last executing test programs: 10.950704802s ago: executing program 0 (id=2268): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x4, 0x1, 0x1, 0x0, 0x9}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) unshare(0x2a020480) r3 = socket$netlink(0x10, 0x3, 0x0) preadv2(r3, 0x0, 0x0, 0xd, 0x100, 0x1) r4 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r2, &(0x7f0000000580)=ANY=[], 0x21e) syz_open_dev$vbi(0x0, 0x0, 0x2) r5 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r5, 0x4004510d, &(0x7f0000000000)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {0x0}, {0x0}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x8}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) timer_create(0x2, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000002080)=0x64, 0x21c) 7.380558731s ago: executing program 3 (id=2277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) 7.344819785s ago: executing program 0 (id=2278): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$vim2m(0x0, 0x7fffffff, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c894}, 0x4040084) 7.203011823s ago: executing program 3 (id=2279): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000340)={[{0xfff, 0x3, 0x57, 0x8, 0xfb, 0xa1, 0x50, 0x77, 0x6, 0x3, 0xca, 0x2, 0x7}, {0x7, 0x0, 0x1, 0xf, 0x70, 0xb, 0x40, 0x40, 0x3, 0x6, 0x4, 0x8, 0x7fffffffffffffff}, {0x8, 0x1, 0x3, 0x80, 0x7, 0x7, 0xa, 0x6, 0x80, 0x3, 0x20, 0x6, 0x32d3}], 0x6}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) socket$netlink(0x10, 0x3, 0x8000000004) syz_io_uring_setup(0x279, &(0x7f0000000400)={0x0, 0x37a9, 0x1000, 0x6, 0x288}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) syz_io_uring_setup(0x55f4, &(0x7f0000000240)={0x0, 0x98eb, 0x10100, 0x5, 0x279}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) set_mempolicy(0x4, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x9, 0x7, 0x1}) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000100)='\nY', 0x2}], 0x1) io_uring_enter(r4, 0x2d3e, 0xea31, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x408cd, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe3e) 7.126781906s ago: executing program 0 (id=2280): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) futex(0x0, 0xb, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="aceb01001800000000000000000000000000000003000000005f"], 0x0, 0x1b, 0x0, 0x1}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x12, 0xb05, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0xe1d13}) ioctl$KVM_RUN(r3, 0xae80, 0x0) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x5, 0x164, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x80000003) r5 = dup2(r4, r4) read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020) r6 = syz_io_uring_setup(0x23d, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x11e}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x2def, 0x0, 0x10, 0x0, 0x0) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 7.10265087s ago: executing program 1 (id=2281): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x2, 0x0, 0x2}, {0x10000002}]}, 0x94) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x66) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000280)={0x0, 0x55, 0x0, 0xcc}, 0x15) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5f, 0x0, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffff9) socket$inet(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x20005, 0x20, 0xffffffff}, 0xfffffffffffffdf2) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r5, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x6, 0x3, 0x5, 0x1635}}, 0x120) write$UHID_INPUT(r5, &(0x7f0000002080)={0xc, {"a2e3ad21ed0d52f91b5d390887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b3366959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130d9b61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251a4523a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, 0x0, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x7d, &(0x7f0000000000)=r9, 0x8) 6.874668419s ago: executing program 4 (id=2283): socket(0x2000000000000021, 0x2, 0x10000000000002) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/97, 0x61}], 0x1}) io_uring_enter(r0, 0x847ba, 0x79c, 0xe, 0x0, 0x0) 6.874340229s ago: executing program 3 (id=2284): r0 = gettid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r2, &(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000003340)=0x9, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000300), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x80000001, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000240)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x5, 0x3a, '}', 0x3a, '', 0x3a, './file1'}, 0x28) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008007374004c0003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddbfbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a630900010073797a30000000000900020073797a3200000000140000001100200000000000000000000500000a"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6d) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f0000000340), &(0x7f0000000380)=0xc) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_wait(r5, &(0x7f0000000080)=[{}, {}, {}, {}], 0x4, 0x7) syz_usb_connect(0x3, 0x15, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 6.789835089s ago: executing program 2 (id=2285): socket$netlink(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRESHEX=r0], 0x20) 6.608007922s ago: executing program 2 (id=2286): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) syz_emit_ethernet(0x92, &(0x7f0000000440)={@local, @random, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x7, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) creat(&(0x7f00000001c0)='./file0\x00', 0x8) mount$fuse(0x0, &(0x7f0000002040)='./file0\x00', 0x0, 0x20c284b, 0x0) listen(r2, 0x6f6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 6.45941447s ago: executing program 4 (id=2287): unshare(0x24000400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200), 0x0, 0x0, 0x0}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x150, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x1}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0xd3cf, 0xffffcf9c, 0x9f, 0x6, 0x1e, 0x10, 0x2}}]}}]}, 0x150}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r5], &(0x7f0000000200), &(0x7f0000000300)=[r6], &(0x7f0000000340)}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r7, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40010022, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000200)={0x6, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000080)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x45, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x1, 0x8006, 0xfffffffe, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x0, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x8002, 0x6, 0x0, 0x409, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x1, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0x2, 0x100, 0x4, 0x8b, 0x4, 0x7fff, 0x0, 0x9, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x800002, 0x3, 0x7ff, 0x4, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0x3, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x3, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x229, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c37a07e00083c0100000000000000000000ffffe0000001feffff000000000000000000000000aaff00000000000000"], 0x0) 6.026443184s ago: executing program 1 (id=2288): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa32, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000006080)=ANY=[@ANYBLOB="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"], 0x8814}, 0x1, 0x0, 0x0, 0x40000}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x41, 0x4800003e, r0, 0x0) r8 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r8, 0x2, 0x1ff, 0x1000f7) r9 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r9, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.231667635s ago: executing program 2 (id=2289): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x4, 0x1, 0x1, 0x0, 0x9}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) unshare(0x2a020480) r3 = socket$netlink(0x10, 0x3, 0x0) preadv2(r3, 0x0, 0x0, 0xd, 0x100, 0x1) r4 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r2, &(0x7f0000000580)=ANY=[], 0x21e) syz_open_dev$vbi(0x0, 0x0, 0x2) r5 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r5, 0x4004510d, &(0x7f0000000000)) 5.146150278s ago: executing program 4 (id=2290): syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000002f80)={0x2cc, 0x21, 0x200, 0x70bd28, 0x25dfdbfb, "", [@nested={0x2ad, 0x50, 0x0, 0x1, [@typed={0x9, 0x4c, 0x0, 0x0, @str='@{* \x00'}, @typed={0x8, 0x27, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="d0af51e62a333f465fbeb2913910072b8d577111e263dde7184294f0100689c148c86b9bcbefcf9833f1", @nested={0x24, 0x3b, 0x0, 0x1, [@generic="98dda6feb5726aa4951b27a6da2149c035ec484468c549bf641e85bdc1765c13"]}, @generic="876f7d1d77f7d4d8ac39229137943978654bc4a58d836981b429280042ec00320f06417d64e660fd1e92ea843f40ea6cb53833154fb012a71b", @nested={0x44, 0xf3, 0x0, 0x1, [@generic="6010642409e6c67e9f2e598315a4f16fcf3d5e22", @generic="4dfdebc5c664e321a9df063ffbb7f21bf0fc436b248ad5942192f20e5c6a96fc5199e70b46fd2e1ab9ee4faf"]}, @nested={0x128, 0xf7, 0x0, 0x1, [@generic="f9578502f4ec110e75c9fcdee594b7df36fad461e41d2989b296d8b5228507bd672377cdf97458fd2a0508a97aa43549c0807c57d1b162612b152eadba6d863c1ac866f228dfd6011bfd4c79cb4762", @nested={0x4, 0x121}, @generic="3fe050c14d7629209a5cd385838ac538797609d08cf3e71a445bc0771a1b581feba538bd6f8828a0eb989aaf526463b805f6061ee0ed4b82d9799371b28a6d314fb96ee76cde34e95a0ad86241405540af3d70b412342053a1762934216ecd70037cc34ea1460865431f1108ebd64a9a03fb48d8d40f32e672b3902df8d8ae7be2e3693c82a24482cafa79d39a6799aba38e04130bcda2b84a5e74cc8e1c9857efb68d2d6bdf239d7e7a3a6f3482ed9f9a729732cd40d805f7aa588e53b0049527bba5e0751e5d4d4907d1ae", @generic="607de60015"]}, @generic="efce3be9e8b827ff186d489d3523bd6d80cda855840f9a443def35ee2532e430f5ffbfb3b4a5021b5798f17289d255a2b7770c6eb5e86172dd7b0d6719d616b42fe2aff78b67eab38c103a353084a442504ca48619bb72fd415f04ab7989858267a97f54b4bb73c05979932134302c43536e18cb4ebf5423d5c526a5aa3b81b23dca984a02e15b905fa898b63bb4ec0baef2c78892bd14ff4bdceffb7ae7da50b04a"]}, @nested={0xc, 0xd0, 0x0, 0x1, [@nested={0x4, 0x4b}, @nested={0x4, 0x15}]}]}, 0x2cc}, {&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x2c0}, {&(0x7f0000000a00)={0x1ec, 0x2f, 0x400, 0x70bd2d, 0x25dfdbff, "", [@nested={0x109, 0x128, 0x0, 0x1, [@nested={0x4, 0xb6}, @nested={0x4, 0x108}, @generic="853fd140279323b05dc36268642a5d9371db7e908859505e3be31022b6a65ebc5d6a8fc6122d2162532b0e3c531818e8bce77399764d021de800267dab75812aad867b704e83e87466a5b6e65f06274ff287b910064a66b60dca77c7c958eadb31c12e12e4c8fb1ac6174a1033e8c6a414a6f7ca963e51a8623ed0308f4d4a96a39f6e84c71236772c8dbf589c5ef1b6bc39d9a209a4baaba2a0cce27a9ca3ed6e54955678e6ed7e149860feafc3910cf3e2781c90ef325c490f22205e479aac89299b30fd544af2bcd1284123578ff0c8f8232f37d9f8ecbc96e53ec83d877faf5a65cf9a", @typed={0x14, 0x14, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @nested={0x4, 0xe9}]}, @generic="e89175a2ac9b03124c1605a3dd17d4a55720d46bd403310fde33514347348a02dacd08ee9a0690fbc021d9a656ef2dc21acca373f41066bf39c4804e1c9d", @nested={0x88, 0xeb, 0x0, 0x1, [@typed={0x8, 0xd8, 0x0, 0x0, @ipv4=@local}, @generic="7ec248752f57d6b49bcc5afca264015f5760d38e7b13950d7cdbd3ee6c5aeafc7c27fea105e1ac032d1e2ad725fe1c9bcf481bd0f7feb4ee567681e01550c1a55be7d196da6993295892fff7443f320621462726debb850ec33e6cd995eedd01f11bf36116e0fd1a7d4cdfede27100a1728e3fa68802457a6437569b"]}, @typed={0x5, 0x87, 0x0, 0x0, @str='\x00'}]}, 0x1ec}, {&(0x7f0000000100)={0x10, 0x22, 0x400, 0x70bd2a, 0x25dfdbfe}, 0x10}, {&(0x7f0000004a00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00J\x00', @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x23c0}, {&(0x7f00000070c0)={0x11c0, 0x41, 0x2, 0x70bd27, 0x25dfdbfd, "", [@nested={0x7b, 0x51, 0x0, 0x1, [@nested={0x20, 0xac, 0x0, 0x1, [@nested={0x1c, 0xe4, 0x0, 0x1, [@nested={0x4, 0x13f}, @typed={0x14, 0xec, 0x0, 0x0, @ipv6=@mcast1}]}]}, @generic="a1025cd9490a47a59cacd9a6bbc9d2f6bd55932de403734145cd77e9621012ddc5c70286e26d62f306e111", @nested={0x4, 0xf4}, @typed={0x14, 0x57, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @typed={0xc, 0xc1, 0x0, 0x0, @u64=0x1c}, @nested={0x4, 0x10f}, @nested={0x4, 0xf6}]}, @typed={0x8, 0x139, 0x0, 0x0, @str='*@)\x00'}, @typed={0xc, 0x46, 0x0, 0x0, @u64=0x7}, @generic, @generic="f4fab028ff281874d04b9899c0981cc7910cb8201bae642bf095a4652fdf74e0da5c2fb3104a2838ca35004d6ea08b93026c17bf6b2a97de151b07d2edb877faf774f97d1252cf092baa0184b6b75dcde3b5b6b72588ff2bc0518c7dfaf2851fb01b3021df8cf2009de0a309192000af4d1b3d0f8511c96eed09eb6be3e1c72de0d885b1501c774a4eb3208214c79503209737321a620156c6abc9b3be11a55835402e35050418edb689fa99086920a1b2a0477f64d945862d3d377031aeaa6a9091e04ae80b67163660a9a663aa8304b6dc283c8c278060a74e1bf14bf8e00150abcb5ccdf0871cec5d2f15bdf939af04f866eb4acd0bb73e7e22081dd8edbd823772cc6fde14484ac9d7bc3df79ffe4ccd1fac26a26069222cd9499d4ac28574399bea899fb9256a3ece40dd0274a92e8c8dfa42a77e0d2e65d4a8a2a68e29cbb6b113c108fcfc241c3b52b804268e3dbd801bb37580902253f62414decbc96a483ff6ee8fa95d85ba4429121cdda7a96bc42f855f42719674e82f0c8e4a201cd76135cb683164a998db9f9b8268948a133316eb9bbe4b19e8bfc0744f6f2df0de2880fa5bbfa284d1bc3e1576f18262dd7bb333914613f0560f93a00a05aa3ae40d5b26deb7998bd9dfcb393cd1ba80a3ee0f0d6ae27ba3a64de7b25720b36ad0b92204f59701a59ce2988edfff1ce0fb4aee7f907d1a705831339d8f8937c5ff7f51dda5885d097ae46f096d380cdbdbaf8b65e94e87c90719dcb95667d46a8c8afc18912f13a4655179af3321035779ac60f90535ddfc1392457e5732e328868563617c1859adedd26a0d4c71abac06dd3855901cb7c47a363a63651d1b88ede67f43ccea50dcbaedb6bd30a65dd523695ba553ba99f32920730886fdb803d81ed579ad970ca697c156cf97214d8d3397cd5f6247477fb06ac857127d600884904569baa4eaf61b6c7677d11c53e3a7964e08f98680f4104eb6309b96a19d92ff5b402691e3f3945f28b3a1ba52c577f3926def4da4a27645c3ad0169b19305553e2b84b5312fc42862ae475a404ba203d485064b5ead6f50a0aa3338355c0e304ff3987d34a46bf13a9dbd303cd70c7ee32a222cb69a41eb161eb4d8c99ebb269896cd0085e772ae7d863c5b1db193c9172498f2d661bf569c718f3571ae22d67a518122223a2c28503eb70736dc8e71d0316d3456d7d0f6f043fb09f4e21ed34d1769d867819c37733103646ae9a89a0c22a4350d7db5048a007fb61a96710ef2fb5e7824d8c26afd757d2f2b4490d3607df8bac6717a3f63fd5ec1ed043f4758d65c5f6c64bb0323cd7ea1ba1e889f43bbe94bc73dec408054439a879c229e84ddb1570c3a383a61d20e433f0d61c284ba82972857dcc36bb6fdc1d72927adbefb9f54f63c7d15e0451695f4c4c61c40daead0cf19ef849db11e754b1f7422fd2f44a9d02f69ad66179bb59a13d7c264e139ab6e8ab3fe9245a2686b20e468a4c2e1bbb78f790c2453ef6f586d8cca33027949a32b345a60d4a6efc6ee6ab5ce0cbc9a97734358e57c71ab166cf911550acf9b927a6c60c5dfc8efcc365bdf4e76b9ca3ed1bc3f005e7b08e4d092a9383765f0a26f9a79f0ca98d8cef774a5b29e51b7d973ce2fb4be22820d9342d108f8303b75376a07e855a86058b2caf435dd955168b344e54db06e096df4e2779de8f31324e69af56689ea9a2aa80408e30fa63a27812ba3fdb1faa070aa057e43d8974b4b355aab42e7cfc747172c373b32528f3ebf19339202d84b4e0bc0f50d2142e6d3a7a6466cf3c2769e78540c85fa7fd4c6ea8565fc6ece7258f2b5c22bf7b6c59de17e20de02ad3d532d1233028a721c9f02e9dcb133fff52ee31477d5940f855e2dd53dba25bca1025ec2cbf6b7b7aa7868549709a82fe73b68f13f3ad4571a4706c3e40218b4a708259d4804ee880340fd6ca7fd831005c6d9b43f0971a26f647fbcd35eb43644a6a0f62a400537ebd8151d18ff2c25b68961c08bc94a90271998c96aa044f49331306abd23891a5376a160ba46a05cdf3de6249b25a212eb2838aa352848b963ec8bc72f8e06c05a94c01e0e2769ed5583d342112a8744b3b7dd86b6a47c671536e1b8f879a150bc240ea05821c017fb0cd8eb8db433ed1800b9ff7d30f1c4c5508e5218cc6980af4b8faaca14eb957d94271798c86f464612b32a06ba3f09550e7b903a9fdd4fc200d51bdff3ec45ec4ab5ef96ee85229b747bc65592aff5d61e5690d27375e806c1dc42b682d0bbb065c97a02a5e08886c367ecf149271d7a07af8bef6f7f7d2849b1b329fb9ece4fbae0e702293d99f68df3fbfeec9fec7b26ab415901eb2c59ffde8ce0264e238fb2336a292db94edb170d6f7eeca61ceca4f4178e9785e5279b5df1aee712ef0a002a42bfc7f225accde301269a0f8f281598c57211de6d51bce578aa93a4509e337e35ff66f4f762c92f390ed8c041bb4cf779f4af7c3f1e26850c3b74c6fe75a879b3c0f0aaddc6f38f1688adc9206fadd6cc206b498555cc459e4c2d9ffa31ba3205ef01bf7ca596e6851153ff85bf25992ffba76eaa6dc83e5728b7b5e07a0013f9d31337299af85b815ec6c3b38d0476ec2bc94014605a8daf58586bfb44e1df4c9df3b65cbcae6823afa945465929bad500fd24b54e7149cce9601799756cbc71b7e626441b09c7d1912ba9db217dcc13ea8d9c5939f977cfad32ec941b5e3a2317ee11708b87d41c4606e2ef26ed74fe60e1e564c6436ba478261c8e575495335163efa02d2d5e41f3c79cb9f82f9e7346ae4ff665aa398affa9aa155601cad7cfe4b34ed2d078b8d65ecae8f63f29a975059edfcf78e747393bfe76ca1c0d82433f3fa458b7f0f0ad7f695a2fa61336d74a0bfd5467544a5d2909a95d55d171f2c37d34ae8d767ac694e702e7bc816293f6c11a1066b4f4ac7b4054089267aa5a83ec22614b4ef4fca41fca165cb90c737563f34da998b3a31eddbebf65ef03a05eb6581519590bdf4a1c314bd234f818067465a74c5932379a3ec2db8041529e6f436ac8029c4f8729696da7f0fdf7109436e844f125a6c47e719526d66c630170af37ceb5bfcc625c27c3b371ee0c968cd7183267ca8a9e16c19354ef6776a441696c272d2f5ceda043969506e085a3d1e117e9dee1873d9195eb73d817a09c8347468358a637779f96263b024323d9ba100d4db15d59de2482599a2aa952d72f5379f6dce76634e057ea1abf349c1ac925673fb5a89fd8bf6f735b5ae8d3feca6fb8cb37697ae46cb932bef61b4483d130cef19306210d6ae5863566f180c988ee24e440a0c3cc6dbcfba1000c5c5ad6c20b49e7588969c2a3957390107afd1d532ae7dcbf21616d3f4d6c9632106ee9e40c255ab8a6387e444deb7dd824f9d8821afb8dd16a86361ffee774b03cfa0c1ab132065ac4073d09e46dbbead10a48bdd0e19f72836d8731fe9a9dc2972d418410925b641824ce576ca593bd8c004ce894c79a8b7933e45d1bbc0fc56773c8f7b8dd71fa19bc0539b9035277976bc916fc21b1af73b3e76db76840eb022d39dd813ffa28536a6433b18575255a11eb2a9c9421cda35fc113a9470f280a33bc931abd61815f8c506faf3fb0f385ff096952959df79c67747967a3f9cd2e814dc0d46204c268248f820f3488ceea28371f039f6a4cdc80d853dbc55e0f67866767be9ccb87dafecbe38718ae834f9c9a7b1bc33ad80508d21dd33b86c6e7c4081ba7923b261c4b6a169da23e0724d3ec1e929a9cd47f3a1f812b0a6cdf6c1bbbf29380af817ee6c68a28914f1f0abfe72f7cfc81fa56692707204026c85d476e3b0a7a795316a24b46f1638aa162f6e39a992aec66436240ffa23fd98bd69275b18fe020cdc21472a6389bfd6164d7b733c0ba7ac182422673e1aa004a882ba1b25aed465774f1247d938dd5a4ed72dc70ab36fec68bb09227e7227382bbe7e9045d045fac6cb921556899ae85cd4c9d29bb48ecbd6fffd0e704b51f359657e02152307625352efc60ec3fbb996ab2c993432d083c3a07bab5bd1177aca8a539446db4fcc32a010331ee066eb1e796dae15d9b8431bcba56b5fe474c4a9d18c101bad16bd9b0c57745782d245ac4b133c1e6defbb60a89049dd594be838af604bb0f25a0bde2e91fa6b691fbeda9f40ae0d6d421724eeba3c22c299dac79e182f27963550b63190cbc7bb050a0c67a9a9823e7399bb483e298b288959a104cdaefc0f4e2929fc2a68deb2017fe85ae1590ad1db28b53f834718eac4c3a5c71f26866c7153fc9bf4b0ae09d94d154d1e97293fa60cac5fb23221731506dd12ef6ed03079b16eb5907fecc7ae0ff8308cf7dcbf88fd8e050163c11785f16f9964355072d43067a75398aea572db7a1606ddc4203e0e9d91c9bb3c82d2bbdc6a38f4ad33e565ca79e3b6b3a3337d2be93d0d6d98f819f23ec15ac78fd2f79e5a42af59ebf1de4be0d2a05f5af3ad24aa781139658c90840243edfe971fa52db12720824eba164da990b14d15d62a9acc215075a79717c3dbb3dfb6b15a16373105bc87da25cfb7119cf2adadaacec48145d9db5b33c5a143636dff802773865cf96412a5f0d56e61f997f3bf18fba6dfc6a6d8a5cc861ccbf43d2975800831941a1a9115d9e30711a835d02decc56fa43a06e65e7c26ba8f0c76c4b0766f218c30df4ec0c4e766c10421486a1d2b363b4c99017ef6edf782b59aa3ea606b792f8ba5f5decc551ed53f74fd80fd9c3eeb1c9041081eec648a0e81b34eaa1b6e34312c8c9895b54dafd992f419ed1182fa3133b81d105e10c39c5238eaeb5f2b9a7972dda383bed5944417d452783fcc582cde53d8b7d8ce38ff42ebb15e5d0292ac9d3430c7efe363d842b1ea40b6405a4a6b5352d28db6b944fc926490a0a4ee50683bc573d9c7e40ec2c01dac789fa4ef2b96401d418b6c8cfce7227254a040a15176e218dec208c7baf0c1c5c3bea99907c20261518e0ebbc6e13f9741ab072b879932a1aab4bec65fa649345a9782321787d32d0ed1c14dcb086a08b45387c3619d2baf32585b4ad421d9ca82c6cb35c30db26a802f94fa8f49c1c3be2ff3ea48a84f9810da11fb945cb55a48c66a789677c0f77194a21c486fc244a3634e01930cb25c1b78594abc8b9c9bcf688ccb6a5c32a542050fd20b160920ba247269017431ce8f03b1438929e6eae38fa8824622569111b3e708153f6a43e7d9209d7d5138191f7011d19de86e9cc873196060cd724f6571bd1f14d584a61d20795ef79f48c89cf79a7ff8afc5d1bc89e1ebbe0123df7608893ed652a3053ac2d2443907881e59326e0cdc57dacf96ff2861dac703829ce115e6b6521076f374e5ca1b468c18aefb2ecff8ecc76a220dcc67913f305a7576689e8d11006f6b9bad3ec9f1ad92d4107eb3fb68b338cd459951aeccd0e15075bbc93a54594d40dfb03f4878fe87d8f2293cee4e52cd7a9df69ac2ee64d5b4ecce5f2519dcbd9bdcd07519ac41b40e933ce7ec664c87b4479d44f7f188d9169a84d00f7d01fbbd5b995c0a3b211a0c1319212a65232456f5711b6a806b1fc601c95be7638a4264031b5e8824febbbff6e35bf5963cf672c2f5c0de7560147d998e9394dc927a0afca435fd0953378d055b50033ec296291761bd0704bf96d95083fca8d38b250d470354b96194d2b50a5c911328dae2d192ffb0a811cf60dc9221a0f89da627d239abb5961b8ee365f0b968a8a092d6b74dbf412d7e1909c", @nested={0x81, 