last executing test programs: 2m39.686708835s ago: executing program 3 (id=1166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x21, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) (fail_nth: 3) 2m39.607074144s ago: executing program 3 (id=1167): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xfffffffffffffdf5, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x8], 0x1, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000), 0x9, 0x101000) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r4, 0x200, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x400c010) 2m39.162081375s ago: executing program 3 (id=1171): r0 = syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0) socket(0xa, 0x3, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f00000002c0), 0x3, 0x2174910146b4b9d3) socket$inet(0x2, 0x2, 0x0) r3 = userfaultfd(0x801) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup2(r3, r3) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000280)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r5, 0x40a0ae49, &(0x7f0000000000)={0x4, 0x0, 0x0, r6, 0x100000}) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)=0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x11, 0x5, 0x203) write(r8, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000000003400000000004001e8040000000", 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d8001200", @ANYBLOB="000425bd7000fedbdf25680000000c009900f7ffffff490000001400c7007f0300050607c405517747ee340006b43600c7000301440104067f02000109010306000605040701090081054e030705040010058004c40500018b04020216481fcf19af0c6400001200c700810504010c02d40c1c9bc5c6d0ae00002e00c70004070104010108070004f80507010905040503040a025005f9000701b2070502c30798d4bc4c1cf466e700001400c7000406020305020507b122d3588c59fb871200c70007070405030584c8f37b092f7c2a0000"], 0xd8}, 0x1, 0x0, 0x0, 0xc8880}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getgid() r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000069f1657f0000da7205c8b33ea4334c0e6808c265ac8aefcb0b23262c68d7dd41fd856841f429c00d0b5d4a071f943e492892dac284145db6a7226b6e2fa3a09890989023667a4f5d22afbb7e95443e5dc9286aad2125509cf51cf092de936595a6418d4c8c8eca04840b6ff033c12e2e461043fefdd02b14ac490de86d3564827e4b167010"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r9, 0x2c8ad000) futex(&(0x7f0000004000), 0xb, 0x0, 0x0, &(0x7f0000004000), 0xba01fffe) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) 2m37.280045253s ago: executing program 3 (id=1181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x21, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) 2m36.855446666s ago: executing program 3 (id=1183): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x8}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001a40)={{0x80}, 'port0\x00', 0x0, 0xa1c07, 0x6, 0x0, 0x100001, 0xf42, 0x20000, 0x0, 0x6}) r3 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x8003, 0x200) symlinkat(&(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000200)='./file0\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r4 = fsopen(&(0x7f00000000c0)='f2fs\x00', 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000180)={0x20, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000240)='\x10\xca\xa1E\xf8\xaa\xa7QbT\xe3\xba[\x13\x88\xa9\xaeBD\x00\xaf\xad\xf9\x9f\xe6y?\xe1<0+a\x91\xc7\xd4\x18\xc3\x86`\x84\x870z\x92J$\x03)\xfb`^\xea?\xb7\x04\xd7\x99h\x81_\t \x8c8\x9a\x8d\xa1\xc3\xda\xaf\xc3G\xe2\xe9\xa6u|\xbe\xc0\xfb\xda\x1e\x12\xcc\"D\x17\xf0\xcc\xdd\r\xc3\xdb\xef\xe0\xf9\xc6\xe9\x81\x8a\x06\xf8dl`8+\xec\x7f\xdfI\xbc|U\xef\xa0', 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000000300)="e61b1177f5bb9c6fc6016878ff2234de11359dde047d3f7592fa3c4862fec55ac3248ff864485e7a0720da01174516b7f19ec1e29b14edc4c630ac8b7ec4322198b16fe89d2e6a9a5b1fdc97d7ec31b5633074fd671b1667b1b0") r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, r0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 2m36.174077156s ago: executing program 1 (id=1186): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000001801a1f7f656702500000000002020207b1af8ff0000bfa107000000000007010000f8ffffffb70200000888f59ac24d5e3c20cdc1992f18fdc50bccee69fbac2dcb2b2d2beb42eec4f9fa8c8e04ccfb0dc62438fc56c4202ad0d5378652514bdeb81cbcdda41062a3ef544cfd7469cbb89a7a0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000003640), 0x40401, 0x0) write$binfmt_script(r0, &(0x7f0000003680)={'#! ', './file0', [], 0xa, "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"}, 0xfdb) r1 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = memfd_create(&(0x7f0000000000)='/-\x00', 0x4) dup(r3) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ftruncate(r6, 0x796c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}}, 0x7, 0x21}, 0x90) (fail_nth: 3) 2m35.132381088s ago: executing program 1 (id=1187): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000100760100000475000000000000", @ANYRES32=r9, @ANYBLOB="9a"], 0x20}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r10) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000", 0x2b}], 0x1}, 0x0) write$rfkill(r5, &(0x7f0000000080)={0xff, 0x1, 0x3, 0x1, 0x4}, 0x8) 2m35.0971316s ago: executing program 1 (id=1188): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 3) 2m34.66693738s ago: executing program 3 (id=1189): socket$kcm(0x2, 0x5, 0x84) syz_open_dev$sg(0x0, 0x4, 0x4000) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x20040004) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3e6e, 0xfffffffe, 0x1, 0x3, 0xa}) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0) unshare(0x2000400) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000045c0), 0x2183, 0x0) unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000140007800800114000200000050015000c0000000500010006000000050005000a00000005000400000000000900020073797a3000ab000013000300686173683a6e65742c6966616365"], 0x60}, 0x1, 0x0, 0x0, 0x44091}, 0x4000040) ioctl$TUNSETLINK(r3, 0x400454cd, 0x308) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r7 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r6, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r7], 0x28}}, 0x0) fadvise64(r2, 0x3, 0x100, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2m34.467986704s ago: executing program 1 (id=1190): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = getpgid(0x0) syz_pidfd_open(r2, 0x0) sendmmsg$unix(r1, &(0x7f0000000dc0)=[{{&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000440)="f4317c4491ae52394377799c5a0b24b33681d632d865e0697dc25f806bfa1f96523c0947d3d9b1857d0a669edb4db91025da64c27f3b660230993d4745226a73197ece08da518f24bd5a989a5980afb77985727a67561a80a9c4fe82c07d4ec0ead7960ae92f5bab903916bb209a1dc7659550fdc9062bc9da75933415a0bab53f775ae09a12f0234dbc1e1959e6f1f8e92cb513c381c9b5e065911a7a7b4f2ddf3c61d8404e3114529deb8487c70880432c7b87fe9017ce974f37afb69f5f478d97d9e09a2d51cb650240951865c85dab069051a174575f6e2a8c5f", 0xdc}, {&(0x7f0000000540)="e8080d14ecea773547175efc2cc41ecaae27d99baa661cbe00f36ab3fcc64234cfb250b22ab7c30a11727942eda2cb61c0b558afebf59e3a", 0x38}, {&(0x7f0000000580)="6a376dc2907bf5a9d98e16d3be8489f96ab16aaea582b2162d85574c09997893e6f703b953bee0954db23b1248ad928bd63cf97913b29712a5b3ef0ebeb54af507a396c6bbfbe072653767234b396a64b7760102a545f7745683404089307798a858e41a28ca4dcc952baa34ad43", 0x6e}, {&(0x7f0000000600)="635338eb20bc38750927dc652a9a362e374bcacdc0b282dad201afa5c3c0b1f14a73a217ee11a73739baa80d650ecb272ac96fc4bdfe0d1b77cdd5e3e1ac95f4ab29aca83983b37e7f6d4f74e7ea23441edb5c25b611d51c1b397d98ea7e959675428a8dcb35918d344845616f94367f866ff8762d7080290eff", 0x7a}], 0x4, &(0x7f0000000c80)=[@rights={{0x1c, 0x1, 0x1, [r1, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r0, r0, r1]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x128, 0x80}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r6, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0103000000000000000001000000050a03000000000000000000010020000900030073797a320000000014000000110001"], 0x68}}, 0x200000d4) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r7, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000006c0), 0x103042, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000001240)={0x0, 0x2, 0x0, 0x0, 0x0, "001bf1000000000000002000"}) r9 = syz_open_pts(r8, 0x101) r10 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000001200)={0x20000001}) dup3(r9, r8, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r11, 0xffffffffffffffff, 0xc, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xe0f, 0x0, 0x1}}, 0x40) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x3a, {0x3a, 0x4, "13710fb0dbf4d069b238bf70b5289a9c094a65ba7f20d2ead98dfb2d46c5a8c0a2b01c43230392fb284d1ed484d52fc3c77173226296c444"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="20055c00000015fadd12fb20c171c479ca45ac063fa5ab3088aa04b3f62436a67a5a19f67e5fedb44ca64411f7b98685d3110a8be65b325ebdea6ed6e7ddfb0086b8c56a87157295584f18eb3779d291f6e681d37891bd9014ec87f7caf031b5189d"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xfb}}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r12, 0x8b1b, &(0x7f0000000040)) 2m30.716292829s ago: executing program 1 (id=1207): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01"], 0xfc}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a300000000014000380080002400000000008000140"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a0101"], 0x188}}, 0x0) 2m30.487093489s ago: executing program 1 (id=1208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000002c0), 0x4) getsockopt$packet_buf(r2, 0x107, 0x12, 0x0, &(0x7f0000001040)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000180)={0x400, 0x1000, 0x0, 0xffffffffffffffff, 0x27f0a47ca1a906b}) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xa001) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000100)={'\x00', 0x0, 0x200081, 0x5}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x203) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_open_dev$radio(&(0x7f0000000580), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @p_u8=&(0x7f0000000080)}}) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000001010101"], 0x44}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x58}}, 0x20044810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x6, &(0x7f0000000080)=[{0x7fff, 0x43, 0x15, 0x1}, {0x48, 0x3, 0x4, 0xa}, {0xd, 0xf5, 0x8, 0x4}, {0xe, 0xf5, 0x4, 0x6}, {0xfa91, 0x3, 0x9, 0x4000}, {0xf4, 0x3a, 0x2, 0x5}]}) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d5809"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x80080, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r8, 0x80045515, &(0x7f00000003c0)={0x1}) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda000020"], 0x69) close(r9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000280)="c461491481046000000f20e035000040000f22e0e123262e0f00d4362e0f01df652e36660f38380966bad104b0adee65f367363ed83ff08080998900000cc4a3a96f902d5800002f", 0x48}], 0x1, 0x2d, &(0x7f0000000300)=[@vmwrite={0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}], 0x1) landlock_restrict_self(r9, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800090000000300000000000000000000010000000000000000"], 0x28}}, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r5) 2m19.479739081s ago: executing program 32 (id=1189): socket$kcm(0x2, 0x5, 0x84) syz_open_dev$sg(0x0, 0x4, 0x4000) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x20040004) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3e6e, 0xfffffffe, 0x1, 0x3, 0xa}) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0) unshare(0x2000400) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000045c0), 0x2183, 0x0) unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000140007800800114000200000050015000c0000000500010006000000050005000a00000005000400000000000900020073797a3000ab000013000300686173683a6e65742c6966616365"], 0x60}, 0x1, 0x0, 0x0, 0x44091}, 0x4000040) ioctl$TUNSETLINK(r3, 0x400454cd, 0x308) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r7 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r6, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r7], 0x28}}, 0x0) fadvise64(r2, 0x3, 0x100, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2m14.472443471s ago: executing program 33 (id=1208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000002c0), 0x4) getsockopt$packet_buf(r2, 0x107, 0x12, 0x0, &(0x7f0000001040)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000180)={0x400, 0x1000, 0x0, 0xffffffffffffffff, 0x27f0a47ca1a906b}) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xa001) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000100)={'\x00', 0x0, 0x200081, 0x5}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x203) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_open_dev$radio(&(0x7f0000000580), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @p_u8=&(0x7f0000000080)}}) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000001010101"], 0x44}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x58}}, 0x20044810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x6, &(0x7f0000000080)=[{0x7fff, 0x43, 0x15, 0x1}, {0x48, 0x3, 0x4, 0xa}, {0xd, 0xf5, 0x8, 0x4}, {0xe, 0xf5, 0x4, 0x6}, {0xfa91, 0x3, 0x9, 0x4000}, {0xf4, 0x3a, 0x2, 0x5}]}) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d5809"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x80080, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r8, 0x80045515, &(0x7f00000003c0)={0x1}) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda000020"], 0x69) close(r9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000280)="c461491481046000000f20e035000040000f22e0e123262e0f00d4362e0f01df652e36660f38380966bad104b0adee65f367363ed83ff08080998900000cc4a3a96f902d5800002f", 0x48}], 0x1, 0x2d, &(0x7f0000000300)=[@vmwrite={0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}], 0x1) landlock_restrict_self(r9, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800090000000300000000000000000000010000000000000000"], 0x28}}, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r5) 11.419502031s ago: executing program 6 (id=1702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x24, 0x0, 0xf03, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="bb1b3980f35d406840d9d9bfa203711f83cc0c398d8c5c37839ee7af067ae3d1184f9dd5990ee8228393a6828a96f349dca8a36529c45c090d6c42f9f9920933e1", 0x41}], 0x1}, 0x4040) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20401, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x8ab9, 0x4, 0x4, 0x1c9, 0x7, 0x11, 0x120000, 0x847, 0x0, 0x2, 0x8000000000000000, 0x6, 0x0, 0x101, 0x6, 0x1], 0x8000000, 0x181200}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0x1, 0x8, '\x00', 0x3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000001a00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000001900000000000000000000b7080000000000007baa00fe00000000b5080000000000197b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000001000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) 10.151764027s ago: executing program 6 (id=1706): r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa9d5, 0x0, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220182018000000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140020aab70300000000000085000000aa000000bf0900000000000045090100000003709500000000000000bf91000000000000b70200000000000085d4000000000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) r6 = memfd_secret(0x0) futimesat(r6, 0x0, 0x0) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmmsg$unix(r5, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000001c0)}, {&(0x7f0000000200)="47a0f80c9437e910ad47dad571df7203128f94c5", 0x14}, {&(0x7f00000003c0)="f7712d16acfed23353fd1f7e202bd2d6986a0c5ab5ccfa06719e34434b53e51fa8558e18686eea35eb838696409468d82731c12c4f5b70a8e82bad40154bab39699e8b6106c2eca0e87d0b4c0da3bb2041bda47dfce2385ef8e661a71f9d8681777e49eec8cdb3fd736dd8e8162806acaaf5f0dcb7ff5fe0f2beebe81512f7a3e66b505f76ae0f293313270db527b63b6809f0bcc5e242f2abed1e0f0187cb638ecbd9537ebc0974481070a90e58c7fe444db6dfae2a8a5c4f874df417cac3e90ff81fbb6814", 0xc6}, {&(0x7f0000000240)="f069b5159d30e99605f24a91538b5785f50eda43c861479d71d4fdb6340eb04f385ce5a40b8acb9785561362e4459a52e70809bf7b27306835f30b0cc09c59e90ec976c91060500d52b63e92c9e5f6b9f57ec32d2bfedf64e855f2002b55b0b1730e11cc84104d77d780580d9e5bfbd9c94d281c86bd26b5", 0x78}, {&(0x7f00000004c0)="39fdf37f0da4831526bc26e575397257f476536f799c30b4d47ddd73b2301ab238b1a8c255e28625e5f9a4590bb875a6f1722c16cc542460b3e57d7d228f5c3392f8e26498411f", 0x47}, {&(0x7f00000002c0)="f43d7416928c74c91ecf50c8de85515b4757416a3f0cb76789d8c6e715724abe5f89220c7d14f9ec24b1a812e04807ca164fcf646ea995a3", 0x38}, {&(0x7f0000000540)="2501788f6975c32f3cff66ffb9e3a8502716b234bc1c86c002dd2ad7959c23cb500f2be382538394a67da8f320598aa6d4b4f65a01220e1745ab96ed9729efedc8900851cf84132020fbc70cbd367addf90ebb4fc8e4447c567e1715570809ba56c6a0cd7063dfb377df243244433add7bf9970792f6eb1182573518595a704379c159bd546fced4fde878b81970f7929d3948b741821d56a24f1e55c7aaa76d981a50dfa65376ddbf8bd07e33b81a608a26d178ca184cae99d0de14dba8179a53ea64f41cbea4afe3bcab8f02a0ca90468134374d715edbff77994e616a074d5b15eb290d7c8914e6e83befefc5", 0xee}, {&(0x7f0000000640)="8f350fd140d6076cfb46e2ace9971f81fbf6700e77c144c04026a8f4841d49d90e178a860c5b2e", 0x27}, {&(0x7f0000000680)="150fe316bc7735ccdaebf88590b0bea30d1a874711ea6010b3aee5e14f6dfafb65fc94a19b167dc24e2100665cce245ac178f379773abda7d214b9940c3fdb63db8b51ae6a46af24597fb17a496fa10f6ba0ae8dfec9310a682eb700518775965940f5937339609ea3915d8e706796b9195df3ad57", 0x75}, {&(0x7f0000000700)="d5e484d804c708f539557259055b140258189290700de1e2e83abd649dec5b487bde86b75e32b28bfcd3e3698d6e9bf25689188f232ff2dd7c70d681e0e77b07eab24273b1522bf5a98282ae6f135ba8f15d33e7974e566b0fa2d1e3a37d10e969", 0x61}], 0xa, &(0x7f0000001980), 0x0, 0x40080}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0xa50, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x9d8, 0xffffffff, 0xffffffff, 0x9d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x73, 0x0, 0x0, 0x45}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, [], [0x0, 0xffffffff, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x7fff, 0x1}, {0x8, 0x3}, {0xfffff7ec, 0x1}, {0xfff, 0xbd3626e1c8b1df09}, {0x5, 0x2}, {0xb34c, 0x3}, {0x2}, {0xe48b, 0x2}, {0x101, 0x2}, {0x5, 0x2}, {0x5}], [{0x400}, {0x6, 0x8001}, {0x401, 0x40}, {0x7fff}, {0xffffc1b1, 0x32de}, {0xfff, 0x8}, {0x2, 0x9}, {0x1, 0xbbca}, {0x83, 0x1}, {0x5, 0x7}, {0x3}], 0x1, 0x7}, {[{0x9, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x9, 0x1}, {0xfffffffa}, {0x0, 0x2}, {0x80000000, 0x3}, {0x80000001}, {0x8001, 0x2}, {0xff, 0x3}], [{0x7, 0x5}, {0x3, 0x6b6}, {0x4, 0x400}, {0x3}, {0x4, 0xfff}, {0x3ff, 0xe5d7}, {0x6, 0x3ff}, {0xa78, 0xffffffff}, {0xa9e1, 0x3}, {0x8, 0x1000}, {0xc7, 0xf385}], 0x6, 0x3}, {[{0x101, 0x2}, {0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x48}, {0x9, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x9}, {0x7, 0x1}, {0x0, 0x3}], [{0xfffffffb, 0x5}, {0x8, 0xa17}, {0x80, 0x4}, {0x8}, {0x3, 0x7}, {0x5e18, 0x7}, {0x4, 0x101}, {0x7, 0xfff}, {0xd, 0x7f}, {0x2, 0x2}, {0xfb3, 0xa94}], 0xb, 0x4}, {[{0x8, 0x1}, {0x4, 0x2}, {0x4e, 0xc781c4f1f9c1fa4f}, {0x8, 0x1}, {0x4e5, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0xfff}, {0x4}], [{0x9, 0x8001}, {0xffff, 0x4}, {0x7fff, 0xf}, {0x66d, 0x9}, {0x92, 0xb}, {0x3, 0x6}, {0x7, 0xfff}, {0x1, 0xff}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0xff}], 0xa}, {[{0x5, 0x2}, {0x7a3, 0x2}, {0x1, 0x3}, {0x100, 0x3}, {0x40}, {0x8d, 0x1}, {0x8, 0x3}, {0x9, 0x3}, {0x8, 0x2}, {0x1, 0x1}, {0x7}], [{0x854f, 0x6b}, {0x7, 0x7}, {0x6, 0x80}, {0x3, 0xffc00000}, {0x7}, {0x3, 0x6}, {0x2, 0xf17}, {0x25, 0x401}, {0x200, 0x84b}, {0x7fff, 0x80}, {0x3, 0x1}], 0x4, 0x8}, {[{0xc3d, 0x147d12363fe5c40a}, {0x64, 0x1}, {0xf, 0x3}, {0x5, 0x1}, {0x7fffffff, 0x2}, {0x5}, {0x2af0, 0x2}, {0x1bd6, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x7, 0x2}], [{0x92b, 0x1ff}, {0x1, 0xf458}, {0x5, 0x3}, {0x84, 0x1}, {0xe923, 0x7fff}, {0x4, 0xe}, {0x3, 0x6}, {0xad3f, 0x59f}, {0x4, 0xfffffffc}, {0x6}, {0x5, 0x6f}], 0x9}, {[{0x8}, {0x2f, 0x1}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x8, 0x3}, {0x7}, {0x2}, {0x2, 0x3}], [{0x101, 0x80000000}, {0x1, 0x9}, {0x40, 0xff}, {0x4, 0x2}, {0x5, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0xe, 0x5}, {0x6, 0x1ff}, {0xc, 0x7}, {0x1, 0x4}], 0xb, 0x7}, {[{0x8c, 0x1}, {0xd}, {0x10000, 0x2}, {0x8, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x1ff, 0x1}, {}, {0xc, 0x1}, {0xf0f}, {0xf629}], [{0x4, 0x5}, {0x35f7, 0x1}, {0x401, 0xf6}, {0x94, 0xd16}, {0x8, 0x5}, {0x35, 0x4929}, {0x8001, 0x5}, {0x1000, 0x9}, {0x9f, 0x65}, {0x9, 0x4}, {0x9, 0xf0a9}], 0x1, 0x4}, {[{0x9, 0x1}, {0x9, 0x2}, {0x7, 0x1}, {0x4, 0x4adbb8db8b6f3087}, {0x3}, {0x3, 0x3}, {0x7ff}, {0x7, 0x1}, {0x10000, 0x3}, {0x0, 0x2}, {0x80000000, 0x1}], [{0xf767, 0x8}, {0xc, 0x5}, {0x9, 0x8}, {0x6, 0xb23}, {0x101, 0x4}, {0xfffffff7, 0xb98}, {0x10001, 0x8f}, {0x9, 0xa83}, {0xd, 0x1}, {0x4, 0xe00}, {0x7, 0x444}], 0x6, 0x4}, {[{0x2, 0x3}, {0x2}, {0x26914786, 0x3}, {0x3}, {0xd7f, 0x1}, {0x7fffffff}, {0xf}, {0x4, 0x2}, {0x8, 0x1}, {0x4, 0x3}, {0xe, 0x1}], [{0xb59, 0x6}, {0x4, 0x70c063f5}, {0x2, 0xfffffffe}, {0x5, 0x6}, {0x10000, 0x872}, {0x6, 0x8}, {0xffff, 0x7}, {0x7, 0x4}, {0x6, 0x10}, {0xfff, 