last executing test programs: 3m18.380697572s ago: executing program 0 (id=209): sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x2c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) 3m17.602260761s ago: executing program 0 (id=213): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex=r3, @multicast2}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x5, 0x1, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000008c0)=0x8, 0x4) 3m16.588503546s ago: executing program 0 (id=218): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x20, 0x5, 0xe}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000"]) 3m16.374139633s ago: executing program 0 (id=220): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380), 0x2000401, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) utime(&(0x7f0000000040)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f0000000800)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\x00\x00\x00\x00\x00\a\xff8\xeb\xf1\xd0\xce\b\x9d\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t94\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a+\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6PT\xd4\xb5X]\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\xf9\r\t\xef{h\xb0\xc0:\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933\x9a\xde\xf9\xe4\xaa\xfe3\x16O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04\f\x00\x00\x00\x00\x00\x00\x00\\#\xf8O\fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\xb7\xe6j}JD\xc6\xee\xc4\x18\xf29\xa9U\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n&\x00\x00\x01\x00^\xc0\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xf5\xc3\x06\x9d2\x94/\x11\x05g\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\xf7\xc6\x13\xf9I?^\xf3,\",a\x92\xb1\xf7\xf7\x83\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4V\xda!v\xd21\v\x99HG\xdfx\x1cPl\t\x16\x82\xfd\xf8W\xc5\x91~\xec\xbc\x9d\xe2OS\xa9\xf2ak0\xbd\xbc\xd3O\xf2\xa3\x7f\x8a<\x00\xb4\xa6\xea\xbe\x05 \xed\xbaF\x18\xaf\xb0\xc1\x87\xc0\xab\xa0\xf2\xea\xe4\xf9|\x95\x1c\x80&\x10\xc6\x7f\xd0\xd1hE\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x003*\x80\x8d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00(\xfbm\x83\x15\xd2\xa2\xff\x81\x00\x00\x00\x00', 0x2) fallocate(r1, 0x0, 0x0, 0x400001) fcntl$addseals(r1, 0x409, 0x8) copy_file_range(r1, 0x0, r1, &(0x7f0000000080)=0xb, 0x8, 0x0) 3m15.859839412s ago: executing program 0 (id=223): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b, 0x0, 0x0, 0x10, 0x0, @value}, 0xa1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x200000000000003, {0x0, 0xf0, 0x1}, {0x2, 0x1}, 0xfe, 0x1}, {0x0, 0x1, {0x1, 0xf0}, {0x0, 0x1, 0x2}, 0x1, 0x2}], 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r5, {0xfff2, 0x4}, {0x0, 0x4}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4050) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x6) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f0000000380), r9}}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01032abd7000fbdbdf2516000007400001803c000280080004000900000008000200f800000008000200e300000008000400ec000000080004000dab6d180800010018000000080003000e000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0xe4, r11, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80c0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8a3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x85}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r10, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r13, 0x420, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}}, 0x4080) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000006c0)=@o_path={&(0x7f0000000280)='./file0\x00', r14, 0x4000, r10}, 0x18) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000954700000000000a20000000000a00000000000000000000000000000900010073797a300000000024030000090a010400000000000000000000fffc08000a40000000000900020073797a30000000000900010073797a30000000000800054000000021e8020980200002"], 0x36c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3m15.556874855s ago: executing program 0 (id=225): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010001305000000000400000000000000", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES8=r0], 0x3c}}, 0x20040000) 3m14.981311268s ago: executing program 32 (id=225): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010001305000000000400000000000000", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES8=r0], 0x3c}}, 0x20040000) 1m55.437855302s ago: executing program 4 (id=591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000900ffffac1414aa060001000a00"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 1m54.769204422s ago: executing program 4 (id=594): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) fchown(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x242, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf, 0x0, 0xe, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x2, 0xa, {0x9, 0x21, 0x6, 0x1, 0x1, {0x22, 0x472}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xe2, 0x0, 0x6}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x32, 0x96, 0xcf, 0xff, 0x4}, 0x99, &(0x7f0000000200)={0x5, 0xf, 0x99, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x8, 0x6, 0x101}, @ext_cap={0x7, 0x10, 0x2, 0x19, 0x0, 0x1, 0xff}, @ptm_cap={0x3}, @generic={0x80, 0x10, 0xb, "d0e26f9f89636666a4bfbfcc612c324281172548bcbda82bfd8c3927220b34cd3eed5f78b6ce6aa8477d08fae10643f21db9edee0ef51e7ecbbe5467afaf8075c58d139bf0c384065bdc17fa17b702bcaeb050141a0793bc7a667d50ca89db88b8edb7637d54567ad995267a94fe04492b401f97c0219a944a868f68bc"}]}, 0x7, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x5a, &(0x7f0000000300)=@string={0x5a, 0x3, "3c8dd1a70409ea270efd8f18848ef85c4e8d842894adc639ecccbd1a8e05ffa1f96cc88858d5e49a90a266341d79a8ec9874dc8262df130d5d7d9e2267786bf0c2c03dfe4e2a6277443f5822b2624849bdc82371a5dd4b1f"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x408}}]}) unshare(0x22020400) r2 = syz_pidfd_open(0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400200000000000000020"], 0x1c, 0x0) unshare(0x42000000) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) 1m52.556817559s ago: executing program 4 (id=606): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x14, r1, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) (fail_nth: 10) 1m52.006629546s ago: executing program 4 (id=607): ioprio_set$pid(0x2, 0x0, 0x0) syz_usbip_server_init(0x1) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xd, 0x80200) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x7fff, 0x8, 0x3010, 0x7, 0x8, 0x7, 0x2, 0x5}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006080)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x40020020, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004080)="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", 0x2000, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x6, {0xe, 0x83d7, 0x0, {0x400000005, 0xf8d42d2, 0x3, 0x2, 0x8000, 0x6, 0x5dfb5f44, 0x8, 0x4, 0x1000, 0xffffffff, 0x0, 0x0, 0x972e, 0x7fffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', 0x0, 0x100) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x74, 0x2, 0x6, 0x1, 0x6000000, 0x0, {0x5, 0x0, 0x7ff}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}}, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x8}, 0x20) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000001010102000000000000000001000000100002800c000280052001001100000008001a40004000fc0c0019800800020008000000080003"], 0x40}}, 0x0) 1m50.304605497s ago: executing program 4 (id=616): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x3fb, 0x100, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r3, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, r5, 0x0, 0x1, 0x260dec, 0x63, 0x0, 0x5}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000400)={r8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x2c, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, @in6={0xa, 0x4e20, 0x9, @local, 0x5}]}, &(0x7f0000000100)=0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1m50.122791739s ago: executing program 4 (id=618): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000019080)={0x43, 0x3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getuid() sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000240)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}], 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffff57ea426d9c278a2f0000000000000000000000000000000000000000000000000000000000ffffffffffffffff00"/112], 0xb8}}, 0x4004) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x20004800) read$FUSE(0xffffffffffffffff, &(0x7f000000c400)={0x2020}, 0x2020) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x9, @vifc_lcl_ifindex, @local}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r5, r4, 0x0, 0x5) 1m49.646837597s ago: executing program 33 (id=618): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000019080)={0x43, 0x3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getuid() sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000240)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}], 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffff57ea426d9c278a2f0000000000000000000000000000000000000000000000000000000000ffffffffffffffff00"/112], 0xb8}}, 0x4004) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x20004800) read$FUSE(0xffffffffffffffff, &(0x7f000000c400)={0x2020}, 0x2020) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x9, @vifc_lcl_ifindex, @local}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r5, r4, 0x0, 0x5) 9.236121244s ago: executing program 3 (id=1153): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000063c0)={0x20, 0x2c, 0x525, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x17, 0x0, 0x0, @uid}, @typed={0x4, 0x1d}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc0c4) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x52010}, 0x4) 8.648760626s ago: executing program 3 (id=1155): syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0xa5, 0xaa, 0x40, 0x1b80, 0xe396, 0xa7b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x5b, 0xd1}}]}}]}}, 0x0) close(0x3) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 8.031138808s ago: executing program 6 (id=1163): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000006840)=[{{0x0, 0xf5, &(0x7f0000003080)=[{&(0x7f0000000440)="5ff17db605ade75363a0530733408850aaf311cbe0", 0x7ffff000}, {&(0x7f0000000600)="8882d1dc72424e1fd8dd4b9a691db9a3f2d539b0ed59d1d1b67695f356653c71087b5fe7c96758a0f47f379517352fe067a0c327617260dcd520", 0x3a}, {&(0x7f0000002c40)='E', 0x1}], 0x3}}], 0x1, 0x0) 7.4121245s ago: executing program 6 (id=1166): r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x2001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x90e, &(0x7f0000000380)={0x0, 0x3316, 0x1, 0x801, 0x34e}, &(0x7f0000000240)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xf, 0x7fff0000}]}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r6 = accept(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r6, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0xf0ffffffffffffff) fallocate(0xffffffffffffffff, 0x0, 0x7f, 0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x6, 0x0, 0x20000000}}) close_range(r4, r0, 0x0) 5.536703472s ago: executing program 6 (id=1170): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0xa, 0x1, 0xa}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009402"]) 5.379798905s ago: executing program 2 (id=1172): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x4) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)=ANY=[@ANYBLOB="280000002000010300000000400000000200000400000007020000000c000c400007000000000001885687378591098444b7e8f7c48974830be6da420a6b4133a5140f7133889dbccde0a401f2488a46ab6990a632"], 0x28}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x38}, 0x1, 0x1200000000000000, 0x0, 0x4c050}, 0x0) 5.256807469s ago: executing program 6 (id=1174): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000002340)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r1) 5.194011131s ago: executing program 2 (id=1176): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) getpid() (async) r2 = getpid() syz_pidfd_open(r2, 0x0) syz_pidfd_open(r2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYRES32=r2], 0x78}}, 0x0) 5.117586242s ago: executing program 5 (id=1177): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="00abbe1b5275d903040000000000bc9b86b6b28004e370aec223eb98000000000000000000004000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e00010069703665727370616e00000018000280140007000000000000000000000000000000000004000100aaaaaaaaaa000000"], 0x58}}, 0x0) r5 = memfd_create(&(0x7f0000000580)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\x00\x00\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~\xcc\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEGf]\x1b\x8a_\x80\x15\xad9\x85\f\xeb\x94\xe6\xc1\x1f\xc4\xdd\x06\x9b\x81v\xc5\xc5', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0xc4c20000) process_vm_writev(0x0, &(0x7f0000000680)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.854123547s ago: executing program 2 (id=1179): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000c0045000061000000000011907800000000e000000100004e20004d907804000000040000008900000000000000426a96f7a72fef8972d9bdfb4a0d75a27a61d91c50a2d997197876fa2d513b9405df960a0e74490869682de84f385bdea7dde63dbc"], 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000d6a9cc2ffd8870be371f5d754121277e691a18bdad60b135bdb36ac4a60b8bc9146a3ab51e7e5c9b227696197f1d179d4f12291ba1e16d580561e420cfa858cd168c1e91fd91f9361ad028d504555d43ba29d938545dba13"], 0x48) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) (async) r3 = syz_open_pts(r2, 0x8000) r4 = dup3(r3, r2, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) (async) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) (async, rerun: 32) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x800, 0x4, 0x1, 0x7f, 0x3, 0x0, 0x0, 0x4, 0x6}}, 0x50) (async, rerun: 32) ppoll(&(0x7f00000001c0)=[{r0, 0x1b218}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2600, 0x0) (rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r6, 0x3b83, &(0x7f0000000080)={0x28, 0x4, r7, r7, 0xfffffffffffffff9, 0xb, 0x8}) (async) r8 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000004050100f5050102030109022c0001230000002abb868201b5e145003d43b21210000509020909b2ad7b990ea2699b799ca52107f46552ac4796c17d0ed95c275887c90b4c368faa55eb1b097d00"/95], 0x0) syz_usb_disconnect(r8) 4.824415503s ago: executing program 6 (id=1180): sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x2c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x88, 0x100000000000000}]}, 0x68) 4.73648958s ago: executing program 5 (id=1182): add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01e90000ce", 0x5, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x870}}) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x5) connect$inet(r6, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f0000000180)={0x1000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r8}}, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000300012800b00010065"], 0x50}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2000) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000540)='cpu.pressure\x00', 0x2, 0x0) 4.650102599s ago: executing program 3 (id=1183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000006c0000000000000a44000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000001800048014000180090001006d657461"], 0x6c}, 0x1, 0x0, 0x0, 0x24040800}, 0x48080) 4.553452289s ago: executing program 2 (id=1184): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) creat(&(0x7f00000001c0)='./file0\x00', 0x8) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x6}, [], {}, [], {0x10, 0x3}}, 0x24, 0x2) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (fail_nth: 6) 3.620752018s ago: executing program 2 (id=1185): syz_usb_connect(0x4, 0x15, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x6, 0x2, 0xd, 0x20, 0xfc5, 0x1227, 0xf44a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x81, 0x3, 0x80, 0x3, [{{0x9, 0x4, 0x6f, 0x7, 0x1, 0x97, 0x1a, 0x4a, 0x8, [], [{{0x9, 0x5, 0x5, 0x2, 0x400, 0x0, 0x5, 0x2}}]}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, &(0x7f0000000100)=@string={0x0, 0x3, "1eee7bbfcbe9e91c87b22bf7220f54cc81608ba5479efc4fe5bc7b97517c9a39852331be76771f1b6b910ceb0cda5c4ca23522851d67008576c81a666b9d96bd54487999cb2a945778ebae8bb4d50605afccd3646ce14500b9"}}, {0x0, &(0x7f0000000040)=@string={0x0, 0x3, "43281756db4ddcdd19428e8a161339b7015c8e547d04cfe2e3cf3513e2240dd1caf429d9d977c94bf3661ae105611ecd"}}, {0x0, &(0x7f0000000080)=@lang_id={0x0, 0x3, 0x5400}}]}) syz_usb_connect$cdc_ncm(0x1, 0x7d, &(0x7f0000000180)={{0x12, 0x1, 0x311, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x3, 0x50, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "261c89"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x40, 0xfff, 0x7}, {0x6, 0x24, 0x1a, 0x8, 0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x66f2, 0x4, 0x81}, @acm={0x4, 0x24, 0x2, 0x10}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xfd, 0xa, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0xe20, 0x81, 0x8, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0x1, 0x7}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x8, 0x4, 0x5, 0x10, 0x7}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x2, [{0x10, &(0x7f0000000240)=@string={0x10, 0x3, "3acc631de6aeb4d8294f5bc933e3"}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "e263d2dc15416ee7dafd"}}]}) 3.615167319s ago: executing program 6 (id=1186): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902de74532721a197261c26640001000000000904290202b4134375a1446461c03a918cbb0009050402100000fa11a2bfb1388900d563ad6e3f0cef118f3d5784d75d1ab00856d8063337f1492902f47bc6d75d9b6369056685723c17377cbd3e61c24d51149c9d2a2c9457bea4a7e0f3eb14c05ab59fb1d72b9593adbbd347f98a3c188f47f4da779b273dcf1d32e06c27e28621282b7a73cf331d1a4f1c814a6e626d613dcae20d95e3fd50c5adedafcbeaa1d2ad03c4d25c900eca09ce98cf2c79da84bd032037ce093450a02b4399375b7a"], 0x0) 3.573371805s ago: executing program 3 (id=1187): r0 = socket$nl_crypto(0x10, 0x3, 0x15) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/97, 0x61}], 0x1, 0x9, 0x1) unlink(0x0) 3.125196071s ago: executing program 34 (id=1186): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902de74532721a197261c26640001000000000904290202b4134375a1446461c03a918cbb0009050402100000fa11a2bfb1388900d563ad6e3f0cef118f3d5784d75d1ab00856d8063337f1492902f47bc6d75d9b6369056685723c17377cbd3e61c24d51149c9d2a2c9457bea4a7e0f3eb14c05ab59fb1d72b9593adbbd347f98a3c188f47f4da779b273dcf1d32e06c27e28621282b7a73cf331d1a4f1c814a6e626d613dcae20d95e3fd50c5adedafcbeaa1d2ad03c4d25c900eca09ce98cf2c79da84bd032037ce093450a02b4399375b7a"], 0x0) 3.076739732s ago: executing program 3 (id=1189): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_io_uring_setup(0x360b, &(0x7f0000001040), &(0x7f0000000340), &(0x7f00000005c0)) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000016c0)={@remote, 0x0, 0x0, 0x2, 0x0, 0x9, 0xa}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000d9bea440830447374d52000000010902"], 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000006840)=[{{0x0, 