last executing test programs: 11.33009339s ago: executing program 0 (id=432): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000540)={{@local, 0x198530}, 0x0, 0x9, 0xffffffff, 0x40}) 9.806250197s ago: executing program 0 (id=435): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x100000000) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r4 = dup(r1) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec00000010000108000000000000040000b60000", @ANYRES32=r5, @ANYBLOB="0000000000000000cc001a801800028014000700fe8000000000000000000000000000aa30000280040001800300000000000000080000000000000004000000000000000800000000000000080000000000000018000280140001801100000000000000080000000000000018000a80140007"], 0xec}}, 0x0) 6.682260055s ago: executing program 0 (id=447): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200"], 0x108}, 0x1000000}], 0x2, 0xc040) 6.600238966s ago: executing program 0 (id=449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"15baee6e29a4a3cdb99d19f3b7074a005a4e293fd814749d0c8ec22b76d6517c", 0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x0, 0x0}, {0xfffc, 0xd010, 0x0, 0x0}], 0x2}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r4, 0x800, 0x70bd2a, 0xdf3, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb9f, 0x8}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xd}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x9}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}]}, 0x50}}, 0x8004) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r6, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"6e04932e9105f09d96cd8ba8667ed2519adea19fb4f0fc52927eced13c8e213e", r6}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x1cc, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1a0, 0x3, 0x0, 0x1, [{0x19c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x18c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "a9c7fc422f881bb3899a8471a3088e0475c6f5a55eef415441e4e63f72a832a0035ef90a9e69353b27fe12ce654fe907ee37aff47a7f4e4eface0bd14f5624fc2db53512c854f509185024655caf18e128e0869dbacbee1e8630d7090ea454b8b138369fbe609bfe81d1b9cd33f8d091343f45690092cf430b3757af6a2a70591f88a76fdeabada48ac92daf3c1c72f02e2a6c96c0fae4bc2d6b799bcaa8a09dd5227008defd20dc159a927ec104aea464550ad5199014fd64"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x258}}, 0x0) 5.905538787s ago: executing program 3 (id=451): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="0300080057e019000c006664"], 0xfca) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0x7}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xaa001) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000380)={0x0, 0x99, 0x8e, 0xfffffffd, 0x1, 0x1, 0x7}) (async) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000900)}}], 0x1, 0x4404c880) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x90) (async) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendto$inet6(r0, &(0x7f0000000440)="3da9", 0x2, 0x7b00, 0x0, 0x0) 5.574434207s ago: executing program 3 (id=453): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120117006750d920e70451668aba0102030309021b00010000000009040000010202"], 0x0) 5.239950188s ago: executing program 4 (id=456): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x2, 0x480800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r2, 0x4122, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f000000172f71d34460bc24eab5560000000ebab8bebf9367140051f60a64c9f4d4778037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000500)={0x28, 0x4, r1, r1, 0x8000, 0x0, 0x2}) 4.658093048s ago: executing program 4 (id=458): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) syz_emit_ethernet(0x22, &(0x7f00000013c0)=ANY=[@ANYBLOB], 0x0) truncate(0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000080)={{0x84, @remote, 0x4e21, 0x3, 'lc\x00', 0x19, 0x8, 0x75}, {@loopback, 0x4e20, 0x12006, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xe8030000}, 0x0) 4.60568575s ago: executing program 2 (id=459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="0100"/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) getgid() chdir(0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, 0x0, &(0x7f0000000280)=@udp}, 0xffffffffffffff4a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x874fd42a7836ef66, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (fail_nth: 5) socket$kcm(0xa, 0x5, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000480)="390000fa461a668300111200cc0800000000000000001700000000e0", 0x1c}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64]) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x40, r0}, 0x38) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00'], 0x20}], 0x1}, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60004000003c3c01207fdd25ef0000000000000040000000ff0200000000000000000000000000010004000000000000c91000000000000000000000000000000001"], 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) 4.514168084s ago: executing program 4 (id=460): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000100)=0x7d06, 0x4) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x5015, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x40010001, 0x0, 0x49) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0xfd, 0x4, 0xb757, 0x20, @mcast1, @mcast2={0xff, 0x3}, 0x8000, 0xba08, 0x0, 0x1004}}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x125c00, 0x0) write$vga_arbiter(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='to\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb) unshare(0x28000600) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffff3, 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000074000000060a010400000000e5000000010000004c000480240001800b00010072656a656374000014000280080001400000000005000200fc000000240001800b000100736f636b6574000014000280080002400000000a080001400000000208000b40000000000900010073797a300000000014000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r7, 0x28, 0x2, &(0x7f0000000000), 0x8) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) 3.694190635s ago: executing program 2 (id=461): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x78d, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0xf0ff, 0x0) 3.262213818s ago: executing program 4 (id=464): setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x8}, 0x8) socket(0x10, 0x803, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x14000000, 0x400000, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7ff}]}, 0x34}}, 0x0) 3.229481594s ago: executing program 0 (id=465): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r2}, 0x20) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000002200)={r2, @in6={{0xa, 0x4e24, 0x80, @mcast1, 0x3}}}, 0x84) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) r5 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r6 = socket(0x10, 0x3, 0x0) unshare(0x28000600) write(r6, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_disconnect(r5) listen(r4, 0xfffffffc) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000180)={0x2020}, 0x2024) preadv(r7, &(0x7f00000024c0)=[{&(0x7f0000002400)=""/50, 0x32}], 0x1, 0x3, 0x1ff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000080)={@remote, @local, 0xffffffffffffffff, "b620f9817f2786c13ee22f0381a5f44b3ed356bad2c0b202bd91caa761151173", 0x66b, 0x9f0, 0x1, 0x7fffffff}, 0x3c) 3.029828607s ago: executing program 4 (id=467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006480)=[{{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)="e69ba2b160fc1385d658ea66fe6b5ff0e2f1ee78247cc76dc2eb0467ae311f5a322e2313bd1a4db37ac7346733bd08c0ea5908c3c3a112f0ab2e6c4ccf5dbd27bdcc9b30add3c515018511122b790bc93a3668367d78e1f321a6023df72aaf37c7d4e04a172a737cb5357275075168bdc950f962d952590c5cdd4b57db6af50cdeaae4c240136be477cbfcea476792f04ecc25b100180d7207ebcb005a046f56e3cda4d30d66dd928dcaace911679a2e8231e86935bc1831fd5302834d13a794a5ca3a5e36e32df64f6e3656db230b74b950bf87d3a9e76cd8ff487f9430"}, {&(0x7f0000000500)="f7b20116d4b57b192fe37da07bc5b7e6d77a868a4188420a80ab5679b683c2797c8e29eaf950a0e7d99b0923e9fe67821105f3fbab0f5a06a32ca94286a5fb0f11a6a6afff93e923c169ff552974b089e466ba31c535fac9f42777dcbcaf6960344ce925ca9f769ff22e17d515e874104122dc834d4e533fbf866a7ca2125c55809e1735d418883154682ba5608970c4f2b066d55234ab06afab512d7b06fc9cecaae5c7e0"}, {&(0x7f0000000600)="f4af9b90f75ae50c7ea1890f336a484c1feea6d680d7c36dd5533a3f3a5088e85a07d9be03f39c158f7758ee4b7389e3fead8853fa6f77d8bf4a2a3f66f1e23e042fcfe4f59094bf13812eded580e1e682ad13f89eff4e4465b1937eda8b6a4b8bc292b7b08b3c8e1277212c0c78a65fdde52576546f9cdc6845f50b2908ec36325916052e7973f8ed09032979cc26a49febf9ffc430374ecbbb901c338014bccbc1c751374e715dbe62f389e2feb3705ddbeffd3ac25353d70424c48defa5688a37c8056187c00c199e4ab625319acf9a33f476fcf3ce0fb3f382d896d324ab292585d6db93f44e43f9c293fc42db74"}, {&(0x7f0000000700)="5dc5bbbc9ee7066d802306af723b17de0f363cf056a5"}, {&(0x7f0000000c40)="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"}, {&(0x7f0000000740)="ae5c053638dab97d176ac14a76003b77b514e8d8d412439dec0c80a2f23b9e1f86bedda89ab483500eae1b0b6131ae902cd82ef9b0840545ac68734677fd746574c8931ed4d3e826c77716d6faecd639ef19a3cf6cacaf62d03abd27a43e58c366061ab2d9e5506d16af42b08d3e06785798dc774e574943fcb3710e47613e73df41e00b0597ac66325aec5bfc6002592662808cd3aba743cc8df418fe78cf0f7446e8b78372c79c80dab116ccccb01828855afa2b9b51a4edd0302bf1d6753665"}, {&(0x7f0000000840)="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"}, {&(0x7f0000000940)="ba48504e2bd386b2d4d7fea2b1b8c9a5954cbf5289bc1164038fbf53d0f2caf0e13f5aa80b15040df21a2eaaf56f5124b573046afcfa865d2a5efa03e988585aa733fd81900ba904551161f6c02a413a8571407f0209031ca0c2db2e9ea89cf3ddf793ac2249e84ff8c4e3"}], 0x0, 0x0, 0x0, 0x800}}, {{&(0x7f0000000a40)=@abs={0x1, 0x0, 0x4e20}, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000ac0)="61065ce8a43e87cffceb524a35a8ad4c0cdae729fc1ed154e5083dedb256fb53d2ba8084a0c6a26088bab750e3da52f4748f81da5f968ea3f81ec0b9b65ea622a38dac14deee26ba5eef482958c221a29799b74f82b6e6f4997752a9acfe529275515078dce8c41918aaf6fa74"}, {&(0x7f0000000b40)="2fe7e685f6b96d8b70376fb8515fc4884474c827ed3f88c2038c4d029ce2ce13124bdde491c4cf3d42b2f1ac76180ec505e8e6b6517e9d9c88822635ff2d0385c229a3f1dd27d4977d108544ae11532adb772389438284f6f8d8ea51c0379bdaca47c6ea7727bfa0d567e94d5bd0cc596a24ead5e54ee144"}, {&(0x7f0000001c40)="6f499f895397a1ec190ce108b3c2ceafe279f77b78da337826303294bc710100b55d6c658f0f1d67c01a0ffaee3643f311f490757d8dc1cfe5f124b61e12b8bc19dcb987cd02925ef5ccee7ecbb61755a622f488454177608c0c95ccee92c55c556b8c2d5cd4fb266dd2b52c78c375d7a4ede3853adc65909f"}], 0x0, &(0x7f0000001d40)=[@cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r2, r2, r1, r0, r1, r0]}}, @rights={{0x0, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, r0, r2, r2]}}, @rights={{0x0, 0x1, 0x1, [r2]}}, @rights={{0x0, 0x1, 0x1, [r1, 0xffffffffffffffff, r1]}}]}}, {{&(0x7f0000001e00)=@abs={0x0, 0x0, 0x4e20}, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001e80)="4eea02566d617eef74b1f9f91507168959d3"}, {&(0x7f0000001ec0)="8cb51dde7bd59a8c530ec51e69f432fe230c740c17fcda2151d9bfbe4ca1a7241ac6cd03dec2f357b21096"}], 0x0, &(0x7f00000041c0)=[@rights={{0x0, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @cred, @cred, @cred, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r2, r0, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1]}}, @cred={{0x0, 0x1, 0x2, {0xffffffffffffffff}}}], 0x0, 0xc004}}, {{&(0x7f00000042c0)=@abs={0x0, 0x0, 0x4e24}, 0x0, &(0x7f0000004740)=[{&(0x7f0000004340)="ac3e70ef8dcfa2e12cb1b3f3077c73c8b7cb52499b0795ed17492cb9a90b31f05fcdd6933bed68cf9f86492b9dad37c2f635ad312fd2481aada429eebd8725db142124de0279cafa1be74cc25aaa77d1bd34dee767fc4efc4b8928826b29204950d7072de554f241d51d3924fca26031c7734a704fa76cbbd0cfb06311888505f1ac052a548a45cd00a229dda201f0e76b46cb322a"}, {&(0x7f0000004400)="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"}, {&(0x7f0000004500)="0e803497cafbcf46f22f8cae55abe1ea5efcc77b24708c4b824a129878ba85b8906544381510369bb486b0f03741004c916539a27bcbdd97d063177c50975d67a2ccec53cb45d33f9228ad8d0f562da0985808d92904059113ace2ebf4fc9606ac334d54d429c2107d817fa9f3e7631ef2fc27eec4aa181a57f83e3cdf0b126bb9092b2d1046a128173f0b14d22ce350c01939157a2f51cfbb612a1883bebd83625bf772d09608671353309cf0784d877962e49ccf5f46cceb1d2e77426635bbfe7824df12d8508d060c2cdc9b026bfc419d25f3"}, {&(0x7f0000002080)="9dd03b4e1743ea7a06d1419baa527b27213a28fdf97478686c83c9135936b4a7b978bc262b0c4664660a6506d0133d57"}, {&(0x7f0000004600)="a9ffc42fcb1297682aab69882fae2d592bdaaba134096cc925e8c574479479689f04d94ed8bfdc8c08a469dc83800b032d1dac0811b0afa2eebea86d78e3c125ed5d4a503a864445cedd3a378c9f72bc7f8e8d504b8e99d2dfb6df5692e0121d72f6fc16b05b402aa6175ea1e08236e3761bc022d0f3"}, {&(0x7f0000004680)="c85d4eeaeb24f43db543838a244e8223407c6a8b79368781f1608832687b437f36e95b47962cff601c6e005aad1261d30e1c3269ca6ca83635f3aeacfcbd92f6e4593bedeb21958b7da6cb2328f2f4a53e212cf6d4aba1102b0a2224b39df8740246d65907e0e3bdeb9c4bca4f8eeebcdac20db99f5983db88d5573cda57ab5bdfcb78e14bef797fb7d255b7ae9cdce232e23055d6429a307fb80d7d61bb17e08410b40f"}], 0x0, &(0x7f0000004880)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred, @cred, @rights={{0x0, 0x1, 0x1, [r2, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x0, 0x1, 0x2, {0xffffffffffffffff}}}], 0x0, 0x8004}}, {{&(0x7f0000004940)=@file={0x1, './file0\x00'}, 0x0, &(0x7f0000004c40)=[{&(0x7f00000049c0)="cd9f43f457e67eac508bfe304e39d7c96d6ee67801659c3ec46e4d35ba4d651417deb2bc69a89d39286ed264a709993b767e664f528d0f10f4b1a41e9d699c86a5de5c3ac4f30267afe27bdb17792945aa67daf2e0f6c580"}, {&(0x7f0000004a40)="a40c33165560983d0c19e564dac1939d4f13d5528e66cf4b9b7ff34e03fa7cd395aec8106ff1f8cf75966e5aff4b6a0576cbda66330675df75fac242630cdb57ee36c844b70815b63a83ad3f9de6523d94429fd35bce582bc5381e74c00bf34547b404dd22ae79cc46c803b03bc40bf73462e4403454a1272f5c41f0e90075b5106fc722498587ea8f416706225c2abc7593726355070cd78376fbcbe37ea35ce55c5057f8"}, {&(0x7f0000004b00)="482657e94a6709cf2741546f50f264393ddbe6634ea3694b4e6b52aee1abd0957c927ee72e4d4c07b3ed6bab8cf6092205e77eec95af5c67e8fa32d68e56a264188440e79c7eebd5a3540ca3f99dc33d2c2cf63bcb69939f2f820c20c6bfab7b8da0068cab1ee04283aaee3704d68cb75260dc18481d4cdcdec713a8b2b8b29ca2b644e646fab7db62f58b7a74b7af618b49c471464fe79ad9e2f3702c474f7e854414c6c98a4ff617003fcd8bef24b662560d24cbf2598e8281d1c24191133057fb"}, {&(0x7f0000004c00)="a146c3231048d6caca6ddee98acb3c7c4c3d378e8fe7f2d644f6e8308bdaeb97b867db1cf9109cc5a921a05c734893eff3c6cccf4cd65e52"}], 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="00000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000000000200000000017000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r0, @ANYBLOB="00000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB="00000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x0, 0x20004044}}, {{&(0x7f0000004f00)=@file={0x1, './file0/../file0\x00'}, 