0xa}, {0x81, 0x4}], 0xb, 0x4}, {[{0x200, 0x1}, {0x2, 0x3}, {0xa, 0x1}, {0x3ff, 0x1}, {0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x92, 0x3}, {0x6, 0x1}, {0x7fffffff, 0x2}], [{0x3, 0xbbb9}, {0x4, 0x400}, {0xdec, 0x9}, {0x7, 0x1d}, {0x0, 0x9a}, {0x1, 0x7}, {0x1, 0xf580}, {0x4, 0x9f}, {0x2, 0x4}, {0x5, 0x7}, {0xfff, 0x1}], 0x5, 0x7}], 0x4, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xab0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_mreqn(r9, 0x0, 0x20, &(0x7f0000000140)={@empty, @rand_addr=0x64010100}, 0xc) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) 7.92832785s ago: executing program 4 (id=1713): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x100, 0x64, 0x8001, 0x5, 0x4000ffff}, 0xff26) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0x10, 0x80000, 0x3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) unshare(0x24060400) unshare(0x2a020400) chdir(&(0x7f0000000340)='./cgroup/file0\x00') sendmsg$inet(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100140000000000000002"], 0x40}}, 0x0) 7.661203517s ago: executing program 6 (id=1715): r0 = socket(0x10, 0x3, 0x0) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x22, 0x2, 0x24) close(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0xc}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x6}, 0x7af, 0x1, 0x1}, [@mark={0xc, 0x15, {0x350759, 0xffff}}]}, 0xc4}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8"], 0xb8}}, 0x0) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) shutdown(r4, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 6.960236516s ago: executing program 5 (id=1717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffac1414000c00028005000100000000003c0002802c0001801400030000000000000000000000ffffe000000214000400fc0200000000000000000000000000000c000280050001000000000008000740000000001c001880080001"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0a03"], 0xd) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='\xfa\xde\xc1\x00\x00\x00\x19\x00\x00\x00\x00\xb4#\x86\xc6\x96\\id', &(0x7f0000000240)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00d\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6\x9c\x14\xf0(\x82\xb2\x99,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x05e\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\xa8\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\xdb+\x87\xb4\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x83\xbb\xffN\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x0, 0xb, 0x8, 0x2, 0x5c, 0x81c, &(0x7f00000001c0)="388fb848609400ffd6fd07f8f5cf8c3a2edef118fdacec106b9908892b9678862ef58bdb95208ee3952b8c1b72d3d6b34213e9c3da5990d0feb3d909fb889390a829146a15abc8f4e198e04e6710d3778a27b215ffb4fe7da0fc58c4"}) write$binfmt_script(r4, &(0x7f0000000180), 0xb) copy_file_range(r4, &(0x7f00000008c0)=0x4, r2, &(0x7f0000000100), 0x8, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 6.499293836s ago: executing program 2 (id=1719): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8000}, 0x94) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x8, 0xe74, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0xfffffffc], [0x80000000, 0x0, 0x0, 0xb16, 0x40000000, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0xfffffffa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8, 0xbcd5, 0x2, 0x0, 0x7ffffe, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8) close(r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xb1}]}) close(r3) r5 = socket$kcm(0x11, 0x2, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x8) 6.333350847s ago: executing program 0 (id=1721): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056", 0x5, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x4}) socket$inet6(0x10, 0x80000, 0x3) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) (async) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) (async) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) r7 = socket$kcm(0x11, 0x2, 0x300) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r5, &(0x7f0000000440)="4239e89f2c0e67933638a10e1f0ea6cbddc73b6cc19786d6d579579f3e6408f336a96f15c16dbc7ca920169106dbfcc0eb03576772775487051686a1fbca6efa29cf013baa914b23fbba597604779c0009a6901c6a4819ba6d5633a488f516120de861a1f749b461cd0e9f33f53936f659d7fe80bc6bd01f02d1db135a686429f4eb04cea06eb478f209dc4bcc9d516befdbb19fe422443cb4dec3c6d52ddd", &(0x7f0000000500)=@tcp=r2, 0x4}, 0x20) write$cgroup_int(r2, &(0x7f0000000400)=0x1, 0x12) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_io_uring_setup(0x4ce3, &(0x7f0000000380)={0x0, 0xe7ed, 0x2, 0x0, 0x2d9}, 0x0, 0x0) (async) syz_io_uring_setup(0x4ce3, &(0x7f0000000380)={0x0, 0xe7ed, 0x2, 0x0, 0x2d9}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000181356d03af98e6900000000070007a806000b000200004ff117b4abca87de0006000b00ffff0000050001000700000006000b000000000005000106000000000500010007000000050001000700000005000100070000000500010007000000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x1) unshare(0x42000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 5.936183132s ago: executing program 2 (id=1722): mkdirat(0xffffffffffffff9c, 0x0, 0x100) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="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", 0x2000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$revoke(0x3, r5) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="0800050002000000da3a0e0ed8099a638e52b9e131fb4c4016ec9da5baf3c823866ca0367bd25b7abe968cd271"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, r7, 0x5, 0x11000000, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x40880}, 0x0) 5.763432916s ago: executing program 4 (id=1723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002680)={0x28, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x8000000, 0x0, 0x48000}, 0x20000004) 5.409992424s ago: executing program 5 (id=1724): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x1, r1, &(0x7f0000000140), 0x40000000000041) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x66, 0xf, 0x3, 0x6, 0x200, 0x1ff, 0x40, 0xfffffff7}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)="180c4552", 0x4) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000040)={0x1, 0x2, 0x7ad32357, 0x6, 0xe79e, 0xeb9e}) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, 0x0}) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev, 'syz_tun\x00'}}, 0x1e) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/234) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "12b100", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x5, 0x1ff0000aa}, @private1}}}}}}, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x40047435, &(0x7f0000000280)) ioctl$sock_inet_SIOCSARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x0, @link_local}, 0x2, {0x2, 0x0, @broadcast}, 'veth1_to_team\x00'}) 5.328295529s ago: executing program 4 (id=1725): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0000}]}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x401, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000080) ptrace(0x10, 0x1) io_uring_setup(0x194e, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000018000106020000000000ddff1b140000fe00fe0300000000"], 0x1c}}, 0x0) 5.044663648s ago: executing program 4 (id=1726): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x27, 0x2, {{0x0, [0xe, 0xf, 0x9, 0x7, 0x5, 0x7, 0x7, 0x9, 0x0, 0x8, 0x8, 0x0, 0xc, 0x2, 0xd, 0xe], 0x1, [0x9554, 0xff, 0x1, 0x428c, 0x1, 0x9b4, 0x8, 0x1, 0x3, 0x81, 0x3, 0x8001, 0x8, 0x4eb3, 0x5, 0x2], [0xfffa, 0xef6, 0xfff7, 0x0, 0x8, 0x800, 0x4, 0x9, 0x6, 0x8, 0x1, 0x7, 0x100, 0x101, 0x0, 0x3]}}}}]}, 0x88}, 0x1, 0x7a00, 0x0, 0x4010041}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201e3f25ab2e171d871df05166b0102030109021b00010707f28909044300e60200000209058a1308000305db"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000340)=@string={0x4, 0x3, "92b5"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xb03137cc5c403bd1}}, {0x0, 0x0}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000009000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000100"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f00000003c0), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r3, &(0x7f0000000980), &(0x7f00000009c0)=@tcp6, 0x1}, 0x20) 4.626659781s ago: executing program 5 (id=1727): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x2, [@ptr={0x4, 0x0, 0x0, 0x2, 0x5}, @enum64={0x3, 0x5, 0x0, 0x13, 0x1, 0x1, [{0xa, 0xffff, 0x6}, {0x2, 0xfff, 0x5}, {0x4, 0x40, 0x3}, {0xa, 0x3, 0x81}, {0x10, 0x473, 0x1}]}, @var={0x6, 0x0, 0x0, 0xe, 0x4}, @func_proto]}}, 0x0, 0x8a, 0x0, 0x1, 0x6, 0x10000}, 0x28) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x1}], 0x4c}, 0x0) 3.792047503s ago: executing program 0 (id=1728): mkdirat(0xffffffffffffff9c, 0x0, 0x100) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="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", 0x2000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$revoke(0x3, r5) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="0800050002000000da3a0e0ed8099a638e52b9e131fb4c4016ec9da5baf3c823866ca0367bd25b7abe968cd27110"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, r7, 0x5, 0x11000000, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x40880}, 0x0) 3.791302895s ago: executing program 5 (id=1729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x240008c4) 3.671362616s ago: executing program 5 (id=1730): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) fanotify_mark(r1, 0x101, 0x40000019, r2, 0x0) fanotify_mark(r1, 0x102, 0x48001050, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000059001e00c0100000140035006e657470636930000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44084}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000340)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x441}}, {0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44c}}]}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="94050000000000006110b000000000001c010000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75f05f696455", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r7, &(0x7f000000e0c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x1d30) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r11, 0x0, 0x0) syz_fuse_handle_req(r7, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0xb0, 0x0, 0x3a88, [{{0x3, 0x3, 0x0, 0x5, 0x5, 0x1, {0x2, 0x8, 0x4, 0x3, 0x3, 0xc, 0x6, 0x4, 0x7, 0x2000, 0x81, r9, r10, 0x7fff, 0x9}}, {0x6, 0x6, 0x1, 0x5, '\x00'}}]}, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_DELETE(r7, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xffffffff}, @TCA_FLOWER_KEY_ENC_OPTS={0xc, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x7}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0x0, 0xffffffff, 0xff]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x800) r12 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001500), 0x2, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf250300000028"], 0x113c}}, 0x8004) ioctl$KVM_CAP_DISABLE_QUIRKS2(r3, 0x4068aea3, &(0x7f00000004c0)={0xd5, 0x0, 0x42}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r12, 0xc0405665, &(0x7f0000001540)={0x4, 0x3, 0x9, 0x20, 0x3}) 3.292856574s ago: executing program 6 (id=1731): syz_emit_ethernet(0x0, 0x0, 0x0) 3.212207403s ago: executing program 2 (id=1732): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRESHEX=r0], 0x30}, 0x1, 0x0, 0x0, 0x60}, 0x0) 3.032247861s ago: executing program 6 (id=1733): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x700, &(0x7f0000000a40)=[{&(0x7f00000047c0)=""/4060, 0xfdc}, {&(0x7f00000037c0)=""/4062, 0xfde}, {&(0x7f0000000700)=""/244, 0xf4}, {&(0x7f0000001780)=""/14, 0xe}, {&(0x7f00000011c0)=""/209, 0xd1}], 0x5}, 0x40000100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 3.031988485s ago: executing program 2 (id=1734): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x2}, {0x1, 0x0, 0xfffffffd, 0xc}], 0x10, 0x4}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r4 = userfaultfd(0x180000) dup3(r4, r0, 0x0) recvmsg$kcm(r3, &(0x7f0000000840)={0x0, 0x15, 0x0}, 0x0) 2.939931696s ago: executing program 2 (id=1735): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x29, 0x4e, 0x76, 0x10, 0x6cd, 0x202, 0xf498, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7, 0x6, 0xd0, 0x6, [{{0x9, 0x4, 0x4f, 0x6, 0x2, 0x81, 0x6a, 0x2, 0x0, [], [{{0x9, 0x5, 0xf, 0xc, 0x200, 0xfd, 0xd6, 0x3}}, {{0x9, 0x5, 0xeac52930e4ba5b07, 0x13, 0x200, 0x40, 0x81, 0x2}}]}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000140001000000000000c300d92d000a00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t'], 0x5c}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504000000000000", @ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', '', [], 0xa, "90242c9c0b76ee7c84b1d919fb2c1cfef0b857b2b1c7e4b7d03172038eeafedb5dfb"}, 0xfffffff1) close(r1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 2.791367355s ago: executing program 6 (id=1736): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c005ec78845010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYBLOB="4c66c6", @ANYRES16=0x0, @ANYRES16=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x59ecbc2310a1da80}, 0xc0b0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0xfffffffd, 0x5, 0x4, 0x1000, 0x8, {}, {0x3, 0x2, 0xfe, 0x6, 0x2, 0x4}, 0x4, 0x1, {0x0}, 0xee71}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="40000600000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, &(0x7f0000000380)={0x40, 0x1, 0xd1, {0xd1, 0x7, "ff39f3d26a345078785a59d17aa8993b64e3ff3813a6b652784a63f38429129f4a9d41aafe8579a9e401fffd9f5cc02ab4b727b50942455b8329fefc2daeb8e341708e06b3e4aace1b01dd1195c3117143c6bd47e0ad887a0670fc89771d075c9226103eba63b64bceb58f229a54cc1c37d9d4438a5329a51d6f8bf977d2f6522e5aedf6dc903b12f84a582b6293d1e1394c65fedc9f05106d3690934188e78e7abaa362884782aefff0ba4290de49930ae4c4b7fa2d4c239997867ed0c4788c03a33815d36b78dae44635ed31ffd5"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000680)={0x20, 0xc, 0xdf, "054f82298236c9a5fa4c4324bd9fe8a112f349cf4c81d16e7ce370fa113a9084cd14b79c1f6ee9c713d8b4eaffa2571f4b4980304dd8fcedf44b1f74fff1b44f1c10ddbb467bc868b04d7bfa101d984dd339294ab2e0a47341db58e75fd9c3374b193467292494262cb1685a61ecf158a94024edef0d2382cbadf6f578e3d5015c041faf65ee824455164e00bf590fa670ae1d0a4eac7590ba8e51f58e4c7bb20670a431ac6d247af4fc21fa5ef1309df82c96dbdda8600345a78743b06a423727a70c46d49695c0c14b8275eaf9da99fdf4b3a945ec33022bb3dbbf1bc211"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000480)={0x20, 0x81, 0x2, "bf02"}, &(0x7f00000004c0)={0x20, 0x82, 0x3, "e00add"}, &(0x7f0000000500)={0x20, 0x83, 0x2, "f82f"}, &(0x7f00000005c0)={0x20, 0x84, 0x4, "144f4297"}, &(0x7f0000000780)={0x20, 0x85, 0x3, "9b55d9"}}) 2.100670002s ago: executing program 0 (id=1737): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x1, r1, &(0x7f0000000140), 0x40000000000041) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x66, 0xf, 0x3, 0x6, 0x200, 0x1ff, 0x40, 0xfffffff7}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)="180c4552", 0x4) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000040)={0x1, 0x2, 0x7ad32357, 0x6, 0xe79e, 0xeb9e}) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, 0x0}) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev, 'syz_tun\x00'}}, 0x1e) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/234) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "12b100", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x5, 0x1ff0000aa}, @private1}}}}}}, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x40047435, &(0x7f0000000280)) ioctl$sock_inet_SIOCSARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x0, @link_local}, 0x2, {0x2, 0x0, @broadcast}, 'veth1_to_team\x00'}) 1.800295961s ago: executing program 0 (id=1738): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2f, 0x4e22, @local}, 0x10) 1.713739793s ago: executing program 4 (id=1739): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') sendfile(r0, r0, 0x0, 0x8d) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c676f755a5f76493df2", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x600, 0x360, 0x11, 0x148, 0x0, 0x10, 0x568, 0x2a8, 0x2a8, 0x568, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00', {}, {}, 0xa8}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x8, "602c4e1da4b651d69f61fd40e9985933ad459f3d59ccf16f0d0ef758ba42"}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x660) r6 = socket$key(0xf, 0x3, 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x42342, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0) sendfile(r8, r7, &(0x7f0000002700)=0x1, 0x8) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40}}}}}}, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7}, 0x10}, 0x1, 0x400000000000000}, 0x0) ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0xfffffffffffff000, 0x1000000}) read$FUSE(r1, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r1, &(0x7f00000021c0)={0x18, 0x0, r9, {0x7}}, 0x18) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r1, &(0x7f0000002140)={0x20, 0x0, r10, {0x0, 0x0, 0x80003ff}}, 0x20) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, 0x0) 1.596417435s ago: executing program 0 (id=1740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x240008c4) 1.367698578s ago: executing program 0 (id=1741): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x4f}]}}}]}, 0x3c}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x2, 0x56d, 0x2, 0x1}, 0x50) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f00000001c0), 0x4) process_madvise(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000280)}], 0x2, 0xe, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000002c0)={0x0, 0x42303159, 0x0, @discrete={0xe, 0xba}}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000480)="a2caeca6ab4cfc6458432d2cd6e066db0b974ab2d51fce3736d3e4a68aff397feba898", 0x23}], 0x1) r4 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, &(0x7f0000001100)={0x2b, 0x9, 0xfffffffb}) socket$alg(0x26, 0x5, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x0) unshare(0x28040600) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b0800000905"], 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x8001000000000000, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x180, 0x2a8, 0x2a8, 0x180, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x6, 0x9, 0x2, 0x5], 0x5}, {0xffffffffffffffff, [0x0, 0x0, 0x6, 0x1]}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x5, 0xffff, 0x6, 0x8, 0xf, 0x3, 0xe, 0xe]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) 515.758317ms ago: executing program 5 (id=1742): r0 = socket(0x10, 0x3, 0x0) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x22, 0x2, 0x24) close(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0xc}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x6}, 0x7af, 0x1, 0x1}, [@mark={0xc, 0x15, {0x350759, 0xffff}}]}, 0xc4}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8"], 0xb8}}, 0x0) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) shutdown(r4, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 457.164311ms ago: executing program 4 (id=1743): syz_emit_ethernet(0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1744): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00000002000000", 0x8) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffff9, 0x10100, 0x0, 0xd3, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000001cc0)={&(0x7f0000000200)=@can={0x1d, r7}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="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", 0xfd}, {&(0x7f0000000400)="0d21a201f86ce9192d9c2362caceefbdee094e288025725de03cde2571f41b0ae2b464604907918791f502fc31f009a4047a92bcf96a813936899e8e80aad42339bcd15e84d49d803e3adc24220b94007cbd4a9280100968f2d0275f0521e460a522e1fa6abed88e2df0", 0x6a}, {&(0x7f0000000140)="d72c11ab77874980ca6a12cd0ea4a8c0e126e7d932597aea5a52435b6df57c", 0x1f}, {&(0x7f0000000480)="2b4dcd33d94699741703cad63d270ebe608cb2011ee6d5f6d836c5247482d5c04bc9eb94a464ddc2fe437f945874279062b7d9eb104202195ac48e21384f910a9dac5fb95f91cd432aaec0d75113fc648c03d0a37d2b3c19987a43885e31b5d7c994382f66b23e6fdbe7096bb9657ef3ccdc93c4465dfea0b135000f712c7d54d83e2d6e4083d52a2a2f9b7db058367c728d9d568729b2f93555c67365c3c8d92c52357a3d2a12d01fe632869ba227e8b916d35d5a560585a479842837944b1a0b06c67b4171507929af9b53be058e09b0038ffb4ae52795", 0xd8}, {&(0x7f0000000580)="12b41483ab5f7afce1a1fd73081dc6386547f05b9db0", 0x16}, {&(0x7f00000005c0)="988cf757066bb914eb7cb151b3e8ed6e118d", 0x12}], 0x6, &(0x7f0000000680)=[{0x58, 0x10b, 0x6, "b6207d1027f2f663d2bce66dba2c85da13979666172c25b789c8da0f055fb2517b24475cf5a9af52662f57330e8ad1b8f5797e79ea63e89d032449bf80c5e6c08bb77b56"}, {0x1010, 0x108, 0x10001, "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"}, {0xf8, 0x111, 0x3, "907b1cdf990a570556c1c3a866bf7902e0737bd2c9fc3b197fc577ecaba392cd10fecd07e409f80b9d4eddbc4aba769e2f7144578f27ffb87cefc077520639ced043f0688ff00c1f2b6ce8b1321b512124fd850b552b1606479e02bcf2dd448e0488e24f754274b4cedf61e5ead97a90220ab12d94f73102fdcfaa9090680905e1177035c73ca04b2652a94e8742d39be5eab857a198c3d7b1a5ba0781905e383f65b8c299be58b9fdd65167d49ca207cdf43fe6e8bfb2fa27cb9cefbd1df2343d87528f1f05d5ec496d4c6e7899650ac1da308d08cd68f9eb33fa77e910e16c35eb63f6"}, {0x98, 