0xf5, &(0x7f0000003080)=[{&(0x7f0000000440)="5ff17db605ade75363a0530733408850aaf311cbe0", 0x7ffff000}, {&(0x7f0000000600)="8882d1dc72424e1fd8dd4b9a691db9a3f2d539b0ed59d1d1b67695f356653c71087b5fe7c96758a0f47f379517352fe067a0c327617260dcd520", 0x3a}, {&(0x7f0000002c40)='E', 0x1}], 0x3}}], 0x1, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r6, 0x8010671f, &(0x7f0000000280)={&(0x7f0000000500)=""/46, 0x2e}) ioctl$TIOCSETD(r3, 0x541b, &(0x7f0000000ec0)) 2.651416821s ago: executing program 1 (id=1191): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x80ff}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x60000002}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0xf7, 0x0, 0x0, 0x70bd28, 0x23e}]}, 0x80}, 0x1, 0x7}, 0x0) 2.304640207s ago: executing program 1 (id=1192): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="062586c0d44dc999855a9d3cefd7768dfec2125480724340518100000000000d00"/45, 0x2d}, {&(0x7f0000000180)="976005b7", 0x4}], 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x4}, 0x8) 2.071110123s ago: executing program 1 (id=1193): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffff9, @loopback, 0x517b, 0x203}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe800000000000000600000000005400fe8000000000000000000000000000aa00000000c9"], 0x0) 1.856819522s ago: executing program 5 (id=1194): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000803, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x3, "ab8bbf4459ab8a791d9eaa0db932aa306c6af2bfe74391000000000000e7ffff", 0x38575844}) 1.708978566s ago: executing program 1 (id=1195): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x511902, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x48, 0x80, 0xfffffffc, 0x3ff, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @empty}}}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffd) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x796, 0x0, 0x0, 0x7fff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'lo\x00'}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000000)="36d8af10000f20e066355a0020000f22e0360f0144f23f7cec10a7148a10a7148a758a67f32e0f23e966b8010000000f01c1dbe20f01c3f0290b", 0x3a}], 0x1, 0x54, 0x0, 0x19) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000080)=ANY=[]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r3]) 1.628512423s ago: executing program 5 (id=1196): openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0xf8, r2, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r1, &(0x7f0000000100)={0x11, 0x4, r2}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$can_bcm(0x1d, 0x2, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x0, 0x0}) r4 = syz_io_uring_setup(0x1458, &(0x7f0000000240)={0x0, 0x4, 0x10180, 0x2000, 0x200}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x16101, 0x1}) io_uring_enter(r4, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) 637.869489ms ago: executing program 5 (id=1197): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x4001, 0x3, 0x350, 0x0, 0x0, 0x148, 0x0, 0x148, 0x2b8, 0x240, 0x240, 0x2b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0xfa03, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x1, 0x2, 0x10, 0x0, 'syz0\x00', 0xfb}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00', {0x5}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'vxcan1\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) 500.489768ms ago: executing program 2 (id=1198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x20, 0x5, 0xe}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009002"]) 394.131196ms ago: executing program 1 (id=1199): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000004000069105f0000000000bc002000000000009500000000000000ed4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad53652de3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161260500000000000000a4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0xd085, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0xcb60, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map, 0x4, 0x32, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$key(0xf, 0x3, 0x2) r3 = dup3(r2, r1, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) dup3(r0, r0, 0x80000) syz_open_dev$audion(&(0x7f0000000040), 0x4, 0x511000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r0, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000700)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000740)=[0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0], 0x0, 0xf, &(0x7f00000007c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xe8, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x20000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r4, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 340.593422ms ago: executing program 5 (id=1200): ftruncate(0xffffffffffffffff, 0x9) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0xfffd, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r3, 0x325, 0x70bd2c, 0x4, {{}, {@void, @void, @val={0xc, 0x117}}}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa4dbf5e25bbbb0800450000380000000000018178ac1e0001ac1414aa030090781200183f250000000000000063ce2f8ccc87a346a8ceffebb165cd1429ac1414"], 0x0) setsockopt(r0, 0xff, 0x1, &(0x7f0000000000)="4feb", 0x2) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x0) r4 = io_uring_setup(0x1de1, &(0x7f0000000000)={0x0, 0x8e18, 0x800, 0x1, 0x14e}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r6 = epoll_create(0x3e4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x20000001}) write$vga_arbiter(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r5, &(0x7f0000000100)=@unlock_all, 0xb) (async) write$vga_arbiter(r5, &(0x7f0000000100)=@unlock_all, 0xb) r7 = syz_io_uring_setup(0x4004172, &(0x7f0000000780)={0x0, 0x4f5e, 0x40, 0x0, 0x358, 0x0, r4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) (async) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, {0x0, r13}}) (async) syz_io_uring_submit(r11, r12, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, {0x0, r13}}) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x10, 0x4007, @fd, 0x2, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/80, 0x50}, {&(0x7f00000001c0)=""/8, 0x8}, {&(0x7f00000002c0)=""/197, 0xc5}, {&(0x7f00000003c0)=""/3, 0x3}, {&(0x7f0000000400)=""/99, 0x63}, {&(0x7f0000000480)=""/139, 0x8b}, {&(0x7f0000000540)=""/178, 0xb2}, {&(0x7f0000000600)=""/140, 0x8c}], 0x8, 0x1, 0x1, {0x0, r13}}) io_uring_enter(r7, 0x567, 0x0, 0x0, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) 43.765307ms ago: executing program 1 (id=1201): syz_clone(0x1c2000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "7442ea930100", "a91e54bbd96f62a2960af2f6be251fec0c7a88983a22ba19ee572dcd5515009a", '\x00', "1a9600"}, 0x38) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000004500001c0000000000f08fea531e0001e0000001167c9078e000000200000000000000"], 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=1202): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010001fff28bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8254010088520300200012800b000100697036746e6c000010000280040013000500090029000000080004"], 0x48}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000140)={0x7, 0xffffff44, 0x101, 0x0, 0x12}) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xc4bc, 0x10100, 0x0, 0xbe}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000006100)={'ip_vti0\x00', &(0x7f0000006080)={'erspan0\x00', 0x0, 0xa0, 0x63897bfdb8769957, 0x5, 0x8, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @empty, @empty}}}}) pread64(r0, &(0x7f0000000180)=""/79, 0x4f, 0x2000000000000001) kernel console output (not intermixed with test programs): x10/0x10 [ 241.804762][ T8385] ? ksys_write+0x22a/0x2b0 [ 241.804799][ T8385] ? __pfx_set_user_sigmask+0x10/0x10 [ 241.804816][ T8385] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 241.804838][ T8385] ? __fget_files+0x2a/0x410 [ 241.804858][ T8385] __se_sys_pselect6+0x321/0x3e0 [ 241.804887][ T8385] ? __pfx___se_sys_pselect6+0x10/0x10 [ 241.804911][ T8385] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 241.804933][ T8385] ? do_syscall_64+0x100/0x230 [ 241.804956][ T8385] ? __x64_sys_pselect6+0x21/0xf0 [ 241.804980][ T8385] do_syscall_64+0xf3/0x230 [ 241.805001][ T8385] ? clear_bhb_loop+0x35/0x90 [ 241.805025][ T8385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.805049][ T8385] RIP: 0033:0x7f49a418cde9 [ 241.805062][ T8385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.805074][ T8385] RSP: 002b:00007f49a508c038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 241.805097][ T8385] RAX: ffffffffffffffda RBX: 00007f49a43a6080 RCX: 00007f49a418cde9 [ 241.805108][ T8385] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000040 [ 241.805118][ T8385] RBP: 00007f49a508c090 R08: 0000000000000000 R09: 0000000000000000 [ 241.805127][ T8385] R10: 00004000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 241.805137][ T8385] R13: 0000000000000000 R14: 00007f49a43a6080 R15: 00007f49a44cfa28 [ 241.805157][ T8385] [ 242.017214][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.058623][ T8392] netlink: 16 bytes leftover after parsing attributes in process `syz.6.727'. [ 242.242696][ T8] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 242.259611][ T8] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 242.284604][ T8] usb 2-1: config 0 has no interface number 0 [ 242.291994][ T8] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.314009][ T8] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 242.325578][ T8] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 242.335583][ T8] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 242.344807][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.357562][ T8] usb 2-1: config 0 descriptor?? [ 242.646365][ T8378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.675951][ T8378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.946003][ T8] usb 2-1: USB disconnect, device number 33 [ 243.010549][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'. [ 243.039806][ T46] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 243.217314][ T46] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 243.234384][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.338953][ T46] usb 4-1: config 0 descriptor?? [ 243.364459][ T46] cp210x 4-1:0.0: cp210x converter detected [ 243.560592][ T46] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 243.562672][ T8429] netlink: 16 bytes leftover after parsing attributes in process `syz.6.740'. [ 243.577751][ T46] cp210x 4-1:0.0: querying part number failed [ 243.589932][ T46] usb 4-1: cp210x converter now attached to ttyUSB0 [ 243.610445][ T46] usb 4-1: USB disconnect, device number 44 [ 243.640040][ T8431] (unnamed net_device) (uninitialized): option ad_select: invalid value (254) [ 243.640923][ T46] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 243.666557][ T5895] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 243.680237][ T46] cp210x 4-1:0.0: device disconnected [ 243.730350][ T5147] Bluetooth: hci2: hardware error 0x01 [ 243.824875][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 243.837102][ T5895] usb 3-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 243.873690][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.903499][ T5895] usb 3-1: Product: syz [ 243.928485][ T5895] usb 3-1: Manufacturer: syz [ 243.933183][ T5895] usb 3-1: SerialNumber: syz [ 243.958336][ T5895] usb 3-1: config 0 descriptor?? [ 243.978477][ T5895] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 244.190545][ T5895] gspca_sn9c2028: read1 error -32 [ 244.384930][ T46] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 244.398704][ T5895] gspca_sn9c2028: read1 error -71 [ 244.403969][ T5895] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -71 [ 244.443014][ T5895] usb 3-1: USB disconnect, device number 32 [ 244.535303][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 244.575214][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 244.604924][ T46] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 244.645293][ T46] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 244.664370][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.672925][ T8463] netlink: 16 bytes leftover after parsing attributes in process `syz.6.753'. [ 244.692072][ T46] usb 2-1: Product: syz [ 244.700816][ T46] usb 2-1: Manufacturer: syz [ 244.713152][ T46] usb 2-1: SerialNumber: syz [ 244.729989][ T46] usb 2-1: config 0 descriptor?? [ 244.820364][ T8] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 245.001123][ T8] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 245.024421][ T8] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 245.025205][ T5895] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 245.066142][ T8] usb 6-1: config 0 has no interface number 0 [ 245.067032][ T8481] xt_CONNSECMARK: invalid mode: 0 [ 245.082782][ T8] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.121378][ T8] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 245.148939][ T8] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 245.202776][ T8] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 245.210311][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 245.231886][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.240144][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.240179][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.284811][ T8] usb 6-1: config 0 descriptor?? [ 245.297164][ T5895] usb 4-1: New USB device found, idVendor=2453, idProduct=0100, bcdDevice= 0.00 [ 245.327733][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.356507][ T5895] usb 4-1: config 0 descriptor?? [ 245.474800][ T5892] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 245.501281][ T8460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.514660][ T8460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.578698][ T8467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.590954][ T8] usb 6-1: USB disconnect, device number 17 [ 245.605233][ T8467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.643276][ T8467] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 245.659276][ T5892] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 245.680876][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.718963][ T5892] usb 7-1: config 0 descriptor?? [ 245.731710][ T5892] cp210x 7-1:0.0: cp210x converter detected [ 245.792167][ T8498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.804518][ T5147] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 245.834573][ T8498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.943993][ T8] hid-generic 0000:0003:0000.0010: item fetching failed at offset 0/2 [ 245.953243][ T8] hid-generic 0000:0003:0000.0010: probe with driver hid-generic failed with error -22 [ 245.980358][ T5892] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 245.992892][ T5892] cp210x 7-1:0.0: querying part number failed [ 246.011444][ T5892] usb 7-1: cp210x converter now attached to ttyUSB0 [ 246.033590][ T5892] usb 7-1: USB disconnect, device number 5 [ 246.052975][ T5892] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 246.073838][ T5892] cp210x 7-1:0.0: device disconnected [ 246.476252][ T8515] netlink: 88 bytes leftover after parsing attributes in process `syz.5.762'. [ 246.963162][ T5838] usb 2-1: USB disconnect, device number 34 [ 247.074774][ T25] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 247.211493][ T8538] bond1: entered promiscuous mode [ 247.219207][ T8538] bond1: entered allmulticast mode [ 247.225694][ T8538] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.254538][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 247.280451][ T25] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 247.288565][ T8541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.768'. [ 247.297934][ T25] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 247.297965][ T25] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 247.329914][ T25] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 247.339700][ T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 247.353582][ T25] usb 6-1: config 0 has no interface number 0 [ 247.361974][ T25] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 247.381010][ T25] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 247.391895][ T25] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 247.407560][ T25] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 247.424604][ T25] usb 6-1: config 0 interface 125 has no altsetting 0 [ 247.451842][ T25] usb 6-1: config 0 interface 125 has no altsetting 2 [ 247.470349][ T25] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 247.484991][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.501991][ T25] usb 6-1: Product: syz [ 247.513876][ T25] usb 6-1: Manufacturer: syz [ 247.519370][ T25] usb 6-1: SerialNumber: syz [ 247.537668][ T25] usb 6-1: config 0 descriptor?? [ 247.561743][ T25] usb 6-1: selecting invalid altsetting 2 [ 247.716307][ T8538] bond1 (unregistering): Released all slaves [ 248.635741][ T25] get_1284_register timeout [ 248.644603][ T25] uss720 6-1:0.125: probe with driver uss720 failed with error -5 [ 248.644686][ C1] usb 6-1: async_complete: urb error -104 [ 248.658361][ C1] usb 6-1: async_complete: urb error -104 [ 248.664154][ C1] usb 6-1: async_complete: urb error -104 [ 248.669945][ C1] usb 6-1: async_complete: urb error -104 [ 248.675694][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.715956][ T5895] usbhid 4-1:0.0: can't add hid device: -71 [ 248.723653][ T5895] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 248.779796][ T5895] usb 4-1: USB disconnect, device number 45 [ 249.034484][ T5892] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 249.169962][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 249.169982][ T29] audit: type=1800 audit(1739378847.554:34): pid=8569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.775" name="file1" dev="tmpfs" ino=813 res=0 errno=0 [ 249.174471][ T5895] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 249.246574][ T5892] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 249.274727][ T5892] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 249.297573][ T5892] usb 2-1: config 0 has no interface number 0 [ 249.314505][ T5892] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.358335][ T5892] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 249.384718][ T5892] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 249.404403][ T5892] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 249.424117][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.426444][ T5895] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 249.464516][ T5892] usb 2-1: config 0 descriptor?? [ 249.469760][ T8] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 249.479415][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.535040][ T5895] usb 4-1: config 0 descriptor?? [ 249.557364][ T5895] cp210x 4-1:0.0: cp210x converter detected [ 249.644692][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 249.656697][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 249.685354][ T8559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.694048][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 249.722309][ T8559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.735844][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 