0x0, &(0x7f0000006240)=[{&(0x7f0000004f80)="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"}, {&(0x7f0000005f80)="95beb27c5ede86a4e1e22daa4bdd2705d55380beecd05f430b71cc858ffc3c39a1634d7f1d245c53ae7a799bdd6d3e27f4b9d129bfbee8f526905c5967772dc7393170237d1bf7a0f5d1fe40c38e21397d762ec4f12b89b0dec732b4b1ddcdc0d8f8f7d30fcd270a0c75aa3948af86323529b7ba9601a7f5cabcabcdb3fc408f3851c6f5a4a358064af56dd6b98d930f48176d9d8737fb315de430f15cf10be99c25ba4f94d7212dfd55c5c3aa4a5e688e6e1c446cdb472060d993b1c5b99f6ff5db155ac977b5df68c2"}, {&(0x7f0000006080)="39e23803b36d8870f5e18f707f8248d5d91855e54505512222a43a853c4ae863cb2a5f57f54aad9aab16825ce642111f1fa00ed49ebf52f01307bf625be35c9e1f0da6f371a059e232465e330d275ee6d08978678347a5322fc6d0ec8a340d0dd31f20c60db924e4bd9a178354682b67fb5adf7fa60647ca2fb741172906cb81839d6c5c6ed7e2e9a913239ae3eab193f91d51aa9eaa6e304cd4193f48ee3d365bc9eeb1edb762e97ab3081062"}, {&(0x7f0000006140)="0c0fa557881fb2388c9edbc7b5a1702d8a1a11fa3c81a2f07c7d0473fea750523605d1be961fbd0a074acdcd4a9ab8ce37e4679d4de584140129613006656a688a8da80a2a04c3a1a7cbf0b38cccce9cd4dff75a7ed3f6b220d034bdd25f92323316a93dce26065313d2d9a95e51"}, {&(0x7f0000008dc0)="2c0c109affa3021663517046cdd619c543029aca2fa45260082c08b627f456754fa1ddca51b20454cb60bd805198d98e07e4a19ae4f6da8f77fb54d8ed6356e2cacc6b8bd2835e226fca40ed446b949b7f3a45cb76917a54837f691adc814dca20858520005e178e93c840da1643ab094e322a0eea35c06f4ef405c78e368ebafff3a42a5d963e908fe08b0cce7d3a72956b51fe6dd48645ce61838afdae62ad34045f29b1df702182c46c240e09e75b5253426a5fffbee81c73d5713e6ade73708248ed5b11e993b72894fffe4c959bf8bc5f9520f5523c0c36d6db3fad19eebcc2d2c2e59ac5489c96ad5f5a7fcadc6317482174789a0a261a2a2aa9191fc6435ec0aa6bae3d4e4530bdda50aed69530c932cbea947b234360a7360a7820772dd171b70e9b80998168059c68edaef5e4447df3241a29b9333423b508ffd1bcc60b970e2354ebbc1fe77ad620c33c6e37af1270dcf4a5025df4068bd6a836befad72f8f79103d91d7df66ac2bfca1edd9f4234573f1721e4ef5232436b463b8af42a4ca67cd6807cd82012d26750618336776ebcf90c504607c6abf19db5059925b790b225191215c52b6ebb565aabd8db3aa65707c0f286399ee73ef8f8d85c8aec2194c49a8d10bb656c023d164fcc41a21f25b8c5dbeadf670823d34a85f89a9a917f70a7005451d98a7d1adba2994144bf2741d276324644b4fcf880ae5ee5d53c9c364f4170f9a19d17afb50249802f5e06876b5871b127a58931ee6bafdcd161750ff95a58574660ca07202ad2038fc767bb0434c8a34f5d26a04c18dec3ec350e9d73bfaeef10783473b33e86504d9be157768be95c946ccbbaa0a697b484a1213df0a0853ce3bd361ef6d7ac195a15f34cb7145bddf968ea18171f08fb7bf75f777453e7e0b7675bc10436b9c50dd89c0425ce003215aef907c58d1e59ef2486e2db335cfa06aaf2aae76d093d727ef9d9da615a1c66c936d022fca4212d4abc4870aa2f0a47404b69b98dcb8f2bdac4f0db8f7c6107ee5f6b28c64ef68447f899a1ced9f38033eff77a73dcbdba816eb7e4f3f67c8a79656345bee2ef33dfcd2e53fa92890885a58b7e35d3930c8b3c9824d108ae50c573b596fc0a7e0ef51f2520a6db0b01278a429bade765d62370da23ba2db5b4fa5baba60bf70f3fae11040f8dfe23894505134e124a4355f37c883e16215181bb09c6601764626ae456d53c6aeee52a3967b91403b33ad1334a68f034d68fb04454b81679b4b334cb0fbb465f3aec37bfe7c4f7756340caae39021317972a2c07e748dcd0a76345f00deacff7cc87ef87bb3cdeb9080f70ece3c142f102ad52c4057616c71a7c367a000db2f7df40772988f0ef009bf6658479c37a6599814c8abb91a53481e5dbd2579b814867ac83ea45afdcabfcb665414104f9f7c6a09f81d1a50d13a9844e7cb687d9fac911db45cfb00f1e8a2d959ae78e20da242170378eae53cab0cfb4a14fc725358c7e1a52f299f5533dbc8d24bdd4f10b76421324fac4c88448820745a417ea880bf7403205374e4f5d3bbe66fff37a41c442e8763d85c19cf82f8ff239cbd9af1fc2ee996acec8b99783c0616bb22dbe2c069ab36b5614c3d084ac563333c3488c2ce08a4b74e2f87d348a9c7603e00f028a495e5033ddc6494f85d93bacc1b1f6a792508baa875330e4ff27578476b94450e4ab425be3767d8cb0a22ae461c83df66a98d30c4db2e0649239c6c7221ed5d8b96131a01ff80c07edc50bfe17525650e8984bbfc85f099fbe67e67d69818a8d5b8cf21b2ceaf5ebdaec342c3846e1dd4b823cb91206512bf3484680f924072feb1225f2bcb34fb76841d368384fe47b61bba1382c1f59ec9a79a22b5691a6946c69ce1b504459c20475be5f93daff0675f32c75389531f303760d991bd1048660a5a55ae6312e811b8b8543fe1cdaccc89e01abbb953004aabc8a5e9cd25d7098525ef1bad327a688df868c5908b92d2e14f5f6f3fc39b6b82d3066fde0fe41174c25f180d9f7bce29ba08591ee329bcf5e71ae4628199f43026179c2f3038852ac26ebb1ebc59bc955fc83ef55ae7e8a5c64665f96b15eb00b1b1b194857fe3acf50f9760276153fa1f51d265d0b0d88a12639157348d6a616d71f05ae8c7268dfd128906fb25f9fcc52b66526096a1506b9c0d434ea76c8cebd771d4af44491510843702c828795f345f978d8748e496403050348a9b53be2054dcdd1d120f62d5d467cbe0525cef2152373be4e2a7eb2199ab75cfabf03457aa8576a7b9e8847a82988d229806fba0de783d4e2dfdc3065b479605eb41bf309a62e224e4b04473c65767c54e4b5fa83af94295067c38afc5454e88fa4cb36a48797df4acc5228d9ce8b3c7e40fc5c351afef9d83e732c737430de15a613d29f2ad766312b01fcd4334b3e4799918cde3b28e2c5e221cd6affa5597f960d35082a320b5c3921f5b2792a302b5db4f34ede5395653878864433e1f336f0a1a5b5e52c28e7445be8d503ff6ec2ceafe1c398c10c461ec2e47a588bc144a176e740c96fb986fe155752ad4741b19b18f3a32f3f5b315edd745d4606508124c16cca68084ea13dff8b04230d0f50877a37d01ca02432b9b941dd1595765dc39db56f7eb4fe4b99a760cd4675bd38c5ab3761b2ff3947c720c4f0ba3fda0e2cc8b63b070b9b04cdf1f2331267b927c6f5ff6b41f6029db006a58f5884c068ff5e5815da414abdccc191964c98beba842a8996485296e5c0cf7eae1263bd3f81b709e550ebf38048e4288769b55f6f212199268d37a222f9b913a89fd87b32f2461beb6b1d76535e4480bf15c2cd00086593c16132eb388a4e27fca67553e6d37af56a3ccf51e68c84ae77c51dd9a0299c423b57c35ec4a692cd971b2c08fe05d1016b968bc484a8bae9d03c44516d1e07736b301f1e38014a79bdb243f8a07196241ecc6787596c2e2e6dc3588c75b0c6b679e0c5035c29df15c4299645d5f6ae5156d5cb2c969b999a6a7d8547c5ed9fe06bd4a4be5850906131917b5024019458be8efdf37de918290870d6b26194200ebfb3df80294e320507366b117e63a8fb4d3923c73383dd53ebfc1689f637e1638b99988f652c7edb2c5da9836dbdd9a531eda2de357e1867a826f49d3daf3bc4e17935ded36c8949dcf0ca04038b243b4f54af75ed3740e5792f1c3d5ff8fcc9cb8f846dde26d930d5140e5271cb4f1a2b69407db78ab327f677e2f3a4e33fb0005936a79059b8f822a8a3238fb3fc2b7d02bdf489d6a37700d25973a28f92af4c847941b6b66615d97595c3e77a531fad9d4b7b476a06fcf2e7e26f565574d5026261dccfc1e262624fb68f7d27668c9b9619ac57a812a429b388590485e871ea17e2114b698003f2e64ed9f94cc4d0b9db9e2bbc6da7e30e88e32cfb3cf54777edea2f525b5d657f1ed167d73300ea76c80270be28d946280445bb98f8ab8917ed5d5680fcc5ba797162645d83ed50e23087d4191c9d3c21920ad25918f53b583126ea9556330921d800f2b9f65576cbfd143aacc55ebc6c34b9f1cb098a8f8d35673d25f3dcc04dfdff752cbe4102a40cca423aafb87f8d7dc2b8e6ac54d5528df0264e7709514a5a3522755bed2510fc4cc6e074823051d7f80254a15d22b8a4a4e0fe32ea5c06d95d9c65f8ab7e0a5a0adca00b37253bac4295dc5d0e2470d08873f59591f3a3783bd932c14adf11c1c4486944605a27702956a91979a1d46ef4de42fa75a9cf45cc866ed597441875ec66c9f65350404737bbf7f0c03010d8e9d62cf6d765a54271839e91611403ef75339b7079bb38c79b5718adf97acb3bdb6eaa9d4e9d7fbe4a2bb24749f26ee319f3f21a873027feb93841ed74593586fed024a97ddedd9cf22ee3fd61b3ca562494c3ad8f3b89f89a7296da05153aab7d4d88deca55e2c75628557404c7b8a0fc9ac0f347b8cc5477e5bd1e21dcac3c8c2f7ea98ad4dd27013066b04196b3055c259456eea1883ee762d1b120ceae46db202379ce5f212bec0b9d78ec9c77681a92184f18537b1306bd8552c266fd9ec7d8f3793c0c3939feb4611b67298dc15e400eb8bd887b967be0bc72815b38486954a2224c9302daa3a91aa534e6a492637ea4f661768c18c96f160174d3d891c7931d301c3cd5d61b2f264b007ddd5c44313033f3da4d87b1c7e91376638665cc44f58dd2ec0aef57187e8f3a9500d4d82316cd41685108175ea19ac9340a40f4555d721e8a2676d8b28516ce3e24c3a2ab3ddc9c8c57b0b9fd6bd934e991a47576e021130e5a6b5071a597b48bdd3d1c3b665214e25a3882ef10f0fd2cb506078d8796adb12a3ec8c5799a7f141d2400954c0be5ac66d8096a496bfba9c7d9eff18bc76000899931a1692727fcbbc27177e572262a93eb2db715180879d1de954085e51f66417a98337bd6656663b7d0f288abf8c97a0be2d550b5e0c9a77de7acb70809f7e2a0c8e13ca9979257751f59d92452ae6afaecf85a77c7fd8b597361a19f42785fd9a53f67c17f8f2dd36e679e445557d9186be77c346f814e55d049c6c227a7428960f49933e288354abe259965d80a5c24460021e8211ef3f5b32b2d8c6700ae2d8e863438eed1b9f6b7ce5bb0d26ec15e22c0a35546df071e99dfa2154231ded944588edcfd38c916d810f769dc4bd5e5b2791f9f127fb7a8abc6d8a4ff84a0a45435365ae35c0fcef9f9980ec6d5bfe3670ab2fde3a49b0c04354eb9eab3396906ed57bb1fb5fffc7eb39f1b02fa09140bd87b7e4c5298390ffa46afd818f1ea03732b29dfb12ace696633dd9ddbbac9504551ada31192ffe74f9c0380c5f08b3c5995a24ca3df03a38bf3a5a99236da139aa26d6845d922a532c3a78383da47067a7137044f55a5fb8ba0c9e2cd8b66973a922a287d2de5bc51e0da509e81d7dcdcf2e35ded42aca5def2745a934dbe6a2d671a9f1ad09eaf5047e5f8dad50fcd60b566ded5a1676458119f02e329779ca487b91cb7637199c4fe77eda834ec8d490bb3c3242b4b4fda03a5ef8fc980a12d6c053073ae856bdd9eca55e73b3d0e20f85a3413549fdbb2841a0d509cb7f2f5dfff8efd9d0414576bb698ed4c8895fc21712c18683db74211db464273f35672c68c94b15a75736ee4b2195d555985b1702ffa199fb474765c6b92324184d91464284694c7225bf10ce19ec80a839ed9dfc0b1b035a395235b81aff7ae09e585c5815c148dbef52f4363a6332b787b7cc1ca5a24084a9a8ab4e9d2176ef80e2b8279b0d62dfae68170b020343823aa0300f7809c250ee8350dd9a3da9a64bd3d82e3bd056b3a495cd70c7c3d3406afa6c70ebce69feff88884aa9463d5b1f827d87d545a2f24d905f7641752ccdea6f475f7383a8ac1e9281943cfc6b0a0c3f97d7b35018a0b85169c3b4d22092a753a515e8d65be6cbaf54376c4b20b813d20192979281907bb093efb2abb7e2b4e273eced138e444c270083e156a4b6f59494178402327021d5957541d151bb85be54fb3c55dd832866ad8c10dff4307d2a55082afb1b23b7b4d1b5bf032d695ba0f6f57745653c11be40fc3b75ebb719e41c7c3654ccc39e8d3ed4634d950a4e73d30e5375c010c72944a565daf473740e6fb0e1ce26d0844e13a8d02c401727b2945623adba487512a5f1e9beb0d9868fba0a409239c1c5e84388eaf9455d6ce42dfdf978c191ec64d0280aeb30757a142043f4486193522bc20183e6ebaec3c795eecccba001aa079dfda21a2c95409391"}, {&(0x7f00000061c0)="6203723da0279e241ae8d7dc6ecdb6887be2fda879af6de9ae07347ec54e0696e046dcd02db4c41a9b1d8e1e296e7ff1a9f7d6fcc9841de44230acfc5d04b7634ba7e19b0e7f"}], 0x0, &(0x7f0000006380)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x0, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}], 0x0, 0x20048800}}], 0x43, 0x20000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r6, @ANYBLOB="01002bbd700000000000010000009c0008809800008044000980400000800600010002000000080002007f0000010500030000000000060001000a0000001400020000000000000000000000000000000000050003000200000008000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000200eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db7172400030000000000000000000000000000000000000000000000000000000000000000001400020077673000000000000000000000000000cf59fa85ad9c"], 0xe8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a00806e0800000000000000140001800d2a79075827af5aa534d6815c2e93f10c000280", @ANYRES32=0x0], 0x3c}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r10, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000"]) socket(0x80000000000000a, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) r11 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r11, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(r11, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r11, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0x58}, 0x1, 0x0, 0x0, 0x2404c041}, 0x0) 2.721478789s ago: executing program 3 (id=468): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0xc5e, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r2) (async) r3 = dup(r2) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4c, 0x2ba5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x3ff, 0x803, 0x101}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x3ff, 0x803, 0x101}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f"], 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="f2650f300fc75e5bf20f009ba7d6b8c4ad66baf80cb880668484ef66bafc0cb80f000000ef0fc71ce48fc978807609b895a7a5b60f23c80f21f8350c0050000f23f80f060f79990c000000", 0x4b}], 0x1, 0x54, 0x0, 0x0) 2.469805899s ago: executing program 3 (id=469): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32, @ANYBLOB="8000a205080001800000000008000f80"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.242181902s ago: executing program 2 (id=470): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000ffffffff0b0000f508000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000001000054005080110001004abee33908f8eef16f162471f4000000080007"], 0x7c}}, 0x0) (fail_nth: 9) 2.111269025s ago: executing program 3 (id=471): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000000)=0x714, 0x4) readv(r3, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080048fa00340066000004069078e0000002ac1414aa07073effffffff8903bf00004e214e24f22d998f30e98514741afce43847d66eee121a9c1c1bd7e667e43a6dfbdfdabe1950bf324c780233156cf8d6441769233b3b1d3ec0ce193cdf5693405d3a139489fba5dab5d6ab006f39d79434f62002680bc5065b10e38a516f2c0d91ed5ff852bace7e3968a20ba2dc848dd694f74ad8d536a51936e9cbe4e7693b0b42faeb7fbf5c26930f6b671978bc7ef28e489b9b8d0ed85574bae326ee", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50100005907805dc"], 0x0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c005}, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x12}, 0xd}, 0x1c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100), 0xfffffd9d) sendfile(r8, r9, 0x0, 0x8000002b) mmap$KVM_VCPU(&(0x7f00002db000/0x4000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000991000/0x4000)=nil) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000000) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) 1.644994642s ago: executing program 2 (id=472): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d00)=@allocspi={0x114, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2={0xfc, 0x2, '\x00', 0xfc}, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@broadcast, {0x5, 0x1, 0x0, 0x0, 0x1900}, {0x0, 0x4}, {0x0, 0x1}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2c, 0x70bd2d, 0x70bd2b, 0x70bd2d, 0xcd1}}]}, 0x114}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 1.414224181s ago: executing program 4 (id=473): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) preadv2(0xffffffffffffffff, 0x0, 0x0, 0xef, 0x1, 0xa) 1.361865098s ago: executing program 2 (id=474): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x27, 0x0, &(0x7f00000000c0)) 1.282114719s ago: executing program 2 (id=475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"15baee6e29a4a3cdb99d19f3b7074a005a4e293fd814749d0c8ec22b76d6517c", 0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x0, 0x0}, {0xfffc, 0xd010, 0x0, 0x0}], 0x2}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r4, 0x800, 0x70bd2a, 0xdf3, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb9f, 0x8}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xd}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x9}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}]}, 0x50}}, 0x8004) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r6, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"6e04932e9105f09d96cd8ba8667ed2519adea19fb4f0fc52927eced13c8e213e", r6}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x1cc, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1a0, 0x3, 0x0, 0x1, [{0x19c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x18c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "a9c7fc422f881bb3899a8471a3088e0475c6f5a55eef415441e4e63f72a832a0035ef90a9e69353b27fe12ce654fe907ee37aff47a7f4e4eface0bd14f5624fc2db53512c854f509185024655caf18e128e0869dbacbee1e8630d7090ea454b8b138369fbe609bfe81d1b9cd33f8d091343f45690092cf430b3757af6a2a70591f88a76fdeabada48ac92daf3c1c72f02e2a6c96c0fae4bc2d6b799bcaa8a09dd5227008defd20dc159a927ec104aea464550ad5199014fd64"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x258}}, 0x0) 930.733387ms ago: executing program 1 (id=476): syz_emit_ethernet(0x46, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @loopback}, '\b\x00\x00\x00\x00\v \x00'}}}}}, 0x0) 814.036638ms ago: executing program 1 (id=477): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@remote, @in6=@remote, 0x0, 0x33, 0x0, 0x0, 0xa, 0x60, 0x30}, {0x0, 0x7f, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x200, 0xfeffffffffffffff}, {0x3, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60, 0x0, 0x0, 0xee01}, {0x0, 0x1000000000000401, 0x0, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x3, 0x0, 0x100000000007fff}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x3}, [@mark={0xc, 0x15, {0x35075b, 0x7}}]}, 0xc4}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x300, 0x3}, 0x80, 0x0}, 0x5b4}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}}], 0x2, 0xc040) 807.881988ms ago: executing program 3 (id=478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d300000000000000800150000000000080013000017000008"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000000)={&(0x7f00000000c0)=[{0x9, 0x3000, 0x0, 0x0}, {0x41, 0xd801, 0x0, 0x0}], 0x2}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20200, 0x0) 733.835432ms ago: executing program 1 (id=479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)={0x58, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @random="13610680c4c9"}, 0x3000000, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_IE={0x4}]]}, 0x58}}, 0x0) 565.687689ms ago: executing program 0 (id=480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x80) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="400063bc560289b3d15d8c96cd9c00040000", @ANYRES32=0x0, @ANYBLOB="0003000001800000200012800800010067726500140002800500080003000000050009"], 0x40}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000400000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r3, 0x0, 0xa0028000}, 0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@deltfilter={0x6ac, 0x2d, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0xd, 0xfff1}, {0x5, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0xa}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_IIF={0x8, 0x4, r5}]}}, @filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_UDP_SRC={0x6}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @empty}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x7fffffff}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @remote}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x88}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x8}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @filter_kind_options=@f_u32={{0x8}, {0x600, 0x2, [@TCA_U32_ACT={0x16c, 0x7, [@m_ife={0x168, 0x1e, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7462, 0x9, 0xffffffffffffffff, 0x6, 0x4}}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xbe}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x7ff}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xc, 0xffffffffffffffff, 0xca}, 0x1}}]}, {0xae, 0x6, "0190a78fab12da1a0479f48eed3a3eadc7ff803a02e239d8956b3898649da34d8683e2e6a67309fb46e67cc9806518dfaf3a5caa6fcd27d0bde5b635691162ea09be98e853d49229f73aeb3a30837e8feb4c2ebd2f4218b7ed90df327e4bb00cff6a253d802aacef7d02ebd1b956d90d5cadd2698e0c13638b763036f531d34f9136f8cbd26278c26d2e16f38d2559fc2b1cc4970b2a92c28732df7e38272578667be74166443dd91998"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_hsr\x00'}, @TCA_U32_POLICE={0x460, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x5, 0x1, 0x101, {0x5, 0x1, 0x7, 0x3, 0xfff9, 0x5}, {0x4, 0x1, 0x7, 0x2b2, 0xe, 0xffff}, 0x3, 0xc, 0x200}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x400, 0x1, 0x5, 0x7, 0x800, 0x2, 0x0, 0x3, 0x3ff, 0xfffffff7, 0x7fffffff, 0x4, 0x1, 0x7, 0x88b, 0x0, 0x7190, 0x6, 0x6, 0x3, 0xfff, 0x8, 0x854, 0x6, 0xff, 0xfffffffd, 0x3ff, 0xd982, 0x2, 0xe9, 0x7c, 0x7, 0x5f, 0x3, 0x3, 0x82, 0x8, 0x7, 0x3, 0x6, 0x9, 0x0, 0xc7, 0xe, 0x7ff, 0x9, 0x101, 0x7ff, 0x3, 0x9, 0x0, 0x2, 0x7000, 0x0, 0x8, 0x401, 0x5, 0x2, 0x3, 0x8, 0x6, 0x9, 0xb, 0x3, 0x4, 0x6, 0x8000, 0x3, 0x1000, 0x5, 0x3, 0xff, 0x5b4, 0xe8, 0xffffffff, 0x7, 0x0, 0x4, 0x3, 0x0, 0x7, 0xfffffffe, 0xf, 0xf98, 0x3, 0x8d6c, 0xc, 0x7, 0xda, 0x1, 0x8, 0x7, 0x8000, 0x91c, 0x9, 0x3, 0x0, 0xffff, 0x9, 0x1ff, 0xf, 0x3, 0x0, 0x6, 0x9, 0x4, 0x9, 0x5, 0xaec5, 0xc3e, 0x56d3, 0x1, 0x6, 0x0, 0x61, 0x4, 0x4, 0x2, 0x9, 0x9, 0x7, 0x7, 0x800, 0xcaa6, 0x9, 0x4, 0xd, 0x2, 0x3, 