0x109, 0x0, "2e0d8769b9fc09f8aeafea57006cb376dfdf936d637090272049405ce13f3bb8a642b30ac397435ce9194c42d03b12c4d04a2ba94d3aa9d5a41130af23e62b4438e9a032afff2eceb2f5aaf4f04c346d79fb9244acf28d9f8ec85f1677a2c1842e5d55b3fc14ee639972fd06d9863f0cdb95ffd5d076b1e4c197e4b6ae5369752727829f"}, {0x78, 0x101, 0x2, "970f847483de5653332e2487adaa62e505100c4c8a229dd8aa62248cf6177d73c54618ae2aa443b3604fffc966bff3be04f145a0d37fe98cce4ba996776d3dc112bd4689e87423bb633a7235136aed45f4b274fa2ad2e7bedbf9e199ad4d849332b0b19033"}, {0xf0, 0x118, 0x2, "c5231e8f029023679c12d81e95dcfd159f62e407b197521c9594d0de816b0a4787a80ba92c0bd14de7f05a6f7453340e4a1185670ea34c057f6d56319328ed75293808b64c9c7e2bd968e81d32be05b560e3664a854f61e2c4f6ab9b52099181994c9724b1d876c0f4729a66f21e365d708751ff4b3ceebd531945245d1b63c653891f805768c9d20b8f31a93884905a41217973f52f67a96f3358bedecd4070ef03c780c9cc1206560cb01ee4feffb19bb4d553fcb41912a9f7d5ce0d3d2833cf94ea449eb980d05abaa7ed0285599d374c087927f048c15d419d"}, {0x108, 0x11, 0x2, "b77d6c55bd610a1dc5a3d3f64bd5cae42ff20f870a014c8be83490582e189a6ae8d5308df502eda32d12143afe638447c52ae2bf5510ae6ffcb199b8a72fd947987f11ce8fbb9b7a71292839bce693fbbb2bd723d339c7bbe3cbce7455d360989bab196e7958892c0b12fe56956df31942be09ec1ecf730be7329ba3e41273d2ee085debbda55a86a909fd35102c76b71f3ce6511c93e3a64f007699292d94b255008601af035f719feb9fd817596aac00b5037ce13442dae8a77685865a631427df67d83de54e69d2be8ca55d7cc3130e780493f59a787dfb76a1721fe233a8afb02e010d9148cb1417af72dc708044748af6813e7b3f"}, {0x78, 0x1, 0xffffffff, "707dce41ae21c0f4c7dec7d6a94bd60dd1a084e1e8b7c82889d80657225407cdcab9e92e8d42a365a8569f47c6c50f2c8990dcf4cb546220d0182c430357c7aeb6b10bffa626dc3973ac76edb9c2bcbc3b740902f1aee55e6e1cec30e0becea2e9b31db5d375"}, {0x80, 0x114, 0x401, "b6627d1ab0e7d821752570833caa5a1cc53d655009fdd1fd87ecc40b240b9ef2bb9b27c690f191a641b95881896d23d7ab8b0836db5d4b871f913c37fe5b80f357e196875f1514d7e0cda5072a2c8e6c64fe6700e09d075aebd0dfb2760aa45d83d93757fa5357d93c81"}, {0xa8, 0x11, 0x9, "b459e629c41e2e70976d04474632ee632fda6a38925cc7e80d469586b3e7b4c3631275cf802169606371d6a4d58d1f7c6130e3cba548a0755ddd63de50a2c6e6b679c33dae5a53d66d1a76c28eb73bcb6bd6353c41e3e58045df864338caf651ae00581d21a66bf39f880cf84e3509228823f1c4e03ee570402811f8d61320b652b955b9f2b6150fb0dd29f3b46940bbaa99c08d18bf71"}], 0x1608}, 0x0, 0x404c004, 0x1, {0x0, r6}}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000180)={[0x8]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1a000000000000611098000000000004000000000000009501000080000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) kernel console output (not intermixed with test programs): 5388][ T49] vhci_hcd: stop threads [ 407.166691][ T49] vhci_hcd: release socket [ 407.175308][ T49] vhci_hcd: disconnect device [ 407.206010][ T49] vhci_hcd: stop threads [ 407.215295][ T49] vhci_hcd: release socket [ 407.234375][ T49] vhci_hcd: disconnect device [ 407.346258][ T3186] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 407.536254][ T3186] usb 7-1: Using ep0 maxpacket: 8 [ 407.576920][ T3186] usb 7-1: too many configurations: 231, using maximum allowed: 8 [ 407.612105][ T3186] usb 7-1: config index 0 descriptor too short (expected 259, got 42) [ 407.646201][ T3186] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 407.668947][ T3186] usb 7-1: can't read configurations, error -22 [ 407.682009][T10431] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1412'. [ 407.828051][ T3186] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 408.019619][ T3186] usb 7-1: Using ep0 maxpacket: 8 [ 408.035425][ T3186] usb 7-1: too many configurations: 231, using maximum allowed: 8 [ 408.079526][ T3186] usb 7-1: config index 0 descriptor too short (expected 259, got 42) [ 408.126411][ T3186] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 408.165799][ T3186] usb 7-1: can't read configurations, error -22 [ 408.191693][ T3186] usb usb7-port1: attempt power cycle [ 408.575630][ T3186] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 408.686673][ T3186] usb 7-1: Using ep0 maxpacket: 8 [ 408.692430][ T3186] usb 7-1: too many configurations: 231, using maximum allowed: 8 [ 408.716574][ T3186] usb 7-1: config index 0 descriptor too short (expected 259, got 42) [ 408.728317][ T3186] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 408.761783][ T3186] usb 7-1: can't read configurations, error -22 [ 408.886665][ T48] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 408.916507][ T3186] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 408.965595][ T3186] usb 7-1: Using ep0 maxpacket: 8 [ 409.014088][ T3186] usb 7-1: too many configurations: 231, using maximum allowed: 8 [ 409.055643][ T3186] usb 7-1: config index 0 descriptor too short (expected 259, got 42) [ 409.065178][ T3186] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 409.085307][ T48] usb 3-1: config 0 has no interfaces? [ 409.097993][ T48] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 409.107578][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.127379][ T3186] usb 7-1: can't read configurations, error -22 [ 409.136268][ T48] usb 3-1: Product: syz [ 409.143929][ T48] usb 3-1: Manufacturer: syz [ 409.176332][ T48] usb 3-1: SerialNumber: syz [ 409.181554][ T3186] usb usb7-port1: unable to enumerate USB device [ 409.195595][ T48] usb 3-1: config 0 descriptor?? [ 409.644480][T10449] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1417'. [ 409.896298][ T5471] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 410.125706][ T5471] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.180109][ T5471] usb 6-1: config 0 has no interfaces? [ 410.324226][ T5471] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 410.383489][ T5471] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.428947][ T5471] usb 6-1: Product: syz [ 410.493416][ T5471] usb 6-1: Manufacturer: syz [ 410.543767][ T5471] usb 6-1: SerialNumber: syz [ 410.596407][ T48] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 410.642895][ T5471] usb 6-1: config 0 descriptor?? [ 410.783836][ T48] usb 7-1: unable to get BOS descriptor or descriptor too short [ 410.804869][ T48] usb 7-1: no configurations [ 410.844293][ T48] usb 7-1: can't read configurations, error -22 [ 411.217329][T10471] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1423'. [ 411.652812][T10476] mmap: syz.6.1425 (10476) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 411.737958][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 411.737975][ T30] audit: type=1326 audit(1750791094.460:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10474 comm="syz.6.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2394d8e929 code=0x7ffc0000 [ 411.776779][ T5471] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 411.991200][ T5888] vhci_hcd: vhci_device speed not set [ 412.093452][ T5937] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 412.099692][ T5471] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.147417][ T48] usb 3-1: USB disconnect, device number 73 [ 412.251575][ T5471] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 412.288696][ T30] audit: type=1326 audit(1750791094.460:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10474 comm="syz.6.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f2394d8e929 code=0x7ffc0000 [ 412.298823][ T5471] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 412.312151][ T5937] usb 1-1: Using ep0 maxpacket: 8 [ 412.401008][ T5937] usb 1-1: config 7 has an invalid interface number: 228 but max is 0 [ 412.422240][ T5937] usb 1-1: config 7 has an invalid interface number: 135 but max is 0 [ 412.430093][ T5471] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 412.452025][ T5937] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 412.461887][ T30] audit: type=1326 audit(1750791094.460:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10474 comm="syz.6.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2394d8e929 code=0x7ffc0000 [ 412.471929][ T5471] usb 5-1: SerialNumber: syz [ 412.548838][ T48] usb 6-1: USB disconnect, device number 8 [ 412.569022][ T5937] usb 1-1: config 7 has an invalid interface number: 172 but max is 0 [ 412.591956][ T5937] usb 1-1: config 7 has 3 interfaces, different from the descriptor's value: 1 [ 412.611845][ T30] audit: type=1326 audit(1750791094.460:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10474 comm="syz.6.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2394d8e929 code=0x7ffc0000 [ 412.646399][ T5937] usb 1-1: config 7 has no interface number 0 [ 412.662855][ T5937] usb 1-1: config 7 has no interface number 1 [ 412.672968][ T5937] usb 1-1: config 7 has no interface number 2 [ 412.684845][ T5937] usb 1-1: config 7 interface 228 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1023 [ 412.695234][ T30] audit: type=1326 audit(1750791094.490:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10474 comm="syz.6.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2394d8e929 code=0x7ffc0000 [ 412.724866][T10487] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.807603][ T5937] usb 1-1: config 7 interface 228 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 412.821030][ T5937] usb 1-1: too many endpoints for config 7 interface 135 altsetting 73: 204, using maximum allowed: 30 [ 412.860212][ T30] audit: type=1326 audit(1750791094.490:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10474 comm="syz.6.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f2394d8e929 code=0x7ffc0000 [ 412.883548][ T5937] usb 1-1: config 7 interface 135 altsetting 73 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 412.895020][ T5937] usb 1-1: config 7 interface 135 altsetting 73 has an invalid descriptor for endpoint zero, skipping [ 413.029135][T10491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.038646][ T30] audit: type=1326 audit(1750791094.490:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10474 comm="syz.6.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2394d8e929 code=0x7ffc0000 [ 413.086480][ T48] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 413.114819][ T5937] usb 1-1: config 7 interface 135 altsetting 73 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 413.142248][ T5937] usb 1-1: config 7 interface 135 altsetting 73 has 5 endpoint descriptors, different from the interface descriptor's value: 204 [ 413.157991][ T30] audit: type=1326 audit(1750791094.490:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10474 comm="syz.6.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2394d8e929 code=0x7ffc0000 [ 413.192940][ T5149] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 413.193122][ T5937] usb 1-1: config 7 interface 172 altsetting 228 endpoint 0x7 has invalid wMaxPacketSize 0 [ 413.212082][ T30] audit: type=1326 audit(1750791094.490:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10474 comm="syz.6.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f2394d8e929 code=0x7ffc0000 [ 413.235194][ T5937] usb 1-1: config 7 interface 172 altsetting 228 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 413.247742][ T5937] usb 1-1: config 7 interface 172 altsetting 228 has a duplicate endpoint with address 0x6, skipping [ 413.266735][ T48] usb 6-1: Using ep0 maxpacket: 32 [ 413.278659][ T30] audit: type=1326 audit(1750791094.580:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10474 comm="syz.6.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2394d8e929 code=0x7ffc0000 [ 413.306518][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 413.318224][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 413.339120][ T5937] usb 1-1: config 7 interface 172 altsetting 228 has a duplicate endpoint with address 0x6, skipping [ 413.364228][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 413.379938][ T5471] usb 5-1: 0:2 : does not exist [ 413.388182][ T5895] usb usb34-port1: attempt power cycle [ 413.426678][ T24] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 413.435622][ T5937] usb 1-1: config 7 interface 172 altsetting 228 has a duplicate endpoint with address 0xD, skipping [ 413.457251][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 413.478733][ T5937] usb 1-1: config 7 interface 172 altsetting 228 has a duplicate endpoint with address 0xA, skipping [ 413.527390][ T48] usb 6-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 413.539193][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.547582][ T5937] usb 1-1: config 7 interface 172 altsetting 228 has 8 endpoint descriptors, different from the interface descriptor's value: 28 [ 413.561403][ T48] usb 6-1: Product: syz [ 413.565602][ T48] usb 6-1: Manufacturer: syz [ 413.570597][ T5937] usb 1-1: config 7 interface 135 has no altsetting 0 [ 413.572657][ T5471] usb 5-1: USB disconnect, device number 68 [ 413.578351][ T48] usb 6-1: SerialNumber: syz [ 413.589358][ T5937] usb 1-1: config 7 interface 172 has no altsetting 0 [ 413.596317][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 413.621826][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 413.679061][ T48] usb 6-1: config 0 descriptor?? [ 413.693507][T10495] program syz.6.1431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 413.705902][ T5937] usb 1-1: New USB device found, idVendor=19d2, idProduct=ffc2, bcdDevice=f2.dc [ 413.740323][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 413.751662][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.765844][ T48] cypress_m8 6-1:0.0: HID->COM RS232 Adapter converter detected [ 413.845821][ T5937] usb 1-1: Product: syz [ 413.853790][ T48] cyphidcom ttyUSB0: required endpoint is missing [ 413.902944][ T24] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 413.916869][ T5937] usb 1-1: Manufacturer: syz [ 413.957520][ T5895] usb usb34-port1: unable to enumerate USB device [ 413.970788][ T5937] usb 1-1: SerialNumber: syz [ 413.975815][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.992795][ T24] usb 3-1: Product: syz [ 414.003034][ T24] usb 3-1: Manufacturer: syz [ 414.012842][ T24] usb 3-1: SerialNumber: syz [ 414.033556][T10479] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 414.109666][ T24] usb 3-1: config 0 descriptor?? [ 414.172508][T10491] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 414.193480][ T24] hub 3-1:0.0: bad descriptor, ignoring hub [ 414.223277][ T24] hub 3-1:0.0: probe with driver hub failed with error -5 [ 414.288490][ T5937] option 1-1:7.228: GSM modem (1-port) converter detected [ 414.345883][ T24] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input38 [ 414.450822][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 414.453173][T10492] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1429'. [ 414.572613][ T5937] usb 1-1: USB disconnect, device number 66 [ 414.599610][ T5937] option 1-1:7.228: device disconnected [ 414.656662][ T5895] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 414.759425][ T5471] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 414.816587][ T5895] usb 7-1: Using ep0 maxpacket: 16 [ 414.826697][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.884354][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.014742][ T5895] usb 7-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 415.058150][ T5471] usb 5-1: config 0 has no interfaces? [ 415.065617][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.109647][ T5895] usb 7-1: config 0 descriptor?? [ 415.160592][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 415.371934][ T5471] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 415.561940][ T5895] gt683r_led 0003:1770:FF00.000E: ignoring exceeding usage max [ 415.588909][ T5895] gt683r_led 0003:1770:FF00.000E: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.6-1/input0 [ 415.625532][ T5471] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.751722][ T5471] usb 5-1: Product: syz [ 415.764147][ T5895] usb 7-1: USB disconnect, device number 17 [ 415.774527][ T5471] usb 5-1: Manufacturer: syz [ 415.844987][ T24] gt683r_led 0003:1770:FF00.000E: failed to send set report request: -19 [ 415.860631][T10510] fido_id[10510]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 415.934648][ T5937] usb 6-1: USB disconnect, device number 9 [ 415.947451][ T5937] cypress_m8 6-1:0.0: device disconnected [ 415.964315][ T5471] usb 5-1: SerialNumber: syz [ 416.006574][ T24] usb 3-1: USB disconnect, device number 74 [ 416.018323][T10513] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1437'. [ 416.071949][ T5471] usb 5-1: config 0 descriptor?? [ 416.860334][ T5471] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 417.496431][ T5471] usb 1-1: device descriptor read/64, error -71 [ 417.776444][ T5471] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 417.794372][ T24] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 417.967754][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 417.977979][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.015275][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 418.039345][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.062571][ T24] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 418.093848][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.120211][ T24] usb 3-1: Product: syz [ 418.136447][ T5937] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 418.160571][ T24] usb 3-1: Manufacturer: syz [ 418.170988][ T24] usb 3-1: SerialNumber: syz [ 418.187130][ T24] usb 3-1: config 0 descriptor?? [ 418.219938][ T24] peak_usb 3-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 418.236178][ T24] peak_usb 3-1:0.0: unable to read PCAN-USB serial number (err -8) [ 418.306302][ T5937] usb 7-1: Using ep0 maxpacket: 32 [ 418.325745][ T5937] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 418.346056][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.366663][ T24] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -8 [ 418.376325][ T5937] usb 7-1: Product: syz [ 418.387172][ T5937] usb 7-1: Manufacturer: syz [ 418.416237][ T5937] usb 7-1: SerialNumber: syz [ 418.450681][ T5937] usb 7-1: config 0 descriptor?? [ 418.489399][ T5937] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 418.707786][T10537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.719155][T10537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.881813][ T5471] usb 5-1: USB disconnect, device number 69 [ 418.889390][ T5909] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 418.889681][ T24] usb 3-1: USB disconnect, device number 75 [ 418.948870][ T5937] gspca_ov534_9: reg_w failed -71 [ 419.036740][ T5909] usb 6-1: device descriptor read/64, error -71 [ 419.104409][T10551] input: syz1 as /devices/virtual/input/input39 [ 419.296530][ T5909] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 419.346387][ T5937] gspca_ov534_9: Unknown sensor 0000 [ 419.346490][ T5937] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 419.407994][ T5937] usb 7-1: USB disconnect, device number 18 [ 419.476496][ T5909] usb 6-1: device descriptor read/64, error -71 [ 419.589028][ T5909] usb usb6-port1: attempt power cycle [ 419.946281][ T5909] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 419.983516][ T5909] usb 6-1: device descriptor read/8, error -71 [ 420.002646][T10560] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1451'. [ 420.226388][ T5909] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 420.296721][ T10] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 420.310908][T10569] FAULT_INJECTION: forcing a failure. [ 420.310908][T10569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.339356][ T5909] usb 6-1: device descriptor read/8, error -71 [ 420.382794][T10569] CPU: 0 UID: 0 PID: 10569 Comm: syz.2.1455 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 420.382819][T10569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 420.382831][T10569] Call Trace: [ 420.382839][T10569] [ 420.382847][T10569] dump_stack_lvl+0x189/0x250 [ 420.382879][T10569] ? __pfx____ratelimit+0x10/0x10 [ 420.382911][T10569] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.382938][T10569] ? __pfx__printk+0x10/0x10 [ 420.382957][T10569] ? __might_fault+0xb0/0x130 [ 420.382983][T10569] should_fail_ex+0x414/0x560 [ 420.383009][T10569] _copy_from_user+0x2d/0xb0 [ 420.383027][T10569] restore_altstack+0x9d/0x4b0 [ 420.383047][T10569] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 420.383073][T10569] ? __pfx_restore_altstack+0x10/0x10 [ 420.383098][T10569] ? _raw_spin_unlock_irq+0x23/0x50 [ 420.383120][T10569] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.383147][T10569] __ia32_sys_rt_sigreturn+0x1ac/0x7b0 [ 420.383174][T10569] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.383198][T10569] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 420.383219][T10569] ? _raw_spin_unlock_irq+0x2e/0x50 [ 420.383241][T10569] ? signal_setup_done+0x230/0x310 [ 420.383270][T10569] ? arch_do_signal_or_restart+0x46b/0x750 [ 420.383292][T10569] ? __fget_files+0x3a0/0x420 [ 420.383314][T10569] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 420.383335][T10569] ? irqentry_exit+0x74/0x90 [ 420.383375][T10569] ? do_syscall_64+0xbe/0x3b0 [ 420.383393][T10569] do_syscall_64+0xfa/0x3b0 [ 420.383413][T10569] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.383438][T10569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.383454][T10569] ? clear_bhb_loop+0x60/0xb0 [ 420.383475][T10569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.383491][T10569] RIP: 0033:0x7f0d8292ab19 [ 420.383507][T10569] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 420.383522][T10569] RSP: 002b:00007f0d8373aa80 EFLAGS: 00000293 ORIG_RAX: 000000000000000f [ 420.383540][T10569] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f0d8292ab19 [ 420.383552][T10569] RDX: 00007f0d8373aa80 RSI: 00007f0d8373abb0 RDI: 0000000000000011 [ 420.383564][T10569] RBP: 00007f0d8373b090 R08: 0000000000000000 R09: 00007f0d8373adf7 [ 420.383575][T10569] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 420.383585][T10569] R13: 0000000000000000 R14: 00007f0d82bb5fa0 R15: 00007f0d82cdfa28 [ 420.383611][T10569] [ 420.628902][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.898682][ T5909] usb usb6-port1: unable to enumerate USB device [ 420.922840][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 420.972393][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1456'. [ 421.000787][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.024009][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.060814][ T10] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 421.080237][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.158011][ T10] usb 1-1: config 0 descriptor?? [ 421.468444][T10581] FAULT_INJECTION: forcing a failure. [ 421.468444][T10581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.532868][T10581] CPU: 1 UID: 0 PID: 10581 Comm: syz.4.1460 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 421.532899][T10581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 421.532911][T10581] Call Trace: [ 421.532920][T10581] [ 421.532928][T10581] dump_stack_lvl+0x189/0x250 [ 421.532963][T10581] ? __pfx____ratelimit+0x10/0x10 [ 421.532994][T10581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.533024][T10581] ? __pfx__printk+0x10/0x10 [ 421.533046][T10581] ? __might_fault+0xb0/0x130 [ 421.533077][T10581] should_fail_ex+0x414/0x560 [ 421.533107][T10581] _copy_to_iter+0x3f5/0x16f0 [ 421.533148][T10581] ? __pfx__copy_to_iter+0x10/0x10 [ 421.533174][T10581] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 421.533207][T10581] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 421.533240][T10581] __skb_datagram_iter+0xf8/0x990 [ 421.533268][T10581] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 421.533312][T10581] skb_copy_datagram_iter+0xc5/0x230 [ 421.533343][T10581] netlink_recvmsg+0x2ab/0xa30 [ 421.533377][T10581] ? __pfx_netlink_recvmsg+0x10/0x10 [ 421.533405][T10581] ? aa_sock_msg_perm+0x94/0x160 [ 421.533431][T10581] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 421.533456][T10581] ? security_socket_recvmsg+0x7e/0x2e0 [ 421.533486][T10581] ? __pfx_netlink_recvmsg+0x10/0x10 [ 421.533509][T10581] sock_recvmsg+0x229/0x270 [ 421.533543][T10581] ____sys_recvmsg+0x1c9/0x460 [ 421.533576][T10581] ? __pfx_____sys_recvmsg+0x10/0x10 [ 421.533618][T10581] ? import_iovec+0x74/0xa0 [ 421.533641][T10581] ___sys_recvmsg+0x1b5/0x510 [ 421.533672][T10581] ? __pfx____sys_recvmsg+0x10/0x10 [ 421.533722][T10581] ? __fget_files+0x3a0/0x420 [ 421.533755][T10581] do_recvmmsg+0x307/0x770 [ 421.533790][T10581] ? __pfx_do_recvmmsg+0x10/0x10 [ 421.533828][T10581] ? _copy_from_user+0x94/0xb0 [ 421.533864][T10581] __x64_sys_recvmmsg+0x1af/0x240 [ 421.533895][T10581] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 421.533920][T10581] ? rcu_is_watching+0x15/0xb0 [ 421.533955][T10581] ? do_syscall_64+0xbe/0x3b0 [ 421.533976][T10581] do_syscall_64+0xfa/0x3b0 [ 421.533992][T10581] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.534019][T10581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.534039][T10581] ? clear_bhb_loop+0x60/0xb0 [ 421.534063][T10581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.534082][T10581] RIP: 0033:0x7f56e158e929 [ 421.534099][T10581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.534116][T10581] RSP: 002b:00007f56e233b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 421.534137][T10581] RAX: ffffffffffffffda RBX: 00007f56e17b5fa0 RCX: 00007f56e158e929 [ 421.534151][T10581] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 421.534165][T10581] RBP: 00007f56e233b090 R08: 0000200000003700 R09: 0000000000000000 [ 421.534178][T10581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.534189][T10581] R13: 0000000000000000 R14: 00007f56e17b5fa0 R15: 00007f56e18dfa28 [ 421.534219][T10581] [ 422.310463][ T10] gt683r_led 0003:1770:FF00.000F: ignoring exceeding usage max [ 422.359872][ T10] gt683r_led 0003:1770:FF00.000F: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.0-1/input0 [ 422.444675][ T10] usb 1-1: USB disconnect, device number 69 [ 422.476681][ T5471] gt683r_led 0003:1770:FF00.000F: failed to send set report request: -19 [ 422.657226][ T5909] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 422.695546][T10593] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1464'. [ 422.713820][T10591] fido_id[10591]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 422.816302][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 422.832811][ T5909] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 422.887118][ T5909] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 422.897071][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.931233][ T5909] usb 5-1: Product: syz [ 422.951245][ T5909] usb 5-1: Manufacturer: syz [ 422.981839][ T5909] usb 5-1: SerialNumber: syz [ 423.024965][T10599] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 423.028987][ T5909] usb 5-1: config 0 descriptor?? [ 423.031582][T10599] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 423.065121][T10599] vhci_hcd vhci_hcd.0: Device attached [ 423.098584][T10590] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 423.111971][T10604] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 423.113642][ T5909] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 423.118675][T10604] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 423.139172][T10604] vhci_hcd vhci_hcd.0: Device attached [ 423.228321][T10604] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 423.375183][T10588] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1463'. [ 423.401702][T10599] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(15) [ 423.408343][T10599] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 423.437347][ T5895] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 423.445735][T10599] vhci_hcd vhci_hcd.0: Device attached [ 423.477790][T10610] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(20) [ 423.484400][T10610] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 423.524327][T10610] vhci_hcd vhci_hcd.0: Device attached [ 423.578428][T10599] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(17) [ 423.585069][T10599] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 423.603514][ T5909] usb 5-1: USB disconnect, device number 70 [ 423.623966][T10599] vhci_hcd vhci_hcd.0: Device attached [ 423.693359][T10599] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 423.723787][T10604] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 423.784772][T10604] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 423.832585][ T6059] udevd[6059]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.932683][T10613] vhci_hcd: connection closed [ 423.932920][T10615] vhci_hcd: connection closed [ 423.937744][T10602] vhci_hcd: connection reset by peer [ 423.947926][T10605] vhci_hcd: connection closed [ 423.948280][ T9172] vhci_hcd: stop threads [ 423.948428][T10608] vhci_hcd: connection closed [ 423.963240][ T9172] vhci_hcd: release socket [ 423.995382][ T9172] vhci_hcd: disconnect device [ 424.033853][ T9172] vhci_hcd: stop threads [ 424.065554][ T9172] vhci_hcd: release socket [ 424.095494][ T9172] vhci_hcd: disconnect device [ 424.125914][ T9172] vhci_hcd: stop threads [ 424.132374][ T9172] vhci_hcd: release socket [ 424.145978][ T9172] vhci_hcd: disconnect device [ 424.156954][ T9172] vhci_hcd: stop threads [ 424.161243][ T9172] vhci_hcd: release socket [ 424.190993][ T9172] vhci_hcd: disconnect device [ 424.214783][ T9172] vhci_hcd: stop threads [ 424.240384][ T9172] vhci_hcd: release socket [ 424.275787][ T9172] vhci_hcd: disconnect device [ 424.644678][T10627] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 424.679462][T10628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.709493][ T5149] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 424.799720][T10633] input: syz1 as /devices/virtual/input/input40 [ 424.906960][T10635] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 424.946488][ T3186] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 425.036335][ T5909] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 425.106437][ T3186] usb 5-1: Using ep0 maxpacket: 16 [ 425.123058][ T3186] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 425.152755][ T3186] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 425.164475][T10640] FAULT_INJECTION: forcing a failure. [ 425.164475][T10640] name failslab, interval 1, probability 0, space 0, times 0 [ 425.179880][ T3186] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 425.216259][T10640] CPU: 1 UID: 0 PID: 10640 Comm: syz.0.1477 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 425.216287][T10640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 425.216314][T10640] Call Trace: [ 425.216322][T10640] [ 425.216330][T10640] dump_stack_lvl+0x189/0x250 [ 425.216364][T10640] ? __pfx____ratelimit+0x10/0x10 [ 425.216380][ T3186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.216402][T10640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.216427][T10640] ? __pfx__printk+0x10/0x10 [ 425.216453][T10640] ? __pfx___might_resched+0x10/0x10 [ 425.216484][T10640] ? fs_reclaim_acquire+0x7d/0x100 [ 425.216513][T10640] should_fail_ex+0x414/0x560 [ 425.216543][T10640] should_failslab+0xa8/0x100 [ 425.216566][T10640] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 425.216586][T10640] ? __alloc_skb+0x112/0x2d0 [ 425.216612][T10640] __alloc_skb+0x112/0x2d0 [ 425.216636][T10640] netlink_ack+0x146/0xa50 [ 425.216654][T10640] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 425.216673][T10640] ? ref_tracker_free+0x63a/0x7d0 [ 425.216697][T10640] ? __copy_skb_header+0xa7/0x550 [ 425.216722][T10640] ? __pfx_ref_tracker_free+0x10/0x10 [ 425.216756][T10640] ? __skb_clone+0x63/0x7a0 [ 425.216787][T10640] netlink_rcv_skb+0x28c/0x470 [ 425.216809][T10640] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 425.216829][T10640] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 425.216864][T10640] ? netlink_deliver_tap+0x2e/0x1b0 [ 425.216884][T10640] ? netlink_deliver_tap+0x2e/0x1b0 [ 425.216912][T10640] netlink_unicast+0x75b/0x8d0 [ 425.216942][T10640] netlink_sendmsg+0x805/0xb30 [ 425.216974][T10640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.216998][T10640] ? aa_sock_msg_perm+0x94/0x160 [ 425.217025][T10640] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 425.217050][T10640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.217073][T10640] __sock_sendmsg+0x219/0x270 [ 425.217105][T10640] ____sys_sendmsg+0x505/0x830 [ 425.217134][T10640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.217167][T10640] ? import_iovec+0x74/0xa0 [ 425.217188][T10640] ___sys_sendmsg+0x21f/0x2a0 [ 425.217215][T10640] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.217272][T10640] ? __fget_files+0x2a/0x420 [ 425.217294][T10640] ? __fget_files+0x3a0/0x420 [ 425.217325][T10640] __x64_sys_sendmsg+0x19b/0x260 [ 425.217350][T10640] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 425.217383][T10640] ? __pfx_ksys_write+0x10/0x10 [ 425.217398][T10640] ? rcu_is_watching+0x15/0xb0 [ 425.217432][T10640] ? do_syscall_64+0xbe/0x3b0 [ 425.217453][T10640] do_syscall_64+0xfa/0x3b0 [ 425.217469][T10640] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.217495][T10640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.217516][T10640] ? clear_bhb_loop+0x60/0xb0 [ 425.217537][T10640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.217557][T10640] RIP: 0033:0x7f54ced8e929 [ 425.217574][T10640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.217591][T10640] RSP: 002b:00007f54cfb40038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.217612][T10640] RAX: ffffffffffffffda RBX: 00007f54cefb5fa0 RCX: 00007f54ced8e929 [ 425.217626][T10640] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 425.217637][T10640] RBP: 00007f54cfb40090 R08: 0000000000000000 R09: 0000000000000000 [ 425.217650][T10640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.217661][T10640] R13: 0000000000000000 R14: 00007f54cefb5fa0 R15: 00007f54cf0dfa28 [ 425.217690][T10640] [ 425.220953][T10642] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1478'. [ 425.229064][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 425.578949][ T3186] usb 5-1: Product: syz [ 425.583162][ T3186] usb 5-1: Manufacturer: syz [ 425.588180][ T3186] usb 5-1: SerialNumber: syz [ 425.595724][ T3186] usb 5-1: config 0 descriptor?? [ 425.603233][T10628] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 425.629679][ T3186] hub 5-1:0.0: bad descriptor, ignoring hub [ 425.635649][ T3186] hub 5-1:0.0: probe with driver hub failed with error -5 [ 425.663910][ T3186] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input41 [ 425.754211][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 197, changing to 11 [ 425.833720][ T5909] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 425.907046][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.929768][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 425.947950][T10649] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1471'. [ 425.966255][ T3186] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 425.988274][ T5909] usb 3-1: config 0 descriptor?? [ 426.206405][ T3186] usb 6-1: Using ep0 maxpacket: 32 [ 426.248661][ T3186] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 426.261919][ T3186] usb 6-1: config 0 has no interface number 0 [ 426.308322][ T3186] usb 6-1: config 0 interface 12 has no altsetting 0 [ 426.400807][ T3186] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 426.413169][ T3186] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.428503][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 426.431606][ T3186] usb 6-1: Product: syz [ 426.446247][ T5902] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 426.456267][ T5937] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 426.464443][ T3186] usb 6-1: Manufacturer: syz [ 426.476365][ T3186] usb 6-1: SerialNumber: syz [ 426.505180][ T3186] usb 6-1: config 0 descriptor?? [ 426.632059][ T5909] usbhid 3-1:0.0: can't add hid device: -71 [ 426.644021][ T5902] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.660160][ T5909] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 426.672997][ T5902] usb 7-1: config 0 has no interfaces? [ 426.692041][ T5909] usb 3-1: USB disconnect, device number 76 [ 426.704751][ T5902] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 426.741166][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.769757][ T5902] usb 7-1: Product: syz [ 426.780562][ T5902] usb 7-1: Manufacturer: syz [ 426.794087][ T5902] usb 7-1: SerialNumber: syz [ 426.804175][ T5937] usb 1-1: config 0 has no interfaces? [ 426.820860][ T5937] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 426.833121][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.849215][ T5937] usb 1-1: Product: syz [ 426.854845][ T5902] usb 7-1: config 0 descriptor?? [ 426.860048][ T5937] usb 1-1: Manufacturer: syz [ 426.870031][ T5937] usb 1-1: SerialNumber: syz [ 426.884326][ T5937] usb 1-1: config 0 descriptor?? [ 428.706546][ T5895] vhci_hcd: vhci_device speed not set [ 428.746804][ T5937] usb 5-1: USB disconnect, device number 71 [ 428.752558][T10663] netlink: 'syz.2.1484': attribute type 3 has an invalid length. [ 428.963689][T10665] ip6gretap1: entered promiscuous mode [ 428.970622][ T3186] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 428.982369][ T3186] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 429.024457][ T3186] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 429.050132][ T3186] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 429.106724][ T3186] usb 6-1: USB disconnect, device number 14 [ 429.316263][ T5902] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 429.498496][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 429.521152][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 429.534375][ T3186] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 429.545429][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 429.574867][ T5902] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 429.584654][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.596502][ T5471] usb 7-1: USB disconnect, device number 19 [ 429.612218][ T5902] usb 3-1: Product: syz [ 429.618631][ T5902] usb 3-1: Manufacturer: syz [ 429.623424][ T5902] usb 3-1: SerialNumber: syz [ 429.690361][ T3186] usb 6-1: device descriptor read/64, error -71 [ 429.697913][ T5902] usb 3-1: config 0 descriptor?? [ 429.774038][ T5902] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 429.842558][T10681] veth1_macvtap: left promiscuous mode [ 429.880549][ T5471] usb 1-1: USB disconnect, device number 70 [ 429.959960][ T5902] usb 3-1: USB disconnect, device number 77 [ 430.001341][ T10] usb usb34-port1: attempt power cycle [ 430.007522][ T3186] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 430.166330][ T3186] usb 6-1: device descriptor read/64, error -71 [ 430.303597][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1494'. [ 430.305833][ T3186] usb usb6-port1: attempt power cycle [ 430.525879][T10693] macvlan1: entered promiscuous mode [ 430.602280][T10693] macvlan1: left promiscuous mode [ 430.622625][ T10] usb usb34-port1: unable to enumerate USB device [ 430.706428][ T3186] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 430.805567][ T3186] usb 6-1: device descriptor read/8, error -71 [ 430.966565][ T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 431.069646][ T3186] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 431.128646][ T3186] usb 6-1: device descriptor read/8, error -71 [ 431.186542][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 431.202037][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 431.234886][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 431.255071][ T3186] usb usb6-port1: unable to enumerate USB device [ 431.276537][ T5902] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 431.286406][ T10] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 431.305751][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.328680][ T10] usb 7-1: config 0 descriptor?? [ 431.478818][ T5902] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 431.498383][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.533830][ T5902] usb 3-1: config 0 descriptor?? [ 431.554032][ T10] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 431.745087][T10696] netlink: 300 bytes leftover after parsing attributes in process `syz.6.1496'. [ 431.786761][T10696] iowarrior 7-1:0.0: Error -90 while submitting URB [ 431.836763][T10696] loop6: detected capacity change from 0 to 524288000 [ 431.865374][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 431.865392][ T30] audit: type=1326 audit(1750791114.580:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10713 comm="syz.0.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ced8e929 code=0x7ffc0000 [ 431.967720][ T30] audit: type=1326 audit(1750791114.580:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10713 comm="syz.0.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ced8e929 code=0x7ffc0000 [ 431.990940][T10696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.128297][T10696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.201802][ T30] audit: type=1326 audit(1750791114.620:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10713 comm="syz.0.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f54ced8e929 code=0x7ffc0000 [ 432.225249][T10716] support for the xor transformation has been removed. [ 432.274921][ T30] audit: type=1326 audit(1750791114.620:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10713 comm="syz.0.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ced8e929 code=0x7ffc0000 [ 432.340703][ T5937] usb 7-1: USB disconnect, device number 20 [ 432.360840][ T30] audit: type=1326 audit(1750791114.620:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10713 comm="syz.0.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f54ced8e929 code=0x7ffc0000 [ 432.440890][ T30] audit: type=1326 audit(1750791114.620:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10713 comm="syz.0.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ced8e929 code=0x7ffc0000 [ 432.528576][ T30] audit: type=1326 audit(1750791114.640:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10713 comm="syz.0.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ced8e929 code=0x7ffc0000 [ 432.657833][ T30] audit: type=1326 audit(1750791114.640:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10713 comm="syz.0.