [ 234.445975][ T977] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 234.513196][ T7693] netlink: 16 bytes leftover after parsing attributes in process `syz.4.555'. [ 234.522886][ T7693] netlink: 16 bytes leftover after parsing attributes in process `syz.4.555'. [ 234.656077][ T977] usb 1-1: device descriptor read/64, error -71 [ 234.657244][ T7697] netlink: 16 bytes leftover after parsing attributes in process `syz.4.556'. [ 234.859352][ T977] usb usb1-port1: attempt power cycle [ 235.288872][ T977] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 235.416622][ T977] usb 1-1: device descriptor read/8, error -71 [ 235.471927][ T7704] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = -4, id = 0 [ 235.679870][ T977] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 235.726535][ T977] usb 1-1: device descriptor read/8, error -71 [ 235.745872][ T5914] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 235.860950][ T977] usb usb1-port1: unable to enumerate USB device [ 235.897417][ T5914] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 235.910050][ T5914] usb 5-1: config 0 has no interface number 0 [ 235.916299][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 235.934299][ T5914] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 235.958761][ T5914] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 235.982345][ T5914] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 236.011955][ T5914] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 236.075827][ T10] usb 3-1: device descriptor read/64, error -71 [ 236.105386][ T5914] usb 5-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 236.166172][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.186180][ T5914] usb 5-1: Product: syz [ 236.197341][ T5914] usb 5-1: Manufacturer: syz [ 236.207377][ T5914] usb 5-1: SerialNumber: syz [ 236.224068][ T5914] usb 5-1: config 0 descriptor?? [ 236.238515][ T5914] xpad 5-1:0.237: probe with driver xpad failed with error -5 [ 236.345820][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 236.418040][ T7715] netlink: 16 bytes leftover after parsing attributes in process `syz.3.561'. [ 236.550741][ T7703] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 236.559072][ T7703] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 236.575884][ T10] usb 3-1: device descriptor read/64, error -71 [ 236.686625][ T10] usb usb3-port1: attempt power cycle [ 237.084257][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 237.128069][ T10] usb 3-1: device descriptor read/8, error -71 [ 237.186703][ T9] usb 5-1: USB disconnect, device number 34 [ 237.306015][ T5932] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 237.373838][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.565'. [ 237.387730][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 237.439749][ T10] usb 3-1: device descriptor read/8, error -71 [ 237.526379][ T5932] usb 1-1: Using ep0 maxpacket: 8 [ 237.543759][ T5932] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 237.566148][ T10] usb usb3-port1: unable to enumerate USB device [ 237.636701][ T5932] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 237.691370][ T5932] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 237.733571][ T5932] usb 1-1: config 250 has no interface number 0 [ 237.755932][ T5932] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 237.764204][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 237.768095][ T5932] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 237.786182][ T5932] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 237.800634][ T5932] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 237.814911][ T5932] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 237.828844][ T5932] usb 1-1: config 250 interface 228 has no altsetting 0 [ 237.840267][ T5932] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 237.849850][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 237.868062][ T5932] usb 1-1: Product: syz [ 237.872275][ T5932] usb 1-1: SerialNumber: syz [ 237.919116][ T5932] hub 1-1:250.228: bad descriptor, ignoring hub [ 237.926384][ T5932] hub 1-1:250.228: probe with driver hub failed with error -5 [ 238.075982][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 238.106411][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.126099][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.136194][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.149365][ T9] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 238.159381][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.189912][ T9] usb 2-1: config 0 descriptor?? [ 238.220293][ T5932] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 32 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 238.224937][ T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13 [ 238.291053][ T7728] netlink: 'syz.4.566': attribute type 4 has an invalid length. [ 238.313448][ T7728] [ 238.315821][ T7728] ====================================================== [ 238.322854][ T7728] WARNING: possible circular locking dependency detected [ 238.329891][ T7728] 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 Not tainted [ 238.337017][ T7728] ------------------------------------------------------ [ 238.344024][ T7728] syz.4.566/7728 is trying to acquire lock: [ 238.349907][ T7728] ffff888024b98aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_switch_to_fallback+0x35/0xda0 [ 238.360609][ T7728] [ 238.360609][ T7728] but task is already holding lock: [ 238.368101][ T7728] ffff888024b98258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_sendmsg+0x55/0x530 [ 238.377085][ T7728] [ 238.377085][ T7728] which lock already depends on the new lock. [ 238.377085][ T7728] [ 238.387509][ T7728] [ 238.387509][ T7728] the existing dependency chain (in reverse order) is: [ 238.396567][ T7728] [ 238.396567][ T7728] -> #2 (sk_lock-AF_INET){+.+.}-{0:0}: [ 238.404222][ T7728] lock_acquire+0x116/0x2f0 [ 238.409241][ T7728] lock_sock_nested+0x48/0x100 [ 238.414530][ T7728] do_ip_setsockopt+0x17e9/0x39c0 [ 238.420075][ T7728] ip_setsockopt+0x63/0x100 [ 238.425098][ T7728] do_sock_setsockopt+0x3b1/0x710 [ 238.430637][ T7728] __x64_sys_setsockopt+0x1ee/0x280 [ 238.436349][ T7728] do_syscall_64+0xf3/0x230 [ 238.441365][ T7728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.447771][ T7728] [ 238.447771][ T7728] -> #1 (rtnl_mutex){+.+.}-{4:4}: [ 238.454987][ T7728] lock_acquire+0x116/0x2f0 [ 238.460012][ T7728] __mutex_lock+0x1a5/0x10c0 [ 238.465122][ T7728] start_sync_thread+0xde/0x2d60 [ 238.470586][ T7728] do_ip_vs_set_ctl+0x48e/0xe50 [ 238.475962][ T7728] nf_setsockopt+0x295/0x2c0 [ 238.481071][ T7728] smc_setsockopt+0x25c/0xd50 [ 238.486284][ T7728] do_sock_setsockopt+0x3b1/0x710 [ 238.491816][ T7728] __x64_sys_setsockopt+0x1ee/0x280 [ 238.497523][ T7728] do_syscall_64+0xf3/0x230 [ 238.502537][ T7728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.508965][ T7728] [ 238.508965][ T7728] -> #0 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 238.517567][ T7728] validate_chain+0xa69/0x24e0 [ 238.522849][ T7728] __lock_acquire+0xad5/0xd80 [ 238.528038][ T7728] lock_acquire+0x116/0x2f0 [ 238.533066][ T7728] __mutex_lock+0x1a5/0x10c0 [ 238.538174][ T7728] smc_switch_to_fallback+0x35/0xda0 [ 238.543972][ T7728] smc_sendmsg+0x11f/0x530 [ 238.548911][ T7728] __sock_sendmsg+0x221/0x270 [ 238.554107][ T7728] __sys_sendto+0x365/0x4c0 [ 238.559131][ T7728] __x64_sys_sendto+0xde/0x100 [ 238.564415][ T7728] do_syscall_64+0xf3/0x230 [ 238.569439][ T7728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.575867][ T7728] [ 238.575867][ T7728] other info that might help us debug this: [ 238.575867][ T7728] [ 238.586083][ T7728] Chain exists of: [ 238.586083][ T7728] &smc->clcsock_release_lock --> rtnl_mutex --> sk_lock-AF_INET [ 238.586083][ T7728] [ 238.599638][ T7728] Possible unsafe locking scenario: [ 238.599638][ T7728] [ 