0xbbc3, 0xfffffff7, 0xcb8, 0x800, 0x12, 0x6, 0xa36c, 0x0, 0x8001, 0x8, 0x3017, 0x0, 0x4, 0xf, 0x6, 0x648, 0x9, 0x3dd, 0x4, 0x4, 0x6, 0xfffffbff, 0x5, 0x7184b41b, 0x2, 0xffffed07, 0x0, 0xf, 0xd0400000, 0xfffffffd, 0xe335, 0x32c08, 0xffff96dc, 0x8c7, 0x2, 0x805e, 0x8, 0x8, 0x8, 0xb, 0xe6b8, 0x2, 0x38000000, 0x5, 0x2, 0x8, 0x9d8, 0xff, 0x2d, 0x80a, 0x3, 0x6, 0x5, 0x1000, 0xb, 0x4, 0x287ca2a1, 0x5, 0x9, 0x50, 0x7, 0x9, 0x2, 0x10, 0x4, 0xfffffffd, 0xe, 0xfffffffa, 0xc4, 0x0, 0x0, 0x3, 0xff, 0x7, 0x6, 0x9, 0x1000, 0x0, 0x3, 0xa, 0x5b, 0x9f2, 0x4080000, 0x1, 0x6, 0x7fffffff, 0x4, 0x8, 0x3, 0x9, 0xc, 0x0, 0xfffffffb, 0x7, 0x5, 0xe9e, 0x0, 0x71, 0x7fffffff, 0x6, 0x6, 0x8, 0x5, 0xa, 0x4, 0x1, 0xcff0, 0x0, 0xc000, 0x7fffffff, 0x5, 0xaa82, 0x5, 0x2, 0x8, 0x0, 0x7, 0x5, 0xfde9bd4e, 0x86, 0x1, 0x4, 0x4, 0x8000, 0x4, 0x695291fe]}]}, @TCA_U32_HASH={0x8, 0x2, 0xa}, @TCA_U32_INDEV={0x14, 0x8, 'virt_wifi0\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x6ac}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 565.007297ms ago: executing program 1 (id=481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000006c0)=""/83, 0x53}}, 0x120) writev(r1, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) unshare(0x8000400) r2 = socket$kcm(0x2d, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x11d, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001508000140000000090900020073797a1f926641662918d9dd32000000001400000011000100000000"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000a54f00000000000000100800010001"], 0x1c}}, 0x0) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuseblk(&(0x7f00000003c0), &(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000008c0), 0x800000, &(0x7f0000000180)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}]}}) 172.124782ms ago: executing program 1 (id=482): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000002180), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f00000021c0)={0xa}) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'ip_vti0\x00'}}, 0x1e) close(r1) 0s ago: executing program 1 (id=483): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2c001850}, 0x4000000) r1 = socket$kcm(0x10, 0x2, 0x4) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/227, 0xe3}, {&(0x7f0000000180)=""/11, 0xb}], 0x2) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) pipe(&(0x7f0000000340)={0xffffffffffffffff}) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000380)={0xa, 0xffffffc7}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac00090400000107000009090585", @ANYRES16], 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x9f, @private2={0xfc, 0x2, '\x00', 0x1}, 0xab}], 0x18) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x801, 0x7c5, 0x1, 0x3, 0xd59f81, 0x8, 0x5, 0xb, 0xc, 0x8009, 0x1, 0x2, 0xb0c, 0x8000, 0x3d, 0x45, {0x84, 0x7fff}, 0x6, 0x3}}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ed and disconnected. [ 99.615257][ T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 99.797068][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.829234][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 99.972776][ T5827] Bluetooth: hci2: command tx timeout [ 100.360001][ T10] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 100.411594][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.440956][ T10] usb 4-1: Product: syz [ 100.454625][ T10] usb 4-1: Manufacturer: syz [ 100.474528][ T10] usb 4-1: SerialNumber: syz [ 100.524259][ T10] usb 4-1: config 0 descriptor?? [ 100.583728][ T10] option 4-1:0.0: GSM modem (1-port) converter detected [ 101.136191][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.184688][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.225683][ T1142] bond0 (unregistering): Released all slaves [ 101.283172][ T6001] bridge0: port 3(gretap0) entered blocking state [ 101.290992][ T6001] bridge0: port 3(gretap0) entered disabled state [ 101.301610][ T6001] gretap0: entered allmulticast mode [ 101.314634][ T6001] gretap0: entered promiscuous mode [ 101.321802][ T6001] bridge0: port 3(gretap0) entered blocking state [ 101.329599][ T6001] bridge0: port 3(gretap0) entered forwarding state [ 101.450943][ T6007] bridge0: port 3(gretap0) entered disabled state [ 101.526190][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.534908][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.805758][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.840074][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.089416][ T6009] bridge0: port 3(gretap0) entered blocking state [ 102.096383][ T6009] bridge0: port 3(gretap0) entered forwarding state [ 102.104071][ T5827] Bluetooth: hci2: command tx timeout [ 102.115957][ T6009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.124830][ T6009] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.137973][ T6009] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.162752][ T5903] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.377173][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 102.440738][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 102.462614][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 102.484962][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.509144][ T5903] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.603282][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.635741][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.681613][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.692674][ T5911] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 102.710168][ T5903] usb 3-1: config 0 descriptor?? [ 102.750140][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.874116][ T5911] usb 5-1: unable to get BOS descriptor or descriptor too short [ 102.883798][ T5911] usb 5-1: not running at top speed; connect to a high speed hub [ 102.896321][ T5911] usb 5-1: config 8 has an invalid interface number: 82 but max is 0 [ 102.930813][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.940763][ T5911] usb 5-1: config 8 has no interface number 0 [ 103.007989][ T5911] usb 5-1: config 8 interface 82 altsetting 7 endpoint 0xD has an invalid bInterval 66, changing to 4 [ 103.052255][ T5911] usb 5-1: config 8 interface 82 altsetting 7 endpoint 0xD has invalid maxpacket 1096, setting to 1023 [ 103.073862][ T5911] usb 5-1: config 8 interface 82 has no altsetting 0 [ 103.086858][ T5911] usb 5-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice=6e.a0 [ 103.098653][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.114661][ T5911] usb 5-1: Product: 녈燎ﯼ讚酠ݿ䰢E貇봋Ě [ 103.124763][ T5911] usb 5-1: Manufacturer: 彃硚ㅰ眨ឺՔ䌟亴郤ç©ä€¥ã»€ì¥šæ¾ºä™‘졥☨칌횂镠㯼储ᨨ⾈᳢縛ڋé²ì½¶ï‰¢ä³†ç£”ࢾꜤ摋䫨鸰◭您戠莤 [ 103.142140][ T1142] hsr_slave_0: left promiscuous mode [ 103.148776][ T5911] usb 5-1: SerialNumber: 侩ճæŠä£‚á³²åšç®œè–‘뙥筶埪è—î·¢ê¡ã”²çº³ç¡³ä–„堘뇩îžå¦•뺼㯔뇴ì¬ä°‹ç¢€é©µâ”£á©¿æ‚¤æ„…ë¤çŠ·ë°«ê„†ì·¦à¬¨åŸ•æ»„ã·‚ê¢¡áµîŽç±—쇑䆬扬敓㜕ᚌᖌãºéœ¹ê˜ªà²ºéক뵬윻᥈᱂౸푢킈첌矆ද砄ïŠî—”ïƒê”ªî “嘻ퟎ꫉쑡Ɍ재喉ᦔ꼋ꆗ賬䕫鋬⹨å›à«±äˆšê±€å§’焤㈨ⱅꩬé›ã†—ꦽߴ꧌㓒帨噈ᨦ┢⧡穥䅰 [ 103.154475][ T5903] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max [ 103.206595][ T1142] hsr_slave_1: left promiscuous mode [ 103.253154][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.350370][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.451593][ T10] usb 4-1: USB disconnect, device number 3 [ 103.478760][ T10] option 4-1:0.0: device disconnected [ 103.521933][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.545795][ T5911] usb 5-1: USB disconnect, device number 7 [ 103.552316][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.627052][ T5903] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 103.716211][ T1142] veth1_macvtap: left promiscuous mode [ 103.739189][ T1142] veth0_macvtap: left promiscuous mode [ 103.764785][ T1142] veth1_vlan: left promiscuous mode [ 103.790949][ T5903] usb 3-1: USB disconnect, device number 2 [ 103.813349][ T1142] veth0_vlan: left promiscuous mode [ 103.838447][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.82/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.127981][ T6050] fido_id[6050]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 104.169754][ T6058] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.188720][ T5827] Bluetooth: hci2: command tx timeout [ 104.474851][ T6069] syz.2.33 uses obsolete (PF_INET,SOCK_PACKET) [ 106.055618][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 106.258611][ T5827] Bluetooth: hci2: command tx timeout [ 106.276485][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 106.339882][ T6087] FAULT_INJECTION: forcing a failure. [ 106.339882][ T6087] name failslab, interval 1, probability 0, space 0, times 1 [ 106.354850][ T6087] CPU: 1 UID: 0 PID: 6087 Comm: syz.4.39 Not tainted syzkaller #0 PREEMPT(full) [ 106.354889][ T6087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 106.354901][ T6087] Call Trace: [ 106.354909][ T6087] [ 106.354918][ T6087] dump_stack_lvl+0x189/0x250 [ 106.354947][ T6087] ? __pfx____ratelimit+0x10/0x10 [ 106.354977][ T6087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.354999][ T6087] ? __pfx__printk+0x10/0x10 [ 106.355028][ T6087] ? __pfx___might_resched+0x10/0x10 [ 106.355053][ T6087] ? fs_reclaim_acquire+0x7d/0x100 [ 106.355084][ T6087] should_fail_ex+0x414/0x560 [ 106.355120][ T6087] should_failslab+0xa8/0x100 [ 106.355149][ T6087] __kmalloc_noprof+0xcb/0x7f0 [ 106.355170][ T6087] ? tomoyo_encode+0x28b/0x550 [ 106.355200][ T6087] tomoyo_encode+0x28b/0x550 [ 106.355231][ T6087] tomoyo_realpath_from_path+0x58d/0x5d0 [ 106.355268][ T6087] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 106.355299][ T6087] tomoyo_path_number_perm+0x1e8/0x5a0 [ 106.355333][ T6087] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 106.355408][ T6087] ? __fget_files+0x2a/0x420 [ 106.355438][ T6087] ? __fget_files+0x3a0/0x420 [ 106.355461][ T6087] ? __fget_files+0x2a/0x420 [ 106.355491][ T6087] security_file_ioctl+0xcb/0x2d0 [ 106.355522][ T6087] __se_sys_ioctl+0x47/0x170 [ 106.355545][ T6087] do_syscall_64+0xfa/0xfa0 [ 106.355565][ T6087] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.355585][ T6087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.355605][ T6087] ? clear_bhb_loop+0x60/0xb0 [ 106.355631][ T6087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.355650][ T6087] RIP: 0033:0x7effac98eec9 [ 106.355669][ T6087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.355686][ T6087] RSP: 002b:00007effad7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.355740][ T6087] RAX: ffffffffffffffda RBX: 00007effacbe5fa0 RCX: 00007effac98eec9 [ 106.355755][ T6087] RDX: 0000200000000080 RSI: 00000000c008551b RDI: 0000000000000004 [ 106.355769][ T6087] RBP: 00007effad7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 106.355781][ T6087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.355794][ T6087] R13: 00007effacbe6038 R14: 00007effacbe5fa0 R15: 00007effacd0fa28 [ 106.355829][ T6087] [ 106.356239][ T6087] ERROR: Out of memory at tomoyo_realpath_from_path. [ 107.233482][ T10] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 107.425948][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 107.452613][ T10] usb 5-1: config 0 has no interface number 0 [ 107.480166][ T10] usb 5-1: too many endpoints for config 0 interface 184 altsetting 0: 64, using maximum allowed: 30 [ 107.559766][ T10] usb 5-1: config 0 interface 184 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 107.602666][ T10] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 107.652753][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.710419][ T10] usb 5-1: config 0 descriptor?? [ 107.943543][ T6089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.944107][ T6089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.233140][ T5997] chnl_net:caif_netlink_parms(): no params data found [ 108.343229][ T43] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.506166][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 108.533736][ T10] gp8psk: usb in 128 operation failed. [ 108.551959][ T10] gp8psk: usb in 137 operation failed. [ 108.558851][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 108.573353][ T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.575592][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 108.639890][ T10] usb 5-1: USB disconnect, device number 8 [ 108.659157][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 108.681929][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 108.704542][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.742189][ T43] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.766194][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.816424][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.841402][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.854739][ T5997] bridge_slave_0: entered allmulticast mode [ 108.859450][ T43] usb 3-1: config 0 descriptor?? [ 108.863633][ T5997] bridge_slave_0: entered promiscuous mode [ 108.907394][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.934374][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.952362][ T5997] bridge_slave_1: entered allmulticast mode [ 108.986287][ T5997] bridge_slave_1: entered promiscuous mode [ 109.080411][ T6132] FAULT_INJECTION: forcing a failure. [ 109.080411][ T6132] name failslab, interval 1, probability 0, space 0, times 0 [ 109.114643][ T6132] CPU: 1 UID: 0 PID: 6132 Comm: syz.3.48 Not tainted syzkaller #0 PREEMPT(full) [ 109.114680][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.114692][ T6132] Call Trace: [ 109.114700][ T6132] [ 109.114710][ T6132] dump_stack_lvl+0x189/0x250 [ 109.114738][ T6132] ? __pfx____ratelimit+0x10/0x10 [ 109.114769][ T6132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.114790][ T6132] ? __pfx__printk+0x10/0x10 [ 109.114818][ T6132] ? __pfx___might_resched+0x10/0x10 [ 109.114935][ T6132] should_fail_ex+0x414/0x560 [ 109.114974][ T6132] should_failslab+0xa8/0x100 [ 109.115003][ T6132] kmem_cache_alloc_node_noprof+0x77/0x710 [ 109.115025][ T6132] ? __alloc_skb+0x112/0x2d0 [ 109.115060][ T6132] __alloc_skb+0x112/0x2d0 [ 109.115092][ T6132] netlink_ack+0x146/0xa50 [ 109.115117][ T6132] ? __pfx_genl_rcv_msg+0x10/0x10 [ 109.115138][ T6132] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 109.115164][ T6132] ? __pfx_nl80211_post_doit+0x10/0x10 [ 109.115192][ T6132] ? __asan_memcpy+0x40/0x70 [ 109.115211][ T6132] ? __pfx_ref_tracker_free+0x10/0x10 [ 109.115242][ T6132] netlink_rcv_skb+0x28c/0x470 [ 109.115267][ T6132] ? __lock_acquire+0xab9/0xd20 [ 109.115293][ T6132] ? __pfx_genl_rcv_msg+0x10/0x10 [ 109.115317][ T6132] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 109.115368][ T6132] ? down_read+0x1ad/0x2e0 [ 109.115395][ T6132] genl_rcv+0x28/0x40 [ 109.115414][ T6132] netlink_unicast+0x82f/0x9e0 [ 109.115451][ T6132] ? __pfx_netlink_unicast+0x10/0x10 [ 109.115479][ T6132] ? netlink_sendmsg+0x642/0xb30 [ 109.115504][ T6132] ? skb_put+0x11b/0x210 [ 109.115537][ T6132] netlink_sendmsg+0x805/0xb30 [ 109.115577][ T6132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.115609][ T6132] ? aa_sock_msg_perm+0xf1/0x1d0 [ 109.115636][ T6132] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 109.115661][ T6132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.115691][ T6132] __sock_sendmsg+0x21c/0x270 [ 109.115720][ T6132] ____sys_sendmsg+0x505/0x830 [ 109.115758][ T6132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.115800][ T6132] ? import_iovec+0x74/0xa0 [ 109.115842][ T6132] ___sys_sendmsg+0x21f/0x2a0 [ 109.115866][ T6132] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.115929][ T6132] ? __fget_files+0x2a/0x420 [ 109.115954][ T6132] ? __fget_files+0x3a0/0x420 [ 109.115990][ T6132] __x64_sys_sendmsg+0x19b/0x260 [ 109.116012][ T6132] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 109.116043][ T6132] ? __pfx_ksys_write+0x10/0x10 [ 109.116071][ T6132] ? do_syscall_64+0xbe/0xfa0 [ 109.116095][ T6132] do_syscall_64+0xfa/0xfa0 [ 109.116113][ T6132] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.116134][ T6132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.116154][ T6132] ? clear_bhb_loop+0x60/0xb0 [ 109.116179][ T6132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.116199][ T6132] RIP: 0033:0x7fa274d8eec9 [ 109.116220][ T6132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.116237][ T6132] RSP: 002b:00007fa272ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.116261][ T6132] RAX: ffffffffffffffda RBX: 00007fa274fe5fa0 RCX: 00007fa274d8eec9 [ 109.116275][ T6132] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 109.116288][ T6132] RBP: 00007fa272ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 109.116301][ T6132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.116313][ T6132] R13: 00007fa274fe6038 R14: 00007fa274fe5fa0 R15: 00007fa27510fa28 [ 109.116349][ T6132] [ 109.605885][ T43] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 109.637459][ T43] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 109.697224][ T5997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.750949][ T5997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.799097][ T5903] usb 3-1: USB disconnect, device number 3 [ 109.903090][ T6139] fido_id[6139]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 110.062141][ T5997] team0: Port device team_slave_0 added [ 110.135104][ T5997] team0: Port device team_slave_1 added [ 110.433188][ T5997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.441066][ T30] audit: type=1326 audit(1760481572.608:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 110.451232][ T5997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.536830][ T6146] block device autoloading is deprecated and will be removed. [ 110.559330][ T5997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.570722][ T30] audit: type=1326 audit(1760481572.638:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 110.570774][ T30] audit: type=1326 audit(1760481572.648:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 110.570830][ T30] audit: type=1326 audit(1760481572.648:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 110.570876][ T30] audit: type=1326 audit(1760481572.648:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 110.570922][ T30] audit: type=1326 audit(1760481572.648:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 110.570966][ T30] audit: type=1326 audit(1760481572.648:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 110.571008][ T30] audit: type=1326 audit(1760481572.648:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 110.612906][ T6150] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 110.790073][ T30] audit: type=1326 audit(1760481572.648:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 110.823979][ T30] audit: type=1326 audit(1760481572.648:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 110.870847][ T5997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.901382][ T5997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.985430][ T5997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.064846][ T6162] capability: warning: `syz.2.57' uses deprecated v2 capabilities in a way that may be insecure [ 111.299507][ T5997] hsr_slave_0: entered promiscuous mode [ 111.316142][ T5997] hsr_slave_1: entered promiscuous mode [ 111.343732][ T5997] debugfs: 'hsr0' already exists in 'hsr' [ 111.358055][ T5997] Cannot create hsr debugfs directory [ 111.379378][ T6175] netlink: 9 bytes leftover after parsing attributes in process `syz.2.61'. [ 111.413076][ T5903] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.434441][ T6177] netlink: 5 bytes leftover after parsing attributes in process `syz.2.61'. [ 111.442656][ T5863] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 111.472020][ T6175] gretap0: entered promiscuous mode [ 111.493017][ T6177] 0ªî{X¹¦: renamed from gretap0 [ 111.512315][ T6177] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 111.606929][ T5863] usb 5-1: Using ep0 maxpacket: 8 [ 111.623275][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 111.635831][ T5863] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.637219][ T5903] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 111.652582][ T5863] usb 5-1: config 0 has no interface number 0 [ 111.665959][ T5903] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 111.679926][ T5903] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 111.679944][ T5863] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 111.679988][ T5863] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.690981][ T5903] usb 2-1: config 1 has no interface number 0 [ 111.747109][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.753288][ T5903] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.811955][ T5863] usb 5-1: config 0 descriptor?? [ 111.817407][ T5903] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 10229, setting to 1024 [ 111.846312][ T5863] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 111.849418][ T5903] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 111.923316][ T5903] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 111.944781][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.026466][ T6168] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 112.060859][ T5903] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 112.075326][ T10] usb 5-1: USB disconnect, device number 9 [ 112.225093][ T6198] netlink: 312 bytes leftover after parsing attributes in process `syz.2.64'. [ 112.246392][ T6168] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 112.290821][ T5903] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 113.295336][ T10] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 113.977049][ T5863] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 114.112686][ T5863] usb 5-1: device descriptor read/64, error -71 [ 114.393593][ T5863] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 114.542691][ T5863] usb 5-1: device descriptor read/64, error -71 [ 114.674572][ T5863] usb usb5-port1: attempt power cycle [ 114.733177][ T5911] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.860098][ T5997] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.893703][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 114.912253][ T5911] usb 4-1: config 0 has an invalid interface number: 161 but max is 0 [ 114.927121][ T5997] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.938046][ T5911] usb 4-1: config 0 has no interface number 0 [ 114.946622][ T5911] usb 4-1: config 0 interface 161 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 115.008784][ T5997] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.022728][ T5863] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 115.087562][ T5911] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0102, bcdDevice=9a.fd [ 115.113310][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.113566][ T5863] usb 5-1: device descriptor read/8, error -71 [ 115.129290][ T5911] usb 4-1: Product: syz [ 115.144784][ T5911] usb 4-1: Manufacturer: syz [ 115.144803][ T5997] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.160834][ T5911] usb 4-1: SerialNumber: syz [ 115.194667][ T5911] usb 4-1: config 0 descriptor?? [ 115.201076][ T6219] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 115.232127][ T5911] kvaser_usb 4-1:0.161: error -ENODEV: Cannot get usb endpoint(s) [ 115.418710][ T5863] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 115.463414][ T5863] usb 5-1: device descriptor read/8, error -71 [ 115.571923][ T5911] usb 2-1: USB disconnect, device number 3 [ 115.595268][ T5863] usb usb5-port1: unable to enumerate USB device [ 115.624513][ T5911] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 115.841476][ T5997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.864042][ T5903] hid (null): invalid report_count 42664 [ 115.891825][ T5903] hid-generic 0005:0008:FFFFFFFF.0003: unknown main item tag 0x4 [ 115.928669][ T5903] hid-generic 0005:0008:FFFFFFFF.0003: invalid report_count 42664 [ 115.953613][ T5903] hid-generic 0005:0008:FFFFFFFF.0003: item 0 2 1 9 parsing failed [ 115.968907][ T5997] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.979347][ T5903] hid-generic 0005:0008:FFFFFFFF.0003: probe with driver hid-generic failed with error -22 [ 116.001905][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.009513][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.073656][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.081730][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.239300][ T6243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.71'. [ 116.257664][ T5997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.390697][ T5997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.598359][ T5997] veth0_vlan: entered promiscuous mode [ 116.660751][ T5997] veth1_vlan: entered promiscuous mode [ 116.844615][ T5997] veth0_macvtap: entered promiscuous mode [ 116.896487][ T5997] veth1_macvtap: entered promiscuous mode [ 116.955237][ T5997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.992199][ T5997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.172116][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.200079][ T6277] fuse: Unknown parameter 'f¢' [ 117.219822][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.229930][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.301231][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.311989][ T5911] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 117.472604][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 117.504310][ T5911] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 117.512849][ T1071] usb 4-1: USB disconnect, device number 4 [ 117.565820][ T5911] usb 5-1: config 0 has no interface number 0 [ 117.572330][ T5911] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 117.588371][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.616294][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.649927][ T5911] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 117.700534][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.704095][ T6287] netlink: 'syz.3.81': attribute type 1 has an invalid length. [ 117.745255][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.755813][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.764329][ T6282] netlink: 36 bytes leftover after parsing attributes in process `syz.2.80'. [ 117.798156][ T5911] usb 5-1: config 0 descriptor?? [ 117.829993][ T5911] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 118.040941][ T5911] usb 5-1: USB disconnect, device number 14 [ 118.881209][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 118.881273][ T30] audit: type=1326 audit(1760481581.048:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effac98eec9 code=0x7ffc0000 [ 118.920348][ T6304] macvlan0: entered promiscuous mode [ 118.958679][ T6304] netlink: 'syz.2.83': attribute type 1 has an invalid length. [ 118.969394][ T6304] netlink: 'syz.2.83': attribute type 2 has an invalid length. [ 119.411196][ T30] audit: type=1326 audit(1760481581.138:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effac98eec9 code=0x7ffc0000 [ 119.493525][ T30] audit: type=1326 audit(1760481581.148:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7effac98eec9 code=0x7ffc0000 [ 119.573005][ T30] audit: type=1326 audit(1760481581.148:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effac98eec9 code=0x7ffc0000 [ 119.672949][ T30] audit: type=1326 audit(1760481581.148:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effac98eec9 code=0x7ffc0000 [ 119.934767][ T6323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 120.026639][ T30] audit: type=1326 audit(1760481581.158:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effac98eec9 code=0x7ffc0000 [ 120.152642][ T30] audit: type=1326 audit(1760481581.158:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effac98eec9 code=0x7ffc0000 [ 120.262664][ T30] audit: type=1326 audit(1760481581.158:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effac98eec9 code=0x7ffc0000 [ 120.304582][ T6333] netlink: 100 bytes leftover after parsing attributes in process `syz.1.90'. [ 120.504020][ T30] audit: type=1326 audit(1760481581.158:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7effac98eec9 code=0x7ffc0000 [ 120.584371][ T30] audit: type=1326 audit(1760481581.158:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7effac98ef03 code=0x7ffc0000 [ 120.999266][ T6339] tipc: Started in network mode [ 121.007950][ T6341] fuse: Bad value for 'fd' [ 121.013028][ T6339] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 121.041446][ T6339] tipc: Enabled bearer , priority 10 [ 121.126313][ T6340] vxcan3: entered promiscuous mode [ 121.173713][ T6340] vxcan3: entered allmulticast mode [ 121.379169][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.93'. [ 121.388647][ T6353] bridge_slave_1: left allmulticast mode [ 121.396520][ T6353] bridge_slave_1: left promiscuous mode [ 121.409939][ T6353] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.585318][ T6353] bridge_slave_0: left allmulticast mode [ 121.591036][ T6353] bridge_slave_0: left promiscuous mode [ 121.603079][ T5863] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.677154][ T6353] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.782564][ T5863] usb 1-1: Using ep0 maxpacket: 8 [ 121.806845][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 121.806879][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 121.875517][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 121.875557][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 121.875584][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 121.878342][ T5863] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 122.090987][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.125811][ T5863] usb 1-1: Product: syz [ 122.138319][ T5863] usb 1-1: Manufacturer: syz [ 122.147326][ T5863] usb 1-1: SerialNumber: syz [ 122.154567][ T43] tipc: Node number set to 8432298 [ 122.188766][ T5863] usb 1-1: config 0 descriptor?? [ 122.520449][ T6384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.101'. [ 122.616685][ T6384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.101'. [ 122.691475][ T6384] dummy0: entered promiscuous mode [ 122.700015][ T6384] team0: entered promiscuous mode [ 122.705856][ T6384] team_slave_0: entered promiscuous mode [ 122.716613][ T6384] team_slave_1: entered promiscuous mode [ 123.168234][ T6401] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 123.584894][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.108'. [ 123.601293][ T6414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.108'. [ 123.654958][ T6417] netlink: 'syz.3.108': attribute type 10 has an invalid length. [ 123.691848][ T6417] bridge0: port 3(gretap0) entered disabled state [ 123.724006][ T6417] bridge0: port 3(gretap0) entered blocking state [ 123.731020][ T6417] bridge0: port 3(gretap0) entered forwarding state [ 123.746448][ T1071] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 123.767907][ T6417] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 123.923400][ T1071] usb 5-1: Using ep0 maxpacket: 32 [ 123.933574][ T1071] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 123.942681][ T1071] usb 5-1: config 0 has no interface number 0 [ 123.950657][ T1071] usb 5-1: config 0 interface 184 has no altsetting 0 [ 123.969039][ T1071] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 123.978893][ T1071] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.006170][ T1071] usb 5-1: Product: syz [ 124.010915][ T1071] usb 5-1: Manufacturer: syz [ 124.016986][ T1071] usb 5-1: SerialNumber: syz [ 124.026701][ T1071] usb 5-1: config 0 descriptor?? [ 124.039242][ T6422] tipc: Enabling of bearer rejected, failed to enable media [ 124.061161][ T1071] smsc75xx v1.0.0 [ 124.513644][ T6433] netlink: 'syz.1.114': attribute type 1 has an invalid length. [ 124.667000][ T6410] netlink: 'syz.4.107': attribute type 5 has an invalid length. [ 124.675523][ T1071] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 124.703515][ T6438] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.730712][ T1071] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 124.842428][ T6437] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 124.942570][ T5863] rc_core: IR keymap rc-imon-rsc not found [ 124.948671][ T5863] Registered IR keymap rc-empty [ 124.959169][ T5863] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 124.972216][ T5863] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 124.993954][ T6437] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 125.198434][ T5863] usb 1-1: USB disconnect, device number 2 [ 125.289493][ T6439] gretap1: entered promiscuous mode [ 125.389517][ T6439] bond1: (slave gretap1): making interface the new active one [ 125.419880][ T6439] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 125.519503][ T6433] macvlan2: entered promiscuous mode [ 125.533301][ T6433] macvlan2: entered allmulticast mode [ 125.554370][ T6433] bond1: entered promiscuous mode [ 125.593548][ T6433] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 125.603473][ T1071] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 125.629663][ T6433] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 125.657335][ T6433] bond1: left promiscuous mode [ 125.730647][ T1071] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 125.802594][ T1071] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 125.823423][ T1071] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 125.862742][ T1071] usb 5-1: USB disconnect, device number 15 [ 125.868518][ T6452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.117'. [ 125.878199][ T6452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.117'. [ 125.902744][ T6452] ip6gretap0: entered promiscuous mode [ 125.931695][ T6452] syz_tun: entered promiscuous mode [ 125.951058][ T6452] debugfs: 'hsr1' already exists in 'hsr' [ 125.971109][ T6452] Cannot create hsr debugfs directory [ 126.342590][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.443595][ T6464] ptrace attach of "./syz-executor exec"[5997] was attempted by "./syz-executor exec"[6464] [ 126.454548][ T1071] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 126.499595][ T6466] binder: BINDER_SET_CONTEXT_MGR already set [ 126.522970][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 126.552719][ T6466] binder: 6463:6466 ioctl 4018620d 200000000040 returned -16 [ 126.572822][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.581228][ T10] usb 3-1: config 0 has no interface number 0 [ 126.652569][ T1071] usb 