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54ced8e929 code=0x7ffc0000 [ 432.706427][ T30] audit: type=1326 audit(1750791114.640:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10713 comm="syz.0.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ced8e929 code=0x7ffc0000 [ 432.771854][T10718] kvm: pic: non byte write [ 432.780190][ T30] audit: type=1326 audit(1750791114.640:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10713 comm="syz.0.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54ced8e929 code=0x7ffc0000 [ 432.790803][T10718] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 433.227600][T10705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.306774][T10705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.378750][T10739] macvlan1: entered promiscuous mode [ 433.393872][T10739] macvlan1: left promiscuous mode [ 433.441132][ T5902] pegasus 3-1:0.0: setup Pegasus II specific registers [ 433.578898][ T5902] pegasus 3-1:0.0: can't locate MII phy, using default [ 433.655798][ T5902] pegasus 3-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, ae:a9:c7:19:87:08 [ 433.732074][ T5902] usb 3-1: USB disconnect, device number 78 [ 435.373234][T10778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1515'. [ 435.556501][T10781] loop6: detected capacity change from 0 to 7 [ 435.627660][T10781] Dev loop6: unable to read RDB block 7 [ 435.633388][T10781] loop6: AHDI p1 p2 p3 p4 [ 435.684120][T10781] loop6: partition table partially beyond EOD, truncated [ 435.777464][T10781] loop6: p1 start 926365495 is beyond EOD, truncated [ 435.793581][T10784] binder: BINDER_SET_CONTEXT_MGR already set [ 435.833678][T10784] binder: 10780:10784 ioctl 4018620d 200000000440 returned -16 [ 435.860070][T10781] loop6: p2 size 47 extends beyond EOD, truncated [ 435.965309][T10781] loop6: p3 start 1886353253 is beyond EOD, truncated [ 435.986303][ T5902] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 436.205498][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 436.289162][ T5902] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 436.354236][ T5902] usb 5-1: config 0 has an invalid descriptor of length 225, skipping remainder of the config [ 436.393818][ T9573] udevd[9573]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 436.425884][ T5902] usb 5-1: config 0 has no interface number 0 [ 436.444783][T10799] FAULT_INJECTION: forcing a failure. [ 436.444783][T10799] name failslab, interval 1, probability 0, space 0, times 0 [ 436.466591][ T5902] usb 5-1: config 0 interface 2 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 436.541511][T10801] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 436.544156][ T5902] usb 5-1: config 0 interface 2 has no altsetting 0 [ 436.577454][T10799] CPU: 1 UID: 0 PID: 10799 Comm: syz.0.1520 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 436.577479][T10799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 436.577490][T10799] Call Trace: [ 436.577498][T10799] [ 436.577505][T10799] dump_stack_lvl+0x189/0x250 [ 436.577537][T10799] ? __pfx____ratelimit+0x10/0x10 [ 436.577562][T10799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.577589][T10799] ? __pfx__printk+0x10/0x10 [ 436.577610][T10799] ? __pfx___might_resched+0x10/0x10 [ 436.577637][T10799] ? fs_reclaim_acquire+0x7d/0x100 [ 436.577662][T10799] should_fail_ex+0x414/0x560 [ 436.577689][T10799] should_failslab+0xa8/0x100 [ 436.577710][T10799] __kmalloc_cache_noprof+0x70/0x3d0 [ 436.577726][T10799] ? snd_mixer_oss_put_volume1_sw+0xf1/0x3c0 [ 436.577756][T10799] snd_mixer_oss_put_volume1_sw+0xf1/0x3c0 [ 436.577786][T10799] snd_mixer_oss_put_recsrc1_sw+0x65/0x90 [ 436.577811][T10799] ? __pfx_snd_mixer_oss_put_recsrc1_sw+0x10/0x10 [ 436.577835][T10799] snd_mixer_oss_set_recsrc+0x26c/0x400 [ 436.577863][T10799] ? __pfx_snd_mixer_oss_set_recsrc+0x10/0x10 [ 436.577898][T10799] ? __might_fault+0xb0/0x130 [ 436.577918][T10799] snd_mixer_oss_ioctl1+0xebd/0x18b0 [ 436.577943][T10799] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 436.577962][T10799] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 436.577984][T10799] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 436.578021][T10799] ? __lock_acquire+0xab9/0xd20 [ 436.578075][T10799] snd_mixer_oss_ioctl_card+0x10b/0x160 [ 436.578102][T10799] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 436.578130][T10799] ? __fget_files+0x2a/0x420 [ 436.578149][T10799] ? __fget_files+0x3a0/0x420 [ 436.578173][T10799] snd_pcm_oss_ioctl+0x264/0xdd0 [ 436.578201][T10799] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 436.578227][T10799] __se_sys_ioctl+0xf9/0x170 [ 436.578257][T10799] do_syscall_64+0xfa/0x3b0 [ 436.578272][T10799] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.578296][T10799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.578314][T10799] ? clear_bhb_loop+0x60/0xb0 [ 436.578336][T10799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.578354][T10799] RIP: 0033:0x7f54ced8e929 [ 436.578370][T10799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.578385][T10799] RSP: 002b:00007f54cfb40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.578404][T10799] RAX: ffffffffffffffda RBX: 00007f54cefb5fa0 RCX: 00007f54ced8e929 [ 436.578417][T10799] RDX: 0000200000000100 RSI: 00000000c0044dff RDI: 0000000000000004 [ 436.578429][T10799] RBP: 00007f54cfb40090 R08: 0000000000000000 R09: 0000000000000000 [ 436.578439][T10799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.578450][T10799] R13: 0000000000000000 R14: 00007f54cefb5fa0 R15: 00007f54cf0dfa28 [ 436.578490][T10799] [ 436.628440][ T5902] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 436.814360][ C0] vkms_vblank_simulate: vblank timer overrun [ 436.982254][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.992174][ T5902] usb 5-1: Product: syz [ 436.996495][ T5902] usb 5-1: Manufacturer: syz [ 437.002068][ T5902] usb 5-1: SerialNumber: syz [ 437.026882][ T5902] usb 5-1: config 0 descriptor?? [ 437.349066][T10817] FAULT_INJECTION: forcing a failure. [ 437.349066][T10817] name failslab, interval 1, probability 0, space 0, times 0 [ 437.416001][T10817] CPU: 1 UID: 0 PID: 10817 Comm: syz.2.1525 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 437.416029][T10817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 437.416041][T10817] Call Trace: [ 437.416049][T10817] [ 437.416057][T10817] dump_stack_lvl+0x189/0x250 [ 437.416094][T10817] ? __pfx____ratelimit+0x10/0x10 [ 437.416129][T10817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.416160][T10817] ? __pfx__printk+0x10/0x10 [ 437.416189][T10817] ? __pfx___might_resched+0x10/0x10 [ 437.416218][T10817] ? fs_reclaim_acquire+0x7d/0x100 [ 437.416248][T10817] should_fail_ex+0x414/0x560 [ 437.416279][T10817] ? file_tty_write+0x2a8/0x990 [ 437.416317][T10817] should_failslab+0xa8/0x100 [ 437.416339][T10817] __kvmalloc_node_noprof+0x161/0x5f0 [ 437.416359][T10817] ? file_tty_write+0x2a8/0x990 [ 437.416391][T10817] file_tty_write+0x2a8/0x990 [ 437.416438][T10817] vfs_write+0x54b/0xa90 [ 437.416469][T10817] ? __pfx_tty_write+0x10/0x10 [ 437.416494][T10817] ? __pfx_vfs_write+0x10/0x10 [ 437.416524][T10817] ? do_sys_openat2+0x154/0x1c0 [ 437.416544][T10817] ? kmem_cache_free+0x18f/0x400 [ 437.416583][T10817] ksys_write+0x145/0x250 [ 437.416603][T10817] ? __pfx_ksys_write+0x10/0x10 [ 437.416616][T10817] ? rcu_is_watching+0x15/0xb0 [ 437.416645][T10817] ? do_syscall_64+0xbe/0x3b0 [ 437.416663][T10817] do_syscall_64+0xfa/0x3b0 [ 437.416677][T10817] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.416701][T10817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.416719][T10817] ? clear_bhb_loop+0x60/0xb0 [ 437.416740][T10817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.416757][T10817] RIP: 0033:0x7f0d8298e929 [ 437.416773][T10817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.416788][T10817] RSP: 002b:00007f0d8371a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 437.416806][T10817] RAX: ffffffffffffffda RBX: 00007f0d82bb6080 RCX: 00007f0d8298e929 [ 437.416820][T10817] RDX: 000000000000ff2e RSI: 0000200000000240 RDI: 0000000000000007 [ 437.416830][T10817] RBP: 00007f0d8371a090 R08: 0000000000000000 R09: 0000000000000000 [ 437.416841][T10817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.416852][T10817] R13: 0000000000000000 R14: 00007f0d82bb6080 R15: 00007f0d82cdfa28 [ 437.416880][T10817] [ 437.699445][ T5902] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 437.931045][ T5902] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 437.950431][ T5902] usb 5-1: USB disconnect, device number 72 [ 438.030383][ T9573] udevd[9573]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.152638][T10836] overlayfs: missing 'lowerdir' [ 438.466654][ T5895] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 438.650368][ T5895] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.714744][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 438.796256][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 438.876719][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 438.926270][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 439.005798][ T5895] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 439.093856][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 439.114761][ T5895] usb 1-1: Product: syz [ 439.124905][ T5895] usb 1-1: Manufacturer: syz [ 439.131787][ T5895] usb 1-1: SerialNumber: syz [ 439.145422][ T5895] usb 1-1: config 0 descriptor?? [ 440.091994][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.098609][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.099413][ T5895] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 440.136323][ T5937] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 440.149058][ T5895] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 440.324817][ T5937] usb 5-1: Using ep0 maxpacket: 8 [ 440.391980][ T5937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.544932][ T5937] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 440.588130][ T5937] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 440.645130][ T5937] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 440.679251][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.773544][T10883] vivid-007: disconnect [ 440.791141][ T5937] usb 5-1: config 0 descriptor?? [ 440.918488][T10882] vivid-007: reconnect [ 440.992769][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 440.992786][ T30] audit: type=1326 audit(1750791123.680:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10879 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8298e929 code=0x7ffc0000 [ 441.012290][T10863] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 441.086295][ T48] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 441.154567][ T30] audit: type=1326 audit(1750791123.680:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10879 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8298e929 code=0x7ffc0000 [ 441.288284][T10480] usb 1-1: USB disconnect, device number 71 [ 441.467069][ T48] usb 6-1: config 0 has no interfaces? [ 441.485363][ T30] audit: type=1326 audit(1750791123.680:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10879 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d8292ab19 code=0x7ffc0000 [ 441.512696][ T30] audit: type=1326 audit(1750791123.680:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10879 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d8292ab19 code=0x7ffc0000 [ 441.570951][ T48] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 441.575283][ T30] audit: type=1326 audit(1750791123.690:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10879 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d8292ab19 code=0x7ffc0000 [ 441.615832][ T30] audit: type=1326 audit(1750791123.690:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10879 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d8292ab19 code=0x7ffc0000 [ 441.648738][T10887] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 441.655367][T10887] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 441.669477][T10887] vhci_hcd vhci_hcd.0: Device attached [ 441.675309][ T30] audit: type=1326 audit(1750791123.690:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10879 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8298e929 code=0x7ffc0000 [ 441.698149][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.698177][ T48] usb 6-1: Product: syz [ 441.712620][ T30] audit: type=1326 audit(1750791123.690:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10879 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d8292ab19 code=0x7ffc0000 [ 441.728066][ T48] usb 6-1: Manufacturer: syz [ 441.764013][ T30] audit: type=1326 audit(1750791123.690:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10879 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d8292ab19 code=0x7ffc0000 [ 441.854916][ T48] usb 6-1: SerialNumber: syz [ 441.866928][ T5909] vhci_hcd: vhci_device speed not set [ 441.889768][ T48] usb 6-1: config 0 descriptor?? [ 441.898250][T10889] vhci_hcd: connection closed [ 441.936341][ T5909] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 442.006986][ T4536] vhci_hcd: stop threads [ 442.011308][ T4536] vhci_hcd: release socket [ 442.072553][ T4536] vhci_hcd: disconnect device [ 442.095348][T10902] FAULT_INJECTION: forcing a failure. [ 442.095348][T10902] name failslab, interval 1, probability 0, space 0, times 0 [ 442.124112][ T30] audit: type=1326 audit(1750791123.690:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10879 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d8292ab19 code=0x7ffc0000 [ 442.193723][ T5902] usb 5-1: USB disconnect, device number 73 [ 442.208325][T10902] CPU: 0 UID: 0 PID: 10902 Comm: syz.6.1544 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 442.208347][T10902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 442.208356][T10902] Call Trace: [ 442.208363][T10902] [ 442.208369][T10902] dump_stack_lvl+0x189/0x250 [ 442.208395][T10902] ? __pfx____ratelimit+0x10/0x10 [ 442.208417][T10902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.208440][T10902] ? __pfx__printk+0x10/0x10 [ 442.208467][T10902] should_fail_ex+0x414/0x560 [ 442.208497][T10902] should_failslab+0xa8/0x100 [ 442.208521][T10902] kmem_cache_alloc_noprof+0x73/0x3c0 [ 442.208554][T10902] ? skb_clone+0x212/0x3a0 [ 442.208585][T10902] skb_clone+0x212/0x3a0 [ 442.208607][T10902] __netlink_deliver_tap+0x404/0x850 [ 442.208633][T10902] ? netlink_deliver_tap+0x2e/0x1b0 [ 442.208650][T10902] netlink_deliver_tap+0x19c/0x1b0 [ 442.208668][T10902] netlink_sendskb+0x68/0x140 [ 442.208683][T10902] netlink_rcv_skb+0x28c/0x470 [ 442.208700][T10902] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 442.208717][T10902] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 442.208743][T10902] ? netlink_deliver_tap+0x2e/0x1b0 [ 442.208758][T10902] ? netlink_deliver_tap+0x2e/0x1b0 [ 442.208779][T10902] netlink_unicast+0x75b/0x8d0 [ 442.208803][T10902] netlink_sendmsg+0x805/0xb30 [ 442.208827][T10902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.208846][T10902] ? aa_sock_msg_perm+0x94/0x160 [ 442.208866][T10902] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 442.208884][T10902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.208901][T10902] __sock_sendmsg+0x219/0x270 [ 442.208926][T10902] ____sys_sendmsg+0x505/0x830 [ 442.208949][T10902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 442.208974][T10902] ? import_iovec+0x74/0xa0 [ 442.208990][T10902] ___sys_sendmsg+0x21f/0x2a0 [ 442.209010][T10902] ? __pfx____sys_sendmsg+0x10/0x10 [ 442.209054][T10902] ? __fget_files+0x2a/0x420 [ 442.209069][T10902] ? __fget_files+0x3a0/0x420 [ 442.209101][T10902] __x64_sys_sendmsg+0x19b/0x260 [ 442.209121][T10902] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 442.209146][T10902] ? __pfx_ksys_write+0x10/0x10 [ 442.209158][T10902] ? rcu_is_watching+0x15/0xb0 [ 442.209184][T10902] ? do_syscall_64+0xbe/0x3b0 [ 442.209200][T10902] do_syscall_64+0xfa/0x3b0 [ 442.209211][T10902] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.209232][T10902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.209246][T10902] ? clear_bhb_loop+0x60/0xb0 [ 442.209264][T10902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.209278][T10902] RIP: 0033:0x7f2394d8e929 [ 442.209290][T10902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.209303][T10902] RSP: 002b:00007f2395c62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.209318][T10902] RAX: ffffffffffffffda RBX: 00007f2394fb5fa0 RCX: 00007f2394d8e929 [ 442.209329][T10902] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 442.209340][T10902] RBP: 00007f2395c62090 R08: 0000000000000000 R09: 0000000000000000 [ 442.209348][T10902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.209357][T10902] R13: 0000000000000000 R14: 00007f2394fb5fa0 R15: 00007f23950dfa28 [ 442.209379][T10902] [ 444.136330][T10480] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 444.293569][T10480] usb 3-1: config 2 has an invalid interface number: 10 but max is 0 [ 444.307311][T10480] usb 3-1: config 2 has an invalid interface descriptor of length 2, skipping [ 444.345465][T10480] usb 3-1: config 2 has no interface number 0 [ 444.361172][T10480] usb 3-1: config 2 interface 10 altsetting 12 has a duplicate endpoint with address 0x7, skipping [ 444.379122][T10480] usb 3-1: config 2 interface 10 altsetting 12 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 444.394169][T10480] usb 3-1: config 2 interface 10 has no altsetting 0 [ 444.407581][T10480] usb 3-1: New USB device found, idVendor=054c, idProduct=002b, bcdDevice= 1.0c [ 444.418032][T10480] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.426735][T10480] usb 3-1: Product: syz [ 444.440007][T10480] usb 3-1: Manufacturer: syz [ 444.453674][T10480] usb 3-1: SerialNumber: syz [ 444.700488][T10480] ums-isd200 3-1:2.10: USB Mass Storage device detected [ 444.833033][T10480] usb 3-1: USB disconnect, device number 79 [ 444.937042][ T5471] usb 6-1: USB disconnect, device number 19 [ 445.017645][T10929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.389473][T10930] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1552'. [ 445.642497][T10934] delete_channel: no stack [ 446.978717][T10963] QAT: Invalid ioctl 1075883590 [ 447.005020][T10963] QAT: Invalid ioctl 1075883590 [ 447.077658][T10964] sctp: [Deprecated]: syz.0.1559 (pid 10964) Use of struct sctp_assoc_value in delayed_ack socket option. [ 447.077658][T10964] Use struct sctp_sack_info instead [ 447.097901][T10963] QAT: Invalid ioctl 1075883590 [ 447.196278][ T5909] vhci_hcd: vhci_device speed not set [ 447.211549][T10963] QAT: Invalid ioctl 1075883590 [ 447.259448][T10963] QAT: Invalid ioctl 1075883590 [ 447.353914][T10963] QAT: Invalid ioctl 1075883590 [ 447.398789][T10963] QAT: Invalid ioctl 1075883590 [ 447.456786][T10963] QAT: Invalid ioctl 1075883590 [ 447.498366][T10963] QAT: Invalid ioctl 1075883590 [ 447.573804][T10963] QAT: Invalid ioctl 1075883590 [ 447.640348][T10990] FAULT_INJECTION: forcing a failure. [ 447.640348][T10990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.817338][T10990] CPU: 1 UID: 0 PID: 10990 Comm: syz.4.1560 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 447.817368][T10990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 447.817381][T10990] Call Trace: [ 447.817388][T10990] [ 447.817397][T10990] dump_stack_lvl+0x189/0x250 [ 447.817447][T10990] ? __pfx____ratelimit+0x10/0x10 [ 447.817495][T10990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.817527][T10990] ? __pfx__printk+0x10/0x10 [ 447.817549][T10990] ? __might_fault+0xb0/0x130 [ 447.817581][T10990] should_fail_ex+0x414/0x560 [ 447.817620][T10990] _copy_to_iter+0x3f5/0x16f0 [ 447.817660][T10990] ? __pfx__copy_to_iter+0x10/0x10 [ 447.817687][T10990] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 447.817722][T10990] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 447.817756][T10990] __skb_datagram_iter+0xf8/0x990 [ 447.817785][T10990] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 447.817823][T10990] skb_copy_datagram_iter+0xc5/0x230 [ 447.817854][T10990] netlink_recvmsg+0x2ab/0xa30 [ 447.817890][T10990] ? __pfx_netlink_recvmsg+0x10/0x10 [ 447.817919][T10990] ? aa_sock_msg_perm+0x94/0x160 [ 447.817946][T10990] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 447.817971][T10990] ? security_socket_recvmsg+0x7e/0x2e0 [ 447.818002][T10990] ? __pfx_netlink_recvmsg+0x10/0x10 [ 447.818025][T10990] sock_recvmsg+0x229/0x270 [ 447.818060][T10990] ____sys_recvmsg+0x1c9/0x460 [ 447.818096][T10990] ? __pfx_____sys_recvmsg+0x10/0x10 [ 447.818138][T10990] ? import_iovec+0x74/0xa0 [ 447.818162][T10990] ___sys_recvmsg+0x1b5/0x510 [ 447.818194][T10990] ? __pfx____sys_recvmsg+0x10/0x10 [ 447.818246][T10990] ? __fget_files+0x3a0/0x420 [ 447.818282][T10990] do_recvmmsg+0x307/0x770 [ 447.818318][T10990] ? __pfx_do_recvmmsg+0x10/0x10 [ 447.818363][T10990] ? _copy_from_user+0x94/0xb0 [ 447.818400][T10990] __x64_sys_recvmmsg+0x1af/0x240 [ 447.818430][T10990] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 447.818455][T10990] ? rcu_is_watching+0x15/0xb0 [ 447.818491][T10990] ? do_syscall_64+0xbe/0x3b0 [ 447.818514][T10990] do_syscall_64+0xfa/0x3b0 [ 