last executing test programs: 6m57.920159808s ago: executing program 0 (id=569): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x0, &(0x7f0000000140)}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r2, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0x6d, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb"}, 0x4c) rt_sigaction(0x7, &(0x7f00000000c0)={0x0, 0x80000003, 0x0, {[0x7, 0xbf1]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000002380)) preadv(0xffffffffffffffff, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}, {0x0}], 0x2, 0x33, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000200)={{0x3, @name="678e24935d70f0d0b9719a84c589c03af0175e6635a91fc8a062c0955c161a5e"}, 0x8, 0xfc06, 0x8}) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000140)={0x2a, 0x4, 0x0, {0x1, 0xffffffff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r4, 0x2285, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0fb0000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2) 6m56.425946101s ago: executing program 4 (id=571): syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x43a3, &(0x7f0000000100)={0x0, 0xf97f, 0x1000, 0x5, 0x245, 0x0, r0}, 0x0, 0x0) 6m56.241838711s ago: executing program 4 (id=572): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_io_uring_setup(0x24fd, &(0x7f00000004c0)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', r4, 0x2f, 0x0, 0x2, 0x1000000, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x7800, 0x80, 0x20003, 0x270}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[@ANYRES64=r8], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r10 = dup(r1) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) write$FUSE_NOTIFY_RESEND(r2, &(0x7f0000002040)={0x14}, 0x14) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RSETATTR(r11, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) 6m56.187480464s ago: executing program 0 (id=573): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000580)) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x0, 0x989680}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000e96000/0x1000)=nil}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r2, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_RATE={0x6, 0x5, {0xe, 0xff}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) write$vhost_msg_v2(r2, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f0000004b00)=""/110, 0x6e, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000540)=""/224, 0xe0, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000a00)=""/274, 0x112, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000780)=""/212, 0xd4, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) r6 = socket(0x200000000000011, 0x2, 0xd) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) r10 = openat$full(0xffffff9c, &(0x7f00000004c0), 0x20400, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r10, 0x6) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x138, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r9, {0x0, 0xc}, {0x0, 0xa}, {0x1, 0x10}}, [@TCA_STAB={0x114, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0xff, 0x3a7b, 0x4, 0x2, 0x0, 0xfff, 0x2}}, {0x8, 0x2, [0xfff, 0x8]}}, {{0x1c, 0x1, {0x80, 0x6, 0x4, 0x8, 0x0, 0x0, 0x56, 0x4}}, {0xc, 0x2, [0xa12, 0x8001, 0x81, 0x2]}}, {{0x1c, 0x1, {0x8, 0x3d, 0x5, 0x10001, 0x1, 0x24de81db, 0x3, 0x7}}, {0x12, 0x2, [0x400, 0x6000, 0x3, 0x200, 0x4, 0x6, 0xc924]}}, {{0x1c, 0x1, {0x7, 0xff, 0x0, 0x5, 0x0, 0x2, 0xfffffffe}}, {0x4}}, {{0x1c, 0x1, {0x81, 0x1, 0xfffb, 0x7, 0x1, 0x2, 0x200, 0x2}}, {0x8, 0x2, [0x81, 0x3]}}, {{0x1c, 0x1, {0x4b, 0x8a, 0x8, 0x5, 0x3, 0x5, 0xff, 0x4}}, {0xc, 0x2, [0xfff, 0x8000, 0x4, 0x1]}}, {{0x1c, 0x1, {0x6, 0x5, 0xc73, 0x4, 0x3, 0x9, 0x1, 0x4}}, {0xc, 0x2, [0xfffe, 0x200, 0x1, 0x2]}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x55}, 0x4000) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000500)=ANY=[@ANYBLOB="002000000000aaaaaaaaaabb0800452100240065000008119078e00000010a01010a4e234e210010907802060000000000002e36"], 0x0) 6m56.109775216s ago: executing program 4 (id=574): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @host, 0x8, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x846}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000048c0)=0x7) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000, 0xfffe}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) process_vm_readv(0x0, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f0000001380)=""/241, 0xf1}, {0x0}, {0x0}, {&(0x7f0000001640)=""/123, 0x7b}], 0x6, &(0x7f0000000100)=[{&(0x7f0000001740)=""/4096, 0x1000}, {0x0}, {&(0x7f00000027c0)=""/188, 0xbc}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/4096, 0x1000}], 0x5, 0x0) 6m56.004287316s ago: executing program 4 (id=575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40085507, &(0x7f0000000080)=0x100000) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x420, 0x0, 0x0, {0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}}, 0x0) 6m55.889946061s ago: executing program 0 (id=576): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 6m55.829324532s ago: executing program 0 (id=577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40085507, &(0x7f0000000080)=0x100000) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}}, 0x0) (fail_nth: 4) 6m54.772090526s ago: executing program 4 (id=580): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$can_raw(r1, &(0x7f0000000380)={&(0x7f00000002c0), 0x10, &(0x7f0000000340)={&(0x7f0000000300)=@can={{0x1, 0x0, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "99218f9e74c9cb5e"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xc884) ppoll(&(0x7f00000008c0)=[{r1, 0xa091}], 0x1, 0x0, 0x0, 0x0) 6m54.625637899s ago: executing program 0 (id=581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r2 = socket$inet6(0xa, 0x800, 0x3c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x9}, 0x1c) sendmmsg$inet(r2, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="2fae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000340)="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"/691, 0x2b3}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b65", 0x16}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) write$sysctl(r2, &(0x7f0000000000)='5\x00', 0x2) 6m54.543589651s ago: executing program 4 (id=582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000000b4601080000000000000000060000020500010007000000100007800c00018008000140e0000001090002007b797a3100000000d62d2b8c083e5a5012fa8d6a32782c85ecf35e39d913844d296cd6785dd62729027b01ad7e88234fcefcb2b6dc9908f26f3bee7ee2b02957de633b8600000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000a0}, 0x4840) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0000fea6e0a1863624138ab70000000000de0000", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) read$FUSE(r1, &(0x7f00000063c0)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f00000007c0)=0x132) write$FUSE_ATTR(r1, &(0x7f0000000280)={0x78, 0xffffffffffffffda, r5, {0x8, 0x6, 0x0, {0x2, 0x2, 0x8e, 0x1007, 0x5, 0x10001, 0x9, 0x1, 0xdc97, 0xa000, 0x2, r6, 0xffffffffffffffff, 0x33, 0x5}}}, 0x78) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r4, 0x0, 0x0, 0x80000) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="70000000020103000000000000000000000000061800170000000006000000050000003a00000003000000044400108008000340000000080800024000010000080002400000000308000340000000020800034000008994080003400000100008000340000000070800024000010000"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendto$inet(r7, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r8, 0x80046601, 0x0) r9 = eventfd(0x6) r10 = eventfd2(0x9, 0x1) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000180)={0x9, 0x100000, 0x1, r10, 0x1}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000900)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r12 = accept4(r11, 0x0, 0x0, 0x0) sendmsg$alg(r12, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x14000012) sendmsg$nl_route_sched_retired(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004a80)=@newtaction={0x100, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0xec, 0x1, [@m_ipt={0x60, 0x17, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xadc0}, @TCA_IPT_HOOK={0x8}]}, {0x25, 0x6, "e0bc7743d52057483c234da7396aee1c1620232e9758fc402870746166594df527"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ipt={0x88, 0x7, 0x0, 0x0, {{0x8}, {0x4}, {0x5e, 0x6, "281e4e3e0c40476018fa8215aad6f3df9be9c368b076e7baf5af4a77ee2c2ccd7aee6d3d9832b2801db265cfd88a70ba0f361e01e281de022d2b67713fe137cb18a705201b53ddfb154f367ede44dae6362fa72e12a2c5f3cb66"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x24040001) recvmmsg$unix(r12, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)=""/239, 0xef}, {&(0x7f0000000640)=""/132, 0x84}], 0x2}}], 0x2, 0x40010000, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r9, 0x5}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) 6m54.031569382s ago: executing program 32 (id=582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000000b4601080000000000000000060000020500010007000000100007800c00018008000140e0000001090002007b797a3100000000d62d2b8c083e5a5012fa8d6a32782c85ecf35e39d913844d296cd6785dd62729027b01ad7e88234fcefcb2b6dc9908f26f3bee7ee2b02957de633b8600000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000a0}, 0x4840) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0000fea6e0a1863624138ab70000000000de0000", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) read$FUSE(r1, &(0x7f00000063c0)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f00000007c0)=0x132) write$FUSE_ATTR(r1, &(0x7f0000000280)={0x78, 0xffffffffffffffda, r5, {0x8, 0x6, 0x0, {0x2, 0x2, 0x8e, 0x1007, 0x5, 0x10001, 0x9, 0x1, 0xdc97, 0xa000, 0x2, r6, 0xffffffffffffffff, 0x33, 0x5}}}, 0x78) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r4, 0x0, 0x0, 0x80000) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="70000000020103000000000000000000000000061800170000000006000000050000003a00000003000000044400108008000340000000080800024000010000080002400000000308000340000000020800034000008994080003400000100008000340000000070800024000010000"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendto$inet(r7, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r8, 0x80046601, 0x0) r9 = eventfd(0x6) r10 = eventfd2(0x9, 0x1) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000180)={0x9, 0x100000, 0x1, r10, 0x1}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000900)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r12 = accept4(r11, 0x0, 0x0, 0x0) sendmsg$alg(r12, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x14000012) sendmsg$nl_route_sched_retired(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004a80)=@newtaction={0x100, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0xec, 0x1, [@m_ipt={0x60, 0x17, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xadc0}, @TCA_IPT_HOOK={0x8}]}, {0x25, 0x6, "e0bc7743d52057483c234da7396aee1c1620232e9758fc402870746166594df527"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ipt={0x88, 0x7, 0x0, 0x0, {{0x8}, {0x4}, {0x5e, 0x6, "281e4e3e0c40476018fa8215aad6f3df9be9c368b076e7baf5af4a77ee2c2ccd7aee6d3d9832b2801db265cfd88a70ba0f361e01e281de022d2b67713fe137cb18a705201b53ddfb154f367ede44dae6362fa72e12a2c5f3cb66"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x24040001) recvmmsg$unix(r12, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)=""/239, 0xef}, {&(0x7f0000000640)=""/132, 0x84}], 0x2}}], 0x2, 0x40010000, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r9, 0x5}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) 6m53.989838952s ago: executing program 0 (id=585): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x500, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x320, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x9, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x9, 0x1, 0x8, 0x400002, 0x1}]}}}}}}}, 0x0) 6m53.745718519s ago: executing program 33 (id=585): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x500, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x320, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x9, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x9, 0x1, 0x8, 0x400002, 0x1}]}}}}}}}, 0x0) 5.865974259s ago: executing program 5 (id=1936): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x99) 5.7733789s ago: executing program 3 (id=1938): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 5.665418886s ago: executing program 1 (id=1939): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x2000}) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x145100, 0x0) fgetxattr(r0, &(0x7f0000000600)=@random={'system.', 'mogon\x00o&\xcb\x97\x91\x03\x9d\xef*\xbf\x8e\x82V\x90Z9r\xf3\x05M0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x0, &(0x7f0000000140)}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r2, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48) rt_sigaction(0x7, &(0x7f00000000c0)={0x0, 0x80000003, 0x0, {[0x7, 0xbf1]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000002380)) preadv(0xffffffffffffffff, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}, {0x0}], 0x2, 0x33, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000200)={{0x3, @name="678e24935d70f0d0b9719a84c589c03af0175e6635a91fc8a062c0955c161a5e"}, 0x8, 0xfc06, 0x8}) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000140)={0x2a, 0x4, 0x0, {0x1, 0xffffffff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r4, 0x2285, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)}], 0x2) 5.47401379s ago: executing program 5 (id=1941): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) write$dsp(r7, &(0x7f0000000400)="c4322f5c57ef1e8c2d500b7efabd1af0b06ee646f0d7c11ea4a8f86ecc05d60b7021cc9a2bf2b1fbb537f242c642619e1fdea2c7dd2e019267f3eec05db7b7805888178436eccf92c044357bd1e45b9a6f1d42b23f2549ef8211fdf9ead0e6c005fb76f054bce224fa814166ca756011e32bd2af7e2855846f25732d", 0x7c) read$FUSE(r6, &(0x7f0000004100)={0x2020}, 0x2020) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x22020400) 5.416309991s ago: executing program 1 (id=1942): openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40041, 0x0) 5.355227384s ago: executing program 6 (id=1943): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = openat$vimc2(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000140)={0x0, @bt={0x1, 0x7fffffff, 0x0, 0x3, 0x8, 0x3, 0x6, 0x4a97843a, 0x5, 0x8, 0x5, 0x81, 0xfffff800, 0x6, 0x8, 0x8, {0xc740000, 0x41}, 0x0, 0x1}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff020000bfa3000000000000070300c0f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed0000620300ff020000001d440000000000007a0a00fe00ffffffc3030000a1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r2, 0x4181}, {r2, 0x2092}, {r2, 0x1}], 0x3, &(0x7f0000000200)={r3, r4+60000000}, &(0x7f0000000240)={[0x5ed1, 0x4]}, 0x8) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="61a5133617abde0fc13e4f006739e31b7fd6cf2bbc59d423a74089a2da8df6d40c7b14fa9fa1c04bc87c2293523255c3a19f7fbe10eceda2e6f48cb5e1b9def914139560ce316eb2f1c6e94450c1f350cfea27f464", 0x55}, {&(0x7f0000000bc0)="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", 0x56c}], 0x2}}], 0x1, 0xf00) 5.161364154s ago: executing program 6 (id=1944): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$igmp6(0xa, 0x3, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x50}, 0x1, 0x0, 0x0, 0x40400c5}, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x1, 0x1004, 0x4, {0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401001}}}, 0x32) syz_open_dev$sndmidi(0x0, 0x2, 0x141581) r5 = dup(0xffffffffffffffff) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="c40000001900674c000000000000000000000000000000000000000000000000ac1e0001000000f14aec9e000000000000000000000000000a00000000000000", @ANYRESOCT=r4, @ANYRES32=0x0, @ANYRESOCT=r4], 0xc4}}, 0x4c050) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001000)=@updpolicy={0xb4, 0x19, 0x4, 0x0, 0x4, {{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x4, 0x2, 0x9}, 0x0, 0x4}, [@lastused={0x0, 0xf, 0x9}, @srcaddr={0x0, 0xd, @in=@empty}, @algo_crypt={0x0, 0x2, {{'lrw-serpent-sse2\x00'}, 0x0, "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"}}, @replay_thresh={0x0, 0xb, 0x6}, @algo_comp={0x0, 0x3, {{'deflate\x00'}, 0x0, "29592d7ae2c486d4f09e2610f6e3220d6cac862dba59e9e9feaf787917d865b00cfbf2bab475d22dceed1590b78a9fb8a636a996af964756be348ae0141a246b33d3212f1d03e12dec3517d275844972471fc6d3ba9996999c7410d78b8d4ec0e30dc634ec0837698135fa54f7dfeca0bb3f6924f5d0e7846175e02913b23973adc0dec7402925482580e39baf8d8630ae3f8a70fa2c50dde0a19605b842765b3ee16dfb8852c8286d3d9763f33eac949a2432923205105b6b01fc9492c61721"}}]}, 0xffffffffffffff54}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)=ANY=[@ANYBLOB="0180c200000b00000000000286ddc066c2cbf4b63816650676050ec051e66000000000103afffe8000000000000000009513130c0000ff02000300"/68], 0x0) ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000140)={&(0x7f0000329000/0x4000)=nil}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xfffffb07, @local, 0x680}, 0x1c) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c0015000008009f00030000000800260008160000000000000000000000a522345d"], 0x40}}, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 5.07777172s ago: executing program 1 (id=1945): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect$uac1(0x4, 0xe7, &(0x7f0000000700)={{0x12, 0x1, 0x211, 0x0, 0x0, 0x0, 0x9f, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x3, 0x1, 0x31, 0x0, 0xd, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x1}, [@mixer_unit={0x6, 0x24, 0x4, 0x6, 0x6, 'P'}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x2, 0x6, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x302, 0x3, 0x4, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x9, 0x4, 0xfc, "51edff2a"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x3, 0x1, 0x9, "", '%]'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x3, 0xb, 0x8, "", "62d5c4"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0xca, 0xb8, {0x7, 0x25, 0x1, 0x3, 0x3, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x4, 0x8, 0x0, "e4", 'i'}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x4, 0x1, 0x9, "91"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x2, 0x0, 0x3}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x6, 0x1, 0xa5, 0x5, 'a'}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x507, 0xe, "acae06eb1450d9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x5ef, 0x5b, 0x13, 0xfc, {0x7, 0x25, 0x1, 0x83, 0x6, 0x5}}}}}}}]}}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) getsockopt$inet_int(r4, 0x0, 0xe, 0x0, &(0x7f0000000500)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xce9c, 0x8, 0x3, 0x40004330}, &(0x7f00000006c0), &(0x7f00000001c0)) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r6, 0xaece, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r1) sendmsg$NL80211_CMD_JOIN_MESH(r6, 0x0, 0x8000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4.094979223s