0x56, 0x0, 0x1, [@nested={0x4, 0x2f}, @generic="e409d7b9b1deb07e91de6fad880e5afb3593d76b9fc2a1d0bea68b7f15ada4015d7adf02e2de5a47881b97e33f5900f9a73a32e056e5e27451e1ef7fcecc94085cfe107e0566f00eb3c0b0ee213a0bb3161d55901d93784b288816c59cca5a149910da87afc28e1545aefc9b3ba287be9e80d5da8accdd318c"]}, @nested={0x94, 0xef, 0x0, 0x1, [@generic="2ab885b9e01aff83bd154b3d06d1878218c4d79c375ed7207017fc1b1dc037280d94ff3c8da731d91e1b4840e7d63894b3497a6ece58817a244e95aad744005860302203f05cdc9c2f25cd8f9aa8fad610483ec60938f3c46848da9cbb2f4f130fd2b1fbd5b16885472b7d9d558547e9362ddebe6cdc9938f4ae5a2a8289fdd68b8372277755a59bfe933a55e180d2b0"]}, @typed={0x4, 0x5f}, @typed={0xc, 0x11f, 0x0, 0x0, @u64=0x6}]}, 0x11c0}, {&(0x7f0000000640)={0xf0, 0x1c, 0x8, 0x70bd2c, 0x25dfdbff, "", [@generic="9e818180d73ff85b1b30ee271e4a8785f82189c2bd1455b4f119725d64fe809b073230d00c36fb758fda3bba00d10068556811c464d3c80f555b57ddaa9fb237f4c9b8478e4719b2b81fcc5afcdf50a532d361769adbfbbb2c715dd40cf79734a31e8946ba12a6b5132d1f2277732e18b4ffa046a5d972800899cb1408e625f1b3e60cafc7eccda4dcb21d30899bdedfe702efa5bab785a2d7f563aa162a85a6e73e51bd7682272cd2aa924bfa86a464152fc19cc72422548b9299848382a410bd64c80c5acaf77cee13092175882eae4953a4601092adb2", @typed={0x8, 0xe3, 0x0, 0x0, @uid}]}, 0xf0}, {&(0x7f00000046c0)={0x24c, 0x13, 0x20, 0x70bd27, 0x25dfdbfd, "", [@generic="2ddddb06a4a80afc3fd718f5c9ab14a047dc3dd136da3b6d47b8c74e116e93f5c8d8e0b37cc2eec9edea7aaaa926d00eab4f1e26a4edcc57081408745e11d18f13ba073cb9893dcf07e9ee38e12b69d51c8489b55cf3a2e383524ac83188005db0ba86af808234828dd789cc9c40b1243a45f98142ccf63e769a10de766dc627ae4ba9e2f019b9efb70cb4a3b783394d7cdb279c9ef31324e23e3719a623cbf8ef4fa14274139269838e39eede83fe191d414970e9366ade84dbe2d533c15425e8f7f91c497dadb21c4b9977ec0f5ddd54d4faf58dcd1aad51c3298750b2803d", @generic="fe6202bc73b5cf08b2e77718f9d4297896530dfcc71f1c7a73db373069860b9504b46f93350addb1a7eeed7fcaa4f390c1510ab44a72c4aacc96bb40701c11b59bd5cf67ae374dfb2b8079dcb41894d977d2ebf17731d8d66a10c5a170f7bf5ead78d0", @generic="0132dfbe85aa12b9ca77a4ef33318438936e0a350326436f560a3b98c0a952ffc08f5722e57560acd87885291ece38e90505bdb0641629f93ca8f1b3b5e69d311679bfc70e7603b8eb3f8b7b9fbe419313e0ed1658b32df247b0e04b726643a463388e1a4091458536a416c2e2677d432f9fa404e9ed11031e00f3c10dd588430381671f68bb978bef88576644019ee203b32a31f3bc7516c5ff165a700ff010349199604761a0218b625d5a621ec823179075d957da0cbe5ffbe7523798c8db8e6375f7e00c3c49a904056abf4c20fbf3486db95f4e9b605ac58ec1bfb4d6afa35e2c0aa92b91e72f5844804a35a048bc532e85f26f4f"]}, 0x24c}, {&(0x7f0000000240)=ANY=[@ANYBLOB="600000002a0000082abd7000fddbdf25b06c64e73cc0957cd8b72250ca3a7a7c04e155cb7a448bfecb822de9b65852e11081d8"], 0x60}], 0x9}, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e26, @broadcast}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e27, @dev={0xac, 0x14, 0x14, 0x9f}}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r6, 0x1) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.192857755s ago: executing program 1 (id=2291): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$vim2m(0x0, 0x7fffffff, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c894}, 0x4040084) 3.978726342s ago: executing program 1 (id=2292): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket(0x11, 0x2, 0x0) socket(0x10, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x2, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xe7ffffff, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "68b9c381"}, 0x0, 0x1, {0x0}, 0x0, 0x0, r1}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x4}) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x1, 0xfffffffffffffffd}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000340)={&(0x7f0000006080)=[{0x3, 0x4401, 0x0, 0x0}], 0x1}) 3.666719433s ago: executing program 0 (id=2293): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x41, 0x4800003e, r0, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 1.906483877s ago: executing program 4 (id=2294): r0 = socket$nl_route(0x10, 0x3, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) r2 = getpgrp(0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @private0, 0x4}, 0x1c) ioprio_get$pid(0x2, r2) recvmmsg(r1, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x1, 0x2) mmap$usbfs(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x13, r4, 0x9) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x41}}}}, 0x84) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0) 1.782367156s ago: executing program 4 (id=2295): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0xfff, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000001300000000e000000200000000002000000000000000000000000000000000020000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000089d400000000020000000000000000000000000000000000000000000000000000000000000000000000000000ecff000000000000000000feffffffffffff"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 1.781606969s ago: executing program 2 (id=2296): socket$netlink(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRESHEX=r0], 0x20) 1.691347552s ago: executing program 3 (id=2297): socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa2d080045e90028006597ff0206907864010102ac1414bb4e204e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="518003c692780005"], 0x0) 1.576683911s ago: executing program 2 (id=2298): semop(0x0, &(0x7f00000002c0)=[{0x0, 0x9b6a}, {0x2, 0x8, 0x1000}, {0x0, 0xfff, 0x1000}], 0x3) semop(0x0, &(0x7f0000000000)=[{0x0, 0x6, 0x800}, {0x2, 0x0, 0x1400}, {0x0, 0x2}, {0x2, 0x3, 0x2000}, {0x1, 0x6, 0x1800}, {0x4, 0x7}, {0x3, 0x100, 0x1c00}], 0x7) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=@delchain={0xd28, 0x65, 0x900, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0x9}, {0xc, 0xc}, {0x6, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_basic={{0xa}, {0xce0, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0xebd689c89937f598}}, @TCA_BASIC_EMATCHES={0x70, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7f}}, @TCA_EMATCH_TREE_LIST={0x64, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x3, 0x7, 0xffff}, {{0x3, 0x1, 0x1, 0x1}, {0x1}}}}, @TCF_EM_CONTAINER={0x4c, 0x3, 0x0, 0x0, {{0x4, 0x0, 0x7}, "ad35e3181eeb85b5ac49c81719784f98c1bcb6e49cdb6baee6889b71c01f6f8c8dffcb90a88f113ef4bb9fd182c711caae775cc77ad8615649a070ab4a4e"}}]}]}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}, @TCA_BASIC_POLICE={0x18, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}, @TCA_BASIC_ACT={0x8cc, 0x3, [@m_tunnel_key={0x7c, 0x6, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x2e, 0x6, "caec91482da8b1181bfb4fca5242041038d7744846fe81cb0ee311b71430dcee14171a64286b02e7f744"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0x2cc, 0x1d, 0x0, 0x0, {{0x7}, {0x260, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x97, 0x6, {0x3b, 'security\x00', 0xf9, 0x2, "03885fa3f9f16a414ed1dd41514002180303fbe6c09cace083bc7cc88148c9ec55d6aac4bf8efa10fba86506997cc3e311dbf9b3c604a5d76582b417d04b68883a90b93bf8ea3568440c826b512f7547d09732b395d82c0ad519b8e5331c973c50d35f89c10fd657d9174689b0"}}, @TCA_IPT_TARG={0x99, 0x6, {0x800, 'security\x00', 0x4, 0xff, "74f83ef50b99937d7cf423436485d2fadb55f639c4e95e87b6cd22c5bd2524754fce85ceba0505153a975216557cdf92a60741753a8a6c09ab58b445eefc0f86b0061a5281dcc54ff128aea090c38817f0b590e87399732ce86a976254968eebf5ba0fe8d970562d61697edd93fa2e"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0xd9, 0x6, {0x200, 'raw\x00', 0x20, 0x4, "7c8c5fab5c1aaa368e434bb85fc9273cdef270b42580f4c16fdeeb13104a37c8377fed7c459d4863b0e9594a2c4ca2a289ea6e4badecdaa42feafbe969540eef3c03040f04adb8ddcd3f2136cb51b37f7dbb4e06994c7962a7b8b1c3c5274d8ec71a2893929d68a4c5bee6777c9e9a75270de775126e0a92b88a971a2bd125efb13dde506f6252143068ed8ad79d6346db4372626f7b18a4feaf5c2921a38b87fe8722cdcc1c0bafbe0ab7416e57bb"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x46, 0x6, "7883e206fefc153e8bc2c5b42cd241e1a66a8e14e6619cdafc6b7ab99daf361c0731304c6fa93e7c398c21dc96d9c17b1da42be1d6bdd0ec7bc1449936f30f318cc0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x138, 0x14, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x20}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x4, 0x20000000, 0x2, 0x7}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0xc4, 0x6, "96f824a63452386e0c7e7a8e36287cc7e412b2edce5dcf6e9ae1e2de87ccb855af435e4124e1d311e43c211e7ca03250f62a25ca449a3c545287859c05cec868287fa785cb021f87dc948ed95ee591a31d7f00fd5021367e9a96ec588a236d12a3f44eed577feca05fcba8c1f4d5879af40d2200bb4fc2c22c127ff9c270c1b28afc649bb5ef635479af6a5430fc6bf30d53fea71b6083882b8d1cd9659e464be0e7a4a1f706ed522201e32b1c59faf1e25188fc8a0dd96ad7dfed760b32a1d6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0xd0, 0xa, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x200, 0xffff8000, 0x1, 0xffffffff}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x66e, 0x10000000, 0x8001, 0x7}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x1, 0x8, 0x4, 0x5}, 0x2f}}]}, {0x4f, 0x6, "0da16cdb737ad87f9c43eb70067e18c276f96976ba86fa685db559d428820af2294cdacabb8b55c262a50134a6cdfc9270522d12a97ed018b2d3eda1652f951c31c0c73b20474b615e3ea6"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_nat={0x124, 0x15, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x800, 0x81, 0x8, 0xff, 0xd7}, @empty, @rand_addr=0x64010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x2, 0xffffffffffffffff, 0x7, 0x30b1}, @multicast1, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fffffff, 0x3, 0x4, 0x1, 0xffff812f}, @private=0xa010101, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffe9e, 0x401, 0x8, 0x82a, 0x9c4}, @remote, @private=0xa010101, 0xff, 0x1}}]}, {0x5a, 0x6, "e4d130297ecd69d30a6c3cfc1beea7552ed9de149638b9dd2a479cd50215260621608d854e6e2db45526fb670774cd3e0e7c8d8ab74e7604752601b50d517790778307f05ee26297649e95065ae04bb39447cd2ffe67"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0x194, 0x2, 0x0, 0x0, {{0x7}, {0xa0, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x81}, @TCA_CT_LABELS_MASK={0x14, 0x8, "279d616ad064519a779143d6f48cc06b"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "96356ca8a896e4e0016d18147ae6e7ca"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_LABELS={0x14, 0x7, "8870f8c6d799111d249b97fad06dd38b"}, @TCA_CT_ACTION={0x6, 0x3, 0x2}, @TCA_CT_LABELS_MASK={0x14, 0x8, "1018729b525b27a5b54e5867fa4b0d5d"}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0x7, 0x2, 0x8, 0x2}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0xce, 0x6, "08e34c19f478391bf3fe477da4a5a22101d70911b55039c9cd2b228ca112eeb48f18915ca508b5d70dcb3f9a8f8d239105259a899a711d36a1ad7e81cd073d63b795e6d44b81f5b58ba1e20e9b2047bff204e553c4bc3e8b380b98d48d428570204d72dc92ede830554ba8eefc69889ec4a9e3abd813ac2e3c9975dd2919af14ea9e8723e225de20eb1255c04236a6b0c90fca5741dc23625720b807030acef2b2ed4d8915b148e2752be5413831f0179bc57e730e46d0a7fa08752b3ff95ffa148d7fc6f62e6758190e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0xc0, 0x1f, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x34, 0x4, [{0x7222, 0x0, 0x5, 0x7}, {0xff, 0x7f, 0xf2, 0x6}, {0x1, 0x4, 0x2, 0x6}, {0xc7, 0x35, 0x2, 0x5}, {0x4, 0x9, 0x4, 0xfffffffb}, {0x5, 0xc6, 0x8f, 0x3}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x5, 0x7, 0xf, 0x7f}]}, @TCA_ACT_BPF_NAME={0x6, 0x6, '.\x00'}]}, {0x3e, 0x6, "80cbdf320867f500588d790695e2c4a8bd61ead0fd01ecaba09faf4494d23d8d63d300c1a5645d146cd84d5eb86c71030cef2d62f012ccc1d2d6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BASIC_EMATCHES={0x368, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x2e4, 0x2, 0x0, 0x1, [@TCF_EM_META={0x34, 0x3, 0x0, 0x0, {{0x7, 0x4, 0xa478}, [@TCA_EM_META_RVALUE={0x1f, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="b84fc66d4020f8d9e3f3", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR='a']}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8}, {{0x1, 0x1, 0x1}, {0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7100, 0x3, 0x4004}, {0x2, 0x6, 0x80000000, 0x9}}}, @TCF_EM_IPT={0x168, 0x3, 0x0, 0x0, {{0x5, 0x9, 0xffff}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x47}, @TCA_EM_IPT_MATCH_DATA={0x76, 0x5, "aff43ebb6fc985db760daebb3369840f4e047c44ebdac90d9bfb6bee4973197793ce2e7cae6f281695b1cdc96a55950760922b757af51b182a40084f6884a0a4cf85759bf0cd4a01badcc4abc76e140690d75d34eac9ebeb2076147f24cb2b475c5499b813187e005de142a03ebc7db5292c"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xa0, 0x5, "fa2ab03df8308f77ac6c2fc23d214fa40a7c59e5607db33216f9144fa8a5d40d5a7d22e0893d71a21f92720fcb783c10564250936964a99656f7991b14be6505e84caa28234e7ae71412c5259a2df836166ef809059e6ab4873a904c6473151bda8ae14e1fbd7c7a70e5091feeefafa36445bac10e0d82ff1d247ea8f4a5787d96c7ee6b44610734422ba974216e3464d910510012c83e7c142de2f0"}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x100, 0x8, 0xf}, {0xffffffffffffffff, 0x1, 0x1}}}, @TCF_EM_IPT={0xc4, 0x2, 0x0, 0x0, {{0xa5a4, 0x9, 0xfff7}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x9b, 0x5, "8a6d3e2a42662946fcd9190dc184c49cb27976ab38518750905ff868c9d0882be2516bc2fb726648aef956834dcc8d6ff61546d3b23c25c1ad88e8e7e5e36f8cb01f5bcb179026f025f436c35d23c77835acc118f2d99b57fbcc1b86d05418b53a277f529ec2092ac340e77020e74a5392b94b2d2ef02b645e262fbbe0911d9f970ebf2ce4240a2022f5fc4710dcd52e04be5f433d5c67"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x44c8, 0x7, 0x9}, {{0x0, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x4}, {0x8, 0xa, 0x0, "df978a1c939feaff699f"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x0, 0x8, 0x5}, {0x1, 0x4, 0x4}}}]}, @TCA_EMATCH_TREE_LIST={0x78, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x38, 0x7, 0x401}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x9, 0x2, 0x9d1}, {0x8, 0xa, 0x0, "2d5aca34a79fb2333d49"}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x2}, {{0x1, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x6, 0x2, 0x80}, {0x7, 0x1, 0x0, "ea"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf, 0x3, 0x18a}, {0x5, 0x1, 0x2, 0x3}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x2e, 0x6}}]}, 0xd28}, 0x1, 0x0, 0x0, 0x40001}, 0x0) socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async, rerun: 64) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) (async) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x14d802, 0x0) dup(r9) (async) r10 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r10, @ANYBLOB="01002abd7000ffdbdf25", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ftruncate(0xffffffffffffffff, 0x2007ffc) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x1c) 1.50282602s ago: executing program 4 (id=2299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendto$inet6(r6, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$kcm(r3, &(0x7f0000000300)={&(0x7f00000000c0)=@phonet={0x23, 0x0, 0x0, 0x45}, 0x80, 0x0}, 0x20000080) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)="ca6ab07b5b"}, 0x20) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0) 1.480923654s ago: executing program 3 (id=2300): r0 = socket$key(0xf, 0x3, 0x2) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, 0x0, 0x501100, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r5, 0x8800000) socket$inet_udp(0x2, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r6, r5, 0x0, 0x578410eb) sendmsg$key(r0, 0x0, 0x0) 1.153375573s ago: executing program 1 (id=2301): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x7, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @tail_call], &(0x7f0000000080)='syzkaller\x00', 0x3ff, 0xfd, &(0x7f0000000380)=""/253, 0x41000, 0x18, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x2, 0x7, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)=[0x1], 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCSMRU1(r2, 0x80047455, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$unix(0x1, 0x1, 0x0) r5 = gettid() sendmmsg$unix(r4, &(0x7f0000005900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20, 0x24008001}}], 0x1, 0x1) sendmsg$AUDIT_SET(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfb, {0x20, 0x1, 0x1, r5, 0x3, 0xfff, 0x1cc3, 0x0, 0x0, 0x7f}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x48000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0xfd8e49f1ee86724e) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000080) r7 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, 0x0, 0x0, 0x7fff, 'syz1\x00', 0x0}) 962.92499ms ago: executing program 2 (id=2302): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffff1a40d8048200b7ce010282970902120001000000000904000000020201"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0xfffffffc}, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r3, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x1b) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') syz_emit_ethernet(0x4e, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800180600fe800000000000000000000000000029fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600208000000000000000000"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r1, @ANYBLOB="0621d27dacac9a331a0e6cd630838beab69efa1917df13dcf52f40b2e06061879582e015e7012631a9e887c5bb233a921767dc65930309f38930f040ae72650d3cf9175f338b793eff0a2f554868c0e81f0184c4e3c008596afc3facc2c0b7c50654a509daa8f35060d74469aa3f9e2f5cd37f2106e95fec969e9f49ca"], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603}) socket(0x10, 0x80002, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r6) fsopen(&(0x7f0000000040)='afs\x00', 0x0) 962.587727ms ago: executing program 1 (id=2303): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020010000000000600000000060015000400000014001680100008800c00"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000140)=0xffff) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x4, 0xfff3}, {0x0, 0xffe0}, {0xfff3, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xfffffffffffffeb9, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff000000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c884) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffc, 0x80000000, 0x0, 0x6, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x4000000) sendto$inet6(r6, 0x0, 0x0, 0x4048000, 0x0, 0x0) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r9, 0xc0045006, &(0x7f0000000180)=0x6f) r10 = epoll_create1(0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1806, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000000c0)="70d4a7c0"}) r12 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) read$eventfd(r12, &(0x7f0000000080), 0x8) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r12, &(0x7f0000000780)={0x10000000}) write$dsp(r9, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) 306.584894ms ago: executing program 0 (id=2304): syz_open_dev$dri(0x0, 0x1, 0x0) unshare(0x26020480) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 44.428368ms ago: executing program 0 (id=2305): r0 = syz_usb_connect(0x6, 