5-1: Using ep0 maxpacket: 8 [ 126.753170][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.887222][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 126.897388][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.960347][ T10] usb 3-1: config 0 descriptor?? [ 127.308817][ T10] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 127.746932][ T10] usb 3-1: USB disconnect, device number 4 [ 129.821422][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 129.821443][ T30] audit: type=1800 audit(1760481591.938:75): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.133" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 129.923446][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.931398][ T5889] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.066514][ T1071] usb 5-1: unable to get BOS descriptor or descriptor too short [ 130.075575][ T1071] usb 5-1: no configurations [ 130.080311][ T1071] usb 5-1: can't read configurations, error -22 [ 130.086742][ T10] usb 4-1: device descriptor read/64, error -71 [ 130.156736][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 130.191968][ T5889] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 130.228315][ T5889] usb 1-1: config 0 has no interface number 0 [ 130.247625][ T5889] usb 1-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 130.329455][ T5889] usb 1-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 130.344578][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 130.461904][ T5889] usb 1-1: config 0 interface 49 has no altsetting 0 [ 130.593205][ T10] usb 4-1: device descriptor read/64, error -71 [ 130.630869][ T5889] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 130.850094][ T6522] loop6: detected capacity change from 0 to 524288000 [ 130.893006][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 130.901995][ T5889] usb 1-1: Product: syz [ 130.906757][ T10] usb usb4-port1: attempt power cycle [ 130.943611][ T6522] support for the xor transformation has been removed. [ 130.991866][ T5889] usb 1-1: Manufacturer: syz [ 130.997280][ T5889] usb 1-1: SerialNumber: syz [ 131.012231][ T5889] usb 1-1: config 0 descriptor?? [ 131.332613][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 131.448270][ T10] usb 4-1: device descriptor read/8, error -71 [ 131.692629][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 131.730043][ T10] usb 4-1: device descriptor read/8, error -71 [ 132.133782][ T10] usb usb4-port1: unable to enumerate USB device [ 132.957356][ T6533] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 133.052386][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.143'. [ 133.068821][ T5889] usb 1-1: USB disconnect, device number 3 [ 133.138921][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.146540][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.174503][ T6536] netem: change failed [ 133.176365][ T6122] udevd[6122]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.49/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.574838][ T6550] netlink: 4344 bytes leftover after parsing attributes in process `syz.1.149'. [ 133.668012][ T30] audit: type=1326 audit(1760481595.838:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efeb8eec9 code=0x7ffc0000 [ 133.731375][ T6556] syz_tun: entered allmulticast mode [ 133.756561][ T30] audit: type=1326 audit(1760481595.838:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3efeb8eec9 code=0x7ffc0000 [ 133.815167][ T30] audit: type=1326 audit(1760481595.838:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efeb8eec9 code=0x7ffc0000 [ 133.821265][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 133.890559][ T30] audit: type=1326 audit(1760481595.838:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3efeb8eec9 code=0x7ffc0000 [ 133.915290][ T6563] xt_connbytes: Forcing CT accounting to be enabled [ 133.996081][ T30] audit: type=1326 audit(1760481595.838:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efeb8eec9 code=0x7ffc0000 [ 134.049630][ T30] audit: type=1326 audit(1760481595.838:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3efeb8eec9 code=0x7ffc0000 [ 134.164306][ T30] audit: type=1326 audit(1760481595.838:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efeb8eec9 code=0x7ffc0000 [ 134.167186][ T6559] syz_tun (unregistering): left allmulticast mode [ 134.604100][ T5911] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 134.628086][ T6584] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 134.834891][ T5911] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 135.040595][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.063750][ T5911] usb 1-1: Product: syz [ 135.068079][ T5911] usb 1-1: Manufacturer: syz [ 135.082869][ T5911] usb 1-1: SerialNumber: syz [ 135.098501][ T5911] usb 1-1: config 0 descriptor?? [ 135.110643][ T5911] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 135.546492][ T6605] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.715596][ T5911] gspca_sunplus: reg_r err -32 [ 135.721361][ T5911] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 135.775243][ T6621] netlink: 'syz.4.173': attribute type 1 has an invalid length. [ 135.799696][ T6621] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 135.881053][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 135.982795][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 136.105241][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 136.138455][ T1071] usb 1-1: USB disconnect, device number 4 [ 136.158066][ T9] usb 2-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 136.178486][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.213355][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.230050][ T9] usb 2-1: Product: syz [ 136.243179][ T9] usb 2-1: Manufacturer: syz [ 136.249533][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 136.270706][ T9] usb 2-1: SerialNumber: syz [ 136.277065][ T10] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 136.305736][ T9] usb 2-1: config 0 descriptor?? [ 136.314991][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.360673][ T10] usb 4-1: config 0 descriptor?? [ 136.476331][ T6639] netlink: 44 bytes leftover after parsing attributes in process `syz.0.178'. [ 136.575932][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.177'. [ 136.920334][ T5911] usb 2-1: USB disconnect, device number 4 [ 137.728396][ T6656] xt_NFQUEUE: number of queues (65535) out of range (got 65541) [ 137.968616][ T6661] fuse: Bad value for 'fd' [ 138.091146][ T6666] netlink: 256 bytes leftover after parsing attributes in process `syz.1.189'. [ 138.108229][ T6666] unsupported nlmsg_type 40 [ 138.250298][ T30] audit: type=1326 audit(1760481600.418:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 138.280585][ T30] audit: type=1326 audit(1760481600.418:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 138.314733][ T6672] netlink: 44 bytes leftover after parsing attributes in process `syz.2.190'. [ 138.353191][ T30] audit: type=1326 audit(1760481600.418:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f158af90de7 code=0x7ffc0000 [ 138.411250][ T30] audit: type=1326 audit(1760481600.418:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 138.446227][ T30] audit: type=1326 audit(1760481600.418:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 138.474141][ T30] audit: type=1326 audit(1760481600.418:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 138.500229][ T30] audit: type=1326 audit(1760481600.418:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 138.522247][ T6676] sctp: [Deprecated]: syz.4.192 (pid 6676) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.522247][ T6676] Use struct sctp_sack_info instead [ 138.532978][ T30] audit: type=1326 audit(1760481600.418:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 138.582678][ T30] audit: type=1326 audit(1760481600.418:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 138.610729][ T30] audit: type=1326 audit(1760481600.418:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 138.855201][ T6685] program syz.4.193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.558630][ T1071] usb 4-1: USB disconnect, device number 9 [ 140.186372][ T6699] netlink: 40 bytes leftover after parsing attributes in process `syz.2.198'. [ 140.217058][ T6699] netlink: 40 bytes leftover after parsing attributes in process `syz.2.198'. [ 140.887306][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'. [ 140.919642][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 141.011873][ T6718] netlink: 'syz.3.205': attribute type 1 has an invalid length. [ 141.068895][ T6718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.118607][ T6722] bond1: (slave geneve2): making interface the new active one [ 141.130050][ T6722] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 141.141529][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.169745][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.190158][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.223760][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.747743][ T5863] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 142.074613][ T5863] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 142.089464][ T5863] usb 1-1: config 0 has no interface number 0 [ 142.110626][ T5863] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 142.121182][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.144433][ T5863] usb 1-1: Product: syz [ 142.148780][ T5863] usb 1-1: Manufacturer: syz [ 142.154036][ T5863] usb 1-1: SerialNumber: syz [ 142.163167][ T5863] usb 1-1: config 0 descriptor?? [ 142.559452][ T6744] netlink: 5 bytes leftover after parsing attributes in process `syz.1.212'. [ 142.581985][ T5863] usb 1-1: Firmware version (0.0) predates our first public release. [ 142.591117][ T5863] usb 1-1: Please update to version 0.2 or newer [ 142.592207][ T6744] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 142.666382][ T6744] 0ªî{X¹¦: entered allmulticast mode [ 142.673173][ T6744] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 142.791967][ T5863] usb 1-1: Firmware: build ÃjHÞ5-H*E:êMÂѵ -`ÊG¹o‰:ˆÚwÆW8ß“é†09±!÷Ãú&ƺ€2¬ É’CcÕ&ÿ*+åÁsW3PÄ„(ÙÄoæ [ 160.467716][ T7017] dump_stack_lvl+0x189/0x250 [ 160.467753][ T7017] ? __pfx____ratelimit+0x10/0x10 [ 160.467784][ T7017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.467804][ T7017] ? __pfx__printk+0x10/0x10 [ 160.467830][ T7017] ? __pfx___might_resched+0x10/0x10 [ 160.467856][ T7017] ? fs_reclaim_acquire+0x7d/0x100 [ 160.467884][ T7017] should_fail_ex+0x414/0x560 [ 160.467919][ T7017] should_failslab+0xa8/0x100 [ 160.467947][ T7017] __kvmalloc_node_noprof+0x158/0x910 [ 160.467973][ T7017] ? alloc_netdev_mqs+0xa4b/0x11b0 [ 160.468002][ T7017] alloc_netdev_mqs+0xa4b/0x11b0 [ 160.468032][ T7017] rtnl_create_link+0x31f/0xd10 [ 160.468063][ T7017] rtnl_newlink_create+0x25c/0xb00 [ 160.468098][ T7017] ? __lock_acquire+0xab9/0xd20 [ 160.468130][ T7017] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 160.468163][ T7017] ? __pfx___mutex_lock+0x10/0x10 [ 160.468195][ T7017] ? ns_capable+0x8a/0xf0 [ 160.468226][ T7017] rtnl_newlink+0x16e4/0x1c80 [ 160.468254][ T7017] ? netlink_deliver_tap+0x19c/0x1b0 [ 160.468294][ T7017] ? __pfx_rtnl_newlink+0x10/0x10 [ 160.468348][ T7017] ? kasan_quarantine_put+0xdd/0x220 [ 160.468370][ T7017] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.468398][ T7017] ? nlmon_xmit+0xb0/0x100 [ 160.468419][ T7017] ? kmem_cache_free+0x19b/0x690 [ 160.468453][ T7017] ? __local_bh_enable_ip+0x12d/0x1c0 [ 160.468479][ T7017] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.468500][ T7017] ? __local_bh_enable_ip+0x12d/0x1c0 [ 160.468524][ T7017] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 160.468553][ T7017] ? __dev_queue_xmit+0x27b/0x3b50 [ 160.468574][ T7017] ? __dev_queue_xmit+0x27b/0x3b50 [ 160.468591][ T7017] ? __dev_queue_xmit+0x27b/0x3b50 [ 160.468613][ T7017] ? __dev_queue_xmit+0x1d79/0x3b50 [ 160.468630][ T7017] ? kasan_save_track+0x3e/0x80 [ 160.468648][ T7017] ? __kasan_slab_alloc+0x6c/0x80 [ 160.468674][ T7017] ? __lock_acquire+0xab9/0xd20 [ 160.468726][ T7017] ? __pfx_rtnl_newlink+0x10/0x10 [ 160.468762][ T7017] rtnetlink_rcv_msg+0x7cf/0xb70 [ 160.468793][ T7017] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 160.468819][ T7017] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 160.468841][ T7017] ? ref_tracker_free+0x63a/0x7d0 [ 160.468863][ T7017] ? __asan_memcpy+0x40/0x70 [ 160.468881][ T7017] ? __pfx_ref_tracker_free+0x10/0x10 [ 160.468899][ T7017] ? __skb_clone+0x63/0x7a0 [ 160.468928][ T7017] netlink_rcv_skb+0x208/0x470 [ 160.468958][ T7017] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 160.468985][ T7017] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 160.469024][ T7017] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.469059][ T7017] netlink_unicast+0x82f/0x9e0 [ 160.469092][ T7017] ? __pfx_netlink_unicast+0x10/0x10 [ 160.469119][ T7017] ? netlink_sendmsg+0x642/0xb30 [ 160.469144][ T7017] ? skb_put+0x11b/0x210 [ 160.469174][ T7017] netlink_sendmsg+0x805/0xb30 [ 160.469212][ T7017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.469242][ T7017] ? aa_sock_msg_perm+0xf1/0x1d0 [ 160.469266][ T7017] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 160.469293][ T7017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.469322][ T7017] __sock_sendmsg+0x21c/0x270 [ 160.469350][ T7017] ____sys_sendmsg+0x505/0x830 [ 160.469385][ T7017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.469425][ T7017] ? import_iovec+0x74/0xa0 [ 160.469456][ T7017] ___sys_sendmsg+0x21f/0x2a0 [ 160.469478][ T7017] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.469538][ T7017] ? __fget_files+0x2a/0x420 [ 160.469563][ T7017] ? __fget_files+0x3a0/0x420 [ 160.469598][ T7017] __x64_sys_sendmsg+0x19b/0x260 [ 160.469620][ T7017] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.469650][ T7017] ? __pfx_ksys_write+0x10/0x10 [ 160.469675][ T7017] ? do_syscall_64+0xbe/0xfa0 [ 160.469699][ T7017] do_syscall_64+0xfa/0xfa0 [ 160.469715][ T7017] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.469732][ T7017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.469765][ T7017] ? clear_bhb_loop+0x60/0xb0 [ 160.469790][ T7017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.469809][ T7017] RIP: 0033:0x7f158af8eec9 [ 160.469828][ T7017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.469844][ T7017] RSP: 002b:00007f158beea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.469866][ T7017] RAX: ffffffffffffffda RBX: 00007f158b1e5fa0 RCX: 00007f158af8eec9 [ 160.469881][ T7017] RDX: 0000000008000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 160.469893][ T7017] RBP: 00007f158beea090 R08: 0000000000000000 R09: 0000000000000000 [ 160.469905][ T7017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.469917][ T7017] R13: 00007f158b1e6038 R14: 00007f158b1e5fa0 R15: 00007f158b30fa28 [ 160.469951][ T7017] [ 161.113164][ T5863] usb 1-1: USB disconnect, device number 10 [ 161.180504][ T1071] kye 0003:0458:5015.0004: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 161.198327][ T1071] kye 0003:0458:5015.0004: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.3-1/input0 [ 161.209470][ T1071] kye 0003:0458:5015.0004: tablet-enabling feature report not found [ 161.217908][ T1071] kye 0003:0458:5015.0004: tablet enabling failed [ 161.390465][ T7015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.416258][ T7026] loop6: detected capacity change from 0 to 524288000 [ 161.450976][ T7015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.609312][ T7034] bridge0: port 3(vxlan0) entered blocking state [ 161.643585][ T7036] support for the xor transformation has been removed. [ 161.661857][ T7034] bridge0: port 3(vxlan0) entered disabled state [ 161.692628][ T7034] vxlan0: entered allmulticast mode [ 161.705856][ T7034] vxlan0: entered promiscuous mode [ 161.714341][ T43] usb 4-1: USB disconnect, device number 15 [ 161.896722][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.308'. [ 162.314999][ T7047] tipc: Started in network mode [ 162.374819][ T7047] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 162.420975][ T7047] tipc: Enabled bearer , priority 10 [ 163.158829][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 163.399391][ T7064] tipc: Enabling of bearer rejected, failed to enable media [ 163.414986][ T1071] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 163.486859][ T7066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.319'. [ 163.496642][ T7066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.319'. [ 163.518247][ T7066] dummy0: entered promiscuous mode [ 163.531144][ T7066] team0: entered promiscuous mode [ 163.532592][ T5889] tipc: Node number set to 8432298 [ 163.552945][ T7066] team_slave_0: entered promiscuous mode [ 163.567882][ T7066] team_slave_1: entered promiscuous mode [ 163.575696][ T1071] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 163.588144][ T1071] usb 4-1: config 1 has no interface number 1 [ 163.613386][ T1071] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 163.677241][ T1071] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 163.739611][ T1071] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.758355][ T1071] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.795786][ T1071] usb 4-1: Product: syz [ 163.814191][ T1071] usb 4-1: Manufacturer: syz [ 163.842391][ T1071] usb 4-1: SerialNumber: syz [ 164.112818][ T1071] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 164.298402][ T1071] usb 4-1: USB disconnect, device number 16 [ 164.424713][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.844073][ T7138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.912688][ T7138] batadv_slave_0: entered promiscuous mode [ 166.532614][ T1071] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 166.600934][ T30] audit: type=1326 audit(1760481628.728:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effac98eec9 code=0x7ffc0000 [ 166.627196][ T30] audit: type=1326 audit(1760481628.728:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7effac98eec9 code=0x7ffc0000 [ 166.653050][ T30] audit: type=1326 audit(1760481628.728:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effac98eec9 code=0x7ffc0000 [ 166.675733][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.706160][ T1071] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 166.716537][ T1071] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.732585][ T30] audit: type=1326 audit(1760481628.728:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effac98eec9 code=0x7ffc0000 [ 166.755525][ T1071] usb 3-1: Product: syz [ 166.759811][ T1071] usb 3-1: Manufacturer: syz [ 166.775238][ T1071] usb 3-1: SerialNumber: syz [ 166.812750][ T30] audit: type=1326 audit(1760481628.728:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7effac98eec9 code=0x7ffc0000 [ 166.842792][ T30] audit: type=1326 audit(1760481628.728:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effac98eec9 code=0x7ffc0000 [ 166.880660][ T30] audit: type=1326 audit(1760481628.728:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effac98eec9 code=0x7ffc0000 [ 166.911523][ T30] audit: type=1326 audit(1760481628.728:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7effac98eec9 code=0x7ffc0000 [ 167.062005][ T30] audit: type=1326 audit(1760481628.728:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effac98eec9 code=0x7ffc0000 [ 167.106030][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 167.412202][ T30] audit: type=1326 audit(1760481628.728:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effac98eec9 code=0x7ffc0000 [ 167.435772][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 167.446585][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 167.454684][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 167.466370][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 167.522263][ T1071] rtl8150 3-1:1.0: couldn't reset the device [ 167.529092][ T1071] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 167.556421][ T7169] erspan0: entered promiscuous mode [ 167.564162][ T10] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 167.574713][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 167.586181][ T1071] usb 3-1: USB disconnect, device number 8 [ 167.592259][ T7169] vlan2: entered promiscuous mode [ 167.599582][ T10] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.795224][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 167.822580][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.914691][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 167.954610][ T10] usb 1-1: invalid MIDI out EP 0 [ 167.994181][ T5911] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 168.152591][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 168.160306][ T5911] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 168.223326][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.256024][ T10] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 168.266445][ T5911] usb 2-1: config 0 descriptor?? [ 168.333918][ T7157] deleting an unspecified loop device is not supported. [ 168.508043][ T5911] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 168.572368][ T5911] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 168.626210][ T5911] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 168.651584][ T5911] usb 2-1: media controller created [ 168.782380][ T7183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.345'. [ 168.796771][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.799817][ T7183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.345'. [ 169.032707][ T5911] DVB: Unable to find symbol dib7000p_attach() [ 169.040639][ T5911] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 169.103165][ T43] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 169.113656][ T7189] netlink: 'syz.4.346': attribute type 4 has an invalid length. [ 169.162656][ T5911] rc_core: IR keymap rc-dib0700-rc5 not found [ 169.169087][ T5911] Registered IR keymap rc-empty [ 169.262586][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 169.275532][ T43] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.292929][ T43] usb 3-1: config 0 has no interface number 0 [ 169.299317][ T43] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 169.316136][ T43] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 169.326568][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.338263][ T43] usb 3-1: config 0 descriptor?? [ 169.356947][ T43] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 169.392627][ T1071] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 169.543040][ T10] usb 1-1: USB disconnect, device number 11 [ 169.552706][ T1071] usb 5-1: Using ep0 maxpacket: 8 [ 169.572075][ T1071] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 169.622541][ T1071] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 169.655108][ T1071] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.696300][ T1071] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.725436][ T1071] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.735420][ T1071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.964932][ T1071] usb 5-1: GET_CAPABILITIES returned 0 [ 169.970978][ T1071] usbtmc 5-1:16.0: can't read capabilities [ 170.035600][ T7199] sctp: [Deprecated]: syz.0.347 (pid 7199) Use of int in maxseg socket option. [ 170.035600][ T7199] Use struct sctp_assoc_value instead [ 170.586933][ T5863] usb 3-1: USB disconnect, device number 9 [ 170.587073][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 170.610737][ T1071] usb 5-1: USB disconnect, device number 18 [ 171.348403][ T7215] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 171.355667][ T7215] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 171.392113][ T7215] vhci_hcd vhci_hcd.0: Device attached [ 171.435332][ T7216] vhci_hcd: connection closed [ 171.438093][ T4556] vhci_hcd: stop threads [ 171.466138][ T4556] vhci_hcd: release socket [ 171.478468][ T4556] vhci_hcd: disconnect device [ 173.460804][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.362'. [ 173.554026][ T5863] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 173.762916][ T5863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.812698][ T5911] dvb-usb: could not initialize remote control. [ 173.819193][ T5911] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 173.832989][ T5863] usb 1-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 173.868852][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.889704][ T5911] usb 2-1: USB disconnect, device number 6 [ 173.907445][ T5863] usb 1-1: config 0 descriptor?? [ 173.917776][ T7248] loop6: detected capacity change from 0 to 524288000 [ 174.091740][ T5911] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 174.222861][ T5863] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 174.396490][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 174.414815][ T5863] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.442087][ T5863] usb 4-1: config 0 has no interface number 0 [ 174.455476][ T5863] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.506934][ T5863] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 174.552724][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.646382][ T5863] usb 4-1: config 0 descriptor?? [ 174.699269][ T5863] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 175.939556][ T5863] usb 4-1: USB disconnect, device number 17 [ 176.294816][ T5863] usb 1-1: USB disconnect, device number 12 [ 177.206748][ T43] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 177.359406][ T7294] erspan0: entered promiscuous mode [ 177.456195][ T7294] vlan2: entered promiscuous mode [ 177.471360][ T43] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 177.510170][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.793803][ T43] usb 3-1: config 0 descriptor?? [ 177.842599][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 178.017931][ T43] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 178.063322][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 178.074215][ T10] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 178.083898][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.116122][ T10] usb 1-1: config 0 descriptor?? [ 178.230642][ T43] [drm:udl_init] *ERROR* Selecting channel failed [ 178.316178][ T43] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 178.335093][ T10] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 178.341264][ T43] [drm] Initialized udl on minor 2 [ 178.366508][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 178.373499][ T43] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 178.426271][ T43] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 178.438712][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 178.445211][ T5911] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 178.466138][ T5911] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 178.486704][ T43] usb 3-1: USB disconnect, device number 10 [ 178.494802][ T10] usb 1-1: media controller created [ 178.643227][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 178.881629][ T10] DVB: Unable to find symbol dib7000p_attach() [ 178.885487][ T7312] xt_connbytes: Forcing CT accounting to be enabled [ 178.907727][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 179.020716][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.384'. [ 179.023133][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 179.040066][ T10] Registered IR keymap rc-empty [ 179.064737][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'. [ 179.278498][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 179.278517][ T30] audit: type=1326 audit(1760481641.448:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7323 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 179.325529][ T30] audit: type=1326 audit(1760481641.478:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7323 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 179.355959][ T30] audit: type=1326 audit(1760481641.478:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7323 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 179.447417][ T30] audit: type=1326 audit(1760481641.478:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7323 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 179.501613][ T30] audit: type=1326 audit(1760481641.478:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7323 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 179.515444][ T7326] kvm: pic: level sensitive irq not supported [ 179.537459][ T7326] kvm: pic: non byte read [ 179.569981][ T30] audit: type=1326 audit(1760481641.478:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7323 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 179.574610][ T7326] kvm: pic: level sensitive irq not supported [ 179.596366][ T30] audit: type=1326 audit(1760481641.488:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7323 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 179.637307][ T7326] kvm: pic: non byte read [ 179.639510][ T30] audit: type=1326 audit(1760481641.488:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7323 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 179.660988][ T7326] kvm: pic: level sensitive irq not supported [ 179.673141][ T30] audit: type=1326 audit(1760481641.488:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7323 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f158af90de7 code=0x7ffc0000 [ 179.677082][ T7326] kvm: pic: non byte read [ 179.679428][ T30] audit: type=1326 audit(1760481641.488:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7323 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f158af90d5c code=0x7ffc0000 [ 179.724593][ T7326] kvm: pic: level sensitive irq not supported [ 179.731131][ T7326] kvm: pic: non byte read [ 179.748875][ T7326] kvm: pic: level sensitive irq not supported [ 179.748960][ T7326] kvm: pic: non byte read [ 179.752097][ T7334] FAULT_INJECTION: forcing a failure. [ 179.752097][ T7334] name failslab, interval 1, probability 0, space 0, times 0 [ 179.757054][ T7326] kvm: pic: level sensitive irq not supported [ 179.760715][ T7334] CPU: 0 UID: 0 PID: 7334 Comm: syz.4.390 Not tainted syzkaller #0 PREEMPT(full) [ 179.760755][ T7334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 179.760766][ T7334] Call Trace: [ 179.760775][ T7334] [ 179.760785][ T7334] dump_stack_lvl+0x189/0x250 [ 179.760809][ T7334] ? __pfx____ratelimit+0x10/0x10 [ 179.760838][ T7334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.760857][ T7334] ? __pfx__printk+0x10/0x10 [ 179.760890][ T7334] should_fail_ex+0x414/0x560 [ 179.760924][ T7334] should_failslab+0xa8/0x100 [ 179.760949][ T7334] __kmalloc_cache_noprof+0x6f/0x6f0 [ 179.760967][ T7334] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 179.760986][ T7334] ? sctp_add_bind_addr+0x8c/0x370 [ 179.761009][ T7334] sctp_add_bind_addr+0x8c/0x370 [ 179.761032][ T7334] sctp_copy_local_addr_list+0x30b/0x4e0 [ 179.761054][ T7334] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 179.761071][ T7334] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 179.761091][ T7334] ? sctp_v6_is_any+0x64/0x80 [ 179.761111][ T7334] ? sctp_copy_one_addr+0x93/0x360 [ 179.761133][ T7334] sctp_bind_addr_copy+0xb3/0x3c0 [ 179.761152][ T7334] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 179.761181][ T7334] sctp_connect_new_asoc+0x2e0/0x690 [ 179.761206][ T7334] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 179.761226][ T7334] ? __local_bh_enable_ip+0x12d/0x1c0 [ 179.761257][ T7334] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 179.761281][ T7334] ? security_sctp_bind_connect+0x7e/0x2e0 [ 179.761309][ T7334] sctp_sendmsg+0x155c/0x2810 [ 179.761344][ T7334] ? __pfx_sctp_sendmsg+0x10/0x10 [ 179.761369][ T7334] ? aa_sk_perm+0x81e/0x950 [ 179.761392][ T7334] ? __pfx_aa_sk_perm+0x10/0x10 [ 179.761413][ T7334] ? sock_rps_record_flow+0x19/0x410 [ 179.761440][ T7334] ? inet_sendmsg+0x2f4/0x370 [ 179.761468][ T7334] __sock_sendmsg+0x19c/0x270 [ 179.761494][ T7334] __sys_sendto+0x3bd/0x520 [ 179.761521][ T7334] ? __pfx___sys_sendto+0x10/0x10 [ 179.761543][ T7334] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 179.761576][ T7334] ? __fget_files+0x3a0/0x420 [ 179.761609][ T7334] ? ksys_write+0x22a/0x250 [ 179.761631][ T7334] ? __pfx_ksys_write+0x10/0x10 [ 179.761654][ T7334] __x64_sys_sendto+0xde/0x100 [ 179.761683][ T7334] do_syscall_64+0xfa/0xfa0 [ 179.761699][ T7334] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.761716][ T7334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.761741][ T7334] ? clear_bhb_loop+0x60/0xb0 [ 179.761763][ T7334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.761779][ T7334] RIP: 0033:0x7effac98eec9 [ 179.761796][ T7334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.761812][ T7334] RSP: 002b:00007effad7d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 179.761833][ T7334] RAX: ffffffffffffffda RBX: 00007effacbe5fa0 RCX: 00007effac98eec9 [ 179.761847][ T7334] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 179.761858][ T7334] RBP: 00007effad7d5090 R08: 0000200000000080 R09: 000000000000001c [ 179.761870][ T7334] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 179.761881][ T7334] R13: 00007effacbe6038 R14: 00007effacbe5fa0 R15: 00007effacd0fa28 [ 179.761913][ T7334] [ 180.141443][ T7326] kvm: pic: non byte read [ 180.149402][ T7326] kvm: pic: level sensitive irq not supported [ 180.149486][ T7326] kvm: pic: non byte read [ 180.160731][ T7326] kvm: pic: level sensitive irq not supported [ 180.160811][ T7326] kvm: pic: non byte read [ 180.172335][ T7326] kvm: pic: level sensitive irq not supported [ 180.172419][ T7326] kvm: pic: non byte read [ 180.223034][ T7326] kvm: pic: level sensitive irq not supported [ 180.223124][ T7326] kvm: pic: non byte read [ 180.306428][ T7338] netlink: 312 bytes leftover after parsing attributes in process `syz.4.391'. [ 180.373433][ T7340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.392'. [ 180.525490][ T7340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.392'. [ 180.663421][ T7340] macvlan0: left promiscuous mode [ 180.671789][ T7340] macvlan0: entered allmulticast mode [ 180.677485][ T7340] veth1_vlan: entered allmulticast mode [ 181.436926][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 181.837748][ T7358] process 'syz.1.397' launched '/dev/fd/6' with NULL argv: empty string added [ 182.400115][ T7358] @: renamed from vlan0 (while UP) [ 183.625204][ T10] dvb-usb: could not initialize remote control. [ 183.631491][ T10] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 183.691571][ T10] usb 1-1: USB disconnect, device number 13 [ 183.769496][ T10] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 184.472585][ T5911] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 184.511453][ T7385] fuse: Bad value for 'fd' [ 184.637037][ T5911] usb 1-1: Using ep0 maxpacket: 32 [ 184.652235][ T7392] trusted_key: syz.1.404 sent an empty control message without MSG_MORE. [ 184.712722][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.742549][ T5911] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 184.746881][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.407'. [ 184.792584][ T5889] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 184.923390][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.937730][ T5911] usb 1-1: config 0 descriptor?? [ 184.942945][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 184.960610][ T5889] usb 3-1: config 0 has an invalid interface number: 150 but max is 0 [ 184.980807][ T5889] usb 3-1: config 0 has no interface number 0 [ 185.057383][ T5889] usb 3-1: New USB device found, idVendor=17cc, idProduct=baff, bcdDevice=e1.1f [ 185.108014][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.124406][ T5889] usb 3-1: config 0 descriptor?? [ 185.309842][ T5863] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 185.423675][ T7389] syzkaller1: entered promiscuous mode [ 185.482639][ T5863] usb 5-1: device descriptor read/64, error -71 [ 185.501150][ T5911] stadia 0003:18D1:9400.0005: hidraw0: USB HID v0.01 Device [HID 18d1:9400] on usb-dummy_hcd.0-1/input0 [ 185.528159][ T7402] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 185.556862][ T5911] stadia 0003:18D1:9400.0005: no inputs found [ 185.569118][ T7389] syzkaller1: entered allmulticast mode [ 185.575664][ T5911] stadia 0003:18D1:9400.0005: force feedback init failed [ 185.732589][ T5863] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 185.780233][ T5889] usb 3-1: string descriptor 0 read error: -71 [ 185.821967][ T5889] snd-usb-caiaq 3-1:0.150: can't set alt interface. [ 185.838326][ T5889] usb 3-1: unable to init card! (ret=-5) [ 185.862716][ T5889] snd-usb-caiaq 3-1:0.150: probe with driver snd-usb-caiaq failed with error -5 [ 185.897414][ T5889] usb 3-1: USB disconnect, device number 12 [ 185.905124][ T5863] usb 5-1: device descriptor read/64, error -71 [ 186.033194][ T5863] usb usb5-port1: attempt power cycle [ 186.101387][ T7410] erspan0: entered promiscuous mode [ 186.107499][ T7410] vlan2: entered promiscuous mode [ 186.382978][ T5911] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 186.403251][ T5863] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 186.427662][ T5863] usb 5-1: device descriptor read/8, error -71 [ 186.544692][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 186.672659][ T5863] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 186.851929][ T5911] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 186.889880][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.913098][ T5863] usb 5-1: device descriptor read/8, error -71 [ 186.932287][ T5911] usb 4-1: config 0 descriptor?? [ 187.039073][ T5863] usb usb5-port1: unable to enumerate USB device [ 187.152185][ T5911] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 187.197017][ T5911] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 187.248357][ T5911] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 187.295095][ T5911] usb 4-1: media controller created [ 187.331907][ T7428] netlink: 84 bytes leftover after parsing attributes in process `syz.1.417'. [ 187.361551][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.540541][ T10] usb 1-1: USB disconnect, device number 14 [ 187.560189][ T5911] DVB: Unable to find symbol dib7000p_attach() [ 187.599663][ T5911] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 187.770333][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.418'. [ 187.842632][ T5911] rc_core: IR keymap rc-dib0700-rc5 not found [ 187.849346][ T5911] Registered IR keymap rc-empty [ 187.875470][ T7441] netlink: 'syz.1.421': attribute type 20 has an invalid length. [ 187.883951][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.421'. [ 187.902622][ T7441] netlink: 'syz.1.421': attribute type 20 has an invalid length. [ 187.911301][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.421'. [ 188.327596][ T7443] wireguard0: entered promiscuous mode [ 188.339688][ T7443] wireguard0: entered allmulticast mode [ 188.469069][ T7455] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.563185][ T43] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 189.002597][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 189.010213][ T43] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 189.019615][ T43] usb 5-1: config 0 has no interface number 0 [ 189.045944][ T43] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 189.079618][ T43] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 189.136493][ T43] usb 5-1: config 0 interface 41 has no altsetting 0 [ 189.179392][ T43] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 189.193464][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.222671][ T43] usb 5-1: Product: syz [ 189.229066][ T43] usb 5-1: Manufacturer: syz [ 189.236974][ T43] usb 5-1: SerialNumber: syz [ 189.254376][ T43] usb 5-1: config 0 descriptor?? [ 189.271491][ T7454] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 189.288047][ T7454] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 189.504512][ T7468] FAULT_INJECTION: forcing a failure. [ 189.504512][ T7468] name failslab, interval 1, probability 0, space 0, times 0 [ 189.524638][ T7468] CPU: 1 UID: 0 PID: 7468 Comm: syz.0.425 Not tainted syzkaller #0 PREEMPT(full) [ 189.524668][ T7468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 189.524684][ T7468] Call Trace: [ 189.524692][ T7468] [ 189.524701][ T7468] dump_stack_lvl+0x189/0x250 [ 189.524730][ T7468] ? __pfx____ratelimit+0x10/0x10 [ 189.524760][ T7468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.524781][ T7468] ? __pfx__printk+0x10/0x10 [ 189.524805][ T7468] ? lock_acquire+0x175/0x360 [ 189.524829][ T7468] ? __pfx___might_resched+0x10/0x10 [ 189.524857][ T7468] should_fail_ex+0x414/0x560 [ 189.524888][ T7468] should_failslab+0xa8/0x100 [ 189.524913][ T7468] __kmalloc_cache_node_noprof+0x74/0x6f0 [ 189.524940][ T7468] ? __get_vm_area_node+0x13f/0x300 [ 189.524963][ T7468] __get_vm_area_node+0x13f/0x300 [ 189.524979][ T7468] ? vmci_qp_broker_unmap+0x641/0xb50 [ 189.524999][ T7468] vmap+0x162/0x310 [ 189.525014][ T7468] ? vmci_qp_broker_unmap+0x641/0xb50 [ 189.525040][ T7468] vmci_qp_broker_unmap+0x641/0xb50 [ 189.525067][ T7468] ? __pfx_vmci_qp_broker_unmap+0x10/0x10 [ 189.525095][ T7468] vmci_host_unlocked_ioctl+0x1986/0x2650 [ 189.525117][ T7468] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 189.525156][ T7468] ? kasan_quarantine_put+0xdd/0x220 [ 189.525174][ T7468] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.525202][ T7468] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 189.525231][ T7468] ? do_vfs_ioctl+0xbe8/0x1430 [ 189.525245][ T7468] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 189.525270][ T7468] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 189.525323][ T7468] ? __fget_files+0x2a/0x420 [ 189.525348][ T7468] ? __fget_files+0x3a0/0x420 [ 189.525366][ T7468] ? __fget_files+0x2a/0x420 [ 189.525388][ T7468] ? bpf_lsm_file_ioctl+0x9/0x20 [ 189.525411][ T7468] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 189.525428][ T7468] __se_sys_ioctl+0xfc/0x170 [ 189.525445][ T7468] do_syscall_64+0xfa/0xfa0 [ 189.525462][ T7468] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.525479][ T7468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.525495][ T7468] ? clear_bhb_loop+0x60/0xb0 [ 189.525515][ T7468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.525530][ T7468] RIP: 0033:0x7efca198eec9 [ 189.525546][ T7468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.525559][ T7468] RSP: 002b:00007efca27e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.525579][ T7468] RAX: ffffffffffffffda RBX: 00007efca1be6090 RCX: 00007efca198eec9 [ 189.525592][ T7468] RDX: 0000200000000540 RSI: 00000000000007a4 RDI: 0000000000000003 [ 189.525604][ T7468] RBP: 00007efca27e2090 R08: 0000000000000000 R09: 0000000000000000 [ 189.525616][ T7468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.525626][ T7468] R13: 00007efca1be6128 R14: 00007efca1be6090 R15: 00007efca1d0fa28 [ 189.525654][ T7468] [ 189.525691][ T7468] vmap failed [ 189.696962][ T7454] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 189.700659][ T7468] Failed to save queue headers for queue pair (handle=0x1:0x2,result=-3) [ 189.725824][ T7454] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 190.257460][ T43] Error reading MAC address [ 190.267820][ T5863] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 190.279361][ T7454] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 190.287901][ T7454] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 190.295743][ T5863] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 190.304611][ T5863] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 190.320970][ T5863] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 190.338264][ T5863] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 190.356177][ T5863] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 190.372722][ T5863] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 190.390496][ T5863] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 190.398629][ T5863] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 190.407656][ T5863] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 190.438954][ T5863] hid-generic 0008:0006:0007.0006: hidraw0: HID v0.0b Device [syz1] on syz1 [ 190.721343][ T43] sr9700 5-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 191.108587][ T43] usb 5-1: USB disconnect, device number 23 [ 191.504031][ T7497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.740877][ T7501] netlink: 40 bytes leftover after parsing attributes in process `syz.0.435'. [ 191.752728][ T7501] netlink: 40 bytes leftover after parsing attributes in process `syz.0.435'. [ 191.782731][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 191.998577][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 192.013946][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.040724][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 192.057854][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.072199][ T10] usb 3-1: Product: syz [ 192.077595][ T10] usb 3-1: Manufacturer: syz [ 192.082861][ T10] usb 3-1: SerialNumber: syz [ 192.105018][ T10] hub 3-1:1.0: bad descriptor, ignoring hub [ 192.113154][ T10] hub 3-1:1.0: probe with driver hub failed with error -5 [ 192.415292][ T5911] dvb-usb: could not initialize remote control. [ 192.432702][ T5911] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 192.444310][ T10] usb 3-1: USB disconnect, device number 13 [ 192.494182][ T5911] usb 4-1: USB disconnect, device number 18 [ 192.557636][ T7511] rtc_cmos 00:00: Alarms can be up to one day in the future [ 192.563226][ T5911] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 192.637552][ T7511] fuse: Unknown parameter 'd°°¼€×ˆn' [ 192.786577][ T7511] netlink: 'syz.1.438': attribute type 29 has an invalid length. [ 192.833582][ T7511] netlink: 'syz.1.438': attribute type 29 has an invalid length. [ 192.951811][ T7518] xt_CT: You must specify a L4 protocol and not use inversions on it [ 193.035362][ T7521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.441'. [ 193.046935][ T7521] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 193.067012][ T7521] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.076200][ T7521] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.435303][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'. [ 193.655087][ T7531] syzkaller0: entered promiscuous mode [ 193.661248][ T7531] syzkaller0: entered allmulticast mode [ 194.595450][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.602081][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.640882][ T7543] netlink: 16 bytes leftover after parsing attributes in process `syz.2.446'. [ 194.971383][ T7550] vlan2: entered promiscuous mode [ 195.265511][ T43] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 195.432684][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 195.447343][ T43] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 195.491418][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.614058][ T43] usb 1-1: config 0 descriptor?? [ 195.862724][ T43] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 195.880528][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 196.040233][ T43] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 196.062605][ T43] usb 1-1: media controller created [ 196.220650][ T7571] netlink: 212 bytes leftover after parsing attributes in process `syz.2.454'. [ 196.383521][ T1071] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 196.448034][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.544906][ T1071] usb 4-1: Using ep0 maxpacket: 32 [ 196.774592][ T1071] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.798230][ T1071] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 196.830482][ T1071] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.850431][ T1071] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 196.875837][ T43] DVB: Unable to find symbol dib7000p_attach() [ 196.882243][ T43] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 196.887263][ T1071] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.913021][ T1071] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 196.972799][ T43] rc_core: IR keymap rc-dib0700-rc5 not found [ 197.021957][ T43] Registered IR keymap rc-empty [ 197.033441][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 197.033461][ T30] audit: type=1326 audit(1760481659.188:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.2.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 197.039833][ T43] dvb-usb: could not initialize remote control. [ 197.062321][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.065647][ T1071] usb 4-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 197.092555][ T1071] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.102734][ T30] audit: type=1326 audit(1760481659.188:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.2.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 197.102922][ T43] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 197.125452][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.131641][ T7582] FAULT_INJECTION: forcing a failure. [ 197.131641][ T7582] name failslab, interval 1, probability 0, space 0, times 0 [ 197.162584][ T1071] usb 4-1: Product: syz [ 197.176719][ T1071] usb 4-1: Manufacturer: syz [ 197.202329][ T1071] usb 4-1: SerialNumber: syz [ 197.213384][ T7582] CPU: 1 UID: 0 PID: 7582 Comm: syz.2.459 Not tainted syzkaller #0 PREEMPT(full) [ 197.213415][ T7582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 197.213428][ T7582] Call Trace: [ 197.213436][ T7582] [ 197.213445][ T7582] dump_stack_lvl+0x189/0x250 [ 197.213475][ T7582] ? __pfx____ratelimit+0x10/0x10 [ 197.213508][ T7582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.213530][ T7582] ? __pfx__printk+0x10/0x10 [ 197.213559][ T7582] ? __pfx___might_resched+0x10/0x10 [ 197.213597][ T7582] ? fs_reclaim_acquire+0x7d/0x100 [ 197.213628][ T7582] should_fail_ex+0x414/0x560 [ 197.213666][ T7582] should_failslab+0xa8/0x100 [ 197.213695][ T7582] __kmalloc_cache_noprof+0x6f/0x6f0 [ 197.213720][ T7582] ? audit_log_d_path+0xb8/0x1a0 [ 197.213748][ T7582] audit_log_d_path+0xb8/0x1a0 [ 197.213773][ T7582] audit_log_d_path_exe+0x42/0x70 [ 197.213796][ T7582] audit_log_task+0x2b3/0x3c0 [ 197.213815][ T7582] ? get_pid_task+0x20/0x1f0 [ 197.213843][ T7582] ? __pfx_audit_log_task+0x10/0x10 [ 197.213866][ T7582] ? __pfx___cant_migrate+0x10/0x10 [ 197.213908][ T7582] audit_seccomp+0x86/0x190 [ 197.213932][ T7582] __seccomp_filter+0xce4/0x1e10 [ 197.213973][ T7582] ? ksys_write+0x1cb/0x250 [ 197.214012][ T7582] ? __pfx___seccomp_filter+0x10/0x10 [ 197.214044][ T7582] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 197.214068][ T7582] ? __pfx_vfs_write+0x10/0x10 [ 197.214094][ T7582] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 197.214122][ T7582] ? __fget_files+0x3a0/0x420 [ 197.214160][ T7582] ? ksys_write+0x22a/0x250 [ 197.214197][ T7582] ? __secure_computing+0xe2/0x2a0 [ 197.214232][ T7582] syscall_trace_enter+0xaa/0x160 [ 197.214263][ T7582] do_syscall_64+0xd3/0xfa0 [ 197.214283][ T7582] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.214303][ T7582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.214324][ T7582] ? clear_bhb_loop+0x60/0xb0 [ 197.214350][ T7582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.214370][ T7582] RIP: 0033:0x7f158af8eec9 [ 197.214390][ T7582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.214408][ T7582] RSP: 002b:00007f158beea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 197.214432][ T7582] RAX: ffffffffffffffda RBX: 00007f158b1e5fa0 RCX: 00007f158af8eec9 [ 197.214449][ T7582] RDX: 0000000000000001 RSI: 0000200000003c00 RDI: 0000000000000003 [ 197.214463][ T7582] RBP: 00007f158beea090 R08: 0000000000000000 R09: 0000000000000000 [ 197.214478][ T7582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.214490][ T7582] R13: 00007f158b1e6038 R14: 00007f158b1e5fa0 R15: 00007f158b30fa28 [ 197.214526][ T7582] [ 197.490640][ T30] audit: type=1326 audit(1760481659.268:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.2.