last executing test programs: 4m41.055355316s ago: executing program 1 (id=54): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3f) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3f) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) (async) 4m40.813915954s ago: executing program 1 (id=55): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12070000000000010902120071e1b5f2997ce75cfc3d9295049500"/36], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000140)={&(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0}, {0xf001, 0x16210, 0x0, 0x0}], 0x2}) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRESDEC=r2, @ANYRES32=r0, @ANYRES32=r3, @ANYRES8=r2, @ANYRES64=r1, @ANYRES64=r1, @ANYBLOB="b740de2a2092d729d6669a4a0048b235e8a9f8d2c9ce82d317656d506d5c260eb56ce1b65b7c94e27a5301306c42792d577e42815dc3a12f2c67987e55c4015fa24d2f018338900cf48c6f0fd467e372f52235587e50fc9fe7bb508162f98011012306f80fbe7bd559d8fdfc3f3cab2164e5f0bf046760d0b2dbc826f37d5a014784bc4ed413c856c2c82af06e6a28a1ea93f7c55373da3c7270d0032a650e509662"], 0x22) socket$inet6_udplite(0xa, 0x2, 0x88) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x400000d) sched_setattr(0x0, &(0x7f0000000000)={0x47, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x1000000000003, 0xfffffe0000000001, 0x1400, 0xffffffff}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e00)='/sys/kernel/crash_elfcorehdr_size', 0x0, 0x0) read(r6, &(0x7f00000003c0)=""/118, 0x76) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r7}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48000) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0xfffffffffffffd6b, &(0x7f0000000100)={0x0}}, 0x2000c041) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20004084) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m37.471297825s ago: executing program 1 (id=71): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbmon(&(0x7f0000000040), 0xf47c, 0x2c0000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r4, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}]}, 0x74}, 0x1, 0x0, 0x0, 0x8880}, 0x4) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2e) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000340)="b9360a00000f3266b864008ee8263e0f01cbdcb500000100c4e2fd2315d24f0000c4c189e235000000000f01c9f30f2123f75bc8360f32", 0x37}], 0x1, 0x46, &(0x7f0000000300)=[@flags={0x3, 0x14000}, @flags={0x3, 0x40000}], 0x2) 4m36.838159658s ago: executing program 1 (id=73): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x650, 0x0, 0xa, 0x148, 0x0, 0x10, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2=0xe000000b, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x7a, 0x8000000, 0x0, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x64, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_bond\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x6b0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) syz_fuse_handle_req(r6, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f000000c0c0)="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", 0x2000, &(0x7f0000000d00)={&(0x7f00000080c0)={0x50, 0x0, 0x2000000000000000, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000008140)="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", 0x2000, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x3, 0x40000000000000, 0x0, 0x4, 0x0, 0x7572, {0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0xffffffff, 0x4, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f000000e0c0)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x90, 0x0, 0x0, {0x3, 0x0, 0x200001, 0x0, 0x0, 0x10001, {0xffffffffffffffff, 0x3, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x8, 0xffffffffffffffff, 0xffffffffffffffff, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x50, r1, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x44151}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000b40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x40, r1, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x40, 0x63}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8f}]}, 0x40}}, 0x4810) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x99, 0xba, 0x20, 0x50d, 0x121, 0x659, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdf, 0xb9, 0xaf}}]}}]}}, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7}}}}}]}}]}}, 0x0) link(&(0x7f0000000b80)='./file0/file0\x00', &(0x7f0000000bc0)='./file0\x00') syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x7, 0x8, {0x8, 0xd, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4f2, 0x418, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc9, 0xe0, 0x7, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x7, 0x2, 0x1, {0x22, 0xef5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xd4, 0x73, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x1, 0x7}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x9, 0x7, 0x40, 0x8, 0xfc}, 0xb2, &(0x7f0000000140)={0x5, 0xf, 0xb2, 0x5, [@generic={0xd, 0x10, 0x3, "26aad61bc70c03da519d"}, @generic={0x7b, 0x10, 0x5, "69995319fa38b2122cca14b0f4cd8b2f3ec51122c3c5f40da2256e716f27a92582df0d1289f0680c082a0b3f6fbe2f37815ad7e5e08300a32a0cb0b262153238e335ade51a8184679104897204549268fe6ecf1c20d7eab265d4b8c669f83a341180142e9bcc4381995f196211b30b275b37793da2bf79d4"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x9, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6e, 0x7, 0x7fff}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x5, 0xf000, 0x1, [0xff0030, 0xffc03f]}]}, 0x9, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x83e}}, {0xc4, &(0x7f00000002c0)=@string={0xc4, 0x3, "2cf49255a5ba613e198e70c66245c3bca0d2326b0d31d62091f283b78d1d2f14ab9d334c9af9c0b5acc15bfff07bdb09b0ab6031da537a3919b2deea7383bc7d9f75b04194f63194048d995d8d5e2dd23f0af07d5fac308b1567e3a1d7e33c32a5f4cac35d405b12aafc368ecdf1c2db55142afd326199588b4ab937169b0fe9544309710a8eca563b7a33de4f9db9d9a042c55c11b56b927e7489da2902902ab0ea922f579dfab9d8f8fc06cadf054697c77a78b44edfd718728491a99d50ab9352"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x43e}}]}) syz_usb_control_io$hid(r9, &(0x7f0000000780)={0x24, &(0x7f0000000680)={0x40, 0x22, 0x75, {0x75, 0x23, "3e64f62600bfb7511eb3124626222c076ea6de1a52553685abdbe1cf9fc6dadeaa01ca0a8a7273134083d69f08fce8cdd9e87d64384ae96ab165869f4fec587659f6701587c1af9cac9c372c16e10685af4ddcf047c10dfe605c86ec55d1b96fe9f3a623fca8b48267e9bc9df3e361cdb6726c"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}, &(0x7f0000000b00)={0x0, 0x22, 0x11, {[@global=@item_4={0x3, 0x1, 0x7, "4d07abbc"}, @local=@item_4={0x3, 0x2, 0x7, "04906c10"}, @local, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_012={0x2, 0x2, 0x7, "bc63"}, @global=@item_012={0x1, 0x1, 0xb, "14"}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x7, 0x1, {0x22, 0x72}}}}, &(0x7f0000000ac0)={0x2c, &(0x7f00000007c0)={0x60, 0xf, 0xf2, "d12fccc1bb70b766a1efc82cc1632860168f877eb49e29b0c0de8ea26734d40afc85d56263b093ea9688ee8ae1d279cf79fbadd788608c18c1cb63736bc6c3c53c85e111314c758322326292a844966ccf2ef9654e3cc5c8a9bff74a110f6a15dd8371b97d8225d37ead42d53d414ea1199628262fed879b81f0978a5a8aba4cc523988e551389194a630f14a455e43c8a197be4adac793ec615cddbe7498ce0487d3e63287a1211b8720418b5ec1ff54779e85d71990e23c9136bcf00770fa558e628205225cc1fb9477bf1812706245c790c0ce69e8adb32993ac249774f30a72ee6b5655090b90409a2e39eceebe15609"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000940)={0x20, 0x1, 0xff, "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"}, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x7f}}) 4m33.776280168s ago: executing program 1 (id=85): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r2, &(0x7f0000000080)=ANY=[], 0x40) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0xc6, 0x1e, 0x40, 0x7c9, 0x12, 0xc2f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xcb, 0x8e, 0x2f, 0x0, [], [{{0x9, 0x5, 0xf}}, {{0x9, 0x5, 0xd}}, {{0x9, 0x5, 0x9}}]}}]}}]}}, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c050) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000240)=0x0) setpriority(0x0, r8, 0x5b9a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x20000000) r9 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r9, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, 0x0) r10 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r10, 0x29, 0x39, &(0x7f0000000040)="ff0204000affffffffffffffff1f2be82db1af0000000000", 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) 4m33.455255918s ago: executing program 1 (id=86): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) setsockopt$packet_int(r2, 0x107, 0x11, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0301000004020000000000000000000000000000f5c2cfff16d479c02f5e607e92714124281d5d375aa8111f4c7ce1ad69bbafdeaeae7cd817fa6341d18b8c88545611d2466b42baa19101223ca3bbccc0611f7d65081913472cb6bd972b495ebf70651befaf731af31d75a2f6a2d2fb18cbc9214b34fb4f0e94d13b56112daf4e3df8f80c66abe23f801db1cb72936072f27248021994c8105761e2ed8c6fb204caf2132c", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000002e000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) io_uring_enter(0xffffffffffffffff, 0x80007a98, 0x0, 0x0, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000100)=ANY=[@ANYRES64=r8, @ANYRES8=r6, @ANYRES64=r6, @ANYRES64=r0, @ANYRES32, @ANYRESHEX, @ANYRES64=r12, @ANYRES16, @ANYRES32=r5], 0x310) 4m32.840894875s ago: executing program 32 (id=86): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) setsockopt$packet_int(r2, 0x107, 0x11, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0301000004020000000000000000000000000000f5c2cfff16d479c02f5e607e92714124281d5d375aa8111f4c7ce1ad69bbafdeaeae7cd817fa6341d18b8c88545611d2466b42baa19101223ca3bbccc0611f7d65081913472cb6bd972b495ebf70651befaf731af31d75a2f6a2d2fb18cbc9214b34fb4f0e94d13b56112daf4e3df8f80c66abe23f801db1cb72936072f27248021994c8105761e2ed8c6fb204caf2132c", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000002e000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) io_uring_enter(0xffffffffffffffff, 0x80007a98, 0x0, 0x0, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000100)=ANY=[@ANYRES64=r8, @ANYRES8=r6, @ANYRES64=r6, @ANYRES64=r0, @ANYRES32, @ANYRESHEX, @ANYRES64=r12, @ANYRES16, @ANYRES32=r5], 0x310) 13.847792147s ago: executing program 4 (id=1063): socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) syz_genetlink_get_family_id$ethtool(0x0, r0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x80045b09, 0x0) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) shutdown(0xffffffffffffffff, 0x1) syz_emit_ethernet(0x6c, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa1208004500005e00000000002f907800000000000000002480655800000000100008000005039e0fff000086dd080088be00000000100c00000100000000000000080022eb0000000020000000020000000000000000000000080065580000000069209ef991e9362fc7b2899c5114c25fa238b858d097f24d25c3a4470c63594e0ee4907681c0b4cfe1620e0ad58e9bed35d9d1c4badc177b93c34c0b7df1fac0056c75cbc9d31ab3055ca5"], 0x0) 10.252913638s ago: executing program 4 (id=1077): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24004050}, 0x20000044) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) 10.069176378s ago: executing program 4 (id=1079): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x1f) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB], 0x16) socket(0x200000000000011, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x80, 0x1, 0x804}}}, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_cmd={0x8, 0x3, 0x3, 0x2, 0x5, 0x3, 0xd7, 0x6, 0xfe, 0x2, 0x8, 0xa, 0x0, 0x7, 0xff, 0x7, [0x3, 0xffffce76]}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$inet(0x2, 0x1, 0x0) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000701, 0xee00, &(0x7f0000000180)) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414"], 0x18) syz_usb_connect$uac1(0x2, 0x97, &(0x7f0000001880)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090285000301bbd0080904000000010100000a24017f0200030201020b24050600bf9b5ab6dc3e0c240202010202090800f701090401000001020000090401010101020000090501092000000180072501039a8556090402000001020000090402010101020000082402010101080a072401010203000905820920"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) vmsplice(r1, &(0x7f0000001640)=[{&(0x7f00000000c0)="4acd6dd1ab8854336cd9cadac14dddfe88531de06004926b465a098979b94884c81e91184402580f4f656d45b64a60607b8d275cf1e3c3848e202645211b63409c5492954a9e77f8bd5de608d3413d2c1db1bfe9852d0e6ca0952dc24b7a0cd4e94d9b8352964da029e496950bc08baeb85f7c", 0x73}, {&(0x7f0000000140)="aa71ccb020628e6633566b47fa7975ac104a76298d7dce98856c70ce52a394e0936618bf2a3c6be07a44e188c63f60809edf", 0x32}, {&(0x7f00000002c0)="68b2b0c78bca29d14f3fa36e86481317807f377ecac2b4fde0ab00d70e35065d3efc9c325281f7de559447e1", 0x2c}, {&(0x7f0000000300)="76aa63b8ea677e83cc71759f794c1c5b0d17d5aaba7fa2bc4b086451dd81dbbd1b01045740f02bc4e363172c1d33a2f1adbe1b130ff0f7dfdada3109dd8a3cdfea9ec1a57f14cbdafea2580d22b8a17d36c06466fad8286b297282d81503752d191612e5faa866e350d31e853fcc178bd69be16c471e179ccaafdc42808cbc8246a5f7c4226b87e7c1a1243dce663d1f7f375a62cdd1e3711cfcb34925523c79d247f319045788947e5c56f9d3df2d2cd1e438df0ee748b4c043ac3e76338272", 0xc0}], 0x4, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x7800}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x518) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050e86dd6000804000092c00fe80000000a5cf8ed24d71c90e03502fd95e9f00000000000000000000bb000095c28da5"], 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r4], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) pipe(&(0x7f0000000040)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r5, 0x0, 0x0, 0x800) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000480)) 9.960942988s ago: executing program 3 (id=1080): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000240)=0x8, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r3, &(0x7f0000000440)="2fd87906c4cf471afa", 0x9, 0x24000000, 0x0, 0x0) recvfrom(r3, 0x0, 0x0, 0x99bcb88de02507d2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x5634c2, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0x2, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r4, &(0x7f00000000c0)='./file0\x00', 0x4) sendfile(0xffffffffffffffff, r5, 0x0, 0x4) recvmsg$can_bcm(r5, &(0x7f0000000240)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f00000000c0), 0x5, &(0x7f0000000840)=""/173, 0xad}, 0x40002000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000280607ee6", 0x2d}], 0x1}, 0x2) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) 7.885056163s ago: executing program 4 (id=1087): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000b00)=""/186, 0xba, 0x100e0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000000)={0x8101000, 0x101000, 0x8}) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000}) sendmsg$rds(0xffffffffffffffff, 0x0, 0x20004080) syz_usb_connect(0x6, 0xffffffffffffff80, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) 6.906183129s ago: executing program 5 (id=1089): chdir(&(0x7f0000000000)='./file0\x00') openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x82a81, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x24) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x111000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r2, 0x73a, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x62}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x2d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8db, 0x3c}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0xf}}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x2b}}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r5 = syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0xa0080) openat$audio(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) shutdown(r1, 0x1) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x8000, 0x0) r7 = pidfd_getfd(r6, r5, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x101800, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x9, 0x6, &(0x7f0000000480)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @exit, @jmp={0x5, 0x1, 0x8, 0x7, 0x3, 0xfffffffffffffffc}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f00000004c0)='GPL\x00', 0x140, 0x1000, &(0x7f0000000500)=""/4096, 0x40f00, 0x12, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001500)={0x0, 0x4, 0x0, 0x80}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001540)=[r1, r1, r7], &(0x7f0000001580)=[{0x3, 0x3, 0xb, 0x2}, {0x2, 0x1, 0x1, 0xf}, {0x0, 0x2, 0xa, 0xa}, {0x2, 0x4, 0xa, 0xb}, {0x2, 0x1, 0x2, 0xc}], 0x10, 0x5}, 0x94) ioctl$int_out(r8, 0xbf1026eb923a8093, &(0x7f00000016c0)) r9 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000001700)={'syzkaller1\x00', 0x6601}) mremap(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x2000, 0x2, &(0x7f0000ffa000/0x2000)=nil) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001740), 0x240000, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r10, 0x82307202, &(0x7f0000001780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x50, r8, 0x2fc6000) connect$unix(r9, &(0x7f00000019c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) syz_kvm_setup_cpu$x86(r7, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001ac0)=[@text16={0x10, &(0x7f0000001a40)="66b9800000c00f326635010000000f303e0f00989a543e2e64677e863e0fc7adb8efba4300b0e2ee66b9ca0a00000f3265660f3880ab7c000f1708baf80c66b8c826cd8666efbafc0c66b8e988000066efdc836ef8", 0x55}], 0x1, 0x8, &(0x7f0000001b00)=[@vmwrite={0x8, 0x0, 0x17, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}], 0x1) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r11, 0x5411, &(0x7f0000001b40)) 6.744106649s ago: executing program 3 (id=1090): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20202, 0xa4) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x4000) recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)}, 0x8101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}], 0x4, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) readv(r1, 0x0, 0x0) faccessat2(0xffffffffffffffff, &(0x7f0000001400)='\x00', 0x0, 0x1100) clock_gettime(0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 6.471224833s ago: executing program 5 (id=1092): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x121200) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, &(0x7f0000000080)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000001f) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000024) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r6, 0x10e, 0xa, &(0x7f0000000500)=0x81, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f00000004c0)={0x8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)={0x28, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x33}]}, @typed={0x8, 0x9, 0x0, 0x0, @fd=r8}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 4.786410125s ago: executing program 5 (id=1096): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000338000480340001800b0001006e756d67656e000024000280080001400000000008000240ffffff3e0800034000797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/140], 0x8c}}, 0x0) 4.655365248s ago: executing program 5 (id=1097): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000240)=0x8, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r3, &(0x7f0000000440)="2fd87906c4cf471afa", 0x9, 0x24000000, 0x0, 0x0) recvfrom(r3, 0x0, 0x0, 0x99bcb88de02507d2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x5634c2, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0x2, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r4, &(0x7f00000000c0)='./file0\x00', 0x4) sendfile(0xffffffffffffffff, r5, 0x0, 0x4) recvmsg$can_bcm(r5, &(0x7f0000000240)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f00000000c0), 0x5, &(0x7f0000000840)=""/173, 0xad}, 0x40002000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000280607e", 0x2c}], 0x1}, 0x2) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) 