0x24, &(0x7f00000006c0)=ANY=[@ANYRES8, @ANYBLOB="4fb0b0ecef33549c81f3e617e5e6e5b07aa8d88ab9909138f8b7ba75897797dcbd61c2d496ece7c795f2da1aff677f81172a20a10448e2f21dd916c5907215796a0385a6c2a2967f7dbc47afeb144d8987e00055d6531c47470a63179619030bffae2456ca2ea13dcb1719ab92696ecf218feeb55128287e229bde4d163d07b3eb77b5f54e4c3157ca6b07b6d10c40261f44e4018da0a49b360502464ce5d9af53000000000000000000", @ANYBLOB="a57d28e83a08fe723eec30b7732014a9d9e7d82e7778bca7115ef5c697eb9d4c5440c1385f2c7be8092aa55c246f02ff65d52fae6a25a76566df09ebaa4f50fd3666d5969157d8982aa96e199a7c7e6f5f4d4141155488456572fdb9fd2f802a07d3aa91dd9d6953990edd7b2a6d02eec7a20cd9df63cf63213d95d0080094bc4342f25f6558bbf7824c1fb8fefa12161487f1aa6eed2717d232bbc805de54c2641ee7523bdda4781d6a9d74d792024f38b2b6e2fd34d517464cfa550614ce64e992b99b47c748a4483e634a80a04b0359fb34c1700ae7e0593a000000000000", @ANYRES16=0x0, @ANYRESDEC, @ANYBLOB="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", @ANYBLOB="bcdc4337680d971752f4b0946b81906ed36de09a5b07bc7ed85e465fa1490b3902a4fa620fc7cc7f12d029c8de7cac671512551169afb3856c7b209b1f3157662383a1350d5e469177231fc4c3bbe7adc08d0d051017441f100e179c3ede28f0d4877dac00c947a41eda955c59bfdeea83389b01605ab67fb9cedd1d8fcbf4ab8426e9c1b910f9ad4f5193c8c91477f3d3520c250458d1911faec86a926d1ef91ba2f06030d04349bc76d92a568117d6d12db25eea4a857df24cce1d5bed7eddf44dfb3796f201087c2109abead7730002647160", @ANYRES32], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000000000014d564b"]) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="40de00000004f9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r5 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)=0x10, 0x80800) getsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000001800)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r5], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000000}, {0xfffffff9}]}}) 0s ago: executing program 3 (id=2306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a200000001a0a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f"], 0xe8}}, 0x8040) kernel console output (not intermixed with test programs): different from the descriptor's value: 9 [ 569.077044][ T5903] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 569.105149][ T5903] usb 5-1: config 0 interface 0 has no altsetting 0 [ 569.345452][ T5903] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 569.361691][ T5903] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 569.384996][ T5949] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 569.443316][ T5903] usb 5-1: Product: syz [ 569.837250][ T5903] usb 5-1: Manufacturer: syz [ 569.844192][ T5903] usb 5-1: SerialNumber: syz [ 569.853677][ T5903] usb 5-1: config 0 descriptor?? [ 569.871938][ T5903] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 569.965085][ T5949] usb 2-1: device descriptor read/64, error -71 [ 570.205059][ T5949] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 570.343178][T12832] usb usb8: usbfs: process 12832 (syz.4.1863) did not claim interface 0 before use [ 570.416230][ T24] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 570.444988][ T5949] usb 2-1: device descriptor read/64, error -71 [ 570.555332][ T5949] usb usb2-port1: attempt power cycle [ 570.575032][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 570.581657][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 570.592195][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 570.609660][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 570.640951][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 570.668245][ T24] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 570.691058][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.830054][ T24] hub 3-1:1.0: bad descriptor, ignoring hub [ 570.840873][ T24] hub 3-1:1.0: probe with driver hub failed with error -5 [ 570.851124][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 570.873705][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 570.895516][ T5949] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 570.916872][ T5949] usb 2-1: device descriptor read/8, error -71 [ 570.924004][ T24] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 570.934252][ T24] cdc_wdm 3-1:1.0: Unknown control protocol [ 571.063007][T12836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.073954][T12836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.159291][ T5949] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 571.275990][ T5949] usb 2-1: device descriptor read/8, error -71 [ 571.366825][ C0] usb 5-1: yurex_control_callback - control failed: -2 [ 571.494508][ T5949] usb usb2-port1: unable to enumerate USB device [ 571.533975][ T5949] usb 5-1: USB disconnect, device number 73 [ 571.548451][ T5949] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 571.622342][T12845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1875'. [ 571.804977][ T5843] usb 3-1: USB disconnect, device number 68 [ 572.779006][T12870] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1885'. [ 572.869938][ T24] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 572.985007][ T5903] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 573.151622][T12876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1884'. [ 573.161145][T12876] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 573.168778][T12876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.187030][T12876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1884'. [ 573.270794][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 573.280204][ T24] usb 1-1: config 5 has an invalid interface number: 45 but max is 0 [ 573.288804][ T24] usb 1-1: config 5 has no interface number 0 [ 573.301140][ T24] usb 1-1: config 5 interface 45 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 573.312437][ T24] usb 1-1: config 5 interface 45 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 573.325111][ T5843] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 573.337623][ T24] usb 1-1: config 5 interface 45 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 573.348731][ T24] usb 1-1: config 5 interface 45 altsetting 3 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 573.359980][ T24] usb 1-1: config 5 interface 45 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 573.372073][ T24] usb 1-1: config 5 interface 45 altsetting 3 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 573.384983][ T24] usb 1-1: config 5 interface 45 altsetting 3 has an endpoint descriptor with address 0xBF, changing to 0x8F [ 573.415897][ T24] usb 1-1: config 5 interface 45 altsetting 3 has a duplicate endpoint with address 0x8F, skipping [ 573.440253][ T24] usb 1-1: config 5 interface 45 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 573.462441][ T24] usb 1-1: config 5 interface 45 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 573.485771][ T24] usb 1-1: config 5 interface 45 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 573.503136][ T5843] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 573.513193][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.523025][ T24] usb 1-1: config 5 interface 45 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 573.534363][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.536553][ T24] usb 1-1: config 5 interface 45 altsetting 3 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 573.565517][ T5903] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 573.567044][ T24] usb 1-1: config 5 interface 45 has no altsetting 0 [ 573.585315][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.865703][ T5843] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 573.880033][ T5903] usb 3-1: config 0 descriptor?? [ 573.892753][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 573.931719][ T5843] usb 2-1: Product: syz [ 573.941900][ T5843] usb 2-1: Manufacturer: syz [ 573.962245][ T5843] usb 2-1: SerialNumber: syz [ 573.986255][ T5843] usb 2-1: config 0 descriptor?? [ 574.010417][ T24] usb 1-1: New USB device found, idVendor=0411, idProduct=0097, bcdDevice=27.b3 [ 574.027833][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.051732][ T5843] ims_pcu 2-1:0.0: Zero length descriptor [ 574.088412][ T5843] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 574.101193][ T5903] usbhid 3-1:0.0: can't add hid device: -71 [ 574.107303][ T24] usb 1-1: Product: syz [ 574.107324][ T24] usb 1-1: Manufacturer: ã‚ [ 574.107347][ T24] usb 1-1: SerialNumber: syz [ 574.117189][T12848] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 574.140120][ T5903] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 574.182039][ T5903] usb 3-1: USB disconnect, device number 69 [ 574.197926][T12885] openvswitch: netlink: Missing valid actions attribute. [ 574.212576][T12885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.322748][T12889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1889'. [ 574.527399][T12892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1889'. [ 574.705020][ T5903] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 574.808610][ T24] usb 1-1: USB disconnect, device number 62 [ 574.908893][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.995366][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.064342][ T5903] usb 3-1: New USB device found, idVendor=047f, idProduct=3333, bcdDevice= 0.40 [ 575.098586][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.120708][T12896] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1892'. [ 575.135861][ T5903] usb 3-1: config 0 descriptor?? [ 575.869050][T12867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.877868][T12867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.964624][ T5949] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 575.992792][ T5903] usbhid 3-1:0.0: can't add hid device: -71 [ 575.999093][ T5903] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 576.055363][ T5903] usb 3-1: USB disconnect, device number 70 [ 576.107890][T12905] bond0: left promiscuous mode [ 576.113912][T12905] bond_slave_0: left promiscuous mode [ 576.132136][T12905] bond_slave_1: left promiscuous mode [ 576.137954][T12905] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 576.148062][T12905] bond0: left allmulticast mode [ 576.152926][T12905] bond_slave_0: left allmulticast mode [ 576.166514][T12905] bond_slave_1: left allmulticast mode [ 576.185159][T12905] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 576.349308][ T5949] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 576.373284][ T5843] usb 2-1: USB disconnect, device number 73 [ 576.395060][ T5949] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 576.415057][ T5949] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 576.434831][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.464048][T12900] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 576.485543][ T5949] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 576.876613][T12919] bond0: option use_carrier: invalid value (6) [ 577.202089][T12927] tipc: Enabled bearer , priority 0 [ 577.246557][T12927] syzkaller0: entered promiscuous mode [ 577.252206][T12927] syzkaller0: entered allmulticast mode [ 577.305222][T12927] tipc: Resetting bearer [ 577.316370][T12926] tipc: Resetting bearer [ 577.337498][T12935] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.1901'. [ 577.437174][T12926] tipc: Disabling bearer [ 577.497611][T12935] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=' already exists in 'ieee80211' [ 577.678623][ T5949] IPVS: starting estimator thread 0... [ 577.775832][T12938] IPVS: using max 32 ests per chain, 76800 per kthread [ 578.035071][ T5949] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 578.235065][ T5949] usb 4-1: Using ep0 maxpacket: 8 [ 578.265228][ T5949] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.438694][ T5949] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 578.465565][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.468749][ T24] usb 5-1: USB disconnect, device number 74 [ 578.519789][ T5949] usb 4-1: config 0 descriptor?? [ 578.536707][ T5949] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22 [ 578.776354][ T5949] usb 4-1: USB disconnect, device number 78 [ 579.045060][ T5843] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 579.114976][ T24] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 579.287734][ T5843] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 579.314772][ T5843] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 579.325717][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.347244][ T5843] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 579.376840][ T24] usb 5-1: too many configurations: 151, using maximum allowed: 8 [ 579.425744][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 579.435812][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 579.444062][ T24] usb 5-1: Product: syz [ 579.449324][ T24] usb 5-1: Manufacturer: syz [ 579.455173][ T24] usb 5-1: SerialNumber: syz [ 579.463764][ T24] usb 5-1: config 0 descriptor?? [ 579.477821][ T24] ims_pcu 5-1:0.0: Zero length descriptor [ 579.483785][ T24] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 579.600942][T12950] random: crng reseeded on system resumption [ 580.546892][ T5843] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 580.757137][ T5843] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 580.770428][ T5843] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 580.847535][ T5843] usb 2-1: USB disconnect, device number 74 [ 581.913450][T12990] netlink: 'syz.0.1918': attribute type 1 has an invalid length. [ 581.921292][T12990] netlink: 'syz.0.1918': attribute type 1 has an invalid length. [ 581.931220][T12990] netlink: 'syz.0.1918': attribute type 1 has an invalid length. [ 581.939490][T12984] netlink: 'syz.1.1920': attribute type 1 has an invalid length. [ 581.981868][T12984] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1920'. [ 582.455490][T12992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1920'. [ 582.508003][ T5949] usb 5-1: USB disconnect, device number 75 [ 582.577738][T12992] bond0: Unable to set down delay as MII monitoring is disabled [ 583.088719][T12998] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1921'. [ 583.370073][T13014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1924'. [ 583.484239][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1924'. [ 583.783040][T13023] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1929'. [ 584.555104][ T5903] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 584.631930][T13027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1928'. [ 584.641260][T13027] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 584.648859][T13027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.668183][T13027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1928'. [ 584.899773][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 584.965013][ T5843] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 585.330291][ T5903] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 585.339539][ T5843] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 585.348891][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.349826][T13035] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1932'. [ 585.394310][T13035] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1932'. [ 585.422578][ T5903] usb 4-1: config 0 descriptor?? [ 585.484665][ T5843] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 585.552275][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 585.586811][ T5843] usb 1-1: Product: syz [ 585.615037][ T5843] usb 1-1: Manufacturer: syz [ 585.646041][ T5843] usb 1-1: SerialNumber: syz [ 585.678618][ T5903] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 585.686156][ T5843] usb 1-1: config 0 descriptor?? [ 585.713179][ T5903] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 585.714484][ T5843] ims_pcu 1-1:0.0: Zero length descriptor [ 585.749989][ T5843] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 585.812747][ T5903] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 585.845014][ T10] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 585.865038][ T5903] usb 4-1: media controller created [ 585.886881][T13029] dib0700: tx buffer length is larger than 4. Not supported. [ 585.974079][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 586.009520][T13043] bond3: entered allmulticast mode [ 586.016127][T13043] 8021q: adding VLAN 0 to HW filter on device bond3 [ 586.023838][T13043] bridge0: port 3(bond3) entered blocking state [ 586.031583][T13043] bridge0: port 3(bond3) entered disabled state [ 586.041113][T13043] bond3: entered promiscuous mode [ 586.047301][T13043] bridge0: port 3(bond3) entered blocking state [ 586.053729][T13043] bridge0: port 3(bond3) entered forwarding state [ 586.151299][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 586.163050][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 586.178305][ T36] bridge0: port 3(bond3) entered disabled state [ 586.189516][ T10] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 586.245253][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 586.304209][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.40 [ 586.320146][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.349878][ T10] usb 3-1: Product: syz [ 586.368010][ T10] usb 3-1: Manufacturer: syz [ 586.383062][ T10] usb 3-1: SerialNumber: syz [ 586.422843][T13038] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 586.451754][ T5903] DVB: Unable to find symbol dib7000p_attach() [ 586.458102][ T5903] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 586.667825][ T5903] rc_core: IR keymap rc-dib0700-rc5 not found [ 586.674303][ T5903] Registered IR keymap rc-empty [ 586.679942][ T5903] dvb-usb: could not initialize remote control. [ 586.688064][ T5903] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 587.187789][ T10] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input62 [ 587.227168][ T5191] bcm5974 3-1:1.0: could not read from device [ 587.246799][ T5191] bcm5974 3-1:1.0: could not read from device [ 587.287858][ T10] usb 3-1: USB disconnect, device number 71 [ 588.069552][ T5903] usb 4-1: USB disconnect, device number 79 [ 588.292158][ T5903] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 588.387433][ T10] usb 1-1: USB disconnect, device number 63 [ 588.651694][T13077] __nla_validate_parse: 4 callbacks suppressed [ 588.651706][T13077] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1943'. [ 588.697824][ T5903] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 589.768119][ T5903] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 589.779718][ T5903] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 589.793606][ T5903] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 589.805948][ T5903] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12592, setting to 64 [ 589.834231][T13085] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1945'. [ 589.861994][ T5903] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 589.894961][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 589.945068][ T5903] usb 4-1: Product: syz [ 589.953667][ T5903] usb 4-1: Manufacturer: syz [ 589.982475][T13070] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 590.011719][ T5903] cdc_wdm 4-1:1.0: skipping garbage [ 590.033906][ T5903] cdc_wdm 4-1:1.0: skipping garbage [ 590.065343][ T5903] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 590.092200][ T5903] cdc_wdm 4-1:1.0: Unknown control protocol [ 590.234767][ C0] wdm_int_callback: 3369 callbacks suppressed [ 590.234786][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 590.247453][ C0] wdm_int_callback: 3369 callbacks suppressed [ 590.247474][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 590.260016][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 590.266720][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 590.273243][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 590.279849][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 590.295124][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 590.301755][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 590.311086][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 590.317696][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 590.324975][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 590.331577][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 590.345091][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 