ago: executing program 2 (id=1947): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x8f18abe1b103fef6) fcntl$notify(r0, 0x402, 0x80000008) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0x101000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000140)={0x0, 0x10000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$RNDCLEARPOOL(r5, 0x5206, 0x0) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_raw(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x1c}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xc9}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xce}, @TCA_CAKE_RTT={0x8, 0x7, 0x9a2e}]}}]}, 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xc0, r6, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x800) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) r14 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$inet(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)}, 0x41) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) 3.82715033s ago: executing program 5 (id=1948): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 3.619617778s ago: executing program 2 (id=1949): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000500000000000000000f4e55c1"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x7a}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x4002004c4, 0x1000, 0x63, 0x0, 0x0, 0x0, 0x7], 0xeeee8000, 0x1144}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x22, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x803, 0x23456}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.592367938s ago: executing program 5 (id=1950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @tproxy={{}, @void}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x53}]}}}, {0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x48}, @NFTA_NG_DREG={0x1f, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x4048010) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x529100, 0x0) ioctl$TIOCSLCKTRMIOS(r3, 0x80047437, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x9, 0x3, 0x1000, 0x5}) r5 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r5, 0x29, 0x49, 0x0, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) setsockopt$inet6_int(r5, 0x29, 0x16, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r6, 0x0, 0x4044000) pipe(0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r9) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f00000001c0)=ANY=[@ANYRES64=r7, @ANYRES16, @ANYRES16]) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) 2.654889541s ago: executing program 3 (id=1951): r0 = gettid() openat$dlm_monitor(0xffffff9c, &(0x7f00000000c0), 0x2000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x22, 0x0, 0x0, 0x19}, 0x94) r1 = syz_io_uring_setup(0x8dd, &(0x7f0000000440)={0x0, 0x1b7, 0x400, 0x5, 0x20000f9}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0xe41f, 0x1, 0x0, 0xfffffffffffffeb5) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x4, 0x208002) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8, {0xfd, 0xb8}, {0x4, 0x6}, @ext={0x0, 0x0}}, {0xff, 0x0, 0x0, 0x4, @tick, {0x6, 0x4}, {}, @result={0xd, 0x4}}], 0x38) 2.458345731s ago: executing program 2 (id=1952): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0xfff8, 0x6, 0x89, 0xc9, r1}, &(0x7f0000000340)=0x10) (fail_nth: 1) 1.853348886s ago: executing program 1 (id=1953): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x2000}) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x145100, 0x0) fgetxattr(r0, &(0x7f0000000600)=@random={'system.', 'mogon\x00o&\xcb\x97\x91\x03\x9d\xef*\xbf\x8e\x82V\x90Z9r\xf3\x05M0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0xfff8, 0x6, 0x89, 0xc9, r1}, &(0x7f0000000340)=0x10) 1.787077411s ago: executing program 6 (id=1955): openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40041, 0x0) 1.666876143s ago: executing program 2 (id=1956): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) 1.624013757s ago: executing program 6 (id=1957): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) 1.567522156s ago: executing program 2 (id=1958): r0 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000180)='utf8', &(0x7f0000000340)='./file2\x00', 0xffffffffffffff9c) fanotify_init(0x4000, 0x101003) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) exit(0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) brk(0x400000ffc000) r5 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'security.', '/dev/fuse\x00'}) ioctl$FS_IOC_RESVSP(r5, 0x80086601, 0x0) r6 = fsopen(&(0x7f0000000000)='ufs\x00', 0x1) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r4) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x10, 0x80, 0xdd7, 0x2, {{0x18, 0x4, 0x1, 0x9, 0x60, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0x9, [{@multicast1, 0x2}]}, @cipso={0x86, 0x40, 0x0, [{0x5, 0x11, "61853379342bf9bc837101084905ae"}, {0x2, 0x6, "9b2f6985"}, {0x7, 0x6, "29d6b434"}, {0x2, 0x9, "4107220cb4ea41"}, {0x2, 0x8, "5c99b53f102e"}, {0x1, 0xc, "434c36e509a5c1062086"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000600)={'syztnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xa4, r7, 0x20, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x39f82357d40621c2}, 0x14) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000300)='posixacl\x00', 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x2, 0x40}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000200), 0x4) 1.543726729s ago: executing program 1 (id=1959): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 1.541652875s ago: executing program 3 (id=1960): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x48e, 0x300, 0x690, 0x1000, 0xbbba, 0x2, 0x0, 0x100, {0x0, 0x2000}, {0x5, 0x2, 0x1}, {0x4000000, 0x1ff}, {0x0, 0x8}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 1.459917578s ago: executing program 5 (id=1961): r0 = io_uring_setup(0x752c, &(0x7f0000000080)={0x0, 0x21d1, 0x1, 0x1, 0x22e}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000240)=[@cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0xf4}}, {{&(0x7f0000000340), 0x6e, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/186, 0xba}, {&(0x7f00000001c0)}, {&(0x7f0000000480)=""/135, 0x87}, {&(0x7f0000000540)=""/109, 0x6d}, {&(0x7f00000005c0)=""/117, 0x75}], 0x5, &(0x7f0000000680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0xa8}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000dc0)=[{&(0x7f00000007c0)=""/172, 0xac}, {&(0x7f0000000880)=""/252, 0xfc}, {&(0x7f0000000980)=""/140, 0x8c}, {&(0x7f0000000a40)=""/124, 0x7c}, {&(0x7f0000000ac0)=""/224, 0xe0}, {&(0x7f0000000bc0)=""/29, 0x1d}, {&(0x7f0000000c00)=""/154, 0x9a}, {&(0x7f0000000cc0)=""/221, 0xdd}], 0x8, &(0x7f0000000e00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x5c}}, {{&(0x7f0000000e80), 0x6e, &(0x7f00000011c0)=[{0xffffffffffffffff}, {&(0x7f0000000f00)=""/37, 0x25}, {&(0x7f0000000f40)=""/175, 0xaf}, {&(0x7f0000001000)=""/31, 0x1f}, {&(0x7f0000001040)=""/190, 0xbe}, {&(0x7f0000001100)=""/130, 0x82}], 0x6, &(0x7f0000001200)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x48}}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001280)=""/114, 0x72}, {&(0x7f0000001300)=""/64, 0x40}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/179, 0xb3}], 0x4, &(0x7f0000002440)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000002540)=@abs, 0x6e, &(0x7f0000002680)=[{&(0x7f00000025c0)=""/2, 0x2}, {&(0x7f0000002600)=""/98, 0x62}], 0x2}}, {{&(0x7f00000026c0), 0x6e, &(0x7f0000002c00)=[{&(0x7f0000002740)=""/201, 0xc9}, {&(0x7f0000002840)=""/206, 0xce}, {&(0x7f0000002940)=""/122, 0x7a}, {&(0x7f00000029c0)=""/207, 0xcf}, {&(0x7f0000002ac0)=""/16, 0x10}, {&(0x7f0000002b00)=""/109, 0x6d}, {&(0x7f0000002b80)=""/65, 0x41}], 0x7, &(0x7f0000002c40)=[@cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}], 0xb8}}], 0x7, 0x40002100, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f0000000000), 0x0, 0x0, 0x2, 0x1}}, 0x1) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) ioctl$TIOCGPTPEER(r3, 0x5441, 0x4) 1.405948682s ago: executing program 1 (id=1962): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x0, &(0x7f0000000140)}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r2, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48) rt_sigaction(0x7, &(0x7f00000000c0)={0x0, 0x80000003, 0x0, {[0x7, 0xbf1]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000002380)) preadv(0xffffffffffffffff, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}, {0x0}], 0x2, 0x33, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000200)={{0x3, @name="678e24935d70f0d0b9719a84c589c03af0175e6635a91fc8a062c0955c161a5e"}, 0x8, 0xfc06, 0x8}) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000140)={0x2a, 0x4, 0x0, {0x1, 0xffffffff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r4, 0x2285, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)}], 0x2) 1.404732262s ago: executing program 6 (id=1963): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)='+[', 0x2}], 0x1}}], 0x1, 0x4000041) socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x1) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe006c3030000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) syz_open_dev$hidraw(&(0x7f00000000c0), 0x5, 0x10040) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x80000201, 0x4) sendmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)="d0a42f46b1def4c9f7a84b5cee0ba9dbaebd9ae5914239a4dec1e0cca6b0b8c290ca654d7de092d6b1218eeb18fc4e09eba0a2813f526675e1babad0c7f046ed7c29c6a8d2daf216a2717ed4", 0x4c}, {&(0x7f00000005c0)="0ea461c720cfdb9bf1647f", 0xb}, {&(0x7f00000007c0)="8f5b5e772d791c9c5309a82ea8aa66a9cda5dc3446f50a45bcb055287a35e17b70db89f9de908aaaafb8f23aa327c171f520587ef9d8f9710da41fcd2f4f222206ab33568bc10a35ae9846eaf9b8836fdb61e9f68f731a4b863261eb28980d2759fccf4ef62052675e984d88dcda2a905e521bc68d62252b0c4da1b790a401d91529a114304c50340e16b74515ba945b6d27512801e4fbfd554aa884708d9b948c62ab0831a24a1ea0322f164d6cd77ab48d607f33245f3e2f", 0xb9}, {&(0x7f0000000880)="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", 0xfd}, {&(0x7f0000000980)="a33513ec74357338e8177ccc1554159d8633ec2f912c7e7f65ad6ad0e56a93a751cc77b0bd24149c851c67635aec3ded744f19fe9a21dc3cd504742de6842ef3080a4b08cf83efbee319848153602a9417e1aa616fd0511293543b40cd48b91ec1a3edb712953c69fc5881b4242cc69d247fd3", 0x73}, {&(0x7f0000000a40)="31a62fcc8b46b656ce8eae84f7dda42a1fa7ac28c982f37f0341882a7c33e553f3f48b915225a11c8334c6e9f7cfba511ce1fff7931bf4eb7f2dd67b90b833c2258997737aea38ed3933a821050612e255403bf72b390a793eb341f40de7ff05bc97580e5d3714cdf6d1bbd31067eba62710cf31c88af20ad4827e77f72da47c", 0x80}, {&(0x7f0000000b00)="e524119d33d487a716e0b852ff72dd178d0be915034dcdc5723e8ffb019b0d42881ab70ba541870c01593241aecbb6e278e69dafa861e528e4d70f4d1580811abcae0271ae7a0fe3a560462a0ddf20231560159b7b5fe0840095300222e24357b4c4b15e7bdcb9135bb5c510123c2ae44d6e7b3e9119425b8fecfe2214c35731805e374a5bf9c2af251f00fb320debe524564e569db7bfb32efcbedff27a4f8660b5df4b88fddfef72d7394c629e8a25f700fefd5a7bcd43c97b59e827e5d388e930708113e73cf309ff394e70d58bc35ad70ce1", 0xd4}], 0x7}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000d00)="c998a70efa32030d9f2c0107971c0bdb7737e96a6905dd1ee61f37ec07816df7dd84ddbc6abf00734163bf80fb2f9e911b03489e3fab72b0dc0f10edc57defb1bc22bc93a3c77fd2dd416841a60fa6626f62a3", 0x53}, {&(0x7f0000000d80)="2a9fdf72ca6eb93eeb2d38f2cba96a97b5be0e92bfa287893fb173ccf9350869ea3a5e0f6d08da4ee4aec8e9a587334476bfa6facab80123905e", 0x3a}], 0x2}}], 0x2, 0x4800) r4 = dup(r1) read$FUSE(r4, &(0x7f00000075c0)={0x2020}, 0x2020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, 0x0) 1.164803958s ago: executing program 3 (id=1964): unshare(0x28020480) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x14eca4e5a56fd379) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') read$FUSE(r1, &(0x7f0000002880)={0x2020}, 0x2020) pread64(r1, &(0x7f00000000c0)=""/144, 0x90, 0x5e) 939.505978ms ago: executing program 3 (id=1965): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect$uac1(0x4, 0xe7, &(0x7f0000000700)={{0x12, 0x1, 0x211, 0x0, 0x0, 0x0, 0x9f, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x3, 0x1, 0x31, 0x0, 0xd, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x1}, [@mixer_unit={0x6, 0x24, 0x4, 0x6, 0x6, 'P'}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x2, 0x6, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x302, 0x3, 0x4, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x9, 0x4, 0xfc, "51edff2a"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x3, 0x1, 0x9, "", '%]'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x3, 0xb, 0x8, "", "62d5c4"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0xca, 0xb8, {0x7, 0x25, 0x1, 0x3, 0x3, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x4, 0x8, 0x0, "e4", 'i'}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x4, 0x1, 0x9, "91"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x2, 0x0, 0x3}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x6, 0x1, 0xa5, 0x5, 'a'}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x507, 0xe, "acae06eb1450d9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x5ef, 0x5b, 0x13, 0xfc, {0x7, 0x25, 0x1, 0x83, 0x6, 0x5}}}}}}}]}}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) getsockopt$inet_int(r4, 0x0, 0xe, 0x0, &(0x7f0000000500)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xce9c, 0x8, 0x3, 0x40004330}, &(0x7f00000006c0), &(0x7f00000001c0)) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r6, 0xaece, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r1) sendmsg$NL80211_CMD_JOIN_MESH(r6, 0x0, 0x8000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 284.88615ms ago: executing program 5 (id=1966): r0 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect$uac1(0x6, 0x109, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf7, 0x3, 0x1, 0x9, 0x20, 0xf7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x40}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x206, 0x5, 0x4, 0x7, 0x2, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x203, 0x5, 0x5, 0x9, 0x5, 0xa5}, @processing_unit={0xc, 0x24, 0x7, 0x5, 0x5, 0x0, "272d78c708"}, @mixer_unit={0xb, 0x24, 0x4, 0x3, 0x5, "af9cdfa11cc4"}, @processing_unit={0x9, 0x24, 0x7, 0x4, 0x5, 0x8, "9ae2"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x1fd, 0x2, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xff, 0x7, 0x48, "36875b84631da060ac"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5, 0x3, 0x7, 0x0, "022dd6", "18c7"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6, 0x1, 0x2, 0xa5, "b379f0c9d2a2"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x9, 0xfff9, 0x8, "ad7d"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xdb68, 0x0, 0x3, "fa4a0070f617f38c81"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x40, 0xe000, 0x8, "6c936c11"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x85, 0xfffb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x60, 0x2, 0x4, {0x7, 0x25, 0x1, 0x1, 0x5, 0x5f}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0xa, 0x1, 0x4, 0x8, 0xca}, 0x40, &(0x7f00000000c0)={0x5, 0xf, 0x40, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "b3dc84d2ebacdce1b6bb4fc0a483d18d"}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x7, 0xf000, 0x5, [0x30, 0xff0030]}, @generic={0x10, 0x10, 0x2, "ea39f09870649f61f4989046bd"}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3024}}]}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 6 (id=1967): syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x24000840) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa4e9, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r3, 0x1, 0x0}) io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000006a004d"], 0x18}}, 0x20004000) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) fchdir(r1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40041, 0x0) kernel console output (not intermixed with test programs): 86'. [ 575.864537][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 575.872220][ T5864] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 575.892130][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 576.742967][ T5984] usb 4-1: USB disconnect, device number 68 [ 576.846923][ T5864] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 576.858766][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.885267][ T5864] usb 2-1: Product: syz [ 576.893127][ T5864] usb 2-1: Manufacturer: syz [ 576.897854][ T5864] usb 2-1: SerialNumber: syz [ 576.911103][T11987] ip6erspan0: entered promiscuous mode [ 576.918933][ T5864] usb 2-1: config 0 descriptor?? [ 576.936603][ T5864] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 577.005101][ T5864] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 577.204730][T11999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1488'. [ 577.557070][ T5864] em28xx 2-1:0.0: unknown em28xx chip ID (86) [ 577.642332][ T6010] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 577.882664][ T6010] usb 7-1: Using ep0 maxpacket: 16 [ 577.893995][ T6010] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.000821][ T6010] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 578.017110][ T6010] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 578.027797][ T6010] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.073714][ T6010] usb 7-1: config 0 descriptor?? [ 578.457499][ T6010] usbhid 7-1:0.0: can't add hid device: -71 [ 578.489432][ T6010] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 578.586678][ T6010] usb 7-1: USB disconnect, device number 47 [ 578.609866][ T5864] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 578.710915][ T5864] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 578.750325][ T5864] em28xx 2-1:0.0: No AC97 audio processor [ 579.056681][ T6010] usb 2-1: USB disconnect, device number 61 [ 579.079194][ T6010] em28xx 2-1:0.0: Disconnecting em28xx [ 579.087356][T12021] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 579.104646][ T6010] em28xx 2-1:0.0: Freeing device [ 579.142424][T12018] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 579.502450][T12033] netlink: 'syz.2.1499': attribute type 3 has an invalid length. [ 579.871502][T12039] bridge2: entered allmulticast mode [ 579.992825][T12039] team0: Port device bridge2 added [ 580.498100][T12056] netlink: 'syz.1.1507': attribute type 4 has an invalid length. [ 580.575337][T12056] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1507'. [ 580.726590][T12061] bridge3: entered allmulticast mode [ 580.768393][T12061] team0: Port device bridge3 added [ 580.809957][ T6010] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 581.000400][ T6010] usb 4-1: Using ep0 maxpacket: 8 [ 581.010098][ T6010] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 581.020179][ T6010] usb 4-1: config 2 has no interface number 0 [ 581.026284][ T6010] usb 4-1: config 2 interface 31 has no altsetting 0 [ 581.151845][ T6010] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 581.161966][ T6010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.173895][ T6010] usb 4-1: Product: syz [ 581.178099][ T6010] usb 4-1: Manufacturer: syz [ 581.193128][ T6010] usb 4-1: SerialNumber: syz [ 581.250138][ T6010] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 581.459856][ T5984] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 581.662131][ T5984] usb 6-1: Using ep0 maxpacket: 32 [ 581.672939][ T5984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.690348][ T5984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.703563][ T5984] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 581.709113][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1512'. [ 581.731978][T12074] @: renamed from vlan0 (while UP) [ 582.130091][ T5984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.157954][ T5984] usb 6-1: config 0 descriptor?? [ 582.167153][ T5984] hub 6-1:0.0: USB hub found [ 582.418659][T12068] fuse: Bad value for 'fd' [ 582.453285][T12068] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1511'. [ 582.516550][T12068] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1511'. [ 582.756166][ T6010] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 582.929920][ T6010] usb 7-1: Using ep0 maxpacket: 8 [ 582.939218][ T6010] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.951972][ T6010] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.975951][ T6010] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.992741][ T6010] usb 7-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 583.008656][ T6010] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.017385][ T6010] usb 7-1: Product: syz [ 583.022401][ T6010] usb 7-1: Manufacturer: syz [ 583.027263][ T6010] usb 7-1: SerialNumber: syz [ 583.038027][ T6010] usb 7-1: config 0 descriptor?? [ 583.052923][ T6010] redrat3 7-1:0.0: Couldn't find all endpoints [ 583.593215][ T10] usb 4-1: USB disconnect, device number 69 [ 583.778114][ T887] usb 7-1: USB disconnect, device number 48 [ 583.996055][T12108] ip6erspan0: entered promiscuous mode [ 584.469456][ T5984] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 584.495257][ T5984] usbhid 6-1:0.0: can't add hid device: -71 [ 584.518316][ T5984] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 584.519982][ T5864] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 584.643215][ T5984] usb 6-1: USB disconnect, device number 31 [ 584.720928][ T5864] usb 7-1: Using ep0 maxpacket: 32 [ 584.793243][ T5864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.841522][ T5864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.873410][ T5864] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 584.919737][ T5864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.978990][ T5864] usb 7-1: config 0 descriptor?? [ 585.033658][ T5864] hub 7-1:0.0: USB hub found [ 585.656551][ T5864] hub 7-1:0.0: 1 port detected [ 585.914062][ T921] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 586.333489][ T921] usb 4-1: config 255 has too many interfaces: 231, using maximum allowed: 32 [ 586.364284][ T921] usb 4-1: config 255 has 1 interface, different from the descriptor's value: 231 [ 586.408465][ T921] usb 4-1: config 255 has no interface number 0 [ 586.418933][ T6010] hub 7-1:0.0: hub_ext_port_status failed (err = 0) [ 586.449076][ T921] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 586.488633][ T921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.517544][ T921] usb 4-1: Product: syz [ 586.563587][ T921] usb 4-1: Manufacturer: syz [ 586.579030][ T921] usb 4-1: SerialNumber: syz [ 586.650057][T12137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.667036][T12137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.739602][ T5984] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 586.830448][ T921] peak_usb 4-1:255.56: PEAK-System PCAN-USB X6 v50 fw v117.0.0 (2 channels) [ 586.919889][ T5984] usb 3-1: Using ep0 maxpacket: 8 [ 586.968011][ T5984] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 586.984367][ T5984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.005467][ T5984] usb 3-1: Product: syz [ 587.030131][ T5984] usb 3-1: Manufacturer: syz [ 587.040977][ T921] peak_usb 4-1:255.56 can0: unable to request usb[type=2 value=5] err=-71 [ 587.051941][ T5984] usb 3-1: SerialNumber: syz [ 587.061955][ T5984] usb 3-1: config 0 descriptor?? [ 587.071153][ T5984] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 587.107785][ T921] peak_usb 4-1:255.56: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 587.191493][ T921] peak_usb 4-1:255.56: probe with driver peak_usb failed with error -71 [ 587.221704][ T921] usb 4-1: USB disconnect, device number 70 [ 587.912049][ T887] usb 7-1: USB disconnect, device number 49 [ 588.124752][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1541'. [ 588.238068][T12170] FAULT_INJECTION: forcing a failure. [ 588.238068][T12170] name failslab, interval 1, probability 0, space 0, times 0 [ 588.417993][T12170] CPU: 0 UID: 0 PID: 12170 Comm: syz.3.1542 Not tainted syzkaller #0 PREEMPT(full) [ 588.418023][T12170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 588.418037][T12170] Call Trace: [ 588.418047][T12170] [ 588.418057][T12170] dump_stack_lvl+0x189/0x250 [ 588.418089][T12170] ? __pfx____ratelimit+0x10/0x10 [ 588.418112][T12170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.418137][T12170] ? __pfx__printk+0x10/0x10 [ 588.418172][T12170] ? __pfx___might_resched+0x10/0x10 [ 588.418198][T12170] should_fail_ex+0x414/0x560 [ 588.418234][T12170] should_failslab+0xa8/0x100 [ 588.418269][T12170] kmem_cache_alloc_noprof+0x73/0x3c0 [ 588.418299][T12170] ? seq_open+0x5f/0x140 [ 588.418329][T12170] seq_open+0x5f/0x140 [ 588.418358][T12170] kernfs_fop_open+0x542/0xca0 [ 588.418391][T12170] ? fsnotify_open_perm_and_set_mode+0x11a/0x610 [ 588.418431][T12170] ? __pfx_kernfs_fop_open+0x10/0x10 [ 588.418459][T12170] do_dentry_open+0x953/0x13f0 [ 588.418499][T12170] vfs_open+0x3b/0x340 [ 588.418518][T12170] ? path_openat+0x2ecd/0x3830 [ 588.418547][T12170] path_openat+0x2ee5/0x3830 [ 588.418583][T12170] ? arch_stack_walk+0xfc/0x150 [ 588.418628][T12170] ? stack_depot_save_flags+0x40/0x860 [ 588.418681][T12170] ? __pfx_path_openat+0x10/0x10 [ 588.418704][T12170] ? do_fast_syscall_32+0x34/0x80 [ 588.418727][T12170] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 588.418773][T12170] do_filp_open+0x1fa/0x410 [ 588.418796][T12170] ? __lock_acquire+0xab9/0xd20 [ 588.418829][T12170] ? __pfx_do_filp_open+0x10/0x10 [ 588.418879][T12170] ? _raw_spin_unlock+0x28/0x50 [ 588.418909][T12170] ? alloc_fd+0x64c/0x6c0 [ 588.418950][T12170] do_sys_openat2+0x121/0x1c0 [ 588.418977][T12170] ? __pfx_do_sys_openat2+0x10/0x10 [ 588.419001][T12170] ? ksys_write+0x22a/0x250 [ 588.419038][T12170] __ia32_compat_sys_open+0x117/0x140 [ 588.419067][T12170] __do_fast_syscall_32+0xb6/0x2b0 [ 588.419092][T12170] ? lockdep_hardirqs_on+0x9c/0x150 [ 588.419119][T12170] do_fast_syscall_32+0x34/0x80 [ 588.419143][T12170] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 588.419168][T12170] RIP: 0023:0xf70ae539 [ 588.419185][T12170] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 588.419202][T12170] RSP: 002b:00000000f549e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 588.419223][T12170] RAX: ffffffffffffffda RBX: 0000000080000800 RCX: 0000000000002080 [ 588.419238][T12170] RDX: 0000000000000144 RSI: 0000000000000000 RDI: 0000000000000000 [ 588.419251][T12170] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 588.419263][T12170] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 588.419275][T12170] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 588.419304][T12170] [ 588.580003][ T5984] gspca_sonixj: reg_w1 err -110 [ 588.649708][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1543'. [ 588.666046][T12177] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1543'. [ 588.690630][ T5984] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 589.059900][T12186] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1544'. [ 589.059923][T12186] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1544'. [ 589.068233][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1540'. [ 589.427429][ T5984] usb 3-1: USB disconnect, device number 68 [ 590.031656][ T887] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 590.167030][T12195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1545'. [ 590.210226][ T887] usb 4-1: device descriptor read/64, error -71 [ 590.489975][ T887] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 590.671627][ T887] usb 4-1: device descriptor read/64, error -71 [ 590.904323][ T887] usb usb4-port1: attempt power cycle [ 591.319812][ T887] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 591.339729][ T5984] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 591.348569][ T887] usb 4-1: device descriptor read/8, error -71 [ 591.499662][ T5984] usb 6-1: Using ep0 maxpacket: 16 [ 591.540046][ T5984] usb 6-1: config 3 has an invalid interface number: 144 but max is 0 [ 591.574859][ T5984] usb 6-1: config 3 has no interface number 0 [ 591.601852][ T5984] usb 6-1: New USB device found, idVendor=0421, idProduct=02d9, bcdDevice=5c.1b [ 591.611516][ T5984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.620385][ T5984] usb 6-1: Product: syz [ 591.631206][T12211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1550'. [ 591.641086][ T887] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 591.649493][T12211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1550'. [ 591.668911][ T5984] usb 6-1: Manufacturer: syz [ 591.675532][T12211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1550'. [ 591.687569][ T5984] usb 6-1: SerialNumber: syz [ 591.696537][ T887] usb 4-1: device descriptor read/8, error -71 [ 591.704764][ T5984] usb 6-1: bad CDC descriptors [ 591.820963][ T887] usb usb4-port1: unable to enumerate USB device [ 591.830403][ T5864] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 591.944362][T12218] PKCS7: Unknown OID: [5] (bad) [ 591.949480][T12218] PKCS7: Only support pkcs7_signedData type [ 591.992845][ T5864] usb 3-1: Using ep0 maxpacket: 8 [ 592.001856][ T5864] usb 3-1: config 0 has an invalid interface number: 234 but max is 2 [ 592.012374][ T5864] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 592.023862][ T5864] usb 3-1: config 0 has no interface number 1 [ 592.034238][ T5864] usb 3-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=47.83 [ 592.047890][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.057971][ T5864] usb 3-1: Product: syz [ 592.064263][ T5864] usb 3-1: Manufacturer: syz [ 592.069013][ T5864] usb 3-1: SerialNumber: syz [ 592.077528][ T5864] usb 3-1: config 0 descriptor?? [ 592.089454][ T5864] usb 3-1: unknown number of interfaces: 2 [ 592.292253][T12213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.303335][ T5864] usb 3-1: USB disconnect, device number 69 [ 592.504832][ T5984] usb 6-1: USB disconnect, device number 32 [ 593.161132][T12249] FAULT_INJECTION: forcing a failure. [ 593.161132][T12249] name failslab, interval 1, probability 0, space 0, times 0 [ 593.190423][T12249] CPU: 1 UID: 0 PID: 12249 Comm: syz.3.1564 Not tainted syzkaller #0 PREEMPT(full) [ 593.190451][T12249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 593.190465][T12249] Call Trace: [ 593.190475][T12249] [ 593.190485][T12249] dump_stack_lvl+0x189/0x250 [ 593.190514][T12249] ? __pfx____ratelimit+0x10/0x10 [ 593.190537][T12249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 593.190561][T12249] ? __pfx__printk+0x10/0x10 [ 593.190594][T12249] ? __pfx___might_resched+0x10/0x10 [ 593.190614][T12249] ? fs_reclaim_acquire+0x7d/0x100 [ 593.190639][T12249] should_fail_ex+0x414/0x560 [ 593.190674][T12249] should_failslab+0xa8/0x100 [ 593.190706][T12249] kmem_cache_alloc_noprof+0x73/0x3c0 [ 593.190732][T12249] ? __kernfs_new_node+0xd7/0x7e0 [ 593.190771][T12249] __kernfs_new_node+0xd7/0x7e0 [ 593.190793][T12249] ? __lock_acquire+0xab9/0xd20 [ 593.190828][T12249] ? __pfx___kernfs_new_node+0x10/0x10 [ 593.190851][T12249] ? kernfs_root+0x1c/0x230 [ 593.190879][T12249] ? kernfs_root+0x1c/0x230 [ 593.190898][T12249] ? kernfs_root+0x1c/0x230 [ 593.190924][T12249] ? kernfs_root+0x1c/0x230 [ 593.190950][T12249] kernfs_new_node+0x102/0x210 [ 593.190978][T12249] __kernfs_create_file+0x4b/0x2e0 [ 593.191009][T12249] sysfs_add_file_mode_ns+0x238/0x300 [ 593.191047][T12249] sysfs_create_file_ns+0x128/0x1a0 [ 593.191084][T12249] ? __pfx___up_read+0x10/0x10 [ 593.191106][T12249] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 593.191139][T12249] ? __dev_fwnode+0x50/0x80 [ 593.191161][T12249] ? device_create_file+0xf4/0x1c0 [ 593.191186][T12249] device_add+0x440/0xb50 [ 593.191221][T12249] input_register_device+0x9d3/0x1140 [ 593.191260][T12249] uinput_create_device+0x422/0x670 [ 593.191295][T12249] uinput_ioctl_handler+0x3f0/0x1570 [ 593.191324][T12249] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 593.191363][T12249] ? __fget_files+0x2a/0x420 [ 593.191390][T12249] __ia32_compat_sys_ioctl+0x543/0x840 [ 593.191417][T12249] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 593.191442][T12249] ? __fget_files+0x3a0/0x420 [ 593.191466][T12249] ? fput+0xa0/0xd0 [ 593.191486][T12249] ? ksys_write+0x22a/0x250 [ 593.191521][T12249] ? lockdep_hardirqs_on+0x9c/0x150 [ 593.191544][T12249] __do_fast_syscall_32+0xb6/0x2b0 [ 593.191566][T12249] ? lockdep_hardirqs_on+0x9c/0x150 [ 593.191590][T12249] do_fast_syscall_32+0x34/0x80 [ 593.191617][T12249] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 593.191640][T12249] RIP: 0023:0xf70ae539 [ 593.191657][T12249] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 593.191674][T12249] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 593.191711][T12249] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000005501 [ 593.191724][T12249] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 593.191736][T12249] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 593.191748][T12249] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 593.191760][T12249] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 593.191790][T12249] [ 593.506482][ C1] vkms_vblank_simulate: vblank timer overrun [ 593.600716][ T5864] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 594.068291][ T5864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.130185][ T5864] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 594.160275][ T5864] usb 7-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 594.178319][ T5864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.204386][T12259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1563'. [ 594.259163][T12262] kvm: kvm [12261]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x9 [ 594.427912][ T5864] usb 7-1: config 0 descriptor?? [ 595.183161][T12272] FAULT_INJECTION: forcing a failure. [ 595.183161][T12272] name failslab, interval 1, probability 0, space 0, times 0 [ 595.201595][T12272] CPU: 1 UID: 0 PID: 12272 Comm: syz.5.1568 Not tainted syzkaller #0 PREEMPT(full) [ 595.201624][T12272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 595.201638][T12272] Call Trace: [ 595.201651][T12272] [ 595.201660][T12272] dump_stack_lvl+0x189/0x250 [ 595.201694][T12272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 595.201720][T12272] ? __pfx__printk+0x10/0x10 [ 595.201755][T12272] ? fs_reclaim_acquire+0x7d/0x100 [ 595.201784][T12272] should_fail_ex+0x414/0x560 [ 595.201820][T12272] should_failslab+0xa8/0x100 [ 595.201853][T12272] __kmalloc_noprof+0xcb/0x4f0 [ 595.201879][T12272] ? kfree+0x4d/0x440 [ 595.201903][T12272] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 595.201932][T12272] tomoyo_realpath_from_path+0xe3/0x5d0 [ 595.201957][T12272] ? tomoyo_domain+0xd9/0x130 [ 595.201992][T12272] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 595.202023][T12272] tomoyo_path_number_perm+0x1e8/0x5a0 [ 595.202057][T12272] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 595.202106][T12272] ? __lock_acquire+0xab9/0xd20 [ 595.202159][T12272] ? __fget_files+0x2a/0x420 [ 595.202184][T12272] ? __fget_files+0x3a0/0x420 [ 595.202201][T12272] ? __fget_files+0x2a/0x420 [ 595.202224][T12272] security_file_ioctl_compat+0xcb/0x2d0 [ 595.202257][T12272] __ia32_compat_sys_ioctl+0x128/0x840 [ 595.202288][T12272] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 595.202315][T12272] ? __fget_files+0x3a0/0x420 [ 595.202342][T12272] ? fput+0xa0/0xd0 [ 595.202364][T12272] ? ksys_write+0x22a/0x250 [ 595.202402][T12272] ? lockdep_hardirqs_on+0x9c/0x150 [ 595.202428][T12272] __do_fast_syscall_32+0xb6/0x2b0 [ 595.202453][T12272] ? lockdep_hardirqs_on+0x9c/0x150 [ 595.202479][T12272] do_fast_syscall_32+0x34/0x80 [ 595.202503][T12272] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 595.202529][T12272] RIP: 0023:0xf70ce539 [ 595.202546][T12272] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 595.202564][T12272] RSP: 002b:00000000f547c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 595.202585][T12272] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000004b72 [ 595.202599][T12272] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 595.202612][T12272] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 595.202624][T12272] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 595.202636][T12272] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 595.202666][T12272] [ 595.202727][T12272] ERROR: Out of memory at tomoyo_realpath_from_path. [ 595.918026][ T5864] usbhid 7-1:0.0: can't add hid device: -71 [ 595.928579][ T5864] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 595.980312][ T5864] usb 7-1: USB disconnect, device number 50 [ 596.725567][T12298] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1577'. [ 597.091243][ T5864] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 597.289941][ T5864] usb 6-1: device descriptor read/64, error -71 [ 597.588523][ T921] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 597.722356][ T5864] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 597.806879][ T921] usb 4-1: Using ep0 maxpacket: 32 [ 597.838525][ T921] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 597.859771][ T5864] usb 6-1: device descriptor read/64, error -71 [ 597.966348][T12319] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present [ 597.994630][ T921] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 598.003877][ T5864] usb usb6-port1: attempt power cycle [ 598.070559][ T921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.180060][ T921] usb 4-1: Product: syz [ 598.193642][ T921] usb 4-1: Manufacturer: syz [ 598.399689][ T5864] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 598.445670][ T921] usb 4-1: SerialNumber: syz [ 598.508857][ T921] usb 4-1: config 0 descriptor?? [ 598.571615][ T5864] usb 6-1: device descriptor read/8, error -71 [ 598.816673][ T24] usb 2-1: [UEAGLE-ATM] firmware is not available [ 598.836541][ T921] usb 4-1: bad CDC descriptors [ 598.903782][ T921] usb 4-1: unsupported MDLM descriptors [ 599.059759][ T5864] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 599.082982][ T5864] usb 6-1: device descriptor read/8, error -71 [ 599.190259][ T5864] usb usb6-port1: unable to enumerate USB device [ 599.478673][ T5951] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 599.659704][ T5951] usb 3-1: Using ep0 maxpacket: 8 [ 599.667750][ T5951] usb 3-1: config 0 has an invalid interface number: 178 but max is 0 [ 599.679192][ T5951] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.713631][ T5951] usb 3-1: config 0 has no interface number 0 [ 599.723297][ T5951] usb 3-1: config 0 interface 178 altsetting 0 endpoint 0x4 has invalid maxpacket 1289, setting to 64 [ 599.734963][ T5951] usb 3-1: config 0 interface 178 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 599.750556][ T5951] usb 3-1: New USB device found, idVendor=f755, idProduct=92f0, bcdDevice=ec.60 [ 599.769403][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.794095][ T5951] usb 3-1: Product: syz [ 599.803595][ T5951] usb 3-1: Manufacturer: syz [ 599.817892][ T5951] usb 3-1: SerialNumber: syz [ 599.887030][ T5951] usb 3-1: config 0 descriptor?? [ 600.042673][T12342] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1589'. [ 600.121819][ T5951] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 600.235707][ T5951] usb 3-1: USB disconnect, device number 70 [ 600.303056][ T5865] udevd[5865]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.178/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 600.341878][T12352] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1591'. [ 600.368053][T12352] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1591'. [ 600.760752][ T5864] usb 4-1: USB disconnect, device number 75 [ 602.210022][ T5877] Bluetooth: hci0: command 0x040f tx timeout [ 602.899847][ T5928] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 603.061192][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 603.079412][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 603.104077][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 603.143006][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 603.185981][ T5928] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 603.198072][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.224873][ T5928] usb 3-1: Product: syz [ 603.258454][ T5928] usb 3-1: Manufacturer: syz [ 603.270298][ T5928] usb 3-1: SerialNumber: syz [ 603.294666][ T5928] usb 3-1: config 0 descriptor?? [ 603.393662][ T5928] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input53 [ 603.433022][ C0] kbtab 3-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 603.736885][T12388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1601'. [ 604.132187][ T5928] usb 3-1: USB disconnect, device number 71 [ 604.663696][T12406] FAULT_INJECTION: forcing a failure. [ 604.663696][T12406] name failslab, interval 1, probability 0, space 0, times 0 [ 604.699352][T12406] CPU: 0 UID: 0 PID: 12406 Comm: syz.6.1607 Not tainted syzkaller #0 PREEMPT(full) [ 604.699382][T12406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 604.699395][T12406] Call Trace: [ 604.699404][T12406] [ 604.699414][T12406] dump_stack_lvl+0x189/0x250 [ 604.699445][T12406] ? __pfx____ratelimit+0x10/0x10 [ 604.699467][T12406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 604.699491][T12406] ? __pfx__printk+0x10/0x10 [ 604.699528][T12406] ? __pfx___might_resched+0x10/0x10 [ 604.699552][T12406] should_fail_ex+0x414/0x560 [ 604.699587][T12406] should_failslab+0xa8/0x100 [ 604.699618][T12406] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 604.699646][T12406] ? __alloc_skb+0x112/0x2d0 [ 604.699673][T12406] __alloc_skb+0x112/0x2d0 [ 604.699699][T12406] netlink_sendmsg+0x5c6/0xb30 [ 604.699731][T12406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.699756][T12406] ? __import_iovec+0x5d4/0x7f0 [ 604.699789][T12406] ? aa_sock_msg_perm+0xf1/0x1d0 [ 604.699812][T12406] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 604.699834][T12406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.699857][T12406] __sock_sendmsg+0x21c/0x270 [ 604.699891][T12406] ____sys_sendmsg+0x505/0x830 [ 604.699923][T12406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 604.699965][T12406] ___sys_sendmsg+0x21f/0x2a0 [ 604.699993][T12406] ? __pfx____sys_sendmsg+0x10/0x10 [ 604.700055][T12406] ? __fget_files+0x2a/0x420 [ 604.700072][T12406] ? __fget_files+0x3a0/0x420 [ 604.700102][T12406] __sys_sendmsg+0x164/0x220 [ 604.700129][T12406] ? __pfx___sys_sendmsg+0x10/0x10 [ 604.700170][T12406] ? lockdep_hardirqs_on+0x9c/0x150 [ 604.700195][T12406] __do_fast_syscall_32+0xb6/0x2b0 [ 604.700226][T12406] do_fast_syscall_32+0x34/0x80 [ 604.700249][T12406] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 604.700274][T12406] RIP: 0023:0xf7f01539 [ 604.700292][T12406] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 604.700309][T12406] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 604.700331][T12406] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001480 [ 604.700345][T12406] RDX: 0000000024040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 604.700358][T12406] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 604.700369][T12406] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 604.700381][T12406] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 604.700410][T12406] [ 604.739736][ T5928] usb 3-1: new low-speed USB device number 72 using dummy_hcd [ 605.128476][T12416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1609'. [ 605.143944][T12416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1609'. [ 605.271784][ T5928] usb 3-1: config 0 has an invalid interface number: 249 but max is 0 [ 605.280327][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.317679][ T5928] usb 3-1: config 0 has no interface number 0 [ 605.327193][ T5928] usb 3-1: config 0 interface 249 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 605.359934][ T5928] usb 3-1: config 0 interface 249 has no altsetting 0 [ 605.367105][ T5928] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=e8.47 [ 605.398912][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.442452][ T5928] usb 3-1: config 0 descriptor?? [ 605.461174][ T5928] qmi_wwan 3-1:0.249: skipping garbage [ 605.467799][ T5928] qmi_wwan 3-1:0.249: bogus CDC Union: master=0, slave=0 [ 605.560183][ T5951] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 605.649918][ T10] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 605.732491][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.755521][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.769109][ T5951] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 605.785670][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.808550][ T5951] usb 4-1: config 0 descriptor?? [ 605.814096][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 605.825480][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.856005][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.907610][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 606.014370][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.167252][ T10] usb 6-1: config 0 descriptor?? [ 606.198680][ T10] hub 6-1:0.0: USB hub found [ 606.449439][T12422] fuse: Bad value for 'fd' [ 606.456380][T12422] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1612'. [ 606.467179][T12422] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1612'. [ 606.489622][ T5984] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 606.681975][ T5984] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 606.704421][ T5984] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.735940][ T5984] usb 7-1: config 0 descriptor?? [ 606.765596][ T5984] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 607.373909][ T5984] gspca_cpia1: usb_control_msg 01, error -71 [ 607.406756][ T5928] usb 3-1: string descriptor 0 read error: -71 [ 607.423722][ T5928] qmi_wwan 3-1:0.249: probe with driver qmi_wwan failed with error -22 [ 607.431350][ T5984] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 607.486664][ T5984] usb 7-1: USB disconnect, device number 51 [ 607.500228][ T5928] usb 3-1: USB disconnect, device number 72 [ 607.556517][ T5951] uclogic 0003:256C:006D.001C: failed retrieving string descriptor #100: -71 [ 607.587499][ T5951] uclogic 0003:256C:006D.001C: failed retrieving pen parameters: -71 [ 607.607825][ T5951] uclogic 0003:256C:006D.001C: failed probing pen v1 parameters: -71 [ 607.620422][ T5951] uclogic 0003:256C:006D.001C: failed probing parameters: -71 [ 607.639043][ T5951] uclogic 0003:256C:006D.001C: probe with driver uclogic failed with error -71 [ 607.682208][ T5951] usb 4-1: USB disconnect, device number 76 [ 608.295063][ T5928] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 608.579112][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.604187][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.720913][ T5928] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 608.763196][ T5928] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 608.777979][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.801317][ T5928] usb 7-1: config 0 descriptor?? [ 609.209935][ T921] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 609.238820][ T5928] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 609.379599][ T921] usb 4-1: Using ep0 maxpacket: 16 [ 609.437564][ T921] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 609.461934][ T10] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 609.479447][ T921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 609.500509][ T5928] usb 7-1: USB disconnect, device number 52 [ 609.546258][ T921] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 609.564244][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 609.589152][ T921] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.32 [ 609.640346][ T921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.652370][ T921] usb 4-1: Product: syz [ 609.656581][ T921] usb 4-1: Manufacturer: syz [ 609.662390][ T921] usb 4-1: SerialNumber: syz [ 609.697377][ T921] usb 4-1: config 0 descriptor?? [ 609.702806][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 609.772140][T12452] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 609.783205][ T921] mceusb 4-1:0.0: mceusb_dev_probe: device setup failed! [ 609.802565][ T10] usb 6-1: USB disconnect, device number 37 [ 609.825541][ T921] mceusb 4-1:0.0: probe with driver mceusb failed with error -12 [ 609.910486][T12461] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1623'. [ 610.243406][T12456] fido_id[12456]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 610.315036][T12461] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.322604][T12461] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.395607][T12452] binder: 12448:12452 ioctl c0306201 800003c0 returned -14 [ 610.759819][ T5951] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 610.962023][ T5951] usb 7-1: Using ep0 maxpacket: 32 [ 611.009688][ T5951] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 611.043979][T12471] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1627'. [ 611.076949][ T5951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.119453][ T5951] usb 7-1: config 0 descriptor?? [ 611.337828][T12477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1628'. [ 611.357886][ T5951] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 611.379121][T12477] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1628'. [ 611.417882][ T5951] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 611.426929][ T5951] dib0700: firmware download failed at 7 with -22 [ 611.563149][ T921] usb 7-1: USB disconnect, device number 53 [ 612.106880][T12479] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1629'. [ 612.157302][ T921] usb 4-1: USB disconnect, device number 77 [ 612.203891][T12485] FAULT_INJECTION: forcing a failure. [ 612.203891][T12485] name failslab, interval 1, probability 0, space 0, times 0 [ 612.237756][T12485] CPU: 1 UID: 0 PID: 12485 Comm: syz.1.1639 Not tainted syzkaller #0 PREEMPT(full) [ 612.237782][T12485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 612.237794][T12485] Call Trace: [ 612.237801][T12485] [ 612.237809][T12485] dump_stack_lvl+0x189/0x250 [ 612.237835][T12485] ? __pfx____ratelimit+0x10/0x10 [ 612.237855][T12485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 612.237876][T12485] ? __pfx__printk+0x10/0x10 [ 612.237906][T12485] ? __pfx___might_resched+0x10/0x10 [ 612.237923][T12485] ? fs_reclaim_acquire+0x7d/0x100 [ 612.237945][T12485] should_fail_ex+0x414/0x560 [ 612.237978][T12485] should_failslab+0xa8/0x100 [ 612.238007][T12485] __kmalloc_noprof+0xcb/0x4f0 [ 612.238029][T12485] ? kfree+0x4d/0x440 [ 612.238048][T12485] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 612.238075][T12485] tomoyo_realpath_from_path+0xe3/0x5d0 [ 612.238097][T12485] ? tomoyo_domain+0xd9/0x130 [ 612.238122][T12485] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 612.238148][T12485] tomoyo_path_number_perm+0x1e8/0x5a0 [ 612.238177][T12485] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 612.238218][T12485] ? __lock_acquire+0xab9/0xd20 [ 612.238270][T12485] ? __fget_files+0x2a/0x420 [ 612.238311][T12485] ? __fget_files+0x3a0/0x420 [ 612.238327][T12485] ? __fget_files+0x2a/0x420 [ 612.238348][T12485] security_file_ioctl_compat+0xcb/0x2d0 [ 612.238374][T12485] __ia32_compat_sys_ioctl+0x128/0x840 [ 612.238399][T12485] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 612.238421][T12485] ? __fget_files+0x3a0/0x420 [ 612.238441][T12485] ? fput+0xa0/0xd0 [ 612.238459][T12485] ? ksys_write+0x22a/0x250 [ 612.238490][T12485] ? lockdep_hardirqs_on+0x9c/0x150 [ 612.238514][T12485] __do_fast_syscall_32+0xb6/0x2b0 [ 612.238537][T12485] ? lockdep_hardirqs_on+0x9c/0x150 [ 612.238561][T12485] do_fast_syscall_32+0x34/0x80 [ 612.238584][T12485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 612.238608][T12485] RIP: 0023:0xf7f14539 [ 612.238625][T12485] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 612.238641][T12485] RSP: 002b:00000000f53c455c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 612.238662][T12485] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004040ae79 [ 612.238675][T12485] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 612.238686][T12485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 612.238697][T12485] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 612.238709][T12485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 612.238738][T12485] [ 612.513943][T12485] ERROR: Out of memory at tomoyo_realpath_from_path. [ 613.690469][ T10] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 613.876634][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 613.920903][ T10] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 613.972898][ T10] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 613.986158][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.246404][ T10] usb 2-1: Product: syz [ 614.251343][ T10] usb 2-1: Manufacturer: syz [ 614.256344][ T10] usb 2-1: SerialNumber: syz [ 614.283665][ T10] usb 2-1: config 0 descriptor?? [ 614.661862][ T10] usb 2-1: bad CDC descriptors [ 614.686920][ T10] usb 2-1: unsupported MDLM descriptors [ 615.102963][T12522] tipc: Enabled bearer , priority 0 [ 615.110551][T12522] syzkaller0: entered promiscuous mode [ 615.116376][T12522] syzkaller0: entered allmulticast mode [ 615.163904][T12522] syzkaller0: mtu less than device minimum [ 615.220314][T12521] tipc: Resetting bearer [ 615.259096][T12521] tipc: Disabling bearer [ 616.075314][T12530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1643'. [ 616.096639][T12530] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1643'. [ 616.596545][T12542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1648'. [ 617.412072][ T921] usb 2-1: USB disconnect, device number 62 [ 617.849570][ T30] audit: type=1326 audit(1758839518.928:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.1.1649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 618.180019][ T30] audit: type=1326 audit(1758839518.928:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.1.1649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 618.210094][ T30] audit: type=1326 audit(1758839518.928:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.1.1649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 618.210145][ T30] audit: type=1326 audit(1758839518.928:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.1.1649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 618.210190][ T30] audit: type=1326 audit(1758839518.928:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.1.1649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 618.232408][ C1] vkms_vblank_simulate: vblank timer overrun [ 618.548553][ T30] audit: type=1326 audit(1758839518.968:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.1.1649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 618.682418][ T30] audit: type=1326 audit(1758839519.008:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.1.1649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 618.795293][ T30] audit: type=1326 audit(1758839519.008:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.1.1649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 619.042989][ T30] audit: type=1326 audit(1758839519.048:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.1.1649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 619.120019][ T30] audit: type=1326 audit(1758839519.058:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.1.1649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 621.041429][ T921] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 621.220070][ T921] usb 2-1: device descriptor read/64, error -71 [ 621.725421][ T921] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 621.870055][ T921] usb 2-1: device descriptor read/64, error -71 [ 621.999992][ T921] usb usb2-port1: attempt power cycle [ 622.365599][ T24] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 622.531875][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 622.549593][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 622.579561][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 622.619748][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 622.633281][ T5864] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 622.707420][ T24] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 622.717170][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.725612][ T921] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 622.744042][ T24] usb 7-1: Product: syz [ 622.748461][ T24] usb 7-1: Manufacturer: syz [ 622.753696][ T24] usb 7-1: SerialNumber: syz [ 622.771529][ T921] usb 2-1: device descriptor read/8, error -71 [ 622.778853][ T24] usb 7-1: config 0 descriptor?? [ 622.820144][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 622.841137][ T24] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input55 [ 622.853551][ T5864] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 622.871718][ T5864] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 622.887677][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.929901][ T5864] usb 3-1: Product: syz [ 622.967277][ T5864] usb 3-1: Manufacturer: syz [ 622.984435][ T5864] usb 3-1: SerialNumber: syz [ 623.049980][ T921] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 623.095873][ T5864] usb 3-1: config 0 descriptor?? [ 623.154890][ T5864] usb 3-1: bad CDC descriptors [ 623.160953][ T5864] usb 3-1: unsupported MDLM descriptors [ 623.179887][ T10] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 623.303683][ T921] usb 2-1: device not accepting address 66, error -71 [ 623.345579][ T921] usb usb2-port1: unable to enumerate USB device [ 623.470015][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 623.483246][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.499068][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 623.532972][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 623.560117][ T10] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=4d.a7 [ 623.583828][ T10] usb 6-1: New USB device strings: Mfr=152, Product=158, SerialNumber=3 [ 623.606736][ T10] usb 6-1: Product: syz [ 623.612938][ T10] usb 6-1: Manufacturer: syz [ 623.619881][ T10] usb 6-1: SerialNumber: syz [ 623.647151][ T10] usb 6-1: config 0 descriptor?? [ 623.665034][ T10] usb 6-1: no audio or video endpoints found [ 623.751355][ T10] usb 7-1: USB disconnect, device number 54 [ 623.832917][T12609] FAULT_INJECTION: forcing a failure. [ 623.832917][T12609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.846521][T12609] CPU: 1 UID: 0 PID: 12609 Comm: syz.3.1662 Not tainted syzkaller #0 PREEMPT(full) [ 623.846547][T12609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 623.846560][T12609] Call Trace: [ 623.846569][T12609] [ 623.846578][T12609] dump_stack_lvl+0x189/0x250 [ 623.846607][T12609] ? __pfx____ratelimit+0x10/0x10 [ 623.846630][T12609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 623.846654][T12609] ? __pfx__printk+0x10/0x10 [ 623.846683][T12609] ? __might_fault+0xb0/0x130 [ 623.846723][T12609] should_fail_ex+0x414/0x560 [ 623.846759][T12609] _copy_from_iter+0x1de/0x1790 [ 623.846789][T12609] ? __lock_acquire+0xab9/0xd20 [ 623.846826][T12609] ? __pfx__copy_from_iter+0x10/0x10 [ 623.846854][T12609] ? __up_read+0x280/0x680 [ 623.846879][T12609] ? __pfx___up_read+0x10/0x10 [ 623.846900][T12609] ? page_copy_sane+0x4e/0x280 [ 623.846926][T12609] copy_page_from_iter+0xdd/0x170 [ 623.846955][T12609] process_vm_rw+0x68b/0xaf0 [ 623.846994][T12609] ? __pfx_process_vm_rw+0x10/0x10 [ 623.847019][T12609] ? rcu_read_lock_any_held+0xb3/0x120 [ 623.847071][T12609] ? __pfx_vfs_write+0x10/0x10 [ 623.847140][T12609] ? ksys_write+0x22a/0x250 [ 623.847173][T12609] __ia32_sys_process_vm_writev+0xdf/0x100 [ 623.847204][T12609] __do_fast_syscall_32+0xb6/0x2b0 [ 623.847227][T12609] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.847252][T12609] do_fast_syscall_32+0x34/0x80 [ 623.847274][T12609] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 623.847297][T12609] RIP: 0023:0xf70ae539 [ 623.847314][T12609] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 623.847331][T12609] RSP: 002b:00000000f545c55c EFLAGS: 00000206 ORIG_RAX: 000000000000015c [ 623.847351][T12609] RAX: ffffffffffffffda RBX: 00000000000004c9 RCX: 0000000080000000 [ 623.847364][T12609] RDX: 0000000000000001 RSI: 0000000080000240 RDI: 0000000000000004 [ 623.847376][T12609] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 623.847387][T12609] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 623.847399][T12609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 623.847426][T12609] [ 624.373760][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.381438][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.507093][T12614] trusted_key: encrypted_key: master key parameter '' is invalid [ 624.569910][ T10] usb 7-1: new full-speed USB device number 55 using dummy_hcd [ 624.619915][ T24] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 624.747416][ T10] usb 7-1: config 0 has an invalid interface number: 48 but max is 0 [ 624.779716][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 624.790091][ T10] usb 7-1: config 0 has no interface number 0 [ 624.796399][ T10] usb 7-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 624.809692][ T10] usb 7-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 624.823027][ T10] usb 7-1: config 0 interface 48 has no altsetting 0 [ 624.847972][ T10] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 624.861494][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 624.901258][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 624.911773][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.915586][ T10] usb 7-1: config 0 descriptor?? [ 624.969952][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 625.025903][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.32 [ 625.059195][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.067878][ T24] usb 2-1: Product: syz [ 625.073802][ T24] usb 2-1: Manufacturer: syz [ 625.078778][ T24] usb 2-1: SerialNumber: syz [ 625.090174][ T24] usb 2-1: config 0 descriptor?? [ 625.097780][T12619] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 625.138514][ T24] mceusb 2-1:0.0: mceusb_dev_probe: device setup failed! [ 625.149230][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 625.157361][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 625.164976][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 625.172567][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 625.179833][ T10] usb 7-1: string descriptor 0 read error: -32 [ 625.186694][ T10] cp210x 7-1:0.48: cp210x converter detected [ 625.208603][ T10] cp210x 7-1:0.48: failed to get vendor val 0x370b size 1: -71 [ 625.222035][ T10] cp210x 7-1:0.48: querying part number failed [ 625.235472][ T10] usb 7-1: cp210x converter now attached to ttyUSB0 [ 625.257443][ T10] usb 7-1: USB disconnect, device number 55 [ 625.278464][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 625.295983][ T24] mceusb 2-1:0.0: probe with driver mceusb failed with error -12 [ 625.359590][ T24] usb 3-1: USB disconnect, device number 73 [ 625.398501][ T10] cp210x 7-1:0.48: device disconnected [ 625.453327][T12619] binder: BINDER_SET_CONTEXT_MGR already set [ 625.459421][T12619] binder: 12615:12619 ioctl 4018620d 80000040 returned -16 [ 625.472030][T12619] binder: 12615:12619 ioctl c0306201 800003c0 returned -14 [ 625.984534][ T5984] usb 6-1: USB disconnect, device number 38 [ 626.099240][T12632] netlink: 'syz.6.1669': attribute type 1 has an invalid length. [ 626.199972][ T921] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 626.377679][T12632] 8021q: adding VLAN 0 to HW filter on device bond3 [ 626.479274][ T921] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 626.488454][ T921] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 626.507031][ T921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 626.533475][ T921] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 626.563115][T12637] bond3: (slave veth7): Enslaving as an active interface with a down link [ 626.570333][ T921] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 626.649299][ T921] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 626.658966][ T921] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 626.681291][ T921] usb 4-1: Product: syz [ 626.723672][ T921] usb 4-1: Manufacturer: syz [ 626.760617][ T921] cdc_wdm 4-1:1.0: skipping garbage [ 626.784729][ T921] cdc_wdm 4-1:1.0: skipping garbage [ 626.826333][ T921] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 626.845685][ T921] cdc_wdm 4-1:1.0: Unknown control protocol [ 627.344957][ T921] usb 2-1: USB disconnect, device number 67 [ 628.344286][T12658] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1676'. [ 628.469793][T12661] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 628.620130][ T24] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 628.646187][T12664] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1679'. [ 628.802191][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 628.809554][ T24] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 628.818254][ T24] usb 2-1: config 0 has no interface number 0 [ 628.831367][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 628.853236][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.868744][ T24] usb 2-1: Product: syz [ 628.875914][ T921] usb 4-1: USB disconnect, device number 78 [ 628.896676][ T24] usb 2-1: Manufacturer: syz [ 628.920274][ T24] usb 2-1: SerialNumber: syz [ 628.951404][ T24] usb 2-1: config 0 descriptor?? [ 628.984894][ T24] smsc95xx v2.0.0 [ 629.381381][T12681] usb usb1: usbfs: process 12681 (syz.6.1684) did not claim interface 42 before use [ 629.463238][ T24] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 629.502490][ T24] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 629.834242][ T921] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 629.867171][ T24] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 629.878775][ T24] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 630.009618][ T921] usb 7-1: Using ep0 maxpacket: 16 [ 630.031486][ T921] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.086475][ T5935] usb 2-1: USB disconnect, device number 68 [ 630.128115][ T921] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.191379][T12694] FAULT_INJECTION: forcing a failure. [ 630.191379][T12694] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 630.204981][ T921] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 630.279054][T12694] CPU: 0 UID: 0 PID: 12694 Comm: syz.5.1688 Not tainted syzkaller #0 PREEMPT(full) [ 630.279081][T12694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 630.279093][T12694] Call Trace: [ 630.279101][T12694] [ 630.279110][T12694] dump_stack_lvl+0x189/0x250 [ 630.279137][T12694] ? __pfx____ratelimit+0x10/0x10 [ 630.279182][T12694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 630.279205][T12694] ? __pfx__printk+0x10/0x10 [ 630.279231][T12694] ? fs_reclaim_acquire+0x7d/0x100 [ 630.279256][T12694] should_fail_ex+0x414/0x560 [ 630.279288][T12694] prepare_alloc_pages+0x213/0x610 [ 630.279313][T12694] __alloc_frozen_pages_noprof+0x123/0x370 [ 630.279336][T12694] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 630.279366][T12694] ? policy_nodemask+0x27c/0x720 [ 630.279388][T12694] ? do_raw_spin_lock+0x121/0x290 [ 630.279417][T12694] alloc_pages_mpol+0x232/0x4a0 [ 630.279449][T12694] alloc_pages_noprof+0xa9/0x190 [ 630.279478][T12694] __pmd_alloc+0x3a/0x3b0 [ 630.279510][T12694] __handle_mm_fault+0x9ad/0x5440 [ 630.279550][T12694] ? __pfx___handle_mm_fault+0x10/0x10 [ 630.279594][T12694] ? __pfx___might_resched+0x10/0x10 [ 630.279615][T12694] handle_mm_fault+0x40a/0x8e0 [ 630.279652][T12694] __get_user_pages+0x1699/0x2ce0 [ 630.279710][T12694] get_user_pages_remote+0x2f1/0xad0 [ 630.279744][T12694] ? __pfx_get_user_pages_remote+0x10/0x10 [ 630.279765][T12694] ? down_read+0x1ad/0x2e0 [ 630.279790][T12694] ? mmap_read_lock_maybe_expand+0xc6/0x3c0 [ 630.279824][T12694] get_arg_page+0x104/0x330 [ 630.279846][T12694] ? __might_fault+0xb0/0x130 [ 630.279873][T12694] ? __pfx_get_arg_page+0x10/0x10 [ 630.279906][T12694] copy_string_kernel+0x191/0x2a0 [ 630.279935][T12694] do_execveat_common+0x3c5/0x6a0 [ 630.279971][T12694] __ia32_compat_sys_execve+0x99/0xb0 [ 630.280000][T12694] __do_fast_syscall_32+0xb6/0x2b0 [ 630.280022][T12694] ? lockdep_hardirqs_on+0x9c/0x150 [ 630.280046][T12694] do_fast_syscall_32+0x34/0x80 [ 630.280067][T12694] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 630.280089][T12694] RIP: 0023:0xf70ce539 [ 630.280107][T12694] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 630.280124][T12694] RSP: 002b:00000000f54be55c EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 630.280144][T12694] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000000000000 [ 630.280165][T12694] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 630.280177][T12694] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 630.280188][T12694] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 630.280200][T12694] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 630.280226][T12694] [ 630.551732][ T921] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 630.554789][T12696] netlink: 'syz.3.1689': attribute type 21 has an invalid length. [ 630.561289][ T921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.568732][T12696] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1689'. [ 630.585888][T12696] netlink: 'syz.3.1689': attribute type 5 has an invalid length. [ 630.593661][T12696] netlink: 'syz.3.1689': attribute type 6 has an invalid length. [ 630.601439][T12696] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1689'. [ 630.612582][ T921] usb 7-1: config 0 descriptor?? [ 630.856461][T12699] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1691'. [ 630.885521][T12699] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1691'. [ 631.539637][ T10] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 631.836879][ T5984] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 631.839157][ T921] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 632.100249][ T10] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 632.108617][ T10] usb 2-1: config 0 has no interface number 0 [ 632.119030][ T10] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 632.141772][ T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 632.152604][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.186415][ T10] usb 2-1: Product: syz [ 632.191101][ T921] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 632.204049][ T10] usb 2-1: Manufacturer: syz [ 632.209678][ T5984] usb 3-1: Using ep0 maxpacket: 32 [ 632.225897][ T10] usb 2-1: SerialNumber: syz [ 632.232030][ T921] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 632.250160][ T5984] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 632.277485][ T921] microsoft 0003:045E:07DA.001E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 632.291138][ T10] usb 2-1: config 0 descriptor?? [ 632.315624][ T5984] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 632.335266][ T921] microsoft 0003:045E:07DA.001E: no inputs found [ 632.363665][ T921] microsoft 0003:045E:07DA.001E: could not initialize ff, continuing anyway [ 632.388523][ T5984] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 632.430803][ T5984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.687658][T12728] sit1: entered allmulticast mode [ 632.779359][ T5984] usb 3-1: Product: syz [ 632.801307][ T5984] usb 3-1: Manufacturer: syz [ 632.989432][ T5984] usb 3-1: SerialNumber: syz [ 633.008921][ T5984] usb 3-1: config 0 descriptor?? [ 633.296832][ T24] usb 7-1: USB disconnect, device number 56 [ 633.392210][T12716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.410270][T12716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.040159][ T24] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 634.203260][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 634.236541][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 634.265760][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 634.317949][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 634.372428][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 634.437667][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 634.507717][ T24] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 634.518500][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.537693][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1699'. [ 634.561280][ T24] usb 7-1: Product: syz [ 634.579932][ T24] usb 7-1: Manufacturer: syz [ 634.597202][ T24] usb 7-1: SerialNumber: syz [ 634.622039][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1699'. [ 634.633176][ T24] usb 7-1: config 0 descriptor?? [ 635.049202][ T24] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 635.057060][ T24] input input58: Device does not respond to id packet M [ 635.087666][ T24] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 635.117412][ T24] input input58: Device does not respond to id packet P [ 635.146847][ T10] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 635.196582][ T10] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 635.222086][ T10] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 635.243420][ T10] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 635.267025][ T10] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 635.414065][ T5984] usb 3-1: USB disconnect, device number 74 [ 635.564549][ T10] usb 2-1: USB disconnect, device number 69 [ 635.612160][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 635.794848][ T10] keyspan 2-1:0.133: device disconnected [ 636.159316][ T30] audit: type=1326 audit(1758839537.218:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.2.1702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 636.215183][ T24] iforce 7-1:0.0: usb_submit_urb failed: -110 [ 636.235630][ T24] input input58: Device does not respond to id packet N [ 636.264535][ T24] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 636.287977][ T24] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 636.317776][ T30] audit: type=1326 audit(1758839537.218:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.2.1702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 636.345072][ T30] audit: type=1326 audit(1758839537.218:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.2.1702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 636.345767][ T24] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 636.467983][ T30] audit: type=1326 audit(1758839537.218:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.2.1702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 636.849841][ T30] audit: type=1326 audit(1758839537.218:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.2.1702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 636.869720][ T24] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 636.887314][ T24] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input58 [ 636.963262][ T30] audit: type=1326 audit(1758839537.218:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.2.1702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 636.984166][ T24] usb 7-1: USB disconnect, device number 57 [ 637.078398][ T30] audit: type=1326 audit(1758839537.228:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.2.1702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 637.101182][ T5984] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 637.159341][ T30] audit: type=1326 audit(1758839537.228:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.2.1702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 637.255156][ T30] audit: type=1326 audit(1758839537.228:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.2.1702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 637.300095][ T5984] usb 2-1: Using ep0 maxpacket: 8 [ 637.315785][ T5984] usb 2-1: unable to get BOS descriptor or descriptor too short [ 637.326294][ T5984] usb 2-1: config 4 interface 0 has no altsetting 0 [ 