4.528004571s ago: executing program 4 (id=1098): r0 = eventfd2(0x3ff, 0x80000) ppoll(&(0x7f0000000780)=[{r0, 0x142}, {r0, 0x4}, {0xffffffffffffffff, 0x8004}], 0x3, 0x0, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x5b02, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0x5b24, 0x0) syz_usb_disconnect(r5) recvmsg$kcm(r4, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000) r7 = socket$kcm(0x10, 0x2, 0x4) close(r4) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)="4c000000150097f87059ae08060c04a302ff0f918f3a95000005000000000000009d35a2cca84708f7abca1bac1414aabd620d7360490c4d97d07c493872f750375ed08a560400000003c48f93b82a030000cecc9cabc841b1b0640500461e5484b01d1af9cebde29f7e9d9f2ffc140b448a885f027568e83f304c586ef063df09013f8d9db1b74867263eb82343457f", 0x90}, {&(0x7f0000000940)="61c6f705d5304f00cd5f373a8f0f5527655c5d64d44302a4519a3a4d46cb6ab8c88906e8f2a8b52cf70f561f2205aa64c025538e1a4dded368f255ad3ee2051dff7bccf44b8a169880c5ebdb0ea40b99b39ef078351992dcd4e11ae9140b26423db93157289f95ff1f2f9f5a8deb42b5689f4cbb3851527cd25170b909aa7e60200443da78e5", 0x86}, {&(0x7f00000002c0)="f0b3a511e09329526f000000c0575cff02ec000000000000", 0x18}], 0x3}, 0x641839fcc03b59e8) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000308000340000000170900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0x24, 0x2) r8 = syz_open_dev$swradio(&(0x7f0000001b00), 0x0, 0x2) ioctl$VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000001b80)=@fd={0x4, 0x4, 0x4, 0x2000, 0x5, {0x0, 0xea60}, {0x2, 0x2, 0x7f, 0x6, 0x7, 0x8, "ef77f391"}, 0x101, 0x4, {}, 0x7}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0xd000}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 4.273176033s ago: executing program 0 (id=1099): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000600)}], 0x2}}], 0x1, 0x4000040) r2 = gettid() r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r2, r3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) 3.234927238s ago: executing program 3 (id=1100): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x121200) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, &(0x7f0000000080)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000001f) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000024) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r6, 0x10e, 0xa, &(0x7f0000000500)=0x81, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f00000004c0)={0x8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)={0x30, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x4, 0x2}, @typed={0x8, 0x9, 0x0, 0x0, @fd=r8}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 3.233561559s ago: executing program 0 (id=1101): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r1, 0x402, 0x5) r2 = syz_io_uring_setup(0x7b52, &(0x7f0000000000)={0x0, 0x3524, 0x20, 0x3, 0x201, 0x0, r1}, &(0x7f0000000080), &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r5, r5, r5}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={'xxhash64-generic\x00'}}) r6 = add_key$user(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000540)="ec3a8747a39f1c89ef6cdcd6fea633aed489be6413a9daa404eccbc0597fb4a75504423d29afa260f19286dcbb4fae7fe748e09154359588d44504865403aaec120697e020878a7bb925b2cfea2d200764d5168db0939aa3cb036b37d3e3fc7dda5e97bbd6e716ed645bfcd9af8d5b8d8574dec8c6bac2bb2bc640d09fc1460a68e4036c23fb76ecd1e9bdc447aeb8839ca88ee4a3474ed039eb4b65c6eabc3952c1c6c65ca03c563693f4532a577e6491f11b867b2303a3de4060877e5767ebe6f8de8e2d969f3e4c4de902904956d3f43d5e1dd8496675acc40c72c16060141aa621", 0xe3, 0xfffffffffffffffc) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000640)=""/204, 0xcc, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r7 = socket$netlink(0x10, 0x3, 0x0) unshare(0xc040400) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES64=r6, @ANYRES32, @ANYBLOB="00e90000da000000003138ca6d7bd70000000000000071ca75890000000000000000"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000005000000040000000700000000000000", @ANYRES32=r8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000006336ddab5c267ced002000"/28], 0x50) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000340), 0xffff, r9}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040804}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x5c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106}}, 0x20) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000003c0)={0x2, 'ip6_vti0\x00', 0x1}, 0x18) 2.031244676s ago: executing program 2 (id=1103): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @ioapic={0xa4000, 0x4, 0x81, 0x6, 0x0, [{0x9, 0x5, 0x5, '\x00', 0x81}, {0xdd, 0x2, 0x8, '\x00', 0x8}, {0x2, 0x63, 0x4, '\x00', 0xf7}, {0x6, 0x7, 0xd, '\x00', 0x5}, {0x13, 0x1, 0xe, '\x00', 0x18}, {0x7, 0x5, 0x80, '\x00', 0x7}, {0xff, 0x62, 0xfc, '\x00', 0x5}, {0x2, 0xe1, 0x76, '\x00', 0x4}, {0xb2, 0x6, 0x2, '\x00', 0x2}, {0x1, 0x8, 0x4}, {0x3, 0xe, 0x3, '\x00', 0x3}, {0x6, 0x7, 0x9, '\x00', 0x14}, {0x3, 0x2, 0x7, '\x00', 0x91}, {0x1, 0x0, 0xb1, '\x00', 0x86}, {0x9, 0x1c, 0xdd, '\x00', 0x9}, {0x0, 0x46, 0xff, '\x00', 0x7}, {0xb3, 0x0, 0x1, '\x00', 0x4}, {0x12, 0x74, 0xe, '\x00', 0xd}, {0x1, 0x8, 0x6, '\x00', 0x1}, {0x3, 0x8, 0x4, '\x00', 0x5}, {0xd, 0xeb, 0x0, '\x00', 0x6}, {0x91, 0x9, 0x4, '\x00', 0x7}, {0xe0, 0x4, 0xff, '\x00', 0xc6}, {0x4, 0x9, 0x7}]}}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000001, 0x17d, 0x6, 0xffffffffffffffff, 0xf1, 0x8, 0x0, 0x42, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x384a10}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000009c0)={0x0, 0x0, @pic={0x6, 0xe4, 0x62, 0x4, 0x78, 0x7, 0x0, 0x1, 0x2, 0xfe, 0x64, 0x2, 0xb6, 0x6, 0x0, 0x1}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0, 0x1) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x1) syz_open_dev$sndctrl(&(0x7f00000004c0), 0xff, 0x80) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="d800000019007b29e00208ba0d8105040a601100fe02040b067c55a1bc001400030006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277c7f6bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a14c11ce1b14d6d930dfe1d1d322fe04fb95cae8c9fad95667e04adcdf634c1fdf48000000000000e1cace81ed0b7fece0b42a9ecbeeef7d93458c69e0cdf106a159031e9f05e9f16e9cb500020000000000000000000000009ae42a97718952ab98b6768e7a5f06239bfa34aea7fcfcf01adb785cce1877f7ff", 0x10a}, {&(0x7f0000000100)="c3000000000000000000000000000000000000b03a668c855de4df67ad9c6178d51196f7c665fe4bc3ba7b0b3272b3540b9de4d2d29fd5f0c8a92fac56b6d6e800b8365ff9ec4426b93a55", 0x4b}, {&(0x7f0000000180)="74938de2a989c356a30301e317f07863a55ad3e7ab573d50ab15ddb3cead985842ef49b5ef55eb7919535844578e6de511174e9e9b9791ab27a81b6e99e887814854fcf3fad0d5", 0x47}, {&(0x7f0000000000)="9b3f468f5ae3fcc7140a02e4290e72f5067651931955fb1a304dd0bc210a", 0x1e}], 0x4, 0x0, 0x0, 0x2663}, 0x841) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x121001, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x70a, 0x183e, 0x30314142, 0x2, 0x1, [{0x8c, 0xf}, {0x4, 0x5}, {0x5, 0x5}, {0x400, 0x7fff}, {0x7fffffff, 0xffffff78}, {0x5, 0xfdfd}, {0xfffffffb, 0x10}, {0xffff, 0x1f}], 0x9, 0x2, 0x2, 0x2, 0x6}}) socket$can_j1939(0x1d, 0x2, 0x7) 1.78429385s ago: executing program 0 (id=1104): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672", 0x0, 0x12}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000000)={0xe0000, 0x0, {[0x8000000000000000, 0x10, 0xc, 0x100000000, 0x3, 0x0, 0x6, 0x885]}}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0xfc}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.589678174s ago: executing program 2 (id=1105): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') timer_create(0x0, 0x0, &(0x7f0000bbdffc)) preadv(r1, &(0x7f0000002380)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000001000ffff25bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fa0a050023080700440012800b000100697036746e6c00003400028014000300fec0ffffffffffff000000000000000114000200fe88000000000000000000000000010108000100", @ANYRES32=r4, @ANYBLOB="2388675c4e79b4"], 0x64}}, 0x24000800) fchdir(r0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r6}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') 1.51728433s ago: executing program 0 (id=1106): sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40885}, 0x4005) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = inotify_init() setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) r1 = syz_open_dev$ndb(&(0x7f0000001200), 0x0, 0x2100) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000001340)={'\x00', 0x9, 0x7fff, 0x0, 0xfffffffffffffffe}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e1e, 0x0, @loopback, 0x2}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) r2 = timerfd_create(0x0, 0x0) readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/33, 0x21}], 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='attr/exec\x00') bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0x16, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0xfef3, 0x0, 0x41100, 0x30, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[@ANYBLOB="2400000041fd89ac17c1d2e9a60308010100000000000000000a0000060600024080350000050003003a000000abc08b33890885b875ca021f54b88d9094e8b65286769dc8c2724e2966373597ec4634c2aea32bc2d5bb40d4d8883694"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4040010) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae", 0x7) r5 = accept4(r4, 0x0, 0x0, 0x800) syz_open_dev$I2C(&(0x7f0000000600), 0x7fffffff, 0x3170c0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be39163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmmsg(r5, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000000500)}, 0xcfe}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000740)=""/111, 0x6f}, {&(0x7f00000005c0)=""/30, 0x1e}, {&(0x7f0000005b00)=""/4102, 0x1006}, {&(0x7f0000001e80)=""/159, 0x9f}, {&(0x7f0000001f40)=""/100, 0x64}, {&(0x7f0000001fc0)=""/57, 0x39}, {&(0x7f0000002000)=""/118, 0x76}], 0x7}, 0x4}, {{0x0, 0x0, &(0x7f0000003680)}, 0x228}, {{&(0x7f0000003780)=@alg, 0x80, &(0x7f0000004980)}, 0x80000001}], 0x4, 0x40, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x5, @mcast2}}, {{0xa, 0x0, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f0000000640)=""/50, &(0x7f0000001000)=0x32) syz_open_dev$video4linux(&(0x7f0000000000), 0x9, 0x600181) 1.510452195s ago: executing program 3 (id=1107): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d7, 0x5}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000338000480340001800b0001006e756d67656e000024000280080001400000000008000240ffffff3e0800034000797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/140], 0x8c}}, 0x0) 1.45516617s ago: executing program 2 (id=1108): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) fsopen(&(0x7f0000000280)='debugfs\x00', 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) r4 = timerfd_create(0x1, 0x80000) timerfd_settime(r4, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r4, &(0x7f00000000c0)) read(r3, &(0x7f0000000040)=""/252, 0xfc) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = epoll_create1(0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = dup3(r7, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x57}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0xff5, &(0x7f0000001840)=""/4085}, 0x94) fcntl$lock(r5, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x400, 0xffffffffffffb31d}) utimensat(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x0, 0x0) 1.420142278s ago: executing program 4 (id=1109): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002280)={0x50, 0x0, r2, {0x7, 0x2b, 0x1, 0xffffffff80080108, 0x4d8, 0xb6, 0x4, 0xd3a00000, 0x0, 0x0, 0x2}}, 0x50) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r4, r1, 0x0) r5 = open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4) sendfile(r5, r5, 0x0, 0x1000000201005) syz_usb_control_io$uac1(r0, 0x0, 0x0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000600)={r9, 0x0, 0x0, 0x0, 0x3, [0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r10, 0x0, 0x0, r10], [0x2b8, 0x0, 0x0, 0xfffffffc], [0x1]}) write$UHID_CREATE2(r6, &(0x7f0000000040)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x4b, 0xd, 0x6, 0x3, 0x5f0, 0x5, "9ebc32123e2a27270a640c67a4a8d93cac69c1e4806b42194cfd241782f89e70c6c5160e4870db5ee81d53ac77b6f879b0879a5c012efbd8f4076ca3a85b209fb10695cc3f2c7722cba7bc"}}, 0x163) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000000000791000000000000005000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r11 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r12 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) lseek(r12, 0x100000, 0x3) pwrite64(r11, 0x0, 0x0, 0x7) 1.355849668s ago: executing program 2 (id=1110): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) socket$netlink(0x10, 0x3, 0x14) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="5f40000000000000711033000000000006600000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x3e}, 0x48) 1.277030001s ago: executing program 5 (id=1111): ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x30, 0x20, 0x301, 0x20000, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x80000001}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x8}]}, 0x30}}, 0x4044814) r1 = socket(0x8, 0x3, 0x8) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x3fff, 0x4, 0x0, 0x3}, 0x10) r2 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r3) recvmmsg(r3, &(0x7f0000002a00)=[{{&(0x7f0000000280)=@qipcrtr, 0x80, &(0x7f0000000500)=[{&(0x7f0000000300)=""/73, 0x49}, {&(0x7f00000003c0)=""/249, 0xf9}, {&(0x7f00000004c0)=""/55, 0x37}], 0x3, &(0x7f0000000540)=""/165, 0xa5}, 0x673a}, {{&(0x7f0000000600)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/198, 0xc6}, {&(0x7f00000027c0)=""/198, 0xc6}], 0x5, &(0x7f0000002940)=""/162, 0xa2}, 0x80000000}], 0x2, 0x10000, &(0x7f0000002a80)={0x77359400}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000200)={0x4c, r4, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffffffb, 0x2d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r4, 0x9c7fe305f5a4d4f9, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x101, 0x3e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}}, 0x0) fsmount(r2, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000000)='dirsync\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001200010a28bd7000000000000a"], 0x24}, 0x1, 0x0, 0x0, 0x24040}, 0x4000040) 1.200893518s ago: executing program 3 (id=1112): r0 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x44814, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2000000}, 0x1c) 1.127240338s ago: executing program 3 (id=1113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_usb_connect(0x0, 0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000affe984035cc3f690fe7010203010902400001000000000904330000020203000a240100040802010207240404"], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000480)={0x1, 0x0, @pic={0x6e, 0x3, 0x0, 0xfe, 0x1, 0xc, 0x9, 0x5c, 0x5, 0x23, 0x4, 0x9, 0x7f, 0x4, 0x2, 0x2}}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') read$FUSE(r5, &(0x7f0000002c80)={0x2020}, 0x2020) madvise(&(0x7f000017e000/0x1000)=nil, 0x1000, 0x10) write$tcp_mem(r5, &(0x7f0000000280)={0x400, 0x20, 0xaf, 0x20, 0x10005}, 0x48) read$FUSE(r5, &(0x7f0000006380)={0x2020}, 0xffffff02) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getgid() syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x2000400, 0x0, 0x1, 0x0, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4, 0x0, 0x9}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) ioctl$VIDIOC_REQBUFS(r6, 0xc0585609, &(0x7f0000000280)={0x0, 0xa, 0x0, 0x0, 0x80}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380), 0x1000) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000000000/0x400000)=nil) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000040)="f3f36566460f860f1b0cf666b8af0066ba410066b8000066eff30f1dac4d91f148780165f30fc7760064f043803590000000c166dc7790470f796100f3f0816500cc041a08", 0xfffffffffffffe84}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r5, 0x8080aea1, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000037000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000300)="660fc773000f07c4e1d81539f30fc7347d0c00000066b82e010f00d066b8b7008ed8c74424002884ae8ec74424023a980000c7442406000000000f011c24660fae33b8010000000f01d9660f3824fb", 0x4f}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.04859969s ago: executing program 5 (id=1114): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r4, 0x0, 0x0, 0x4c040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x1, 0x1c}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r5) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x33, 0x2d, {0x2d, 0x6, "f31392c00b1ee1e85706650a8f1fb8dc8dfd391b385c59c04ca6bdbb99caa24ddb1048c6adcb28f36bab49"}}, &(0x7f0000000100)={0x0, 0x3, 0x9, @string={0x9, 0x3, "3df1ebe030a642"}}}, &(0x7f0000000740)={0x1c, &(0x7f0000000200)={0x20, 0x31, 0xce, "4b9d390b34c97fbe7a2ead6a80267e6ce9bed27c3744087cc01506e6286b819a3b88cccabfd44a278e9afaff643075d439bc0ed0d8bde01a9371d8a69959f631b270e26888c0208aea310523b877c2b8d62490eb1a472e0c6480b07f3d9f63baaee0dd323fc0e734acd6244af41438d47c24b52048f8472baba75e110c54e3ccc64449e2a5ce57ee56cdbe78326417d57fbc55cb457d7cce005968e19ceff600b44ed8e2ae2f694160941235ab2660ed88c897863d55f914d1c9b9032e0065c5b90def0cb6f1d9a8cff6c76bb2ad"}, &(0x7f0000000300)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000180)={0x21, 0x0, 0x4, "4c83650d"}}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x1, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x0, 0x40d}) 585.526303ms ago: executing program 0 (id=1115): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='maps\x00') (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f8000000190001002dbd70000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00001c00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000060000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000200a000000000000feffffffff7f40000200000000000008000000000000000001"], 0xf8}}, 0x0) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000000280)=[{{&(0x7f0000003e80)={0xa, 0x4e22, 0x5, @remote}, 0x1c, 0x0}}], 0x1, 0x4008810) (async) read$FUSE(r0, &(0x7f0000002d80)={0x2020}, 0x2025) (async) pread64(r0, &(0x7f0000000080)=""/110, 0x6e, 0x400) 262.085726ms ago: executing program 0 (id=1116): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}, {0x1, 0x2a00, 0x0, 0x0}], 0x2}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20024090) 146.827108ms ago: executing program 2 (id=1117): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4f", 0x0, 0x15}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000000)={0xe0000, 0x0, {[0x8000000000000000, 0x10, 0xc, 0x100000000, 0x3, 0x0, 0x6, 0x885]}}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0xfc}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=1118): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000000000030000010900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064010101"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) kernel console output (not intermixed with test programs): syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e138efc9 code=0x7ffc0000 [ 318.113516][ T30] audit: type=1326 audit(1761477144.363:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.3.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e138efc9 code=0x7ffc0000 [ 318.145475][ T30] audit: type=1326 audit(1761477144.363:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.3.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79e138efc9 code=0x7ffc0000 [ 318.171494][ T30] audit: type=1326 audit(1761477144.363:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.3.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e138efc9 code=0x7ffc0000 [ 318.196097][ T30] audit: type=1326 audit(1761477144.363:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.3.