590.351712][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 590.359177][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 590.365787][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 590.373118][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 590.379727][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 590.386544][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 590.393142][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 590.517656][ T5903] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 590.689339][ T5903] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 590.699965][ T5903] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 590.747764][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.826051][ T5903] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 591.105018][ T5974] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 591.215341][ T5843] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 591.430928][ T5974] usb 1-1: Using ep0 maxpacket: 8 [ 591.499012][ T10] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 591.791341][ T5843] usb 5-1: config 0 has no interfaces? [ 591.811800][ T5974] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 591.849617][ T5974] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 591.873408][ T5903] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 591.886041][ T10] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 591.890520][ T5974] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 591.908425][ T5843] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 591.941562][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.996441][ T5974] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 591.997797][ T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 592.019907][ T5843] usb 5-1: Product: syz [ 592.024098][ T5843] usb 5-1: Manufacturer: syz [ 592.055682][ T5974] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 592.074154][ T5843] usb 5-1: SerialNumber: syz [ 592.119218][ T5843] usb 5-1: config 0 descriptor?? [ 592.162973][ T5974] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 592.239519][ T5974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.418930][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 592.431410][ T5843] usb 4-1: USB disconnect, device number 80 [ 592.438468][ T10] usb 3-1: Product: syz [ 592.443207][ T10] usb 3-1: Manufacturer: syz [ 592.469698][ T10] usb 3-1: SerialNumber: syz [ 592.485974][ T5903] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 592.499694][ T5903] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 592.509370][ T10] usb 3-1: config 0 descriptor?? [ 592.522864][ T10] ims_pcu 3-1:0.0: Zero length descriptor [ 592.524300][ T5974] usb 1-1: usb_control_msg returned -32 [ 592.535221][ T10] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 592.560478][ T10] usb 2-1: USB disconnect, device number 75 [ 592.620504][ T5974] usbtmc 1-1:16.0: can't read capabilities [ 592.955063][ T5843] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 593.137416][ T5843] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 593.263890][ T5843] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 593.275623][ T5843] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 593.288429][ T5843] usb 4-1: config 0 interface 0 has no altsetting 0 [ 593.388896][ T5843] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 593.399380][ T5843] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 593.859054][ T5843] usb 4-1: config 0 interface 0 has no altsetting 0 [ 593.867067][ T5843] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 593.877441][ T5843] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 593.890996][ T5843] usb 4-1: config 0 interface 0 has no altsetting 0 [ 593.900154][ T5843] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 593.910400][ T5843] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 593.935584][ T5843] usb 4-1: config 0 interface 0 has no altsetting 0 [ 593.966155][ T5843] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 593.975174][ T5843] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 593.998415][ T5843] usb 4-1: config 0 interface 0 has no altsetting 0 [ 594.122756][ T5843] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 594.146593][ T5843] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 594.187057][ T5843] usb 4-1: config 0 interface 0 has no altsetting 0 [ 594.226058][ T5843] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 594.260931][ T5843] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 594.306349][ T5843] usb 4-1: config 0 interface 0 has no altsetting 0 [ 594.320590][ T5843] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 594.338099][ T5843] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 594.358386][ T5843] usb 4-1: config 0 interface 0 has no altsetting 0 [ 594.390528][ T5843] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 594.407926][ T24] usb 5-1: USB disconnect, device number 76 [ 594.425170][ T5843] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 594.467630][ T5843] usb 4-1: Product: syz [ 594.500340][ T5843] usb 4-1: Manufacturer: syz [ 594.530671][ T5843] usb 4-1: SerialNumber: syz [ 594.557971][ T5843] usb 4-1: config 0 descriptor?? [ 594.587961][ T5843] yurex 4-1:0.0: USB YUREX device now attached to Yurex #1 [ 594.659585][ T10] usb 1-1: USB disconnect, device number 64 [ 595.125194][T13138] usb usb8: usbfs: process 13138 (syz.3.1954) did not claim interface 0 before use [ 595.750435][ T24] usb 3-1: USB disconnect, device number 72 [ 595.915882][T13143] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1959'. [ 596.997558][ T24] usb 4-1: USB disconnect, device number 81 [ 597.008009][ T24] yurex 4-1:0.0: USB YUREX #1 now disconnected [ 597.062129][T13151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1962'. [ 597.075532][T13151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1962'. [ 597.239443][T13154] FAULT_INJECTION: forcing a failure. [ 597.239443][T13154] name failslab, interval 1, probability 0, space 0, times 0 [ 597.256901][T13154] CPU: 1 UID: 0 PID: 13154 Comm: syz.3.1963 Not tainted syzkaller #0 PREEMPT(full) [ 597.256927][T13154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 597.256940][T13154] Call Trace: [ 597.256948][T13154] [ 597.256956][T13154] dump_stack_lvl+0x189/0x250 [ 597.256986][T13154] ? __pfx____ratelimit+0x10/0x10 [ 597.257009][T13154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 597.257033][T13154] ? __pfx__printk+0x10/0x10 [ 597.257054][T13154] ? __pfx___might_resched+0x10/0x10 [ 597.257080][T13154] should_fail_ex+0x414/0x560 [ 597.257112][T13154] should_failslab+0xa8/0x100 [ 597.257140][T13154] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 597.257166][T13154] ? __alloc_skb+0x112/0x2d0 [ 597.257195][T13154] __alloc_skb+0x112/0x2d0 [ 597.257222][T13154] netlink_sendmsg+0x5c6/0xb30 [ 597.257258][T13154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.257291][T13154] ? aa_sock_msg_perm+0xf1/0x1d0 [ 597.257322][T13154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 597.257341][T13154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.257365][T13154] __sock_sendmsg+0x219/0x270 [ 597.257388][T13154] ____sys_sendmsg+0x52d/0x830 [ 597.257420][T13154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 597.257456][T13154] ? import_iovec+0x74/0xa0 [ 597.257483][T13154] ___sys_sendmsg+0x21f/0x2a0 [ 597.257511][T13154] ? __pfx____sys_sendmsg+0x10/0x10 [ 597.257569][T13154] ? __fget_files+0x2a/0x420 [ 597.257594][T13154] ? __fget_files+0x3a0/0x420 [ 597.257631][T13154] __sys_sendmmsg+0x227/0x430 [ 597.257661][T13154] ? __pfx___sys_sendmmsg+0x10/0x10 [ 597.257685][T13154] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 597.257735][T13154] ? ksys_write+0x22a/0x250 [ 597.257761][T13154] ? __pfx_ksys_write+0x10/0x10 [ 597.257782][T13154] ? rcu_is_watching+0x15/0xb0 [ 597.257813][T13154] __x64_sys_sendmmsg+0xa0/0xc0 [ 597.257840][T13154] do_syscall_64+0xfa/0x3b0 [ 597.257861][T13154] ? lockdep_hardirqs_on+0x9c/0x150 [ 597.257881][T13154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.257900][T13154] ? clear_bhb_loop+0x60/0xb0 [ 597.257923][T13154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.257939][T13154] RIP: 0033:0x7f5e3418eec9 [ 597.257957][T13154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.257975][T13154] RSP: 002b:00007f5e3501f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 597.257996][T13154] RAX: ffffffffffffffda RBX: 00007f5e343e5fa0 RCX: 00007f5e3418eec9 [ 597.258012][T13154] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 597.258025][T13154] RBP: 00007f5e3501f090 R08: 0000000000000000 R09: 0000000000000000 [ 597.258038][T13154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.258051][T13154] R13: 00007f5e343e6038 R14: 00007f5e343e5fa0 R15: 00007f5e3450fa28 [ 597.258082][T13154] [ 597.538963][ C1] vkms_vblank_simulate: vblank timer overrun [ 597.626637][T13161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1964'. [ 597.685029][ T5903] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 597.716165][T13161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1964'. [ 598.067268][ T5903] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 598.077748][ T5903] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 598.087214][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.125003][ T10] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 598.125114][ T24] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 598.284463][ T5903] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 598.349069][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.359981][ T10] usb 3-1: config 0 has no interfaces? [ 598.360300][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 598.379696][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.380978][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 598.404940][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 598.413206][ T24] usb 4-1: Product: syz [ 598.417789][ T10] usb 3-1: SerialNumber: syz [ 598.423355][ T24] usb 4-1: Manufacturer: syz [ 598.432461][ T10] usb 3-1: config 0 descriptor?? [ 598.454381][ T24] usb 4-1: SerialNumber: syz [ 598.489290][ T24] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 598.583622][ T5843] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 598.707038][T13176] FAULT_INJECTION: forcing a failure. [ 598.707038][T13176] name failslab, interval 1, probability 0, space 0, times 0 [ 598.739891][T13176] CPU: 0 UID: 0 PID: 13176 Comm: syz.0.1971 Not tainted syzkaller #0 PREEMPT(full) [ 598.739917][T13176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 598.739930][T13176] Call Trace: [ 598.739938][T13176] [ 598.739947][T13176] dump_stack_lvl+0x189/0x250 [ 598.739986][T13176] ? __pfx____ratelimit+0x10/0x10 [ 598.740010][T13176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.740036][T13176] ? __pfx__printk+0x10/0x10 [ 598.740058][T13176] ? __pfx___might_resched+0x10/0x10 [ 598.740082][T13176] should_fail_ex+0x414/0x560 [ 598.740114][T13176] should_failslab+0xa8/0x100 [ 598.740150][T13176] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 598.740176][T13176] ? __alloc_skb+0x112/0x2d0 [ 598.740203][T13176] __alloc_skb+0x112/0x2d0 [ 598.740229][T13176] netlink_sendmsg+0x5c6/0xb30 [ 598.740261][T13176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.740288][T13176] ? aa_sock_msg_perm+0xf1/0x1d0 [ 598.740319][T13176] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 598.740339][T13176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.740365][T13176] __sock_sendmsg+0x219/0x270 [ 598.740388][T13176] ____sys_sendmsg+0x505/0x830 [ 598.740418][T13176] ? __pfx_____sys_sendmsg+0x10/0x10 [ 598.740452][T13176] ? import_iovec+0x74/0xa0 [ 598.740479][T13176] ___sys_sendmsg+0x21f/0x2a0 [ 598.740506][T13176] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.740565][T13176] ? __fget_files+0x2a/0x420 [ 598.740590][T13176] ? __fget_files+0x3a0/0x420 [ 598.740626][T13176] __x64_sys_sendmsg+0x19b/0x260 [ 598.740656][T13176] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 598.740692][T13176] ? __pfx_ksys_write+0x10/0x10 [ 598.740713][T13176] ? rcu_is_watching+0x15/0xb0 [ 598.740739][T13176] ? do_syscall_64+0xbe/0x3b0 [ 598.740762][T13176] do_syscall_64+0xfa/0x3b0 [ 598.740781][T13176] ? lockdep_hardirqs_on+0x9c/0x150 [ 598.740805][T13176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.740826][T13176] ? clear_bhb_loop+0x60/0xb0 [ 598.740852][T13176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.740869][T13176] RIP: 0033:0x7f1f6058eec9 [ 598.740885][T13176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.740901][T13176] RSP: 002b:00007f1f61445038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.740920][T13176] RAX: ffffffffffffffda RBX: 00007f1f607e5fa0 RCX: 00007f1f6058eec9 [ 598.740933][T13176] RDX: 0000000000008000 RSI: 0000200000000140 RDI: 0000000000000003 [ 598.740946][T13176] RBP: 00007f1f61445090 R08: 0000000000000000 R09: 0000000000000000 [ 598.740960][T13176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.740978][T13176] R13: 00007f1f607e6038 R14: 00007f1f607e5fa0 R15: 00007f1f6090fa28 [ 598.741004][T13176] [ 599.202978][T13181] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1972'. [ 599.375655][ T5903] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 599.633730][ T5843] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 599.642184][ T5843] ath9k_htc: Failed to initialize the device [ 599.724665][ T5843] usb 4-1: ath9k_htc: USB layer deinitialized [ 599.768988][ T5903] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 599.787010][ T5903] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 599.804331][ T5903] usb 5-1: USB disconnect, device number 77 [ 599.835575][ T24] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 599.995953][ T24] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 600.015227][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.035065][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.048410][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 600.057441][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.067213][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.079480][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 600.091277][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.102699][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.119926][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 600.214261][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.235043][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.259301][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 600.389798][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.419185][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.451158][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 600.467805][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.482506][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.504002][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 600.577244][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.593874][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.636231][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 600.644064][ T5974] usb 3-1: USB disconnect, device number 73 [ 600.700471][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.749554][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.766840][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 600.783930][ T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 600.802064][ T24] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 600.835121][ T24] usb 2-1: Product: syz [ 600.845763][ T24] usb 2-1: Manufacturer: syz [ 600.862432][ T24] usb 2-1: SerialNumber: syz [ 600.870063][ T24] usb 2-1: config 0 descriptor?? [ 601.271284][ T24] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 601.366711][T13204] FAULT_INJECTION: forcing a failure. [ 601.366711][T13204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.465220][T13204] CPU: 1 UID: 0 PID: 13204 Comm: syz.2.1978 Not tainted syzkaller #0 PREEMPT(full) [ 601.465247][T13204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 601.465259][T13204] Call Trace: [ 601.465266][T13204] [ 601.465274][T13204] dump_stack_lvl+0x189/0x250 [ 601.465302][T13204] ? __pfx____ratelimit+0x10/0x10 [ 601.465327][T13204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 601.465349][T13204] ? __pfx__printk+0x10/0x10 [ 601.465375][T13204] should_fail_ex+0x414/0x560 [ 601.465405][T13204] _copy_to_user+0x31/0xb0 [ 601.465429][T13204] put_user_ifreq+0x6b/0xd0 [ 601.465457][T13204] sock_do_ioctl+0x25b/0x300 [ 601.465478][T13204] ? __pfx_sock_do_ioctl+0x10/0x10 [ 601.465493][T13204] ? __lock_acquire+0xab9/0xd20 [ 601.465527][T13204] sock_ioctl+0x576/0x790 [ 601.465545][T13204] ? __pfx_sock_ioctl+0x10/0x10 [ 601.465562][T13204] ? __fget_files+0x2a/0x420 [ 601.465587][T13204] ? __fget_files+0x3a0/0x420 [ 601.465612][T13204] ? __fget_files+0x2a/0x420 [ 601.465639][T13204] ? bpf_lsm_file_ioctl+0x9/0x20 [ 601.465662][T13204] ? __pfx_sock_ioctl+0x10/0x10 [ 601.465679][T13204] __se_sys_ioctl+0xfc/0x170 [ 601.465704][T13204] do_syscall_64+0xfa/0x3b0 [ 601.465725][T13204] ? lockdep_hardirqs_on+0x9c/0x150 [ 601.465747][T13204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.465767][T13204] ? clear_bhb_loop+0x60/0xb0 [ 601.465790][T13204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.465814][T13204] RIP: 0033:0x7f95a958eec9 [ 601.465831][T13204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.465849][T13204] RSP: 002b:00007f95aa3e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 601.465868][T13204] RAX: ffffffffffffffda RBX: 00007f95a97e5fa0 RCX: 00007f95a958eec9 [ 601.465883][T13204] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 601.465895][T13204] RBP: 00007f95aa3e3090 R08: 0000000000000000 R09: 0000000000000000 [ 601.465907][T13204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.465918][T13204] R13: 00007f95a97e6038 R14: 00007f95a97e5fa0 R15: 00007f95a990fa28 [ 601.465947][T13204] [ 602.158162][T13209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.180994][T13209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.204418][T13210] usb usb8: usbfs: process 13210 (syz.1.1973) did not claim interface 0 before use [ 603.232661][ C1] usb 2-1: yurex_control_callback - control failed: -2 [ 604.278533][T13231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1982'. [ 604.347078][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1982'. [ 604.519475][T13209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.542566][T13209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.565247][T13209] netlink: 'syz.3.1979': attribute type 39 has an invalid length. [ 604.664760][T13209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.728844][T13209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.218772][ T10] usb 2-1: USB disconnect, device number 76 [ 605.231654][ T10] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 605.273413][ T5843] usb 4-1: USB disconnect, device number 82 [ 605.863226][ T24] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 606.327929][ T24] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 606.355245][ T24] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 606.374475][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.550543][T13251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1986'. [ 606.560013][T13251] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 606.567610][T13251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.582221][T13251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1986'. [ 606.682652][ T24] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 607.566064][T13263] random: crng reseeded on system resumption [ 607.597056][T13266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1989'. [ 607.775631][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1989'. [ 608.421053][ T24] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 