238.607077][ T7728] CPU0 CPU1 [ 238.612441][ T7728] ---- ---- [ 238.617795][ T7728] lock(sk_lock-AF_INET); [ 238.622206][ T7728] lock(rtnl_mutex); [ 238.628711][ T7728] lock(sk_lock-AF_INET); [ 238.635638][ T7728] lock(&smc->clcsock_release_lock); [ 238.641000][ T7728] [ 238.641000][ T7728] *** DEADLOCK *** [ 238.641000][ T7728] [ 238.649166][ T7728] 1 lock held by syz.4.566/7728: [ 238.654090][ T7728] #0: ffff888024b98258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_sendmsg+0x55/0x530 [ 238.663332][ T7728] [ 238.663332][ T7728] stack backtrace: [ 238.669228][ T7728] CPU: 1 UID: 0 PID: 7728 Comm: syz.4.566 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 238.669247][ T7728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 238.669257][ T7728] Call Trace: [ 238.669263][ T7728] [ 238.669269][ T7728] dump_stack_lvl+0x241/0x360 [ 238.669294][ T7728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.669315][ T7728] ? __pfx__printk+0x10/0x10 [ 238.669336][ T7728] ? print_lock+0x171/0x1a0 [ 238.669355][ T7728] print_circular_bug+0x2e1/0x300 [ 238.669376][ T7728] check_noncircular+0x142/0x160 [ 238.669397][ T7728] validate_chain+0xa69/0x24e0 [ 238.669420][ T7728] ? look_up_lock_class+0x7b/0x170 [ 238.669438][ T7728] ? register_lock_class+0x54/0x330 [ 238.669454][ T7728] __lock_acquire+0xad5/0xd80 [ 238.669472][ T7728] lock_acquire+0x116/0x2f0 [ 238.669485][ T7728] ? smc_switch_to_fallback+0x35/0xda0 [ 238.669506][ T7728] __mutex_lock+0x1a5/0x10c0 [ 238.669524][ T7728] ? smc_switch_to_fallback+0x35/0xda0 [ 238.669542][ T7728] ? register_lock_class+0x54/0x330 [ 238.669558][ T7728] ? smc_switch_to_fallback+0x35/0xda0 [ 238.669574][ T7728] ? __pfx___mutex_lock+0x10/0x10 [ 238.669595][ T7728] ? __local_bh_enable_ip+0x168/0x200 [ 238.669609][ T7728] ? lockdep_hardirqs_on+0x9d/0x150 [ 238.669626][ T7728] ? __local_bh_enable_ip+0x168/0x200 [ 238.669641][ T7728] smc_switch_to_fallback+0x35/0xda0 [ 238.669658][ T7728] ? do_raw_spin_unlock+0x13c/0x8b0 [ 238.669681][ T7728] smc_sendmsg+0x11f/0x530 [ 238.669698][ T7728] ? __pfx_smc_sendmsg+0x10/0x10 [ 238.669713][ T7728] __sock_sendmsg+0x221/0x270 [ 238.669734][ T7728] __sys_sendto+0x365/0x4c0 [ 238.669749][ T7728] ? __pfx___sys_sendto+0x10/0x10 [ 238.669761][ T7728] ? do_futex+0x37c/0x5a0 [ 238.669795][ T7728] __x64_sys_sendto+0xde/0x100 [ 238.669809][ T7728] do_syscall_64+0xf3/0x230 [ 238.669827][ T7728] ? clear_bhb_loop+0x45/0xa0 [ 238.669843][ T7728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.669858][ T7728] RIP: 0033:0x7f5cd3b8e169 [ 238.669872][ T7728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.669884][ T7728] RSP: 002b:00007f5cd4ada038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 238.669899][ T7728] RAX: ffffffffffffffda RBX: 00007f5cd3db5fa0 RCX: 00007f5cd3b8e169 [ 238.669910][ T7728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 238.669919][ T7728] RBP: 00007f5cd3c10a68 R08: 0000200000e68000 R09: 0000000000000010 [ 238.669929][ T7728] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000000 [ 238.669938][ T7728] R13: 0000000000000000 R14: 00007f5cd3db5fa0 R15: 00007f5cd3edfa28 [ 238.669953][ T7728] [ 238.700215][ T7707] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 239.004660][ T5195] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 239.052262][ T5195] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 239.082612][ T5195] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 239.125981][ T9] usb 2-1: USB disconnect, device number 42 [ 239.132143][ T6119] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 239.141119][ T5195] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 239.155377][ T7730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.167962][ T7730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.183815][ T5195] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 239.536048][ T5932] usb 1-1: USB disconnect, device number 32 [ 239.543632][ T5932] usblp0: removed