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f79e138efc9 code=0x7ffc0000 [ 318.219069][ T30] audit: type=1326 audit(1761477144.363:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.3.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e138efc9 code=0x7ffc0000 [ 318.257369][ T5888] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 318.268330][ T8982] Set syz1 is full, maxelem 65536 reached [ 318.415769][ T5888] usb 3-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 318.455383][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.481228][ T5888] usb 3-1: config 0 descriptor?? [ 318.521543][ T5888] usb 3-1: selecting invalid altsetting 1 [ 318.549105][ T5888] flexcop_usb: set interface failed. [ 318.554797][ T5888] b2c2_flexcop_usb 3-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 318.719887][ T5951] usb 3-1: USB disconnect, device number 38 [ 319.259883][ T5881] usbhid 4-1:0.0: can't add hid device: -71 [ 319.267394][ T5881] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 319.286106][ T5881] usb 4-1: USB disconnect, device number 52 [ 319.640101][ T9094] FAULT_INJECTION: forcing a failure. [ 319.640101][ T9094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.722841][ T9094] CPU: 1 UID: 0 PID: 9094 Comm: syz.0.862 Not tainted syzkaller #0 PREEMPT(full) [ 319.722868][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 319.722879][ T9094] Call Trace: [ 319.722886][ T9094] [ 319.722894][ T9094] dump_stack_lvl+0x189/0x250 [ 319.722924][ T9094] ? __pfx____ratelimit+0x10/0x10 [ 319.722947][ T9094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.722971][ T9094] ? __pfx__printk+0x10/0x10 [ 319.723003][ T9094] should_fail_ex+0x414/0x560 [ 319.723036][ T9094] _copy_to_user+0x31/0xb0 [ 319.723061][ T9094] simple_read_from_buffer+0xe1/0x170 [ 319.723093][ T9094] proc_fail_nth_read+0x1b3/0x220 [ 319.723120][ T9094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.723151][ T9094] ? rw_verify_area+0x2a6/0x4d0 [ 319.723175][ T9094] ? __lock_acquire+0xab9/0xd20 [ 319.723192][ T9094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.723217][ T9094] vfs_read+0x200/0xa30 [ 319.723240][ T9094] ? fdget_pos+0x247/0x320 [ 319.723262][ T9094] ? __pfx___mutex_lock+0x10/0x10 [ 319.723289][ T9094] ? __pfx_vfs_read+0x10/0x10 [ 319.723315][ T9094] ? __fget_files+0x2a/0x420 [ 319.723338][ T9094] ? __fget_files+0x3a0/0x420 [ 319.723354][ T9094] ? __fget_files+0x2a/0x420 [ 319.723381][ T9094] ksys_read+0x145/0x250 [ 319.723409][ T9094] ? __pfx_ksys_read+0x10/0x10 [ 319.723438][ T9094] ? do_syscall_64+0xbe/0xfa0 [ 319.723465][ T9094] do_syscall_64+0xfa/0xfa0 [ 319.723488][ T9094] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.723511][ T9094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.723530][ T9094] ? clear_bhb_loop+0x60/0xb0 [ 319.723553][ T9094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.723571][ T9094] RIP: 0033:0x7feae978d9dc [ 319.723587][ T9094] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 319.723604][ T9094] RSP: 002b:00007feaea5c3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 319.723624][ T9094] RAX: ffffffffffffffda RBX: 00007feae99e5fa0 RCX: 00007feae978d9dc [ 319.723639][ T9094] RDX: 000000000000000f RSI: 00007feaea5c30a0 RDI: 0000000000000006 [ 319.723650][ T9094] RBP: 00007feaea5c3090 R08: 0000000000000000 R09: 0000000000000000 [ 319.723662][ T9094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 319.723680][ T9094] R13: 00007feae99e6038 R14: 00007feae99e5fa0 R15: 00007feae9b0fa28 [ 319.723713][ T9094] [ 320.337836][ T9096] Cannot find set identified by id 65534 to match [ 320.573211][ T9113] wg1: entered promiscuous mode [ 320.594360][ T9113] wg1: entered allmulticast mode [ 320.855520][ T9129] FAULT_INJECTION: forcing a failure. [ 320.855520][ T9129] name failslab, interval 1, probability 0, space 0, times 0 [ 320.932569][ T9129] CPU: 0 UID: 0 PID: 9129 Comm: syz.4.875 Not tainted syzkaller #0 PREEMPT(full) [ 320.932591][ T9129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 320.932598][ T9129] Call Trace: [ 320.932603][ T9129] [ 320.932608][ T9129] dump_stack_lvl+0x189/0x250 [ 320.932627][ T9129] ? __pfx____ratelimit+0x10/0x10 [ 320.932640][ T9129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.932654][ T9129] ? __pfx__printk+0x10/0x10 [ 320.932667][ T9129] ? __pfx___might_resched+0x10/0x10 [ 320.932688][ T9129] ? fs_reclaim_acquire+0x7d/0x100 [ 320.932720][ T9129] should_fail_ex+0x414/0x560 [ 320.932747][ T9129] should_failslab+0xa8/0x100 [ 320.932758][ T9129] __kvmalloc_node_noprof+0x158/0x910 [ 320.932774][ T9129] ? rhashtable_init_noprof+0x4f3/0xbc0 [ 320.932785][ T9129] ? rhashtable_init_noprof+0x145/0xbc0 [ 320.932799][ T9129] rhashtable_init_noprof+0x4f3/0xbc0 [ 320.932814][ T9129] nft_rhash_init+0x10b/0x3a0 [ 320.932827][ T9129] ? __pfx_nft_rhash_init+0x10/0x10 [ 320.932835][ T9129] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.932848][ T9129] ? __pfx_nft_rhash_key+0x10/0x10 [ 320.932857][ T9129] ? __pfx_nft_rhash_obj+0x10/0x10 [ 320.932866][ T9129] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 320.932877][ T9129] ? nf_tables_newset+0x139b/0x2540 [ 320.932889][ T9129] ? kfree+0x19a/0x6d0 [ 320.932905][ T9129] nf_tables_newset+0x1c0c/0x2540 [ 320.932923][ T9129] ? __pfx_nf_tables_newset+0x10/0x10 [ 320.932946][ T9129] ? __nla_parse+0x40/0x60 [ 320.932959][ T9129] nfnetlink_rcv+0x11d9/0x2590 [ 320.932992][ T9129] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 320.933014][ T9129] ? ref_tracker_free+0x63a/0x7d0 [ 320.933039][ T9129] ? __netlink_deliver_tap+0x807/0x850 [ 320.933055][ T9129] ? netlink_deliver_tap+0x2e/0x1b0 [ 320.933079][ T9129] netlink_unicast+0x82f/0x9e0 [ 320.933097][ T9129] ? __pfx_netlink_unicast+0x10/0x10 [ 320.933112][ T9129] ? netlink_sendmsg+0x642/0xb30 [ 320.933120][ T9129] ? skb_put+0x11b/0x210 [ 320.933131][ T9129] netlink_sendmsg+0x805/0xb30 [ 320.933146][ T9129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.933156][ T9129] ? aa_sock_msg_perm+0xf1/0x1d0 [ 320.933173][ T9129] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 320.933182][ T9129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.933192][ T9129] __sock_sendmsg+0x21c/0x270 [ 320.933208][ T9129] ____sys_sendmsg+0x505/0x830 [ 320.933221][ T9129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.933237][ T9129] ? import_iovec+0x74/0xa0 [ 320.933251][ T9129] ___sys_sendmsg+0x21f/0x2a0 [ 320.933263][ T9129] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.933292][ T9129] ? __fget_files+0x2a/0x420 [ 320.933301][ T9129] ? __fget_files+0x3a0/0x420 [ 320.933315][ T9129] __x64_sys_sendmsg+0x19b/0x260 [ 320.933327][ T9129] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.933342][ T9129] ? __pfx_ksys_write+0x10/0x10 [ 320.933359][ T9129] ? do_syscall_64+0xbe/0xfa0 [ 320.933375][ T9129] do_syscall_64+0xfa/0xfa0 [ 320.933387][ T9129] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.933399][ T9129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.933409][ T9129] ? clear_bhb_loop+0x60/0xb0 [ 320.933421][ T9129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.933431][ T9129] RIP: 0033:0x7f821758efc9 [ 320.933440][ T9129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.933449][ T9129] RSP: 002b:00007f8218340038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.933461][ T9129] RAX: ffffffffffffffda RBX: 00007f82177e5fa0 RCX: 00007f821758efc9 [ 320.933468][ T9129] RDX: 0000000000008040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 320.933475][ T9129] RBP: 00007f8218340090 R08: 0000000000000000 R09: 0000000000000000 [ 320.933481][ T9129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 320.933487][ T9129] R13: 00007f82177e6038 R14: 00007f82177e5fa0 R15: 00007f821790fa28 [ 320.933504][ T9129] [ 321.303536][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.340484][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'. [ 321.388791][ T9127] veth3: entered promiscuous mode [ 321.442823][ T5951] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 321.688934][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 321.802778][ T5951] usb 1-1: Using ep0 maxpacket: 8 [ 321.805726][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.883'. [ 321.845011][ T5951] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 321.864620][ T5951] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 321.892777][ T5951] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 321.912747][ T5951] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 321.989208][ T5951] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.012853][ T5881] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 322.041571][ T5951] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 322.071170][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.132204][ T9155] FAULT_INJECTION: forcing a failure. [ 322.132204][ T9155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.158698][ T9155] CPU: 0 UID: 0 PID: 9155 Comm: syz.2.885 Not tainted syzkaller #0 PREEMPT(full) [ 322.158714][ T9155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 322.158721][ T9155] Call Trace: [ 322.158726][ T9155] [ 322.158731][ T9155] dump_stack_lvl+0x189/0x250 [ 322.158749][ T9155] ? __pfx____ratelimit+0x10/0x10 [ 322.158766][ T9155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.158780][ T9155] ? __pfx__printk+0x10/0x10 [ 322.158796][ T9155] should_fail_ex+0x414/0x560 [ 322.158814][ T9155] _copy_to_user+0x31/0xb0 [ 322.158828][ T9155] simple_read_from_buffer+0xe1/0x170 [ 322.158846][ T9155] proc_fail_nth_read+0x1b3/0x220 [ 322.158862][ T9155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.158876][ T9155] ? rw_verify_area+0x2a6/0x4d0 [ 322.158889][ T9155] ? __lock_acquire+0xab9/0xd20 [ 322.158898][ T9155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.158911][ T9155] vfs_read+0x200/0xa30 [ 322.158925][ T9155] ? fdget_pos+0x247/0x320 [ 322.158936][ T9155] ? __pfx___mutex_lock+0x10/0x10 [ 322.158951][ T9155] ? __pfx_vfs_read+0x10/0x10 [ 322.158966][ T9155] ? __fget_files+0x2a/0x420 [ 322.158977][ T9155] ? __fget_files+0x3a0/0x420 [ 322.158986][ T9155] ? __fget_files+0x2a/0x420 [ 322.158999][ T9155] ksys_read+0x145/0x250 [ 322.159014][ T9155] ? __pfx_ksys_read+0x10/0x10 [ 322.159030][ T9155] ? do_syscall_64+0xbe/0xfa0 [ 322.159045][ T9155] do_syscall_64+0xfa/0xfa0 [ 322.159057][ T9155] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.159070][ T9155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.159080][ T9155] ? clear_bhb_loop+0x60/0xb0 [ 322.159092][ T9155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.159101][ T9155] RIP: 0033:0x7f9744b8d9dc [ 322.159111][ T9155] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 322.159120][ T9155] RSP: 002b:00007f9742df6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 322.159133][ T9155] RAX: ffffffffffffffda RBX: 00007f9744de5fa0 RCX: 00007f9744b8d9dc [ 322.159141][ T9155] RDX: 000000000000000f RSI: 00007f9742df60a0 RDI: 0000000000000004 [ 322.159147][ T9155] RBP: 00007f9742df6090 R08: 0000000000000000 R09: 0000000000000000 [ 322.159153][ T9155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 322.159160][ T9155] R13: 00007f9744de6038 R14: 00007f9744de5fa0 R15: 00007f9744f0fa28 [ 322.159176][ T9155] [ 322.394452][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.477431][ T5881] usb 5-1: config 0 has no interfaces? [ 322.518269][ T5881] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 322.625366][ T5951] usb 1-1: usb_control_msg returned -32 [ 322.634646][ T5951] usbtmc 1-1:16.0: can't read capabilities [ 322.645171][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.759138][ T9153] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 322.766303][ T5881] usb 5-1: Product: syz [ 322.785243][ T5881] usb 5-1: Manufacturer: syz [ 322.792815][ T5881] usb 5-1: SerialNumber: syz [ 322.809605][ T9153] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 322.818616][ T5881] usb 5-1: config 0 descriptor?? [ 322.845878][ T9161] fuse: Bad value for 'fd' [ 322.859134][ T9153] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 322.870658][ T9153] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 322.878261][ T9153] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 323.120381][ T9171] input: syz1 as /devices/virtual/input/input19 [ 323.690027][ T5951] usb 1-1: USB disconnect, device number 39 [ 324.246197][ T9191] binder: 9180:9191 ioctl c0306201 200000000100 returned -11 [ 324.261040][ T9191] fuse: Bad value for 'fd' [ 324.299200][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.895'. [ 324.533733][ T5881] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 324.560401][ T5901] usb 5-1: USB disconnect, device number 30 [ 324.632798][ T5824] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 324.752501][ T5881] usb 3-1: device descriptor read/64, error -71 [ 324.784545][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 324.846942][ T5824] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.883758][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 324.889876][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 324.898393][ T5824] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 324.946876][ T5826] Bluetooth: hci0: command 0x0405 tx timeout [ 324.946899][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 324.964318][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 324.980565][ T9196] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 324.989597][ T9196] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 325.020487][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.898'. [ 325.029585][ T5881] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 325.032756][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 325.065637][ T9199] FAULT_INJECTION: forcing a failure. [ 325.065637][ T9199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.095758][ T5824] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.112981][ T9199] CPU: 0 UID: 0 PID: 9199 Comm: syz.5.899 Not tainted syzkaller #0 PREEMPT(full) [ 325.113004][ T9199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 325.113016][ T9199] Call Trace: [ 325.113023][ T9199] [ 325.113030][ T9199] dump_stack_lvl+0x189/0x250 [ 325.113059][ T9199] ? __pfx____ratelimit+0x10/0x10 [ 325.113082][ T9199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.113105][ T9199] ? __pfx__printk+0x10/0x10 [ 325.113133][ T9199] should_fail_ex+0x414/0x560 [ 325.113164][ T9199] _copy_to_user+0x31/0xb0 [ 325.113187][ T9199] simple_read_from_buffer+0xe1/0x170 [ 325.113220][ T9199] proc_fail_nth_read+0x1b3/0x220 [ 325.113245][ T9199] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 325.113270][ T9199] ? rw_verify_area+0x2a6/0x4d0 [ 325.113302][ T9199] ? __lock_acquire+0xab9/0xd20 [ 325.113319][ T9199] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 325.113344][ T9199] vfs_read+0x200/0xa30 [ 325.113368][ T9199] ? fdget_pos+0x247/0x320 [ 325.113390][ T9199] ? __pfx___mutex_lock+0x10/0x10 [ 325.113416][ T9199] ? __pfx_vfs_read+0x10/0x10 [ 325.113443][ T9199] ? __fget_files+0x2a/0x420 [ 325.113464][ T9199] ? __fget_files+0x3a0/0x420 [ 325.113481][ T9199] ? __fget_files+0x2a/0x420 [ 325.113505][ T9199] ksys_read+0x145/0x250 [ 325.113531][ T9199] ? __pfx_ksys_read+0x10/0x10 [ 325.113559][ T9199] ? do_syscall_64+0xbe/0xfa0 [ 325.113587][ T9199] do_syscall_64+0xfa/0xfa0 [ 325.113609][ T9199] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.113631][ T9199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.113649][ T9199] ? clear_bhb_loop+0x60/0xb0 [ 325.113671][ T9199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.113689][ T9199] RIP: 0033:0x7f774af8d9dc [ 325.113707][ T9199] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 325.113723][ T9199] RSP: 002b:00007f774be5d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 325.113743][ T9199] RAX: ffffffffffffffda RBX: 00007f774b1e5fa0 RCX: 00007f774af8d9dc [ 325.113758][ T9199] RDX: 000000000000000f RSI: 00007f774be5d0a0 RDI: 0000000000000005 [ 325.113770][ T9199] RBP: 00007f774be5d090 R08: 0000000000000000 R09: 0000000000000000 [ 325.113782][ T9199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 325.113793][ T9199] R13: 00007f774b1e6038 R14: 00007f774b1e5fa0 R15: 00007f774b30fa28 [ 325.113825][ T9199] [ 325.118887][ T5824] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 325.183119][ T5881] usb 3-1: device descriptor read/64, error -71 [ 325.185719][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.480227][ T5824] usb 4-1: Product: syz [ 325.493071][ T5824] usb 4-1: Manufacturer: syz [ 325.497764][ T5824] usb 4-1: SerialNumber: syz [ 325.508366][ T5881] usb usb3-port1: attempt power cycle [ 325.604398][ T5824] usb 4-1: config 0 descriptor?? [ 325.620516][ T5824] xbox_remote_probe: endpoint_in message size==0? [ 325.836990][ T5888] usb 4-1: USB disconnect, device number 53 [ 325.882965][ T5901] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 325.973244][ T5881] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 325.993512][ T5881] usb 3-1: device descriptor read/8, error -71 [ 326.038291][ T9217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.904'. [ 326.052772][ T5901] usb 1-1: Using ep0 maxpacket: 8 [ 326.088697][ T5901] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 326.096895][ T5901] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 326.116129][ T9217] netlink: 44 bytes leftover after parsing attributes in process `syz.4.904'. [ 326.132462][ T24] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 326.360209][ T5901] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 326.379134][ T5901] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 326.389628][ T5901] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.462819][ T5881] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 326.500928][ T5901] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 326.511245][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 326.518568][ T5881] usb 3-1: device descriptor read/8, error -71 [ 326.529560][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.633744][ T5881] usb usb3-port1: unable to enumerate USB device [ 326.816861][ T5901] usb 1-1: usb_control_msg returned -32 [ 326.865740][ T5901] usbtmc 1-1:16.0: can't read capabilities [ 326.912858][ T24] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 326.921972][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.141789][ T24] usb 6-1: config 0 descriptor?? [ 327.372027][ T24] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 327.380705][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 327.426171][ T5901] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 327.544866][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 327.568042][ T24] usb 6-1: media controller created [ 327.623216][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 327.645685][ T5901] usb 4-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 327.656432][ T5901] usb 4-1: config 0 has an invalid interface number: 150 but max is 64 [ 327.678053][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 327.686698][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.707436][ T5901] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 327.773275][ T5901] usb 4-1: config 0 has no interface number 0 [ 327.886567][ T5901] usb 4-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.917937][ T5901] usb 4-1: config 0 interface 150 has no altsetting 0 [ 327.926394][ T5901] usb 4-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 327.938042][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.950256][ T5901] usb 4-1: config 0 descriptor?? [ 328.053224][ T24] DVB: Unable to find symbol dib7000p_attach() [ 328.070292][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 328.353168][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 328.360073][ T9235] FAULT_INJECTION: forcing a failure. [ 328.360073][ T9235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.378959][ T24] Registered IR keymap rc-empty [ 328.394911][ T24] dvb-usb: could not initialize remote control. [ 328.404949][ T5901] usb 4-1: USB disconnect, device number 54 [ 328.413330][ T24] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 328.429465][ T9235] CPU: 1 UID: 0 PID: 9235 Comm: syz.4.909 Not tainted syzkaller #0 PREEMPT(full) [ 328.429489][ T9235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 328.429500][ T9235] Call Trace: [ 328.429508][ T9235] [ 328.429515][ T9235] dump_stack_lvl+0x189/0x250 [ 328.429544][ T9235] ? __pfx____ratelimit+0x10/0x10 [ 328.429568][ T9235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.429592][ T9235] ? __pfx__printk+0x10/0x10 [ 328.429610][ T9235] ? __might_fault+0xb0/0x130 [ 328.429646][ T9235] should_fail_ex+0x414/0x560 [ 328.429678][ T9235] _copy_from_user+0x2d/0xb0 [ 328.429703][ T9235] ___sys_sendmsg+0x158/0x2a0 [ 328.429724][ T9235] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.429775][ T9235] ? __fget_files+0x2a/0x420 [ 328.429793][ T9235] ? __fget_files+0x3a0/0x420 [ 328.429820][ T9235] __x64_sys_sendmsg+0x19b/0x260 [ 328.429840][ T9235] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 328.429867][ T9235] ? __pfx_ksys_write+0x10/0x10 [ 328.429896][ T9235] ? do_syscall_64+0xbe/0xfa0 [ 328.429927][ T9235] do_syscall_64+0xfa/0xfa0 [ 328.429949][ T9235] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.429973][ T9235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.429992][ T9235] ? clear_bhb_loop+0x60/0xb0 [ 328.430015][ T9235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.430033][ T9235] RIP: 0033:0x7f821758efc9 [ 328.430051][ T9235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.430067][ T9235] RSP: 002b:00007f8218340038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.430087][ T9235] RAX: ffffffffffffffda RBX: 00007f82177e5fa0 RCX: 00007f821758efc9 [ 328.430102][ T9235] RDX: 0000000004040810 RSI: 0000200000000140 RDI: 0000000000000003 [ 328.430115][ T9235] RBP: 00007f8218340090 R08: 0000000000000000 R09: 0000000000000000 [ 328.430128][ T9235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.430140][ T9235] R13: 00007f82177e6038 R14: 00007f82177e5fa0 R15: 00007f821790fa28 [ 328.430184][ T9235] [ 329.079828][ T5881] usb 1-1: USB disconnect, device number 40 [ 329.149508][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.910'. [ 329.256431][ T9246] vivid-000: disconnect [ 329.267363][ T9242] vivid-000: reconnect [ 329.368007][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 329.368020][ T30] audit: type=1326 audit(1761477156.003:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e138efc9 code=0x7ffc0000 [ 329.400469][ T30] audit: type=1326 audit(1761477156.003:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e138efc9 code=0x7ffc0000 [ 329.426819][ T30] audit: type=1326 audit(1761477156.003:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f79e138efc9 code=0x7ffc0000 [ 329.449445][ T30] audit: type=1326 audit(1761477156.033:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e138efc9 code=0x7ffc0000 [ 329.479011][ T30] audit: type=1326 audit(1761477156.033:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e138efc9 code=0x7ffc0000 [ 329.510187][ T30] audit: type=1326 audit(1761477156.033:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f79e138efc9 code=0x7ffc0000 [ 329.675071][ T9259] program syz.2.915 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.685462][ T30] audit: type=1326 audit(1761477156.063:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f79e138f003 code=0x7ffc0000 [ 329.802500][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.915'. [ 329.922567][ T30] audit: type=1326 audit(1761477156.063:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f79e138f003 code=0x7ffc0000 [ 329.962109][ T30] audit: type=1326 audit(1761477156.063:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e138efc9 code=0x7ffc0000 [ 330.028250][ T24] usb 6-1: USB disconnect, device number 25 [ 330.031951][ T30] audit: type=1326 audit(1761477156.063:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f79e138efc9 code=0x7ffc0000 [ 330.096613][ T24] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 330.774014][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.919'. [ 330.993512][ T5951] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 331.302862][ T5951] usb 6-1: Using ep0 maxpacket: 32 [ 331.312333][ T5951] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 331.321609][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.332943][ T5951] usb 6-1: Product: syz [ 331.337182][ T5951] usb 6-1: Manufacturer: syz [ 331.341875][ T5951] usb 6-1: SerialNumber: syz [ 331.354485][ T5951] usb 6-1: config 0 descriptor?? [ 331.601245][ T5951] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device: [ 331.688791][ T5951] eb 9a 47 80 9b f8 7a f0 [ 331.693647][ T5951] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 331.808288][ T5951] usb 6-1: USB disconnect, device number 26 [ 332.651764][ T5824] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 332.770482][ T9293] fuseblk: Unknown parameter 'seclabel' [ 332.872914][ T5824] usb 6-1: Using ep0 maxpacket: 8 [ 332.881600][ T5824] usb 6-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 332.895763][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.926'. [ 333.096979][ T5824] usb 6-1: config 0 has an invalid interface number: 150 but max is 64 [ 333.133506][ T5824] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.227106][ T5824] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 333.268567][ T5824] usb 6-1: config 0 has no interface number 0 [ 333.277980][ T5824] usb 6-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.422862][ T5824] usb 6-1: config 0 interface 150 has no altsetting 0 [ 333.429689][ T5824] usb 6-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 333.439576][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.492558][ T5824] usb 6-1: config 0 descriptor?? [ 333.705609][ T9308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.928'. [ 333.930176][ T5824] usb 6-1: USB disconnect, device number 27 [ 334.004056][ T9311] program syz.4.929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.292788][ T5951] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 334.462790][ T5951] usb 4-1: Using ep0 maxpacket: 32 [ 334.501785][ T5951] usb 4-1: unable to get BOS descriptor or descriptor too short [ 334.521076][ T5951] usb 4-1: config 14 has an invalid interface number: 115 but max is 0 [ 334.540924][ T5951] usb 4-1: config 14 has no interface number 0 [ 334.562957][ T5951] usb 4-1: config 14 interface 115 has no altsetting 0 [ 334.593962][ T5951] usb 4-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 334.660672][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.670962][ T5951] usb 4-1: Product: syz [ 334.677906][ T9325] FAULT_INJECTION: forcing a failure. [ 334.677906][ T9325] name failslab, interval 1, probability 0, space 0, times 0 [ 334.692310][ T5951] usb 4-1: Manufacturer: syz [ 334.702091][ T5951] usb 4-1: SerialNumber: syz [ 334.749150][ T9325] CPU: 0 UID: 0 PID: 9325 Comm: syz.0.934 Not tainted syzkaller #0 PREEMPT(full) [ 334.749177][ T9325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 334.749187][ T9325] Call Trace: [ 334.749195][ T9325] [ 334.749203][ T9325] dump_stack_lvl+0x189/0x250 [ 334.749225][ T9325] ? __pfx____ratelimit+0x10/0x10 [ 334.749238][ T9325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.749252][ T9325] ? __pfx__printk+0x10/0x10 [ 334.749266][ T9325] ? __pfx___might_resched+0x10/0x10 [ 334.749280][ T9325] should_fail_ex+0x414/0x560 [ 334.749300][ T9325] should_failslab+0xa8/0x100 [ 334.749312][ T9325] __kmalloc_noprof+0xcb/0x7f0 [ 334.749326][ T9325] ? ethnl_default_notify+0x1af/0xb70 [ 334.749341][ T9325] ethnl_default_notify+0x1af/0xb70 [ 334.749354][ T9325] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 334.749368][ T9325] ? __pfx_ethnl_default_notify+0x10/0x10 [ 334.749388][ T9325] ? mutex_is_locked+0x17/0x50 [ 334.749399][ T9325] ? rtnl_is_locked+0x15/0x20 [ 334.749412][ T9325] ethnl_default_set_doit+0x4f8/0x890 [ 334.749431][ T9325] genl_family_rcv_msg_doit+0x215/0x300 [ 334.749448][ T9325] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 334.749467][ T9325] ? bpf_lsm_capable+0x9/0x20 [ 334.749479][ T9325] ? security_capable+0x7e/0x2e0 [ 334.749497][ T9325] genl_rcv_msg+0x60e/0x790 [ 334.749513][ T9325] ? __pfx_genl_rcv_msg+0x10/0x10 [ 334.749524][ T9325] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 334.749536][ T9325] ? __asan_memcpy+0x40/0x70 [ 334.749549][ T9325] ? __pfx_ref_tracker_free+0x10/0x10 [ 334.749563][ T9325] netlink_rcv_skb+0x208/0x470 [ 334.749577][ T9325] ? __lock_acquire+0xab9/0xd20 [ 334.749588][ T9325] ? __pfx_genl_rcv_msg+0x10/0x10 [ 334.749600][ T9325] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 334.749625][ T9325] ? down_read+0x1ad/0x2e0 [ 334.749642][ T9325] genl_rcv+0x28/0x40 [ 334.749652][ T9325] netlink_unicast+0x82f/0x9e0 [ 334.749679][ T9325] ? __pfx_netlink_unicast+0x10/0x10 [ 334.749694][ T9325] ? netlink_sendmsg+0x642/0xb30 [ 334.749702][ T9325] ? skb_put+0x11b/0x210 [ 334.749714][ T9325] netlink_sendmsg+0x805/0xb30 [ 334.749729][ T9325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.749740][ T9325] ? aa_sock_msg_perm+0xf1/0x1d0 [ 334.749757][ T9325] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 334.749766][ T9325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.749781][ T9325] __sock_sendmsg+0x21c/0x270 [ 334.749796][ T9325] ____sys_sendmsg+0x505/0x830 [ 334.749810][ T9325] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.749826][ T9325] ? import_iovec+0x74/0xa0 [ 334.749840][ T9325] ___sys_sendmsg+0x21f/0x2a0 [ 334.749852][ T9325] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.749882][ T9325] ? __fget_files+0x2a/0x420 [ 334.749891][ T9325] ? __fget_files+0x3a0/0x420 [ 334.749906][ T9325] __x64_sys_sendmsg+0x19b/0x260 [ 334.749918][ T9325] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 334.749934][ T9325] ? __pfx_ksys_write+0x10/0x10 [ 334.749950][ T9325] ? do_syscall_64+0xbe/0xfa0 [ 334.749973][ T9325] do_syscall_64+0xfa/0xfa0 [ 334.749993][ T9325] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.750016][ T9325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.750033][ T9325] ? clear_bhb_loop+0x60/0xb0 [ 334.750055][ T9325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.750072][ T9325] RIP: 0033:0x7feae978efc9 [ 334.750088][ T9325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.750103][ T9325] RSP: 002b:00007feaea5c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.750122][ T9325] RAX: ffffffffffffffda RBX: 00007feae99e5fa0 RCX: 00007feae978efc9 [ 334.750137][ T9325] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 334.750148][ T9325] RBP: 00007feaea5c3090 R08: 0000000000000000 R09: 0000000000000000 [ 334.750160][ T9325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.750171][ T9325] R13: 00007feae99e6038 R14: 00007feae99e5fa0 R15: 00007feae9b0fa28 [ 334.750205][ T9325] [ 335.200987][ T5951] xr_serial 4-1:14.115: More than one union descriptor, skipping ... [ 335.213046][ T5951] usb 4-1: USB disconnect, device number 55 [ 335.308048][ T9332] netlink: 12 bytes leftover after parsing attributes in process `syz.5.939'. [ 335.447717][ T9337] FAULT_INJECTION: forcing a failure. [ 335.447717][ T9337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.481390][ T9337] CPU: 0 UID: 0 PID: 9337 Comm: syz.5.940 Not tainted syzkaller #0 PREEMPT(full) [ 335.481407][ T9337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 335.481414][ T9337] Call Trace: [ 335.481419][ T9337] [ 335.481424][ T9337] dump_stack_lvl+0x189/0x250 [ 335.481442][ T9337] ? __pfx____ratelimit+0x10/0x10 [ 335.481455][ T9337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.481469][ T9337] ? __pfx__printk+0x10/0x10 [ 335.481486][ T9337] should_fail_ex+0x414/0x560 [ 335.481510][ T9337] _copy_to_user+0x31/0xb0 [ 335.481525][ T9337] simple_read_from_buffer+0xe1/0x170 [ 335.481543][ T9337] proc_fail_nth_read+0x1b3/0x220 [ 335.481558][ T9337] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 335.481572][ T9337] ? rw_verify_area+0x2a6/0x4d0 [ 335.481586][ T9337] ? __lock_acquire+0xab9/0xd20 [ 335.481596][ T9337] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 335.481609][ T9337] vfs_read+0x200/0xa30 [ 335.481625][ T9337] ? fdget_pos+0x247/0x320 [ 335.481637][ T9337] ? __pfx___mutex_lock+0x10/0x10 [ 335.481652][ T9337] ? __pfx_vfs_read+0x10/0x10 [ 335.481668][ T9337] ? __fget_files+0x2a/0x420 [ 335.481680][ T9337] ? __fget_files+0x3a0/0x420 [ 335.481689][ T9337] ? __fget_files+0x2a/0x420 [ 335.481702][ T9337] ksys_read+0x145/0x250 [ 335.481718][ T9337] ? __pfx_ksys_read+0x10/0x10 [ 335.481734][ T9337] ? do_syscall_64+0xbe/0xfa0 [ 335.481749][ T9337] do_syscall_64+0xfa/0xfa0 [ 335.481761][ T9337] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.481774][ T9337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.481784][ T9337] ? clear_bhb_loop+0x60/0xb0 [ 335.481796][ T9337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.481806][ T9337] RIP: 0033:0x7f774af8d9dc [ 335.481817][ T9337] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 335.481826][ T9337] RSP: 002b:00007f774be5d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 335.481838][ T9337] RAX: ffffffffffffffda RBX: 00007f774b1e5fa0 RCX: 00007f774af8d9dc [ 335.481845][ T9337] RDX: 000000000000000f RSI: 00007f774be5d0a0 RDI: 0000000000000004 [ 335.481852][ T9337] RBP: 00007f774be5d090 R08: 0000000000000000 R09: 0000000000000000 [ 335.481858][ T9337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 335.481864][ T9337] R13: 00007f774b1e6038 R14: 00007f774b1e5fa0 R15: 00007f774b30fa28 [ 335.481880][ T9337] [ 335.749468][ T9340] binder: BINDER_SET_CONTEXT_MGR already set [ 335.758163][ T9340] binder: 9339:9340 ioctl 4018620d 200000000040 returned -16 [ 335.784021][ T5824] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 335.976001][ T5824] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 335.984320][ T5824] usb 5-1: config 0 has no interface number 0 [ 336.001481][ T5824] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 336.012775][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.030053][ T5824] usb 5-1: Product: syz [ 336.034677][ T5824] usb 5-1: Manufacturer: syz [ 336.046985][ T5824] usb 5-1: SerialNumber: syz [ 336.089738][ T5824] usb 5-1: config 0 descriptor?? [ 336.100323][ T5824] hub 5-1:0.217: bad descriptor, ignoring hub [ 336.109654][ T5824] hub 5-1:0.217: probe with driver hub failed with error -5 [ 336.112812][ T24] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 336.203905][ T5881] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 336.283458][ T5901] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 336.294830][ T24] usb 1-1: config 0 has no interfaces? [ 336.303869][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 336.308643][ T5824] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 336.322794][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.330925][ T24] usb 1-1: Product: syz [ 336.332774][ T5888] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 336.352791][ T24] usb 1-1: Manufacturer: syz [ 336.356298][ T5824] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 336.358276][ T24] usb 1-1: SerialNumber: syz [ 336.383738][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 336.393998][ T5824] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 336.394763][ T5881] usb 3-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 336.417916][ T5824] usb 5-1: media controller created [ 336.418394][ T5881] usb 3-1: config 0 has an invalid interface number: 150 but max is 64 [ 336.432483][ T24] usb 1-1: config 0 descriptor?? [ 336.450652][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.471450][ T5881] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 336.482329][ T5901] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.493189][ T5881] usb 3-1: config 0 has no interface number 0 [ 336.500804][ T5901] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 336.510606][ T5881] usb 3-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.529129][ T5881] usb 3-1: config 0 interface 150 has no altsetting 0 [ 336.536762][ T9333] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 336.539932][ T5901] usb 6-1: New USB device found, idVendor=10c5, idProduct=817f, bcdDevice=e4.46 [ 336.548280][ T5824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 336.561130][ T5888] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.583796][ T5881] usb 3-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 336.592922][ T5888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 336.599617][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 336.609765][ T5888] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 336.619508][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.627783][ T5901] usb 6-1: Product: syz [ 336.632557][ T5901] usb 6-1: Manufacturer: syz [ 336.637461][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.647170][ T5901] usb 6-1: SerialNumber: syz [ 336.652414][ T5881] usb 3-1: config 0 descriptor?? [ 336.698750][ T5888] usb 4-1: config 0 descriptor?? [ 336.704497][ T5901] usb 6-1: config 0 descriptor?? [ 336.735948][ T5824] DVB: Unable to find symbol dib7000p_attach() [ 336.742357][ T5824] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 336.893050][ T5824] rc_core: IR keymap rc-dib0700-rc5 not found [ 336.907476][ T5824] Registered IR keymap rc-empty [ 336.917706][ T5824] dvb-usb: could not initialize remote control. [ 336.947930][ T5824] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 337.150251][ T5888] logitech 0003:046D:C623.0008: unknown main item tag 0x0 [ 337.172850][ T5888] logitech 0003:046D:C623.0008: unknown main item tag 0x0 [ 337.217823][ T5881] usb 3-1: USB disconnect, device number 43 [ 337.234759][ T5888] logitech 0003:046D:C623.0008: unknown main item tag 0x0 [ 337.265887][ T5901] usb 6-1: USB disconnect, device number 28 [ 337.272804][ T5888] logitech 0003:046D:C623.0008: unknown main item tag 0x0 [ 337.286063][ T5888] logitech 0003:046D:C623.0008: unknown main item tag 0x0 [ 337.306979][ T5888] logitech 0003:046D:C623.0008: hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.3-1/input0 [ 337.368452][ T9351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.945'. [ 337.736551][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 337.736569][ T30] audit: type=1326 audit(1761477164.373:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9744b8efc9 code=0x7ffc0000 [ 337.766081][ T30] audit: type=1326 audit(1761477164.373:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9744b8efc9 code=0x7ffc0000 [ 337.790764][ T30] audit: type=1326 audit(1761477164.373:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9744b8efc9 code=0x7ffc0000 [ 337.792547][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.946'. [ 337.830239][ T30] audit: type=1326 audit(1761477164.373:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9744b8efc9 code=0x7ffc0000 [ 337.854851][ T30] audit: type=1326 audit(1761477164.373:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9744b8efc9 code=0x7ffc0000 [ 337.869931][ T9358] netlink: 'syz.2.946': attribute type 1 has an invalid length. [ 337.885032][ T30] audit: type=1326 audit(1761477164.373:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f9744b8efc9 code=0x7ffc0000 [ 337.909054][ T30] audit: type=1326 audit(1761477164.383:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9744b8efc9 code=0x7ffc0000 [ 337.933103][ T9358] netlink: 'syz.2.946': attribute type 2 has an invalid length. [ 337.936764][ T9359] syz.2.946 uses obsolete (PF_INET,SOCK_PACKET) [ 337.960245][ T30] audit: type=1326 