608.586119][ T24] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 609.105276][ T24] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 609.113597][ T24] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 609.521077][T13282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1993'. [ 609.618826][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1993'. [ 609.794649][ T10] usb 5-1: USB disconnect, device number 78 [ 610.374968][ T10] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 610.560194][ T10] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 610.569958][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.589404][ T10] usb 5-1: config 0 descriptor?? [ 610.806740][ T10] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 610.915292][ T5843] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 611.008532][T13284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.017464][T13284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.029139][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 611.099449][ T5843] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 611.116863][ T5843] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.150842][ T5843] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 611.155674][ T10] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 611.167795][ T5843] usb 2-1: config 0 interface 0 has no altsetting 0 [ 611.192198][ T5843] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.210380][ T5843] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 611.232229][ T5843] usb 2-1: config 0 interface 0 has no altsetting 0 [ 611.240638][ T5843] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.243335][ T10] [drm] Initialized udl on minor 2 [ 611.275014][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 611.307992][ T5843] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 611.309742][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 611.336038][ T5843] usb 2-1: config 0 interface 0 has no altsetting 0 [ 611.349936][ T5903] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 611.349941][ T5843] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.365446][T13301] netlink: 'syz.4.2001': attribute type 21 has an invalid length. [ 611.375112][ T5843] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 611.378319][ T10] usb 5-1: USB disconnect, device number 79 [ 611.401538][ T5843] usb 2-1: config 0 interface 0 has no altsetting 0 [ 611.406929][ T5903] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 611.422415][T13301] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2001'. [ 611.451049][ T5843] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.475119][ T24] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 611.490977][ T5843] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 611.512252][ T5843] usb 2-1: config 0 interface 0 has no altsetting 0 [ 611.523272][ T5843] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.534063][ T5843] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 611.547443][ T5843] usb 2-1: config 0 interface 0 has no altsetting 0 [ 611.555424][ T5843] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.567117][ T5843] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 611.578202][ T5843] usb 2-1: config 0 interface 0 has no altsetting 0 [ 611.586071][ T5843] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.595169][ T5843] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 611.606294][ T5843] usb 2-1: config 0 interface 0 has no altsetting 0 [ 611.619013][ T5843] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 611.628307][ T5843] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 611.642048][ T5843] usb 2-1: Product: syz [ 611.646710][ T5843] usb 2-1: Manufacturer: syz [ 611.651420][ T5843] usb 2-1: SerialNumber: syz [ 611.657101][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 611.663970][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.675279][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 611.689400][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 611.699383][ T5843] usb 2-1: config 0 descriptor?? [ 611.707878][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.716261][ T5843] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 611.736712][ T24] usb 3-1: config 0 descriptor?? [ 612.061768][T13309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2002'. [ 612.142199][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2002'. [ 612.338742][T13313] usb usb8: usbfs: process 13313 (syz.1.1996) did not claim interface 0 before use [ 612.575037][T13318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2003'. [ 612.742422][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2003'. [ 612.860015][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 612.867735][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 612.885821][ T24] usb 3-1: USB disconnect, device number 74 [ 613.576719][T13328] netlink: 'syz.2.2006': attribute type 2 has an invalid length. [ 613.592165][T13328] netlink: 'syz.2.2006': attribute type 8 has an invalid length. [ 613.603821][T13328] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2006'. [ 613.624474][ C1] usb 2-1: yurex_control_callback - control failed: -2 [ 614.081824][T13332] vcan0: Master is either lo or non-ether device [ 614.372155][T13336] random: crng reseeded on system resumption [ 614.483396][ T5903] usb 2-1: USB disconnect, device number 77 [ 614.493869][ T5903] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 614.616640][T13342] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 615.206465][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2013'. [ 615.498246][T13368] FAULT_INJECTION: forcing a failure. [ 615.498246][T13368] name failslab, interval 1, probability 0, space 0, times 0 [ 615.851896][T13368] CPU: 1 UID: 0 PID: 13368 Comm: syz.1.2017 Not tainted syzkaller #0 PREEMPT(full) [ 615.851924][T13368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 615.851936][T13368] Call Trace: [ 615.851944][T13368] [ 615.851952][T13368] dump_stack_lvl+0x189/0x250 [ 615.851983][T13368] ? __pfx____ratelimit+0x10/0x10 [ 615.852005][T13368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 615.852027][T13368] ? __pfx__printk+0x10/0x10 [ 615.852056][T13368] ? __pfx___might_resched+0x10/0x10 [ 615.852072][T13368] should_fail_ex+0x414/0x560 [ 615.852090][T13368] should_failslab+0xa8/0x100 [ 615.852113][T13368] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 615.852128][T13368] ? __alloc_skb+0x112/0x2d0 [ 615.852143][T13368] __alloc_skb+0x112/0x2d0 [ 615.852157][T13368] netlink_sendmsg+0x5c6/0xb30 [ 615.852176][T13368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.852190][T13368] ? aa_sock_msg_perm+0xf1/0x1d0 [ 615.852206][T13368] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 615.852216][T13368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.852229][T13368] __sock_sendmsg+0x219/0x270 [ 615.852242][T13368] ____sys_sendmsg+0x505/0x830 [ 615.852259][T13368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 615.852278][T13368] ? import_iovec+0x74/0xa0 [ 615.852292][T13368] ___sys_sendmsg+0x21f/0x2a0 [ 615.852307][T13368] ? __pfx____sys_sendmsg+0x10/0x10 [ 615.852339][T13368] ? __fget_files+0x2a/0x420 [ 615.852357][T13368] ? __fget_files+0x3a0/0x420 [ 615.852376][T13368] __x64_sys_sendmsg+0x19b/0x260 [ 615.852392][T13368] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 615.852410][T13368] ? __pfx_ksys_write+0x10/0x10 [ 615.852422][T13368] ? rcu_is_watching+0x15/0xb0 [ 615.852438][T13368] ? do_syscall_64+0xbe/0x3b0 [ 615.852453][T13368] do_syscall_64+0xfa/0x3b0 [ 615.852465][T13368] ? lockdep_hardirqs_on+0x9c/0x150 [ 615.852476][T13368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.852487][T13368] ? clear_bhb_loop+0x60/0xb0 [ 615.852499][T13368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.852509][T13368] RIP: 0033:0x7f11a278eec9 [ 615.852520][T13368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.852529][T13368] RSP: 002b:00007f11a35bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.852542][T13368] RAX: ffffffffffffffda RBX: 00007f11a29e5fa0 RCX: 00007f11a278eec9 [ 615.852550][T13368] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 615.852557][T13368] RBP: 00007f11a35bc090 R08: 0000000000000000 R09: 0000000000000000 [ 615.852564][T13368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.852570][T13368] R13: 00007f11a29e6038 R14: 00007f11a29e5fa0 R15: 00007f11a2b0fa28 [ 615.852586][T13368] [ 617.133439][T13375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 617.966731][T13390] random: crng reseeded on system resumption [ 618.163161][ T5903] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 618.405155][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 618.412225][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.424726][ T5903] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 618.485781][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.501035][ T5903] usb 5-1: config 0 descriptor?? [ 618.512047][ T5903] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 618.635096][ T979] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 618.825331][ T979] usb 3-1: device descriptor read/64, error -71 [ 619.065010][ T979] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 619.175110][ T10] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 619.236659][ T979] usb 3-1: device descriptor read/64, error -71 [ 619.345326][ T979] usb usb3-port1: attempt power cycle [ 619.355721][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 619.367338][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 619.397457][ T10] usb 4-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice= 0.9c [ 619.414922][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.431950][ T10] usb 4-1: Product: syz [ 619.442374][ T10] usb 4-1: Manufacturer: syz [ 619.451573][ T10] usb 4-1: SerialNumber: syz [ 619.523987][ T10] usb 4-1: config 0 descriptor?? [ 619.551747][ T10] usb 4-1: selecting invalid altsetting 1 [ 619.565069][ T10] snd-usb-caiaq 4-1:0.0: can't set alt interface. [ 619.577467][ T10] usb 4-1: unable to init card! (ret=-5) [ 619.586226][ T10] snd-usb-caiaq 4-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 619.685249][ T979] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 619.707542][ T979] usb 3-1: device descriptor read/8, error -71 [ 619.755802][T13402] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2026'. [ 619.895216][ T24] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 619.948504][ T5903] gspca_vc032x: reg_w err -71 [ 619.953280][ T5903] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 619.955032][ T979] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 619.967474][ T5903] usb 5-1: USB disconnect, device number 80 [ 619.996992][ T979] usb 3-1: device descriptor read/8, error -71 [ 620.047277][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.060127][ T24] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 620.070406][ T24] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 620.082658][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 620.091931][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.099946][ T24] usb 1-1: Product: 匛嶓ꪺ㧮肄鷸ᗃ斬Ï孤픃湻Ⓖཙ뗱梙袛틺ਭ撙㑿綴㥂䭀콱é®é¤‹è¾¢ì‰¡é¨«î ¦ê†½å¨°ê§šì‰“摎儇检쟳竑柳㵚ꃗèŠæ¶¡Ð¢ëŠ‘éŠè¯§ä´ï§ƒâ¥¹àªà£“翢蕯áŒç£ ä¡±ìœ³ã–€í³ê¾­â‚•ë³¾å¾„겣䫑ܰ㫶 [ 620.123032][ T979] usb usb3-port1: unable to enumerate USB device [ 620.129416][ T24] usb 1-1: Manufacturer: äŠ [ 620.133988][ T24] usb 1-1: SerialNumber: syz [ 620.526059][ T5903] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 620.548217][T13434] FAULT_INJECTION: forcing a failure. [ 620.548217][T13434] name failslab, interval 1, probability 0, space 0, times 0 [ 620.551350][T13419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.562231][T13434] CPU: 0 UID: 0 PID: 13434 Comm: syz.4.2037 Not tainted syzkaller #0 PREEMPT(full) [ 620.562256][T13434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 620.562269][T13434] Call Trace: [ 620.562276][T13434] [ 620.562285][T13434] dump_stack_lvl+0x189/0x250 [ 620.562315][T13434] ? __pfx____ratelimit+0x10/0x10 [ 620.562338][T13434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 620.562363][T13434] ? __pfx__printk+0x10/0x10 [ 620.562384][T13434] ? __pfx___might_resched+0x10/0x10 [ 620.562406][T13434] ? fs_reclaim_acquire+0x7d/0x100 [ 620.562440][T13434] should_fail_ex+0x414/0x560 [ 620.562473][T13434] should_failslab+0xa8/0x100 [ 620.562501][T13434] kmem_cache_alloc_noprof+0x73/0x3c0 [ 620.562525][T13434] ? ovs_flow_alloc+0x24/0x1f0 [ 620.562558][T13434] ovs_flow_alloc+0x24/0x1f0 [ 620.562590][T13434] ovs_flow_cmd_new+0x1ee/0xd80 [ 620.562611][T13434] ? stack_depot_save_flags+0x40/0x860 [ 620.562637][T13434] ? netlink_unicast+0x7e1/0x9e0 [ 620.562663][T13434] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 620.562744][T13434] ? __nla_parse+0x40/0x60 [ 620.562767][T13434] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 620.562803][T13434] genl_family_rcv_msg_doit+0x215/0x300 [ 620.562840][T13434] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 620.562888][T13434] ? bpf_lsm_capable+0x9/0x20 [ 620.562911][T13434] ? security_capable+0x7e/0x2e0 [ 620.562945][T13434] genl_rcv_msg+0x60e/0x790 [ 620.562980][T13434] ? __pfx_genl_rcv_msg+0x10/0x10 [ 620.563007][T13434] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 620.563031][T13434] ? __asan_memcpy+0x40/0x70 [ 620.563051][T13434] ? __pfx_ref_tracker_free+0x10/0x10 [ 620.563088][T13434] netlink_rcv_skb+0x205/0x470 [ 620.563108][T13434] ? __lock_acquire+0xab9/0xd20 [ 620.563128][T13434] ? __pfx_genl_rcv_msg+0x10/0x10 [ 620.563158][T13434] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 620.563198][T13434] ? down_read+0x1ad/0x2e0 [ 620.563226][T13434] genl_rcv+0x28/0x40 [ 620.563251][T13434] netlink_unicast+0x82f/0x9e0 [ 620.563280][T13434] ? __pfx_netlink_unicast+0x10/0x10 [ 620.563302][T13434] ? netlink_sendmsg+0x642/0xb30 [ 620.563323][T13434] ? skb_put+0x11b/0x210 [ 620.563350][T13434] netlink_sendmsg+0x805/0xb30 [ 620.563382][T13434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.563409][T13434] ? aa_sock_msg_perm+0xf1/0x1d0 [ 620.563439][T13434] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 620.563457][T13434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.563481][T13434] __sock_sendmsg+0x219/0x270 [ 620.563504][T13434] ____sys_sendmsg+0x505/0x830 [ 620.563536][T13434] ? __pfx_____sys_sendmsg+0x10/0x10 [ 620.563571][T13434] ? import_iovec+0x74/0xa0 [ 620.563598][T13434] ___sys_sendmsg+0x21f/0x2a0 [ 620.563627][T13434] ? __pfx____sys_sendmsg+0x10/0x10 [ 620.563688][T13434] ? __fget_files+0x2a/0x420 [ 620.563714][T13434] ? __fget_files+0x3a0/0x420 [ 620.563752][T13434] __x64_sys_sendmsg+0x19b/0x260 [ 620.563780][T13434] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 620.563816][T13434] ? __pfx_ksys_write+0x10/0x10 [ 620.563838][T13434] ? rcu_is_watching+0x15/0xb0 [ 620.563865][T13434] ? do_syscall_64+0xbe/0x3b0 [ 620.563898][T13434] do_syscall_64+0xfa/0x3b0 [ 620.563919][T13434] ? lockdep_hardirqs_on+0x9c/0x150 [ 620.563940][T13434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.563959][T13434] ? clear_bhb_loop+0x60/0xb0 [ 620.563982][T13434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.564001][T13434] RIP: 0033:0x7fc28f78eec9 [ 620.564018][T13434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.564035][T13434] RSP: 002b:00007fc290586038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 620.564059][T13434] RAX: ffffffffffffffda RBX: 00007fc28f9e5fa0 RCX: 00007fc28f78eec9 [ 620.564073][T13434] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 620.564086][T13434] RBP: 00007fc290586090 R08: 0000000000000000 R09: 0000000000000000 [ 620.564098][T13434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.564110][T13434] R13: 00007fc28f9e6038 R14: 00007fc28f9e5fa0 R15: 00007fc28fb0fa28 [ 620.564140][T13434] [ 620.660761][T13437] netlink: 276 bytes leftover after parsing attributes in process `syz.4.2039'. [ 620.701871][T13419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.748288][ T5903] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 621.026327][T13419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.046138][T13419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.082320][T13419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.100152][T13419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.104040][ T5903] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 621.117060][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 621.119417][T13419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.140370][T13419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.149347][ T5903] usb 2-1: Product: syz [ 621.153534][ T5903] usb 2-1: Manufacturer: syz [ 621.167200][T13444] netlink: 'syz.4.2042': attribute type 10 has an invalid length. [ 621.175341][ T5903] usb 2-1: SerialNumber: syz [ 621.185699][ T24] cdc_ncm 1-1:1.0: bind() failure [ 621.216928][ T5903] usb 2-1: config 0 descriptor?? [ 621.220821][ T24] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 621.234216][ T5903] ims_pcu 2-1:0.0: Zero length descriptor [ 621.237991][ T24] cdc_ncm 1-1:1.1: bind() failure [ 621.248975][ T5903] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 621.268657][ T24] usb 1-1: USB disconnect, device number 65 [ 622.135341][T13469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2047'. [ 622.234051][T13471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2049'. [ 622.288981][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2049'. [ 622.563549][T13473] macvtap2: entered promiscuous mode [ 622.569125][T13473] macvtap2: entered allmulticast mode [ 622.733064][T13474] macvtap2: entered promiscuous mode [ 622.771045][T13474] macvtap2: entered allmulticast mode [ 623.219715][T13476] netlink: 276 bytes leftover after parsing attributes in process `syz.0.2051'. [ 623.947207][T13486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.968583][T13490] fuse: Bad value for 'fd' [ 623.988358][ T5843] usb 2-1: USB disconnect, device number 79 [ 624.005921][ T5903] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 624.031194][T13486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.206458][ T5903] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 624.224034][ T5903] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 624.246452][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 624.261293][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.267903][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.295434][ T5903] usb 3-1: Product: syz [ 624.299797][ T5903] usb 3-1: Manufacturer: syz [ 624.304508][ T5903] usb 3-1: SerialNumber: syz [ 624.313926][ T5903] usb 3-1: config 0 descriptor?? [ 624.333384][ T5903] ims_pcu 3-1:0.0: Zero length descriptor [ 624.340283][ T5903] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 626.774172][ T5843] usb 3-1: USB disconnect, device number 79 [ 627.432626][T13539] random: crng reseeded on system resumption [ 627.684068][T13546] fuse: Bad value for 'fd' [ 628.594104][T13559] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2074'. [ 629.588906][T13570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2076'. [ 629.646112][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2076'. [ 631.303106][T13583] FAULT_INJECTION: forcing a failure. [ 631.303106][T13583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.316969][T13583] CPU: 1 UID: 0 PID: 13583 Comm: syz.2.2080 Not tainted syzkaller #0 PREEMPT(full) [ 631.316996][T13583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 631.317009][T13583] Call Trace: [ 631.317017][T13583] [ 631.317026][T13583] dump_stack_lvl+0x189/0x250 [ 631.317058][T13583] ? __pfx____ratelimit+0x10/0x10 [ 631.317082][T13583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 631.317108][T13583] ? __pfx__printk+0x10/0x10 [ 631.317141][T13583] should_fail_ex+0x414/0x560 [ 631.317174][T13583] _copy_from_user+0x2d/0xb0 [ 