447.818530][T10990] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.818558][T10990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.818579][T10990] ? clear_bhb_loop+0x60/0xb0 [ 447.818619][T10990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.818639][T10990] RIP: 0033:0x7f56e158e929 [ 447.818669][T10990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.818686][T10990] RSP: 002b:00007f56e233b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 447.818708][T10990] RAX: ffffffffffffffda RBX: 00007f56e17b5fa0 RCX: 00007f56e158e929 [ 447.818722][T10990] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 447.818736][T10990] RBP: 00007f56e233b090 R08: 0000200000003700 R09: 0000000000000000 [ 447.818749][T10990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.818761][T10990] R13: 0000000000000000 R14: 00007f56e17b5fa0 R15: 00007f56e18dfa28 [ 447.818792][T10990] [ 448.120538][ C1] vkms_vblank_simulate: vblank timer overrun [ 448.738536][T11001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1564'. [ 448.856433][ T5909] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 449.035163][T11006] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 449.036357][ T5909] usb 3-1: Using ep0 maxpacket: 8 [ 449.072720][ T5909] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.103565][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 449.134510][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 449.175070][ T5909] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 449.224594][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 449.224610][ T30] audit: type=1326 audit(1750791131.940:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11000 comm="syz.4.1564" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56e158e929 code=0x0 [ 449.252617][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.260040][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.304045][ T5909] usb 3-1: config 0 descriptor?? [ 449.532772][T10993] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 450.186476][ T5909] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 450.316832][ T5909] usb 5-1: device descriptor read/64, error -71 [ 450.472172][ T9466] syz.3.1189: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 450.508584][ T30] audit: type=1326 audit(1750791133.230:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11029 comm="syz.0.1570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54ced8e929 code=0x0 [ 450.527821][ T9466] CPU: 1 UID: 0 PID: 9466 Comm: syz.3.1189 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 450.527849][ T9466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 450.527862][ T9466] Call Trace: [ 450.527871][ T9466] [ 450.527879][ T9466] dump_stack_lvl+0x189/0x250 [ 450.527919][ T9466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.527951][ T9466] ? __pfx__printk+0x10/0x10 [ 450.527974][ T9466] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 450.527997][ T9466] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 450.528021][ T9466] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 450.528046][ T9466] warn_alloc+0x214/0x310 [ 450.528076][ T9466] ? __pfx_warn_alloc+0x10/0x10 [ 450.528109][ T9466] ? __get_vm_area_node+0x28f/0x300 [ 450.528130][ T9466] ? relay_open_buf+0x217/0xd40 [ 450.528157][ T9466] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 450.528212][ T9466] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 450.528239][ T9466] ? rcu_is_watching+0x15/0xb0 [ 450.528270][ T9466] ? relay_open_buf+0x217/0xd40 [ 450.528297][ T9466] ? relay_open_buf+0x217/0xd40 [ 450.528316][ T9466] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 450.528336][ T9466] ? relay_open_buf+0x217/0xd40 [ 450.528355][ T9466] ? trace_kmalloc+0x1f/0xd0 [ 450.528371][ T9466] ? relay_open_buf+0x17c/0xd40 [ 450.528395][ T9466] relay_open_buf+0x217/0xd40 [ 450.528428][ T9466] relay_open+0x427/0x920 [ 450.528456][ T9466] do_blk_trace_setup+0x591/0x9d0 [ 450.528495][ T9466] blk_trace_setup+0x116/0x1f0 [ 450.528527][ T9466] ? __pfx_blk_trace_setup+0x10/0x10 [ 450.528564][ T9466] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 450.528595][ T9466] blk_trace_ioctl+0x181/0x430 [ 450.528625][ T9466] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 450.528662][ T9466] ? __lock_acquire+0xab9/0xd20 [ 450.528714][ T9466] blkdev_ioctl+0x416/0x6d0 [ 450.528745][ T9466] ? __pfx_blkdev_ioctl+0x10/0x10 [ 450.528769][ T9466] ? __fget_files+0x2a/0x420 [ 450.528795][ T9466] ? bpf_lsm_file_ioctl+0x9/0x20 [ 450.528824][ T9466] ? __pfx_blkdev_ioctl+0x10/0x10 [ 450.528856][ T9466] __se_sys_ioctl+0xf9/0x170 [ 450.528888][ T9466] do_syscall_64+0xfa/0x3b0 [ 450.528904][ T9466] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.528932][ T9466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.528952][ T9466] ? clear_bhb_loop+0x60/0xb0 [ 450.528976][ T9466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.528995][ T9466] RIP: 0033:0x7f8d8778e929 [ 450.529018][ T9466] Code: Unable to access opcode bytes at 0x7f8d8778e8ff. [ 450.529029][ T9466] RSP: 002b:00007f8d855b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.529050][ T9466] RAX: ffffffffffffffda RBX: 00007f8d879b6160 RCX: 00007f8d8778e929 [ 450.529064][ T9466] RDX: 0000200000000240 RSI: 00000000c0481273 RDI: 0000000000000004 [ 450.529078][ T9466] RBP: 00007f8d87810b39 R08: 0000000000000000 R09: 0000000000000000 [ 450.529089][ T9466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.529099][ T9466] R13: 0000000000000000 R14: 00007f8d879b6160 R15: 00007f8d87adfa28 [ 450.529131][ T9466] [ 450.532535][ T9466] Mem-Info: [ 450.626282][ T5909] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 450.848805][ T9466] active_anon:4511 inactive_anon:7 isolated_anon:0 [ 450.848805][ T9466] active_file:14290 inactive_file:290 isolated_file:0 [ 450.848805][ T9466] unevictable:768 dirty:78 writeback:0 [ 450.848805][ T9466] slab_reclaimable:6095 slab_unreclaimable:114468 [ 450.848805][ T9466] mapped:45493 shmem:2479 pagetables:4277 [ 450.848805][ T9466] sec_pagetables:0 bounce:0 [ 450.848805][ T9466] kernel_misc_reclaimable:0 [ 450.848805][ T9466] free:114862 free_pcp:27053 free_cma:0 [ 450.936558][ T9466] Node 0 active_anon:32kB inactive_anon:24kB active_file:172kB inactive_file:16kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:148768kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13008kB pagetables:6660kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 451.067979][ T9466] Node 1 active_anon:20420kB inactive_anon:4kB active_file:56988kB inactive_file:1144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:37172kB dirty:296kB writeback:0kB shmem:10312kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:1264kB pagetables:10488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 451.176784][ T9466] Node 0 DMA free:10196kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:72kB local_pcp:60kB free_cma:0kB [ 451.205787][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.288183][ T9466] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 451.294200][ T9466] Node 0 DMA32 free:39800kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:10240KB free_highatomic:1372KB active_anon:4kB inactive_anon:24kB active_file:172kB inactive_file:16kB unevictable:1536kB writepending:16kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:12800kB local_pcp:6032kB free_cma:0kB [ 451.325955][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.359868][ T9466] lowmem_reserve[]: 0 0 1 1 1 [ 451.364650][ T9466] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:12kB free_cma:0kB [ 451.394691][ T5471] usb 3-1: USB disconnect, device number 80 [ 451.491329][ T9466] lowmem_reserve[]: 0 0 0 0 0 [ 451.517012][T11038] netlink: 1052 bytes leftover after parsing attributes in process `syz.5.1572'. [ 451.528519][ T9466] Node 1 Normal free:418448kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23620kB inactive_anon:4kB active_file:56988kB inactive_file:1144kB unevictable:1536kB writepending:296kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:92588kB local_pcp:53268kB free_cma:0kB [ 451.566280][T10480] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 451.581765][ T9466] lowmem_reserve[]: 0 0 0 0 0 [ 451.590409][ T9466] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10196kB [ 451.605682][ T9466] Node 0 DMA32: 122*4kB (UMEH) 116*8kB (MEH) 145*16kB (UMEH) 103*32kB (UMEH) 68*64kB (MEH) 48*128kB (MEH) 29*256kB (MH) 11*512kB (M) 9*1024kB (M) 0*2048kB 0*4096kB = 39800kB [ 451.623744][ T9466] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 451.636711][ T9466] Node 1 Normal: 778*4kB (UME) 329*8kB (UME) 162*16kB (UM) 60*32kB (UM) 22*64kB (UM) 18*128kB (UME) 8*256kB (UME) 4*512kB (UME) 3*1024kB (UE) 2*2048kB (U) 96*4096kB (M) = 418448kB [ 451.656026][ T9466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 451.667798][T11042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.686432][ T5149] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 451.695036][ T9466] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 451.712376][ T5909] usb 5-1: device descriptor read/64, error -71 [ 451.718654][T10480] usb 7-1: device descriptor read/64, error -71 [ 451.755404][ T9466] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 451.766223][ T9466] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 451.777110][ T9466] 19664 total pagecache pages [ 451.781851][ T9466] 1451 pages in swap cache [ 451.788774][ T9466] Free swap = 95028kB [ 451.792881][ T9466] Total swap = 124996kB [ 451.801562][ T9466] 2097051 pages RAM [ 451.805944][ T9466] 0 pages HighMem/MovableOnly [ 451.810889][ T9466] 424694 pages reserved [ 451.815469][ T9466] 0 pages cma reserved [ 451.838100][ T5909] usb usb5-port1: attempt power cycle [ 451.926274][ T5471] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 451.976483][T10480] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 452.056226][ T5471] usb 1-1: device descriptor read/64, error -71 [ 452.106289][T10480] usb 7-1: device descriptor read/64, error -71 [ 452.186532][ T5909] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 452.216654][T10480] usb usb7-port1: attempt power cycle [ 452.220958][ T5909] usb 5-1: device descriptor read/8, error -71 [ 452.296330][ T5471] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 452.486730][ T5909] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 452.527338][ T5909] usb 5-1: device descriptor read/8, error -71 [ 452.566395][T10480] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 452.566469][ T5471] usb 1-1: device descriptor read/64, error -71 [ 452.636641][ T5909] usb usb5-port1: unable to enumerate USB device [ 452.702930][ T5471] usb usb1-port1: attempt power cycle [ 452.723141][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1576'. [ 452.743160][T10480] usb 7-1: device descriptor read/8, error -71 [ 452.989016][T11050] IPv6: sit1: Disabled Multicast RS [ 453.146514][ T5471] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 453.186653][ T5471] usb 1-1: device descriptor read/8, error -71 [ 453.302857][T11059] FAULT_INJECTION: forcing a failure. [ 453.302857][T11059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.321675][T11059] CPU: 1 UID: 0 PID: 11059 Comm: syz.6.1579 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 453.321702][T11059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 453.321714][T11059] Call Trace: [ 453.321722][T11059] [ 453.321730][T11059] dump_stack_lvl+0x189/0x250 [ 453.321764][T11059] ? __pfx____ratelimit+0x10/0x10 [ 453.321792][T11059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.321820][T11059] ? __pfx__printk+0x10/0x10 [ 453.321852][T11059] should_fail_ex+0x414/0x560 [ 453.321881][T11059] _copy_to_user+0x31/0xb0 [ 453.321901][T11059] simple_read_from_buffer+0xe1/0x170 [ 453.321926][T11059] proc_fail_nth_read+0x1df/0x250 [ 453.321951][T11059] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.321977][T11059] ? rw_verify_area+0x258/0x650 [ 453.322003][T11059] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.322027][T11059] vfs_read+0x200/0x980 [ 453.322060][T11059] ? __pfx___mutex_lock+0x10/0x10 [ 453.322088][T11059] ? __pfx_vfs_read+0x10/0x10 [ 453.322117][T11059] ? __fget_files+0x2a/0x420 [ 453.322142][T11059] ? __fget_files+0x3a0/0x420 [ 453.322161][T11059] ? __fget_files+0x2a/0x420 [ 453.322190][T11059] ksys_read+0x145/0x250 [ 453.322220][T11059] ? __pfx_ksys_read+0x10/0x10 [ 453.322280][T11059] ? do_syscall_64+0xbe/0x3b0 [ 453.322302][T11059] do_syscall_64+0xfa/0x3b0 [ 453.322318][T11059] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.322346][T11059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.322365][T11059] ? clear_bhb_loop+0x60/0xb0 [ 453.322388][T11059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.322407][T11059] RIP: 0033:0x7f2394d8d33c [ 453.322425][T11059] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 453.322442][T11059] RSP: 002b:00007f2395c62030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 453.322463][T11059] RAX: ffffffffffffffda RBX: 00007f2394fb5fa0 RCX: 00007f2394d8d33c [ 453.322476][T11059] RDX: 000000000000000f RSI: 00007f2395c620a0 RDI: 0000000000000003 [ 453.322488][T11059] RBP: 00007f2395c62090 R08: 0000000000000000 R09: 0000000000000000 [ 453.322500][T11059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.322512][T11059] R13: 0000000000000001 R14: 00007f2394fb5fa0 R15: 00007f23950dfa28 [ 453.322543][T11059] [ 453.552576][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.566687][ T5471] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 453.597050][ T5471] usb 1-1: device descriptor read/8, error -71 [ 453.711392][ T5471] usb usb1-port1: unable to enumerate USB device [ 453.928251][T11065] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1580'. [ 454.051537][T11070] Set syz1 is full, maxelem 65536 reached [ 454.116359][ T5471] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 454.286238][ T5471] usb 6-1: Using ep0 maxpacket: 16 [ 454.296460][ T5471] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.313642][ T5471] usb 6-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.00 [ 454.346309][ T5471] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.346446][ T48] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 454.377298][ T5471] usb 6-1: config 0 descriptor?? [ 454.410038][ T5471] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input42 [ 454.546285][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 454.561428][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.612313][ T5184] bcm5974 6-1:0.0: could not read from device [ 454.616544][ T48] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 454.661433][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.676722][ T5184] bcm5974 6-1:0.0: could not read from device [ 454.709665][ T5184] bcm5974 6-1:0.0: could not read from device [ 454.716943][ T5471] usb 6-1: USB disconnect, device number 20 [ 454.730861][ T48] usb 3-1: config 0 descriptor?? [ 455.006373][ T5902] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 455.144037][ T48] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 455.170348][ T5902] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 455.187186][ T48] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 455.213078][ T5902] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 455.215463][ T48] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 455.250661][ T5902] usb 1-1: can't read configurations, error -61 [ 455.251862][ T48] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 455.291222][ T48] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 455.313752][ T48] mcp2221 0003:04D8:00DD.0010: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 455.411728][ T5902] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 455.563218][ T48] usb 3-1: USB disconnect, device number 81 [ 455.617536][ T5902] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 455.644274][ T5902] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 455.676276][T10677] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 455.690359][ T5902] usb 1-1: can't read configurations, error -61 [ 455.810556][ T5902] usb usb1-port1: attempt power cycle [ 455.993817][T10677] usb 6-1: config 0 has no interfaces? [ 456.186536][ T5902] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 456.264184][ T5902] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 456.287586][T10677] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 456.336461][ T5902] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 456.344087][ T5902] usb 1-1: can't read configurations, error -61 [ 456.352412][T10677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.389456][T10677] usb 6-1: Product: syz [ 456.393662][T10677] usb 6-1: Manufacturer: syz [ 456.472445][T10677] usb 6-1: SerialNumber: syz [ 456.522432][T10677] usb 6-1: config 0 descriptor?? [ 456.527536][ T5902] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 456.568001][ T5902] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 456.595771][ T5902] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 456.604731][ T5902] usb 1-1: can't read configurations, error -61 [ 456.637296][ T5902] usb usb1-port1: unable to enumerate USB device [ 458.206393][T10677] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 458.300627][T11108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.361914][ T5149] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 458.371202][T10677] usb 7-1: Using ep0 maxpacket: 8 [ 458.447040][T10677] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 458.525132][T10677] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 458.556194][T10677] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 458.600314][T10677] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 458.637520][T10677] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.666637][ T5471] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 458.692347][T10677] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 458.720897][T10677] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.813457][ T5937] usb 6-1: USB disconnect, device number 21 [ 458.855619][ T5471] usb 1-1: device descriptor read/64, error -71 [ 458.966234][T10677] usb 7-1: usb_control_msg returned -32 [ 458.971861][T10677] usbtmc 7-1:16.0: can't read capabilities [ 459.122651][T11122] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 459.130485][T11122] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 459.146268][ T5471] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 459.406257][ T5471] usb 1-1: device descriptor read/64, error -71 [ 459.432596][T11099] usbtmc 7-1:16.0: control status returned 8 [ 459.520313][ T5471] usb usb1-port1: attempt power cycle [ 459.571753][T11127] FAULT_INJECTION: forcing a failure. [ 459.571753][T11127] name failslab, interval 1, probability 0, space 0, times 0 [ 459.601171][T11127] CPU: 0 UID: 0 PID: 11127 Comm: syz.2.1602 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 459.601195][T11127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 459.601206][T11127] Call Trace: [ 459.601213][T11127] [ 459.601220][T11127] dump_stack_lvl+0x189/0x250 [ 459.601252][T11127] ? __pfx____ratelimit+0x10/0x10 [ 459.601277][T11127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.601303][T11127] ? __pfx__printk+0x10/0x10 [ 459.601329][T11127] ? ref_tracker_alloc+0x318/0x460 [ 459.601354][T11127] should_fail_ex+0x414/0x560 [ 459.601380][T11127] should_failslab+0xa8/0x100 [ 459.601401][T11127] kmem_cache_alloc_noprof+0x73/0x3c0 [ 459.601434][T11127] ? skb_clone+0x212/0x3a0 [ 459.601462][T11127] skb_clone+0x212/0x3a0 [ 459.601488][T11127] __netlink_deliver_tap+0x404/0x850 [ 459.601520][T11127] ? netlink_deliver_tap+0x2e/0x1b0 [ 459.601541][T11127] netlink_deliver_tap+0x19c/0x1b0 [ 459.601562][T11127] netlink_unicast+0x72f/0x8d0 [ 459.601589][T11127] netlink_sendmsg+0x805/0xb30 [ 459.601619][T11127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.601642][T11127] ? aa_sock_msg_perm+0x94/0x160 [ 459.601666][T11127] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 459.601688][T11127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.601709][T11127] __sock_sendmsg+0x219/0x270 [ 459.601738][T11127] ____sys_sendmsg+0x505/0x830 [ 459.601764][T11127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.601794][T11127] ? import_iovec+0x74/0xa0 [ 459.601815][T11127] ___sys_sendmsg+0x21f/0x2a0 [ 459.601837][T11127] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.601892][T11127] ? __fget_files+0x2a/0x420 [ 459.601910][T11127] ? __fget_files+0x3a0/0x420 [ 459.601937][T11127] __x64_sys_sendmsg+0x19b/0x260 [ 459.601961][T11127] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.601991][T11127] ? __pfx_ksys_write+0x10/0x10 [ 459.602004][T11127] ? rcu_is_watching+0x15/0xb0 [ 459.602034][T11127] ? do_syscall_64+0xbe/0x3b0 [ 459.602053][T11127] do_syscall_64+0xfa/0x3b0 [ 459.602067][T11127] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.602090][T11127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.602107][T11127] ? clear_bhb_loop+0x60/0xb0 [ 459.602132][T11127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.602148][T11127] RIP: 0033:0x7f0d8298e929 [ 459.602164][T11127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.602179][T11127] RSP: 