audit(1761477164.403:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9744b8efc9 code=0x7ffc0000 [ 337.984505][ T30] audit: type=1326 audit(1761477164.403:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9744b8efc9 code=0x7ffc0000 [ 338.009490][ T30] audit: type=1326 audit(1761477164.403:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9744b8efc9 code=0x7ffc0000 [ 338.272198][ T5824] usb 5-1: USB disconnect, device number 31 [ 338.402989][ T5824] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 338.417207][ T9377] netlink: 16 bytes leftover after parsing attributes in process `syz.2.951'. [ 338.503287][ T5951] usb 1-1: USB disconnect, device number 41 [ 338.542960][ T9381] netlink: 28 bytes leftover after parsing attributes in process `syz.4.952'. [ 338.598581][ T9370] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 338.605009][ T9370] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 338.612592][ T9370] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 338.632487][ T9370] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 338.658171][ T9370] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 338.962876][ T5881] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 339.052811][ T5901] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 339.088836][ T5831] usb 4-1: USB disconnect, device number 56 [ 339.113456][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 339.137140][ T5881] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 339.187088][ T5881] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 339.202950][ T5901] usb 3-1: device descriptor read/64, error -71 [ 339.226418][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 339.247525][ T5881] usb 1-1: Product: syz [ 339.259897][ T5881] usb 1-1: Manufacturer: syz [ 339.269371][ T5881] usb 1-1: SerialNumber: syz [ 339.293079][ T5881] usb 1-1: config 0 descriptor?? [ 339.313888][ T9384] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 339.462816][ T5901] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 339.607017][ T5888] usb 1-1: USB disconnect, device number 42 [ 339.613555][ T5901] usb 3-1: device descriptor read/64, error -71 [ 339.733389][ T5901] usb usb3-port1: attempt power cycle [ 339.752792][ T24] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 339.846728][ T9384] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.953'. [ 339.912737][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 339.922437][ T24] usb 4-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 339.931251][ T24] usb 4-1: config 0 has an invalid interface number: 150 but max is 64 [ 339.939528][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.950147][ T24] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 339.959264][ T24] usb 4-1: config 0 has no interface number 0 [ 339.965864][ T24] usb 4-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.986491][ T24] usb 4-1: config 0 interface 150 has no altsetting 0 [ 339.993406][ T24] usb 4-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 340.002478][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.013699][ T24] usb 4-1: config 0 descriptor?? [ 340.072859][ T5901] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 340.093444][ T5901] usb 3-1: device descriptor read/8, error -71 [ 340.102794][ T5888] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 340.254806][ T5888] usb 1-1: Invalid ep0 maxpacket: 32 [ 340.332770][ T5901] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 340.353152][ T5901] usb 3-1: device descriptor read/8, error -71 [ 340.402811][ T5888] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 340.433213][ T24] usb 4-1: USB disconnect, device number 57 [ 340.463526][ T5901] usb usb3-port1: unable to enumerate USB device [ 340.542878][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 340.563044][ T5888] usb 1-1: Invalid ep0 maxpacket: 32 [ 340.568670][ T5888] usb usb1-port1: attempt power cycle [ 340.622828][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 340.622913][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 340.704929][ T5826] Bluetooth: hci0: command 0x0405 tx timeout [ 340.704958][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 340.912797][ T5888] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 340.934100][ T5888] usb 1-1: Invalid ep0 maxpacket: 32 [ 341.073894][ T5888] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 341.090094][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'. [ 341.150155][ T5888] usb 1-1: Invalid ep0 maxpacket: 32 [ 341.172837][ T5888] usb usb1-port1: unable to enumerate USB device [ 341.207238][ T9400] : entered promiscuous mode [ 341.529200][ T9405] FAULT_INJECTION: forcing a failure. [ 341.529200][ T9405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.542366][ T9405] CPU: 1 UID: 0 PID: 9405 Comm: syz.5.959 Not tainted syzkaller #0 PREEMPT(full) [ 341.542390][ T9405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 341.542403][ T9405] Call Trace: [ 341.542410][ T9405] [ 341.542417][ T9405] dump_stack_lvl+0x189/0x250 [ 341.542445][ T9405] ? __pfx____ratelimit+0x10/0x10 [ 341.542467][ T9405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.542489][ T9405] ? __pfx__printk+0x10/0x10 [ 341.542517][ T9405] should_fail_ex+0x414/0x560 [ 341.542547][ T9405] _copy_to_user+0x31/0xb0 [ 341.542572][ T9405] simple_read_from_buffer+0xe1/0x170 [ 341.542603][ T9405] proc_fail_nth_read+0x1b3/0x220 [ 341.542629][ T9405] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 341.542656][ T9405] ? rw_verify_area+0x2a6/0x4d0 [ 341.542684][ T9405] ? __lock_acquire+0xab9/0xd20 [ 341.542700][ T9405] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 341.542722][ T9405] vfs_read+0x200/0xa30 [ 341.542745][ T9405] ? fdget_pos+0x247/0x320 [ 341.542766][ T9405] ? __pfx___mutex_lock+0x10/0x10 [ 341.542793][ T9405] ? __pfx_vfs_read+0x10/0x10 [ 341.542819][ T9405] ? __fget_files+0x2a/0x420 [ 341.542841][ T9405] ? __fget_files+0x3a0/0x420 [ 341.542857][ T9405] ? __fget_files+0x2a/0x420 [ 341.542883][ T9405] ksys_read+0x145/0x250 [ 341.542910][ T9405] ? __pfx_ksys_read+0x10/0x10 [ 341.542939][ T9405] ? do_syscall_64+0xbe/0xfa0 [ 341.542977][ T9405] do_syscall_64+0xfa/0xfa0 [ 341.543000][ T9405] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.543024][ T9405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.543043][ T9405] ? clear_bhb_loop+0x60/0xb0 [ 341.543067][ T9405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.543085][ T9405] RIP: 0033:0x7f774af8d9dc [ 341.543103][ T9405] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 341.543120][ T9405] RSP: 002b:00007f774be5d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 341.543141][ T9405] RAX: ffffffffffffffda RBX: 00007f774b1e5fa0 RCX: 00007f774af8d9dc [ 341.543156][ T9405] RDX: 000000000000000f RSI: 00007f774be5d0a0 RDI: 0000000000000006 [ 341.543167][ T9405] RBP: 00007f774be5d090 R08: 0000000000000000 R09: 0000000000000000 [ 341.543179][ T9405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 341.543191][ T9405] R13: 00007f774b1e6038 R14: 00007f774b1e5fa0 R15: 00007f774b30fa28 [ 341.543223][ T9405] [ 341.858817][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.962'. [ 342.272832][ T5951] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 342.509108][ T5951] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 342.520649][ T5951] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 342.743164][ T5951] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.779480][ T5951] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 342.805278][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.845354][ T9438] program syz.3.968 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.886324][ T5951] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 342.899595][ T5951] usb 5-1: invalid MIDI out EP 0 [ 343.081430][ T9413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.110979][ T9413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.125723][ T9441] netlink: 'syz.3.968': attribute type 10 has an invalid length. [ 343.134745][ T9441] netlink: 40 bytes leftover after parsing attributes in process `syz.3.968'. [ 343.160191][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.968'. [ 343.268612][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.447176][ T5951] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 343.619410][ T9449] netlink: 'syz.2.971': attribute type 12 has an invalid length. [ 343.640748][ T9449] netlink: 'syz.2.971': attribute type 29 has an invalid length. [ 343.671008][ T9449] netlink: 148 bytes leftover after parsing attributes in process `syz.2.971'. [ 343.696507][ T9449] netlink: 59 bytes leftover after parsing attributes in process `syz.2.971'. [ 343.735559][ T9451] sch_fq: defrate 16 ignored. [ 343.781435][ T9454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.971'. [ 344.053446][ T9452] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 344.059841][ T9452] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 344.078820][ T9452] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 344.115011][ T9452] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 344.128949][ T9452] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 344.184263][ T9461] netlink: 'syz.0.973': attribute type 1 has an invalid length. [ 344.247392][ T9463] netlink: 'syz.0.973': attribute type 1 has an invalid length. [ 344.294322][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.973'. [ 344.443925][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 344.443936][ T30] audit: type=1326 audit(1761477171.083:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e138efc9 code=0x7ffc0000 [ 344.477213][ T9468] FAULT_INJECTION: forcing a failure. [ 344.477213][ T9468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.490718][ T9468] CPU: 1 UID: 0 PID: 9468 Comm: syz.3.975 Not tainted syzkaller #0 PREEMPT(full) [ 344.490742][ T9468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 344.490754][ T9468] Call Trace: [ 344.490761][ T9468] [ 344.490777][ T9468] dump_stack_lvl+0x189/0x250 [ 344.490808][ T9468] ? __pfx____ratelimit+0x10/0x10 [ 344.490830][ T9468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.490855][ T9468] ? __pfx__printk+0x10/0x10 [ 344.490875][ T9468] ? __might_fault+0xb0/0x130 [ 344.490910][ T9468] should_fail_ex+0x414/0x560 [ 344.490942][ T9468] _copy_from_user+0x2d/0xb0 [ 344.490966][ T9468] __sys_bpf+0x1e3/0x860 [ 344.490987][ T9468] ? __pfx___sys_bpf+0x10/0x10 [ 344.491020][ T9468] ? ksys_write+0x1e1/0x250 [ 344.491050][ T9468] ? __secure_computing+0xe2/0x2a0 [ 344.491079][ T9468] __x64_sys_bpf+0x7c/0x90 [ 344.491106][ T9468] do_syscall_64+0xfa/0xfa0 [ 344.491129][ T9468] ? lockdep_hardirqs_on+0x9c/0x150 [ 344.491153][ T9468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.491171][ T9468] ? clear_bhb_loop+0x60/0xb0 [ 344.491194][ T9468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.491212][ T9468] RIP: 0033:0x7f79e138efc9 [ 344.491229][ T9468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.491247][ T9468] RSP: 002b:00007f79e2311038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 344.491267][ T9468] RAX: ffffffffffffffda RBX: 00007f79e15e5fa0 RCX: 00007f79e138efc9 [ 344.491280][ T9468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000b [ 344.491292][ T9468] RBP: 00007f79e2311090 R08: 0000000000000000 R09: 0000000000000000 [ 344.491301][ T9468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.491317][ T9468] R13: 00007f79e15e6038 R14: 00007f79e15e5fa0 R15: 00007f79e170fa28 [ 344.491346][ T9468] [ 344.553356][ T30] audit: type=1326 audit(1761477171.113:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f79e138efc9 code=0x7ffc0000 [ 344.700563][ T30] audit: type=1326 audit(1761477171.113:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e138efc9 code=0x7ffc0000 [ 344.730441][ T30] audit: type=1326 audit(1761477171.113:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f79e138efc9 code=0x7ffc0000 [ 344.755397][ T30] audit: type=1326 audit(1761477171.113:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e138efc9 code=0x7ffc0000 [ 344.779968][ T30] audit: type=1326 audit(1761477171.113:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79e138efc9 code=0x7ffc0000 [ 344.803824][ T30] audit: type=1326 audit(1761477171.113:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e138efc9 code=0x7ffc0000 [ 344.826515][ T30] audit: type=1326 audit(1761477171.113:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f79e138efc9 code=0x7ffc0000 [ 344.849177][ T30] audit: type=1326 audit(1761477171.113:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e138efc9 code=0x7ffc0000 [ 344.894704][ T30] audit: type=1326 audit(1761477171.113:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f79e138efc9 code=0x7ffc0000 [ 345.021324][ T5888] usb 5-1: USB disconnect, device number 32 [ 345.280553][ T9482] netlink: 48 bytes leftover after parsing attributes in process `syz.0.981'. [ 345.306234][ T9486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.980'. [ 346.073246][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 346.079452][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 346.142864][ T5826] Bluetooth: hci0: command 0x0405 tx timeout [ 346.148967][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 346.155227][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 346.577331][ T9510] __nla_validate_parse: 1 callbacks suppressed [ 346.577350][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'. [ 346.895451][ T9519] netlink: 16 bytes leftover after parsing attributes in process `syz.5.991'. [ 347.032783][ T5888] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 347.083331][ T5831] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 347.236516][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 347.273332][ T5901] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 347.305741][ T5888] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 347.306176][ T5831] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 347.346407][ T5831] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 347.358134][ T5831] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 347.371227][ T5888] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 347.372088][ T5831] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 347.392008][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.426651][ T5831] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 347.430764][ T5888] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 347.440439][ T9531] FAULT_INJECTION: forcing a failure. [ 347.440439][ T9531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.469180][ T5831] usb 5-1: invalid MIDI out EP 0 [ 347.482778][ T9531] CPU: 0 UID: 0 PID: 9531 Comm: syz.5.995 Not tainted syzkaller #0 PREEMPT(full) [ 347.482800][ T9531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 347.482811][ T9531] Call Trace: [ 347.482818][ T9531] [ 347.482826][ T9531] dump_stack_lvl+0x189/0x250 [ 347.482855][ T9531] ? __pfx____ratelimit+0x10/0x10 [ 347.482878][ T9531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.482902][ T9531] ? __pfx__printk+0x10/0x10 [ 347.482906][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 347.482933][ T9531] should_fail_ex+0x414/0x560 [ 347.482963][ T9531] _copy_to_user+0x31/0xb0 [ 347.482988][ T9531] simple_read_from_buffer+0xe1/0x170 [ 347.483020][ T9531] proc_fail_nth_read+0x1b3/0x220 [ 347.483047][ T9531] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 347.483072][ T9531] ? rw_verify_area+0x2a6/0x4d0 [ 347.483096][ T9531] ? __lock_acquire+0xab9/0xd20 [ 347.483112][ T9531] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 347.483137][ T9531] vfs_read+0x200/0xa30 [ 347.483161][ T9531] ? fdget_pos+0x247/0x320 [ 347.483182][ T9531] ? __pfx___mutex_lock+0x10/0x10 [ 347.483212][ T9531] ? __pfx_vfs_read+0x10/0x10 [ 347.483238][ T9531] ? __fget_files+0x2a/0x420 [ 347.483260][ T9531] ? __fget_files+0x3a0/0x420 [ 347.483276][ T9531] ? __fget_files+0x2a/0x420 [ 347.483302][ T9531] ksys_read+0x145/0x250 [ 347.483337][ T9531] ? __pfx_ksys_read+0x10/0x10 [ 347.483365][ T9531] ? do_syscall_64+0xbe/0xfa0 [ 347.483392][ T9531] do_syscall_64+0xfa/0xfa0 [ 347.483414][ T9531] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.483437][ T9531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.483456][ T9531] ? clear_bhb_loop+0x60/0xb0 [ 347.483479][ T9531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.483496][ T9531] RIP: 0033:0x7f774af8d9dc [ 347.483513][ T9531] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 347.483530][ T9531] RSP: 002b:00007f774be5d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 347.483550][ T9531] RAX: ffffffffffffffda RBX: 00007f774b1e5fa0 RCX: 00007f774af8d9dc [ 347.483572][ T9531] RDX: 000000000000000f RSI: 00007f774be5d0a0 RDI: 0000000000000005 [ 347.483584][ T9531] RBP: 00007f774be5d090 R08: 0000000000000000 R09: 0000000000000000 [ 347.483595][ T9531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 347.483607][ T9531] R13: 00007f774b1e6038 R14: 00007f774b1e5fa0 R15: 00007f774b30fa28 [ 347.483638][ T9531] [ 347.713195][ T9522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.746839][ T5888] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 347.757295][ T5888] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.771446][ T5888] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 347.796455][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.866679][ T5831] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 347.892976][ T9522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.983936][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.370973][ T5888] usb 3-1: usb_control_msg returned -32 [ 348.384956][ T5888] usbtmc 3-1:16.0: can't read capabilities [ 348.485602][ T5901] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 348.494015][ T5901] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 348.504023][ T5901] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 348.524143][ T5901] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 348.534246][ T5901] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.567392][ T5901] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 348.581452][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.850355][ T5901] usb 4-1: usb_control_msg returned -32 [ 349.115224][ T5901] usbtmc 4-1:16.0: can't read capabilities [ 349.384962][ T9551] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1001'. [ 349.399506][ T9551] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1001'. [ 349.596055][ T5951] usb 3-1: USB disconnect, device number 48 [ 349.643272][ T5831] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 349.793590][ T5831] usb 1-1: Using ep0 maxpacket: 32 [ 349.801512][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.813036][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.884257][ T5831] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 349.903847][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.934837][ T5831] usb 1-1: config 0 descriptor?? [ 349.946654][ T5951] usb 5-1: USB disconnect, device number 33 [ 349.987768][ T5831] hub 1-1:0.0: USB hub found [ 350.149512][ T9561] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 350.182799][ T5831] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 350.382209][ T5831] usbhid 1-1:0.0: can't add hid device: -71 [ 350.397049][ T5831] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 350.476708][ T5831] usb 1-1: USB disconnect, device number 47 [ 350.708918][ T9576] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1010'. [ 350.808415][ T9578] FAULT_INJECTION: forcing a failure. [ 350.808415][ T9578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.862968][ T9578] CPU: 0 UID: 0 PID: 9578 Comm: syz.5.1011 Not tainted syzkaller #0 PREEMPT(full) [ 350.862985][ T9578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 