637.339863][ T5984] usb 2-1: string descriptor 0 read error: -22 [ 637.367237][ T30] audit: type=1326 audit(1758839537.238:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.2.1702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 637.390010][ T5984] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 637.410080][ T5984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.460933][ T5984] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 637.502681][ T5984] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 637.548575][ T5984] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 637.556760][ T5984] usb 2-1: media controller created [ 637.644279][ T5984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 637.953328][ T5984] usb 2-1: USB disconnect, device number 70 [ 638.643103][T12782] tipc: Enabled bearer , priority 0 [ 638.677581][T12778] syzkaller0: entered promiscuous mode [ 638.697383][T12778] syzkaller0: entered allmulticast mode [ 638.885792][T12778] tipc: Resetting bearer [ 638.914469][T12777] tipc: Resetting bearer [ 638.938764][T12777] tipc: Disabling bearer [ 639.571242][T12792] netlink: 'syz.5.1711': attribute type 1 has an invalid length. [ 639.649886][ T10] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 639.809766][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 639.816989][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.838649][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.864573][T12792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.869720][ T10] usb 7-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 639.899647][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.941361][ T10] usb 7-1: config 0 descriptor?? [ 640.391414][ T10] ntrig 0003:1B96:0008.001F: unknown main item tag 0x0 [ 640.410825][ T10] ntrig 0003:1B96:0008.001F: unknown main item tag 0x0 [ 640.429123][ T10] ntrig 0003:1B96:0008.001F: unknown main item tag 0x0 [ 640.443487][T12794] bond0: (slave veth3): Enslaving as an active interface with a down link [ 640.448758][ T10] ntrig 0003:1B96:0008.001F: unknown main item tag 0x0 [ 640.476110][ T10] ntrig 0003:1B96:0008.001F: unknown main item tag 0x0 [ 640.497449][ T10] ntrig 0003:1B96:0008.001F: unknown main item tag 0x0 [ 640.544991][ T10] ntrig 0003:1B96:0008.001F: unknown main item tag 0x0 [ 640.585494][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1715'. [ 640.602559][ T10] ntrig 0003:1B96:0008.001F: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.6-1/input0 [ 640.647932][ T10] ntrig 0003:1B96:0008.001F: Firmware version: 0.0.0.0.0 (0000 0000) [ 641.970076][T12820] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 641.982334][T12820] File: /dev/nullb0 PID: 12820 Comm: syz.2.1717 [ 642.845737][T12788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.870558][T12788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.028529][ T24] usb 7-1: USB disconnect, device number 58 [ 644.464481][T12857] input: syz0 as /devices/virtual/input/input59 [ 644.551927][T12851] FAULT_INJECTION: forcing a failure. [ 644.551927][T12851] name failslab, interval 1, probability 0, space 0, times 0 [ 644.611803][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1724'. [ 644.639784][T12851] CPU: 0 UID: 0 PID: 12851 Comm: syz.3.1727 Not tainted syzkaller #0 PREEMPT(full) [ 644.639809][T12851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 644.639821][T12851] Call Trace: [ 644.639829][T12851] [ 644.639838][T12851] dump_stack_lvl+0x189/0x250 [ 644.639866][T12851] ? __pfx____ratelimit+0x10/0x10 [ 644.639887][T12851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 644.639910][T12851] ? __pfx__printk+0x10/0x10 [ 644.639936][T12851] ? crng_make_state+0x3fc/0x700 [ 644.639964][T12851] ? crng_make_state+0x13a/0x700 [ 644.639994][T12851] should_fail_ex+0x414/0x560 [ 644.640028][T12851] should_failslab+0xa8/0x100 [ 644.640058][T12851] __kmalloc_cache_noprof+0x70/0x3d0 [ 644.640084][T12851] ? sctp_add_bind_addr+0x8c/0x370 [ 644.640107][T12851] sctp_add_bind_addr+0x8c/0x370 [ 644.640130][T12851] sctp_copy_local_addr_list+0x30b/0x4e0 [ 644.640163][T12851] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 644.640192][T12851] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 644.640226][T12851] ? sctp_v4_is_any+0x35/0x60 [ 644.640244][T12851] ? sctp_copy_one_addr+0x93/0x360 [ 644.640265][T12851] sctp_bind_addr_copy+0xb3/0x3c0 [ 644.640284][T12851] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 644.640315][T12851] sctp_connect_new_asoc+0x2e0/0x690 [ 644.640342][T12851] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 644.640367][T12851] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 644.640390][T12851] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 644.640411][T12851] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 644.640435][T12851] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 644.640462][T12851] __sctp_connect+0x5ba/0xd50 [ 644.640497][T12851] ? __pfx___sctp_connect+0x10/0x10 [ 644.640524][T12851] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 644.640546][T12851] ? security_sctp_bind_connect+0x7e/0x2e0 [ 644.640576][T12851] sctp_getsockopt_connectx3+0x2c4/0x440 [ 644.640599][T12851] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 644.640620][T12851] ? __local_bh_enable_ip+0x12d/0x1c0 [ 644.640652][T12851] sctp_getsockopt+0x98a/0xb60 [ 644.640673][T12851] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 644.640695][T12851] do_sock_getsockopt+0x36f/0x450 [ 644.640729][T12851] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 644.640751][T12851] ? lockdep_hardirqs_on+0x90/0x150 [ 644.640769][T12851] ? __fget_files+0x2a/0x420 [ 644.640786][T12851] ? __fget_files+0x3a0/0x420 [ 644.640801][T12851] ? __fget_files+0x2a/0x420 [ 644.640826][T12851] __ia32_sys_getsockopt+0x1a5/0x250 [ 644.640848][T12851] ? lockdep_hardirqs_on+0x90/0x150 [ 644.640869][T12851] ? lockdep_hardirqs_on+0x90/0x150 [ 644.640892][T12851] __do_fast_syscall_32+0xb6/0x2b0 [ 644.640914][T12851] ? lockdep_hardirqs_on+0x9c/0x150 [ 644.640937][T12851] do_fast_syscall_32+0x34/0x80 [ 644.640959][T12851] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 644.640982][T12851] RIP: 0023:0xf70ae539 [ 644.640998][T12851] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 644.641014][T12851] RSP: 002b:00000000f549e55c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 644.641034][T12851] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000084 [ 644.641046][T12851] RDX: 000000000000006f RSI: 00000000800000c0 RDI: 0000000080000100 [ 644.641059][T12851] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 644.641070][T12851] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 644.641081][T12851] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 644.641109][T12851] [ 644.992695][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.021844][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 645.021861][ T30] audit: type=1326 audit(1758839546.108:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.6.1726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 645.050198][ T30] audit: type=1326 audit(1758839546.108:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.6.1726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 645.075021][ T30] audit: type=1326 audit(1758839546.108:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.6.1726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=23 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 645.097387][ T30] audit: type=1326 audit(1758839546.108:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.6.1726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 645.130420][ T30] audit: type=1326 audit(1758839546.108:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.6.1726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 645.152806][ T30] audit: type=1326 audit(1758839546.108:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.6.1726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 645.174798][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.186175][ T30] audit: type=1326 audit(1758839546.108:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.6.1726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 645.208176][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.061530][T12876] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1735'. [ 646.227964][T12879] netlink: 'syz.3.1734': attribute type 7 has an invalid length. [ 646.236035][T12879] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1734'. [ 646.290226][T12886] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1734'. [ 646.357317][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1733'. [ 647.066667][T12899] input: syz1 as /devices/virtual/input/input60 [ 651.860417][ T5951] usb 7-1: new full-speed USB device number 59 using dummy_hcd [ 652.055142][ T5951] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 652.080502][ T5951] usb 7-1: config 0 has no interface number 0 [ 652.098504][ T5951] usb 7-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 652.149747][T12970] usb usb1: usbfs: process 12970 (syz.2.1754) did not claim interface 42 before use [ 652.279149][ T5951] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 652.302136][ T5951] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.327798][ T5951] usb 7-1: Product: syz [ 652.469692][ T5951] usb 7-1: Manufacturer: syz [ 652.483083][ T5951] usb 7-1: SerialNumber: syz [ 652.497511][ T5951] usb 7-1: config 0 descriptor?? [ 652.520649][ T887] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 652.552751][T12968] netlink: 154 bytes leftover after parsing attributes in process `syz.5.1758'. [ 652.700114][ T887] usb 3-1: Using ep0 maxpacket: 16 [ 652.717510][ T887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.749013][ T887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.791838][ T887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 652.887455][T12983] sit2: entered allmulticast mode [ 653.169629][ T887] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 653.178814][ T887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.197797][ T887] usb 3-1: config 0 descriptor?? [ 653.287753][T12985] FAULT_INJECTION: forcing a failure. [ 653.287753][T12985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.315353][T12985] CPU: 1 UID: 0 PID: 12985 Comm: syz.1.1762 Not tainted syzkaller #0 PREEMPT(full) [ 653.315382][T12985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 653.315395][T12985] Call Trace: [ 653.315404][T12985] [ 653.315413][T12985] dump_stack_lvl+0x189/0x250 [ 653.315441][T12985] ? __pfx____ratelimit+0x10/0x10 [ 653.315463][T12985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.315486][T12985] ? __pfx__printk+0x10/0x10 [ 653.315514][T12985] ? __might_fault+0xb0/0x130 [ 653.315553][T12985] should_fail_ex+0x414/0x560 [ 653.315587][T12985] _copy_from_user+0x2d/0xb0 [ 653.315614][T12985] get_compat_msghdr+0xad/0x4a0 [ 653.315642][T12985] ? __pfx_get_compat_msghdr+0x10/0x10 [ 653.315679][T12985] ___sys_sendmsg+0x193/0x2a0 [ 653.315706][T12985] ? __pfx____sys_sendmsg+0x10/0x10 [ 653.315766][T12985] ? __fget_files+0x2a/0x420 [ 653.315782][T12985] ? __fget_files+0x3a0/0x420 [ 653.315810][T12985] __sys_sendmsg+0x164/0x220 [ 653.315846][T12985] ? __pfx___sys_sendmsg+0x10/0x10 [ 653.315886][T12985] ? lockdep_hardirqs_on+0x9c/0x150 [ 653.315909][T12985] __do_fast_syscall_32+0xb6/0x2b0 [ 653.315933][T12985] ? lockdep_hardirqs_on+0x9c/0x150 [ 653.315957][T12985] do_fast_syscall_32+0x34/0x80 [ 653.315979][T12985] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 653.316003][T12985] RIP: 0023:0xf7f14539 [ 653.316020][T12985] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 653.316036][T12985] RSP: 002b:00000000f540655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 653.316057][T12985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 653.316070][T12985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 653.316082][T12985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 653.316093][T12985] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 653.316105][T12985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 653.316131][T12985] [ 654.125862][ T887] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 654.134425][ T887] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 654.159135][ T887] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 654.208045][ T887] microsoft 0003:045E:07DA.0020: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 654.261857][ T887] microsoft 0003:045E:07DA.0020: no inputs found [ 654.283576][ T887] microsoft 0003:045E:07DA.0020: could not initialize ff, continuing anyway [ 654.875069][ T5951] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 654.908125][ T5951] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 654.941736][ T5951] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 655.005514][ T5951] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 655.032871][ T5951] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 655.056493][ T5951] usb 7-1: USB disconnect, device number 59 [ 655.104767][ T5951] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 655.152167][ T5951] keyspan 7-1:0.133: device disconnected [ 655.829629][ T24] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 655.909718][ T5951] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 655.997884][ T24] usb 4-1: config 0 has no interfaces? [ 656.023203][ T24] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 656.039026][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.066387][ T24] usb 4-1: Product: syz [ 656.075228][ T24] usb 4-1: Manufacturer: syz [ 656.091680][ T24] usb 4-1: SerialNumber: syz [ 656.109329][ T24] usb 4-1: config 0 descriptor?? [ 656.125138][ T5951] usb 2-1: Using ep0 maxpacket: 16 [ 656.197678][ T5951] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 656.232283][ T5984] usb 3-1: USB disconnect, device number 75 [ 656.249964][ T5951] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 656.292847][ T5951] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 656.376211][ T5951] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 656.436156][ T5951] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 656.436211][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.436230][ T5951] usb 2-1: Product: syz [ 656.436244][ T5951] usb 2-1: Manufacturer: syz [ 656.436257][ T5951] usb 2-1: SerialNumber: syz [ 656.445611][ T5951] usb 2-1: bad CDC descriptors [ 656.516875][T13008] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1768'. [ 656.555090][ T5984] usb 4-1: USB disconnect, device number 79 [ 656.653476][ T10] usb 2-1: USB disconnect, device number 71 [ 657.506943][T13050] FAULT_INJECTION: forcing a failure. [ 657.506943][T13050] name failslab, interval 1, probability 0, space 0, times 0 [ 657.527782][T13050] CPU: 1 UID: 0 PID: 13050 Comm: syz.3.1782 Not tainted syzkaller #0 PREEMPT(full) [ 657.527810][T13050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 657.527822][T13050] Call Trace: [ 657.527829][T13050] [ 657.527838][T13050] dump_stack_lvl+0x189/0x250 [ 657.527877][T13050] ? __pfx____ratelimit+0x10/0x10 [ 657.527896][T13050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 657.527917][T13050] ? __pfx__printk+0x10/0x10 [ 657.527946][T13050] ? __pfx___might_resched+0x10/0x10 [ 657.527970][T13050] should_fail_ex+0x414/0x560 [ 657.528002][T13050] should_failslab+0xa8/0x100 [ 657.528032][T13050] __kmalloc_noprof+0xcb/0x4f0 [ 657.528056][T13050] ? sock_kmalloc+0xd6/0x160 [ 657.528085][T13050] sock_kmalloc+0xd6/0x160 [ 657.528111][T13050] af_alg_alloc_areq+0x8d/0x260 [ 657.528139][T13050] skcipher_recvmsg+0x359/0x11d0 [ 657.528170][T13050] ? aa_sk_perm+0x81e/0x950 [ 657.528213][T13050] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 657.528243][T13050] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 657.528262][T13050] ? security_socket_recvmsg+0x7e/0x2e0 [ 657.528285][T13050] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 657.528312][T13050] sock_recvmsg+0x22c/0x270 [ 657.528344][T13050] sock_read_iter+0x231/0x2f0 [ 657.528372][T13050] ? __pfx_sock_read_iter+0x10/0x10 [ 657.528408][T13050] ? bpf_lsm_file_permission+0x9/0x20 [ 657.528429][T13050] ? security_file_permission+0x75/0x290 [ 657.528467][T13050] vfs_read+0x55a/0xa30 [ 657.528500][T13050] ? __pfx_vfs_read+0x10/0x10 [ 657.528552][T13050] ? __fget_files+0x2a/0x420 [ 657.528579][T13050] ksys_read+0x145/0x250 [ 657.528607][T13050] ? __pfx_ksys_read+0x10/0x10 [ 657.528636][T13050] ? lockdep_hardirqs_on+0x9c/0x150 [ 657.528660][T13050] __do_fast_syscall_32+0xb6/0x2b0 [ 657.528684][T13050] ? lockdep_hardirqs_on+0x9c/0x150 [ 657.528708][T13050] do_fast_syscall_32+0x34/0x80 [ 657.528730][T13050] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 657.528754][T13050] RIP: 0023:0xf70ae539 [ 657.528771][T13050] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 657.528788][T13050] RSP: 002b:00000000f549e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 657.528809][T13050] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800012c0 [ 657.528823][T13050] RDX: 000000000000100d RSI: 0000000000000000 RDI: 0000000000000000 [ 657.528834][T13050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 657.528845][T13050] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 657.528867][T13050] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 657.528910][T13050] [ 658.492813][ T5864] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 658.697096][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.754751][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.806258][ T5864] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 658.842107][T13063] batadv0: entered promiscuous mode [ 658.847982][T13063] vlan0: entered promiscuous mode [ 658.853150][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.884742][ T5864] usb 4-1: config 0 descriptor?? [ 659.155067][T13071] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1790'. [ 659.199701][ T5984] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 659.310533][T13077] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1789'. [ 659.359970][ T5984] usb 6-1: Using ep0 maxpacket: 16 [ 659.371671][ T5984] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 659.393365][ T5864] cm6533_jd 0003:0D8C:0022.0021: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 659.408027][ T5984] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 659.441589][ T5984] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 659.464713][ T5984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.492201][ T5984] usb 6-1: Product: syz [ 659.670149][ T5984] usb 6-1: Manufacturer: syz [ 659.927446][ T5984] usb 6-1: SerialNumber: syz [ 660.037097][T13089] netlink: 'syz.1.1793': attribute type 1 has an invalid length. [ 660.063513][T13089] 8021q: adding VLAN 0 to HW filter on device bond3 [ 660.102538][ T10] usb 4-1: USB disconnect, device number 80 [ 661.783723][ T5984] usb 6-1: 0:2 : does not exist [ 661.846436][ T5984] usb 6-1: USB disconnect, device