002b:00007f0d8373b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.602197][T11127] RAX: ffffffffffffffda RBX: 00007f0d82bb5fa0 RCX: 00007f0d8298e929 [ 459.602209][T11127] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 459.602220][T11127] RBP: 00007f0d8373b090 R08: 0000000000000000 R09: 0000000000000000 [ 459.602231][T11127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.602241][T11127] R13: 0000000000000000 R14: 00007f0d82bb5fa0 R15: 00007f0d82cdfa28 [ 459.602267][T11127] [ 460.049122][ T5937] usb 7-1: USB disconnect, device number 25 [ 460.206373][ T5471] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 460.229228][T11129] io-wq is not configured for unbound workers [ 460.231679][ T5471] usb 1-1: device descriptor read/8, error -71 [ 460.272286][T11131] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1604'. [ 460.344506][T11132] AppArmor: change_hat: Invalid input '0®' [ 460.506386][ T5471] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 460.536384][T10677] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 460.545279][ T5471] usb 1-1: device descriptor read/8, error -71 [ 460.656666][ T5471] usb usb1-port1: unable to enumerate USB device [ 460.697340][T10677] usb 6-1: Using ep0 maxpacket: 32 [ 460.705087][T10677] usb 6-1: unable to get BOS descriptor or descriptor too short [ 460.714490][T10677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 256, setting to 64 [ 460.728075][T10677] usb 6-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 460.737515][T10677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.745701][T10677] usb 6-1: Product: syz [ 460.752472][T10677] usb 6-1: Manufacturer: syz [ 460.762855][T10677] usb 6-1: SerialNumber: syz [ 460.786055][T10677] usb 6-1: config 0 descriptor?? [ 461.017848][T10677] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 461.059453][T10677] usb 6-1: USB disconnect, device number 22 [ 461.236313][ T3186] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 461.426233][ T3186] usb 7-1: Using ep0 maxpacket: 8 [ 461.441379][ T3186] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.556475][ T3186] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 461.650081][ T3186] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 461.733163][ T3186] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 461.771972][ T3186] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.813278][ T3186] usb 7-1: config 0 descriptor?? [ 462.055374][T11136] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 462.078805][T11149] macvlan1: entered promiscuous mode [ 462.111631][T11149] macvlan1: left promiscuous mode [ 462.455098][T11157] netlink: 'syz.5.1611': attribute type 10 has an invalid length. [ 462.666844][T11157] team0: Port device syz_tun added [ 463.266440][T10480] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 463.436344][T10480] usb 6-1: Using ep0 maxpacket: 8 [ 463.460926][T10480] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 463.518519][T10480] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.580427][T10480] usb 6-1: Product: syz [ 463.623752][T10480] usb 6-1: Manufacturer: syz [ 463.646592][T10480] usb 6-1: SerialNumber: syz [ 463.688785][T10480] usb 6-1: config 0 descriptor?? [ 463.764209][T10677] usb 7-1: USB disconnect, device number 26 [ 463.930565][T10480] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 464.757240][ T5895] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 464.946409][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 464.976727][ T5895] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 465.011935][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.082196][ T5895] pvrusb2: Hardware description: Terratec Grabster AV400 [ 465.132248][ T5895] pvrusb2: ********** [ 465.156299][ T5895] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 465.200745][ T5895] pvrusb2: Important functionality might not be entirely working. [ 465.249870][ T5895] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 465.306234][ T5895] pvrusb2: ********** [ 465.342271][ T2341] pvrusb2: Invalid write control endpoint [ 465.553312][T10480] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 465.563654][T11176] pvrusb2: Invalid write control endpoint [ 465.583853][T10480] usb 6-1: USB disconnect, device number 23 [ 465.603299][T10677] usb 1-1: USB disconnect, device number 84 [ 465.660181][ T2341] pvrusb2: Invalid write control endpoint [ 465.711994][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 465.766257][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 465.773871][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 465.814423][ T2341] pvrusb2: Device being rendered inoperable [ 465.856567][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 465.891376][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 465.893021][T11190] input: syz1 as /devices/virtual/input/input44 [ 465.932530][ T2341] pvrusb2: Attached sub-driver cx25840 [ 465.958673][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 465.988583][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 466.686211][T10480] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 466.700634][T11211] loop2: detected capacity change from 0 to 1 [ 466.752245][T11211] Dev loop2: unable to read RDB block 1 [ 466.782177][T11210] can: request_module (can-proto-3) failed. [ 466.796351][T11211] loop2: unable to read partition table [ 466.807668][T11211] loop2: partition table beyond EOD, truncated [ 466.865827][T11211] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 466.886563][T10480] usb 7-1: Using ep0 maxpacket: 8 [ 466.907223][T10480] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.938504][T10480] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 466.967219][T10480] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 466.997563][T10480] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 467.020741][T10480] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.058651][T11220] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1635'. [ 467.158259][T10480] usb 7-1: config 0 descriptor?? [ 467.282316][T11223] unknown channel width for channel at 909000KHz? [ 467.296232][T11223] unknown channel width for channel at 909000KHz? [ 467.403251][T11205] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 467.992317][T11244] Set syz1 is full, maxelem 65536 reached [ 468.047451][T11245] macvlan1: entered promiscuous mode [ 468.172709][T11245] macvlan1: left promiscuous mode [ 468.542316][T11263] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1649'. [ 469.004755][T11268] xt_socket: unknown flags 0xc [ 469.122984][T11280] FAULT_INJECTION: forcing a failure. [ 469.122984][T11280] name failslab, interval 1, probability 0, space 0, times 0 [ 469.217945][T10480] usb 7-1: USB disconnect, device number 27 [ 469.236305][T11280] CPU: 0 UID: 0 PID: 11280 Comm: syz.5.1655 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 469.236332][T11280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 469.236346][T11280] Call Trace: [ 469.236354][T11280] [ 469.236362][T11280] dump_stack_lvl+0x189/0x250 [ 469.236401][T11280] ? __pfx____ratelimit+0x10/0x10 [ 469.236431][T11280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.236462][T11280] ? __pfx__printk+0x10/0x10 [ 469.236501][T11280] should_fail_ex+0x414/0x560 [ 469.236533][T11280] should_failslab+0xa8/0x100 [ 469.236557][T11280] kmem_cache_alloc_noprof+0x73/0x3c0 [ 469.236601][T11280] ? skb_clone+0x212/0x3a0 [ 469.236644][T11280] skb_clone+0x212/0x3a0 [ 469.236671][T11280] __netlink_deliver_tap+0x404/0x850 [ 469.236705][T11280] ? netlink_deliver_tap+0x2e/0x1b0 [ 469.236728][T11280] netlink_deliver_tap+0x19c/0x1b0 [ 469.236750][T11280] netlink_sendskb+0x68/0x140 [ 469.236777][T11280] netlink_rcv_skb+0x28c/0x470 [ 469.236799][T11280] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 469.236820][T11280] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 469.236854][T11280] ? netlink_deliver_tap+0x2e/0x1b0 [ 469.236874][T11280] ? netlink_deliver_tap+0x2e/0x1b0 [ 469.236900][T11280] netlink_unicast+0x75b/0x8d0 [ 469.236929][T11280] netlink_sendmsg+0x805/0xb30 [ 469.236960][T11280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.236985][T11280] ? aa_sock_msg_perm+0x94/0x160 [ 469.237010][T11280] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 469.237034][T11280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.237056][T11280] __sock_sendmsg+0x219/0x270 [ 469.237087][T11280] ____sys_sendmsg+0x505/0x830 [ 469.237116][T11280] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.237148][T11280] ? import_iovec+0x74/0xa0 [ 469.237170][T11280] ___sys_sendmsg+0x21f/0x2a0 [ 469.237195][T11280] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.237277][T11280] ? __fget_files+0x2a/0x420 [ 469.237297][T11280] ? __fget_files+0x3a0/0x420 [ 469.237327][T11280] __x64_sys_sendmsg+0x19b/0x260 [ 469.237352][T11280] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 469.237385][T11280] ? __pfx_ksys_write+0x10/0x10 [ 469.237399][T11280] ? rcu_is_watching+0x15/0xb0 [ 469.237495][T11280] ? do_syscall_64+0xbe/0x3b0 [ 469.237552][T11280] do_syscall_64+0xfa/0x3b0 [ 469.237569][T11280] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.237598][T11280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.237618][T11280] ? clear_bhb_loop+0x60/0xb0 [ 469.237643][T11280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.237670][T11280] RIP: 0033:0x7f1a2418e929 [ 469.237689][T11280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.237706][T11280] RSP: 002b:00007f1a24fce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.237728][T11280] RAX: ffffffffffffffda RBX: 00007f1a243b5fa0 RCX: 00007f1a2418e929 [ 469.237743][T11280] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000003 [ 469.237870][T11280] RBP: 00007f1a24fce090 R08: 0000000000000000 R09: 0000000000000000 [ 469.237887][T11280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.237899][T11280] R13: 0000000000000000 R14: 00007f1a243b5fa0 R15: 00007f1a244dfa28 [ 469.237932][T11280] [ 470.000204][T11282] loop2: detected capacity change from 0 to 1 [ 470.042279][T11282] Dev loop2: unable to read RDB block 1 [ 470.085408][T11282] loop2: unable to read partition table [ 470.103598][T11282] loop2: partition table beyond EOD, truncated [ 470.154110][T11282] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 470.243530][T11289] xt_nfacct: accounting object `syz0' does not exists [ 470.491135][T10480] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 470.716683][T10480] usb 3-1: unable to get BOS descriptor or descriptor too short [ 470.728361][T10480] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 470.737505][T10480] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 470.759065][T11303] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1662'. [ 470.766243][T10480] usb 3-1: config 1 interface 0 has no altsetting 1 [ 470.785436][T10480] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 470.794565][T10480] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.814932][T10480] usb 3-1: Product: syz [ 470.819958][T10480] usb 3-1: Manufacturer: syz [ 470.824560][T10480] usb 3-1: SerialNumber: syz [ 470.857581][T10480] smsusb:smsusb_probe: board id=8, interface number 0 [ 471.060987][T11289] SET target dimension over the limit! [ 471.344500][T11314] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1666'. [ 471.426674][ T48] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 471.783871][ T48] usb 7-1: config 0 has no interfaces? [ 471.796597][ T48] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 471.913001][ T48] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.966281][ T3186] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 472.148284][ T3186] usb 5-1: config 0 has no interfaces? [ 472.162527][ T3186] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 472.195057][ T3186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.356486][ T48] usb 7-1: Product: syz [ 472.369238][ T3186] usb 5-1: Product: syz [ 472.373582][ T3186] usb 5-1: Manufacturer: syz [ 472.426954][ T3186] usb 5-1: SerialNumber: syz [ 472.439394][ T3186] usb 5-1: config 0 descriptor?? [ 472.452549][ T48] usb 7-1: Manufacturer: syz [ 472.544403][ T48] usb 7-1: SerialNumber: syz [ 472.573222][ T48] usb 7-1: config 0 descriptor?? [ 472.965198][T10677] IPVS: starting estimator thread 0... [ 473.076305][T11327] IPVS: using max 26 ests per chain, 62400 per kthread [ 474.296948][ T48] usb 7-1: USB disconnect, device number 28 [ 474.607404][T10480] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 474.637919][T10480] smsusb 3-1:1.0: probe with driver smsusb failed with error -71 [ 474.707955][T10480] usb 3-1: USB disconnect, device number 82 [ 475.267561][T11335] loop2: detected capacity change from 0 to 1 [ 475.329538][ T5851] Dev loop2: unable to read RDB block 1 [ 475.379900][ T5851] loop2: unable to read partition table [ 475.413696][ T5851] loop2: partition table beyond EOD, truncated [ 475.444177][T11335] Dev loop2: unable to read RDB block 1 [ 475.460178][T11335] loop2: unable to read partition table [ 475.490486][T11335] loop2: partition table beyond EOD, truncated [ 475.538148][T11335] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 475.697604][T11344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 476.230206][T10677] usb 5-1: USB disconnect, device number 78 [ 476.286457][T10480] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 476.518896][T11356] x_tables: duplicate underflow at hook 1 [ 476.600990][T10480] usb 1-1: config 0 has no interfaces? [ 476.828924][T10480] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 476.846204][T10480] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.854258][T10480] usb 1-1: Product: syz [ 476.858585][T10480] usb 1-1: Manufacturer: syz [ 476.863211][T10480] usb 1-1: SerialNumber: syz [ 476.871407][T10480] usb 1-1: config 0 descriptor?? [ 477.035765][T11368] loop6: detected capacity change from 0 to 7 [ 477.947030][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 478.067267][T11379] FAULT_INJECTION: forcing a failure. [ 478.067267][T11379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.106792][T11377] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 478.124212][T11383] loop2: detected capacity change from 0 to 1 [ 478.147730][ T6172] Dev loop2: unable to read RDB block 1 [ 478.153383][ T6172] loop2: unable to read partition table [ 478.162343][ T6172] loop2: partition table beyond EOD, truncated [ 478.169971][T11379] CPU: 0 UID: 0 PID: 11379 Comm: syz.2.1687 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 478.169989][T11379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 478.169998][T11379] Call Trace: [ 478.170003][T11379] [ 478.170008][T11379] dump_stack_lvl+0x189/0x250 [ 478.170033][T11379] ? __pfx____ratelimit+0x10/0x10 [ 478.170052][T11379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.170072][T11379] ? __pfx__printk+0x10/0x10 [ 478.170087][T11379] ? __might_fault+0xb0/0x130 [ 478.170106][T11379] should_fail_ex+0x414/0x560 [ 478.170126][T11379] _copy_from_user+0x2d/0xb0 [ 478.170139][T11379] __sys_connect+0x123/0x440 [ 478.170154][T11379] ? __fget_files+0x3a0/0x420 [ 478.170168][T11379] ? __pfx___sys_connect+0x10/0x10 [ 478.170190][T11379] ? __pfx_ksys_write+0x10/0x10 [ 478.170200][T11379] ? rcu_is_watching+0x15/0xb0 [ 478.170225][T11379] __x64_sys_connect+0x7a/0x90 [ 478.170240][T11379] do_syscall_64+0xfa/0x3b0 [ 478.170250][T11379] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.170269][T11379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.170282][T11379] ? clear_bhb_loop+0x60/0xb0 [ 478.170297][T11379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.170309][T11379] RIP: 0033:0x7f0d8298e929 [ 478.170321][T11379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.170332][T11379] RSP: 002b:00007f0d8373b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 478.170346][T11379] RAX: ffffffffffffffda RBX: 00007f0d82bb5fa0 RCX: 00007f0d8298e929 [ 478.170355][T11379] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006 [ 478.170364][T11379] RBP: 00007f0d8373b090 R08: 0000000000000000 R09: 0000000000000000 [ 478.170372][T11379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.170380][T11379] R13: 0000000000000000 R14: 00007f0d82bb5fa0 R15: 00007f0d82cdfa28 [ 478.170399][T11379] [ 478.367903][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.389004][T11383] Dev loop2: unable to read RDB block 1 [ 478.394731][T11383] loop2: unable to read partition table [ 478.396178][T11377] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 478.408245][T11383] loop2: partition table beyond EOD, truncated [ 478.414536][T11383] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 478.445843][T11386] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1685'. [ 478.783169][T11393] sit0: entered promiscuous mode [ 478.792616][T11393] netlink: 'syz.5.1690': attribute type 1 has an invalid length. [ 478.830428][T11393] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1690'. [ 479.306483][ T5471] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 479.466498][ T5471] usb 3-1: Using ep0 maxpacket: 8 [ 479.493534][T10480] usb 1-1: USB disconnect, device number 85 [ 479.500535][ T5471] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.521200][ T5471] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 479.534318][T11412] loop2: detected capacity change from 0 to 1 [ 479.566584][T11412] Dev loop2: unable to read RDB block 1 [ 479.586602][ T5471] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 479.615428][T11412] loop2: unable to read partition table [ 479.623437][ T5471] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 479.699496][T11412] loop2: partition table beyond EOD, truncated [ 479.729176][T11412] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 479.819973][T11402] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 479.870454][ T5471] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.896248][T11402] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 479.950927][T11402] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 479.967774][ T5471] usb 3-1: config 0 descriptor?? [ 479.999024][T11402] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 480.071546][T11425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1701'. [ 480.159366][T11402] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 480.168336][T11402] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 480.199004][T11403] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 480.239921][T11402] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 480.257258][T11402] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 480.282864][T11402] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 480.292475][T11402] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 480.320326][T11402] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 480.338011][T11402] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 480.361685][T11402] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 480.380614][T11402] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 480.640840][T11430] macvlan1: entered promiscuous mode [ 480.665386][T11430] macvlan1: left promiscuous mode [ 480.671136][ T5895] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 480.849095][ T5895] usb 6-1: unable to get BOS descriptor or descriptor too short [ 480.888778][ T5895] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 480.922911][ T5895] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 481.010315][ T5895] usb 6-1: config 1 interface 0 has no altsetting 1 [ 481.030325][ T5895] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 481.046438][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.078648][ T5895] usb 6-1: Product: syz [ 481.086654][ T5895] usb 6-1: Manufacturer: syz [ 481.097393][ T5895] usb 6-1: SerialNumber: syz [ 481.153919][ T5895] smsusb:smsusb_probe: board id=8, interface number 0 [ 481.343481][ T5895] smsusb:smsusb_probe: Device initialized with return code -19 [ 481.620704][ T5895] usb 6-1: USB disconnect, device number 24 [ 481.646597][ T5471] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 481.677327][T11438] netlink: zone id is out of range [ 481.687830][T11438] netlink: zone id is out of range [ 481.727350][T11438] netlink: zone id is out of range [ 481.732598][T11438] netlink: zone id is out of range [ 481.738509][T11438] netlink: zone id is out of range [ 481.789165][T11438] netlink: zone id is out of range [ 481.815608][T11438] netlink: zone id is out of range [ 481.831128][T11438] netlink: zone id is out of range [ 481.856170][T11438] netlink: zone id is out of range [ 481.869941][T11438] netlink: zone id is out of range [ 481.904600][ T5471] usb 1-1: config 0 has no interfaces? [ 482.116509][ T48] usb 3-1: USB disconnect, device number 83 [ 482.477352][ T5471] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 482.499966][ T5471] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.548612][ T5471] usb 1-1: Product: syz [ 482.575194][ T5471] usb 1-1: Manufacturer: syz [ 482.596329][ T5471] usb 1-1: SerialNumber: syz [ 482.702555][T11456] FAULT_INJECTION: forcing a failure. [ 482.702555][T11456] name failslab, interval 1, probability 0, space 0, times 0 [ 482.720322][ T5471] usb 1-1: config 0 descriptor?? [ 482.756590][T11456] CPU: 1 UID: 0 PID: 11456 Comm: syz.5.1710 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 482.756621][T11456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 482.756634][T11456] Call Trace: [ 482.756643][T11456] [ 482.756653][T11456] dump_stack_lvl+0x189/0x250 [ 482.756688][T11456] ? __pfx____ratelimit+0x10/0x10 [ 482.756716][T11456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.756742][T11456] ? __pfx__printk+0x10/0x10 [ 482.756763][T11456] ? __pfx___might_resched+0x10/0x10 [ 482.756791][T11456] ? fs_reclaim_acquire+0x7d/0x100 [ 482.756821][T11456] should_fail_ex+0x414/0x560 [ 482.756851][T11456] should_failslab+0xa8/0x100 [ 482.756873][T11456] __kmalloc_noprof+0xcb/0x4f0 [ 482.756889][T11456] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 482.756911][T11456] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 482.756938][T11456] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 482.756978][T11456] genl_family_rcv_msg_doit+0xb8/0x300 [ 482.757013][T11456] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 482.757042][T11456] ? rcu_is_watching+0x15/0xb0 [ 482.757067][T11456] ? apparmor_capable+0x137/0x1b0 [ 482.757092][T11456] ? bpf_lsm_capable+0x9/0x20 [ 482.757112][T11456] ? security_capable+0x7e/0x2e0 [ 482.757162][T11456] genl_rcv_msg+0x60e/0x790 [ 482.757197][T11456] ? __pfx_genl_rcv_msg+0x10/0x10 [ 482.757219][T11456] ? ref_tracker_free+0x63a/0x7d0 [ 482.757250][T11456] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 482.757278][T11456] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 482.757302][T11456] ? __pfx_nl80211_post_doit+0x10/0x10 [ 482.757329][T11456] ? __pfx_ref_tracker_free+0x10/0x10 [ 482.757361][T11456] netlink_rcv_skb+0x208/0x470 [ 482.757379][T11456] ? __pfx_genl_rcv_msg+0x10/0x10 [ 482.757405][T11456] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 482.757448][T11456] ? down_read+0x1ad/0x2e0 [ 482.757471][T11456] genl_rcv+0x28/0x40 [ 482.757498][T11456] netlink_unicast+0x75b/0x8d0 [ 482.757521][T11456] netlink_sendmsg+0x805/0xb30 [ 482.757545][T11456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.757574][T11456] ? aa_sock_msg_perm+0x94/0x160 [ 482.757602][T11456] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 482.757627][T11456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.757651][T11456] __sock_sendmsg+0x219/0x270 [ 482.757677][T11456] ____sys_sendmsg+0x505/0x830 [ 482.757699][T11456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.757737][T11456] ? import_iovec+0x74/0xa0 [ 482.757761][T11456] ___sys_sendmsg+0x21f/0x2a0 [ 482.757788][T11456] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.757838][T11456] ? __fget_files+0x2a/0x420 [ 482.757854][T11456] ? __fget_files+0x3a0/0x420 [ 482.757890][T11456] __x64_sys_sendmsg+0x19b/0x260 [ 482.757918][T11456] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 482.757955][T11456] ? __pfx_ksys_write+0x10/0x10 [ 482.757967][T11456] ? rcu_is_watching+0x15/0xb0 [ 482.757993][T11456] ? do_syscall_64+0xbe/0x3b0 [ 482.758010][T11456] do_syscall_64+0xfa/0x3b0 [ 482.758029][T11456] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.758058][T11456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.758078][T11456] ? clear_bhb_loop+0x60/0xb0 [ 482.758103][T11456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.758118][T11456] RIP: 0033:0x7f1a2418e929 [ 482.758136][T11456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.758153][T11456] RSP: 002b:00007f1a24fce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.758174][T11456] RAX: ffffffffffffffda RBX: 00007f1a243b5fa0 RCX: 00007f1a2418e929 [ 482.758191][T11456] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 482.758204][T11456] RBP: 00007f1a24fce090 R08: 0000000000000000 R09: 0000000000000000 [ 482.758217][T11456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.758235][T11456] R13: 0000000000000000 R14: 00007f1a243b5fa0 R15: 00007f1a244dfa28 [ 482.758262][T11456] [ 483.193711][T11459] ip6gretap1: entered promiscuous mode [ 483.477090][T11464] loop2: detected capacity change from 0 to 1 [ 483.483796][T11464] Dev loop2: unable to read RDB block 1 [ 483.489540][T11464] loop2: unable to read partition table [ 483.495371][T11464] loop2: partition table beyond EOD, truncated [ 483.501596][T11464] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 484.088673][T11477] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1713'. [ 484.161311][T11478] delete_channel: no stack [ 484.611929][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1717'. [ 484.664904][T11482] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1717'. [ 484.700491][T10480] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 484.729843][T11482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1717'. [ 484.740009][T11482] bridge_slave_1: left allmulticast mode [ 484.796256][T11482] bridge_slave_1: left promiscuous mode [ 484.863049][T11482] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.958867][T10480] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 485.012732][T11482] bridge_slave_0: left allmulticast mode [ 485.036192][T10480] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 485.046068][T10480] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 485.095536][ T5471] usb 1-1: USB disconnect, device number 86 [ 485.206509][T11482] bridge_slave_0: left promiscuous mode [ 485.212505][T11482] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.236311][T10480] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 485.393864][T10480] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.476867][T10480] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 485.565596][T10480] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 485.677714][ T9573] udevd[9573]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.732421][T11478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.746941][T11478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.014190][T11500] ptrace attach of "./syz-executor exec"[5850] was attempted by "./syz-executor exec"[11500] [ 486.056728][T11501] loop2: detected capacity change from 0 to 1 [ 486.119926][T11501] Dev loop2: unable to read RDB block 1 [ 486.183926][T11501] loop2: unable to read partition table [ 486.239140][T11501] loop2: partition table beyond EOD, truncated [ 486.318960][T11501] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 486.485532][T11505] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1726'. [ 486.776642][T10480] usb 5-1: new low-speed USB device number 79 using dummy_hcd [ 486.926592][T10480] usb 5-1: device descriptor read/64, error -71 [ 487.186233][T10480] usb 5-1: new low-speed USB device number 80 using dummy_hcd [ 487.456295][T10480] usb 5-1: device descriptor read/64, error -71 [ 487.580346][T10480] usb usb5-port1: attempt power cycle [ 487.906230][ T5471] usb 7-1: USB disconnect, device number 29 [ 487.956255][T10480] usb 5-1: new low-speed USB device number 81 using dummy_hcd [ 488.006841][ T5909] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 488.016901][T10480] usb 5-1: device descriptor read/8, error -71 [ 488.166258][ T5909] usb 6-1: device descriptor read/64, error -71 [ 488.258093][T10480] usb 5-1: new low-speed USB device number 82 using dummy_hcd [ 488.286981][T10480] usb 5-1: device descriptor read/8, error -71 [ 488.312719][T11526] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1733'. [ 488.351265][T11524] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1733'. [ 488.410149][T10480] usb usb5-port1: unable to enumerate USB device [ 488.430587][ T5909] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 488.567574][ T5909] usb 6-1: device descriptor read/64, error -71 [ 488.626979][ T5471] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 488.687125][ T5909] usb usb6-port1: attempt power cycle [ 488.756449][T10677] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 488.806441][ T5471] usb 3-1: Using ep0 maxpacket: 16 [ 488.826554][ T5471] usb 3-1: unable to get BOS descriptor or descriptor too short [ 488.835727][ T5471] usb 3-1: config 7 has an invalid interface number: 79 but max is 0 [ 488.846157][ T5471] usb 3-1: config 7 has no interface number 0 [ 488.852289][ T5471] usb 3-1: config 7 interface 79 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 488.884037][ T5471] usb 3-1: config 7 interface 79 altsetting 6 endpoint 0x7 has an invalid bInterval 64, changing to 10 [ 488.907003][ T5471] usb 3-1: config 7 interface 79 has no altsetting 0 [ 488.928257][ T5471] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=f4.98 [ 488.937608][T10677] usb 7-1: Using ep0 maxpacket: 8 [ 488.942797][ T5471] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.953828][T10677] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 488.963236][ T5471] usb 3-1: Product: syz [ 488.973483][T10677] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 488.982779][ T5471] usb 3-1: Manufacturer: syz [ 488.996183][T10677] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 489.004359][ T5471] usb 3-1: SerialNumber: syz [ 489.013030][T10677] usb 7-1: Product: syz [ 489.030724][T10677] usb 7-1: Manufacturer: syz [ 489.035419][T10677] usb 7-1: SerialNumber: syz [ 489.058604][ T5909] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 489.097215][ T5909] usb 6-1: device descriptor read/8, error -71 [ 489.200250][T11533] loop2: detected capacity change from 0 to 1 [ 489.212460][T11533] Dev loop2: unable to read RDB block 1 [ 489.221366][T11533] loop2: unable to read partition table [ 489.234954][T11533] loop2: partition table beyond EOD, truncated [ 489.243919][T11533] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 489.336315][ T5909] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 489.344208][T11531] bond1: entered promiscuous mode [ 489.357030][ T5909] usb 6-1: device descriptor read/8, error -71 [ 489.377013][T10677] usb 7-1: palm_os_3_probe - error -110 getting connection information [ 489.387186][T10677] visor 7-1:1.0: probe with driver visor failed with error -110 [ 489.404570][T11536] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1736'. [ 489.415930][T11531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 489.466901][ T5909] usb usb6-port1: unable to enumerate USB device [ 489.646955][T11542] fuse: Unknown parameter 'gouZ_vI' [ 490.406407][ T5909] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 490.473795][ T5471] usb 3-1: USB disconnect, device number 84 [ 490.567379][ T5909] usb 1-1: Using ep0 maxpacket: 8 [ 490.585415][ T5909] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.595847][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 490.623864][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 490.651392][ T5909] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 490.752996][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.786503][ T5909] usb 1-1: config 0 descriptor?? [ 490.856396][T11554] delete_channel: no stack [ 491.207852][ T31] INFO: task syz.1.1208:9527 blocked for more than 143 seconds. [ 491.221345][ T31] Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 [ 491.231476][T11550] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 491.243086][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 491.262661][ T31] task:syz.1.1208 state:D stack:26152 pid:9527 tgid:9524 ppid:5847 task_flags:0x400040 flags:0x00004004 [ 491.327235][ T31] Call Trace: [ 491.343733][ T31] [ 491.355210][ T31] __schedule+0x16f5/0x4d00 [ 491.369441][ T31] ? __lock_acquire+0xa90/0xd20 [ 491.393478][ T31] ? schedule+0x165/0x360 [ 491.454426][ T31] ? __pfx___schedule+0x10/0x10 [ 491.465951][ T31] ? schedule+0x91/0x360 [ 491.470488][ T5895] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 491.497076][ T31] schedule+0x165/0x360 [ 491.511770][ T31] schedule_preempt_disabled+0x13/0x30 [ 491.556440][ T31] __mutex_lock+0x724/0xe80 [ 491.561023][ T31] ? __mutex_lock+0x51b/0xe80 [ 491.565756][ T31] ? relay_open+0x3b8/0x920 [ 491.570842][ T5909] usb 7-1: USB disconnect, device number 30 [ 491.627651][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 491.651676][ T5895] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 491.668523][ T31] ? pcpu_alloc_noprof+0xf85/0x16b0 [ 491.693140][ T31] relay_open+0x3b8/0x920 [ 491.712919][ T5895] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 491.735498][ T31] do_blk_trace_setup+0x591/0x9d0 [ 491.811310][ T31] blk_trace_setup+0x116/0x1f0 [ 491.824457][ T5895] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 491.853821][ T31] ? __pfx_blk_trace_setup+0x10/0x10 [ 491.859284][ T31] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 491.869266][ T31] blk_trace_ioctl+0x181/0x430 [ 491.887732][ T31] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 491.893483][ T5895] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 491.909843][ T31] ? __lock_acquire+0xab9/0xd20 [ 491.917104][ T31] blkdev_ioctl+0x416/0x6d0 [ 491.924363][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 491.938164][ T31] ? __fget_files+0x2a/0x420 [ 491.946405][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 491.965626][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.982044][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 491.998796][ T31] __se_sys_ioctl+0xf9/0x170 [ 492.013297][ T31] do_syscall_64+0xfa/0x3b0 [ 492.022460][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.064918][ T5895] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 492.070050][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.132060][ T31] ? clear_bhb_loop+0x60/0xb0 [ 492.152013][ T5895] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 492.167106][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.198444][ T31] RIP: 0033:0x7f164e38e929 [ 492.203009][ T31] RSP: 002b:00007f164c1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.214582][ T9573] udevd[9573]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 492.299745][ T31] RAX: ffffffffffffffda RBX: 00007f164e5b5fa0 RCX: 00007f164e38e929 [ 492.308110][ T31] RDX: 0000200000000100 RSI: 00000000c0481273 RDI: 0000000000000007 [ 492.316461][ T31] RBP: 00007f164e410b39 R08: 0000000000000000 R09: 0000000000000000 [ 492.324494][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.333534][ T31] R13: 0000000000000000 R14: 00007f164e5b5fa0 R15: 00007f164e6dfa28 [ 492.341914][ T31] [ 492.345102][ T31] [ 492.345102][ T31] Showing all locks held in the system: [ 492.356657][ T31] 1 lock held by khungtaskd/31: [ 492.361534][ T31] #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 492.387997][T11554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.397368][T11554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.454281][ T31] 2 locks held by getty/5593: [ 492.459413][ T31] #0: ffff88814c1910a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 492.491653][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 492.593728][ T31] 2 locks held by syz.3.1189/9466: [ 492.602836][ T31] 2 locks held by syz.1.1208/9527: [ 492.609075][ T31] #0: ffff8880254c12e8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0xfb/0x1f0 [ 492.619508][ T31] #1: ffffffff8e193168 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 [ 492.629840][ T31] 1 lock held by syz.0.1741/11549: [ 492.635191][ T31] [ 492.638164][ T31] ============================================= [ 492.638164][ T31] [ 492.721650][ T31] NMI backtrace for cpu 0 [ 492.721670][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 492.721695][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 492.721708][ T31] Call Trace: [ 492.721717][ T31] [ 492.721726][ T31] dump_stack_lvl+0x189/0x250 [ 492.721761][ T31] ? __wake_up_klogd+0xd9/0x110 [ 492.721789][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.721821][ T31] ? __pfx__printk+0x10/0x10 [ 492.721858][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 492.721888][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 492.721911][ T31] ? _printk+0xcf/0x120 [ 492.721938][ T31] ? __pfx__printk+0x10/0x10 [ 492.721964][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 492.721994][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 492.722024][ T31] watchdog+0xfee/0x1030 [ 492.722054][ T31] ? watchdog+0x1de/0x1030 [ 492.722090][ T31] kthread+0x70e/0x8a0 [ 492.722118][ T31] ? __pfx_watchdog+0x10/0x10 [ 492.722145][ T31] ? __pfx_kthread+0x10/0x10 [ 492.722170][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.722198][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.722226][ T31] ? __pfx_kthread+0x10/0x10 [ 492.722250][ T31] ret_from_fork+0x3fc/0x770 [ 492.722287][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 492.722322][ T31] ? __switch_to_asm+0x39/0x70 [ 492.722342][ T31] ? __switch_to_asm+0x33/0x70 [ 492.722362][ T31] ? __pfx_kthread+0x10/0x10 [ 492.722387][ T31] ret_from_fork_asm+0x1a/0x30 [ 492.722424][ T31] [ 492.722457][ T31] Sending NMI from CPU 0 to CPUs 1: [ 492.880331][ C1] NMI backtrace for cpu 1 [ 492.880347][ C1] CPU: 1 UID: 0 PID: 55 Comm: kworker/1:1H Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 492.880377][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 492.880387][ C1] Workqueue: 0x0 (events_highpri) [ 492.880408][ C1] RIP: 0010:__lock_acquire+0x3/0xd20 [ 492.880449][ C1] Code: 00 5b e9 50 5d cb 09 cc 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 <41> 56 41 55 41 54 53 48 83 ec 30 48 89 fb 65 48 8b 3c 25 08 f0 9c [ 492.880463][ C1] RSP: 0000:ffffc900013578c0 EFLAGS: 00000046 [ 492.880476][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000 [ 492.880486][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880b8723f08 [ 492.880497][ C1] RBP: ffffffff8b6786c2 R08: 0000000000000001 R09: 0000000000000001 [ 492.880507][ C1] R10: dffffc0000000000 R11: ffffed10037dcb41 R12: 0000000000000000 [ 492.880520][ C1] R13: ffff8880b8723f08 R14: 0000000000000001 R15: 0000000000000046 [ 492.880532][ C1] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 492.880546][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 492.880557][ C1] CR2: 0000200000eb9000 CR3: 000000013ff5a000 CR4: 00000000003526f0 [ 492.880572][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 492.880581][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 492.880591][ C1] Call Trace: [ 492.880597][ C1] [ 492.880604][ C1] ? __schedule+0x852/0x4d00 [ 492.880625][ C1] lock_acquire+0x120/0x360 [ 492.880645][ C1] ? __schedule+0x852/0x4d00 [ 492.880671][ C1] psi_account_irqtime+0x310/0x7a0 [ 492.880687][ C1] ? __schedule+0x852/0x4d00 [ 492.880708][ C1] ? __schedule+0x852/0x4d00 [ 492.880728][ C1] __schedule+0x852/0x4d00 [ 492.880755][ C1] ? schedule+0x165/0x360 [ 492.880777][ C1] ? __pfx___schedule+0x10/0x10 [ 492.880803][ C1] ? schedule+0x91/0x360 [ 492.880824][ C1] schedule+0x165/0x360 [ 492.880844][ C1] worker_thread+0xa82/0xda0 [ 492.880869][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 492.880893][ C1] ? __kthread_parkme+0x7b/0x200 [ 492.880911][ C1] kthread+0x70e/0x8a0 [ 492.880929][ C1] ? __pfx_worker_thread+0x10/0x10 [ 492.880952][ C1] ? __pfx_kthread+0x10/0x10 [ 492.880969][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.880989][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.881010][ C1] ? __pfx_kthread+0x10/0x10 [ 492.881027][ C1] ret_from_fork+0x3fc/0x770 [ 492.881050][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 492.881073][ C1] ? __switch_to_asm+0x39/0x70 [ 492.881089][ C1] ? __switch_to_asm+0x33/0x70 [ 492.881104][ C1] ? __pfx_kthread+0x10/0x10 [ 492.881121][ C1] ret_from_fork_asm+0x1a/0x30 [ 492.881143][ C1] [ 493.160047][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.533454][ T5909] usb 1-1: USB disconnect, device number 87 [ 493.566875][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 493.573747][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 493.585550][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 493.595611][ T31] Call Trace: [ 493.598894][ T31] [ 493.601821][ T31] dump_stack_lvl+0x99/0x250 [ 493.606455][ T31] ? __asan_memcpy+0x40/0x70 [ 493.611075][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.616287][ T31] ? __pfx__printk+0x10/0x10 [ 493.620891][ T31] panic+0x2db/0x790 [ 493.624790][ T31] ? __pfx_panic+0x10/0x10 [ 493.629208][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 493.633977][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 493.639803][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 493.645175][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 493.651363][ T31] watchdog+0x102d/0x1030 [ 493.655697][ T31] ? watchdog+0x1de/0x1030 [ 493.660122][ T31] kthread+0x70e/0x8a0 [ 493.664190][ T31] ? __pfx_watchdog+0x10/0x10 [ 493.668871][ T31] ? __pfx_kthread+0x10/0x10 [ 493.673469][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 493.678699][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.683900][ T31] ? __pfx_kthread+0x10/0x10 [ 493.688491][ T31] ret_from_fork+0x3fc/0x770 [ 493.693123][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 493.698247][ T31] ? __switch_to_asm+0x39/0x70 [ 493.703010][ T31] ? __switch_to_asm+0x33/0x70 [ 493.707767][ T31] ? __pfx_kthread+0x10/0x10 [ 493.712351][ T31] ret_from_fork_asm+0x1a/0x30 [ 493.717117][ T31] [ 493.720501][ T31] Kernel Offset: disabled [ 493.724852][ T31] Rebooting in 86400 seconds..