350.862992][ T9578] Call Trace: [ 350.862997][ T9578] [ 350.863002][ T9578] dump_stack_lvl+0x189/0x250 [ 350.863020][ T9578] ? __pfx____ratelimit+0x10/0x10 [ 350.863034][ T9578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.863047][ T9578] ? __pfx__printk+0x10/0x10 [ 350.863058][ T9578] ? __might_fault+0xb0/0x130 [ 350.863078][ T9578] should_fail_ex+0x414/0x560 [ 350.863096][ T9578] _copy_from_iter+0x1de/0x1790 [ 350.863111][ T9578] ? rcu_is_watching+0x15/0xb0 [ 350.863125][ T9578] ? kmalloc_reserve+0xbd/0x290 [ 350.863147][ T9578] ? __pfx__copy_from_iter+0x10/0x10 [ 350.863159][ T9578] ? __build_skb_around+0x262/0x3f0 [ 350.863176][ T9578] ? netlink_sendmsg+0x642/0xb30 [ 350.863184][ T9578] ? skb_put+0x11b/0x210 [ 350.863195][ T9578] netlink_sendmsg+0x6b2/0xb30 [ 350.863209][ T9578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.863220][ T9578] ? aa_sock_msg_perm+0xf1/0x1d0 [ 350.863236][ T9578] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 350.863246][ T9578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.863256][ T9578] __sock_sendmsg+0x21c/0x270 [ 350.863270][ T9578] ____sys_sendmsg+0x505/0x830 [ 350.863284][ T9578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.863299][ T9578] ? import_iovec+0x74/0xa0 [ 350.863313][ T9578] ___sys_sendmsg+0x21f/0x2a0 [ 350.863325][ T9578] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.863367][ T9578] ? __fget_files+0x2a/0x420 [ 350.863388][ T9578] ? __fget_files+0x3a0/0x420 [ 350.863413][ T9578] __x64_sys_sendmsg+0x19b/0x260 [ 350.863434][ T9578] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 350.863452][ T9578] ? __pfx_ksys_write+0x10/0x10 [ 350.863469][ T9578] ? do_syscall_64+0xbe/0xfa0 [ 350.863484][ T9578] do_syscall_64+0xfa/0xfa0 [ 350.863496][ T9578] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.863510][ T9578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.863520][ T9578] ? clear_bhb_loop+0x60/0xb0 [ 350.863532][ T9578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.863542][ T9578] RIP: 0033:0x7f774af8efc9 [ 350.863552][ T9578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.863560][ T9578] RSP: 002b:00007f774be5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.863572][ T9578] RAX: ffffffffffffffda RBX: 00007f774b1e5fa0 RCX: 00007f774af8efc9 [ 350.863581][ T9578] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 350.863596][ T9578] RBP: 00007f774be5d090 R08: 0000000000000000 R09: 0000000000000000 [ 350.863602][ T9578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.863608][ T9578] R13: 00007f774b1e6038 R14: 00007f774b1e5fa0 R15: 00007f774b30fa28 [ 350.863624][ T9578] [ 351.145528][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.215809][ T9581] FAULT_INJECTION: forcing a failure. [ 351.215809][ T9581] name failslab, interval 1, probability 0, space 0, times 0 [ 351.462831][ T9581] CPU: 0 UID: 0 PID: 9581 Comm: syz.5.1013 Not tainted syzkaller #0 PREEMPT(full) [ 351.462864][ T9581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 351.462876][ T9581] Call Trace: [ 351.462884][ T9581] [ 351.462892][ T9581] dump_stack_lvl+0x189/0x250 [ 351.462921][ T9581] ? __pfx____ratelimit+0x10/0x10 [ 351.462943][ T9581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.462961][ T9581] ? __pfx__printk+0x10/0x10 [ 351.462970][ T9581] ? netlink_sendmsg+0x805/0xb30 [ 351.462980][ T9581] ? __x64_sys_sendmsg+0x19b/0x260 [ 351.462991][ T9581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.463006][ T9581] should_fail_ex+0x414/0x560 [ 351.463026][ T9581] should_failslab+0xa8/0x100 [ 351.463045][ T9581] kmem_cache_alloc_noprof+0x74/0x6e0 [ 351.463068][ T9581] ? skb_clone+0x212/0x3a0 [ 351.463091][ T9581] skb_clone+0x212/0x3a0 [ 351.463114][ T9581] __netlink_deliver_tap+0x404/0x850 [ 351.463152][ T9581] ? netlink_deliver_tap+0x2e/0x1b0 [ 351.463169][ T9581] netlink_deliver_tap+0x19c/0x1b0 [ 351.463185][ T9581] netlink_sendskb+0x68/0x140 [ 351.463201][ T9581] netlink_unicast+0x397/0x9e0 [ 351.463214][ T9581] ? __asan_memcpy+0x40/0x70 [ 351.463231][ T9581] ? __pfx_netlink_unicast+0x10/0x10 [ 351.463250][ T9581] netlink_rcv_skb+0x28c/0x470 [ 351.463265][ T9581] ? __lock_acquire+0xab9/0xd20 [ 351.463275][ T9581] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.463288][ T9581] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 351.463322][ T9581] ? down_read+0x1ad/0x2e0 [ 351.463339][ T9581] genl_rcv+0x28/0x40 [ 351.463350][ T9581] netlink_unicast+0x82f/0x9e0 [ 351.463369][ T9581] ? __pfx_netlink_unicast+0x10/0x10 [ 351.463384][ T9581] ? netlink_sendmsg+0x642/0xb30 [ 351.463392][ T9581] ? skb_put+0x11b/0x210 [ 351.463403][ T9581] netlink_sendmsg+0x805/0xb30 [ 351.463418][ T9581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.463429][ T9581] ? aa_sock_msg_perm+0xf1/0x1d0 [ 351.463445][ T9581] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 351.463455][ T9581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.463465][ T9581] __sock_sendmsg+0x21c/0x270 [ 351.463480][ T9581] ____sys_sendmsg+0x505/0x830 [ 351.463493][ T9581] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.463509][ T9581] ? import_iovec+0x74/0xa0 [ 351.463524][ T9581] ___sys_sendmsg+0x21f/0x2a0 [ 351.463535][ T9581] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.463565][ T9581] ? __fget_files+0x2a/0x420 [ 351.463574][ T9581] ? __fget_files+0x3a0/0x420 [ 351.463588][ T9581] __x64_sys_sendmsg+0x19b/0x260 [ 351.463600][ T9581] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.463616][ T9581] ? __pfx_ksys_write+0x10/0x10 [ 351.463632][ T9581] ? do_syscall_64+0xbe/0xfa0 [ 351.463648][ T9581] do_syscall_64+0xfa/0xfa0 [ 351.463660][ T9581] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.463673][ T9581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.463683][ T9581] ? clear_bhb_loop+0x60/0xb0 [ 351.463695][ T9581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.463704][ T9581] RIP: 0033:0x7f774af8efc9 [ 351.463715][ T9581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.463724][ T9581] RSP: 002b:00007f774be5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.463736][ T9581] RAX: ffffffffffffffda RBX: 00007f774b1e5fa0 RCX: 00007f774af8efc9 [ 351.463744][ T9581] RDX: 0000000000020000 RSI: 0000200000000480 RDI: 0000000000000004 [ 351.463751][ T9581] RBP: 00007f774be5d090 R08: 0000000000000000 R09: 0000000000000000 [ 351.463757][ T9581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 351.463763][ T9581] R13: 00007f774b1e6038 R14: 00007f774b1e5fa0 R15: 00007f774b30fa28 [ 351.463779][ T9581] [ 351.822948][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.944045][ T5831] usb 4-1: USB disconnect, device number 58 [ 352.451110][ T9606] FAULT_INJECTION: forcing a failure. [ 352.451110][ T9606] name failslab, interval 1, probability 0, space 0, times 0 [ 352.474196][ T9606] CPU: 1 UID: 0 PID: 9606 Comm: syz.2.1018 Not tainted syzkaller #0 PREEMPT(full) [ 352.474222][ T9606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 352.474232][ T9606] Call Trace: [ 352.474247][ T9606] [ 352.474255][ T9606] dump_stack_lvl+0x189/0x250 [ 352.474285][ T9606] ? __pfx____ratelimit+0x10/0x10 [ 352.474309][ T9606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.474339][ T9606] ? __pfx__printk+0x10/0x10 [ 352.474360][ T9606] ? __pfx___might_resched+0x10/0x10 [ 352.474380][ T9606] ? fs_reclaim_acquire+0x7d/0x100 [ 352.474417][ T9606] should_fail_ex+0x414/0x560 [ 352.474449][ T9606] should_failslab+0xa8/0x100 [ 352.474470][ T9606] kmem_cache_alloc_noprof+0x74/0x6e0 [ 352.474496][ T9606] ? skb_clone+0x212/0x3a0 [ 352.474521][ T9606] skb_clone+0x212/0x3a0 [ 352.474539][ T9606] ? nfnetlink_rcv+0x4ba/0x2590 [ 352.474566][ T9606] nfnetlink_rcv+0x4ec/0x2590 [ 352.474593][ T9606] ? __dev_queue_xmit+0x27b/0x3b50 [ 352.474616][ T9606] ? __dev_queue_xmit+0x1d79/0x3b50 [ 352.474635][ T9606] ? kasan_save_track+0x3e/0x80 [ 352.474660][ T9606] ? __kasan_slab_alloc+0x6c/0x80 [ 352.474695][ T9606] ? __dev_queue_xmit+0x27b/0x3b50 [ 352.474727][ T9606] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 352.474768][ T9606] ? ref_tracker_free+0x63a/0x7d0 [ 352.474787][ T9606] ? __asan_memcpy+0x40/0x70 [ 352.474810][ T9606] ? __pfx_ref_tracker_free+0x10/0x10 [ 352.474825][ T9606] ? __skb_clone+0x63/0x7a0 [ 352.474849][ T9606] ? __skb_clone+0x483/0x7a0 [ 352.474874][ T9606] ? skb_clone+0x246/0x3a0 [ 352.474897][ T9606] ? __netlink_deliver_tap+0x807/0x850 [ 352.474925][ T9606] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.474970][ T9606] netlink_unicast+0x82f/0x9e0 [ 352.475003][ T9606] ? __pfx_netlink_unicast+0x10/0x10 [ 352.475031][ T9606] ? netlink_sendmsg+0x642/0xb30 [ 352.475049][ T9606] ? skb_put+0x11b/0x210 [ 352.475069][ T9606] netlink_sendmsg+0x805/0xb30 [ 352.475096][ T9606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.475117][ T9606] ? aa_sock_msg_perm+0xf1/0x1d0 [ 352.475145][ T9606] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 352.475164][ T9606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.475182][ T9606] __sock_sendmsg+0x21c/0x270 [ 352.475209][ T9606] ____sys_sendmsg+0x505/0x830 [ 352.475234][ T9606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.475269][ T9606] ? import_iovec+0x74/0xa0 [ 352.475297][ T9606] ___sys_sendmsg+0x21f/0x2a0 [ 352.475319][ T9606] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.475370][ T9606] ? __fget_files+0x2a/0x420 [ 352.475386][ T9606] ? __fget_files+0x3a0/0x420 [ 352.475414][ T9606] __x64_sys_sendmsg+0x19b/0x260 [ 352.475437][ T9606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 352.475464][ T9606] ? __pfx_ksys_write+0x10/0x10 [ 352.475492][ T9606] ? do_syscall_64+0xbe/0xfa0 [ 352.475519][ T9606] do_syscall_64+0xfa/0xfa0 [ 352.475541][ T9606] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.475565][ T9606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.475584][ T9606] ? clear_bhb_loop+0x60/0xb0 [ 352.475606][ T9606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.475625][ T9606] RIP: 0033:0x7f9744b8efc9 [ 352.475641][ T9606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.475656][ T9606] RSP: 002b:00007f9742df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.475677][ T9606] RAX: ffffffffffffffda RBX: 00007f9744de5fa0 RCX: 00007f9744b8efc9 [ 352.475691][ T9606] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 352.475704][ T9606] RBP: 00007f9742df6090 R08: 0000000000000000 R09: 0000000000000000 [ 352.475715][ T9606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.475727][ T9606] R13: 00007f9744de6038 R14: 00007f9744de5fa0 R15: 00007f9744f0fa28 [ 352.475757][ T9606] [ 352.692827][ T5831] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 352.749297][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 352.749314][ T30] audit: type=1326 audit(1761477179.363:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9607 comm="syz.0.1019" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feae978efc9 code=0x0 [ 353.136234][ T9617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1020'. [ 353.161041][ T5831] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 353.181052][ T9614] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1020'. [ 353.242011][ T9621] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1023'. [ 353.310505][ T30] audit: type=1326 audit(1761477179.943:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.5.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774af8efc9 code=0x7ffc0000 [ 353.342081][ T30] audit: type=1326 audit(1761477179.973:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.5.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f774af8efc9 code=0x7ffc0000 [ 353.472770][ T5901] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 353.604496][ T30] audit: type=1326 audit(1761477179.973:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.5.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774af8efc9 code=0x7ffc0000 [ 353.628203][ T30] audit: type=1326 audit(1761477179.973:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.5.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f774af8efc9 code=0x7ffc0000 [ 353.665328][ T30] audit: type=1326 audit(1761477180.003:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.5.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774af8efc9 code=0x7ffc0000 [ 353.736334][ T5831] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 353.772119][ T30] audit: type=1326 audit(1761477180.003:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.5.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f774af8efc9 code=0x7ffc0000 [ 353.775663][ T5831] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 353.795076][ T30] audit: type=1326 audit(1761477180.003:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.5.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774af8efc9 code=0x7ffc0000 [ 353.861674][ T30] audit: type=1326 audit(1761477180.003:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.5.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f774af8efc9 code=0x7ffc0000 [ 353.888290][ T5831] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 353.890740][ T5901] usb 5-1: config 6 has an invalid interface number: 108 but max is 0 [ 353.906075][ T5901] usb 5-1: config 6 has no interface number 0 [ 353.912258][ T5901] usb 5-1: config 6 interface 108 has no altsetting 0 [ 353.919972][ T30] audit: type=1326 audit(1761477180.003:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.5.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774af8efc9 code=0x7ffc0000 [ 353.932745][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.948808][ T5901] usb 5-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=d2.1d [ 353.962860][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.971051][ T5901] usb 5-1: Product: syz [ 353.984044][ T5831] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 353.999021][ T5901] usb 5-1: Manufacturer: syz [ 354.007402][ T5901] usb 5-1: SerialNumber: syz [ 354.010873][ T5831] usb 4-1: invalid MIDI out EP 0 [ 354.183434][ T9597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.193379][ T9629] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1026'. [ 354.203427][ T9597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.205771][ T5831] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 354.225633][ T9629] FAULT_INJECTION: forcing a failure. [ 354.225633][ T9629] name failslab, interval 1, probability 0, space 0, times 0 [ 354.245478][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.262988][ T9619] netlink: 'syz.4.1022': attribute type 1 has an invalid length. [ 354.271980][ T9629] CPU: 1 UID: 0 PID: 9629 Comm: syz.5.1026 Not tainted syzkaller #0 PREEMPT(full) [ 354.272004][ T9629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 354.272019][ T9629] Call Trace: [ 354.272027][ T9629] [ 354.272035][ T9629] dump_stack_lvl+0x189/0x250 [ 354.272066][ T9629] ? __pfx____ratelimit+0x10/0x10 [ 354.272090][ T9629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.272122][ T9629] ? __pfx__printk+0x10/0x10 [ 354.272139][ T9629] ? netlink_sendmsg+0x805/0xb30 [ 354.272157][ T9629] ? __x64_sys_sendmsg+0x19b/0x260 [ 354.272178][ T9629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.272206][ T9629] should_fail_ex+0x414/0x560 [ 354.272240][ T9629] should_failslab+0xa8/0x100 [ 354.272261][ T9629] kmem_cache_alloc_noprof+0x74/0x6e0 [ 354.272286][ T9629] ? skb_clone+0x212/0x3a0 [ 354.272311][ T9629] skb_clone+0x212/0x3a0 [ 354.272334][ T9629] __netlink_deliver_tap+0x404/0x850 [ 354.272374][ T9629] ? netlink_deliver_tap+0x2e/0x1b0 [ 354.272404][ T9629] netlink_deliver_tap+0x19c/0x1b0 [ 354.272434][ T9629] netlink_sendskb+0x68/0x140 [ 354.272462][ T9629] netlink_unicast+0x397/0x9e0 [ 354.272486][ T9629] ? __asan_memcpy+0x40/0x70 [ 354.272518][ T9629] ? __pfx_netlink_unicast+0x10/0x10 [ 354.272549][ T9629] netlink_rcv_skb+0x28c/0x470 [ 354.272573][ T9629] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.272597][ T9629] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 354.272624][ T9629] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 354.272664][ T9629] ? bpf_lsm_capable+0x9/0x20 [ 354.272685][ T9629] ? security_capable+0x7e/0x2e0 [ 354.272715][ T9629] nfnetlink_rcv+0x282/0x2590 [ 354.272742][ T9629] ? __dev_queue_xmit+0x27b/0x3b50 [ 354.272766][ T9629] ? __dev_queue_xmit+0x1d79/0x3b50 [ 354.272785][ T9629] ? kasan_save_track+0x3e/0x80 [ 354.272808][ T9629] ? __kasan_slab_alloc+0x6c/0x80 [ 354.272842][ T9629] ? __dev_queue_xmit+0x27b/0x3b50 [ 354.272872][ T9629] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 354.272893][ T9629] ? __pfx___dev_queue_xmit+0x10/0x10 [ 354.272924][ T9629] ? ref_tracker_free+0x63a/0x7d0 [ 354.272944][ T9629] ? __asan_memcpy+0x40/0x70 [ 354.272965][ T9629] ? __pfx_ref_tracker_free+0x10/0x10 [ 354.272981][ T9629] ? __skb_clone+0x63/0x7a0 [ 354.273003][ T9629] ? __skb_clone+0x483/0x7a0 [ 354.273027][ T9629] ? skb_clone+0x246/0x3a0 [ 354.273049][ T9629] ? __netlink_deliver_tap+0x807/0x850 [ 354.273077][ T9629] ? netlink_deliver_tap+0x2e/0x1b0 [ 354.273120][ T9629] ? netlink_deliver_tap+0x2e/0x1b0 [ 354.273153][ T9629] netlink_unicast+0x82f/0x9e0 [ 354.273187][ T9629] ? __pfx_netlink_unicast+0x10/0x10 [ 354.273213][ T9629] ? netlink_sendmsg+0x642/0xb30 [ 354.273227][ T9629] ? skb_put+0x11b/0x210 [ 354.273246][ T9629] netlink_sendmsg+0x805/0xb30 [ 354.273271][ T9629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.273291][ T9629] ? aa_sock_msg_perm+0xf1/0x1d0 [ 354.273317][ T9629] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 354.273334][ T9629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.273353][ T9629] __sock_sendmsg+0x21c/0x270 [ 354.273380][ T9629] ____sys_sendmsg+0x505/0x830 [ 354.273405][ T9629] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.273434][ T9629] ? import_iovec+0x74/0xa0 [ 354.273461][ T9629] ___sys_sendmsg+0x21f/0x2a0 [ 354.273484][ T9629] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.273539][ T9629] ? __fget_files+0x2a/0x420 [ 354.273556][ T9629] ? __fget_files+0x3a0/0x420 [ 354.273584][ T9629] __x64_sys_sendmsg+0x19b/0x260 [ 354.273607][ T9629] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.273637][ T9629] ? __pfx_ksys_write+0x10/0x10 [ 354.273667][ T9629] ? do_syscall_64+0xbe/0xfa0 [ 354.273696][ T9629] do_syscall_64+0xfa/0xfa0 [ 354.273719][ T9629] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.273743][ T9629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.273762][ T9629] ? clear_bhb_loop+0x60/0xb0 [ 354.273785][ T9629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.273804][ T9629] RIP: 0033:0x7f774af8efc9 [ 354.273821][ T9629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.273839][ T9629] RSP: 002b:00007f774be5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.273860][ T9629] RAX: ffffffffffffffda RBX: 00007f774b1e5fa0 RCX: 00007f774af8efc9 [ 354.273875][ T9629] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000003 [ 354.273888][ T9629] RBP: 00007f774be5d090 R08: 0000000000000000 R09: 0000000000000000 [ 354.273900][ T9629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.273912][ T9629] R13: 00007f774b1e6038 R14: 00007f774b1e5fa0 R15: 00007f774b30fa28 [ 354.273945][ T9629] [ 354.716188][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 354.763546][ T9632] 8021q: adding VLAN 0 to HW filter on device bond2 [ 354.773308][ T9632] bond1: (slave bond2): making interface the new active one [ 354.781219][ T9632] bond1: (slave bond2): Enslaving as an active interface with an up link [ 354.913285][ T5901] mos7840 5-1:6.108: missing endpoints [ 354.929542][ T5901] usb 5-1: USB disconnect, device number 34 [ 355.147478][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 355.156619][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.167441][ T24] usb 3-1: config 0 descriptor?? [ 355.318008][ T5901] usb 4-1: USB disconnect, device number 59 [ 355.448024][ T9648] FAULT_INJECTION: forcing a failure. [ 