number 39 [ 662.128300][ T7771] udevd[7771]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 662.383285][T13110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1800'. [ 662.394813][T13114] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1802'. [ 662.493751][ T5984] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 662.620975][ T30] audit: type=1326 audit(1758839563.708:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13120 comm="syz.1.1805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 662.642999][ C0] vkms_vblank_simulate: vblank timer overrun [ 662.686016][ T30] audit: type=1326 audit(1758839563.708:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13120 comm="syz.1.1805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 662.708148][ C0] vkms_vblank_simulate: vblank timer overrun [ 662.714903][ T5984] usb 6-1: Using ep0 maxpacket: 8 [ 662.726559][ T30] audit: type=1326 audit(1758839563.708:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13120 comm="syz.1.1805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 662.750959][ T5984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.762258][ T5984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.772842][ T5984] usb 6-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 662.796877][ T5984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.808574][ T30] audit: type=1326 audit(1758839563.708:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13120 comm="syz.1.1805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 662.833950][ T5984] usb 6-1: config 0 descriptor?? [ 662.839298][ T30] audit: type=1326 audit(1758839563.708:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13120 comm="syz.1.1805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 662.862829][ T30] audit: type=1326 audit(1758839563.708:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13120 comm="syz.1.1805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 662.886962][ T30] audit: type=1326 audit(1758839563.708:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13120 comm="syz.1.1805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 662.909000][ C0] vkms_vblank_simulate: vblank timer overrun [ 662.916220][ T30] audit: type=1326 audit(1758839563.708:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13120 comm="syz.1.1805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 662.938305][ C0] vkms_vblank_simulate: vblank timer overrun [ 662.946166][ T30] audit: type=1326 audit(1758839563.708:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13120 comm="syz.1.1805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 662.969098][ T30] audit: type=1326 audit(1758839563.718:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13120 comm="syz.1.1805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 662.991360][ C0] vkms_vblank_simulate: vblank timer overrun [ 663.124767][T13130] netlink: 'syz.2.1808': attribute type 1 has an invalid length. [ 663.301151][ T5984] uclogic 0003:5543:0004.0022: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.5-1/input0 [ 663.492945][T13108] netlink: 'syz.5.1799': attribute type 1 has an invalid length. [ 663.622468][T13108] bond1: entered promiscuous mode [ 663.730129][T13108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 663.777068][T13141] : renamed from bridge_slave_0 (while UP) [ 663.877833][T13140] 8021q: adding VLAN 0 to HW filter on device bond2 [ 663.908980][T13140] bond1: (slave bond2): making interface the new active one [ 663.916827][T13140] bond2: entered promiscuous mode [ 663.927752][T13140] bond1: (slave bond2): Enslaving as an active interface with an up link [ 663.953532][ T5864] usb 6-1: USB disconnect, device number 40 [ 664.302291][T13151] netlink: 'syz.3.1813': attribute type 3 has an invalid length. [ 664.328712][T13151] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1813'. [ 664.607406][T13159] netlink: 'syz.5.1816': attribute type 1 has an invalid length. [ 665.266688][T13171] binder: BINDER_SET_CONTEXT_MGR already set [ 665.274102][T13171] binder: 13156:13171 ioctl 40046207 0 returned -16 [ 665.394679][T13159] 8021q: adding VLAN 0 to HW filter on device bond3 [ 665.680676][T13161] bond3: (slave veth5): Enslaving as an active interface with a down link [ 665.987318][T13165] vlan0: entered allmulticast mode [ 666.059914][T13165] veth1: entered allmulticast mode [ 666.073639][T13165] veth1: entered promiscuous mode [ 666.124849][T13165] veth1: left promiscuous mode [ 666.163722][T13165] bond3: (slave vlan0): making interface the new active one [ 666.266511][T13165] veth1: entered promiscuous mode [ 666.340908][T13165] vlan0: entered promiscuous mode [ 666.389430][T13165] bond3: (slave vlan0): Enslaving as an active interface with an up link [ 666.408522][T13175] netlink: 'syz.3.1817': attribute type 1 has an invalid length. [ 667.259703][ T5984] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 667.419838][ T5984] usb 7-1: device descriptor read/64, error -71 [ 667.839955][ T5984] usb 7-1: new full-speed USB device number 61 using dummy_hcd [ 668.061009][ T5984] usb 7-1: device descriptor read/64, error -71 [ 668.175564][ T5984] usb usb7-port1: attempt power cycle [ 668.418375][T13204] nvme_fabrics: missing parameter 'transport=%s' [ 668.427679][T13204] nvme_fabrics: missing parameter 'nqn=%s' [ 668.427747][ T10] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 668.529724][ T5864] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 668.549869][ T5984] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 668.582961][ T5984] usb 7-1: device descriptor read/8, error -71 [ 668.717973][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 668.726134][ T10] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 668.740596][ T10] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 668.753947][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.766986][ T10] usb 6-1: Product: syz [ 668.774341][ T10] usb 6-1: Manufacturer: syz [ 668.779913][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 668.781325][ T10] usb 6-1: SerialNumber: syz [ 668.794071][ T5864] usb 3-1: config 0 has an invalid descriptor of length 171, skipping remainder of the config [ 668.809592][ T5864] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 668.819072][ T10] usb 6-1: config 0 descriptor?? [ 668.824604][ T5984] usb 7-1: new full-speed USB device number 63 using dummy_hcd [ 668.931823][ T5864] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 668.935855][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 668.958562][ T5984] usb 7-1: device descriptor read/8, error -71 [ 668.961714][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.969605][ T10] usb 6-1: setting power ON [ 668.983823][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 669.008756][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 669.026098][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 669.035046][ T10] usb 6-1: media controller created [ 669.050733][ T5864] usb 3-1: config 0 descriptor?? [ 669.083021][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 669.091921][ T5984] usb usb7-port1: unable to enumerate USB device [ 669.144262][T13219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.153003][T13219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.554068][ T10] usb 6-1: selecting invalid altsetting 6 [ 669.610556][ T10] usb 6-1: digital interface selection failed (-22) [ 669.647673][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 669.671083][ T10] usb 6-1: setting power OFF [ 669.689953][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 669.729385][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 669.778330][ T10] (NULL device *): no alternate interface [ 669.884428][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 669.952377][ T10] usb 6-1: USB disconnect, device number 41 [ 669.989823][ T5984] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 670.330408][ T5984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.364122][ T5984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.380880][ T5984] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 670.427592][ T5984] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 670.487695][ T5984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.508628][ T5984] usb 4-1: config 0 descriptor?? [ 670.934485][ T5984] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 670.943780][ T5984] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 670.951629][ T5984] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 670.961848][ T5984] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 670.969647][ T5984] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 670.977194][ T5984] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 671.179821][ T5984] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 671.217527][ T5984] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 671.237490][ T5984] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 671.286942][ T5984] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 671.287457][ T5864] usb 3-1: USB disconnect, device number 76 [ 671.395644][ T5984] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 671.556679][ T5984] usb 4-1: USB disconnect, device number 81 [ 671.650189][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1840'. [ 671.700392][T13260] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1840'. [ 671.709648][T13260] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1840'. [ 672.238972][T13273] FAULT_INJECTION: forcing a failure. [ 672.238972][T13273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.306546][T13273] CPU: 1 UID: 0 PID: 13273 Comm: syz.2.1845 Not tainted syzkaller #0 PREEMPT(full) [ 672.306576][T13273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 672.306589][T13273] Call Trace: [ 672.306597][T13273] [ 672.306606][T13273] dump_stack_lvl+0x189/0x250 [ 672.306635][T13273] ? __pfx____ratelimit+0x10/0x10 [ 672.306656][T13273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 672.306678][T13273] ? __pfx__printk+0x10/0x10 [ 672.306706][T13273] ? __might_fault+0xb0/0x130 [ 672.306744][T13273] should_fail_ex+0x414/0x560 [ 672.306778][T13273] _copy_from_user+0x2d/0xb0 [ 672.306804][T13273] get_compat_msghdr+0xad/0x4a0 [ 672.306834][T13273] ? __pfx_get_compat_msghdr+0x10/0x10 [ 672.306869][T13273] ___sys_sendmsg+0x193/0x2a0 [ 672.306897][T13273] ? __pfx____sys_sendmsg+0x10/0x10 [ 672.306954][T13273] ? __fget_files+0x2a/0x420 [ 672.306973][T13273] ? __fget_files+0x3a0/0x420 [ 672.307000][T13273] __sys_sendmsg+0x164/0x220 [ 672.307027][T13273] ? __pfx___sys_sendmsg+0x10/0x10 [ 672.307066][T13273] ? lockdep_hardirqs_on+0x9c/0x150 [ 672.307089][T13273] __do_fast_syscall_32+0xb6/0x2b0 [ 672.307113][T13273] ? lockdep_hardirqs_on+0x9c/0x150 [ 672.307137][T13273] do_fast_syscall_32+0x34/0x80 [ 672.307159][T13273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 672.307183][T13273] RIP: 0023:0xf708e539 [ 672.307224][T13273] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 672.307243][T13273] RSP: 002b:00000000f547e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 672.307264][T13273] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 672.307279][T13273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 672.307291][T13273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 672.307303][T13273] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 672.307315][T13273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 672.307344][T13273] [ 672.511703][ T5864] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 672.682648][ T5864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.693923][ T5864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.704259][ T5864] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 672.713640][ T5864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.724858][ T5864] usb 7-1: config 0 descriptor?? [ 673.274812][ T5864] cm6533_jd 0003:0D8C:0022.0024: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 673.563936][T13300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1852'. [ 673.681035][T13300] bridge_slave_1: left allmulticast mode [ 673.689675][T13300] bridge_slave_1: left promiscuous mode [ 673.698243][T13300] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.732705][T13300] bridge_slave_0: left allmulticast mode [ 673.758470][T13300] bridge_slave_0: left promiscuous mode [ 673.807824][T13300] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.878742][ T5984] usb 7-1: USB disconnect, device number 64 [ 674.795621][T13318] netlink: 'syz.3.1855': attribute type 1 has an invalid length. [ 675.417274][T13325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1857'. [ 675.429548][T13325] bridge_slave_1: left allmulticast mode [ 675.435884][T13325] bridge_slave_1: left promiscuous mode [ 675.457658][T13325] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.556298][T13325] bridge_slave_0: left allmulticast mode [ 675.582432][T13325] bridge_slave_0: left promiscuous mode [ 675.588486][T13325] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.727157][ T5984] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 675.923164][ T5984] usb 7-1: Using ep0 maxpacket: 8 [ 675.932780][ T5984] usb 7-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 675.958211][ T5984] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.004131][ T5984] usb 7-1: config 0 descriptor?? [ 676.792075][T13348] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1864'. [ 678.046338][T13360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1868'. [ 678.063178][T13360] Invalid logical block size (4) [ 678.279729][T10016] Bluetooth: hci0: command 0x040f tx timeout [ 678.285870][T13336] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 678.300079][T13336] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 678.330824][ T10] usb 7-1: USB disconnect, device number 65 [ 678.501477][T13377] input: syz0 as /devices/virtual/input/input62 [ 678.549724][ T5984] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 678.729619][ T5984] usb 2-1: Using ep0 maxpacket: 32 [ 678.781773][ T59] vlan0: left promiscuous mode [ 678.789206][ T5984] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 678.824888][ T5984] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 678.861530][ T5984] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 678.874016][ T5984] usb 2-1: config 1 has no interface number 0 [ 678.889073][ T5984] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 678.953990][ T5984] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 678.989951][ T5984] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 678.999445][ T5984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.037814][ T5984] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 679.252421][ T5984] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 679.445644][T13369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1870'. [ 679.521048][T13369] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 679.528812][T13369] IPv6: NLM_F_CREATE should be set when creating new route [ 679.827642][ T5864] usb 2-1: USB disconnect, device number 72 [ 679.874839][T13392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1876'. [ 679.903220][T13392] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1876'. [ 679.930665][T13392] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1876'. [ 679.934939][ T5864] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 680.596510][T13397] FAULT_INJECTION: forcing a failure. [ 680.596510][T13397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.671232][T13397] CPU: 1 UID: 0 PID: 13397 Comm: syz.5.1878 Not tainted syzkaller #0 PREEMPT(full) [ 680.671262][T13397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 680.671275][T13397] Call Trace: [ 680.671281][T13397] [ 680.671288][T13397] dump_stack_lvl+0x189/0x250 [ 680.671311][T13397] ? __pfx____ratelimit+0x10/0x10 [ 680.671337][T13397] ? __pfx_dump_stack_lvl+0x10/0x10 [ 680.671354][T13397] ? __pfx__printk+0x10/0x10 [ 680.671375][T13397] ? __might_fault+0xb0/0x130 [ 680.671404][T13397] should_fail_ex+0x414/0x560 [ 680.671431][T13397] _copy_from_user+0x2d/0xb0 [ 680.671451][T13397] kstrtouint_from_user+0xc4/0x170 [ 680.671470][T13397] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 680.671499][T13397] proc_fail_nth_write+0x88/0x200 [ 680.671516][T13397] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 680.671540][T13397] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 680.671559][T13397] vfs_write+0x27e/0xb30 [ 680.671587][T13397] ? __pfx_vfs_write+0x10/0x10 [ 680.671620][T13397] ? __ia32_compat_sys_wait4+0x17d/0x1e0 [ 680.671654][T13397] ? count_memcg_event_mm+0x21/0x260 [ 680.671675][T13397] ? __pfx___ia32_compat_sys_wait4+0x10/0x10 [ 680.671705][T13397] ksys_write+0x145/0x250 [ 680.671732][T13397] ? __pfx_ksys_write+0x10/0x10 [ 680.671755][T13397] ? lockdep_hardirqs_on+0x9c/0x150 [ 680.671774][T13397] __do_fast_syscall_32+0xb6/0x2b0 [ 680.671792][T13397] ? lockdep_hardirqs_on+0x9c/0x150 [ 680.671810][T13397] do_fast_syscall_32+0x34/0x80 [ 680.671827][T13397] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 680.671846][T13397] RIP: 0023:0xf70ce539 [ 680.671859][T13397] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 680.671872][T13397] RSP: 002b:00000000f54be590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 680.671889][T13397] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54be620 [ 680.671899][T13397] RDX: 0000000000000001 RSI: 00000000f7465ff4 RDI: 0000000000000000 [ 680.671909][T13397] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 680.671918][T13397] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 680.671927][T13397] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 680.671948][T13397] [ 680.901949][ C1] vkms_vblank_simulate: vblank timer overrun [ 681.570251][ T5864] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 681.637028][T13429] fuse: Bad value for 'user_id' [ 681.642363][T13429] fuse: Bad value for 'user_id' [ 681.749717][ T5864] usb 6-1: Using ep0 maxpacket: 8 [ 681.758943][ T5864] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.774006][ T5864] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.812750][ T5864] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.905793][ T5864] usb 6-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 681.915568][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.010298][ T5864] usb 6-1: Product: syz [ 682.014520][ T5864] usb 6-1: Manufacturer: syz [ 682.019139][ T5864] usb 6-1: SerialNumber: syz [ 682.134960][ T5864] usb 6-1: config 0 descriptor?? [ 682.170069][ T5864] redrat3 6-1:0.0: Couldn't find all endpoints [ 682.273476][T13438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 682.436597][T13438] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1889'. [ 682.454431][T13438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1889'. [ 682.918162][T13448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1890'. [ 683.122511][ T5984] usb 6-1: USB