249.767616][ T5892] usb 2-1: USB disconnect, device number 35 [ 249.775782][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 249.778977][ T5895] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 249.821188][ T8] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 249.823604][ T5895] cp210x 4-1:0.0: querying part number failed [ 249.843693][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.860970][ T5895] usb 4-1: cp210x converter now attached to ttyUSB0 [ 249.888040][ T5895] usb 4-1: USB disconnect, device number 46 [ 249.895068][ T8] usb 3-1: Product: syz [ 249.899288][ T8] usb 3-1: Manufacturer: syz [ 249.903919][ T8] usb 3-1: SerialNumber: syz [ 249.945520][ T5895] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 249.969537][ T5895] cp210x 4-1:0.0: device disconnected [ 249.988233][ T8581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.997207][ T8581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.171745][ T25] usb 6-1: USB disconnect, device number 18 [ 250.197362][ T8] usb 3-1: config 0 descriptor?? [ 250.220875][ T8] powermate 3-1:0.0: probe with driver powermate failed with error -5 [ 250.419701][ T8569] fuse: Bad value for 'user_id' [ 250.424745][ T8569] fuse: Bad value for 'user_id' [ 250.450586][ T8] usb 3-1: USB disconnect, device number 33 [ 251.229325][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.782'. [ 251.547287][ T8616] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.556117][ T8616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.667768][ T8621] program syz.3.789 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.905271][ T25] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 252.089373][ T25] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 252.116612][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.158368][ T25] usb 3-1: config 0 descriptor?? [ 252.174503][ T8651] netlink: 'syz.3.798': attribute type 1 has an invalid length. [ 252.180243][ T25] cp210x 3-1:0.0: cp210x converter detected [ 252.182233][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.798'. [ 252.397548][ T25] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 252.405408][ T25] cp210x 3-1:0.0: querying part number failed [ 252.413290][ T25] usb 3-1: cp210x converter now attached to ttyUSB0 [ 252.427151][ T25] usb 3-1: USB disconnect, device number 34 [ 252.441502][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 252.449945][ T25] cp210x 3-1:0.0: device disconnected [ 253.191988][ T8655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.715281][ T8701] bond_slave_0: entered promiscuous mode [ 253.721237][ T8701] bond_slave_1: entered promiscuous mode [ 253.760186][ T8701] vlan2: entered promiscuous mode [ 253.774734][ T8701] bond0: entered promiscuous mode [ 253.835458][ T8701] bond0: left promiscuous mode [ 253.857862][ T8701] bond_slave_0: left promiscuous mode [ 253.863441][ T8701] bond_slave_1: left promiscuous mode [ 254.764632][ T25] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 254.829943][ T46] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 254.926127][ T25] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 254.954540][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.982294][ T25] usb 3-1: config 0 descriptor?? [ 254.990325][ T46] usb 7-1: Using ep0 maxpacket: 8 [ 255.000742][ T46] usb 7-1: config 2 has an invalid descriptor of length 111, skipping remainder of the config [ 255.016409][ T25] cp210x 3-1:0.0: cp210x converter detected [ 255.023743][ T46] usb 7-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 255.053333][ T46] usb 7-1: New USB device found, idVendor=04e2, idProduct=1416, bcdDevice=ca.10 [ 255.064225][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.103272][ T46] usb 7-1: Product: syz [ 255.115062][ T46] usb 7-1: Manufacturer: syz [ 255.129926][ T46] usb 7-1: SerialNumber: syz [ 255.232910][ T5898] hid-generic 0000:0003:0000.0011: item fetching failed at offset 0/2 [ 255.245516][ T5898] hid-generic 0000:0003:0000.0011: probe with driver hid-generic failed with error -22 [ 255.368466][ T46] usb 7-1: USB disconnect, device number 6 [ 255.629234][ T8748] netlink: 40 bytes leftover after parsing attributes in process `syz.1.822'. [ 255.684564][ T5892] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 255.854464][ T5892] usb 6-1: Using ep0 maxpacket: 8 [ 255.870928][ T5892] usb 6-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 255.880933][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.889872][ T5892] usb 6-1: Product: syz [ 255.894963][ T5892] usb 6-1: Manufacturer: syz [ 255.899849][ T5892] usb 6-1: SerialNumber: syz [ 255.911706][ T5892] usb 6-1: config 0 descriptor?? [ 255.923000][ T5892] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 255.968681][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.976014][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.128646][ T5892] gspca_sn9c2028: read1 error -32 [ 256.328527][ T8752] netlink: 16 bytes leftover after parsing attributes in process `syz.6.824'. [ 256.338853][ T8752] netlink: 16 bytes leftover after parsing attributes in process `syz.6.824'. [ 256.379370][ T5892] gspca_sn9c2028: read1 error -71 [ 256.410961][ T5892] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -71 [ 256.431736][ T5892] usb 6-1: USB disconnect, device number 19 [ 257.004582][ T5898] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 257.184479][ T5898] usb 7-1: Using ep0 maxpacket: 32 [ 257.201631][ T5898] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 257.214501][ T5898] usb 7-1: config 0 has no interface number 0 [ 257.231374][ T5898] usb 7-1: config 0 interface 184 has no altsetting 0 [ 257.256916][ T5898] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 257.274459][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.284758][ T5898] usb 7-1: Product: syz [ 257.289035][ T5898] usb 7-1: Manufacturer: syz [ 257.314076][ T5898] usb 7-1: SerialNumber: syz [ 257.327188][ T5898] usb 7-1: config 0 descriptor?? [ 257.343935][ T5898] smsc75xx v1.0.0 [ 257.568740][ T25] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 257.604486][ T25] cp210x 3-1:0.0: querying part number failed [ 257.636645][ T25] usb 3-1: cp210x converter now attached to ttyUSB0 [ 257.684574][ T25] usb 3-1: USB disconnect, device number 35 [ 257.735277][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 257.759387][ T25] cp210x 3-1:0.0: device disconnected [ 257.841657][ T8779] netlink: 'syz.5.834': attribute type 11 has an invalid length. [ 257.845187][ T8778] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 257.862532][ T8779] netlink: 28 bytes leftover after parsing attributes in process `syz.5.834'. [ 258.025037][ T8782] netlink: 16 bytes leftover after parsing attributes in process `syz.2.836'. [ 258.065921][ T8782] netlink: 16 bytes leftover after parsing attributes in process `syz.2.836'. [ 258.581653][ T5898] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 258.796236][ T5898] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 258.837795][ T5898] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 258.857613][ T25] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 258.875994][ T5898] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 258.899865][ T5898] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 258.921229][ T5898] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 258.981283][ T5898] usb 7-1: USB disconnect, device number 7 [ 259.036354][ T25] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 259.052516][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.101832][ T25] usb 6-1: config 0 descriptor?? [ 259.125265][ T25] cp210x 6-1:0.0: cp210x converter detected [ 259.343038][ T5895] hid-generic 0000:0003:0000.0012: item fetching failed at offset 0/2 [ 259.365580][ T5895] hid-generic 0000:0003:0000.0012: probe with driver hid-generic failed with error -22 [ 259.589970][ T8815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.605923][ T8814] netlink: 16 bytes leftover after parsing attributes in process `syz.6.850'. [ 259.640438][ T8814] netlink: 16 bytes leftover after parsing attributes in process `syz.6.850'. [ 259.878390][ T8818] bond1 (unregistering): Released all slaves [ 260.264494][ T5892] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 260.574412][ T5892] usb 7-1: Using ep0 maxpacket: 8 [ 260.602603][ T5892] usb 7-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 260.743063][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.776027][ T5892] usb 7-1: Product: syz [ 260.796294][ T5892] usb 7-1: Manufacturer: syz [ 260.810096][ T5892] usb 7-1: SerialNumber: syz [ 260.815724][ T8836] netlink: 'syz.3.856': attribute type 4 has an invalid length. [ 260.879644][ T5892] usb 7-1: config 0 descriptor?? [ 260.902899][ T5892] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 261.121382][ T8822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.162591][ T5892] gspca_sn9c2028: read1 error -32 [ 261.185472][ T5892] gspca_sn9c2028: read1 error -71 [ 261.211437][ T5892] gspca_sn9c2028: read1 error -71 [ 261.238127][ T5892] sn9c2028 7-1:0.0: probe with driver sn9c2028 failed with error -71 [ 261.271327][ T5892] usb 7-1: USB disconnect, device number 8 [ 261.288655][ T8844] netlink: 'syz.2.859': attribute type 6 has an invalid length. [ 261.313162][ T8844] netlink: 'syz.2.859': attribute type 3 has an invalid length. [ 261.329641][ T8844] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.859'. [ 261.749494][ T25] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 261.789979][ T25] cp210x 6-1:0.0: querying part number failed [ 261.821735][ T25] usb 6-1: cp210x converter now attached to ttyUSB0 [ 261.867681][ T25] usb 6-1: USB disconnect, device number 20 [ 261.890224][ T8849] netlink: 16 bytes leftover after parsing attributes in process `syz.5.861'. [ 261.917294][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 261.933677][ T8849] netlink: 16 bytes leftover after parsing attributes in process `syz.5.861'. [ 261.943045][ T25] cp210x 6-1:0.0: device disconnected [ 261.954502][ T8] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 261.996583][ T8851] ipvlan2: entered allmulticast mode [ 262.002117][ T8851] mac80211_hwsim hwsim19 wlan0: entered allmulticast mode [ 262.114573][ T8] usb 4-1: device descriptor read/64, error -71 [ 262.398461][ T8] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 262.619027][ T8] usb 4-1: device descriptor read/64, error -71 [ 262.766788][ T8] usb usb4-port1: attempt power cycle [ 263.184566][ T8] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 263.219098][ T8] usb 4-1: device descriptor read/8, error -71 [ 263.352541][ T8856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.524064][ T8] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 263.607277][ T8] usb 4-1: device descriptor read/8, error -71 [ 263.627789][ T25] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 263.852155][ T8] usb usb4-port1: unable to enumerate USB device [ 263.899873][ T5898] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 264.020753][ T25] usb 6-1: config 0 has no interfaces? [ 264.033497][ T25] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 264.043889][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.056451][ T25] usb 6-1: Product: syz [ 264.060899][ T25] usb 6-1: Manufacturer: syz [ 264.067273][ T25] usb 6-1: SerialNumber: syz [ 264.077615][ T25] usb 6-1: config 0 descriptor?? [ 264.111810][ T5898] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 264.124113][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.143484][ T5898] usb 7-1: config 0 descriptor?? [ 264.155770][ T5898] cp210x 7-1:0.0: cp210x converter detected [ 264.169018][ T8880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.874'. [ 264.202310][ T8880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.874'. [ 264.373447][ T25] hid-generic 0000:0003:0000.0013: item fetching failed at offset 0/2 [ 264.398900][ T25] hid-generic 0000:0003:0000.0013: probe with driver hid-generic failed with error -22 [ 265.404472][ T5895] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 265.412462][ T25] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 265.574622][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 265.583253][ T5895] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.584597][ T5892] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 265.614224][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.630960][ T5895] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.652041][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.662652][ T5895] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 265.671815][ T25] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 265.701416][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.718641][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.750271][ T5895] hub 3-1:4.0: USB hub found [ 265.782376][ T25] usb 2-1: config 0 descriptor?? [ 265.798182][ T5892] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58623, setting to 1024 [ 265.817345][ T5892] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 265.840807][ T5892] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.855297][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.864234][ T5892] usb 4-1: Product: syz [ 265.873267][ T5892] usb 4-1: Manufacturer: syz [ 265.880265][ T5892] usb 4-1: SerialNumber: syz [ 265.899811][ T8899] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 266.093963][ T8900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.123154][ T8900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.218508][ T8901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.261637][ T8901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.319251][ T25] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 266.426611][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0014/input/input44 [ 266.458494][ T8] usb 6-1: USB disconnect, device number 21 [ 266.582537][ T25] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 266.669667][ T5898] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 266.706886][ T5898] cp210x 7-1:0.0: querying part number failed [ 266.725474][ T5898] usb 7-1: cp210x converter now attached to ttyUSB0 [ 266.775073][ T46] usb 2-1: USB disconnect, device number 36 [ 266.816521][ T5898] usb 7-1: USB disconnect, device number 9 [ 266.832231][ T8906] netlink: 24 bytes leftover after parsing attributes in process `syz.6.884'. [ 266.868385][ T5898] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 266.908763][ T5898] cp210x 7-1:0.0: device disconnected [ 267.005121][ T25] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 267.045041][ T8909] netlink: 16 bytes leftover after parsing attributes in process `syz.6.885'. [ 267.054152][ T8909] netlink: 16 bytes leftover after parsing attributes in process `syz.6.885'. [ 267.080564][ T5892] cdc_ncm 4-1:1.0: bind() failure [ 267.104424][ T5892] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 267.123480][ T5892] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 267.149042][ T5892] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 267.176733][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 267.193102][ T5892] usb 4-1: USB disconnect, device number 51 [ 267.214166][ T25] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 267.238701][ T25] usb 6-1: config 0 has no interface number 0 [ 267.254559][ T25] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 267.269697][ T8911] netlink: 'syz.6.886': attribute type 1 has an invalid length. [ 267.269905][ T25] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 267.285918][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.6.886'. [ 267.289902][ T25] usb 6-1: config 0 interface 126 has no altsetting 0 [ 267.308144][ T25] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 267.317834][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.326108][ T25] usb 6-1: Product: syz [ 267.330579][ T25] usb 6-1: Manufacturer: syz [ 267.335532][ T25] usb 6-1: SerialNumber: syz [ 267.353880][ T25] usb 6-1: config 0 descriptor?? [ 267.360344][ T8903] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 267.368151][ T8903] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 267.585839][ T25] ir_usb 6-1:0.126: IR Dongle converter detected [ 267.592997][ T25] usb 6-1: IRDA class descriptor not found, device not bound [ 267.607633][ T25] usb 6-1: USB disconnect, device number 22 [ 267.734553][ T5898] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 267.788499][ T5892] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 267.876527][ T5898] usb 2-1: device descriptor read/64, error -71 [ 267.948344][ T5892] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 267.974481][ T5892] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 267.990937][ T5892] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 268.014368][ T5892] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 20 [ 268.045849][ T5892] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 268.076856][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 268.087186][ T5892] usb 7-1: SerialNumber: syz [ 268.124523][ T5898] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 268.134790][ T8913] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 268.142106][ T8913] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 268.185962][ T5892] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 268.201339][ T5895] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 268.265274][ T5895] usb 3-1: USB disconnect, device number 36 [ 268.284501][ T5898] usb 2-1: device descriptor read/64, error -71 [ 268.357545][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 268.378126][ T8930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.378396][ T8930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.425597][ T5898] usb usb2-port1: attempt power cycle [ 268.483735][ T5892] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 268.510828][ T5892] usb 7-1: USB disconnect, device number 10 [ 268.694437][ T5895] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 268.774423][ T5898] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 268.784045][ T46] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 268.815140][ T5898] usb 2-1: device descriptor read/8, error -71 [ 268.854420][ T5895] usb 3-1: device descriptor read/64, error -71 [ 268.948561][ T46] usb 6-1: config 0 has no interfaces? [ 268.966912][ T46] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 268.976293][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.984409][ T46] usb 6-1: Product: syz [ 268.988604][ T46] usb 6-1: Manufacturer: syz [ 268.999666][ T46] usb 6-1: SerialNumber: syz [ 269.017027][ T46] usb 6-1: config 0 descriptor?? [ 269.054439][ T5898] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 269.085462][ T5898] usb 2-1: device descriptor read/8, error -71 [ 269.105293][ T5895] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 269.203515][ T5898] usb usb2-port1: unable to enumerate USB device [ 269.334479][ T5895] usb 3-1: device descriptor read/64, error -71 [ 270.060251][ T5895] usb usb3-port1: attempt power cycle [ 270.324491][ T5892] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 270.414421][ T5895] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 