355.448024][ T9648] name failslab, interval 1, probability 0, space 0, times 0 [ 355.501471][ T9648] CPU: 0 UID: 0 PID: 9648 Comm: syz.3.1030 Not tainted syzkaller #0 PREEMPT(full) [ 355.501498][ T9648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 355.501510][ T9648] Call Trace: [ 355.501518][ T9648] [ 355.501527][ T9648] dump_stack_lvl+0x189/0x250 [ 355.501559][ T9648] ? __pfx____ratelimit+0x10/0x10 [ 355.501584][ T9648] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.501609][ T9648] ? __pfx__printk+0x10/0x10 [ 355.501642][ T9648] should_fail_ex+0x414/0x560 [ 355.501676][ T9648] should_failslab+0xa8/0x100 [ 355.501698][ T9648] kmem_cache_alloc_noprof+0x74/0x6e0 [ 355.501725][ T9648] ? skb_clone+0x212/0x3a0 [ 355.501752][ T9648] skb_clone+0x212/0x3a0 [ 355.501776][ T9648] __netlink_deliver_tap+0x404/0x850 [ 355.501819][ T9648] ? netlink_deliver_tap+0x2e/0x1b0 [ 355.501849][ T9648] netlink_deliver_tap+0x19c/0x1b0 [ 355.501879][ T9648] netlink_sendskb+0x68/0x140 [ 355.501908][ T9648] netlink_unicast+0x397/0x9e0 [ 355.501933][ T9648] ? get_online_policy+0x58/0xd0 [ 355.501964][ T9648] ? __pfx_netlink_unicast+0x10/0x10 [ 355.501993][ T9648] ? __alloc_skb+0x1bc/0x2d0 [ 355.502025][ T9648] ctrl_getfamily+0x499/0x590 [ 355.502049][ T9648] ? __pfx_ctrl_getfamily+0x10/0x10 [ 355.502072][ T9648] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 355.502104][ T9648] genl_family_rcv_msg_doit+0x215/0x300 [ 355.502135][ T9648] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 355.502182][ T9648] genl_rcv_msg+0x60e/0x790 [ 355.502211][ T9648] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.502234][ T9648] ? __pfx_ctrl_getfamily+0x10/0x10 [ 355.502257][ T9648] ? __asan_memcpy+0x40/0x70 [ 355.502289][ T9648] ? __pfx_ref_tracker_free+0x10/0x10 [ 355.502314][ T9648] netlink_rcv_skb+0x208/0x470 [ 355.502340][ T9648] ? __lock_acquire+0xab9/0xd20 [ 355.502360][ T9648] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.502385][ T9648] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 355.502432][ T9648] ? down_read+0x1ad/0x2e0 [ 355.502461][ T9648] genl_rcv+0x28/0x40 [ 355.502481][ T9648] netlink_unicast+0x82f/0x9e0 [ 355.502518][ T9648] ? __pfx_netlink_unicast+0x10/0x10 [ 355.502542][ T9648] ? netlink_sendmsg+0x642/0xb30 [ 355.502557][ T9648] ? skb_put+0x11b/0x210 [ 355.502577][ T9648] netlink_sendmsg+0x805/0xb30 [ 355.502604][ T9648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.502625][ T9648] ? aa_sock_msg_perm+0xf1/0x1d0 [ 355.502655][ T9648] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 355.502674][ T9648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.502691][ T9648] __sock_sendmsg+0x21c/0x270 [ 355.502719][ T9648] __sys_sendto+0x3bd/0x520 [ 355.502750][ T9648] ? __pfx___sys_sendto+0x10/0x10 [ 355.502775][ T9648] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 355.502815][ T9648] ? __fget_files+0x3a0/0x420 [ 355.502844][ T9648] ? ksys_write+0x22a/0x250 [ 355.502873][ T9648] ? __pfx_ksys_write+0x10/0x10 [ 355.502902][ T9648] __x64_sys_sendto+0xde/0x100 [ 355.502930][ T9648] do_syscall_64+0xfa/0xfa0 [ 355.502950][ T9648] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.502970][ T9648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.502985][ T9648] ? clear_bhb_loop+0x60/0xb0 [ 355.503003][ T9648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.503017][ T9648] RIP: 0033:0x7f79e1390e5c [ 355.503032][ T9648] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 355.503045][ T9648] RSP: 002b:00007f79e230fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 355.503061][ T9648] RAX: ffffffffffffffda RBX: 00007f79e230ffc0 RCX: 00007f79e1390e5c [ 355.503072][ T9648] RDX: 0000000000000020 RSI: 00007f79e2310010 RDI: 0000000000000003 [ 355.503081][ T9648] RBP: 0000000000000000 R08: 00007f79e230ff14 R09: 000000000000000c [ 355.503090][ T9648] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 355.503098][ T9648] R13: 00007f79e230ff68 R14: 00007f79e2310010 R15: 0000000000000000 [ 355.503124][ T9648] [ 355.876040][ C0] vkms_vblank_simulate: vblank timer overrun [ 355.918892][ T24] isku 0003:1E7D:3264.0009: unknown main item tag 0x0 [ 355.942846][ T24] isku 0003:1E7D:3264.0009: unknown main item tag 0x0 [ 356.144117][ T24] isku 0003:1E7D:3264.0009: hidraw0: USB HID v5.51 Device [HID 1e7d:3264] on usb-dummy_hcd.2-1/input0 [ 356.634078][ T9669] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1036'. [ 357.090780][ T9673] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1036'. [ 357.522851][ T24] isku 0003:1E7D:3264.0009: couldn't init struct isku_device [ 357.574293][ T24] isku 0003:1E7D:3264.0009: couldn't install keyboard [ 357.598406][ T24] isku 0003:1E7D:3264.0009: probe with driver isku failed with error -71 [ 357.706110][ T24] usb 3-1: USB disconnect, device number 49 [ 357.898245][ T9691] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1040'. [ 358.173151][ T5831] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 358.324922][ T5831] usb 4-1: device descriptor read/64, error -71 [ 358.389805][ T9703] bond3: option arp_validate: invalid value (1073741827) [ 358.424667][ T9703] bond3 (unregistering): Released all slaves [ 358.562908][ T5831] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 358.823246][ T5831] usb 4-1: device descriptor read/64, error -71 [ 358.961291][ T5831] usb usb4-port1: attempt power cycle [ 359.012782][ T5824] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 359.213959][ T5824] usb 3-1: Using ep0 maxpacket: 16 [ 359.222215][ T5824] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 359.236056][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 359.258010][ T5824] usb 3-1: Product: syz [ 359.275753][ T5824] usb 3-1: Manufacturer: syz [ 359.298455][ T5824] usb 3-1: SerialNumber: syz [ 359.318818][ T5824] usb 3-1: config 0 descriptor?? [ 359.343619][ T5831] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 359.374177][ T5831] usb 4-1: device descriptor read/8, error -71 [ 359.568641][ T5824] usb 3-1: USB disconnect, device number 50 [ 359.613637][ T5831] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 359.644933][ T5831] usb 4-1: device descriptor read/8, error -71 [ 359.767324][ T5831] usb usb4-port1: unable to enumerate USB device [ 359.949337][ T9734] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1051'. [ 360.110976][ T9734] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1051'. [ 360.401132][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1054'. [ 361.154709][ T9750] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 361.161006][ T9750] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 361.345605][ T9762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1059'. [ 361.356301][ T9750] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 361.454398][ T9750] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 361.465207][ T9750] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 362.171312][ T9771] netlink: 'syz.4.1063': attribute type 12 has an invalid length. [ 362.302000][ T9775] netlink: 'syz.2.1064': attribute type 12 has an invalid length. [ 362.404558][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 362.404574][ T30] audit: type=1800 audit(1761477189.043:1528): pid=9769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1060" name="memory.events" dev="tmpfs" ino=1115 res=0 errno=0 [ 362.442841][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 362.583031][ T5901] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 362.597798][ T9777] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3137339392 (6274678784 ns) > initial count (4 ns). Using initial count to start timer. [ 362.614897][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 362.622583][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 362.631233][ T24] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 362.642815][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 362.662475][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 362.672808][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 362.686460][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 362.697808][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.717358][ T24] usbtmc 5-1:16.0: bulk endpoints not found [ 362.732957][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 362.744499][ T5901] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 362.755119][ T5901] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 362.773586][ T5901] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 362.784515][ T5901] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 362.794627][ T5901] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 362.808225][ T5901] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 362.819538][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.838030][ T5901] usbtmc 3-1:16.0: bulk endpoints not found [ 363.142908][ T5901] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 363.183509][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 363.183613][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 363.296253][ T5901] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 363.355912][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.395603][ T5901] usb 4-1: config 0 descriptor?? [ 363.416076][ T5901] cp210x 4-1:0.0: cp210x converter detected [ 363.422990][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 363.443744][ T9798] FAULT_INJECTION: forcing a failure. [ 363.443744][ T9798] name failslab, interval 1, probability 0, space 0, times 0 [ 363.469786][ T9798] CPU: 1 UID: 0 PID: 9798 Comm: syz.2.1064 Not tainted syzkaller #0 PREEMPT(full) [ 363.469812][ T9798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 363.469825][ T9798] Call Trace: [ 363.469835][ T9798] [ 363.469844][ T9798] dump_stack_lvl+0x189/0x250 [ 363.469875][ T9798] ? __pfx____ratelimit+0x10/0x10 [ 363.469899][ T9798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.469926][ T9798] ? __pfx__printk+0x10/0x10 [ 363.469951][ T9798] ? __pfx___might_resched+0x10/0x10 [ 363.469977][ T9798] should_fail_ex+0x414/0x560 [ 363.470010][ T9798] should_failslab+0xa8/0x100 [ 363.470032][ T9798] __kmalloc_noprof+0xcb/0x7f0 [ 363.470057][ T9798] ? kfree+0x4d/0x6d0 [ 363.470077][ T9798] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 363.470113][ T9798] tomoyo_realpath_from_path+0xe3/0x5d0 [ 363.470143][ T9798] ? tomoyo_domain+0xd9/0x130 [ 363.470178][ T9798] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 363.470202][ T9798] tomoyo_path_number_perm+0x1e8/0x5a0 [ 363.470229][ T9798] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 363.470291][ T9798] ? __fget_files+0x2a/0x420 [ 363.470314][ T9798] ? __fget_files+0x3a0/0x420 [ 363.470330][ T9798] ? __fget_files+0x2a/0x420 [ 363.470352][ T9798] security_file_ioctl+0xcb/0x2d0 [ 363.470378][ T9798] __se_sys_ioctl+0x47/0x170 [ 363.470406][ T9798] do_syscall_64+0xfa/0xfa0 [ 363.470430][ T9798] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.470455][ T9798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.470475][ T9798] ? clear_bhb_loop+0x60/0xb0 [ 363.470498][ T9798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.470516][ T9798] RIP: 0033:0x7f9744b8efc9 [ 363.470535][ T9798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.470552][ T9798] RSP: 002b:00007f9742db4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 363.470574][ T9798] RAX: ffffffffffffffda RBX: 00007f9744de6180 RCX: 00007f9744b8efc9 [ 363.470589][ T9798] RDX: 0000200000000180 RSI: 0000000000008955 RDI: 000000000000000a [ 363.470602][ T9798] RBP: 00007f9742db4090 R08: 0000000000000000 R09: 0000000000000000 [ 363.470616][ T9798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.470628][ T9798] R13: 00007f9744de6218 R14: 00007f9744de6180 R15: 00007f9744f0fa28 [ 363.470661][ T9798] [ 363.470744][ T9798] ERROR: Out of memory at tomoyo_realpath_from_path. [ 363.506904][ T52] Bluetooth: hci0: command 0x0405 tx timeout [ 363.506966][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 363.755690][ T24] usb 3-1: USB disconnect, device number 51 [ 363.766722][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1070'. [ 363.788023][ T9800] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1070'. [ 363.978160][ T5901] usb 4-1: cp210x converter now attached to ttyUSB0 [ 364.072231][ T9806] team0: Device gtp0 is of different type [ 364.174035][ T5901] usb 4-1: USB disconnect, device number 64 [ 364.182195][ T5901] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 364.194588][ T5901] cp210x 4-1:0.0: device disconnected [ 364.777718][ T9818] FAULT_INJECTION: forcing a failure. [ 364.777718][ T9818] name failslab, interval 1, probability 0, space 0, times 0 [ 364.801233][ T9818] CPU: 1 UID: 0 PID: 9818 Comm: syz.3.1076 Not tainted syzkaller #0 PREEMPT(full) [ 364.801260][ T9818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 364.801273][ T9818] Call Trace: [ 364.801282][ T9818] [ 364.801291][ T9818] dump_stack_lvl+0x189/0x250 [ 364.801322][ T9818] ? __pfx____ratelimit+0x10/0x10 [ 364.801340][ T9818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.801354][ T9818] ? __pfx__printk+0x10/0x10 [ 364.801368][ T9818] ? __pfx___might_resched+0x10/0x10 [ 364.801383][ T9818] should_fail_ex+0x414/0x560 [ 364.801402][ T9818] should_failslab+0xa8/0x100 [ 364.801414][ T9818] __kmalloc_cache_noprof+0x6f/0x6f0 [ 364.801429][ T9818] ? tcf_exts_init_ex+0x110/0x750 [ 364.801448][ T9818] tcf_exts_init_ex+0x110/0x750 [ 364.801463][ T9818] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 364.801484][ T9818] route4_change+0x3d6/0x20d0 [ 364.801504][ T9818] ? __pfx_route4_change+0x10/0x10 [ 364.801528][ T9818] tc_new_tfilter+0xdca/0x15b0 [ 364.801553][ T9818] ? __pfx_tc_new_tfilter+0x10/0x10 [ 364.801562][ T9818] ? __dev_queue_xmit+0x1d79/0x3b50 [ 364.801592][ T9818] ? __pfx_tc_new_tfilter+0x10/0x10 [ 364.801602][ T9818] rtnetlink_rcv_msg+0x7cf/0xb70 [ 364.801620][ T9818] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 364.801634][ T9818] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 364.801648][ T9818] ? ref_tracker_free+0x63a/0x7d0 [ 364.801659][ T9818] ? __asan_memcpy+0x40/0x70 [ 364.801677][ T9818] ? __pfx_ref_tracker_free+0x10/0x10 [ 364.801685][ T9818] ? __skb_clone+0x63/0x7a0 [ 364.801701][ T9818] netlink_rcv_skb+0x208/0x470 [ 364.801718][ T9818] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 364.801738][ T9818] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 364.801760][ T9818] ? netlink_deliver_tap+0x2e/0x1b0 [ 364.801780][ T9818] netlink_unicast+0x82f/0x9e0 [ 364.801799][ T9818] ? __pfx_netlink_unicast+0x10/0x10 [ 364.801814][ T9818] ? netlink_sendmsg+0x642/0xb30 [ 364.801822][ T9818] ? skb_put+0x11b/0x210 [ 364.801834][ T9818] netlink_sendmsg+0x805/0xb30 [ 364.801848][ T9818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.801860][ T9818] ? aa_sock_msg_perm+0xf1/0x1d0 [ 364.801876][ T9818] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 364.801887][ T9818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.801897][ T9818] __sock_sendmsg+0x21c/0x270 [ 364.801913][ T9818] ____sys_sendmsg+0x505/0x830 [ 364.801927][ T9818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.801942][ T9818] ? import_iovec+0x74/0xa0 [ 364.801957][ T9818] ___sys_sendmsg+0x21f/0x2a0 [ 364.801969][ T9818] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.801998][ T9818] ? __fget_files+0x2a/0x420 [ 364.802007][ T9818] ? __fget_files+0x3a0/0x420 [ 364.802022][ T9818] __x64_sys_sendmsg+0x19b/0x260 [ 364.802034][ T9818] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 364.802050][ T9818] ? __pfx_ksys_write+0x10/0x10 [ 364.802067][ T9818] ? do_syscall_64+0xbe/0xfa0 [ 364.802083][ T9818] do_syscall_64+0xfa/0xfa0 [ 364.802095][ T9818] ? lockdep_hardirqs_on+0x9c/0x150 [ 364.802109][ T9818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.802119][ T9818] ? clear_bhb_loop+0x60/0xb0 [ 364.802132][ T9818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.802142][ T9818] RIP: 0033:0x7f79e138efc9 [ 364.802152][ T9818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.802162][ T9818] RSP: 002b:00007f79e2311038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.802174][ T9818] RAX: ffffffffffffffda RBX: 00007f79e15e5fa0 RCX: 00007f79e138efc9 [ 364.802183][ T9818] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000008 [ 364.802190][ T9818] RBP: 00007f79e2311090 R08: 0000000000000000 R09: 0000000000000000 [ 364.802197][ T9818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 364.802203][ T9818] R13: 00007f79e15e6038 R14: 00007f79e15e5fa0 R15: 00007f79e170fa28 [ 364.802220][ T9818] [ 365.699107][ T5824] usb 5-1: USB disconnect, device number 35 [ 365.809960][ T5834] Bluetooth: hci1: unexpected event for opcode 0x0804 [ 365.863617][ T5831] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 366.033455][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 366.044704][ T5831] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 366.057990][ T5831] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.086868][ T9829] input: syz1 as /devices/virtual/input/input22 [ 366.093797][ T5831] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 366.132139][ T9829] binder: 9821:9829 ioctl c0306201 0 returned -14 [ 366.138669][ T5831] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 366.138698][ T5831] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.138745][ T5831] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 366.138768][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.162769][ T5824] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 366.403581][ T5824] usb 5-1: unable to get BOS descriptor or descriptor too short [ 366.412130][ T5824] usb 5-1: not running at top speed; connect to a high speed hub [ 366.432358][ T5831] usb 1-1: usb_control_msg returned -32 [ 366.639154][ T9837] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1082'. [ 366.656790][ T5831] usbtmc 1-1:16.0: can't read capabilities [ 366.743746][ T5824] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.811965][ T5824] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 366.888965][ T5824] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 366.911123][ T5824] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.921738][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.955913][ T5824] usb 5-1: Product: syz [ 366.971542][ T5824] usb 5-1: Manufacturer: syz [ 367.000034][ T5824] usb 5-1: SerialNumber: syz [ 367.015034][ T9838] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 367.022729][ T9838] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 367.030699][ T9838] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 367.054029][ T9838] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 367.065456][ T9838] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 367.178062][ T9832] syz.2.1078 (9832): drop_caches: 2 [ 367.349605][ T9850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.374138][ T9850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.409782][ T5824] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 367.426876][ T5824] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 367.451055][ T5824] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 367.546261][ T5824] usb 5-1: USB disconnect, device number 36 [ 367.898667][ T9859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1084'. [ 368.043143][ T9859] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1084'. [ 368.235249][ T5901] usb 1-1: USB disconnect, device number 48 [ 368.816469][ T30] audit: type=1326 audit(1761477195.453:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae978efc9 code=0x7ffc0000 [ 368.936625][ T30] audit: type=1326 audit(1761477195.453:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7feae978efc9 code=0x7ffc0000 [ 368.959467][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 369.011934][ T30] audit: type=1326 