631.317200][T13583] __copy_msghdr+0x3c5/0x5b0 [ 631.317231][T13583] ___sys_sendmsg+0x1a5/0x2a0 [ 631.317260][T13583] ? __pfx____sys_sendmsg+0x10/0x10 [ 631.317324][T13583] ? __fget_files+0x2a/0x420 [ 631.317351][T13583] ? __fget_files+0x3a0/0x420 [ 631.317390][T13583] __x64_sys_sendmsg+0x19b/0x260 [ 631.317419][T13583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 631.317457][T13583] ? __pfx_ksys_write+0x10/0x10 [ 631.317480][T13583] ? rcu_is_watching+0x15/0xb0 [ 631.317510][T13583] ? do_syscall_64+0xbe/0x3b0 [ 631.317546][T13583] do_syscall_64+0xfa/0x3b0 [ 631.317569][T13583] ? lockdep_hardirqs_on+0x9c/0x150 [ 631.317592][T13583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.317612][T13583] ? clear_bhb_loop+0x60/0xb0 [ 631.317641][T13583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.317660][T13583] RIP: 0033:0x7f95a958eec9 [ 631.317678][T13583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.317697][T13583] RSP: 002b:00007f95aa3e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.317719][T13583] RAX: ffffffffffffffda RBX: 00007f95a97e5fa0 RCX: 00007f95a958eec9 [ 631.317735][T13583] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 631.317749][T13583] RBP: 00007f95aa3e3090 R08: 0000000000000000 R09: 0000000000000000 [ 631.317762][T13583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.317774][T13583] R13: 00007f95a97e6038 R14: 00007f95a97e5fa0 R15: 00007f95a990fa28 [ 631.317806][T13583] [ 631.898671][T13586] tipc: Enabled bearer , priority 0 [ 631.921003][T13588] fuse: Bad value for 'fd' [ 631.932916][T13586] syzkaller0: entered promiscuous mode [ 631.945100][T13586] syzkaller0: entered allmulticast mode [ 632.033562][T13585] tipc: Resetting bearer [ 632.116226][T13585] tipc: Disabling bearer [ 632.185012][ T979] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 632.356992][T13603] random: crng reseeded on system resumption [ 632.456703][ T979] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 632.464989][ T979] usb 2-1: config 0 has no interface number 0 [ 632.475998][ T979] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 632.489403][T12901] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 632.493134][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.588250][ T979] usb 2-1: config 0 descriptor?? [ 632.617535][ T979] usb 2-1: selecting invalid altsetting 1 [ 632.669159][ T979] dvb_ttusb_budget: ttusb_init_controller: error [ 632.675808][T12901] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 632.690402][T12901] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 632.699175][ T979] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 632.722223][T12901] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 632.845838][T13590] FAULT_INJECTION: forcing a failure. [ 632.845838][T13590] name failslab, interval 1, probability 0, space 0, times 0 [ 633.245089][T13590] CPU: 0 UID: 0 PID: 13590 Comm: syz.1.2083 Not tainted syzkaller #0 PREEMPT(full) [ 633.245117][T13590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 633.245127][T13590] Call Trace: [ 633.245134][T13590] [ 633.245142][T13590] dump_stack_lvl+0x189/0x250 [ 633.245168][T13590] ? __pfx____ratelimit+0x10/0x10 [ 633.245187][T13590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.245207][T13590] ? __pfx__printk+0x10/0x10 [ 633.245227][T13590] ? __pfx___might_resched+0x10/0x10 [ 633.245245][T13590] ? fs_reclaim_acquire+0x7d/0x100 [ 633.245273][T13590] should_fail_ex+0x414/0x560 [ 633.245300][T13590] should_failslab+0xa8/0x100 [ 633.245326][T13590] __kmalloc_noprof+0xcb/0x4f0 [ 633.245346][T13590] ? i2cdev_ioctl_rdwr+0xce/0x740 [ 633.245368][T13590] i2cdev_ioctl_rdwr+0xce/0x740 [ 633.245393][T13590] i2cdev_ioctl+0x64b/0x7f0 [ 633.245410][T13590] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 633.245428][T13590] ? __fget_files+0x3a0/0x420 [ 633.245450][T13590] ? __fget_files+0x2a/0x420 [ 633.245475][T13590] ? bpf_lsm_file_ioctl+0x9/0x20 [ 633.245493][T13590] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 633.245509][T13590] __se_sys_ioctl+0xfc/0x170 [ 633.245529][T13590] do_syscall_64+0xfa/0x3b0 [ 633.245548][T13590] ? lockdep_hardirqs_on+0x9c/0x150 [ 633.245566][T13590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.245582][T13590] ? clear_bhb_loop+0x60/0xb0 [ 633.245607][T13590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.245623][T13590] RIP: 0033:0x7f11a278eec9 [ 633.245637][T13590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.245652][T13590] RSP: 002b:00007f11a35bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 633.245670][T13590] RAX: ffffffffffffffda RBX: 00007f11a29e5fa0 RCX: 00007f11a278eec9 [ 633.245683][T13590] RDX: 0000200000000340 RSI: 0000000000000707 RDI: 0000000000000004 [ 633.245693][T13590] RBP: 00007f11a35bc090 R08: 0000000000000000 R09: 0000000000000000 [ 633.245704][T13590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.245714][T13590] R13: 00007f11a29e6038 R14: 00007f11a29e5fa0 R15: 00007f11a2b0fa28 [ 633.245739][T13590] [ 633.705240][T12901] usb 1-1: config 0 interface 0 has no altsetting 0 [ 633.713117][T12901] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 633.744204][T12901] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 633.971698][T12901] usb 1-1: config 0 interface 0 has no altsetting 0 [ 634.226437][T12901] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 634.228727][ T979] DVB: Unable to find symbol cx22700_attach() [ 634.235492][T12901] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 634.336318][T12901] usb 1-1: config 0 interface 0 has no altsetting 0 [ 634.585630][T12901] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 634.604033][T12901] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 634.650388][T12901] usb 1-1: config 0 interface 0 has no altsetting 0 [ 634.675680][ T979] DVB: Unable to find symbol tda10046_attach() [ 634.684256][ T979] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 634.715389][ T979] usb 2-1: USB disconnect, device number 80 [ 634.856497][T12901] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 634.901458][T12901] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 634.930052][T12901] usb 1-1: config 0 interface 0 has no altsetting 0 [ 634.946141][T12901] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 634.955439][T12901] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 634.976532][T12901] usb 1-1: config 0 interface 0 has no altsetting 0 [ 635.006478][T12901] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 635.035144][T12901] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 635.075125][T12901] usb 1-1: config 0 interface 0 has no altsetting 0 [ 635.111042][T12901] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 635.135033][T12901] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 635.178441][T12901] usb 1-1: config 0 interface 0 has no altsetting 0 [ 635.223733][T12901] usb 1-1: string descriptor 0 read error: -71 [ 635.243610][T12901] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 635.277896][T12901] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 635.310077][T12901] usb 1-1: config 0 descriptor?? [ 635.321753][T12901] usb 1-1: can't set config #0, error -71 [ 635.348458][T12901] usb 1-1: USB disconnect, device number 66 [ 635.397050][T13637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2093'. [ 635.494983][ T5903] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 635.542846][T13637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2093'. [ 635.705146][ T5903] usb 2-1: Using ep0 maxpacket: 16 [ 635.731709][ T5903] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 635.742352][ T5903] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.755360][ T5903] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 635.765630][ T5903] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 635.790678][T13646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2094'. [ 635.811091][ T5903] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 635.829245][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 635.859448][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2094'. [ 636.022773][ T5903] usb 2-1: SerialNumber: syz [ 636.046767][ T5903] hub 2-1:1.0: bad descriptor, ignoring hub [ 636.053974][ T5903] hub 2-1:1.0: probe with driver hub failed with error -5 [ 636.095939][ T5903] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 636.492567][T13625] raw-gadget.0 gadget.1: fail, usb_ep_set_halt returned -11 [ 636.509863][T13625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2091'. [ 636.564523][T13625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2091'. [ 636.754551][ T10] usb 2-1: USB disconnect, device number 81 [ 636.940881][T13656] fuse: Bad value for 'fd' [ 638.784526][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2103'. [ 638.901564][T13682] netlink: 'syz.4.2106': attribute type 9 has an invalid length. [ 638.928429][T13682] bond0: option arp_validate: invalid value (196609) [ 639.054644][T13689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.061997][T13690] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2108'. [ 639.065905][T13689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.080042][ T24] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 639.117484][T13692] loop8: detected capacity change from 0 to 1 [ 639.129958][T13692] Dev loop8: unable to read RDB block 1 [ 639.137394][T13692] loop8: unable to read partition table [ 639.143247][T13692] loop8: partition table beyond EOD, truncated [ 639.150834][T13692] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 639.235527][ T5843] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 639.243670][ T979] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 639.251808][ T24] usb 3-1: device descriptor read/64, error -71 [ 639.389865][T13702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2112'. [ 639.422899][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2112'. [ 639.445094][ T5843] usb 1-1: Using ep0 maxpacket: 16 [ 639.454298][ T979] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.465315][ T5843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.476487][ T979] usb 2-1: config 0 has no interfaces? [ 639.481980][ T5843] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 639.491246][ T979] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 639.501668][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.509774][ T24] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 639.517400][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.530267][ T5843] usb 1-1: config 0 descriptor?? [ 639.543581][ T979] usb 2-1: config 0 descriptor?? [ 639.665056][ T24] usb 3-1: device descriptor read/64, error -71 [ 639.790934][ T24] usb usb3-port1: attempt power cycle [ 639.809749][ T10] usb 2-1: USB disconnect, device number 82 [ 640.000792][ T5843] hid_parser_main: 112 callbacks suppressed [ 640.000817][ T5843] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 640.018023][ T5843] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 640.027753][ T5843] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 640.038363][ T5843] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 640.045961][ T5843] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 640.055034][ T5843] mcp2221 0003:04D8:00DD.0014: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 640.159187][ T24] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 640.195947][ T24] usb 3-1: device descriptor read/8, error -71 [ 640.378257][T13706] FAULT_INJECTION: forcing a failure. [ 640.378257][T13706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.394616][T13706] CPU: 0 UID: 0 PID: 13706 Comm: syz.1.2114 Not tainted syzkaller #0 PREEMPT(full) [ 640.394650][T13706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 640.394663][T13706] Call Trace: [ 640.394671][T13706] [ 640.394680][T13706] dump_stack_lvl+0x189/0x250 [ 640.394711][T13706] ? __pfx____ratelimit+0x10/0x10 [ 640.394736][T13706] ? __pfx_dump_stack_lvl+0x10/0x10 [ 640.394763][T13706] ? __pfx__printk+0x10/0x10 [ 640.394803][T13706] should_fail_ex+0x414/0x560 [ 640.394837][T13706] _copy_to_user+0x31/0xb0 [ 640.394867][T13706] simple_read_from_buffer+0xe1/0x170 [ 640.394896][T13706] proc_fail_nth_read+0x1b3/0x220 [ 640.394919][T13706] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 640.394942][T13706] ? rw_verify_area+0x2a6/0x4d0 [ 640.394964][T13706] ? __lock_acquire+0xab9/0xd20 [ 640.394981][T13706] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 640.395002][T13706] vfs_read+0x200/0xa30 [ 640.395023][T13706] ? fdget_pos+0x247/0x320 [ 640.395053][T13706] ? __pfx___mutex_lock+0x10/0x10 [ 640.395077][T13706] ? __pfx_vfs_read+0x10/0x10 [ 640.395102][T13706] ? __fget_files+0x2a/0x420 [ 640.395133][T13706] ? __fget_files+0x3a0/0x420 [ 640.395159][T13706] ? __fget_files+0x2a/0x420 [ 640.395194][T13706] ksys_read+0x145/0x250 [ 640.395217][T13706] ? __fget_files+0x3a0/0x420 [ 640.395244][T13706] ? __pfx_ksys_read+0x10/0x10 [ 640.395274][T13706] ? do_syscall_64+0xbe/0x3b0 [ 640.395302][T13706] do_syscall_64+0xfa/0x3b0 [ 640.395324][T13706] ? lockdep_hardirqs_on+0x9c/0x150 [ 640.395346][T13706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.395365][T13706] ? clear_bhb_loop+0x60/0xb0 [ 640.395390][T13706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.395408][T13706] RIP: 0033:0x7f11a278d8dc [ 640.395426][T13706] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 640.395443][T13706] RSP: 002b:00007f11a35bc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 640.395464][T13706] RAX: ffffffffffffffda RBX: 00007f11a29e5fa0 RCX: 00007f11a278d8dc [ 640.395479][T13706] RDX: 000000000000000f RSI: 00007f11a35bc0a0 RDI: 0000000000000006 [ 640.395492][T13706] RBP: 00007f11a35bc090 R08: 0000000000000000 R09: 0000000000000000 [ 640.395504][T13706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.395516][T13706] R13: 00007f11a29e6038 R14: 00007f11a29e5fa0 R15: 00007f11a2b0fa28 [ 640.395547][T13706] [ 640.555037][ T24] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 640.691552][ T5843] usb 1-1: USB disconnect, device number 67 [ 640.822233][ T24] usb 3-1: device descriptor read/8, error -71 [ 640.917148][T13714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2116'. [ 640.937288][ T24] usb usb3-port1: unable to enumerate USB device [ 642.010051][T13728] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 642.031170][T13728] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 642.360295][T13731] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 643.734822][T13754] netlink: 'syz.1.2124': attribute type 1 has an invalid length. [ 643.796984][T13755] fuse: Bad value for 'fd' [ 644.295195][ T10] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 644.435020][ T24] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 644.469450][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.504503][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 644.514330][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 644.540670][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.567705][ T10] usb 1-1: config 0 descriptor?? [ 644.594959][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 644.609594][T13769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.619401][T13769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.645241][T13769] usb usb8: check_ctrlrecip: process 13769 (syz.3.2127) requesting ep 01 but needs 81 [ 644.655044][T13769] usb usb8: usbfs: process 13769 (syz.3.2127) did not claim interface 0 before use [ 644.678779][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 644.691570][ T24] usb 5-1: config 0 has no interface number 0 [ 644.706424][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.731720][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.768786][ T24] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 644.813541][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.093547][ T24] usb 5-1: config 0 descriptor?? [ 645.916601][ T24] input: HID 28bd:0094 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0094.0015/input/input63 [ 646.815564][ T24] uclogic 0003:28BD:0094.0015: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.4-1/input1 [ 646.855586][ T5843] usb 1-1: USB disconnect, device number 68 [ 647.479404][ T10] usb 5-1: USB disconnect, device number 81 [ 647.641196][T13805] fido_id[13805]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 649.143100][T13840] random: crng reseeded on system resumption [ 649.390793][T13846] netlink: 'syz.0.2138': attribute type 1 has an invalid length. [ 650.625009][ T10] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 650.766597][ T10] usb 2-1: device descriptor read/64, error -71 [ 651.046947][ T10] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 651.215263][ T10] usb 2-1: device descriptor read/64, error -71 [ 651.390786][ T10] usb usb2-port1: attempt power cycle [ 651.681138][T13867] random: crng reseeded on system resumption [ 651.737733][ T10] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 651.770265][T13869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.779312][ T10] usb 2-1: device descriptor read/8, error -71 [ 651.791121][T13869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.715052][ T10] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 652.945108][ T10] usb 2-1: device not accepting address 86, error -71 [ 652.957590][ T10] usb usb2-port1: unable to enumerate USB device [ 653.795118][ T5843] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 653.965342][ T5843] usb 1-1: Using ep0 maxpacket: 8 [ 654.018203][T13900] syzkaller1: entered promiscuous mode [ 654.029979][ T5843] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 654.041209][T13900] syzkaller1: entered allmulticast mode [ 654.041969][ T5843] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 654.056493][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.064666][ T5843] usb 1-1: Product: syz [ 654.069133][ T5843] usb 1-1: Manufacturer: syz [ 654.073865][ T5843] usb 1-1: SerialNumber: syz [ 654.198385][ T5843] usb 1-1: config 0 descriptor?? [ 654.207394][ T5843] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 654.215764][ T5843] usb 1-1: setting power ON [ 654.220442][ T5843] dvb-usb: bulk message failed: -22 (2/0) [ 654.239510][ T5843] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 654.255045][T13905] random: crng reseeded on system resumption [ 654.262432][ T5843] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 654.274473][ T5843] usb 1-1: media controller created [ 654.338841][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 654.376183][ T5843] usb 1-1: selecting invalid altsetting 6 [ 654.500306][T13890] nft_compat: unsupported protocol 1 [ 654.560876][ T5843] usb 1-1: digital interface selection failed (-22) [ 654.574251][ T5843] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 654.635812][ T10] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 654.670610][ T5843] usb 1-1: setting power OFF [ 654.680601][ T5843] dvb-usb: bulk message failed: -22 (2/0) [ 654.715178][ T5843] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 654.733700][ T5843] (NULL device *): no alternate interface [ 654.749159][T13915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2154'. [ 654.804416][ T10] usb 5-1: device descriptor read/64, error -71 [ 654.815141][T13915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2154'. [ 655.065223][ T10] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 655.091662][ T5843] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 655.195002][ T10] usb 5-1: device descriptor read/64, error -71 [ 655.346906][ T5843] usb 1-1: USB disconnect, device number 69 [ 655.664959][ T10] usb usb5-port1: attempt power cycle [ 656.010250][T13921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2155'. [ 656.074470][T13923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2155'. [ 656.083594][ T10] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 656.395311][ T10] usb 5-1: device descriptor read/8, error -71 [ 656.634989][ T10] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 656.656412][ T10] usb 5-1: device descriptor read/8, error -71 [ 656.752443][T13925] FAULT_INJECTION: forcing a failure. [ 656.752443][T13925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 656.766115][ T10] usb usb5-port1: unable to enumerate USB device [ 656.800689][T13925] CPU: 0 UID: 0 PID: 13925 Comm: syz.1.2157 Not tainted syzkaller #0 PREEMPT(full) [ 656.800717][T13925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 656.800729][T13925] Call Trace: [ 656.800737][T13925] [ 656.800747][T13925] dump_stack_lvl+0x189/0x250 [ 656.800777][T13925] ? __pfx____ratelimit+0x10/0x10 [ 656.800801][T13925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 656.800826][T13925] ? __pfx__printk+0x10/0x10 [ 656.800859][T13925] should_fail_ex+0x414/0x560 [ 656.800893][T13925] _copy_to_user+0x31/0xb0 [ 656.800920][T13925] simple_read_from_buffer+0xe1/0x170 [ 656.800950][T13925] proc_fail_nth_read+0x1b3/0x220 [ 656.800977][T13925] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 656.800999][T13925] ? rw_verify_area+0x2a6/0x4d0 [ 656.801019][T13925] ? __lock_acquire+0xab9/0xd20 [ 656.801034][T13925] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 656.801054][T13925] vfs_read+0x200/0xa30 [ 656.801075][T13925] ? fdget_pos+0x247/0x320 [ 656.801102][T13925] ? __pfx___mutex_lock+0x10/0x10 [ 656.801125][T13925] ? __pfx_vfs_read+0x10/0x10 [ 656.801145][T13925] ? __fget_files+0x2a/0x420 [ 656.801175][T13925] ? __fget_files+0x3a0/0x420 [ 656.801196][T13925] ? __fget_files+0x2a/0x420 [ 656.801227][T13925] ksys_read+0x145/0x250 [ 656.801252][T13925] ? __pfx_ksys_read+0x10/0x10 [ 656.801272][T13925] ? rcu_is_watching+0x15/0xb0 [ 656.801304][T13925] ? do_syscall_64+0xbe/0x3b0 [ 656.801328][T13925] do_syscall_64+0xfa/0x3b0 [ 656.801348][T13925] ? lockdep_hardirqs_on+0x9c/0x150 [ 656.801370][T13925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.801387][T13925] ? clear_bhb_loop+0x60/0xb0 [ 656.801409][T13925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.801427][T13925] RIP: 0033:0x7f11a278d8dc [ 656.801445][T13925] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 656.801461][T13925] RSP: 002b:00007f11a35bc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 656.801480][T13925] RAX: ffffffffffffffda RBX: 00007f11a29e5fa0 RCX: 00007f11a278d8dc [ 656.801494][T13925] RDX: 000000000000000f RSI: 00007f11a35bc0a0 RDI: 0000000000000005 [ 656.801506][T13925] RBP: 00007f11a35bc090 R08: 0000000000000000 R09: 0000000000000000 [ 656.801518][T13925] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 656.801530][T13925] R13: 00007f11a29e6038 R14: 00007f11a29e5fa0 R15: 00007f11a2b0fa28 [ 656.801563][T13925] [ 657.230376][T13941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2162'. [ 657.411460][T13941] program syz.0.2162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 657.705082][ T10] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 657.845307][ T5903] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 658.005028][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 658.021117][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 658.032225][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.050079][ T10] usb 2-1: config 0 descriptor?? [ 658.138364][ T5903] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 658.149209][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 658.169702][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 658.214515][ T5903] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 658.231033][ T5903] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 658.241212][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.256458][T13971] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2172'. [ 658.274340][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 658.282123][ T5903] usb 1-1: config 0 descriptor?? [ 658.290355][T13953] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 658.299559][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 658.335070][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 658.342398][ T10] usb 2-1: media controller created [ 658.368524][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 658.547254][ T10] az6027: usb out operation failed. (-71) [ 658.584836][ T10] az6027: usb out operation failed. (-71) [ 658.591729][ T10] stb0899_attach: Driver disabled by Kconfig [ 658.658841][ T5903] usbhid 1-1:0.0: can't add hid device: -71 [ 658.675455][ T10] az6027: no front-end attached [ 658.675455][ T10] [ 658.689805][ T5903] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 658.750298][ T10] az6027: usb out operation failed. (-71) [ 658.782283][ T5903] usb 1-1: USB disconnect, device number 70 [ 658.791058][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 658.966409][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input64 [ 658.996084][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 659.010759][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 659.044482][T13981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2173'. [ 659.045808][ T10] usb 2-1: USB disconnect, device number 87 [ 659.448487][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 659.695140][T13694] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 659.843508][T13999] sctp: [Deprecated]: syz.1.2178 (pid 13999) Use of struct sctp_assoc_value in delayed_ack socket option. [ 659.843508][T13999] Use struct sctp_sack_info instead [ 659.888258][T13694] usb 5-1: config 0 interface 0 has no altsetting 0 [ 659.895973][T13694] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a1e, bcdDevice= 0.00 [ 659.908626][T13694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.943765][T13694] usb 5-1: config 0 descriptor?? [ 659.967529][T14001] syzkaller1: entered promiscuous mode [ 659.980761][T14001] syzkaller1: entered allmulticast mode [ 660.322379][T14011] FAULT_INJECTION: forcing a failure. [ 660.322379][T14011] name failslab, interval 1, probability 0, space 0, times 0 [ 660.337442][T14011] CPU: 1 UID: 0 PID: 14011 Comm: syz.2.2185 Not tainted syzkaller #0 PREEMPT(full) [ 660.337459][T14011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 660.337466][T14011] Call Trace: [ 660.337472][T14011] [ 660.337477][T14011] dump_stack_lvl+0x189/0x250 [ 660.337497][T14011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 660.337521][T14011] should_fail_ex+0x414/0x560 [ 660.337539][T14011] should_failslab+0xa8/0x100 [ 660.337555][T14011] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 660.337572][T14011] ? __alloc_skb+0x112/0x2d0 [ 660.337587][T14011] __alloc_skb+0x112/0x2d0 [ 660.337601][T14011] netlink_ack+0x146/0xa50 [ 660.337613][T14011] ? __pfx_genl_rcv_msg+0x10/0x10 [ 660.337627][T14011] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 660.337642][T14011] ? __pfx_nl80211_post_doit+0x10/0x10 [ 660.337658][T14011] ? __asan_memcpy+0x40/0x70 [ 660.337674][T14011] ? __pfx_ref_tracker_free+0x10/0x10 [ 660.337693][T14011] netlink_rcv_skb+0x28c/0x470 [ 660.337704][T14011] ? __lock_acquire+0xab9/0xd20 [ 660.337716][T14011] ? __pfx_genl_rcv_msg+0x10/0x10 [ 660.337732][T14011] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 660.337754][T14011] ? down_read+0x1ad/0x2e0 [ 660.337769][T14011] genl_rcv+0x28/0x40 [ 660.337782][T14011] netlink_unicast+0x82f/0x9e0 [ 660.337798][T14011] ? __pfx_netlink_unicast+0x10/0x10 [ 660.337809][T14011] ? netlink_sendmsg+0x642/0xb30 [ 660.337820][T14011] ? skb_put+0x11b/0x210 [ 660.337835][T14011] netlink_sendmsg+0x805/0xb30 [ 660.337852][T14011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.337866][T14011] ? aa_sock_msg_perm+0xf1/0x1d0 [ 660.337882][T14011] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 660.337893][T14011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.337905][T14011] __sock_sendmsg+0x219/0x270 [ 660.337920][T14011] ____sys_sendmsg+0x505/0x830 [ 660.337938][T14011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 660.337957][T14011] ? import_iovec+0x74/0xa0 [ 660.337972][T14011] ___sys_sendmsg+0x21f/0x2a0 [ 660.337987][T14011] ? __pfx____sys_sendmsg+0x10/0x10 [ 660.338020][T14011] ? __fget_files+0x2a/0x420 [ 660.338034][T14011] ? __fget_files+0x3a0/0x420 [ 660.338053][T14011] __x64_sys_sendmsg+0x19b/0x260 [ 660.338069][T14011] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 660.338088][T14011] ? __pfx_ksys_write+0x10/0x10 [ 660.338100][T14011] ? rcu_is_watching+0x15/0xb0 [ 660.338116][T14011] ? do_syscall_64+0xbe/0x3b0 [ 660.338131][T14011] do_syscall_64+0xfa/0x3b0 [ 660.338143][T14011] ? lockdep_hardirqs_on+0x9c/0x150 [ 660.338154][T14011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.338164][T14011] ? clear_bhb_loop+0x60/0xb0 [ 660.338177][T14011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.338187][T14011] RIP: 0033:0x7f95a958eec9 [ 660.338197][T14011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.338206][T14011] RSP: 002b:00007f95aa3e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.338219][T14011] RAX: ffffffffffffffda RBX: 00007f95a97e5fa0 RCX: 00007f95a958eec9 [ 660.338227][T14011] RDX: 000000002000c040 RSI: 0000200000001080 RDI: 0000000000000003 [ 660.338234][T14011] RBP: 00007f95aa3e3090 R08: 0000000000000000 R09: 0000000000000000 [ 660.338240][T14011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.338247][T14011] R13: 00007f95a97e6038 R14: 00007f95a97e5fa0 R15: 00007f95a990fa28 [ 660.338263][T14011] [ 660.683478][T13694] hid-corsair-void 0003:1B1C:0A1E.0016: unknown main item tag 0x0 [ 660.692538][T13694] hid-corsair-void 0003:1B1C:0A1E.0016: unknown main item tag 0x0 [ 660.700662][T13694] hid-corsair-void 0003:1B1C:0A1E.0016: unknown main item tag 0x0 [ 660.708568][T13694] hid-corsair-void 0003:1B1C:0A1E.0016: unknown main item tag 0x0 [ 660.716968][T13694] hid-corsair-void 0003:1B1C:0A1E.0016: unknown main item tag 0x0 [ 660.730420][T13694] hid-corsair-void 0003:1B1C:0A1E.0016: hidraw0: USB HID v0.00 Device [HID 1b1c:0a1e] on usb-dummy_hcd.4-1/input0 [ 660.762873][T14014] netlink: 'syz.2.2186': attribute type 1 has an invalid length. [ 660.801147][T14014] bond2: entered promiscuous mode [ 660.806989][T14014] 8021q: adding VLAN 0 to HW filter on device bond2 [ 660.828655][T14017] 8021q: adding VLAN 0 to HW filter on device bond2 [ 660.837581][T14017] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 660.850416][T14017] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 660.871573][T14017] bond2: (slave gre1): making interface the new active one [ 660.893644][T14017] gre1: entered promiscuous mode [ 660.914356][T14017] bond2: (slave gre1): Enslaving as an active interface with an up link [ 661.255022][ T10] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 661.404618][ T5843] hid-corsair-void 0003:1B1C:0A1E.0016: failed to request battery (reason: -71) [ 661.406796][ T5903] usb 5-1: USB disconnect, device number 86 [ 661.423863][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 661.425122][T13694] hid-corsair-void 0003:1B1C:0A1E.0016: failed to request firmware (reason: -71) [ 661.457430][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 661.493288][ T10] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 661.509407][ T10] usb 1-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 661.519319][ T10] usb 1-1: Product: syz [ 661.523563][ T10] usb 1-1: Manufacturer: syz [ 661.532336][ T10] usb 1-1: SerialNumber: syz [ 661.543223][ T10] usb 1-1: config 0 descriptor?? [ 661.673929][T14037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2194'. [ 661.766889][ T10] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 661.875217][ T5903] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 662.022977][T14040] fuse: Bad value for 'fd' [ 662.028658][ T5903] usb 5-1: too many configurations: 151, using maximum allowed: 8 [ 662.130998][ T5903] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 662.142482][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 662.160092][ T5903] usb 5-1: Product: syz [ 662.174209][ T5903] usb 5-1: Manufacturer: syz [ 662.185119][ T5903] usb 5-1: SerialNumber: syz [ 662.198328][T14042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.218798][ T5903] usb 5-1: config 0 descriptor?? [ 662.223476][T14042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.267084][ T5903] ims_pcu 5-1:0.0: Zero length descriptor [ 662.345541][ T5903] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 663.156028][T14020] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2187'. [ 663.175712][ T10] gspca_sunplus: reg_w_riv err -71 [ 663.180870][ T10] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 663.211415][ T10] usb 1-1: USB disconnect, device number 71 [ 664.312199][T14066] loop7: detected capacity change from 0 to 16384 [ 664.603134][ T5843] usb 5-1: USB disconnect, device number 87 [ 664.779760][T14068] loop7: detected capacity change from 16384 to 0 [ 664.825084][ C0] I/O error, dev loop7, sector 4608 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 665.270418][T14084] random: crng reseeded on system resumption [ 665.326415][T14088] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2205'. [ 665.354997][ T5843] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 665.860135][ T5843] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 665.922324][ T5843] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 666.014006][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 666.055863][ T5843] usb 1-1: Product: syz [ 666.423522][ T5843] usb 1-1: Manufacturer: syz [ 666.452249][ T5843] usb 1-1: SerialNumber: syz [ 666.492441][ T5843] usb 1-1: config 0 descriptor?? [ 666.498203][T14098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.527901][ T5843] ims_pcu 1-1:0.0: Zero length descriptor [ 666.537099][T14098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.555055][ T5843] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 666.675142][T12901] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 666.815332][T12901] usb 2-1: device descriptor read/64, error -71 [ 666.990480][T14100] veth1_to_bond: entered allmulticast mode [ 666.999187][T14099] veth1_to_bond: left allmulticast mode [ 667.144991][T12901] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 667.465224][T12901] usb 2-1: device descriptor read/64, error -71 [ 667.585398][T12901] usb usb2-port1: attempt power cycle [ 667.945133][T12901] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 668.117183][T12901] usb 2-1: device descriptor read/8, error -71 [ 668.413412][T12901] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 668.505750][T12901] usb 2-1: device descriptor read/8, error -71 [ 668.633723][T12901] usb usb2-port1: unable to enumerate USB device [ 668.686123][ T5903] usb 1-1: USB disconnect, device number 72 [ 671.110717][T14143] random: crng reseeded on system resumption [ 671.505547][T14146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2219'. [ 671.515654][T14146] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 671.764358][T14146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 672.181842][T14146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2219'. [ 672.575719][ T5903] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 672.736093][ T5903] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 672.809840][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2225'. [ 673.118968][ T5903] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 673.128152][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 673.219755][T14172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2226'. [ 673.294295][ T5903] usb 2-1: Product: syz [ 673.306950][ T5903] usb 2-1: Manufacturer: syz [ 673.330359][ T5903] usb 2-1: SerialNumber: syz [ 673.373027][ T5903] usb 2-1: config 0 descriptor?? [ 673.392591][ T5903] ims_pcu 2-1:0.0: Zero length descriptor [ 673.407053][ T5903] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 673.663734][T14176] FAULT_INJECTION: forcing a failure. [ 673.663734][T14176] name failslab, interval 1, probability 0, space 0, times 0 [ 673.728691][T14176] CPU: 1 UID: 0 PID: 14176 Comm: syz.4.2228 Not tainted syzkaller #0 PREEMPT(full) [ 673.728719][T14176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 673.728732][T14176] Call Trace: [ 673.728741][T14176] [ 673.728750][T14176] dump_stack_lvl+0x189/0x250 [ 673.728780][T14176] ? __pfx____ratelimit+0x10/0x10 [ 673.728804][T14176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 673.728828][T14176] ? __pfx__printk+0x10/0x10 [ 673.728850][T14176] ? __lock_acquire+0xab9/0xd20 [ 673.728881][T14176] should_fail_ex+0x414/0x560 [ 673.728914][T14176] should_failslab+0xa8/0x100 [ 673.728942][T14176] kmem_cache_alloc_noprof+0x73/0x3c0 [ 673.728967][T14176] ? skb_clone+0x212/0x3a0 [ 673.728999][T14176] skb_clone+0x212/0x3a0 [ 673.729030][T14176] __netlink_deliver_tap+0x404/0x850 [ 673.729068][T14176] ? netlink_deliver_tap+0x2e/0x1b0 [ 673.729094][T14176] netlink_deliver_tap+0x19c/0x1b0 [ 673.729119][T14176] netlink_unicast+0x7fa/0x9e0 [ 673.729156][T14176] ? __pfx_netlink_unicast+0x10/0x10 [ 673.729177][T14176] ? netlink_sendmsg+0x642/0xb30 [ 673.729197][T14176] ? skb_put+0x11b/0x210 [ 673.729226][T14176] netlink_sendmsg+0x805/0xb30 [ 673.729260][T14176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.729288][T14176] ? aa_sock_msg_perm+0xf1/0x1d0 [ 673.729319][T14176] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 673.729339][T14176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.729364][T14176] __sock_sendmsg+0x219/0x270 [ 673.729389][T14176] ____sys_sendmsg+0x505/0x830 [ 673.729423][T14176] ? __pfx_____sys_sendmsg+0x10/0x10 [ 673.729460][T14176] ? import_iovec+0x74/0xa0 [ 673.729491][T14176] ___sys_sendmsg+0x21f/0x2a0 [ 673.729522][T14176] ? __pfx____sys_sendmsg+0x10/0x10 [ 673.729593][T14176] ? __fget_files+0x2a/0x420 [ 673.729620][T14176] ? __fget_files+0x3a0/0x420 [ 673.729659][T14176] __x64_sys_sendmsg+0x19b/0x260 [ 673.729690][T14176] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 673.729727][T14176] ? __pfx_ksys_write+0x10/0x10 [ 673.729749][T14176] ? rcu_is_watching+0x15/0xb0 [ 673.729779][T14176] ? do_syscall_64+0xbe/0x3b0 [ 673.729808][T14176] do_syscall_64+0xfa/0x3b0 [ 673.729830][T14176] ? lockdep_hardirqs_on+0x9c/0x150 [ 673.729852][T14176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.729871][T14176] ? clear_bhb_loop+0x60/0xb0 [ 673.729894][T14176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.729912][T14176] RIP: 0033:0x7fc28f78eec9 [ 673.729929][T14176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.729946][T14176] RSP: 002b:00007fc290586038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.729967][T14176] RAX: ffffffffffffffda RBX: 00007fc28f9e5fa0 RCX: 00007fc28f78eec9 [ 673.729982][T14176] RDX: 0000000000000804 RSI: 0000200000000040 RDI: 0000000000000003 [ 673.729993][T14176] RBP: 00007fc290586090 R08: 0000000000000000 R09: 0000000000000000 [ 673.730007][T14176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.730018][T14176] R13: 00007fc28f9e6038 R14: 00007fc28f9e5fa0 R15: 00007fc28fb0fa28 [ 673.730049][T14176] [ 674.031792][ C1] vkms_vblank_simulate: vblank timer overrun [ 674.465001][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 674.465019][ T30] audit: type=1800 audit(1759429577.468:3518): pid=14186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2231" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 674.745573][T14186] FAULT_INJECTION: forcing a failure. [ 674.745573][T14186] name failslab, interval 1, probability 0, space 0, times 0 [ 674.988704][T14186] CPU: 0 UID: 0 PID: 14186 Comm: syz.4.2231 Not tainted syzkaller #0 PREEMPT(full) [ 674.988722][T14186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 674.988730][T14186] Call Trace: [ 674.988734][T14186] [ 674.988740][T14186] dump_stack_lvl+0x189/0x250 [ 674.988758][T14186] ? __pfx____ratelimit+0x10/0x10 [ 674.988771][T14186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 674.988784][T14186] ? __pfx__printk+0x10/0x10 [ 674.988797][T14186] ? __pfx___might_resched+0x10/0x10 [ 674.988810][T14186] ? fs_reclaim_acquire+0x7d/0x100 [ 674.988828][T14186] should_fail_ex+0x414/0x560 [ 674.988845][T14186] should_failslab+0xa8/0x100 [ 674.988861][T14186] __kmalloc_noprof+0xcb/0x4f0 [ 674.988874][T14186] ? kfree+0x4d/0x440 [ 674.988884][T14186] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 674.988904][T14186] tomoyo_realpath_from_path+0xe3/0x5d0 [ 674.988921][T14186] ? tomoyo_domain+0xd9/0x130 [ 674.988934][T14186] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 674.988947][T14186] tomoyo_path_number_perm+0x1e8/0x5a0 [ 674.988962][T14186] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 674.988984][T14186] ? __lock_acquire+0xab9/0xd20 [ 674.989026][T14186] ? __fget_files+0x2a/0x420 [ 674.989043][T14186] ? __fget_files+0x2a/0x420 [ 674.989056][T14186] ? __fget_files+0x3a0/0x420 [ 674.989069][T14186] ? __fget_files+0x2a/0x420 [ 674.989085][T14186] security_file_ioctl+0xcb/0x2d0 [ 674.989100][T14186] __se_sys_ioctl+0x47/0x170 [ 674.989113][T14186] do_syscall_64+0xfa/0x3b0 [ 674.989125][T14186] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.989142][T14186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.989153][T14186] ? clear_bhb_loop+0x60/0xb0 [ 674.989166][T14186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.989176][T14186] RIP: 0033:0x7fc28f78eec9 [ 674.989186][T14186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.989196][T14186] RSP: 002b:00007fc290586038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 674.989208][T14186] RAX: ffffffffffffffda RBX: 00007fc28f9e5fa0 RCX: 00007fc28f78eec9 [ 674.989216][T14186] RDX: 00002000000001c0 RSI: 00000000c1485544 RDI: 0000000000000003 [ 674.989223][T14186] RBP: 00007fc290586090 R08: 0000000000000000 R09: 0000000000000000 [ 674.989230][T14186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.989237][T14186] R13: 00007fc28f9e6038 R14: 00007fc28f9e5fa0 R15: 00007fc28fb0fa28 [ 674.989253][T14186] [ 674.989259][T14186] ERROR: Out of memory at tomoyo_realpath_from_path. [ 675.808613][T14200] FAULT_INJECTION: forcing a failure. [ 675.808613][T14200] name failslab, interval 1, probability 0, space 0, times 0 [ 675.853475][T14200] CPU: 1 UID: 0 PID: 14200 Comm: syz.0.2234 Not tainted syzkaller #0 PREEMPT(full) [ 675.853493][T14200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 675.853501][T14200] Call Trace: [ 675.853506][T14200] [ 675.853512][T14200] dump_stack_lvl+0x189/0x250 [ 675.853530][T14200] ? __pfx____ratelimit+0x10/0x10 [ 675.853544][T14200] ? __pfx_dump_stack_lvl+0x10/0x10 [ 675.853557][T14200] ? __pfx__printk+0x10/0x10 [ 675.853570][T14200] ? __pfx___might_resched+0x10/0x10 [ 675.853582][T14200] ? fs_reclaim_acquire+0x7d/0x100 [ 675.853600][T14200] should_fail_ex+0x414/0x560 [ 675.853619][T14200] should_failslab+0xa8/0x100 [ 675.853635][T14200] __kmalloc_noprof+0xcb/0x4f0 [ 675.853654][T14200] ? snd_pcm_hw_refine+0x967/0x1640 [ 675.853670][T14200] snd_pcm_hw_refine+0x967/0x1640 [ 675.853687][T14200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.853703][T14200] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 675.853735][T14200] ? __kasan_kmalloc+0x93/0xb0 [ 675.853749][T14200] ? _snd_pcm_hw_param_min+0x2f5/0x540 [ 675.853763][T14200] snd_pcm_hw_param_near+0xfd/0x500 [ 675.853779][T14200] snd_pcm_oss_change_params_locked+0x2135/0x3e40 [ 675.853807][T14200] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 675.853818][T14200] ? aa_file_perm+0x44d/0x1550 [ 675.853836][T14200] ? _parse_integer_limit+0x1ae/0x1f0 [ 675.853852][T14200] ? __pfx_aa_file_perm+0x10/0x10 [ 675.853864][T14200] snd_pcm_oss_write+0x2fb/0x1190 [ 675.853873][T14200] ? __lock_acquire+0xab9/0xd20 [ 675.853894][T14200] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 675.853905][T14200] ? bpf_lsm_file_permission+0x9/0x20 [ 675.853917][T14200] ? security_file_permission+0x75/0x290 [ 675.853930][T14200] ? rw_verify_area+0x255/0x4d0 [ 675.853945][T14200] vfs_writev+0x4b6/0x960 [ 675.853957][T14200] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 675.853969][T14200] ? __pfx_vfs_writev+0x10/0x10 [ 675.853987][T14200] ? __fget_files+0x2a/0x420 [ 675.854003][T14200] ? __fget_files+0x3a0/0x420 [ 675.854017][T14200] ? __fget_files+0x2a/0x420 [ 675.854036][T14200] do_writev+0x14d/0x2d0 [ 675.854047][T14200] ? __pfx_do_writev+0x10/0x10 [ 675.854055][T14200] ? rcu_is_watching+0x15/0xb0 [ 675.854069][T14200] ? do_syscall_64+0xbe/0x3b0 [ 675.854084][T14200] do_syscall_64+0xfa/0x3b0 [ 675.854095][T14200] ? lockdep_hardirqs_on+0x9c/0x150 [ 675.854107][T14200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.854117][T14200] ? clear_bhb_loop+0x60/0xb0 [ 675.854130][T14200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.854140][T14200] RIP: 0033:0x7f1f6058eec9 [ 675.854151][T14200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.854160][T14200] RSP: 002b:00007f1f61445038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 675.854172][T14200] RAX: ffffffffffffffda RBX: 00007f1f607e5fa0 RCX: 00007f1f6058eec9 [ 675.854180][T14200] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000004 [ 675.854187][T14200] RBP: 00007f1f61445090 R08: 0000000000000000 R09: 0000000000000000 [ 675.854194][T14200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 675.854200][T14200] R13: 00007f1f607e6038 R14: 00007f1f607e5fa0 R15: 00007f1f6090fa28 [ 675.854217][T14200] [ 676.308067][ T5843] usb 2-1: USB disconnect, device number 92 [ 676.543537][T14203] program syz.1.2235 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 676.575332][T14199] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2233'. [ 676.718043][T14206] fuse: Bad value for 'user_id' [ 676.730074][T14206] fuse: Bad value for 'user_id' [ 676.756645][T14206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2237'. [ 676.777159][T14206] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2237'. [ 676.863481][T14213] netlink: 276 bytes leftover after parsing attributes in process `syz.0.2239'. [ 677.224992][ T5843] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 677.370351][T14224] netlink: 'syz.2.2242': attribute type 2 has an invalid length. [ 677.445378][ T5843] usb 5-1: too many configurations: 151, using maximum allowed: 8 [ 677.481426][ T5843] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 677.493316][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 677.515116][ T5843] usb 5-1: Product: syz [ 677.523342][ T5843] usb 5-1: Manufacturer: syz [ 677.534350][ T5843] usb 5-1: SerialNumber: syz [ 677.613995][ T5843] usb 5-1: config 0 descriptor?? [ 677.640988][ T5843] ims_pcu 5-1:0.0: Zero length descriptor [ 677.832184][ T5843] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 679.078851][T14248] netlink: 'syz.3.2248': attribute type 1 has an invalid length. [ 679.269504][T14248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2248'. [ 679.308900][T14250] gretap1: entered promiscuous mode [ 679.350867][ T5903] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 679.535136][ T5903] usb 2-1: Using ep0 maxpacket: 16 [ 679.542066][ T5903] usb 2-1: config 0 has no interfaces? [ 679.548479][ T5903] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 679.572058][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.605440][ T5903] usb 2-1: config 0 descriptor?? [ 679.829478][T14240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.839023][T14240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.856164][T14240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.865900][T14240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.984165][ T5903] usb 5-1: USB disconnect, device number 88 [ 680.073867][T14257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2251'. [ 680.301846][T14240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.315430][T14240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.330177][T14265] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2255'. [ 680.340465][T14240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.390293][T14240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.402102][T14261] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2253'. [ 680.462189][ T5903] usb 2-1: USB disconnect, device number 93 [ 680.734269][T14276] FAULT_INJECTION: forcing a failure. [ 680.734269][T14276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.762796][T14276] CPU: 0 UID: 0 PID: 14276 Comm: syz.0.2259 Not tainted syzkaller #0 PREEMPT(full) [ 680.762831][T14276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 680.762844][T14276] Call Trace: [ 680.762852][T14276] [ 680.762862][T14276] dump_stack_lvl+0x189/0x250 [ 680.762893][T14276] ? __pfx____ratelimit+0x10/0x10 [ 680.762916][T14276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 680.762940][T14276] ? __pfx__printk+0x10/0x10 [ 680.762958][T14276] ? __might_fault+0xb0/0x130 [ 680.762992][T14276] should_fail_ex+0x414/0x560 [ 680.763026][T14276] _copy_from_iter+0x1de/0x1790 [ 680.763055][T14276] ? _copy_from_iter+0x24f/0x1790 [ 680.763081][T14276] ? __pfx__copy_from_iter+0x10/0x10 [ 680.763099][T14276] ? sock_alloc_send_pskb+0x86b/0x980 [ 680.763135][T14276] ? __pfx__copy_from_iter+0x10/0x10 [ 680.763159][T14276] ? page_copy_sane+0x16a/0x280 [ 680.763182][T14276] copy_page_from_iter+0xdd/0x170 [ 680.763208][T14276] skb_copy_datagram_from_iter+0x306/0x720 [ 680.763251][T14276] tun_get_user+0x1691/0x3ea0 [ 680.763293][T14276] ? aa_file_perm+0x44d/0x1550 [ 680.763312][T14276] ? __pfx_tun_get_user+0x10/0x10 [ 680.763333][T14276] ? _parse_integer_limit+0x1ae/0x1f0 [ 680.763372][T14276] ? __lock_acquire+0xab9/0xd20 [ 680.763400][T14276] ? ref_tracker_alloc+0x318/0x460 [ 680.763428][T14276] ? __lock_acquire+0xab9/0xd20 [ 680.763453][T14276] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 680.763488][T14276] ? tun_get+0x1c/0x2f0 [ 680.763517][T14276] ? tun_get+0x1c/0x2f0 [ 680.763538][T14276] ? tun_get+0x1c/0x2f0 [ 680.763564][T14276] tun_chr_write_iter+0x113/0x200 [ 680.763590][T14276] vfs_write+0x5c6/0xb30 [ 680.763620][T14276] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 680.763642][T14276] ? __pfx_vfs_write+0x10/0x10 [ 680.763676][T14276] ? __fget_files+0x2a/0x420 [ 680.763713][T14276] ksys_write+0x145/0x250 [ 680.763740][T14276] ? __pfx_ksys_write+0x10/0x10 [ 680.763763][T14276] ? rcu_is_watching+0x15/0xb0 [ 680.763792][T14276] ? do_syscall_64+0xbe/0x3b0 [ 680.763825][T14276] do_syscall_64+0xfa/0x3b0 [ 680.763849][T14276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.763868][T14276] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 680.763888][T14276] ? clear_bhb_loop+0x60/0xb0 [ 680.763912][T14276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.763931][T14276] RIP: 0033:0x7f1f6058eec9 [ 680.763949][T14276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 680.763966][T14276] RSP: 002b:00007f1f61445038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 680.763987][T14276] RAX: ffffffffffffffda RBX: 00007f1f607e5fa0 RCX: 00007f1f6058eec9 [ 680.764001][T14276] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 680.764015][T14276] RBP: 00007f1f61445090 R08: 0000000000000000 R09: 0000000000000000 [ 680.764028][T14276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 680.764040][T14276] R13: 00007f1f607e6038 R14: 00007f1f607e5fa0 R15: 00007f1f6090fa28 [ 680.764072][T14276] [ 681.706622][T14295] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2264'. [ 681.905000][T13694] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 682.076453][T13694] usb 3-1: config index 0 descriptor too short (expected 2084, got 36) [ 682.084788][T13694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.150746][T13694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.221856][T13694] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 682.233740][T13694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.316617][T13694] usb 3-1: config 0 descriptor?? [ 683.774337][T13694] usbhid 3-1:0.0: can't add hid device: -71 [ 683.915079][T13694] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 684.031690][T13694] usb 3-1: USB disconnect, device number 84 [ 685.566732][T14313] syz.0.2268 (14313): drop_caches: 2 [ 685.715703][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.725162][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.310244][T14348] nvme_fabrics: unknown parameter or missing value 'Y' in ctrl creation request [ 686.405879][T14350] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 686.569738][ T5903] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 686.606744][ T5903] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 686.624202][ T5903] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 686.650113][ T5903] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 686.666833][ T5903] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 686.732141][ T5903] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 686.747597][ T5903] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 686.768087][ T5903] hid-generic 00A0:0006:0003.0017: item fetching failed at offset 12/15 [ 686.777570][ T5903] hid-generic 00A0:0006:0003.0017: probe with driver hid-generic failed with error -22 [ 686.797247][T14368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2284'. [ 689.675003][ T24] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 689.826289][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 689.836202][ T24] usb 2-1: config 0 has no interface number 0 [ 689.859388][ T24] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 689.905175][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.967052][ T24] usb 2-1: config 0 descriptor?? [ 689.988061][ T24] usb 2-1: selecting invalid altsetting 1 [ 689.996921][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 690.003248][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 691.632959][ T24] DVB: Unable to find symbol cx22700_attach() [ 691.762410][ T24] DVB: Unable to find symbol tda10046_attach() [ 691.786295][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 691.795863][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2297'. [ 691.808126][ T24] usb 2-1: USB disconnect, device number 94 [ 692.269607][T14425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2299'. [ 693.115064][ T5903] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 693.346214][ T5903] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 693.391490][ T5903] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 693.406990][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 693.423682][ T5903] usb 3-1: Product: syz [ 693.433930][ T5903] usb 3-1: Manufacturer: syz [ 693.448094][ T5903] usb 3-1: SerialNumber: syz [ 693.476239][ T5903] usb 3-1: config 0 descriptor?? [ 693.482144][T14440] [ 693.484481][T14440] ============================================ [ 693.490624][T14440] WARNING: possible recursive locking detected [ 693.496766][T14440] syzkaller #0 Not tainted [ 693.501162][T14440] -------------------------------------------- [ 693.507297][T14440] syz.0.2305/14440 is trying to acquire lock: [ 693.513341][T14440] ffff888078cf0d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1be0 [ 693.524315][T14440] [ 693.524315][T14440] but task is already holding lock: [ 693.531666][T14440] ffff888078cf0d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 693.541509][T14440] and the lock comparison function returns 0: [ 693.547565][T14440] [ 693.547565][T14440] other info that might help us debug this: [ 693.555614][T14440] Possible unsafe locking scenario: [ 693.555614][T14440] [ 693.563055][T14440] CPU0 [ 693.566325][T14440] ---- [ 693.569591][T14440] lock(&dev_instance_lock_key#20); [ 693.574959][T14440] lock(&dev_instance_lock_key#20); [ 693.580241][T14440] [ 693.580241][T14440] *** DEADLOCK *** [ 693.580241][T14440] [ 693.588369][T14440] May be due to missing lock nesting notation [ 693.588369][T14440] [ 693.596666][T14440] 2 locks held by syz.0.2305/14440: [ 693.601842][T14440] #0: ffffffff8f0c18c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19b0 [ 693.610804][T14440] #1: ffff888078cf0d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 693.621078][T14440] [ 693.621078][T14440] stack backtrace: [ 693.626951][T14440] CPU: 0 UID: 0 PID: 14440 Comm: syz.0.2305 Not tainted syzkaller #0 PREEMPT(full) [ 693.626972][T14440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 693.626983][T14440] Call Trace: [ 693.626991][T14440] [ 693.626999][T14440] dump_stack_lvl+0x189/0x250 [ 693.627025][T14440] ? __pfx_dump_stack_lvl+0x10/0x10 [ 693.627046][T14440] ? __pfx__printk+0x10/0x10 [ 693.627062][T14440] ? print_lock_name+0xde/0x100 [ 693.627088][T14440] print_deadlock_bug+0x28b/0x2a0 [ 693.627110][T14440] validate_chain+0x1a3f/0x2140 [ 693.627146][T14440] ? stack_trace_save+0x9c/0xe0 [ 693.627169][T14440] ? __pfx_stack_trace_save+0x10/0x10 [ 693.627196][T14440] __lock_acquire+0xab9/0xd20 [ 693.627215][T14440] ? __netdev_update_features+0xcb1/0x1be0 [ 693.627239][T14440] lock_acquire+0x120/0x360 [ 693.627255][T14440] ? __netdev_update_features+0xcb1/0x1be0 [ 693.627284][T14440] __mutex_lock+0x187/0x1350 [ 693.627303][T14440] ? __netdev_update_features+0xcb1/0x1be0 [ 693.627328][T14440] ? __lock_acquire+0xab9/0xd20 [ 693.627345][T14440] ? __netdev_update_features+0xcb1/0x1be0 [ 693.627369][T14440] ? __pfx___mutex_lock+0x10/0x10 [ 693.627395][T14440] __netdev_update_features+0xcb1/0x1be0 [ 693.627425][T14440] ? __pfx___netdev_update_features+0x10/0x10 [ 693.627450][T14440] ? __lock_acquire+0xab9/0xd20 [ 693.627468][T14440] ? __lock_acquire+0xab9/0xd20 [ 693.627491][T14440] netdev_change_features+0x72/0xd0 [ 693.627518][T14440] ? __pfx_netdev_change_features+0x10/0x10 [ 693.627541][T14440] ? __team_compute_features+0x23/0x4c0 [ 693.627564][T14440] ? __team_compute_features+0x456/0x4c0 [ 693.627587][T14440] ? __team_compute_features+0x23/0x4c0 [ 693.627611][T14440] team_device_event+0x400/0x600 [ 693.627635][T14440] notifier_call_chain+0x1b6/0x3e0 [ 693.627658][T14440] netdev_features_change+0x85/0xc0 [ 693.627676][T14440] ? __pfx_netdev_features_change+0x10/0x10 [ 693.627693][T14440] ? security_capable+0x7e/0x2e0 [ 693.627718][T14440] dev_ethtool+0x1536/0x19b0 [ 693.627745][T14440] ? __pfx_dev_ethtool+0x10/0x10 [ 693.627773][T14440] ? dev_load+0x21/0x1f0 [ 693.627791][T14440] dev_ioctl+0x392/0x1150 [ 693.627812][T14440] sock_do_ioctl+0x22c/0x300 [ 693.627828][T14440] ? __pfx_sock_do_ioctl+0x10/0x10 [ 693.627843][T14440] ? __lock_acquire+0xab9/0xd20 [ 693.627864][T14440] sock_ioctl+0x576/0x790 [ 693.627878][T14440] ? __pfx_sock_ioctl+0x10/0x10 [ 693.627893][T14440] ? __fget_files+0x2a/0x420 [ 693.627914][T14440] ? __fget_files+0x3a0/0x420 [ 693.627936][T14440] ? __fget_files+0x2a/0x420 [ 693.627959][T14440] ? bpf_lsm_file_ioctl+0x9/0x20 [ 693.627977][T14440] ? __pfx_sock_ioctl+0x10/0x10 [ 693.627991][T14440] __se_sys_ioctl+0xfc/0x170 [ 693.628009][T14440] do_syscall_64+0xfa/0x3b0 [ 693.628029][T14440] ? lockdep_hardirqs_on+0x9c/0x150 [ 693.628046][T14440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.628063][T14440] ? clear_bhb_loop+0x60/0xb0 [ 693.628080][T14440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.628097][T14440] RIP: 0033:0x7f1f6058eec9 [ 693.628113][T14440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.628128][T14440] RSP: 002b:00007f1f61445038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 693.628146][T14440] RAX: ffffffffffffffda RBX: 00007f1f607e5fa0 RCX: 00007f1f6058eec9 [ 693.628159][T14440] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000009 [ 693.628171][T14440] RBP: 00007f1f60611f91 R08: 0000000000000000 R09: 0000000000000000 [ 693.628182][T14440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.628193][T14440] R13: 00007f1f607e6038 R14: 00007f1f607e5fa0 R15: 00007f1f6090fa28 [ 693.628212][T14440] [ 694.031641][ T5903] ims_pcu 3-1:0.0: Zero length descriptor [ 694.038204][ T5903] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 694.049638][T14443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2306'. [ 695.862225][ T5903] usb 3-1: USB disconnect, device number 85