270.465235][ T5895] usb 3-1: device descriptor read/8, error -71 [ 270.511080][ T5892] usb 7-1: config 0 has no interfaces? [ 270.519785][ T5892] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 270.571581][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.686792][ T5892] usb 7-1: Product: syz [ 270.693122][ T5892] usb 7-1: Manufacturer: syz [ 270.699286][ T5892] usb 7-1: SerialNumber: syz [ 270.699453][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.899'. [ 270.715111][ T5892] usb 7-1: config 0 descriptor?? [ 270.746682][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.899'. [ 270.805439][ T5895] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 270.845767][ T5895] usb 3-1: device descriptor read/8, error -71 [ 270.967360][ T5895] usb usb3-port1: unable to enumerate USB device [ 271.441406][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.903'. [ 271.455058][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.903'. [ 271.683452][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.905'. [ 272.044610][ T8] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 272.308376][ T8] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 272.343198][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.355682][ T8] usb 2-1: config 0 descriptor?? [ 272.410104][ T5892] usb 7-1: USB disconnect, device number 11 [ 272.583848][ T8] [drm] vendor descriptor length:c3 data:02 23 00 00 00 00 00 00 00 00 00 [ 272.586468][ T5895] usb 6-1: USB disconnect, device number 23 [ 272.610722][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 272.785158][ T8963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.794133][ T8963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.992643][ T8963] netlink: 32 bytes leftover after parsing attributes in process `syz.1.906'. [ 273.024467][ T5892] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 273.102695][ T8963] netlink: 100 bytes leftover after parsing attributes in process `syz.1.906'. [ 273.155132][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 273.189073][ T8] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 273.196079][ T5892] usb 7-1: Using ep0 maxpacket: 8 [ 273.212362][ T5892] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 273.228147][ T8] [drm] Initialized udl on minor 2 [ 273.251306][ T8] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 273.279938][ T5892] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 273.379380][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.391215][ T8] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 273.428181][ T974] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 273.439917][ T5892] usb 7-1: Product: syz [ 273.495495][ T8] usb 2-1: USB disconnect, device number 41 [ 273.502182][ T5892] usb 7-1: Manufacturer: syz [ 273.507919][ T974] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 273.522765][ T5892] usb 7-1: SerialNumber: syz [ 273.545185][ T5892] hso 7-1:6.0: Can't find BULK IN endpoint [ 273.637731][ T8972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.042674][ T5892] usb 7-1: USB disconnect, device number 12 [ 274.931375][ T8997] FAULT_INJECTION: forcing a failure. [ 274.931375][ T8997] name failslab, interval 1, probability 0, space 0, times 0 [ 274.977898][ T8997] CPU: 1 UID: 0 PID: 8997 Comm: syz.1.915 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 274.977921][ T8997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 274.977931][ T8997] Call Trace: [ 274.977936][ T8997] [ 274.977942][ T8997] dump_stack_lvl+0x241/0x360 [ 274.977965][ T8997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.977980][ T8997] ? __pfx__printk+0x10/0x10 [ 274.978006][ T8997] ? __kmalloc_noprof+0xb5/0x4c0 [ 274.978023][ T8997] ? __pfx___might_resched+0x10/0x10 [ 274.978045][ T8997] should_fail_ex+0x40a/0x550 [ 274.978065][ T8997] should_failslab+0xac/0x100 [ 274.978081][ T8997] __kmalloc_noprof+0xdd/0x4c0 [ 274.978096][ T8997] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 274.978121][ T8997] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 274.978140][ T8997] ? __pfx_ethnl_tunnel_info_start+0x10/0x10 [ 274.978159][ T8997] genl_rcv_msg+0x802/0xec0 [ 274.978183][ T8997] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.978224][ T8997] ? __pfx_lock_acquire+0x10/0x10 [ 274.978244][ T8997] ? __pfx_ethnl_tunnel_info_doit+0x10/0x10 [ 274.978260][ T8997] ? __pfx___might_resched+0x10/0x10 [ 274.978283][ T8997] netlink_rcv_skb+0x1e3/0x430 [ 274.978298][ T8997] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.978318][ T8997] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 274.978350][ T8997] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 274.978374][ T8997] genl_rcv+0x28/0x40 [ 274.978390][ T8997] netlink_unicast+0x7f6/0x990 [ 274.978417][ T8997] ? __pfx_netlink_unicast+0x10/0x10 [ 274.978445][ T8997] ? __virt_addr_valid+0x45f/0x530 [ 274.978469][ T8997] ? __phys_addr_symbol+0x2f/0x70 [ 274.978490][ T8997] ? __check_object_size+0x47a/0x730 [ 274.978508][ T8997] netlink_sendmsg+0x8e4/0xcb0 [ 274.978530][ T8997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.978548][ T8997] ? aa_sock_msg_perm+0x91/0x160 [ 274.978572][ T8997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.978586][ T8997] __sock_sendmsg+0x221/0x270 [ 274.978607][ T8997] ____sys_sendmsg+0x52a/0x7e0 [ 274.978627][ T8997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.978640][ T8997] ? __fget_files+0x2a/0x410 [ 274.978659][ T8997] ? __fget_files+0x2a/0x410 [ 274.978680][ T8997] __sys_sendmsg+0x269/0x350 [ 274.978699][ T8997] ? __pfx___sys_sendmsg+0x10/0x10 [ 274.978722][ T8997] ? do_sys_openat2+0x17a/0x1d0 [ 274.978756][ T8997] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 274.978777][ T8997] ? do_syscall_64+0x100/0x230 [ 274.978800][ T8997] ? do_syscall_64+0xb6/0x230 [ 274.978822][ T8997] do_syscall_64+0xf3/0x230 [ 274.978842][ T8997] ? clear_bhb_loop+0x35/0x90 [ 274.978865][ T8997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.978885][ T8997] RIP: 0033:0x7fe123d8cde9 [ 274.978902][ T8997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.978914][ T8997] RSP: 002b:00007fe124b5b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.978930][ T8997] RAX: ffffffffffffffda RBX: 00007fe123fa5fa0 RCX: 00007fe123d8cde9 [ 274.978959][ T8997] RDX: 0000000000000000 RSI: 0000400000001ac0 RDI: 0000000000000003 [ 274.978968][ T8997] RBP: 00007fe124b5b090 R08: 0000000000000000 R09: 0000000000000000 [ 274.978977][ T8997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.978986][ T8997] R13: 0000000000000000 R14: 00007fe123fa5fa0 R15: 00007fe1240cfa28 [ 274.979007][ T8997] [ 276.160546][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'. [ 276.255357][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'. [ 276.324530][ T2148] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 276.339412][ T9015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.359098][ T9002] syzkaller1: entered promiscuous mode [ 276.381074][ T9002] syzkaller1: entered allmulticast mode [ 276.434523][ T5895] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 276.489619][ T2148] usb 2-1: unable to get BOS descriptor or descriptor too short [ 276.508674][ T2148] usb 2-1: not running at top speed; connect to a high speed hub [ 276.528401][ T2148] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 276.544677][ T2148] usb 2-1: config 1 has an invalid descriptor of length 147, skipping remainder of the config [ 276.562075][ T2148] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.571471][ T2148] usb 2-1: config 1 has no interface number 0 [ 276.600982][ T2148] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 276.628321][ T2148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.654028][ T2148] usb 2-1: Product: syz [ 276.663030][ T2148] usb 2-1: Manufacturer: syz [ 276.672161][ T2148] usb 2-1: SerialNumber: syz [ 276.718695][ T5895] usb 6-1: config 0 has no interfaces? [ 276.760259][ T5895] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 276.776950][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.800351][ T5895] usb 6-1: Product: syz [ 276.824675][ T5895] usb 6-1: Manufacturer: syz [ 276.829407][ T5895] usb 6-1: SerialNumber: syz [ 276.870225][ T5895] usb 6-1: config 0 descriptor?? [ 276.876932][ T46] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 277.063458][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 277.077445][ T46] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 277.115833][ T46] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 277.128284][ T46] usb 7-1: config 0 has no interface number 0 [ 277.135917][ T46] usb 7-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 277.190377][ T2148] usb 2-1: USB disconnect, device number 42 [ 277.200653][ T46] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 277.264381][ T46] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 277.368842][ T46] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 277.439911][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.494774][ T46] usb 7-1: config 0 descriptor?? [ 277.850727][ T46] usb 7-1: USB disconnect, device number 13 [ 278.816417][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.6.934'. [ 278.849731][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.6.934'. [ 279.155940][ T25] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 279.355031][ T25] usb 3-1: Invalid ep0 maxpacket: 32 [ 279.474441][ T8] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 279.504461][ T25] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 279.660493][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 279.684495][ T5895] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 279.704440][ T25] usb 3-1: Invalid ep0 maxpacket: 32 [ 279.706175][ T8] usb 2-1: config 4 has an invalid interface number: 201 but max is 0 [ 279.795499][ T8] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 279.820326][ T25] usb usb3-port1: attempt power cycle [ 279.839975][ T46] usb 6-1: USB disconnect, device number 24 [ 279.876290][ T8] usb 2-1: config 4 has no interface number 0 [ 279.893254][ T8] usb 2-1: config 4 interface 201 has no altsetting 0 [ 279.914000][ T8] usb 2-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=dc.a9 [ 279.944325][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.993412][ T5895] usb 7-1: config 0 has no interfaces? [ 280.002226][ T5895] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 280.011858][ T8] usb 2-1: Product: syz [ 280.017942][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.028926][ T8] usb 2-1: Manufacturer: syz [ 280.048146][ T8] usb 2-1: SerialNumber: syz [ 280.057043][ T5895] usb 7-1: Product: syz [ 280.061596][ T5895] usb 7-1: Manufacturer: syz [ 280.083073][ T5895] usb 7-1: SerialNumber: syz [ 280.114248][ T5895] usb 7-1: config 0 descriptor?? [ 280.175571][ T25] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 280.246535][ T25] usb 3-1: Invalid ep0 maxpacket: 32 [ 280.303005][ T8] usb 2-1: bad CDC descriptors [ 280.317828][ T8] usb 2-1: USB disconnect, device number 43 [ 280.364646][ T5895] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 280.384488][ T25] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 280.425079][ T25] usb 3-1: Invalid ep0 maxpacket: 32 [ 280.432714][ T25] usb usb3-port1: unable to enumerate USB device [ 280.514511][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 280.524399][ T5892] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 280.540916][ T5895] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.552449][ T5895] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.566861][ T5895] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 280.576345][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.609256][ T5895] hub 4-1:4.0: USB hub found [ 280.707253][ T5892] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 280.725517][ T5892] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 280.737630][ T5892] usb 6-1: config 0 has no interface number 0 [ 280.752935][ T5892] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 280.777705][ T5892] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 280.798476][ T5892] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 280.823688][ T5892] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 280.865695][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.883647][ T5892] usb 6-1: config 0 descriptor?? [ 280.959332][ T9068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.004009][ T9068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.295629][ T5892] usb 6-1: USB disconnect, device number 25 [ 281.335737][ T46] IPVS: starting estimator thread 0... [ 281.353042][ T9071] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 281.387380][ T9072] bridge1: entered promiscuous mode [ 281.406925][ T9072] bridge1: entered allmulticast mode [ 281.435752][ T9073] IPVS: using max 28 ests per chain, 67200 per kthread [ 281.724412][ T8] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 281.897151][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 281.935262][ T8] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.962335][ T8] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.987067][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 282.001692][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.039388][ T8] hub 2-1:4.0: USB hub found [ 282.227760][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.946'. [ 282.246301][ T8] hub 2-1:4.0: 2 ports detected [ 282.252125][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.946'. [ 282.262116][ T8] usb 2-1: selecting invalid altsetting 1 [ 282.271550][ T8] hub 2-1:4.0: Using single TT (err -22) [ 282.670674][ T8] usb 2-1: USB disconnect, device number 44 [ 282.787824][ T5894] usb 7-1: USB disconnect, device number 14 [ 282.804407][ T974] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 282.924656][ T9090] FAULT_INJECTION: forcing a failure. [ 282.924656][ T9090] name failslab, interval 1, probability 0, space 0, times 0 [ 282.951182][ T9090] CPU: 0 UID: 0 PID: 9090 Comm: syz.6.950 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 282.951214][ T9090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 282.951227][ T9090] Call Trace: [ 282.951235][ T9090] [ 282.951244][ T9090] dump_stack_lvl+0x241/0x360 [ 282.951275][ T9090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.951299][ T9090] ? __pfx__printk+0x10/0x10 [ 282.951335][ T9090] ? fs_reclaim_acquire+0x93/0x130 [ 282.951365][ T9090] ? __pfx___might_resched+0x10/0x10 [ 282.951395][ T9090] should_fail_ex+0x40a/0x550 [ 282.951426][ T9090] should_failslab+0xac/0x100 [ 282.951449][ T9090] __kmalloc_noprof+0xdd/0x4c0 [ 282.951471][ T9090] ? tomoyo_encode+0x26f/0x540 [ 282.951507][ T9090] tomoyo_encode+0x26f/0x540 [ 282.951546][ T9090] tomoyo_realpath_from_path+0x59e/0x5e0 [ 282.951592][ T9090] tomoyo_path_number_perm+0x236/0x860 [ 282.951620][ T9090] ? rcu_read_lock_any_held+0xb7/0x160 [ 282.951643][ T9090] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 282.951665][ T9090] ? tomoyo_path_number_perm+0x206/0x860 [ 282.951693][ T9090] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 282.951728][ T9090] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 282.951759][ T9090] ? sb_end_write+0xe9/0x1c0 [ 282.951782][ T9090] ? vfs_write+0x7fa/0xd10 [ 282.951845][ T9090] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 282.951878][ T9090] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 282.951910][ T9090] security_file_ioctl+0xc6/0x2a0 [ 282.951938][ T9090] __se_sys_ioctl+0x46/0x170 [ 282.951971][ T9090] do_syscall_64+0xf3/0x230 [ 282.952003][ T9090] ? clear_bhb_loop+0x35/0x90 [ 282.952036][ T9090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.952071][ T9090] RIP: 0033:0x7f5848d8cde9 [ 282.952091][ T9090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.952109][ T9090] RSP: 002b:00007f5849c0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.952131][ T9090] RAX: ffffffffffffffda RBX: 00007f5848fa5fa0 RCX: 00007f5848d8cde9 [ 282.952147][ T9090] RDX: 0000000000000000 RSI: 00000000c4c85513 RDI: 0000000000000003 [ 282.952160][ T9090] RBP: 00007f5849c0f090 R08: 0000000000000000 R09: 0000000000000000 [ 282.952172][ T9090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.952185][ T9090] R13: 0000000000000000 R14: 00007f5848fa5fa0 R15: 00007f58490cfa28 [ 282.952215][ T9090] [ 282.952711][ T9090] ERROR: Out of memory at tomoyo_realpath_from_path. [ 283.215965][ T974] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 283.229423][ T974] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.251469][ T974] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 283.281409][ T974] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.363401][ T974] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 283.381744][ T5895] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 283.394410][ T974] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 283.423169][ T974] usb 3-1: Product: syz [ 283.459013][ T974] usb 3-1: Manufacturer: syz [ 283.475548][ T5895] usb 4-1: USB disconnect, device number 52 [ 283.504422][ T974] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 283.837378][ T9088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.037216][ T9088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.084552][ T9088] netlink: 'syz.2.949': attribute type 1 has an invalid length. [ 284.098086][ T5895] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 284.146115][ T9103] vivid-007: ================= START STATUS ================= [ 284.155779][ T9103] vivid-007: Enable Output Cropping: true [ 284.162218][ T9103] vivid-007: Enable Output Composing: true [ 284.181226][ T25] usb 3-1: USB disconnect, device number 45 [ 284.185262][ T9103] vivid-007: Enable Output Scaler: true [ 284.205214][ T9103] vivid-007: Tx RGB Quantization Range: Automatic [ 284.212086][ T9103] vivid-007: Transmit Mode: HDMI [ 284.304844][ T5895] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 284.313351][ T5895] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 284.324437][ T5894] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 284.332689][ T5895] usb 4-1: config 0 has no interface number 0 [ 284.342538][ T5895] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 284.374486][ T9103] vivid-007: Hotplug Present: 0x00000000 [ 284.386118][ T5895] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 284.397544][ T9103] vivid-007: RxSense Present: 0x00000000 [ 284.403269][ T9103] vivid-007: EDID Present: 0x00000000 [ 284.408911][ T9103] vivid-007: ================== END STATUS ================== [ 284.482446][ T5895] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 284.504588][ T5895] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 284.524496][ T5894] usb 7-1: Using ep0 maxpacket: 8 [ 284.529983][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.552797][ T5895] usb 4-1: config 0 descriptor?? [ 284.580040][ T5894] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 284.588642][ T5894] usb 7-1: can't read configurations, error -61 [ 284.625793][ T9108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 284.633787][ T9108] IPv6: NLM_F_CREATE should be set when creating new route [ 284.641281][ T9108] IPv6: NLM_F_CREATE should be set when creating new route [ 284.784404][ T5894] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 284.954476][ T5894] usb 7-1: Using ep0 maxpacket: 8 [ 284.967786][ T5894] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 284.984033][ T5894] usb 7-1: can't read configurations, error -61 [ 285.008122][ T5894] usb usb7-port1: attempt power cycle [ 285.069047][ T9110] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 285.115921][ T5895] usb 4-1: USB disconnect, device number 53 [ 285.228241][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.958'. [ 285.274584][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.958'. [ 285.415502][ T5894] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 285.448766][ T9114] ipvlan2: entered allmulticast mode [ 285.456011][ T5894] usb 7-1: Using ep0 maxpacket: 8 [ 285.466439][ T5894] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 285.474409][ T5894] usb 7-1: can't read configurations, error -61 [ 285.519542][ T9114] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 285.664593][ T5894] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 285.829290][ T5894] usb 7-1: Using ep0 maxpacket: 8 [ 285.951755][ T5894] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 285.965138][ T5894] usb 7-1: can't read configurations, error -61 [ 285.972326][ T5894] usb usb7-port1: unable to enumerate USB device [ 286.334529][ T5894] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 286.372244][ T9115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.525413][ T5894] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 286.576340][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.609516][ T5894] usb 4-1: config 0 has no interfaces? [ 286.619374][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.636396][ T5894] usb 4-1: config 0 has no interfaces? [ 286.643483][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.660737][ T5894] usb 4-1: config 0 has no interfaces? [ 286.667026][ T8] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 286.687417][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.706104][ T5894] usb 4-1: config 0 has no interfaces? [ 286.712958][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.726478][ T5894] usb 4-1: config 0 has no interfaces? [ 286.735728][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.748711][ T5894] usb 4-1: config 0 has no interfaces? [ 286.758020][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.771907][ T5894] usb 4-1: config 0 has no interfaces? [ 286.780877][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.797333][ T5894] usb 4-1: config 0 has no interfaces? [ 286.808115][ T5894] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 286.819218][ T5894] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 286.831882][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 286.839671][ T5894] usb 4-1: Product: syz [ 286.844133][ T5894] usb 4-1: Manufacturer: syz [ 286.852449][ T8] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.865629][ T5894] usb 4-1: SerialNumber: syz [ 286.870317][ T8] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.883547][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 286.894621][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.912950][ T5894] usb 4-1: config 0 descriptor?? [ 286.947059][ T8] hub 3-1:4.0: USB hub found [ 287.131163][ T25] usb 4-1: USB disconnect, device number 54 [ 287.264439][ T9128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.295013][ T9128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.624623][ T25] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 287.787458][ T25] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 287.854857][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.880240][ T25] usb 4-1: config 0 has no interfaces? [ 287.892003][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.910254][ T25] usb 4-1: config 0 has no interfaces? [ 287.917946][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.934641][ T25] usb 4-1: config 0 has no interfaces? [ 287.949919][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.981393][ T25] usb 4-1: config 0 has no interfaces? [ 287.991679][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.024374][ T25] usb 4-1: config 0 has no interfaces? [ 288.034804][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.054460][ T25] usb 4-1: config 0 has no interfaces? [ 288.077123][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.093854][ T25] usb 4-1: config 0 has no interfaces? [ 288.105900][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.123655][ T25] usb 4-1: config 0 has no interfaces? [ 288.150458][ T25] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 288.174428][ T25] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 288.182841][ T25] usb 4-1: Product: syz [ 288.191251][ T25] usb 4-1: Manufacturer: syz [ 288.196932][ T25] usb 4-1: SerialNumber: syz [ 288.209490][ T25] usb 4-1: config 0 descriptor?? [ 288.233561][ T9143] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 288.243366][ T9143] macsec1: entered promiscuous mode [ 288.244569][ T5894] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 288.249341][ T9143] macsec1: entered allmulticast mode [ 288.262430][ T9143] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 288.456468][ T5894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58623, setting to 1024 [ 288.481424][ T9148] netlink: 16 bytes leftover after parsing attributes in process `syz.6.971'. [ 288.481822][ T5894] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 288.507409][ T5894] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.515851][ T9148] netlink: 16 bytes leftover after parsing attributes in process `syz.6.971'. [ 288.517221][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.534860][ T5894] usb 2-1: Product: syz [ 288.539210][ T5894] usb 2-1: Manufacturer: syz [ 288.544019][ T5894] usb 2-1: SerialNumber: syz [ 288.561058][ T9150] rose0: entered promiscuous mode [ 288.567509][ T9139] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 288.569973][ T9149] rose0: left promiscuous mode [ 289.059237][ T5894] cdc_ncm 2-1:1.0: bind() failure [ 289.075094][ T5894] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 289.085817][ T5894] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 289.095616][ T5894] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 289.115185][ T5894] usb 2-1: USB disconnect, device number 45 [ 289.508398][ T25] usb 4-1: USB disconnect, device number 55 [ 289.723227][ T8] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 289.838148][ T8] usb 3-1: USB disconnect, device number 46 [ 289.894143][ T9161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.924653][ T25] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 290.092034][ T9181] netlink: 20 bytes leftover after parsing attributes in process `syz.6.986'. [ 290.104596][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 290.127617][ T25] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.196206][ T9179] rose0: entered promiscuous mode [ 290.205654][ T9182] netlink: 'syz.1.985': attribute type 1 has an invalid length. [ 290.295712][ T25] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.306111][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.985'. [ 290.316087][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 290.326587][ T9177] rose0: left promiscuous mode [ 290.393704][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.435640][ T25] hub 4-1:4.0: USB hub found [ 290.517864][ T9188] xt_CONNSECMARK: invalid mode: 0 [ 290.717362][ T5892] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 290.730435][ T9193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.784520][ T9193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.198191][ T5892] usb 7-1: config 0 has no interfaces? [ 291.504149][ T5895] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 291.598021][ T5892] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 291.607556][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.705618][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 291.705827][ T5892] usb 7-1: Product: syz [ 291.717127][ T5892] usb 7-1: Manufacturer: syz [ 291.721881][ T5892] usb 7-1: SerialNumber: syz [ 291.780941][ T5892] usb 7-1: config 0 descriptor?? [ 291.831028][ T5895] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.019237][ T5895] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.029642][ T5895] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 292.038810][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.201434][ T5895] hub 3-1:4.0: USB hub found [ 292.477194][ T9215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.486348][ T9215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.494479][ T5894] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 292.670496][ T25] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 292.735626][ T25] usb 4-1: USB disconnect, device number 56 [ 292.740665][ T5894] usb 6-1: Using ep0 maxpacket: 8 [ 292.788164][ T5894] usb 6-1: unable to get BOS descriptor or descriptor too short [ 292.825695][ T5894] usb 6-1: config 4 has an invalid interface number: 146 but max is 0 [ 292.863782][ T5894] usb 6-1: config 4 has no interface number 0 [ 292.899800][ T5894] usb 6-1: config 4 interface 146 has no altsetting 0 [ 292.931132][ T5894] usb 6-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=af.79 [ 292.979492][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.031737][ T5894] usb 6-1: Product: syz [ 293.062109][ T5894] usb 6-1: Manufacturer: syz [ 293.126840][ T5894] usb 6-1: SerialNumber: syz [ 293.184496][ T25] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 293.474081][ T25] usb 4-1: Invalid ep0 maxpacket: 16 [ 293.644527][ T25] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 293.753925][ T5894] comedi comedi0: could not set alternate setting 3 in high speed [ 293.775685][ T5894] usbduxsigma 6-1:4.146: driver 'usbduxsigma' failed to auto-configure device. [ 293.786884][ T974] usb 7-1: USB disconnect, device number 19 [ 293.804572][ T25] usb 4-1: Invalid ep0 maxpacket: 16 [ 293.820782][ T25] usb usb4-port1: attempt power cycle [ 293.826102][ T5894] usbduxsigma 6-1:4.146: probe with driver usbduxsigma failed with error -71 [ 293.857347][ T5894] usb 6-1: USB disconnect, device number 26 [ 294.135785][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1002'. [ 294.164508][ T5892] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 294.206117][ T25] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 294.262694][ T5895] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 294.274563][ T25] usb 4-1: Invalid ep0 maxpacket: 16 [ 294.291079][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1003'. [ 294.303796][ T5895] usb 3-1: USB disconnect, device number 47 [ 294.355166][ T5892] usb 2-1: unable to get BOS descriptor or descriptor too short [ 294.377957][ T5892] usb 2-1: not running at top speed; connect to a high speed hub [ 294.394110][ T5892] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 294.409159][ T5892] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 294.421699][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.427113][ T25] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 294.454160][ T5892] usb 2-1: Product: syz [ 294.459126][ T5892] usb 2-1: Manufacturer: syz [ 294.465143][ T25] usb 4-1: Invalid ep0 maxpacket: 16 [ 294.481303][ T25] usb usb4-port1: unable to enumerate USB device [ 294.508252][ T5892] usb 2-1: SerialNumber: syz [ 294.619285][ T9245] program syz.5.1006 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.629388][ T9245] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 294.751211][ T5892] usb 2-1: USB disconnect, device number 46 [ 295.114412][ T974] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 295.174466][ T5894] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 295.266113][ T974] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.276887][ T974] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 295.288400][ T974] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 295.299407][ T974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.308438][ T974] usb 7-1: Product: syz [ 295.312863][ T974] usb 7-1: Manufacturer: syz [ 295.319219][ T974] usb 7-1: SerialNumber: syz [ 295.344698][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 295.353325][ T5894] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 295.362703][ T5894] usb 6-1: config 0 has no interface number 0 [ 295.369556][ T5894] usb 6-1: config 0 interface 184 has no altsetting 0 [ 295.380695][ T5894] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 295.390781][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.399419][ T5894] usb 6-1: Product: syz [ 295.406008][ T5894] usb 6-1: Manufacturer: syz [ 295.410644][ T5894] usb 6-1: SerialNumber: syz [ 295.425333][ T5894] usb 6-1: config 0 descriptor?? [ 295.434506][ T5892] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 295.448750][ T5894] smsc75xx v1.0.0 [ 295.543434][ T974] usb 7-1: 0:2 : does not exist [ 295.573861][ T974] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 295.606946][ T974] usb 7-1: USB disconnect, device number 20 [ 295.614483][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 295.624495][ T5892] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.647155][ T5892] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.672271][ T5892] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 295.683374][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.698526][ T5892] hub 3-1:4.0: USB hub found [ 295.838114][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.988144][ T9272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.020662][ T9272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.424668][ T9282] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1022'. [ 296.466471][ T5894] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 296.484147][ T5894] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 296.500771][ T5894] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 296.516825][ T5894] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 296.531349][ T5894] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 296.542401][ T5894] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 296.552665][ T5894] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 296.571592][ T5894] usb 6-1: USB disconnect, device number 27 [ 296.629255][ T9285] ipvlan2: entered allmulticast mode [ 296.635929][ T9285] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 296.843804][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1026'. [ 297.214394][ T25] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 297.387309][ T25] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 297.397014][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.499600][ T25] usb 2-1: config 0 descriptor?? [ 297.571472][ T25] cp210x 2-1:0.0: cp210x converter detected [ 297.775537][ T2148] hid-generic 0000:0003:0000.0015: item fetching failed at offset 0/2 [ 297.790563][ T2148] hid-generic 0000:0003:0000.0015: probe with driver hid-generic failed with error -22 [ 298.012485][ T9304] FAULT_INJECTION: forcing a failure. [ 298.012485][ T9304] name failslab, interval 1, probability 0, space 0, times 0 [ 298.020764][ T9307] capability: warning: `syz.6.1033' uses deprecated v2 capabilities in a way that may be insecure [ 298.050261][ T9304] CPU: 1 UID: 0 PID: 9304 Comm: syz.1.1028 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 298.050294][ T9304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 298.050307][ T9304] Call Trace: [ 298.050314][ T9304] [ 298.050323][ T9304] dump_stack_lvl+0x241/0x360 [ 298.050366][ T9304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.050389][ T9304] ? __pfx__printk+0x10/0x10 [ 298.050423][ T9304] ? fs_reclaim_acquire+0x93/0x130 [ 298.050450][ T9304] ? __pfx___might_resched+0x10/0x10 [ 298.050471][ T9304] should_fail_ex+0x40a/0x550 [ 298.050492][ T9304] should_failslab+0xac/0x100 [ 298.050509][ T9304] __kmalloc_noprof+0xdd/0x4c0 [ 298.050532][ T9304] ? kobject_get_path+0xb8/0x230 [ 298.050566][ T9304] kobject_get_path+0xb8/0x230 [ 298.050598][ T9304] kobject_uevent_env+0x2a5/0x8e0 [ 298.050620][ T9304] device_del+0x7db/0x9b0 [ 298.050642][ T9304] ? __pfx_device_del+0x10/0x10 [ 298.050665][ T9304] hid_destroy_device+0x6a/0x1b0 [ 298.050696][ T9304] uhid_dev_destroy+0xa2/0x120 [ 298.050717][ T9304] uhid_char_write+0x75b/0xb40 [ 298.050750][ T9304] ? __pfx_uhid_char_write+0x10/0x10 [ 298.050777][ T9304] vfs_write+0x29f/0xd10 [ 298.050798][ T9304] ? __mutex_unlock_slowpath+0x227/0x800 [ 298.050827][ T9304] ? __pfx_vfs_write+0x10/0x10 [ 298.050853][ T9304] ? do_sys_openat2+0x17a/0x1d0 [ 298.050877][ T9304] ? __fget_files+0x2a/0x410 [ 298.050900][ T9304] ? __fget_files+0x395/0x410 [ 298.050916][ T9304] ? __fget_files+0x2a/0x410 [ 298.050936][ T9304] ksys_write+0x18f/0x2b0 [ 298.050967][ T9304] ? __pfx_ksys_write+0x10/0x10 [ 298.050996][ T9304] ? do_syscall_64+0x100/0x230 [ 298.051027][ T9304] ? do_syscall_64+0xb6/0x230 [ 298.051057][ T9304] do_syscall_64+0xf3/0x230 [ 298.051077][ T9304] ? clear_bhb_loop+0x35/0x90 [ 298.051101][ T9304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.051124][ T9304] RIP: 0033:0x7fe123d8cde9 [ 298.051143][ T9304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.051160][ T9304] RSP: 002b:00007fe124b3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 298.051181][ T9304] RAX: ffffffffffffffda RBX: 00007fe123fa6080 RCX: 00007fe123d8cde9 [ 298.051194][ T9304] RDX: 0000000000000004 RSI: 0000400000000200 RDI: 0000000000000004 [ 298.051206][ T9304] RBP: 00007fe124b3a090 R08: 0000000000000000 R09: 0000000000000000 [ 298.051215][ T9304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.051224][ T9304] R13: 0000000000000001 R14: 00007fe123fa6080 R15: 00007fe1240cfa28 [ 298.051244][ T9304] [ 298.306345][ C1] vkms_vblank_simulate: vblank timer overrun [ 298.434627][ T5894] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 298.451925][ T9307] capability: warning: `syz.6.1033' uses 32-bit capabilities (legacy support in use) [ 298.464752][ T5892] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 298.550898][ T5892] usb 3-1: USB disconnect, device number 48 [ 298.594980][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 298.622308][ T5894] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.654238][ T9315] ipvlan3: entered allmulticast mode [ 298.676423][ T5894] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.721381][ T5894] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 298.743862][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.776770][ T5894] hub 4-1:4.0: USB hub found [ 299.044431][ T5892] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 299.116354][ T9328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.128106][ T9328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.239227][ T5892] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58623, setting to 1024 [ 299.260824][ T5892] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 299.317758][ T5892] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.338998][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.369315][ T5892] usb 6-1: Product: syz [ 299.388071][ T5892] usb 6-1: Manufacturer: syz [ 299.405203][ T5892] usb 6-1: SerialNumber: syz [ 299.426687][ T9319] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 299.553289][ T9331] rose0: entered promiscuous mode [ 299.571288][ T9331] rose0 (unregistering): left promiscuous mode [ 300.038519][ T25] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 300.080047][ T5892] cdc_ncm 6-1:1.0: bind() failure [ 300.098469][ T25] cp210x 2-1:0.0: querying part number failed [ 300.116511][ T25] usb 2-1: cp210x converter now attached to ttyUSB0 [ 300.118751][ T5892] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 300.132434][ T25] usb 2-1: USB disconnect, device number 47 [ 300.178656][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 300.187893][ T5892] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 300.209350][ T25] cp210x 2-1:0.0: device disconnected [ 300.223445][ T5892] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 300.279730][ T5892] usb 6-1: USB disconnect, device number 28 [ 300.911111][ T5892] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 300.918884][ T5894] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 301.084930][ T5892] usb 7-1: Using ep0 maxpacket: 32 [ 301.102496][ T5892] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.142996][ T5892] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.187058][ T5894] usb 4-1: reset high-speed USB device number 61 using dummy_hcd [ 301.214524][ T5892] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 301.232100][ T5894] usb 4-1: device reset changed ep0 maxpacket size! [ 301.244337][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.273650][ T5894] usb 4-1: USB disconnect, device number 61 [ 301.293549][ T5892] hub 7-1:4.0: USB hub found [ 301.624765][ T5894] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 301.670553][ T9351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.731491][ T9351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.818398][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.861383][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.890486][ T5894] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 302.308810][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.327396][ T5894] usb 4-1: config 0 descriptor?? [ 302.404467][ T25] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 302.419703][ T9362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 302.424001][ T9361] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 302.561044][ T9365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.561233][ T9365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.632522][ T25] usb 2-1: config 0 has no interfaces? [ 302.640849][ T25] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 302.640886][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.640938][ T25] usb 2-1: Product: syz [ 302.640951][ T25] usb 2-1: Manufacturer: syz [ 302.640963][ T25] usb 2-1: SerialNumber: syz [ 302.643416][ T25] usb 2-1: config 0 descriptor?? [ 302.776747][ T5894] razer 0003:1532:010E.0016: failed to enable macro keys: -71 [ 302.801243][ T5894] razer 0003:1532:010E.0016: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.3-1/input0 [ 302.822732][ T5894] usb 4-1: USB disconnect, device number 62 [ 302.856843][ T9356] i2c i2c-0: Invalid block write size 73 [ 304.482661][ T9370] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1053'. [ 304.945954][ T5892] hub 7-1:4.0: config failed, can't read hub descriptor (err -22) [ 305.085173][ T5892] usb 7-1: USB disconnect, device number 21 [ 305.147361][ T5890] usb 2-1: USB disconnect, device number 48 [ 305.444469][ T5892] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 305.477088][ T9389] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.1059'. [ 305.484700][ T5894] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 305.486606][ T9389] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.1059'. [ 305.503850][ T9389] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1059'. [ 305.574657][ T974] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 305.617657][ T5892] usb 7-1: unable to get BOS descriptor or descriptor too short [ 305.632372][ T5892] usb 7-1: not running at top speed; connect to a high speed hub [ 305.645273][ T5892] usb 7-1: config 214 has an invalid interface number: 2 but max is 0 [ 305.653620][ T5892] usb 7-1: config 214 has no interface number 0 [ 305.674917][ T5894] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58623, setting to 1024 [ 305.693573][ T5892] usb 7-1: config 214 interface 2 has no altsetting 0 [ 305.700874][ T5894] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 305.719796][ T5894] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 305.733640][ T5892] usb 7-1: New USB device found, idVendor=06e1, idProduct=a334, bcdDevice=c7.ab [ 305.750779][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.754449][ T2148] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 305.759533][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.775512][ T974] usb 4-1: config 0 has an invalid interface number: 238 but max is 0 [ 305.784600][ T5892] usb 7-1: Product: syz [ 305.788833][ T5892] usb 7-1: Manufacturer: syz [ 305.793446][ T5892] usb 7-1: SerialNumber: syz [ 305.798207][ T974] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.808719][ T5894] usb 6-1: Product: syz [ 305.812944][ T5894] usb 6-1: Manufacturer: syz [ 305.817999][ T974] usb 4-1: config 0 has no interface number 0 [ 305.825461][ T974] usb 4-1: config 0 interface 238 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.840329][ T5894] usb 6-1: SerialNumber: syz [ 305.855290][ T9382] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 305.877187][ T974] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c9.e5 [ 305.904070][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.916368][ T974] usb 4-1: Product: syz [ 305.918354][ T2148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.920619][ T974] usb 4-1: Manufacturer: syz [ 305.936638][ T974] usb 4-1: SerialNumber: syz [ 305.947328][ T974] usb 4-1: config 0 descriptor?? [ 305.996271][ T974] xr_serial 4-1:0.238: skipping garbage [ 306.004821][ T2148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.021426][ T2148] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 306.031184][ T2148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.049321][ T2148] usb 2-1: config 0 descriptor?? [ 306.172764][ T974] usb 4-1: USB disconnect, device number 63 [ 306.411258][ T5894] cdc_ncm 6-1:1.0: bind() failure [ 306.425433][ T5894] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 306.434220][ T5894] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 306.444887][ T5894] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 306.467064][ T9389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.480540][ T5894] usb 6-1: USB disconnect, device number 29 [ 306.489363][ T9389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.519202][ T2148] cm6533_jd 0003:0D8C:0022.0017: item fetching failed at offset 1/5 [ 306.533022][ T2148] cm6533_jd 0003:0D8C:0022.0017: parse failed [ 306.542696][ T2148] cm6533_jd 0003:0D8C:0022.0017: probe with driver cm6533_jd failed with error -22 [ 307.493440][ T9421] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 307.509138][ T9421] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 308.036248][ T5890] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 308.118506][ T5892] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state. [ 308.156773][ T5892] dvb-usb: bulk message failed: -22 (3/0) [ 308.180678][ T9427] wireguard0: entered promiscuous mode [ 308.199780][ T9427] wireguard0: entered allmulticast mode [ 308.206674][ T5892] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 308.234363][ T5890] usb 6-1: Using ep0 maxpacket: 32 [ 308.253836][ T5892] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0) [ 308.281894][ T5890] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 308.300650][ T5892] usb 7-1: media controller created [ 308.306119][ T5890] usb 6-1: config 0 has no interface number 0 [ 308.312397][ T5890] usb 6-1: config 0 interface 184 has no altsetting 0 [ 308.326715][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.372301][ T5890] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 308.394841][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.404222][ T5892] dvb-usb: bulk message failed: -22 (6/0) [ 308.423004][ T5890] usb 6-1: Product: syz [ 308.427529][ T5892] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0' [ 308.430748][ T25] usb 2-1: USB disconnect, device number 49 [ 308.437405][ T5890] usb 6-1: Manufacturer: syz [ 308.454531][ T9429] syz_tun: entered promiscuous mode [ 308.478560][ T5890] usb 6-1: SerialNumber: syz [ 308.494002][ T5892] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input48 [ 308.513331][ T5890] usb 6-1: config 0 descriptor?? [ 308.521343][ T5890] smsc75xx v1.0.0 [ 308.558417][ T5892] dvb-usb: schedule remote query interval to 150 msecs. [ 308.583930][ T29] audit: type=1326 audit(1739378906.954:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe123d8cde9 code=0x7ffc0000 [ 308.624310][ T5892] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected. [ 308.655751][ T5892] usb 7-1: USB disconnect, device number 22 [ 308.661885][ T29] audit: type=1326 audit(1739378906.954:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe123d8cde9 code=0x7ffc0000 [ 308.713040][ T974] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 308.722212][ T29] audit: type=1326 audit(1739378907.044:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fe123d8cde9 code=0x7ffc0000 [ 308.776184][ T9431] syz_tun: left promiscuous mode [ 308.781446][ T29] audit: type=1326 audit(1739378907.044:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe123d8cde9 code=0x7ffc0000 [ 308.803776][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.818272][ T29] audit: type=1326 audit(1739378907.044:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe123d8cde9 code=0x7ffc0000 [ 308.831969][ T5892] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected. [ 308.873865][ T29] audit: type=1326 audit(1739378907.044:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe123d8cde9 code=0x7ffc0000 [ 308.919020][ T974] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58623, setting to 1024 [ 308.966083][ T974] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 308.985317][ T25] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 308.985745][ T974] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 309.003188][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.012418][ T29] audit: type=1326 audit(1739378907.044:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe123d8cde9 code=0x7ffc0000 [ 309.044042][ T974] usb 3-1: Product: syz [ 309.069004][ T974] usb 3-1: Manufacturer: syz [ 309.080948][ T974] usb 3-1: SerialNumber: syz [ 309.095607][ T9443] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1081'. [ 309.105676][ T29] audit: type=1326 audit(1739378907.044:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe123d8cde9 code=0x7ffc0000 [ 309.111239][ T9434] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 309.154597][ T5890] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 309.156441][ T29] audit: type=1326 audit(1739378907.044:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe123d8cde9 code=0x7ffc0000 [ 309.187842][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.194133][ T25] usb 2-1: device descriptor read/64, error -71 [ 309.198244][ T5890] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 309.279840][ T29] audit: type=1326 audit(1739378907.054:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe123d8b750 code=0x7ffc0000 [ 309.302205][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.412991][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1084'. [ 309.436793][ T5890] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 309.438777][ T9449] FAULT_INJECTION: forcing a failure. [ 309.438777][ T9449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.450684][ T5890] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 309.462119][ T25] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 309.472135][ T5890] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 309.489073][ T5890] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 309.504989][ T9449] CPU: 0 UID: 0 PID: 9449 Comm: syz.3.1083 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 309.505020][ T9449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 309.505033][ T9449] Call Trace: [ 309.505040][ T9449] [ 309.505049][ T9449] dump_stack_lvl+0x241/0x360 [ 309.505082][ T9449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.505104][ T9449] ? __pfx__printk+0x10/0x10 [ 309.505143][ T9449] ? snprintf+0xda/0x120 [ 309.505167][ T9449] should_fail_ex+0x40a/0x550 [ 309.505196][ T9449] _copy_to_user+0x31/0xb0 [ 309.505220][ T9449] simple_read_from_buffer+0xca/0x150 [ 309.505256][ T9449] proc_fail_nth_read+0x1e9/0x250 [ 309.505291][ T9449] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.505327][ T9449] ? rw_verify_area+0x243/0x630 [ 309.505353][ T9449] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.505387][ T9449] vfs_read+0x1f8/0xb40 [ 309.505421][ T9449] ? __pfx_vfs_read+0x10/0x10 [ 309.505467][ T9449] ksys_read+0x18f/0x2b0 [ 309.505496][ T9449] ? __pfx_ksys_read+0x10/0x10 [ 309.505525][ T9449] ? do_syscall_64+0x100/0x230 [ 309.505556][ T9449] ? do_syscall_64+0xb6/0x230 [ 309.505587][ T9449] do_syscall_64+0xf3/0x230 [ 309.505616][ T9449] ? clear_bhb_loop+0x35/0x90 [ 309.505648][ T9449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.505675][ T9449] RIP: 0033:0x7f4699d8b7fc [ 309.505693][ T9449] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 309.505711][ T9449] RSP: 002b:00007f469ac09030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 309.505732][ T9449] RAX: ffffffffffffffda RBX: 00007f4699fa5fa0 RCX: 00007f4699d8b7fc [ 309.505748][ T9449] RDX: 000000000000000f RSI: 00007f469ac090a0 RDI: 0000000000000004 [ 309.505760][ T9449] RBP: 00007f469ac09090 R08: 0000000000000000 R09: 0000000000000000 [ 309.505773][ T9449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.505793][ T9449] R13: 0000000000000000 R14: 00007f4699fa5fa0 R15: 00007f469a0cfa28 [ 309.505822][ T9449] [ 309.721237][ T25] usb 2-1: device descriptor read/64, error -71 [ 309.836505][ T25] usb usb2-port1: attempt power cycle [ 309.934538][ T5890] usb 6-1: USB disconnect, device number 30 [ 310.194437][ T25] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 310.226160][ T974] cdc_ncm 3-1:1.0: bind() failure [ 310.233153][ T25] usb 2-1: device descriptor read/8, error -71 [ 310.245553][ T974] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 310.265731][ T974] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 310.285495][ T974] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 310.315192][ T974] usb 3-1: USB disconnect, device number 49 [ 310.454516][ T5890] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 310.474457][ T25] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 310.511406][ T25] usb 2-1: device descriptor read/8, error -71 [ 310.625654][ T25] usb usb2-port1: unable to enumerate USB device [ 310.647802][ T5890] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 310.656360][ T5890] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.667794][ T5890] usb 6-1: config 0 has no interface number 0 [ 310.673925][ T5890] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice= 0.05 [ 310.683179][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.693904][ T5890] usb 6-1: config 0 descriptor?? [ 310.701045][ T5890] usb 6-1: bad CDC descriptors [ 310.734409][ T5892] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 310.869869][ T9468] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1092'. [ 310.887063][ T5892] usb 7-1: Using ep0 maxpacket: 32 [ 310.900041][ T5892] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.933765][ T5892] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.964175][ T5892] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 310.979169][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.019108][ T5892] hub 7-1:4.0: USB hub found [ 311.276617][ T9479] JFS: charset not found [ 311.357019][ T9481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.378513][ T2148] usb 6-1: USB disconnect, device number 31 [ 311.397300][ T9481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.865944][ T25] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 312.054463][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 312.061812][ T25] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.085599][ T25] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.117168][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 312.133781][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.164887][ T25] hub 3-1:4.0: USB hub found [ 312.174486][ T5890] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 312.351237][ T9502] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 312.357834][ T9502] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 312.376621][ T5890] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58623, setting to 1024 [ 312.398574][ T9502] vhci_hcd vhci_hcd.0: Device attached [ 312.416392][ T9505] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 312.422979][ T9505] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 312.424387][ T5890] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 312.440078][ T9505] vhci_hcd vhci_hcd.0: Device attached [ 312.477789][ T9502] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 312.484416][ T9502] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 312.508276][ T5890] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.509446][ T9511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.525150][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.551381][ T9505] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(12) [ 312.558064][ T9505] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 312.574503][ T9511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.576189][ T5890] usb 6-1: Product: syz [ 312.586817][ T9] vhci_hcd: vhci_device speed not set [ 312.620602][ T5890] usb 6-1: Manufacturer: syz [ 312.627570][ T9502] vhci_hcd vhci_hcd.0: Device attached [ 312.644429][ T9] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 312.649105][ T9505] vhci_hcd vhci_hcd.0: Device attached [ 312.671397][ T5890] usb 6-1: SerialNumber: syz [ 312.701603][ T9494] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 313.204479][ T5894] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 313.301037][ T5890] cdc_ncm 6-1:1.0: bind() failure [ 313.321170][ T5890] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 313.333061][ T5890] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 313.351921][ T5890] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 313.364406][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 313.385960][ T5890] usb 6-1: USB disconnect, device number 32 [ 313.422816][ T9502] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 313.447567][ T5894] usb 2-1: unable to get BOS descriptor or descriptor too short [ 313.480077][ T5894] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 313.514328][ T5894] usb 2-1: can't read configurations, error -71 [ 313.598421][ T9512] vhci_hcd: connection closed [ 313.604869][ T9506] vhci_hcd: connection closed [ 313.610722][ T9508] vhci_hcd: connection closed [ 313.615933][ T9503] vhci_hcd: connection reset by peer [ 313.628380][ T9217] vhci_hcd: stop threads [ 313.638777][ T9217] vhci_hcd: release socket [ 313.697952][ T9217] vhci_hcd: disconnect device [ 313.732828][ T9217] vhci_hcd: stop threads [ 313.782601][ T9217] vhci_hcd: release socket [ 313.829337][ T9217] vhci_hcd: disconnect device [ 313.873677][ T9217] vhci_hcd: stop threads [ 313.944095][ T9217] vhci_hcd: release socket [ 313.982517][ T9217] vhci_hcd: disconnect device [ 314.005820][ T5892] hub 7-1:4.0: config failed, can't read hub descriptor (err -22) [ 314.020188][ T9217] vhci_hcd: stop threads [ 314.046132][ T9217] vhci_hcd: release socket [ 314.094653][ T9217] vhci_hcd: disconnect device [ 314.116714][ T5892] usb 7-1: USB disconnect, device number 23 [ 314.173941][ T9524] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 314.762276][ T25] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 314.815230][ T25] usb 3-1: USB disconnect, device number 50 [ 315.444381][ T5892] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 315.549545][ T5894] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 315.605563][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 315.613771][ T5892] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 315.622500][ T5892] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 315.642769][ T5892] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 315.659542][ T5892] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 315.671364][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'. [ 315.680554][ T5892] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 315.700853][ T5892] usb 4-1: config 0 has no interface number 0 [ 315.721472][ T5892] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 315.743225][ T5892] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 315.766265][ T5894] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 315.794391][ T5892] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 315.814546][ T5894] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.834999][ T5892] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 315.854334][ T5894] usb 6-1: config 0 has no interface number 0 [ 315.860595][ T5894] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice= 0.05 [ 315.879633][ T5892] usb 4-1: config 0 interface 125 has no altsetting 0 [ 315.891346][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.904133][ T5892] usb 4-1: config 0 interface 125 has no altsetting 2 [ 315.916613][ T5894] usb 6-1: config 0 descriptor?? [ 315.939507][ T5892] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 315.940949][ T9564] netlink: 'syz.1.1125': attribute type 1 has an invalid length. [ 315.954479][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.965387][ T5894] usb 6-1: bad CDC descriptors [ 315.985335][ T5892] usb 4-1: Product: syz [ 315.989699][ T5892] usb 4-1: Manufacturer: syz [ 315.999090][ T5892] usb 4-1: SerialNumber: syz [ 316.017009][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1125'. [ 316.017021][ T5892] usb 4-1: config 0 descriptor?? [ 316.020168][ T5892] usb 4-1: selecting invalid altsetting 2 [ 316.282378][ T9573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1129'. [ 316.435616][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'. [ 316.482903][ T9579] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1131'. [ 316.782910][ T5894] usb 6-1: USB disconnect, device number 33 [ 317.087344][ T5892] get_1284_register timeout [ 317.097735][ T5892] uss720 4-1:0.125: probe with driver uss720 failed with error -5 [ 317.105759][ C0] usb 4-1: async_complete: urb error -104 [ 317.105866][ C0] usb 4-1: async_complete: urb error -104 [ 317.105949][ C0] usb 4-1: async_complete: urb error -104 [ 317.106029][ C0] usb 4-1: async_complete: urb error -104 [ 317.305357][ T9599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.314006][ T9599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.352527][ T8] usb 4-1: USB disconnect, device number 64 [ 317.385454][ T9601] FAULT_INJECTION: forcing a failure. [ 317.385454][ T9601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.419889][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.427993][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.440073][ T9601] CPU: 1 UID: 0 PID: 9601 Comm: syz.1.1141 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 317.440102][ T9601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 317.440116][ T9601] Call Trace: [ 317.440123][ T9601] [ 317.440132][ T9601] dump_stack_lvl+0x241/0x360 [ 317.440172][ T9601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.440195][ T9601] ? __pfx__printk+0x10/0x10 [ 317.440235][ T9601] ? snprintf+0xda/0x120 [ 317.440262][ T9601] should_fail_ex+0x40a/0x550 [ 317.440292][ T9601] _copy_to_user+0x31/0xb0 [ 317.440318][ T9601] simple_read_from_buffer+0xca/0x150 [ 317.440356][ T9601] proc_fail_nth_read+0x1e9/0x250 [ 317.440393][ T9601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 317.440430][ T9601] ? rw_verify_area+0x243/0x630 [ 317.440458][ T9601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 317.440494][ T9601] vfs_read+0x1f8/0xb40 [ 317.440522][ T9601] ? fdget_pos+0x254/0x320 [ 317.440547][ T9601] ? __pfx___mutex_lock+0x10/0x10 [ 317.440577][ T9601] ? __pfx_vfs_read+0x10/0x10 [ 317.440600][ T9601] ? do_sys_openat2+0x17a/0x1d0 [ 317.440624][ T9601] ? __fget_files+0x2a/0x410 [ 317.440648][ T9601] ? __fget_files+0x395/0x410 [ 317.440667][ T9601] ? __fget_files+0x2a/0x410 [ 317.440697][ T9601] ksys_read+0x18f/0x2b0 [ 317.440726][ T9601] ? __pfx_ksys_read+0x10/0x10 [ 317.440753][ T9601] ? do_syscall_64+0x100/0x230 [ 317.440785][ T9601] ? do_syscall_64+0xb6/0x230 [ 317.440816][ T9601] do_syscall_64+0xf3/0x230 [ 317.440846][ T9601] ? clear_bhb_loop+0x35/0x90 [ 317.440878][ T9601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.440906][ T9601] RIP: 0033:0x7fe123d8b7fc [ 317.440924][ T9601] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 317.440940][ T9601] RSP: 002b:00007fe124b5b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 317.440962][ T9601] RAX: ffffffffffffffda RBX: 00007fe123fa5fa0 RCX: 00007fe123d8b7fc [ 317.440978][ T9601] RDX: 000000000000000f RSI: 00007fe124b5b0a0 RDI: 0000000000000005 [ 317.440991][ T9601] RBP: 00007fe124b5b090 R08: 0000000000000000 R09: 0000000000000000 [ 317.441004][ T9601] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 317.441017][ T9601] R13: 0000000000000000 R14: 00007fe123fa5fa0 R15: 00007fe1240cfa28 [ 317.441047][ T9601] [ 317.671485][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.813533][ T9] vhci_hcd: vhci_device speed not set [ 317.820564][ T9605] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1140'. [ 317.955112][ T9606] ipvlan2: entered promiscuous mode [ 317.987573][ T9606] bridge0: port 3(ipvlan2) entered blocking state [ 318.018380][ T9606] bridge0: port 3(ipvlan2) entered disabled state [ 318.104531][ T9606] ipvlan2: entered allmulticast mode [ 318.109901][ T9606] bridge0: entered allmulticast mode [ 318.139810][ T9606] ipvlan2: left allmulticast mode [ 318.170199][ T9606] bridge0: left allmulticast mode [ 318.244417][ T8] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 318.302991][ T9612] netlink: 'syz.6.1144': attribute type 29 has an invalid length. [ 318.431317][ T8] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 318.442396][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.468967][ T8] usb 2-1: config 0 descriptor?? [ 318.490164][ T8] cp210x 2-1:0.0: cp210x converter detected [ 318.707665][ T5892] hid-generic 0000:0003:0000.0018: item fetching failed at offset 0/2 [ 318.719095][ T5892] hid-generic 0000:0003:0000.0018: probe with driver hid-generic failed with error -22 [ 318.737842][ T8] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 318.749074][ T8] cp210x 2-1:0.0: querying part number failed [ 318.760316][ T8] usb 2-1: cp210x converter now attached to ttyUSB0 [ 318.774457][ T5894] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 318.787369][ T8] usb 2-1: USB disconnect, device number 56 [ 318.802136][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 318.810501][ T8] cp210x 2-1:0.0: device disconnected [ 318.874531][ T25] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 318.934393][ T5894] usb 6-1: Using ep0 maxpacket: 16 [ 318.941047][ T5894] usb 6-1: config index 0 descriptor too short (expected 69, got 36) [ 318.950406][ T5894] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.964402][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.974172][ T5894] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.990006][ T5894] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 319.000058][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.010381][ T5894] usb 6-1: Product: syz [ 319.014748][ T5894] usb 6-1: Manufacturer: syz [ 319.019466][ T5894] usb 6-1: SerialNumber: syz [ 319.034539][ T5894] usb 6-1: config 0 descriptor?? [ 319.038947][ T25] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 319.048554][ T5894] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 319.053388][ T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.072066][ T25] usb 7-1: config 0 has no interface number 0 [ 319.080057][ T25] usb 7-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice= 0.05 [ 319.098600][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.111574][ T25] usb 7-1: config 0 descriptor?? [ 319.120918][ T25] usb 7-1: bad CDC descriptors [ 319.373320][ T9627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.394734][ T9627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.604480][ T5892] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 319.813057][ T9] usb 7-1: USB disconnect, device number 24 [ 319.825850][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 319.857752][ T5892] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 319.874413][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.915437][ T5892] usb 3-1: config 0 descriptor?? [ 319.963116][ T5894] input: gspca_pac7302 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input49 [ 320.129532][ T5892] usbhid 3-1:0.0: can't add hid device: -71 [ 320.145356][ T5892] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 320.184909][ T5892] usb 3-1: USB disconnect, device number 51 [ 320.894424][ T25] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 321.054405][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 321.061608][ T25] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 321.061641][ T25] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 321.061666][ T25] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 321.061689][ T25] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 321.061712][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 321.061736][ T25] usb 4-1: config 0 has no interface number 0 [ 321.061770][ T25] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 321.061811][ T25] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 321.061834][ T25] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 321.061864][ T25] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.061901][ T25] usb 4-1: config 0 interface 125 has no altsetting 0 [ 321.061921][ T25] usb 4-1: config 0 interface 125 has no altsetting 2 [ 321.074692][ T25] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 321.074727][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.074753][ T25] usb 4-1: Product: syz [ 321.074770][ T25] usb 4-1: Manufacturer: syz [ 321.074789][ T25] usb 4-1: SerialNumber: syz [ 321.077027][ T25] usb 4-1: config 0 descriptor?? [ 321.081865][ T25] usb 4-1: selecting invalid altsetting 2 [ 321.148087][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 321.310028][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 321.324161][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 321.340551][ T9] usb 2-1: config 0 has no interface number 0 [ 321.348128][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 321.362795][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 321.373642][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.388934][ T9] usb 2-1: Product: syz [ 321.393213][ T9] usb 2-1: Manufacturer: syz [ 321.399514][ T9] usb 2-1: SerialNumber: syz [ 321.410463][ T9] usb 2-1: config 0 descriptor?? [ 321.477527][ T9] smsc75xx v1.0.0 [ 321.529848][ T5894] usb 6-1: USB disconnect, device number 34 [ 321.854621][ T5892] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 321.925364][ T9670] netlink: 'syz.5.1165': attribute type 7 has an invalid length. [ 322.047808][ T5892] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 322.073702][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 322.088558][ T5892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.109382][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 322.124520][ T25] get_1284_register timeout [ 322.129115][ T25] uss720 4-1:0.125: probe with driver uss720 failed with error -5 [ 322.137151][ C1] usb 4-1: async_complete: urb error -104 [ 322.137246][ C1] usb 4-1: async_complete: urb error -104 [ 322.137329][ C1] usb 4-1: async_complete: urb error -104 [ 322.137411][ C1] usb 4-1: async_complete: urb error -104 [ 322.150096][ T5892] usb 3-1: config 0 has no interface number 0 [ 322.190553][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 322.244795][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 322.263448][ T5892] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice= 0.05 [ 322.318453][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.471966][ T5892] usb 3-1: config 0 descriptor?? [ 322.535799][ T5892] usb 3-1: bad CDC descriptors [ 322.575148][ T9672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.686893][ T9672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.730819][ T2148] usb 4-1: USB disconnect, device number 65 [ 323.140305][ T9] usb 3-1: USB disconnect, device number 52 [ 323.924878][ T9] usb 2-1: USB disconnect, device number 57 [ 324.628081][ T9725] FAULT_INJECTION: forcing a failure. [ 324.628081][ T9725] name failslab, interval 1, probability 0, space 0, times 0 [ 324.670727][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1183'. [ 324.703049][ T9725] CPU: 0 UID: 0 PID: 9725 Comm: syz.2.1184 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 324.703080][ T9725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 324.703093][ T9725] Call Trace: [ 324.703101][ T9725] [ 324.703110][ T9725] dump_stack_lvl+0x241/0x360 [ 324.703141][ T9725] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.703164][ T9725] ? __pfx__printk+0x10/0x10 [ 324.703201][ T9725] ? fs_reclaim_acquire+0x93/0x130 [ 324.703231][ T9725] ? __pfx___might_resched+0x10/0x10 [ 324.703262][ T9725] should_fail_ex+0x40a/0x550 [ 324.703293][ T9725] should_failslab+0xac/0x100 [ 324.703316][ T9725] __kmalloc_noprof+0xdd/0x4c0 [ 324.703339][ T9725] ? tomoyo_encode+0x26f/0x540 [ 324.703376][ T9725] tomoyo_encode+0x26f/0x540 [ 324.703414][ T9725] tomoyo_realpath_from_path+0x59e/0x5e0 [ 324.703461][ T9725] tomoyo_path_number_perm+0x236/0x860 [ 324.703490][ T9725] ? tomoyo_path_number_perm+0x206/0x860 [ 324.703518][ T9725] ? tomoyo_path_number_perm+0x206/0x860 [ 324.703545][ T9725] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 324.703573][ T9725] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 324.703648][ T9725] ? __pfx_from_kgid+0x10/0x10 [ 324.703681][ T9725] ? down_write+0x18c/0x220 [ 324.703721][ T9725] security_path_chown+0x140/0x370 [ 324.703748][ T9725] chown_common+0x4b3/0x850 [ 324.703782][ T9725] ? __pfx_chown_common+0x10/0x10 [ 324.703816][ T9725] ? rcu_read_lock_any_held+0xb7/0x160 [ 324.703847][ T9725] ? mnt_get_write_access+0x226/0x2b0 [ 324.703885][ T9725] do_fchownat+0x16a/0x240 [ 324.703908][ T9725] ? __pfx_do_fchownat+0x10/0x10 [ 324.703928][ T9725] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 324.703960][ T9725] ? do_syscall_64+0x100/0x230 [ 324.703995][ T9725] __x64_sys_lchown+0x85/0xa0 [ 324.704018][ T9725] do_syscall_64+0xf3/0x230 [ 324.704047][ T9725] ? clear_bhb_loop+0x35/0x90 [ 324.704085][ T9725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.704114][ T9725] RIP: 0033:0x7f49a418cde9 [ 324.704132][ T9725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.704150][ T9725] RSP: 002b:00007f49a508c038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 324.704172][ T9725] RAX: ffffffffffffffda RBX: 00007f49a43a6080 RCX: 00007f49a418cde9 [ 324.704188][ T9725] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000000040 [ 324.704202][ T9725] RBP: 00007f49a508c090 R08: 0000000000000000 R09: 0000000000000000 [ 324.704215][ T9725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.704227][ T9725] R13: 0000000000000000 R14: 00007f49a43a6080 R15: 00007f49a44cfa28 [ 324.704258][ T9725] [ 324.708831][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1183'. [ 324.744576][ T9725] ERROR: Out of memory at tomoyo_realpath_from_path. [ 325.080432][ T9715] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 325.755271][ T1325] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.788076][ T9711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.794656][ T2148] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 326.039647][ T9709] syz.1.1181 (9709): drop_caches: 2 [ 326.093434][ T2148] usb 3-1: Invalid ep0 maxpacket: 64 [ 326.176174][ T1325] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.214598][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 326.303422][ T2148] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 326.365832][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 326.373654][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.406123][ T1325] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.414356][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.463561][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 326.494442][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 326.501604][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.512694][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 326.521788][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 326.522682][ T9] hub 4-1:4.0: USB hub found [ 326.528966][ T2148] usb 3-1: Invalid ep0 maxpacket: 64 [ 326.529364][ T2148] usb usb3-port1: attempt power cycle [ 326.555120][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 326.563598][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 326.570983][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 326.700724][ T1325] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.809898][ T9745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.839844][ T9745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.994424][ T2148] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 327.026964][ T2148] usb 3-1: Invalid ep0 maxpacket: 64 [ 327.033025][ T1325] bridge_slave_1: left allmulticast mode [ 327.040058][ T1325] bridge_slave_1: left promiscuous mode [ 327.045996][ T1325] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.097358][ T1325] bridge_slave_0: left allmulticast mode [ 327.103153][ T1325] bridge_slave_0: left promiscuous mode [ 327.126395][ T1325] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.164643][ T2148] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 327.256877][ T2148] usb 3-1: Invalid ep0 