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 197.513313][ T30] audit: type=1326 audit(1760481659.268:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.2.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 197.535603][ T30] audit: type=1326 audit(1760481659.268:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.2.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 197.558325][ T30] audit: type=1326 audit(1760481659.268:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.2.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 197.580978][ T30] audit: type=1326 audit(1760481659.268:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.2.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 197.584366][ T1071] usb 4-1: config 0 descriptor?? [ 197.603357][ T30] audit: type=1326 audit(1760481659.268:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.2.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 197.603414][ T30] audit: type=1326 audit(1760481659.268:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.2.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 197.603463][ T30] audit: type=1326 audit(1760481659.268:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.2.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f158af8eec9 code=0x7ffc0000 [ 197.678232][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.924489][ T1071] cdc_acm 4-1:0.0: Zero length descriptor references [ 197.934354][ T1071] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 198.185330][ T5863] usb 4-1: USB disconnect, device number 19 [ 198.249727][ T5911] usb 1-1: USB disconnect, device number 15 [ 198.318337][ T5911] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 198.662541][ T5911] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 198.846199][ T5911] usb 1-1: config 0 has no interfaces? [ 198.864259][ T5911] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 198.884159][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 198.908018][ T5911] usb 1-1: Product: syz [ 198.912842][ T5911] usb 1-1: Manufacturer: syz [ 198.928590][ T5911] usb 1-1: config 0 descriptor?? [ 199.155322][ T7612] vlan2: entered promiscuous mode [ 199.275920][ T7614] netlink: 52 bytes leftover after parsing attributes in process `syz.2.470'. [ 199.329907][ T7614] FAULT_INJECTION: forcing a failure. [ 199.329907][ T7614] name failslab, interval 1, probability 0, space 0, times 0 [ 199.362705][ T7614] CPU: 0 UID: 0 PID: 7614 Comm: syz.2.470 Not tainted syzkaller #0 PREEMPT(full) [ 199.362740][ T7614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 199.362752][ T7614] Call Trace: [ 199.362760][ T7614] [ 199.362769][ T7614] dump_stack_lvl+0x189/0x250 [ 199.362797][ T7614] ? __pfx____ratelimit+0x10/0x10 [ 199.362827][ T7614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.362847][ T7614] ? __pfx__printk+0x10/0x10 [ 199.362863][ T7614] ? netlink_sendmsg+0x805/0xb30 [ 199.362892][ T7614] ? __x64_sys_sendmsg+0x19b/0x260 [ 199.362911][ T7614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.362942][ T7614] should_fail_ex+0x414/0x560 [ 199.362980][ T7614] should_failslab+0xa8/0x100 [ 199.363019][ T7614] kmem_cache_alloc_noprof+0x74/0x6e0 [ 199.363042][ T7614] ? skb_clone+0x212/0x3a0 [ 199.363069][ T7614] skb_clone+0x212/0x3a0 [ 199.363095][ T7614] __netlink_deliver_tap+0x404/0x850 [ 199.363137][ T7614] ? netlink_deliver_tap+0x2e/0x1b0 [ 199.363167][ T7614] netlink_deliver_tap+0x19c/0x1b0 [ 199.363196][ T7614] netlink_sendskb+0x68/0x140 [ 199.363225][ T7614] netlink_unicast+0x397/0x9e0 [ 199.363248][ T7614] ? __asan_memcpy+0x40/0x70 [ 199.363278][ T7614] ? __pfx_netlink_unicast+0x10/0x10 [ 199.363316][ T7614] netlink_rcv_skb+0x28c/0x470 [ 199.363342][ T7614] ? __lock_acquire+0xab9/0xd20 [ 199.363369][ T7614] ? __pfx_genl_rcv_msg+0x10/0x10 [ 199.363393][ T7614] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 199.363445][ T7614] ? down_read+0x1ad/0x2e0 [ 199.363473][ T7614] genl_rcv+0x28/0x40 [ 199.363493][ T7614] netlink_unicast+0x82f/0x9e0 [ 199.363531][ T7614] ? __pfx_netlink_unicast+0x10/0x10 [ 199.363559][ T7614] ? netlink_sendmsg+0x642/0xb30 [ 199.363585][ T7614] ? skb_put+0x11b/0x210 [ 199.363618][ T7614] netlink_sendmsg+0x805/0xb30 [ 199.363659][ T7614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.363691][ T7614] ? aa_sock_msg_perm+0xf1/0x1d0 [ 199.363717][ T7614] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 199.363742][ T7614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.363772][ T7614] __sock_sendmsg+0x21c/0x270 [ 199.363801][ T7614] ____sys_sendmsg+0x505/0x830 [ 199.363839][ T7614] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.363882][ T7614] ? import_iovec+0x74/0xa0 [ 199.363913][ T7614] ___sys_sendmsg+0x21f/0x2a0 [ 199.363938][ T7614] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.364010][ T7614] ? __fget_files+0x2a/0x420 [ 199.364035][ T7614] ? __fget_files+0x3a0/0x420 [ 199.364072][ T7614] __x64_sys_sendmsg+0x19b/0x260 [ 199.364096][ T7614] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.364137][ T7614] ? do_syscall_64+0xbe/0xfa0 [ 199.364163][ T7614] do_syscall_64+0xfa/0xfa0 [ 199.364182][ T7614] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.364202][ T7614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.364223][ T7614] ? clear_bhb_loop+0x60/0xb0 [ 199.364247][ T7614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.364265][ T7614] RIP: 0033:0x7f158af8eec9 [ 199.364284][ T7614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.364302][ T7614] RSP: 002b:00007f158beea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.364325][ T7614] RAX: ffffffffffffffda RBX: 00007f158b1e5fa0 RCX: 00007f158af8eec9 [ 199.364340][ T7614] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 199.364353][ T7614] RBP: 00007f158beea090 R08: 0000000000000000 R09: 0000000000000000 [ 199.364367][ T7614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.364379][ T7614] R13: 00007f158b1e6038 R14: 00007f158b1e5fa0 R15: 00007f158b30fa28 [ 199.364415][ T7614] [ 199.728041][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.805350][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'. [ 200.242882][ T7627] erspan0: entered promiscuous mode [ 200.248414][ T7627] vlan2: entered promiscuous mode [ 200.352625][ T43] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 200.525778][ T1071] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 200.535262][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.546521][ T43] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 200.556103][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.573667][ T43] usb 5-1: config 0 descriptor?? [ 200.586191][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 200.686443][ T5889] usb 1-1: USB disconnect, device number 16 [ 200.692775][ T1071] usb 3-1: Using ep0 maxpacket: 32 [ 200.718248][ T1071] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 200.740373][ T1071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.797401][ T1071] usb 3-1: config 0 descriptor?? [ 200.962834][ T5889] hid_parser_main: 43 callbacks suppressed [ 200.962860][ T5889] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 200.977569][ T5889] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 200.986167][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 200.988738][ T5889] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.003972][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 201.014622][ T5889] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.021572][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 201.029212][ T1071] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 201.036431][ T43] pwc: recv_control_msg error -32 req 04 val 1000 [ 201.043152][ T5889] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.043187][ T5889] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.043214][ T5889] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.043239][ T5889] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.043264][ T5889] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.043290][ T5889] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.045888][ T5889] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 201.100813][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 201.124632][ T1071] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 201.192546][ T1071] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 201.201445][ T1071] usb 3-1: media controller created [ 201.221177][ T43] pwc: recv_control_msg error -32 req 04 val 1300 [ 201.284201][ T1071] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.293018][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 201.314396][ T10] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 201.325894][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.347101][ T10] usb 4-1: Product: syz [ 201.355026][ T10] usb 4-1: Manufacturer: syz [ 201.369105][ T10] usb 4-1: SerialNumber: syz [ 201.389520][ T10] usb 4-1: config 0 descriptor?? [ 201.601529][ T7634] ------------[ cut here ]------------ [ 201.608188][ T7634] usb 3-1: BOGUS control dir, pipe 80000e80 doesn't match bRequestType c0 [ 201.634314][ T7643] fido_id[7643]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 201.660194][ T7634] WARNING: CPU: 0 PID: 7634 at drivers/usb/core/urb.c:414 usb_submit_urb+0x114d/0x18b0 [ 201.670092][ T7634] Modules linked in: [ 201.674831][ T7634] CPU: 0 UID: 0 PID: 7634 Comm: syz.3.478 Not tainted syzkaller #0 PREEMPT(full) [ 201.684267][ T7634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 201.695253][ T7634] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 201.700967][ T7634] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 76 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 74 43 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 201.722176][ T7634] RSP: 0018:ffffc9000404f820 EFLAGS: 00010246 [ 201.729637][ T7634] RAX: ac1f63d1e80ab100 RBX: ffff888027e63400 RCX: 0000000000080000 [ 201.738622][ T7634] RDX: ffffc9000c3cc000 RSI: 00000000000035c9 RDI: 00000000000035ca [ 201.747603][ T7634] RBP: 1ffff11005059178 R08: 0000000000000003 R09: 0000000000000004 [ 201.756080][ T7634] R10: dffffc0000000000 R11: fffffbfff1bfa650 R12: ffff88803309d100 [ 201.764979][ T7634] R13: ffff8880282c8bc0 R14: 0000000080000e80 R15: ffff88802e1e5c00 [ 201.774052][ T7634] FS: 00007fa272ff66c0(0000) GS:ffff888125d0c000(0000) knlGS:0000000000000000 [ 201.784212][ T7634] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.791684][ T7634] CR2: 0000200000170030 CR3: 000000007c864000 CR4: 00000000003526f0 [ 201.800265][ T7634] Call Trace: [ 201.804028][ T7634] [ 201.807248][ T7634] usb_start_wait_urb+0x114/0x4c0 [ 201.812982][ T7634] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 201.818889][ T7634] usb_control_msg+0x232/0x3e0 [ 201.825584][ T7634] dib0700_i2c_xfer+0xba7/0xf70 [ 201.830970][ T7634] __i2c_transfer+0x874/0x2170 [ 201.837135][ T7634] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.842624][ T7634] ? __pfx___i2c_transfer+0x10/0x10 [ 201.848097][ T7634] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 201.854119][ T7634] ? i2c_transfer+0x120/0x3a0 [ 201.858977][ T7634] i2c_transfer+0x25b/0x3a0 [ 201.863773][ T7634] ? __pfx_i2c_transfer+0x10/0x10 [ 201.868959][ T7634] ? _copy_from_user+0x94/0xb0 [ 201.874091][ T7634] i2cdev_ioctl_rdwr+0x460/0x740 [ 201.879203][ T7634] i2cdev_ioctl+0x64b/0x7f0 [ 201.883859][ T7634] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 201.890284][ T7634] ? __fget_files+0x3a0/0x420 [ 201.895177][ T7634] ? __fget_files+0x2a/0x420 [ 201.899954][ T7634] ? bpf_lsm_file_ioctl+0x9/0x20 [ 201.905232][ T7634] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 201.910568][ T7634] __se_sys_ioctl+0xfc/0x170 [ 201.915424][ T7634] do_syscall_64+0xfa/0xfa0 [ 201.920713][ T7634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.928737][ T7634] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 201.936561][ T7634] ? clear_bhb_loop+0x60/0xb0 [ 201.941530][ T7634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.947554][ T7634] RIP: 0033:0x7fa274d8eec9 [ 201.952158][ T7634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.972608][ T7634] RSP: 002b:00007fa272ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.981373][ T7634] RAX: ffffffffffffffda RBX: 00007fa274fe5fa0 RCX: 00007fa274d8eec9 [ 201.990029][ T7634] RDX: 0000200000000000 RSI: 0000000000000707 RDI: 0000000000000005 [ 201.998585][ T7634] RBP: 00007fa274e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 202.007133][ T7634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.015837][ T7634] R13: 00007fa274fe6038 R14: 00007fa274fe5fa0 R15: 00007fa27510fa28 [ 202.024393][ T7634] [ 202.028674][ T7634] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 202.036280][ T7634] CPU: 0 UID: 0 PID: 7634 Comm: syz.3.478 Not tainted syzkaller #0 PREEMPT(full) [ 202.045603][ T7634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 202.055785][ T7634] Call Trace: [ 202.059147][ T7634] [ 202.062274][ T7634] dump_stack_lvl+0x99/0x250 [ 202.067281][ T7634] ? __asan_memcpy+0x40/0x70 [ 202.072004][ T7634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.077590][ T7634] ? __pfx__printk+0x10/0x10 [ 202.082374][ T7634] vpanic+0x237/0x6d0 [ 202.086469][ T7634] ? __pfx_vpanic+0x10/0x10 [ 202.091242][ T7634] panic+0xb9/0xc0 [ 202.095091][ T7634] ? __pfx_panic+0x10/0x10 [ 202.099656][ T7634] __warn+0x31b/0x4b0 [ 202.104036][ T7634] ? usb_submit_urb+0x114d/0x18b0 [ 202.109124][ T7634] ? usb_submit_urb+0x114d/0x18b0 [ 202.114274][ T7634] report_bug+0x2be/0x4f0 [ 202.118801][ T7634] ? usb_submit_urb+0x114d/0x18b0 [ 202.124029][ T7634] ? usb_submit_urb+0x114d/0x18b0 [ 202.129081][ T7634] ? usb_submit_urb+0x114f/0x18b0 [ 202.134265][ T7634] handle_bug+0x84/0x160 [ 202.138703][ T7634] exc_invalid_op+0x1a/0x50 [ 202.143341][ T7634] asm_exc_invalid_op+0x1a/0x20 [ 202.148409][ T7634] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 202.154294][ T7634] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 76 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 74 43 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 202.174016][ T7634] RSP: 0018:ffffc9000404f820 EFLAGS: 00010246 [ 202.180777][ T7634] RAX: ac1f63d1e80ab100 RBX: ffff888027e63400 RCX: 0000000000080000 [ 202.189122][ T7634] RDX: ffffc9000c3cc000 RSI: 00000000000035c9 RDI: 00000000000035ca [ 202.197469][ T7634] RBP: 1ffff11005059178 R08: 0000000000000003 R09: 0000000000000004 [ 202.206381][ T7634] R10: dffffc0000000000 R11: fffffbfff1bfa650 R12: ffff88803309d100 [ 202.214805][ T7634] R13: ffff8880282c8bc0 R14: 0000000080000e80 R15: ffff88802e1e5c00 [ 202.223114][ T7634] usb_start_wait_urb+0x114/0x4c0 [ 202.228455][ T7634] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 202.234465][ T7634] usb_control_msg+0x232/0x3e0 [ 202.239587][ T7634] dib0700_i2c_xfer+0xba7/0xf70 [ 202.244823][ T7634] __i2c_transfer+0x874/0x2170 [ 202.249881][ T7634] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.255302][ T7634] ? __pfx___i2c_transfer+0x10/0x10 [ 202.260725][ T7634] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 202.266197][ T7634] ? i2c_transfer+0x120/0x3a0 [ 202.270892][ T7634] i2c_transfer+0x25b/0x3a0 [ 202.275530][ T7634] ? __pfx_i2c_transfer+0x10/0x10 [ 202.280765][ T7634] ? _copy_from_user+0x94/0xb0 [ 202.285601][ T7634] i2cdev_ioctl_rdwr+0x460/0x740 [ 202.291013][ T7634] i2cdev_ioctl+0x64b/0x7f0 [ 202.295563][ T7634] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 202.300904][ T7634] ? __fget_files+0x3a0/0x420 [ 202.305959][ T7634] ? __fget_files+0x2a/0x420 [ 202.310879][ T7634] ? bpf_lsm_file_ioctl+0x9/0x20 [ 202.315985][ T7634] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 202.321101][ T7634] __se_sys_ioctl+0xfc/0x170 [ 202.325750][ T7634] do_syscall_64+0xfa/0xfa0 [ 202.330492][ T7634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.336686][ T7634] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 202.342970][ T7634] ? clear_bhb_loop+0x60/0xb0 [ 202.347940][ T7634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.353949][ T7634] RIP: 0033:0x7fa274d8eec9 [ 202.358928][ T7634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.379017][ T7634] RSP: 002b:00007fa272ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.387819][ T7634] RAX: ffffffffffffffda RBX: 00007fa274fe5fa0 RCX: 00007fa274d8eec9 [ 202.395820][ T7634] RDX: 0000200000000000 RSI: 0000000000000707 RDI: 0000000000000005 [ 202.404159][ T7634] RBP: 00007fa274e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 202.412165][ T7634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.420476][ T7634] R13: 00007fa274fe6038 R14: 00007fa274fe5fa0 R15: 00007fa27510fa28 [ 202.429011][ T7634] [ 202.432390][ T7634] Kernel Offset: disabled [ 202.436745][ T7634] Rebooting in 86400 seconds..