audit(1761477195.453:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae978efc9 code=0x7ffc0000 [ 369.034531][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 369.106255][ T5834] Bluetooth: hci0: command 0x0405 tx timeout [ 369.112311][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 369.118425][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 369.156528][ T30] audit: type=1326 audit(1761477195.453:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7feae978efc9 code=0x7ffc0000 [ 369.253199][ T30] audit: type=1326 audit(1761477195.453:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae978efc9 code=0x7ffc0000 [ 369.395136][ T30] audit: type=1326 audit(1761477195.453:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feae978efc9 code=0x7ffc0000 [ 369.465643][ T30] audit: type=1326 audit(1761477195.453:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae978efc9 code=0x7ffc0000 [ 369.489091][ T5831] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 369.535017][ T30] audit: type=1326 audit(1761477195.453:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feae978efc9 code=0x7ffc0000 [ 369.572867][ T5901] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 369.760438][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1092'. [ 369.865544][ T5831] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 369.902922][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 369.947142][ T5901] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 369.961696][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.963084][ T5831] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 369.986789][ T30] audit: type=1326 audit(1761477195.453:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae978efc9 code=0x7ffc0000 [ 369.992732][ T5901] usb 1-1: Product: syz [ 370.062840][ T5831] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 370.087682][ T5901] usb 1-1: Manufacturer: syz [ 370.160033][ T5901] usb 1-1: SerialNumber: syz [ 370.169963][ T5901] usb 1-1: config 0 descriptor?? [ 370.183287][ T5831] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 370.195849][ T30] audit: type=1326 audit(1761477195.503:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feae978efc9 code=0x7ffc0000 [ 370.352910][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.430868][ T5831] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 370.452056][ T5831] usb 4-1: invalid MIDI out EP 0 [ 370.631288][ T9878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.655220][ T9878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.706761][ T5831] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 370.716045][ T5901] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 370.719726][ T5901] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 370.805882][ T5901] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 370.876075][ T5901] usb 1-1: media controller created [ 370.917908][ T9880] dtv5100: wlen = 0, aborting. [ 371.095568][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 371.358415][ T5901] zl10353_read_register: readreg error (reg=127, ret==0) [ 371.371587][ T5901] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 371.383878][ T5901] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 371.428966][ T5901] usb 1-1: USB disconnect, device number 49 [ 371.442798][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 371.527624][ T5901] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 371.585526][ T5916] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 371.594641][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 371.608987][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 371.623750][ T24] usb 3-1: config 4 interface 0 has no altsetting 0 [ 371.648717][ T24] usb 3-1: string descriptor 0 read error: -22 [ 371.655463][ T24] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 371.661473][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1099'. [ 371.689790][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.702922][ T9906] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 371.713098][ T9906] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 371.716771][ T24] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 371.728526][ T9906] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 371.737853][ T9906] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 371.739122][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 371.755592][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 371.763631][ T5916] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 371.773211][ T5916] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 371.783101][ T5916] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 371.793800][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 371.800999][ T24] usb 3-1: media controller created [ 371.806388][ T5916] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 371.822726][ T5916] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.838708][ T9906] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 371.864033][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 371.872547][ T5916] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 371.893256][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.112950][ T5916] usb 5-1: GET_CAPABILITIES returned 0 [ 372.118625][ T5916] usbtmc 5-1:16.0: can't read capabilities [ 372.551480][ T5916] usb 4-1: USB disconnect, device number 65 [ 372.677994][ T5901] usb 5-1: USB disconnect, device number 37 [ 372.685851][ T9903] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 372.791814][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 372.935805][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1100'. [ 373.233498][ T9923] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 373.289436][ T24] usb 3-1: USB disconnect, device number 52 [ 373.329993][ T9924] netlink: 'syz.3.1100': attribute type 2 has an invalid length. [ 373.708173][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'. [ 373.742825][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 373.743710][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 373.748969][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 373.754979][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 373.902847][ T5834] Bluetooth: hci0: command 0x0405 tx timeout [ 373.930519][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1103'. [ 373.959692][ T9928] vlan3: entered allmulticast mode [ 373.991014][ T9928] bridge0: port 3(vlan3) entered blocking state [ 374.027481][ T9928] bridge0: port 3(vlan3) entered disabled state [ 374.054231][ T9928] vlan3: entered promiscuous mode [ 374.167087][ T9932] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 374.774800][ T24] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 374.962791][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 374.978862][ T5831] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 374.997642][ T24] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 375.007120][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.015387][ T24] usb 5-1: Product: syz [ 375.019808][ T24] usb 5-1: Manufacturer: syz [ 375.136572][ T24] usb 5-1: SerialNumber: syz [ 375.151241][ T24] usb 5-1: config 0 descriptor?? [ 375.193333][ T5901] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 375.204622][ T5831] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 375.213005][ T5831] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 375.221022][ T5831] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 375.230157][ T5831] usb 4-1: config 0 has no interface number 0 [ 375.333646][ T5831] usb 4-1: config 0 has no interface number 1 [ 375.363379][ T5901] usb 6-1: Using ep0 maxpacket: 16 [ 375.366775][ T5831] usb 4-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 375.380993][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.383067][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.395451][ T5901] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 375.407389][ T9962] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1115'. [ 375.421704][ T5901] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 375.438998][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 375.439014][ T30] audit: type=1804 audit(1761477202.073:1543): pid=9940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1109" name="/newroot/222/file1" dev="fuse" ino=1 res=1 errno=0 [ 375.458240][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.492772][ T5831] usb 4-1: Product: syz [ 375.517437][ T5831] usb 4-1: Manufacturer: syz [ 375.524741][ T5901] usb 6-1: config 0 descriptor?? [ 375.543891][ T5831] usb 4-1: SerialNumber: syz [ 375.554542][ T5831] usb 4-1: config 0 descriptor?? [ 375.571942][ T5831] cdc_acm 4-1:0.51: probe with driver cdc_acm failed with error -22 [ 375.638833][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 375.654296][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 375.674499][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 375.683763][ T24] usb 5-1: media controller created [ 375.736010][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 375.758151][ T9970] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 375.852862][ T5831] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 375.903902][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 376.023025][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 376.037416][ T5831] usb 1-1: unable to get BOS descriptor or descriptor too short [ 376.051235][ T5831] usb 1-1: config 4 interface 0 has no altsetting 0 [ 376.065105][ T5831] usb 1-1: string descriptor 0 read error: -22 [ 376.071405][ T5831] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 376.080757][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.105002][ T5831] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 376.135607][ T5831] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 376.149234][ T5831] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 376.156625][ T5831] usb 1-1: media controller created [ 376.181464][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 376.209246][ T30] audit: type=1326 audit(1761477202.843:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.5.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774af8efc9 code=0x7ffc0000 [ 376.256682][ T30] audit: type=1326 audit(1761477202.843:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.5.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f774af8efc9 code=0x7ffc0000 [ 376.279280][ T30] audit: type=1326 audit(1761477202.843:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.5.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774af8efc9 code=0x7ffc0000 [ 376.304498][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 376.313695][ T9940] dtv5100: wlen = 0, aborting. [ 376.327003][ T30] audit: type=1326 audit(1761477202.843:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.5.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f774af8efc9 code=0x7ffc0000 [ 376.355123][ T9968] ------------[ cut here ]------------ [ 376.360644][ T9968] usb 5-1: BOGUS control dir, pipe 80002680 doesn't match bRequestType c0 [ 376.378382][ T30] audit: type=1326 audit(1761477202.843:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.5.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774af8efc9 code=0x7ffc0000 [ 376.405234][ T30] audit: type=1326 audit(1761477202.843:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.5.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f774af8efc9 code=0x7ffc0000 [ 376.428143][ T9968] WARNING: CPU: 1 PID: 9968 at drivers/usb/core/urb.c:414 usb_submit_urb+0x114d/0x18b0 [ 376.437968][ T9968] Modules linked in: [ 376.442207][ T9968] CPU: 1 UID: 0 PID: 9968 Comm: syz.0.1116 Not tainted syzkaller #0 PREEMPT(full) [ 376.451594][ T9968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 376.461728][ T9968] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 376.467583][ T9968] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 80 07 11 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 e4 27 90 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 376.487279][ T9968] RSP: 0018:ffffc90003dd7800 EFLAGS: 00010246 [ 376.493463][ T9968] RAX: d9fcd3f7d0206300 RBX: ffff888057439f00 RCX: ffff88802bc71e40 [ 376.501481][ T9968] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000002 [ 376.510094][ T9968] RBP: 1ffff11004f5554c R08: 00000000000034af R09: 0000000000400000 [ 376.512418][ T30] audit: type=1326 audit(1761477202.843:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.5.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774af8efc9 code=0x7ffc0000 [ 376.518572][ T9968] R10: 00000000000695e8 R11: fffffbfff1bba650 R12: ffff88807d16b100 [ 376.540519][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.545310][ T30] audit: type=1326 audit(1761477202.843:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.5.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f774af8efc9 code=0x7ffc0000 [ 376.548744][ T9968] R13: ffff888027aaaa60 R14: 0000000080002680 R15: ffff88802886a0e0 [ 376.555227][ T30] audit: type=1326 audit(1761477202.843:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9958 comm="syz.5.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774af8efc9 code=0x7ffc0000 [ 376.576741][ T9968] FS: 00007feaea5c36c0(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 376.576766][ T9968] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.576782][ T9968] CR2: 00007feaea5a2d58 CR3: 000000002ebba000 CR4: 00000000003526f0 [ 376.576804][ T9968] Call Trace: [ 376.576815][ T9968] [ 376.638588][ T9968] usb_start_wait_urb+0x114/0x4c0 [ 376.644039][ T9968] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 376.649669][ T9968] usb_control_msg+0x232/0x3e0 [ 376.654543][ T9968] dtv5100_i2c_msg+0x250/0x330 [ 376.659370][ T9968] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 376.664323][ T9968] __i2c_transfer+0x874/0x2170 [ 376.669142][ T9968] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.674426][ T9968] ? __pfx___i2c_transfer+0x10/0x10 [ 376.679674][ T9968] ? rt_mutex_lock_nested+0x172/0x1e0 [ 376.685121][ T9968] ? i2c_transfer+0x120/0x3a0 [ 376.689849][ T9968] i2c_transfer+0x25b/0x3a0 [ 376.694476][ T9968] ? __pfx_i2c_transfer+0x10/0x10 [ 376.699535][ T9968] ? _copy_from_user+0x94/0xb0 [ 376.704433][ T9968] i2cdev_ioctl_rdwr+0x460/0x740 [ 376.709729][ T9968] i2cdev_ioctl+0x64b/0x7f0 [ 376.714768][ T9968] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 376.719835][ T9968] ? __fget_files+0x3a0/0x420 [ 376.724571][ T9968] ? __fget_files+0x2a/0x420 [ 376.729205][ T9968] ? bpf_lsm_file_ioctl+0x9/0x20 [ 376.734229][ T9968] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 376.739305][ T9968] __se_sys_ioctl+0xfc/0x170 [ 376.743981][ T9968] do_syscall_64+0xfa/0xfa0 [ 376.748529][ T9968] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.753811][ T9968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.759944][ T9968] ? clear_bhb_loop+0x60/0xb0 [ 376.764713][ T9968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.770641][ T9968] RIP: 0033:0x7feae978efc9 [ 376.775135][ T9968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.794990][ T9968] RSP: 002b:00007feaea5c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 376.803478][ T9968] RAX: ffffffffffffffda RBX: 00007feae99e5fa0 RCX: 00007feae978efc9 [ 376.811833][ T9968] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000005 [ 376.820718][ T9968] RBP: 00007feae9811f91 R08: 0000000000000000 R09: 0000000000000000 [ 376.828770][ T9968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.836803][ T9968] R13: 00007feae99e6038 R14: 00007feae99e5fa0 R15: 00007feae9b0fa28 [ 376.844827][ T9968] [ 376.847864][ T9968] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 376.855133][ T9968] CPU: 1 UID: 0 PID: 9968 Comm: syz.0.1116 Not tainted syzkaller #0 PREEMPT(full) [ 376.864403][ T9968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 376.874467][ T9968] Call Trace: [ 376.877750][ T9968] [ 376.880669][ T9968] dump_stack_lvl+0x99/0x250 [ 376.885264][ T9968] ? __asan_memcpy+0x40/0x70 [ 376.889878][ T9968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.895077][ T9968] ? __pfx__printk+0x10/0x10 [ 376.899684][ T9968] vpanic+0x237/0x6d0 [ 376.903676][ T9968] ? __pfx_vpanic+0x10/0x10 [ 376.908191][ T9968] panic+0xb9/0xc0 [ 376.911915][ T9968] ? __pfx_panic+0x10/0x10 [ 376.916350][ T9968] __warn+0x31b/0x4b0 [ 376.920339][ T9968] ? usb_submit_urb+0x114d/0x18b0 [ 376.925367][ T9968] ? usb_submit_urb+0x114d/0x18b0 [ 376.930395][ T9968] report_bug+0x2be/0x4f0 [ 376.934728][ T9968] ? usb_submit_urb+0x114d/0x18b0 [ 376.939754][ T9968] ? usb_submit_urb+0x114d/0x18b0 [ 376.944778][ T9968] ? usb_submit_urb+0x114f/0x18b0 [ 376.949806][ T9968] handle_bug+0x84/0x160 [ 376.954062][ T9968] exc_invalid_op+0x1a/0x50 [ 376.958570][ T9968] asm_exc_invalid_op+0x1a/0x20 [ 376.963416][ T9968] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 376.969051][ T9968] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 80 07 11 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 e4 27 90 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 376.988653][ T9968] RSP: 0018:ffffc90003dd7800 EFLAGS: 00010246 [ 376.994723][ T9968] RAX: d9fcd3f7d0206300 RBX: ffff888057439f00 RCX: ffff88802bc71e40 [ 377.002692][ T9968] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000002 [ 377.010660][ T9968] RBP: 1ffff11004f5554c R08: 00000000000034af R09: 0000000000400000 [ 377.018625][ T9968] R10: 00000000000695e8 R11: fffffbfff1bba650 R12: ffff88807d16b100 [ 377.026594][ T9968] R13: ffff888027aaaa60 R14: 0000000080002680 R15: ffff88802886a0e0 [ 377.034591][ T9968] usb_start_wait_urb+0x114/0x4c0 [ 377.039628][ T9968] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 377.045195][ T9968] usb_control_msg+0x232/0x3e0 [ 377.049967][ T9968] dtv5100_i2c_msg+0x250/0x330 [ 377.054741][ T9968] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 377.059602][ T9968] __i2c_transfer+0x874/0x2170 [ 377.064369][ T9968] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.069576][ T9968] ? __pfx___i2c_transfer+0x10/0x10 [ 377.074779][ T9968] ? rt_mutex_lock_nested+0x172/0x1e0 [ 377.080153][ T9968] ? i2c_transfer+0x120/0x3a0 [ 377.084831][ T9968] i2c_transfer+0x25b/0x3a0 [ 377.089343][ T9968] ? __pfx_i2c_transfer+0x10/0x10 [ 377.094372][ T9968] ? _copy_from_user+0x94/0xb0 [ 377.099140][ T9968] i2cdev_ioctl_rdwr+0x460/0x740 [ 377.104087][ T9968] i2cdev_ioctl+0x64b/0x7f0 [ 377.108599][ T9968] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 377.113640][ T9968] ? __fget_files+0x3a0/0x420 [ 377.118315][ T9968] ? __fget_files+0x2a/0x420 [ 377.122909][ T9968] ? bpf_lsm_file_ioctl+0x9/0x20 [ 377.127850][ T9968] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 377.132878][ T9968] __se_sys_ioctl+0xfc/0x170 [ 377.137476][ T9968] do_syscall_64+0xfa/0xfa0 [ 377.141979][ T9968] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.147177][ T9968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.153240][ T9968] ? clear_bhb_loop+0x60/0xb0 [ 377.157919][ T9968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.163809][ T9968] RIP: 0033:0x7feae978efc9 [ 377.168224][ T9968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.187827][ T9968] RSP: 002b:00007feaea5c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.196247][ T9968] RAX: ffffffffffffffda RBX: 00007feae99e5fa0 RCX: 00007feae978efc9 [ 377.204213][ T9968] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000005 [ 377.212178][ T9968] RBP: 00007feae9811f91 R08: 0000000000000000 R09: 0000000000000000 [ 377.220145][ T9968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.228120][ T9968] R13: 00007feae99e6038 R14: 00007feae99e5fa0 R15: 00007feae9b0fa28 [ 377.236104][ T9968] [ 377.239368][ T9968] Kernel Offset: disabled [ 377.243681][ T9968] Rebooting in 86400 seconds..