maxpacket: 64 [ 327.275915][ T2148] usb usb3-port1: unable to enumerate USB device [ 327.473243][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 327.473265][ T29] audit: type=1326 audit(1739378925.854:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9755 comm="syz.5.1196" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa19998cde9 code=0x0 [ 328.074928][ T1325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.094800][ T1325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.116407][ T1325] bond0 (unregistering): Released all slaves [ 328.619880][ T54] Bluetooth: hci2: command tx timeout [ 328.661300][ T9742] chnl_net:caif_netlink_parms(): no params data found [ 328.904570][ T1325] hsr_slave_0: left promiscuous mode [ 328.920930][ T1325] hsr_slave_1: left promiscuous mode [ 328.935093][ T1325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.942743][ T1325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.013575][ T9] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 329.038042][ T1325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.082751][ T1325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.084249][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 434.091393][ C1] rcu: 0-...!: (1 GPs behind) idle=d16c/1/0x4000000000000000 softirq=40160/40161 fqs=1 [ 434.102444][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5208/2:b..l P5854/1:b..l [ 434.111551][ C1] rcu: (detected by 1, t=10502 jiffies, g=44669, q=195 ncpus=2) [ 434.119312][ C1] Sending NMI from CPU 1 to CPUs 0: [ 434.119364][ C0] NMI backtrace for cpu 0 [ 434.119380][ C0] CPU: 0 UID: 0 PID: 9770 Comm: syz.5.1200 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 434.119400][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 434.119412][ C0] RIP: 0010:lock_acquire+0x37/0x550 [ 434.119457][ C0] Code: 55 41 54 53 48 83 e4 e0 48 81 ec 20 01 00 00 4c 89 4c 24 28 4c 89 44 24 38 48 89 4c 24 30 89 54 24 1c 41 89 f6 48 89 7c 24 20 <65> 48 8b 04 25 28 00 00 00 48 89 84 24 00 01 00 00 49 bd 00 00 00 [ 434.119474][ C0] RSP: 0018:ffffc90003547ae0 EFLAGS: 00000082 [ 434.119490][ C0] RAX: 0000000000000002 RBX: 1ffff920006a8f8c RCX: 0000000000000000 [ 434.119503][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8f0e6cd8 [ 434.119515][ C0] RBP: ffffc90003547c28 R08: 0000000000000001 R09: 0000000000000000 [ 434.119527][ C0] R10: dffffc0000000000 R11: fffffbfff1e1cd99 R12: 0000000000000046 [ 434.119540][ C0] R13: 1ffff920006a8f88 R14: 0000000000000000 R15: dffffc0000000000 [ 434.119571][ C0] FS: 000055555f8fe500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 434.119587][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 434.119599][ C0] CR2: 00007f8ff6c00218 CR3: 0000000053e76000 CR4: 00000000003526f0 [ 434.119615][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 434.119626][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 434.119638][ C0] Call Trace: [ 434.119646][ C0] [ 434.119655][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 434.119678][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 434.119704][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 434.119725][ C0] ? nmi_handle+0x2a/0x5a0 [ 434.119759][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 434.119782][ C0] ? nmi_handle+0x14f/0x5a0 [ 434.119808][ C0] ? nmi_handle+0x2a/0x5a0 [ 434.119836][ C0] ? lock_acquire+0x37/0x550 [ 434.119859][ C0] ? default_do_nmi+0x63/0x160 [ 434.119878][ C0] ? exc_nmi+0x123/0x1f0 [ 434.119896][ C0] ? end_repeat_nmi+0xf/0x53 [ 434.119928][ C0] ? lock_acquire+0x37/0x550 [ 434.119953][ C0] ? lock_acquire+0x37/0x550 [ 434.119978][ C0] ? lock_acquire+0x37/0x550 [ 434.120002][ C0] [ 434.120008][ C0] [ 434.120020][ C0] ? vga_arb_release+0x40b/0xaf0 [ 434.120037][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 434.120058][ C0] ? __pfx_lock_release+0x10/0x10 [ 434.120093][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 434.120116][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 434.120138][ C0] ? vga_arb_release+0x230/0xaf0 [ 434.120155][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 434.120179][ C0] ? __pfx___fsnotify_parent+0x10/0x10 [ 434.120209][ C0] vga_arb_release+0x230/0xaf0 [ 434.120231][ C0] ? __pfx_vga_arb_release+0x10/0x10 [ 434.120250][ C0] __fput+0x3e9/0x9f0 [ 434.120277][ C0] task_work_run+0x24f/0x310 [ 434.120305][ C0] ? _raw_spin_unlock+0x28/0x50 [ 434.120330][ C0] ? __pfx_task_work_run+0x10/0x10 [ 434.120360][ C0] ? syscall_exit_to_user_mode+0xa3/0x340 [ 434.120388][ C0] syscall_exit_to_user_mode+0x13f/0x340 [ 434.120415][ C0] do_syscall_64+0x100/0x230 [ 434.120441][ C0] ? clear_bhb_loop+0x35/0x90 [ 434.120468][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.120493][ C0] RIP: 0033:0x7fa19998cde9 [ 434.120510][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.120525][ C0] RSP: 002b:00007fa199ccfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 434.120543][ C0] RAX: 0000000000000000 RBX: 0000000000050413 RCX: 00007fa19998cde9 [ 434.120556][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 434.120566][ C0] RBP: 00007fa199ba7ba0 R08: 0000000000000001 R09: 0000002199ccfe7f [ 434.120579][ C0] R10: 00007fa199800000 R11: 0000000000000246 R12: 00007fa199ba608c [ 434.120592][ C0] R13: 00007fa199ba6080 R14: ffffffffffffffff R15: 00007fa199ccfca0 [ 434.120613][ C0] [ 434.121357][ C1] task:syz-executor state:R running task stack:19536 pid:5854 tgid:5854 ppid:5832 task_flags:0x400140 flags:0x00004000 [ 434.525967][ C1] Call Trace: [ 434.529276][ C1] [ 434.532235][ C1] __schedule+0x190e/0x4c90 [ 434.536801][ C1] ? __pfx___schedule+0x10/0x10 [ 434.541683][ C1] ? mark_lock+0x9a/0x360 [ 434.546063][ C1] ? preempt_schedule+0xe1/0xf0 [ 434.550948][ C1] preempt_schedule_common+0x84/0xd0 [ 434.556266][ C1] preempt_schedule+0xe1/0xf0 [ 434.560976][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 434.566401][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 434.572323][ C1] ? __page_table_check_ptes_set+0x30f/0x410 [ 434.578345][ C1] ? copy_pmd_range+0x6d6d/0x77a0 [ 434.583401][ C1] preempt_schedule_thunk+0x1a/0x30 [ 434.588642][ C1] _raw_spin_unlock+0x3e/0x50 [ 434.593346][ C1] copy_pmd_range+0x6dc8/0x77a0 [ 434.598262][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 434.603511][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 434.608747][ C1] ? look_up_lock_class+0x77/0x170 [ 434.613895][ C1] ? register_lock_class+0x102/0x980 [ 434.619224][ C1] ? __pfx_mas_destroy+0x10/0x10 [ 434.624201][ C1] ? mark_lock+0x9a/0x360 [ 434.628575][ C1] ? __lock_acquire+0x1397/0x2100 [ 434.633664][ C1] copy_page_range+0x99f/0xe90 [ 434.638475][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 434.643793][ C1] ? __pfx_up_write+0x10/0x10 [ 434.648498][ C1] ? __asan_memset+0x23/0x50 [ 434.653121][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 434.659911][ C1] ? vma_interval_tree_insert_after+0x259/0x2b0 [ 434.666189][ C1] copy_mm+0x1269/0x2160 [ 434.670485][ C1] ? __pfx_copy_mm+0x10/0x10 [ 434.675122][ C1] ? __init_rwsem+0x122/0x160 [ 434.679829][ C1] ? copy_signal+0x51c/0x640 [ 434.684452][ C1] copy_process+0x1845/0x3d50 [ 434.689175][ C1] ? copy_process+0x9fa/0x3d50 [ 434.693970][ C1] ? __lock_acquire+0x1397/0x2100 [ 434.699030][ C1] ? __pfx_copy_process+0x10/0x10 [ 434.704107][ C1] kernel_clone+0x226/0x8e0 [ 434.708650][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 434.713722][ C1] __x64_sys_clone+0x258/0x2a0 [ 434.718533][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 434.723845][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 434.729870][ C1] ? exc_page_fault+0x590/0x8b0 [ 434.734753][ C1] ? do_syscall_64+0xb6/0x230 [ 434.739467][ C1] do_syscall_64+0xf3/0x230 [ 434.744022][ C1] ? clear_bhb_loop+0x35/0x90 [ 434.748740][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.754665][ C1] RIP: 0033:0x7fe123d83653 [ 434.759105][ C1] RSP: 002b:00007fe1240cfca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 434.767547][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe123d83653 [ 434.775539][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 434.783534][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 434.791524][ C1] R10: 000055556e3647d0 R11: 0000000000000246 R12: 0000000000000000 [ 434.799515][ C1] R13: 00000000000927c0 R14: 0000000000050474 R15: 00007fe1240cfe40 [ 434.807525][ C1] [ 434.810570][ C1] task:udevd state:R running task stack:21376 pid:5208 tgid:5208 ppid:1 task_flags:0x400140 flags:0x00000002 [ 434.824103][ C1] Call Trace: [ 434.827404][ C1] [ 434.830362][ C1] __schedule+0x190e/0x4c90 [ 434.834910][ C1] ? unwind_next_frame+0x18e6/0x22d0 [ 434.840239][ C1] ? __pfx___schedule+0x10/0x10 [ 434.845123][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 434.851149][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 434.856467][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 434.861611][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 434.867388][ C1] irqentry_exit+0x5e/0x90 [ 434.871839][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 434.877857][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x1d6/0x220 [ 434.884742][ C1] Code: 62 e8 ce 64 77 ff 4d 85 f6 48 bb 00 00 00 00 00 fc ff df 75 07 e8 ba 64 77 ff eb 06 e8 b3 64 77 ff fb 48 c7 04 24 0e 36 e0 45 <4a> c7 04 23 00 00 00 00 66 42 c7 44 23 09 00 00 42 c6 44 23 0b 00 [ 434.904375][ C1] RSP: 0018:ffffc90002fa73a0 EFLAGS: 00000293 [ 434.910470][ C1] RAX: ffffffff8247eaed RBX: dffffc0000000000 RCX: ffff88807ce60000 [ 434.918469][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 434.926462][ C1] RBP: ffffc90002fa7450 R08: ffffffff8247eac8 R09: 1ffffffff285f710 [ 434.934476][ C1] R10: dffffc0000000000 R11: fffffbfff285f711 R12: 1ffff920005f4e74 [ 434.942470][ C1] R13: ffffc90002fa73c0 R14: 0000000000000200 R15: 0000000000000046 [ 434.950473][ C1] ? seqcount_lockdep_reader_access+0x1a8/0x220 [ 434.956752][ C1] ? seqcount_lockdep_reader_access+0x1cd/0x220 [ 434.963040][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 434.969684][ C1] prepend_path+0x297/0xbe0 [ 434.974226][ C1] ? prepend_path+0x2f/0xbe0 [ 434.978851][ C1] d_absolute_path+0x179/0x310 [ 434.983646][ C1] ? __pfx_d_absolute_path+0x10/0x10 [ 434.988969][ C1] ? trace_kmalloc+0x1f/0xd0 [ 434.993583][ C1] ? __kmalloc_noprof+0x2a5/0x4c0 [ 434.998634][ C1] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 435.004418][ C1] tomoyo_realpath_from_path+0x2b4/0x5e0 [ 435.010101][ C1] tomoyo_path_perm+0x2b7/0x740 [ 435.014987][ C1] ? tomoyo_path_perm+0x287/0x740 [ 435.020051][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 435.025483][ C1] ? ima_file_check+0xd9/0x120 [ 435.030284][ C1] ? __pfx_ima_file_check+0x10/0x10 [ 435.035526][ C1] security_file_truncate+0xac/0x250 [ 435.040843][ C1] path_openat+0x2dbf/0x3590 [ 435.045504][ C1] ? __pfx_path_openat+0x10/0x10 [ 435.050495][ C1] do_filp_open+0x27f/0x4e0 [ 435.055035][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 435.060094][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 435.065187][ C1] do_sys_openat2+0x13e/0x1d0 [ 435.069888][ C1] ? call_rcu+0x799/0xac0 [ 435.074242][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 435.079471][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 435.084709][ C1] __x64_sys_openat+0x247/0x2a0 [ 435.089593][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 435.094998][ C1] ? do_syscall_64+0x100/0x230 [ 435.099804][ C1] ? do_syscall_64+0xb6/0x230 [ 435.104518][ C1] do_syscall_64+0xf3/0x230 [ 435.109076][ C1] ? clear_bhb_loop+0x35/0x90 [ 435.113791][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.119716][ C1] RIP: 0033:0x7f7214f169a4 [ 435.124154][ C1] RSP: 002b:00007ffcfbcbf3c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 435.132596][ C1] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f7214f169a4 [ 435.140596][ C1] RDX: 0000000000080241 RSI: 00007ffcfbcbf7f8 RDI: 00000000ffffff9c [ 435.148589][ C1] RBP: 00007ffcfbcbf7f8 R08: 0000000000000004 R09: 0000000000000001 [ 435.156577][ C1] R10: 00000000000001b6 R11: 0000000000000246 R12: 0000000000080241 [ 435.164571][ C1] R13: 000055f3ca57372e R14: 0000000000000001 R15: 0000000000000000 [ 435.172582][ C1] [ 435.175619][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g44669 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 435.186835][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 435.196822][ C1] rcu: RCU grace-period kthread stack dump: [ 435.202726][ C1] task:rcu_preempt state:R running task stack:26104 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 435.216256][ C1] Call Trace: [ 435.219556][ C1] [ 435.222514][ C1] __schedule+0x190e/0x4c90 [ 435.227056][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 435.232998][ C1] ? __pfx___schedule+0x10/0x10 [ 435.237885][ C1] ? __pfx_lock_release+0x10/0x10 [ 435.242946][ C1] ? __pfx___mod_timer+0x10/0x10 [ 435.247914][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 435.254278][ C1] ? schedule+0x90/0x320 [ 435.258552][ C1] schedule+0x14b/0x320 [ 435.262765][ C1] schedule_timeout+0x15a/0x290 [ 435.267671][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 435.273078][ C1] ? __pfx_process_timeout+0x10/0x10 [ 435.278400][ C1] ? prepare_to_swait_event+0x330/0x350 [ 435.283983][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 435.288865][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 435.294135][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 435.300084][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 435.305411][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 435.311346][ C1] ? finish_swait+0xd4/0x1e0 [ 435.315975][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 435.321216][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 435.325868][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 435.331135][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 435.337120][ C1] ? __kthread_parkme+0x169/0x1d0 [ 435.342225][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 435.347465][ C1] kthread+0x7a9/0x920 [ 435.351569][ C1] ? __pfx_kthread+0x10/0x10 [ 435.356209][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 435.361448][ C1] ? __pfx_kthread+0x10/0x10 [ 435.366083][ C1] ? __pfx_kthread+0x10/0x10 [ 435.370709][ C1] ? __pfx_kthread+0x10/0x10 [ 435.375325][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 435.380556][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 435.385783][ C1] ? __pfx_kthread+0x10/0x10 [ 435.390408][ C1] ret_from_fork+0x4b/0x80 [ 435.394857][ C1] ? __pfx_kthread+0x10/0x10 [ 435.399480][ C1] ret_from_fork_asm+0x1a/0x30 [ 435.404291][ C1] [ 435.407376][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 435.413722][ C1] CPU: 1 UID: 0 PID: 5853 Comm: syz-executor Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 435.424615][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 435.434708][ C1] RIP: 0010:smp_call_function_many_cond+0x1ba4/0x2d30 [ 435.441516][ C1] Code: 03 84 c0 75 7e 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 b0 e8 0b 00 41 83 e4 01 4c 8b 64 24 68 75 07 e8 60 e4 0b 00 eb 41 f3 90 <48> b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 45 00 [ 435.461153][ C1] RSP: 0018:ffffc90003dff560 EFLAGS: 00000293 [ 435.467260][ C1] RAX: ffffffff81b36b65 RBX: 1ffff110170c8c99 RCX: ffff888012a3bc00 [ 435.475258][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 435.483252][ C1] RBP: ffffc90003dff760 R08: ffffffff81b36b30 R09: 1ffffffff285f70e [ 435.491253][ C1] R10: dffffc0000000000 R11: fffffbfff285f70f R12: ffff8880b873fb48 [ 435.499253][ C1] R13: ffff8880b86464c8 R14: ffff8880b873fb40 R15: 0000000000000000 [ 435.507250][ C1] FS: 000055558f94a500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 435.516231][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 435.522851][ C1] CR2: 000055b19e8f2950 CR3: 0000000061442000 CR4: 00000000003526f0 [ 435.530854][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 435.538857][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 435.546864][ C1] Call Trace: [ 435.550176][ C1] [ 435.553049][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 435.559429][ C1] ? print_other_cpu_stall+0x1481/0x15c0 [ 435.565116][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 435.570961][ C1] ? cgroup_rstat_updated+0x13b/0xc30 [ 435.576387][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 435.582662][ C1] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 435.588071][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 435.593742][ C1] ? update_process_times+0x242/0x2f0 [ 435.599153][ C1] ? tick_nohz_handler+0x37c/0x500 [ 435.604297][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 435.609786][ C1] ? __hrtimer_run_queues+0x551/0xd30 [ 435.615216][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 435.620970][ C1] ? handle_softirqs+0x7e0/0x9b0 [ 435.625939][ C1] ? read_tsc+0x9/0x20 [ 435.630041][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 435.636150][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 435.641326][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 435.647521][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 435.653359][ C1] [ 435.656312][ C1] [ 435.659269][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 435.665467][ C1] ? smp_call_function_many_cond+0x1b90/0x2d30 [ 435.671664][ C1] ? smp_call_function_many_cond+0x1bc5/0x2d30 [ 435.677864][ C1] ? smp_call_function_many_cond+0x1ba4/0x2d30 [ 435.684083][ C1] ? __mutex_unlock_slowpath+0x227/0x800 [ 435.689770][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 435.696140][ C1] ? __pfx_lock_release+0x10/0x10 [ 435.701206][ C1] ? rcu_is_watching+0x15/0xb0 [ 435.705996][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 435.711238][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 435.716393][ C1] flush_tlb_mm_range+0x42d/0x710 [ 435.721461][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 435.727062][ C1] copy_mm+0x18af/0x2160 [ 435.731364][ C1] ? __pfx_copy_mm+0x10/0x10 [ 435.735997][ C1] ? __init_rwsem+0x122/0x160 [ 435.740704][ C1] ? copy_signal+0x51c/0x640 [ 435.745377][ C1] copy_process+0x1845/0x3d50 [ 435.750100][ C1] ? copy_process+0x9fa/0x3d50 [ 435.754900][ C1] ? __lock_acquire+0x1397/0x2100 [ 435.759964][ C1] ? __pfx_copy_process+0x10/0x10 [ 435.765039][ C1] kernel_clone+0x226/0x8e0 [ 435.769579][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 435.774656][ C1] __x64_sys_clone+0x258/0x2a0 [ 435.779458][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 435.784775][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 435.790802][ C1] ? exc_page_fault+0x590/0x8b0 [ 435.795697][ C1] ? do_syscall_64+0xb6/0x230 [ 435.800421][ C1] do_syscall_64+0xf3/0x230 [ 435.804963][ C1] ? clear_bhb_loop+0x35/0x90 [ 435.809682][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.815877][ C1] RIP: 0033:0x7f4699d83653 [ 435.820322][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 435.839977][ C1] RSP: 002b:00007f469a0cfca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 435.848435][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4699d83653 [ 435.856430][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 435.864448][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 435.872466][ C1] R10: 000055558f94a7d0 R11: 0000000000000246 R12: 0000000000000000 [ 435.880466][ C1] R13: 0000000000000047 R14: 000000000004fe62 R15: 00007f469a0cfe40 [ 435.888482][ C1]