disconnect, device number 42 [ 683.484985][T13453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1893'. [ 683.550946][T13453] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1893'. [ 684.037309][T13465] netlink: 'syz.3.1895': attribute type 1 has an invalid length. [ 684.148989][T13465] 8021q: adding VLAN 0 to HW filter on device bond4 [ 684.401215][T13469] bond4: (slave veth9): Enslaving as an active interface with a down link [ 684.560145][ T10] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 685.169605][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 685.198420][ T10] usb 2-1: config 4 has an invalid interface number: 27 but max is 0 [ 685.229823][ T10] usb 2-1: config 4 has no interface number 0 [ 685.247008][ T10] usb 2-1: config 4 interface 27 has no altsetting 0 [ 685.288936][ T10] usb 2-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 685.312923][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.358092][ T10] usb 2-1: Product: syz [ 685.546104][ T10] usb 2-1: Manufacturer: syz [ 685.569584][ T10] usb 2-1: SerialNumber: syz [ 685.804498][ T10] usb 2-1: USB disconnect, device number 73 [ 685.810884][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.817172][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.285124][T13499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1901'. [ 686.739276][T13510] binder: BINDER_SET_CONTEXT_MGR already set [ 686.739310][T13510] binder: 13500:13510 ioctl 40046207 0 returned -16 [ 687.066174][T13511] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1904'. [ 687.279674][ T24] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 687.656376][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.656405][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.656433][ T24] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 687.656458][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.665927][ T24] usb 6-1: config 0 descriptor?? [ 688.156158][ T24] cm6533_jd 0003:0D8C:0022.0025: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 689.679729][ T10] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 689.809896][ T24] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 689.839757][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 689.846762][ T10] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 689.857021][ T10] usb 7-1: config 0 has no interface number 0 [ 689.867805][ T10] usb 7-1: config 0 interface 184 has no altsetting 0 [ 689.883357][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 689.892504][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.900872][ T10] usb 7-1: Product: syz [ 689.905060][ T10] usb 7-1: Manufacturer: syz [ 689.909979][ T10] usb 7-1: SerialNumber: syz [ 689.916931][ T10] usb 7-1: config 0 descriptor?? [ 689.927209][ T10] smsc75xx v1.0.0 [ 689.952745][ T5935] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 689.980391][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 690.004877][ T24] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 690.026195][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.071491][ T24] usb 4-1: Product: syz [ 690.083594][ T24] usb 4-1: Manufacturer: syz [ 690.121669][ T5935] usb 3-1: device descriptor read/64, error -71 [ 690.133800][ T24] usb 4-1: SerialNumber: syz [ 690.142591][ T24] usb 4-1: config 0 descriptor?? [ 690.166411][ T24] pegasus_notetaker 4-1:0.0: Invalid number of endpoints [ 690.174380][ T24] pegasus_notetaker 4-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 690.293470][ T887] usb 6-1: USB disconnect, device number 43 [ 690.410281][ T5935] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 690.590048][ T5935] usb 3-1: device descriptor read/64, error -71 [ 690.703202][ T5935] usb usb3-port1: attempt power cycle [ 690.778409][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 690.789594][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 691.071614][ T5935] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 691.220043][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 691.230835][ T5935] usb 3-1: device descriptor read/8, error -71 [ 691.259170][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 691.283354][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 691.371623][ T10] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 691.420633][ T10] usb 7-1: USB disconnect, device number 66 [ 691.470099][ T5935] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 691.492342][ T5935] usb 3-1: device descriptor read/8, error -71 [ 691.611724][ T5935] usb usb3-port1: unable to enumerate USB device [ 691.900719][ T887] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 691.999606][ T9] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 692.082085][ T887] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 692.130945][ T887] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 692.215451][ T9] usb 2-1: device descriptor read/64, error -71 [ 692.231248][ T887] usb 6-1: config 1 interface 0 has no altsetting 0 [ 692.254951][ T887] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 692.265684][ T887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.276538][ T887] usb 6-1: Product: syz [ 692.284470][ T887] usb 6-1: Manufacturer: syz [ 692.289957][ T887] usb 6-1: SerialNumber: syz [ 692.306933][T13552] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 692.314691][T13552] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 692.469792][ T9] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 692.609722][ T9] usb 2-1: device descriptor read/64, error -71 [ 692.631984][ T5984] usb 4-1: USB disconnect, device number 82 [ 692.740250][ T9] usb usb2-port1: attempt power cycle [ 693.044707][T13571] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1924'. [ 693.124769][ T9] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 693.150374][ T9] usb 2-1: device descriptor read/8, error -71 [ 693.250730][ T887] rtl8150 6-1:1.0: couldn't reset the device [ 693.322438][ T887] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 693.389631][ T9] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 693.423358][ T9] usb 2-1: device descriptor read/8, error -71 [ 693.540156][ T9] usb usb2-port1: unable to enumerate USB device [ 693.659366][ T887] usb 6-1: USB disconnect, device number 44 [ 694.960044][ T5935] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 695.166165][ T5935] usb 3-1: config 0 has no interfaces? [ 695.173981][ T5935] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 695.208610][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.281751][ T5935] usb 3-1: config 0 descriptor?? [ 695.328640][T13607] FAULT_INJECTION: forcing a failure. [ 695.328640][T13607] name failslab, interval 1, probability 0, space 0, times 0 [ 695.405475][T13607] CPU: 1 UID: 0 PID: 13607 Comm: syz.5.1933 Not tainted syzkaller #0 PREEMPT(full) [ 695.405514][T13607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 695.405531][T13607] Call Trace: [ 695.405544][T13607] [ 695.405556][T13607] dump_stack_lvl+0x189/0x250 [ 695.405600][T13607] ? __pfx____ratelimit+0x10/0x10 [ 695.405631][T13607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 695.405665][T13607] ? __pfx__printk+0x10/0x10 [ 695.405715][T13607] ? __pfx___might_resched+0x10/0x10 [ 695.405741][T13607] ? fs_reclaim_acquire+0x7d/0x100 [ 695.405775][T13607] should_fail_ex+0x414/0x560 [ 695.405832][T13607] should_failslab+0xa8/0x100 [ 695.405869][T13607] kmem_cache_alloc_noprof+0x73/0x3c0 [ 695.405898][T13607] ? vm_area_dup+0x2b/0x680 [ 695.405923][T13607] vm_area_dup+0x2b/0x680 [ 695.405947][T13607] __split_vma+0x1a9/0xa00 [ 695.405983][T13607] ? __pfx___split_vma+0x10/0x10 [ 695.406018][T13607] ? can_vma_merge_right+0x12a/0x720 [ 695.406052][T13607] vma_modify+0x12c3/0x1970 [ 695.406078][T13607] ? walk_page_range_mm+0x570/0x660 [ 695.406117][T13607] vma_modify_policy+0x1e8/0x230 [ 695.406144][T13607] ? __pfx_vma_modify_policy+0x10/0x10 [ 695.406192][T13607] mbind_range+0x2bb/0x800 [ 695.406221][T13607] __se_sys_mbind+0x730/0xc30 [ 695.406248][T13607] ? __pfx_vfs_write+0x10/0x10 [ 695.406279][T13607] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 695.406304][T13607] ? __pfx___se_sys_mbind+0x10/0x10 [ 695.406354][T13607] ? __ia32_sys_mbind+0x21/0xf0 [ 695.406383][T13607] __do_fast_syscall_32+0xb6/0x2b0 [ 695.406410][T13607] ? lockdep_hardirqs_on+0x9c/0x150 [ 695.406434][T13607] do_fast_syscall_32+0x34/0x80 [ 695.406457][T13607] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 695.406482][T13607] RIP: 0023:0xf70ce539 [ 695.406498][T13607] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 695.406515][T13607] RSP: 002b:00000000f54be55c EFLAGS: 00000206 ORIG_RAX: 0000000000000112 [ 695.406538][T13607] RAX: ffffffffffffffda RBX: 0000000080001000 RCX: 0000000000800000 [ 695.406552][T13607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 695.406585][T13607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 695.406598][T13607] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 695.406611][T13607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 695.406641][T13607] [ 696.002148][ T9] usb 3-1: USB disconnect, device number 81 [ 697.068117][T13652] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1944'. [ 697.093622][T13652] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1944'. [ 698.355670][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1950'. [ 698.365178][T13667] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1950'. [ 699.449434][T13674] FAULT_INJECTION: forcing a failure. [ 699.449434][T13674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.463835][T13674] CPU: 1 UID: 0 PID: 13674 Comm: syz.2.1952 Not tainted syzkaller #0 PREEMPT(full) [ 699.463864][T13674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 699.463878][T13674] Call Trace: [ 699.463888][T13674] [ 699.463898][T13674] dump_stack_lvl+0x189/0x250 [ 699.463929][T13674] ? __pfx____ratelimit+0x10/0x10 [ 699.463952][T13674] ? __pfx_dump_stack_lvl+0x10/0x10 [ 699.463979][T13674] ? __pfx__printk+0x10/0x10 [ 699.464009][T13674] ? __might_fault+0xb0/0x130 [ 699.464051][T13674] should_fail_ex+0x414/0x560 [ 699.464089][T13674] _copy_from_user+0x2d/0xb0 [ 699.464119][T13674] sctp_getsockopt_default_sndinfo+0xbb/0x640 [ 699.464147][T13674] ? __pfx_sctp_getsockopt_default_sndinfo+0x10/0x10 [ 699.464191][T13674] sctp_getsockopt+0x366/0xb60 [ 699.464215][T13674] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 699.464243][T13674] do_sock_getsockopt+0x36f/0x450 [ 699.464274][T13674] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 699.464299][T13674] ? lockdep_hardirqs_on+0x90/0x150 [ 699.464320][T13674] ? __fget_files+0x2a/0x420 [ 699.464339][T13674] ? __fget_files+0x3a0/0x420 [ 699.464357][T13674] ? __fget_files+0x2a/0x420 [ 699.464384][T13674] __ia32_sys_getsockopt+0x1a5/0x250 [ 699.464410][T13674] ? lockdep_hardirqs_on+0x90/0x150 [ 699.464433][T13674] ? lockdep_hardirqs_on+0x90/0x150 [ 699.464459][T13674] __do_fast_syscall_32+0xb6/0x2b0 [ 699.464485][T13674] ? lockdep_hardirqs_on+0x9c/0x150 [ 699.464512][T13674] do_fast_syscall_32+0x34/0x80 [ 699.464537][T13674] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 699.464563][T13674] RIP: 0023:0xf708e539 [ 699.464581][T13674] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 699.464599][T13674] RSP: 002b:00000000f547e55c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 699.464621][T13674] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 699.464636][T13674] RDX: 0000000000000022 RSI: 00000000800001c0 RDI: 0000000080000340 [ 699.464650][T13674] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 699.464663][T13674] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 699.464676][T13674] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 699.464713][T13674] [ 701.722464][T13721] netlink: 'syz.5.1966': attribute type 10 has an invalid length. [ 701.967778][T13721] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.975083][T13721] bridge0: port 2(bridge_slave_1) entered listening state [ 701.983759][T13721] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.990960][T13721] bridge0: port 1(bridge_slave_0) entered listening state [ 702.027452][T13721] .223333: (slave bridge0): Enslaving as an active interface with an up link [ 702.130456][ T12] ------------[ cut here ]------------ [ 702.136412][ T12] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 702.151669][ T12] WARNING: CPU: 1 PID: 12 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x303/0x350 [ 702.162041][ T12] Modules linked in: [ 702.166302][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 702.175955][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 702.186191][ T12] Workqueue: bond0 bond_mii_monitor [ 702.191968][ T12] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 702.197996][ T12] Code: 7c fe ff ff e8 fe 89 53 f8 c6 05 7b 7d 21 06 01 90 48 c7 c7 20 d7 94 8c 48 c7 c6 38 16 a0 8d ba 48 00 00 00 e8 ae 26 17 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 702.218071][ T12] RSP: 0018:ffffc90000117670 EFLAGS: 00010246 [ 702.224233][ T12] RAX: b9d4755a28ea1a00 RBX: ffff88807f904000 RCX: ffff88801cecda00 [ 702.232474][ T12] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 702.241514][ T12] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 702.249946][ T12] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: 1ffff1100ff2085d [ 702.257962][ T12] R13: dffffc0000000000 R14: ffffffff8c1d00c8 R15: 0000000000000000 [ 702.266551][ T12] FS: 0000000000000000(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 702.275880][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 702.282669][ T12] CR2: 00000000335f1ffc CR3: 000000000df36000 CR4: 00000000003526f0 [ 702.290928][ T12] Call Trace: [ 702.294219][ T12] [ 702.297409][ T12] ? ethtool_op_get_link+0xd/0x70 [ 702.302496][ T12] ethtool_op_get_link+0x15/0x70 [ 702.307443][ T12] bond_check_dev_link+0x447/0x6c0 [ 702.312903][ T12] ? __pfx_bond_check_dev_link+0x10/0x10 [ 702.318564][ T12] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 702.325021][ T12] bond_mii_monitor+0x428/0x2e00 [ 702.330245][ T12] ? bond_mii_monitor+0x153/0x2e00 [ 702.335396][ T12] ? __pfx_bond_mii_monitor+0x10/0x10 [ 702.340821][ T12] ? register_lock_class+0x51/0x320 [ 702.346044][ T12] ? __lock_acquire+0xab9/0xd20 [ 702.351196][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 702.356958][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 702.362217][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 702.367998][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 702.373984][ T12] process_scheduled_works+0xae1/0x17b0 [ 702.379646][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 702.385763][ T12] worker_thread+0x8a0/0xda0 [ 702.390669][ T12] kthread+0x70e/0x8a0 [ 702.394750][ T12] ? __pfx_worker_thread+0x10/0x10 [ 702.399926][ T12] ? __pfx_kthread+0x10/0x10 [ 702.404528][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 702.410137][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 702.415344][ T12] ? __pfx_kthread+0x10/0x10 [ 702.419971][ T12] ret_from_fork+0x439/0x7d0 [ 702.424563][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 702.429941][ T12] ? __switch_to_asm+0x39/0x70 [ 702.434800][ T12] ? __switch_to_asm+0x33/0x70 [ 702.439694][ T12] ? __pfx_kthread+0x10/0x10 [ 702.444307][ T12] ret_from_fork_asm+0x1a/0x30 [ 702.449127][ T12] [ 702.452414][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 702.459701][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 702.468986][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 702.479039][ T12] Workqueue: bond0 bond_mii_monitor [ 702.484363][ T12] Call Trace: [ 702.487643][ T12] [ 702.490576][ T12] dump_stack_lvl+0x99/0x250 [ 702.495168][ T12] ? __asan_memcpy+0x40/0x70 [ 702.499773][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 702.504992][ T12] ? __pfx__printk+0x10/0x10 [ 702.509626][ T12] vpanic+0x281/0x750 [ 702.513645][ T12] ? __pfx__printk+0x10/0x10 [ 702.518243][ T12] ? __pfx_vpanic+0x10/0x10 [ 702.522777][ T12] ? is_bpf_text_address+0x292/0x2b0 [ 702.528081][ T12] panic+0xb9/0xc0 [ 702.531811][ T12] ? __pfx_panic+0x10/0x10 [ 702.536250][ T12] __warn+0x31b/0x4b0 [ 702.540237][ T12] ? __linkwatch_sync_dev+0x303/0x350 [ 702.545642][ T12] ? __linkwatch_sync_dev+0x303/0x350 [ 702.551015][ T12] report_bug+0x2be/0x4f0 [ 702.555346][ T12] ? __linkwatch_sync_dev+0x303/0x350 [ 702.560809][ T12] ? __linkwatch_sync_dev+0x303/0x350 [ 702.566188][ T12] ? __linkwatch_sync_dev+0x305/0x350 [ 702.571564][ T12] handle_bug+0x84/0x160 [ 702.575813][ T12] exc_invalid_op+0x1a/0x50 [ 702.580330][ T12] asm_exc_invalid_op+0x1a/0x20 [ 702.585203][ T12] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 702.591189][ T12] Code: 7c fe ff ff e8 fe 89 53 f8 c6 05 7b 7d 21 06 01 90 48 c7 c7 20 d7 94 8c 48 c7 c6 38 16 a0 8d ba 48 00 00 00 e8 ae 26 17 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 702.610801][ T12] RSP: 0018:ffffc90000117670 EFLAGS: 00010246 [ 702.616875][ T12] RAX: b9d4755a28ea1a00 RBX: ffff88807f904000 RCX: ffff88801cecda00 [ 702.624854][ T12] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 702.632828][ T12] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 702.640891][ T12] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: 1ffff1100ff2085d [ 702.648863][ T12] R13: dffffc0000000000 R14: ffffffff8c1d00c8 R15: 0000000000000000 [ 702.656853][ T12] ? ethtool_op_get_link+0xd/0x70 [ 702.661915][ T12] ethtool_op_get_link+0x15/0x70 [ 702.666879][ T12] bond_check_dev_link+0x447/0x6c0 [ 702.672020][ T12] ? __pfx_bond_check_dev_link+0x10/0x10 [ 702.677669][ T12] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 702.684114][ T12] bond_mii_monitor+0x428/0x2e00 [ 702.689072][ T12] ? bond_mii_monitor+0x153/0x2e00 [ 702.694227][ T12] ? __pfx_bond_mii_monitor+0x10/0x10 [ 702.699620][ T12] ? register_lock_class+0x51/0x320 [ 702.704858][ T12] ? __lock_acquire+0xab9/0xd20 [ 702.709748][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 702.715499][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 702.720709][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 702.726442][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 702.732184][ T12] process_scheduled_works+0xae1/0x17b0 [ 702.737763][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 702.743773][ T12] worker_thread+0x8a0/0xda0 [ 702.748442][ T12] kthread+0x70e/0x8a0 [ 702.752526][ T12] ? __pfx_worker_thread+0x10/0x10 [ 702.757643][ T12] ? __pfx_kthread+0x10/0x10 [ 702.762256][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 702.767465][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 702.772669][ T12] ? __pfx_kthread+0x10/0x10 [ 702.777268][ T12] ret_from_fork+0x439/0x7d0 [ 702.781864][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 702.786980][ T12] ? __switch_to_asm+0x39/0x70 [ 702.791754][ T12] ? __switch_to_asm+0x33/0x70 [ 702.796533][ T12] ? __pfx_kthread+0x10/0x10 [ 702.801135][ T12] ret_from_fork_asm+0x1a/0x30 [ 702.806010][ T12] [ 702.809560][ T12] Kernel Offset: disabled [ 702.813921][ T12] Rebooting in 86400 seconds..